specatlas 0.1.25 → 0.1.28

package/dist/bin.js

@@ -6,13 +6,14 @@ import {
   localCompact,
   localDate,
   localMonth,
+  localOffset,
   localStamp,
   parseApprovals,
   parseChangeMeta,
   sha256,
   shortHash,
   signApproval
-} from "./chunk-HYN75DTZ.js";
+} from "./chunk-L2BWIT44.js";
 import {
   __commonJS,
   __toESM,
@@ -1585,7 +1586,7 @@ var require_core = __commonJS({
 });
 
 // src/cli.ts
-import path41 from "path";
+import path46 from "path";
 
 // ../core/dist/index.js
 import path from "path";
@@ -1598,23 +1599,25 @@ import path2 from "path";
 import path3 from "path";
 import { parse as parseYaml4 } from "yaml";
 import { z as z3 } from "zod";
+import path5 from "path";
 import path4 from "path";
 import { stringify as stringifyYaml3 } from "yaml";
-import path5 from "path";
+import { stringify as stringifyYaml4 } from "yaml";
+import path6 from "path";
 import { parse as parseYaml5 } from "yaml";
 import { execFile } from "child_process";
-import path6 from "path";
 import path7 from "path";
-import { randomBytes } from "crypto";
-import path10 from "path";
 import path8 from "path";
-import { parse as parseYaml6, stringify as stringifyYaml4 } from "yaml";
-import { z as z4 } from "zod";
+import { randomBytes } from "crypto";
+import path11 from "path";
 import path9 from "path";
+import { parse as parseYaml6, stringify as stringifyYaml5 } from "yaml";
+import { z as z4 } from "zod";
+import path10 from "path";
 import { parse as parseYaml7 } from "yaml";
 import { z as z5 } from "zod";
-import path11 from "path";
 import path12 from "path";
+import path13 from "path";
 
 // ../../node_modules/.pnpm/highlight.js@11.12.0/node_modules/highlight.js/es/core.js
 var import_core = __toESM(require_core(), 1);
@@ -9019,14 +9022,18 @@ function renderMarkdown(markdown2, opts = {}) {
 }
 
 // ../core/dist/index.js
-import path13 from "path";
 import path14 from "path";
 import path15 from "path";
+import path16 from "path";
 import { promises as fs } from "fs";
 import { cp, rename, rm } from "fs/promises";
-import path16 from "path";
 import path17 from "path";
+import { promises as fs2 } from "fs";
 import path18 from "path";
+import { parse as parseYaml8, stringify as stringifyYaml6 } from "yaml";
+import path19 from "path";
+import path20 from "path";
+import path21 from "path";
 var CORE_VERSION = "0.0.1";
 var REQ_ID_RE = /^REQ-[A-Z0-9]+(?:-[A-Z0-9]+)*-\d{3}$/;
 var SCENARIO_ID_RE = /^REQ-[A-Z0-9]+(?:-[A-Z0-9]+)*-\d{3}-S\d+$/;
@@ -9742,14 +9749,14 @@ function wordBoundary(text, term) {
   const re = new RegExp(`(?<![\\p{L}\\p{N}])${escaped}(?![\\p{L}\\p{N}])`, "iu");
   return re.test(text);
 }
-function lintText(text, code, terms, label, path192, line) {
+function lintText(text, code, terms, label, path222, line) {
   const out = [];
   const lower = text.toLowerCase();
   for (const term of terms) {
     if (wordBoundary(lower, term)) {
       out.push(
         diag(code, "error", `${label}: "${term}"`, {
-          path: path192,
+          path: path222,
           line,
           suggestion: "La especificaci\xF3n es funcional y de negocio: describe comportamiento, no tecnolog\xEDa ni adjetivos vagos"
         })
@@ -9758,7 +9765,7 @@ function lintText(text, code, terms, label, path192, line) {
   }
   return out;
 }
-function lintRequirement(req, path192, opts = {}) {
+function lintRequirement(req, path222, opts = {}) {
   const out = [];
   const vague = opts.language === "en" ? VAGUE_EN : VAGUE_ES;
   const tech = opts.language === "en" ? TECH_EN : TECH_ES;
@@ -9769,32 +9776,32 @@ function lintRequirement(req, path192, opts = {}) {
     ...req.scenarios.flatMap((s) => [...s.when.map((w) => ({ text: w, line: s.line })), ...s.then.map((t) => ({ text: t, line: s.line }))])
   ];
   for (const part of parts) {
-    out.push(...lintText(part.text, "LINT-BIZ-002", vague, "Palabra vaga en la especificaci\xF3n", path192, part.line));
+    out.push(...lintText(part.text, "LINT-BIZ-002", vague, "Palabra vaga en la especificaci\xF3n", path222, part.line));
     if (opts.businessOnly !== false) {
-      out.push(...lintText(part.text, "LINT-BIZ-001", tech, "Jerga t\xE9cnica en la especificaci\xF3n de negocio", path192, part.line));
+      out.push(...lintText(part.text, "LINT-BIZ-001", tech, "Jerga t\xE9cnica en la especificaci\xF3n de negocio", path222, part.line));
     }
   }
   if (req.scenarios.length === 0) {
-    out.push(diag("TRACE-001", "error", `El requisito ${req.id} no tiene ning\xFAn escenario`, { path: path192, line: req.line, suggestion: "A\xF1ade al menos un escenario CUANDO/ENTONCES" }));
+    out.push(diag("TRACE-001", "error", `El requisito ${req.id} no tiene ning\xFAn escenario`, { path: path222, line: req.line, suggestion: "A\xF1ade al menos un escenario CUANDO/ENTONCES" }));
   }
   return out;
 }
-function lintDelta(delta, livingRequirements, path192, opts = {}) {
+function lintDelta(delta, livingRequirements, path222, opts = {}) {
   const out = [...delta.diagnostics];
   for (const req of [...delta.added, ...delta.modified]) {
-    out.push(...lintRequirement(req, path192, opts));
+    out.push(...lintRequirement(req, path222, opts));
   }
   for (const req of delta.modified) {
     const living = livingRequirements.get(req.id);
     if (!living) {
-      out.push(diag("TRACE-007", "error", `MODIFIED ${req.id} no existe en la spec viva; usa ADDED`, { path: path192, line: req.line }));
+      out.push(diag("TRACE-007", "error", `MODIFIED ${req.id} no existe en la spec viva; usa ADDED`, { path: path222, line: req.line }));
       continue;
     }
     for (const existing of living.scenarios) {
       if (!req.scenarios.some((s) => s.id === existing.id)) {
         out.push(
           diag("TRACE-007", "error", `MODIFIED ${req.id} pierde el escenario ${existing.id}: copia el bloque completo`, {
-            path: path192,
+            path: path222,
             line: req.line,
             suggestion: "Copia el bloque completo de la spec viva y ed\xEDtalo; para quitarlo, decl\xE1ralo en REMOVED"
           })
@@ -9805,15 +9812,15 @@ function lintDelta(delta, livingRequirements, path192, opts = {}) {
   for (const req of delta.removed) {
     const living = livingRequirements.get(req.id);
     if (!living) {
-      out.push(diag("TRACE-007", "error", `REMOVED ${req.id} no existe en la spec viva`, { path: path192, line: req.line }));
+      out.push(diag("TRACE-007", "error", `REMOVED ${req.id} no existe en la spec viva`, { path: path222, line: req.line }));
     }
   }
   for (const rename2 of delta.renamed) {
     if (rename2.from.id !== rename2.to.id) {
-      out.push(diag("LINT-DLT-003", "error", `RENAMED cambia el id (${rename2.from.id} \u2192 ${rename2.to.id}); los ids son inmutables`, { path: path192, line: rename2.line }));
+      out.push(diag("LINT-DLT-003", "error", `RENAMED cambia el id (${rename2.from.id} \u2192 ${rename2.to.id}); los ids son inmutables`, { path: path222, line: rename2.line }));
     }
     if (!livingRequirements.has(rename2.from.id)) {
-      out.push(diag("TRACE-007", "error", `RENAMED ${rename2.from.id} no existe en la spec viva`, { path: path192, line: rename2.line }));
+      out.push(diag("TRACE-007", "error", `RENAMED ${rename2.from.id} no existe en la spec viva`, { path: path222, line: rename2.line }));
     }
   }
   return out;
@@ -9837,7 +9844,7 @@ var MERMAID_KEYWORDS = [
   "architecture-beta"
 ];
 var MERMAID_BLOCKS = /^\s*(alt|loop|opt|par|rect|critical|break|subgraph)\b/;
-function lintPlan(planText, path192) {
+function lintPlan(planText, path222) {
   const out = [];
   const blocks = [...planText.matchAll(/```mermaid\r?\n([\s\S]*?)```/g)];
   for (const [index, block] of blocks.entries()) {
@@ -9847,7 +9854,7 @@ function lintPlan(planText, path192) {
     if (!MERMAID_KEYWORDS.some((keyword) => first.startsWith(keyword))) {
       out.push(
         diag("LINT-PLN-002", "error", `Diagrama mermaid ${index + 1}: la primera l\xEDnea debe declarar el tipo (${MERMAID_KEYWORDS.slice(0, 5).join(", ")}\u2026) y empieza por "${first.slice(0, 30)}"`, {
-          path: path192,
+          path: path222,
           suggestion: "Corrige el tipo del diagrama o elimina el bloque"
         })
       );
@@ -9861,7 +9868,7 @@ function lintPlan(planText, path192) {
     if (open !== 0) {
       out.push(
         diag("LINT-PLN-002", "error", `Diagrama mermaid ${index + 1}: faltan ${Math.abs(open)} \`end\` (bloques alt/loop/subgraph sin cerrar)`, {
-          path: path192,
+          path: path222,
           suggestion: "Cierra cada bloque alt/loop/opt/par/rect/subgraph con `end`"
         })
       );
@@ -9873,7 +9880,7 @@ function lintPlan(planText, path192) {
         if (message.includes(";")) {
           out.push(
             diag("LINT-PLN-003", "error", `Diagrama mermaid ${index + 1}: el mensaje "${message.trim().slice(0, 40)}\u2026" usa \`;\` y mermaid lo interpreta como fin de sentencia`, {
-              path: path192,
+              path: path222,
               suggestion: "Sustituye `;` por `\xB7` o `,` en los mensajes de sequenceDiagram"
             })
           );
@@ -10028,6 +10035,16 @@ function checkTrace(input) {
       findings.push(diag("TRACE-006", "warning", `Evidencia hu\xE9rfana: ${ev.scenario} no existe`, { path: change.verify?.path, line: ev.line }));
     }
   }
+  for (const cover of change.fixCovers ?? []) {
+    if (!livingReqs.has(cover)) {
+      findings.push(
+        diag("TRACE-011", "warning", `El fix ${change.slug} declara ${cover}, que no existe en las specs vivas`, {
+          path: change.fix?.path,
+          suggestion: "Corrige el identificador o qu\xEDtalo: la declaraci\xF3n es opcional"
+        })
+      );
+    }
+  }
   const summary = countBySeverity(findings);
   return { graph: buildTraceGraph(input), findings, summary };
 }
@@ -10391,34 +10408,110 @@ function detectionToYaml(result, generatedAt) {
   }
   return lines.join("\n") + "\n";
 }
+var LIVING_FIXES_DIR = path4.join(".sdd", "fixes");
+var COMMENT_RE = /<!--[\s\S]*?-->/g;
+function parseFixCovers(content) {
+  const clean = content.replace(COMMENT_RE, "");
+  const covers = [];
+  for (const line of clean.replace(/\r\n?/g, "\n").split("\n")) {
+    const match = /^\s*-?\s*Cubre:\s*(.+?)\s*$/.exec(line);
+    if (!match) continue;
+    for (const raw of (match[1] ?? "").split(",")) {
+      const id = raw.trim().toUpperCase();
+      if (/^REQ-[A-Z0-9-]+$/.test(id) && !covers.includes(id)) covers.push(id);
+    }
+  }
+  return covers;
+}
+function coversOf(value) {
+  if (Array.isArray(value)) {
+    return value.map((v) => String(v).trim().toUpperCase()).filter((v) => /^REQ-[A-Z0-9-]+$/.test(v));
+  }
+  if (typeof value === "string") {
+    return value.split(",").map((v) => v.trim().toUpperCase()).filter((v) => /^REQ-[A-Z0-9-]+$/.test(v));
+  }
+  return [];
+}
+function parseLivingFix(content, file) {
+  const fm = parseFrontmatter(content, file);
+  const data = fm.data;
+  const base = path4.basename(file).replace(/\.md$/i, "");
+  const slug = typeof data["slug"] === "string" && data["slug"].trim() !== "" ? data["slug"].trim() : base.replace(/^\d{4}-\d{2}-/, "");
+  const fix = {
+    slug,
+    file,
+    date: typeof data["date"] === "string" ? data["date"] : "",
+    result: typeof data["result"] === "string" ? data["result"] : "pass",
+    covers: coversOf(data["covers"]),
+    content: fm.body.trimStart()
+  };
+  if (typeof data["domain"] === "string") fix.domain = data["domain"];
+  if (typeof data["title"] === "string") fix.title = data["title"];
+  return fix;
+}
+async function loadLivingFixes(root) {
+  const dir = path4.join(root, LIVING_FIXES_DIR);
+  const entries = (await listDir(dir)).filter((entry) => entry.toLowerCase().endsWith(".md")).sort();
+  const fixes = [];
+  for (const entry of entries) {
+    const file = path4.join(dir, entry);
+    const content = await readTextIfExists(file);
+    if (content === void 0) continue;
+    fixes.push(parseLivingFix(content, file));
+  }
+  return fixes.sort((a, b) => b.date.localeCompare(a.date) || b.slug.localeCompare(a.slug));
+}
+async function writeLivingFix(root, input) {
+  const dir = path4.join(root, LIVING_FIXES_DIR);
+  const month = input.date.slice(0, 7);
+  const file = path4.join(dir, `${month}-${input.slug}.md`);
+  const relativePath = toPosix(path4.relative(root, file));
+  if (await exists(file)) return { file, relativePath, created: false };
+  const data = {
+    slug: input.slug,
+    date: input.date,
+    result: input.result ?? "pass"
+  };
+  if (input.domain) data["domain"] = input.domain;
+  if (input.title) data["title"] = input.title;
+  if (input.covers && input.covers.length > 0) data["covers"] = input.covers;
+  const body = input.content.replace(/^[\r\n]+/, "").trimEnd();
+  const text = `---
+${stringifyYaml3(data, { lineWidth: 120 })}---
+
+${body}
+`;
+  await writeText(file, text);
+  return { file, relativePath, created: true };
+}
 var SDD_DIR = ".sdd";
 async function findWorkspaceRoot(start) {
-  let current = path4.resolve(start);
+  let current = path5.resolve(start);
   for (let i = 0; i < 40; i += 1) {
-    if (await isDirectory(path4.join(current, SDD_DIR))) return current;
-    const parent = path4.dirname(current);
+    if (await isDirectory(path5.join(current, SDD_DIR))) return current;
+    const parent = path5.dirname(current);
     if (parent === current) return void 0;
     current = parent;
   }
   return void 0;
 }
 async function loadApprovals(sddDir) {
-  const file = path4.join(sddDir, "approvals.yaml");
+  const file = path5.join(sddDir, "approvals.yaml");
   const raw = await readTextIfExists(file);
   if (raw === void 0) return { byArtifact: /* @__PURE__ */ new Map(), diagnostics: [] };
   const parsed = parseApprovals(raw, file);
   const map = /* @__PURE__ */ new Map();
   for (const a of parsed.approvals?.approvals ?? []) {
-    map.set(a.artifact.split(path4.sep).join("/"), { hash: a.artifactHash, by: a.approvedBy, at: a.approvedAt });
+    map.set(a.artifact.split(path5.sep).join("/"), { hash: a.artifactHash, by: a.approvedBy, at: a.approvedAt });
   }
   return { byArtifact: map, diagnostics: parsed.diagnostics };
 }
 async function loadSpecs(sddDir) {
-  const specsDir = path4.join(sddDir, "specs");
+  const specsDir = path5.join(sddDir, "specs");
   const domains = await listDirs(specsDir);
   const out = [];
   for (const domain of domains) {
-    const file = path4.join(specsDir, domain, "spec.md");
+    const file = path5.join(specsDir, domain, "spec.md");
     if (!await exists(file)) continue;
     const content = await readText(file);
     out.push({ domain, path: file, spec: parseSpecFile(content, file) });
@@ -10426,10 +10519,10 @@ async function loadSpecs(sddDir) {
   return out;
 }
 async function loadChange(root, slug, relDir) {
-  const dir = path4.join(root, SDD_DIR, "changes", relDir ?? slug);
+  const dir = path5.join(root, SDD_DIR, "changes", relDir ?? slug);
   const diagnostics = [];
   const change = { slug, dir, diagnostics };
-  const metaFile = path4.join(dir, "meta.yaml");
+  const metaFile = path5.join(dir, "meta.yaml");
   const metaRaw = await readTextIfExists(metaFile);
   if (metaRaw === void 0) {
     diagnostics.push(diag("ATLAS-FILES-001", "error", `El cambio "${slug}" no tiene meta.yaml`, { path: metaFile, suggestion: "Crea meta.yaml con slug, lane y dominio" }));
@@ -10438,7 +10531,7 @@ async function loadChange(root, slug, relDir) {
     diagnostics.push(...parsed.diagnostics);
     if (parsed.meta) change.meta = parsed.meta;
   }
-  const deltaFile = path4.join(dir, "spec.md");
+  const deltaFile = path5.join(dir, "spec.md");
   const deltaRaw = await readTextIfExists(deltaFile);
   if (deltaRaw !== void 0) {
     change.delta = parseDelta(deltaRaw, deltaFile);
@@ -10446,41 +10539,42 @@ async function loadChange(root, slug, relDir) {
   } else {
     diagnostics.push(diag("ATLAS-FILES-002", "warning", `El cambio "${slug}" no tiene spec.md (delta)`, { path: deltaFile }));
   }
-  const planFile = path4.join(dir, "plan.md");
+  const planFile = path5.join(dir, "plan.md");
   if (await exists(planFile)) change.planPath = planFile;
-  const reviewFile = path4.join(dir, "review.md");
+  const reviewFile = path5.join(dir, "review.md");
   if (await exists(reviewFile)) change.reviewPath = reviewFile;
-  const presentationFile = path4.join(dir, "presentation", "index.html");
+  const presentationFile = path5.join(dir, "presentation", "index.html");
   if (await exists(presentationFile)) change.presentationPath = presentationFile;
-  const tasksFile = path4.join(dir, "tasks.md");
+  const tasksFile = path5.join(dir, "tasks.md");
   const tasksRaw = await readTextIfExists(tasksFile);
   if (tasksRaw !== void 0) {
     change.tasks = parseTasksFile(tasksRaw, tasksFile);
     diagnostics.push(...change.tasks.diagnostics);
   }
-  const verifyFile = path4.join(dir, "verify.md");
+  const verifyFile = path5.join(dir, "verify.md");
   const verifyRaw = await readTextIfExists(verifyFile);
   if (verifyRaw !== void 0) {
     change.verify = parseVerifyFile(verifyRaw, verifyFile);
     diagnostics.push(...change.verify.diagnostics);
   }
-  const fixFile = path4.join(dir, "fix.md");
+  const fixFile = path5.join(dir, "fix.md");
   const fixRaw = await readTextIfExists(fixFile);
   if (fixRaw !== void 0) {
     change.fix = parseVerifyFile(fixRaw, fixFile);
     diagnostics.push(...change.fix.diagnostics);
+    change.fixCovers = parseFixCovers(fixRaw);
   }
-  const mockupManifest = path4.join(dir, "mockups", "manifest.yaml");
+  const mockupManifest = path5.join(dir, "mockups", "manifest.yaml");
   if (await exists(mockupManifest)) change.mockupManifestPath = mockupManifest;
   return change;
 }
 async function listChangeSlugs(root, opts = {}) {
-  const changesDir = path4.join(root, SDD_DIR, "changes");
+  const changesDir = path5.join(root, SDD_DIR, "changes");
   const dirs = await listDirs(changesDir);
   return dirs.filter((d) => opts.includeArchived ? true : d !== "archive");
 }
 async function loadWorkspace(root) {
-  const sddDir = path4.join(root, SDD_DIR);
+  const sddDir = path5.join(root, SDD_DIR);
   const { config, diagnostics: configDiags } = await loadConfig(sddDir);
   const diagnostics = [...configDiags];
   const specs = await loadSpecs(sddDir);
@@ -10493,20 +10587,20 @@ async function loadWorkspace(root) {
     diagnostics.push(...change.diagnostics);
   }
   const archived = [];
-  const archivedDir = path4.join(sddDir, "changes", "archive");
+  const archivedDir = path5.join(sddDir, "changes", "archive");
   if (await isDirectory(archivedDir)) {
     for (const entry of await listDirs(archivedDir)) {
-      archived.push(await loadChange(root, entry.replace(/^\d{4}-\d{2}-/, ""), path4.join("archive", entry)));
+      archived.push(await loadChange(root, entry.replace(/^\d{4}-\d{2}-/, ""), path5.join("archive", entry)));
     }
   }
   return { workspace: { root, sddDir, specs, changes, archived, diagnostics }, config };
 }
 async function ensureSddDirs(sddDir) {
   const created = [];
-  const dirs = ["specs", "changes", "runs", "metrics", path4.join("profiles", "custom")];
+  const dirs = ["specs", "changes", "runs", "metrics", "fixes", path5.join("profiles", "custom")];
   const { ensureDir: ensureDir2 } = await import("./fsx-VF2P7ALA-XKEWTMDH.js");
   for (const d of dirs) {
-    const full = path4.join(sddDir, d);
+    const full = path5.join(sddDir, d);
     if (!await exists(full)) {
       await ensureDir2(full);
       created.push(full);
@@ -10674,6 +10768,10 @@ notes: 12/12 casos
 
 ## Evidencia
 
+<!-- Opcional: declara los requisitos que este fix afecta (aparecen en su trazabilidad).
+Cubre: REQ-DOMINIO-001
+-->
+
 <!-- Registra la evidencia real con:
 satlas verify <slug> --file fix --scenario REQ-DOMINIO-001-S1 --command "<comando>" --by "<nombre>"
 o, si es manual:
@@ -10797,6 +10895,10 @@ by: your-name
 ## Rollback
 ## Evidence
 
+<!-- Optional: declare the requirements this fix affects (they show up in its traceability).
+Cubre: REQ-DOMAIN-001
+-->
+
 <!-- Register real evidence with:
 satlas verify <slug> --file fix --scenario REQ-DOMAIN-001-S1 --command "<command>" --by "<name>"
 -->
@@ -10821,7 +10923,7 @@ function changeMetaYaml(meta) {
   if (meta.owner) doc["owner"] = meta.owner;
   if (meta.mockups) doc["mockups"] = meta.mockups;
   return `# Estado del cambio. La fase se DERIVA de los artefactos; aqu\xED solo hechos.
-` + stringifyYaml3(doc, { lineWidth: 120 });
+` + stringifyYaml4(doc, { lineWidth: 120 });
 }
 function indexMarkdown(input) {
   const es = input.language !== "en";
@@ -10835,6 +10937,15 @@ function indexMarkdown(input) {
   if (input.specs.length === 0) lines.push(es ? "_Sin specs todav\xEDa._" : "_No specs yet._");
   for (const spec of input.specs) lines.push(`- \`${spec.domain}\` \u2014 ${spec.requirements} ${es ? "requisitos" : "requirements"}`);
   lines.push("");
+  lines.push(es ? "## Fixes vivos" : "## Living fixes");
+  lines.push("");
+  const fixes = input.fixes ?? [];
+  if (fixes.length === 0) lines.push(es ? "_Sin fixes archivados todav\xEDa._" : "_No archived fixes yet._");
+  for (const fix of fixes) {
+    const parts = [fix.date, fix.domain ? `\`${fix.domain}\`` : "", `\`${fix.slug}\``, fix.result].filter((part) => part !== "");
+    lines.push(`- ${parts.join(" \xB7 ")}`);
+  }
+  lines.push("");
   lines.push(es ? "## Cambios activos" : "## Active changes");
   lines.push("");
   if (input.changes.length === 0) lines.push(es ? "_Sin cambios activos._" : "_No active changes._");
@@ -10986,8 +11097,8 @@ function issueBody(input) {
   lines.push(`- Siguiente: \`${input.next}\` \u2014 ${input.nextDescription}`);
   lines.push("");
   lines.push("### Artefactos");
-  lines.push(`- Spec: \`${path5.posix.join(".sdd", "changes", change.slug, "spec.md")}\``);
-  if (change.planPath) lines.push(`- Plan: \`${path5.posix.join(".sdd", "changes", change.slug, "plan.md")}\``);
+  lines.push(`- Spec: \`${path6.posix.join(".sdd", "changes", change.slug, "spec.md")}\``);
+  if (change.planPath) lines.push(`- Plan: \`${path6.posix.join(".sdd", "changes", change.slug, "plan.md")}\``);
   if (change.tasks) lines.push(`- Tareas: ${change.tasks.counts.done}/${change.tasks.counts.total}`);
   if (change.verify) lines.push(`- Evidencia registrada: ${change.verify.evidence.length}`);
   lines.push("");
@@ -11051,10 +11162,10 @@ async function issueLabels(root, number, runner = defaultRunner) {
   }
 }
 async function patchChangeMeta(root, slug, patch) {
-  const file = path5.join(path5.resolve(root), ".sdd", "changes", slug, "meta.yaml");
+  const file = path6.join(path6.resolve(root), ".sdd", "changes", slug, "meta.yaml");
   const raw = await readTextIfExists(file);
   if (raw === void 0) {
-    return { path: file, diagnostics: [diag("ATLAS-GH-007", "error", `No existe ${path5.relative(root, file)}`)] };
+    return { path: file, diagnostics: [diag("ATLAS-GH-007", "error", `No existe ${path6.relative(root, file)}`)] };
   }
   let data;
   try {
@@ -11105,10 +11216,10 @@ async function approveFromGithub(opts) {
   if (!by) {
     return { approved: false, label, issueNumber: number, diagnostics: [diag("ATLAS-GH-011", "error", "No se pudo determinar qui\xE9n aprueba (--by ni `gh api user`)")] };
   }
-  const { signApproval: signApproval2 } = await import("./approvals-2PO6223I-54L7NGZ5.js");
+  const { signApproval: signApproval2 } = await import("./approvals-2PO6223I-DENKLEXU.js");
   const signed = await signApproval2({
     root: opts.root,
-    artifact: path5.posix.join("changes", opts.slug, "spec.md"),
+    artifact: path6.posix.join("changes", opts.slug, "spec.md"),
     by,
     channel: "tracker",
     note: `Aprobado v\xEDa GitHub issue #${number} (etiqueta "${label}")`
@@ -11203,10 +11314,10 @@ function buildEvidenceYaml(evidence) {
   return lines.join("\n");
 }
 async function recordEvidence(opts) {
-  const root = path6.resolve(opts.root);
+  const root = path7.resolve(opts.root);
   const slug = opts.slug;
   const fileKind = opts.file ?? "verify";
-  const file = path6.join(root, ".sdd", "changes", slug, fileKind === "fix" ? "fix.md" : "verify.md");
+  const file = path7.join(root, ".sdd", "changes", slug, fileKind === "fix" ? "fix.md" : "verify.md");
   const diagnostics = [];
   const scenario = opts.scenario.toUpperCase();
   if (!SCENARIO_ID_RE.test(scenario)) {
@@ -11296,7 +11407,7 @@ function generateRunId(now = /* @__PURE__ */ new Date()) {
   return `${iso.slice(0, 8)}-${iso.slice(8, 14)}-${randomBytes(3).toString("hex")}`;
 }
 function runsDir(root) {
-  return path7.join(path7.resolve(root), ".sdd", "runs");
+  return path8.join(path8.resolve(root), ".sdd", "runs");
 }
 async function createRun(root, slug, phase, inputs, now = /* @__PURE__ */ new Date()) {
   const runId = generateRunId(now);
@@ -11309,25 +11420,25 @@ async function createRun(root, slug, phase, inputs, now = /* @__PURE__ */ new Da
     updatedAt: localStamp(now)
   };
   if (inputs) state.inputs = inputs;
-  const dir = path7.join(runsDir(root), runId);
+  const dir = path8.join(runsDir(root), runId);
   await ensureDir(dir);
-  await writeText(path7.join(dir, "state.json"), `${JSON.stringify(state, null, 2)}
+  await writeText(path8.join(dir, "state.json"), `${JSON.stringify(state, null, 2)}
 `);
-  await writeText(path7.join(dir, "events.jsonl"), "");
+  await writeText(path8.join(dir, "events.jsonl"), "");
   await appendRunEvent(root, runId, "run_started", { slug, phase });
   return state;
 }
 async function appendRunEvent(root, runId, type, data, now = /* @__PURE__ */ new Date()) {
   const event = { eventId: randomBytes(4).toString("hex"), at: localStamp(now), type };
   if (data) event.data = data;
-  const file = path7.join(runsDir(root), runId, "events.jsonl");
+  const file = path8.join(runsDir(root), runId, "events.jsonl");
   const previous = await readTextIfExists(file) ?? "";
   await writeText(file, `${previous}${JSON.stringify(event)}
 `);
   return event;
 }
 async function updateRunStatus(root, runId, status, now = /* @__PURE__ */ new Date()) {
-  const file = path7.join(runsDir(root), runId, "state.json");
+  const file = path8.join(runsDir(root), runId, "state.json");
   const raw = await readTextIfExists(file);
   if (raw === void 0) return;
   const state = JSON.parse(raw);
@@ -11337,13 +11448,13 @@ async function updateRunStatus(root, runId, status, now = /* @__PURE__ */ new Da
 `);
 }
 async function readRun(root, runId) {
-  const dir = path7.join(runsDir(root), runId);
-  const stateRaw = await readTextIfExists(path7.join(dir, "state.json"));
+  const dir = path8.join(runsDir(root), runId);
+  const stateRaw = await readTextIfExists(path8.join(dir, "state.json"));
   if (stateRaw === void 0) {
     return { diagnostics: [diag("ATLAS-RUN-001", "error", `No existe el run ${runId}`, { path: dir })] };
   }
   const state = JSON.parse(stateRaw);
-  const eventsRaw = await readTextIfExists(path7.join(dir, "events.jsonl")) ?? "";
+  const eventsRaw = await readTextIfExists(path8.join(dir, "events.jsonl")) ?? "";
   const events = [];
   for (const line of eventsRaw.split("\n")) {
     if (line.trim() === "") continue;
@@ -11360,7 +11471,7 @@ async function listRuns(root, filter = {}) {
   const ids = await listDirs(dir);
   const out = [];
   for (const id of ids) {
-    const raw = await readTextIfExists(path7.join(dir, id, "state.json"));
+    const raw = await readTextIfExists(path8.join(dir, id, "state.json"));
     if (raw === void 0) continue;
     try {
       const state = JSON.parse(raw);
@@ -11395,20 +11506,20 @@ var mockupManifestSchema = z4.object({
 });
 var TOKEN_CANDIDATES = ["design/tokens.json", "DESIGN.md", "design/DESIGN.md", ".sdd/design/tokens.json"];
 function mockupsDir(root, slug) {
-  return path8.join(path8.resolve(root), ".sdd", "changes", slug, "mockups");
+  return path9.join(path9.resolve(root), ".sdd", "changes", slug, "mockups");
 }
 async function tokensFile(root) {
   for (const candidate of TOKEN_CANDIDATES) {
-    const abs = path8.join(root, candidate);
+    const abs = path9.join(root, candidate);
     if (await exists(abs)) return candidate;
   }
   return void 0;
 }
 async function computeInputsHash(root, change) {
-  const deltaPath = path8.join(change.dir, "spec.md");
+  const deltaPath = path9.join(change.dir, "spec.md");
   const delta = await readTextIfExists(deltaPath) ?? "";
   const tokens = await tokensFile(root);
-  const tokensContent = tokens ? await readTextIfExists(path8.join(root, tokens)) ?? "" : "";
+  const tokensContent = tokens ? await readTextIfExists(path9.join(root, tokens)) ?? "" : "";
   return artifactHash(`${delta}
 ---tokens---
 ${tokensContent}`);
@@ -11433,7 +11544,7 @@ function planMockups(change, platform = "web") {
   return { platform, screens };
 }
 async function readMockupManifest(root, slug) {
-  const file = path8.join(mockupsDir(root, slug), "manifest.yaml");
+  const file = path9.join(mockupsDir(root, slug), "manifest.yaml");
   const raw = await readTextIfExists(file);
   if (raw === void 0) return { diagnostics: [] };
   let data;
@@ -11525,7 +11636,7 @@ async function checkMockups(root, slug, change) {
   const { manifest, path: manifestPath, diagnostics } = await readMockupManifest(root, slug);
   const findings = [...diagnostics];
   if (!manifest || !manifestPath) {
-    return { findings: [...findings, diag("LINT-MKP-004", "error", "No existe mockups/manifest.yaml", { path: path8.join(dir, "manifest.yaml") })], stale: false };
+    return { findings: [...findings, diag("LINT-MKP-004", "error", "No existe mockups/manifest.yaml", { path: path9.join(dir, "manifest.yaml") })], stale: false };
   }
   const known = /* @__PURE__ */ new Set();
   for (const req of [...change.delta?.added ?? [], ...change.delta?.modified ?? []]) {
@@ -11533,12 +11644,12 @@ async function checkMockups(root, slug, change) {
   }
   findings.push(...lintMockupManifest(manifest, known, manifestPath));
   for (const screen of manifest.screens) {
-    const html = await readTextIfExists(path8.join(dir, screen.file));
+    const html = await readTextIfExists(path9.join(dir, screen.file));
     if (html === void 0) {
-      findings.push(diag("ATLAS-MKP-004", "error", `Falta el archivo del mockup: ${screen.file}`, { path: path8.join(dir, screen.file) }));
+      findings.push(diag("ATLAS-MKP-004", "error", `Falta el archivo del mockup: ${screen.file}`, { path: path9.join(dir, screen.file) }));
       continue;
     }
-    findings.push(...lintMockupHtml(html, path8.join(dir, screen.file)));
+    findings.push(...lintMockupHtml(html, path9.join(dir, screen.file)));
   }
   const inputsHash = await computeInputsHash(root, change);
   const stale = manifest.inputsHash !== void 0 && manifest.inputsHash !== inputsHash;
@@ -11553,7 +11664,7 @@ async function checkMockups(root, slug, change) {
   return { findings, stale, manifest, manifestPath };
 }
 async function writeMockupPlan(root, slug, plan, now = /* @__PURE__ */ new Date()) {
-  const file = path8.join(mockupsDir(root, slug), "plan.yaml");
+  const file = path9.join(mockupsDir(root, slug), "plan.yaml");
   if (await exists(file)) return file;
   const doc = {
     schema_version: 1,
@@ -11561,11 +11672,11 @@ async function writeMockupPlan(root, slug, plan, now = /* @__PURE__ */ new Date(
     platform: plan.platform,
     screens: plan.screens.map((s) => ({ id: s.id, title: s.title, file: s.file, illustrates: s.illustrates, states: s.states, breakpoints: s.breakpoints }))
   };
-  await writeText(file, stringifyYaml4(doc, { lineWidth: 120 }));
+  await writeText(file, stringifyYaml5(doc, { lineWidth: 120 }));
   return file;
 }
 async function writeMockupManifest(root, slug, plan, inputsHash, now = /* @__PURE__ */ new Date()) {
-  const file = path8.join(mockupsDir(root, slug), "manifest.yaml");
+  const file = path9.join(mockupsDir(root, slug), "manifest.yaml");
   if (await exists(file)) return file;
   const doc = {
     schema_version: 1,
@@ -11577,16 +11688,16 @@ async function writeMockupManifest(root, slug, plan, inputsHash, now = /* @__PUR
     screens: plan.screens.map((s) => ({ id: s.id, title: s.title, file: s.file, illustrates: s.illustrates, states: s.states, breakpoints: s.breakpoints })),
     screenshots: []
   };
-  await writeText(file, stringifyYaml4(doc, { lineWidth: 120 }));
+  await writeText(file, stringifyYaml5(doc, { lineWidth: 120 }));
   return file;
 }
 async function updateMockupScreenshots(root, slug, screenshots) {
-  const file = path8.join(mockupsDir(root, slug), "manifest.yaml");
+  const file = path9.join(mockupsDir(root, slug), "manifest.yaml");
   const raw = await readTextIfExists(file);
   if (raw === void 0) return void 0;
   const data = parseYaml6(raw) ?? {};
   data["screenshots"] = screenshots;
-  await writeText(file, stringifyYaml4(data, { lineWidth: 120 }));
+  await writeText(file, stringifyYaml5(data, { lineWidth: 120 }));
   return file;
 }
 async function captureMockups(root, slug, manifest, now = /* @__PURE__ */ new Date()) {
@@ -11611,9 +11722,9 @@ async function captureMockups(root, slug, manifest, now = /* @__PURE__ */ new Da
       const page2 = await browser.newPage();
       for (const bp of screen.breakpoints && screen.breakpoints.length > 0 ? screen.breakpoints : [1440]) {
         await page2.setViewportSize({ width: bp, height: 900 });
-        await page2.goto(`file://${path8.join(dir, screen.file).split(path8.sep).join("/")}`);
-        const rel = path8.posix.join("screens", `${screen.id}-${bp}.png`);
-        await page2.screenshot({ path: path8.join(dir, rel) });
+        await page2.goto(`file://${path9.join(dir, screen.file).split(path9.sep).join("/")}`);
+        const rel = path9.posix.join("screens", `${screen.id}-${bp}.png`);
+        await page2.screenshot({ path: path9.join(dir, rel) });
         screenshots.push(rel);
       }
       await page2.close();
@@ -11629,7 +11740,7 @@ async function mockupsReady(root, slug, change) {
   return Boolean(check.manifest && check.manifest.screens.length > 0 && !check.stale);
 }
 async function setMockupRequirement(root, slug, value) {
-  const file = path8.join(root, ".sdd", "changes", slug, "meta.yaml");
+  const file = path9.join(root, ".sdd", "changes", slug, "meta.yaml");
   const raw = await readTextIfExists(file) ?? `schema_version: 1
 slug: ${slug}
 lane: standard
@@ -11859,12 +11970,12 @@ ${texts.scenarios}`);
   }
 }
 async function loadProjectPacks(sddDir) {
-  const dir = path9.join(sddDir, "packs");
+  const dir = path10.join(sddDir, "packs");
   const diagnostics = [];
   const packs = [];
   for (const entry of await listDir(dir)) {
     if (!/\.ya?ml$/i.test(entry)) continue;
-    const file = path9.join(dir, entry);
+    const file = path10.join(dir, entry);
     const raw = await readTextIfExists(file);
     if (raw === void 0) continue;
     let data;
@@ -11951,7 +12062,7 @@ function packFindings(evaluations, change) {
 }
 var UI_DOMAINS = /* @__PURE__ */ new Set(["frontend", "mobile", "fullstack"]);
 async function runAnalyze(opts) {
-  const root = path10.resolve(opts.root);
+  const root = path11.resolve(opts.root);
   const { workspace, config } = await loadWorkspace(root);
   const change = workspace.changes.find((c) => c.slug === opts.slug);
   if (!change) {
@@ -11969,7 +12080,7 @@ async function runAnalyze(opts) {
     for (const req of spec.spec.requirements) living.set(req.id, req);
   }
   if (change.delta) {
-    findings.push(...lintDelta(change.delta, living, path10.join(change.dir, "spec.md"), { language: config.spec.language }));
+    findings.push(...lintDelta(change.delta, living, path11.join(change.dir, "spec.md"), { language: config.spec.language }));
   }
   const trace = checkTrace({ specs: workspace.specs, change, requireEvidence: false });
   findings.push(...trace.findings);
@@ -12018,7 +12129,7 @@ async function runAnalyze(opts) {
   if (mockups) result.mockups = mockups;
   if (packs) result.packs = packs;
   if (opts.write !== false) {
-    const file = path10.join(change.dir, "analyze.md");
+    const file = path11.join(change.dir, "analyze.md");
     await writeText(file, renderAnalyze(change, result, localStamp(opts.now)));
     result.path = file;
   }
@@ -12060,7 +12171,7 @@ function renderAnalyze(change, result, generatedAt) {
   return lines.join("\n");
 }
 async function collectMetrics(root, now = /* @__PURE__ */ new Date()) {
-  const resolved = path11.resolve(root);
+  const resolved = path12.resolve(root);
   const { workspace, config } = await loadWorkspace(resolved);
   const approvals = await loadApprovals(workspace.sddDir);
   const living = /* @__PURE__ */ new Map();
@@ -12075,7 +12186,7 @@ async function collectMetrics(root, now = /* @__PURE__ */ new Date()) {
     const deltaContent = await readDelta(change);
     const approval = verifyApproval(change, approvals.byArtifact, config, deltaContent);
     const findings = [];
-    if (change.delta) findings.push(...lintDelta(change.delta, living, path11.join(change.dir, "spec.md"), { language: config.spec.language }));
+    if (change.delta) findings.push(...lintDelta(change.delta, living, path12.join(change.dir, "spec.md"), { language: config.spec.language }));
     const trace = checkTrace({
       specs: workspace.specs,
       change,
@@ -12140,7 +12251,7 @@ async function collectMetrics(root, now = /* @__PURE__ */ new Date()) {
       attention.push({ slug: change.slug, kind: "missing-evidence", detail: `evidencia ${change.scenariosPassed}/${change.scenariosTotal}` });
     }
   }
-  const archiveDir = path11.join(workspace.sddDir, "changes", "archive");
+  const archiveDir = path12.join(workspace.sddDir, "changes", "archive");
   const archivedEntries = await listDirs(archiveDir);
   const throughputByMonth = {};
   for (const entry of archivedEntries) {
@@ -12178,10 +12289,10 @@ async function collectMetrics(root, now = /* @__PURE__ */ new Date()) {
 }
 async function readDelta(change) {
   const { readTextIfExists: readTextIfExists2 } = await import("./fsx-VF2P7ALA-XKEWTMDH.js");
-  return readTextIfExists2(path11.join(change.dir, "spec.md"));
+  return readTextIfExists2(path12.join(change.dir, "spec.md"));
 }
 async function generatePresentation(opts) {
-  const root = path12.resolve(opts.root);
+  const root = path13.resolve(opts.root);
   const { workspace, config } = await loadWorkspace(root);
   const language = config.project.language;
   const change = workspace.changes.find((c) => c.slug === opts.slug);
@@ -12191,17 +12302,17 @@ async function generatePresentation(opts) {
   if (!change.delta) {
     return { slug: opts.slug, diagnostics: [diag("ATLAS-PRESENT-001", "error", `El cambio "${opts.slug}" no tiene spec.md (delta)`)] };
   }
-  const deltaPath = path12.join(change.dir, "spec.md");
+  const deltaPath = path13.join(change.dir, "spec.md");
   const deltaContent = await readTextIfExists(deltaPath) ?? "";
   const hash = artifactHash(deltaContent);
   const now = opts.now ?? /* @__PURE__ */ new Date();
-  const presentationDir = path12.join(change.dir, "presentation");
-  const mockupsCopyDir = path12.join(presentationDir, "mockups");
+  const presentationDir = path13.join(change.dir, "presentation");
+  const mockupsCopyDir = path13.join(presentationDir, "mockups");
   await ensureDir(presentationDir);
   const mockupInfo = await copyMockups(root, change, mockupsCopyDir);
-  const proposalRaw = await readTextIfExists(path12.join(change.dir, "proposal.md"));
+  const proposalRaw = await readTextIfExists(path13.join(change.dir, "proposal.md"));
   const proposalBody = proposalRaw ? parseFrontmatter(proposalRaw).body : "";
-  const approvals = await loadApprovals(path12.join(root, ".sdd"));
+  const approvals = await loadApprovals(path13.join(root, ".sdd"));
   const approval = verifyApproval(change, approvals.byArtifact, config, deltaContent);
   const labels = labelsFor(language);
   const html = page({
@@ -12222,7 +12333,7 @@ async function generatePresentation(opts) {
     approveHint: `satlas approve ${change.slug} --by "<nombre>" --channel presentation`,
     ...approval.status === "valid" && approval.approvedBy ? { approval: { by: approval.approvedBy, at: approval.approvedAt ?? "" } } : {}
   });
-  const outFile = path12.join(presentationDir, "index.html");
+  const outFile = path13.join(presentationDir, "index.html");
   await writeText(outFile, html);
   return { slug: change.slug, path: outFile, hash, diagnostics: mockupInfo.diagnostics };
 }
@@ -12234,12 +12345,12 @@ async function copyMockups(root, change, destDir) {
   await ensureDir(destDir);
   const screens = [];
   for (const screen of manifest.screens) {
-    const src = path12.join(dir, screen.file);
+    const src = path13.join(dir, screen.file);
     if (!await exists(src)) {
       diagnostics.push(diag("ATLAS-PRESENT-002", "warning", `El mockup ${screen.file} no existe y no se incluir\xE1`, { path: src }));
       continue;
     }
-    await copyFile(src, path12.join(destDir, screen.file));
+    await copyFile(src, path13.join(destDir, screen.file));
     screens.push({
       id: screen.id,
       title: screen.title ?? screen.id,
@@ -12249,13 +12360,13 @@ async function copyMockups(root, change, destDir) {
     });
   }
   const screenshots = [];
-  const shotsDir = path12.join(dir, "screens");
+  const shotsDir = path13.join(dir, "screens");
   if (await exists(shotsDir)) {
-    await ensureDir(path12.join(destDir, "screens"));
+    await ensureDir(path13.join(destDir, "screens"));
     const { listDir: listDir4 } = await import("./fsx-VF2P7ALA-XKEWTMDH.js");
     for (const file of await listDir4(shotsDir)) {
       if (!/\.(png|jpe?g|webp)$/i.test(file)) continue;
-      await copyFile(path12.join(shotsDir, file), path12.join(destDir, "screens", file));
+      await copyFile(path13.join(shotsDir, file), path13.join(destDir, "screens", file));
       screenshots.push(`mockups/screens/${file}`);
     }
   }
@@ -12471,11 +12582,11 @@ var SOURCE_EXT = /* @__PURE__ */ new Set([
   ".groovy"
 ]);
 async function adoptWorkspace(opts) {
-  const root = path13.resolve(opts.root);
+  const root = path14.resolve(opts.root);
   const dryRun = opts.dryRun ?? false;
   const diagnostics = [];
-  const sddDir = path13.join(root, ".sdd");
-  if (!await exists(path13.join(sddDir, "config.yaml"))) {
+  const sddDir = path14.join(root, ".sdd");
+  if (!await exists(path14.join(sddDir, "config.yaml"))) {
     return {
       root,
       domains: [],
@@ -12486,8 +12597,8 @@ async function adoptWorkspace(opts) {
   }
   const { config } = await loadConfig(sddDir);
   const files = await walkFiles(root, { skipDirs: [...SKIP_DIRS] });
-  const inventoried = files.map((f) => toPosix(path13.relative(root, f.path)));
-  const relative = inventoried.filter((f) => SOURCE_EXT.has(path13.extname(f).toLowerCase()));
+  const inventoried = files.map((f) => toPosix(path14.relative(root, f.path)));
+  const relative = inventoried.filter((f) => SOURCE_EXT.has(path14.extname(f).toLowerCase()));
   if (relative.length === 0) {
     diagnostics.push(diag("ATLAS-ADOPT-002", "warning", "No se encontraron archivos de c\xF3digo para inventariar", { path: root, suggestion: "A\xF1ade el dominio a mano con --domains <nombre>" }));
   }
@@ -12515,13 +12626,13 @@ async function adoptWorkspace(opts) {
   const createdSpecs = [];
   for (const name of domainNames.sort()) {
     const domainFiles = (counts.get(name) ?? []).sort();
-    const existingSpec = await exists(path13.join(sddDir, "specs", name, "spec.md"));
+    const existingSpec = await exists(path14.join(sddDir, "specs", name, "spec.md"));
     domains.push({ name, files: domainFiles.length, samples: domainFiles.slice(0, 8), existingSpec });
     if (existingSpec) {
-      diagnostics.push(diag("ATLAS-ADOPT-003", "info", `La spec de "${name}" ya existe; se conserva`, { path: path13.join(sddDir, "specs", name, "spec.md") }));
+      diagnostics.push(diag("ATLAS-ADOPT-003", "info", `La spec de "${name}" ya existe; se conserva`, { path: path14.join(sddDir, "specs", name, "spec.md") }));
       continue;
     }
-    const specPath = path13.join(sddDir, "specs", name, "spec.md");
+    const specPath = path14.join(sddDir, "specs", name, "spec.md");
     if (!dryRun) {
       await writeText(specPath, baselineSpec(name, domainFiles));
       createdSpecs.push(specPath);
@@ -12529,7 +12640,7 @@ async function adoptWorkspace(opts) {
       createdSpecs.push(specPath);
     }
   }
-  const reportPath = path13.join(sddDir, "adopt-report.md");
+  const reportPath = path14.join(sddDir, "adopt-report.md");
   if (!dryRun) {
     await writeText(reportPath, adoptReport({ root, config, domains, detection: detection?.best, language: config.project.language, files: relative.length, inventoried: inventoried.length, now: opts.now ?? /* @__PURE__ */ new Date() }));
   }
@@ -12549,12 +12660,12 @@ async function loadProjectProfiles(root, dirs) {
     if (!await exists(dir)) continue;
     out.push(...await loadProfilesFromDir(dir));
   }
-  const custom = path13.join(root, ".sdd", "profiles", "custom");
+  const custom = path14.join(root, ".sdd", "profiles", "custom");
   if (await exists(custom)) out.push(...await loadProfilesFromDir(custom));
   return out;
 }
 async function fallbackDomainName(root, projectName) {
-  const pkg = await readTextIfExists(path13.join(root, "package.json"));
+  const pkg = await readTextIfExists(path14.join(root, "package.json"));
   if (pkg) {
     try {
       const data = JSON.parse(pkg);
@@ -12641,11 +12752,11 @@ function adoptReport(input) {
   return lines.join("\n");
 }
 async function initWorkspace(opts) {
-  const root = path14.resolve(opts.root);
-  const sddDir = path14.join(root, ".sdd");
+  const root = path15.resolve(opts.root);
+  const sddDir = path15.join(root, ".sdd");
   const diagnostics = [];
   const created = [];
-  if (await exists(path14.join(sddDir, "config.yaml"))) {
+  if (await exists(path15.join(sddDir, "config.yaml"))) {
     return {
       sddDir,
       created,
@@ -12655,29 +12766,29 @@ async function initWorkspace(opts) {
   created.push(...await ensureSddDirs(sddDir));
   const language = opts.language ?? "es";
   const cfg = defaultConfig({ name: opts.name, language });
-  cfg.project.name = opts.name ?? path14.basename(root);
+  cfg.project.name = opts.name ?? path15.basename(root);
   await writeConfig(sddDir, cfg);
-  created.push(path14.join(sddDir, "config.yaml"));
+  created.push(path15.join(sddDir, "config.yaml"));
   const templates = templatesFor(language);
-  await writeText(path14.join(sddDir, "constitution.md"), templates.constitution);
-  created.push(path14.join(sddDir, "constitution.md"));
-  await writeText(path14.join(sddDir, "glossary.md"), templates.glossary);
-  created.push(path14.join(sddDir, "glossary.md"));
+  await writeText(path15.join(sddDir, "constitution.md"), templates.constitution);
+  created.push(path15.join(sddDir, "constitution.md"));
+  await writeText(path15.join(sddDir, "glossary.md"), templates.glossary);
+  created.push(path15.join(sddDir, "glossary.md"));
   const detected = await detectIfPossible(root, opts.profilesDir);
   if (detected) {
     const yaml2 = detectionToYaml(detected, localStamp(opts.now));
-    await writeText(path14.join(sddDir, "profiles", "detected.yaml"), yaml2);
-    created.push(path14.join(sddDir, "profiles", "detected.yaml"));
+    await writeText(path15.join(sddDir, "profiles", "detected.yaml"), yaml2);
+    created.push(path15.join(sddDir, "profiles", "detected.yaml"));
     if (detected.best) {
       diagnostics.push(diag("ATLAS-INIT-002", "info", `Stack detectado: ${detected.best.displayName} (${detected.best.score} puntos)`, { suggestion: "Revisa .sdd/profiles/detected.yaml" }));
     } else {
       diagnostics.push(diag("ATLAS-INIT-003", "info", "No se detect\xF3 un stack conocido: se usar\xE1 el perfil gen\xE9rico", { suggestion: "Crea un perfil propio con `satlas profile` (F2) o edita .sdd/profiles/custom/" }));
     }
   }
-  await writeText(path14.join(sddDir, "INDEX.md"), initialIndex(language, cfg.project.name));
-  created.push(path14.join(sddDir, "INDEX.md"));
+  await writeText(path15.join(sddDir, "INDEX.md"), initialIndex(language, cfg.project.name));
+  created.push(path15.join(sddDir, "INDEX.md"));
   if (opts.local) {
-    const gitignore = path14.join(root, ".gitignore");
+    const gitignore = path15.join(root, ".gitignore");
     const current = await readTextIfExists(gitignore) ?? "";
     if (!/(^|\n)\.sdd\/?(\n|$)/.test(current)) {
       const next = current.endsWith("\n") || current === "" ? `${current}.sdd/
@@ -12715,7 +12826,7 @@ async function createChange(opts) {
   const diagnostics = [];
   const slug = opts.slug.trim().toLowerCase();
   const language = opts.language ?? opts.cfg?.project.language ?? "es";
-  const dir = path15.join(path15.resolve(opts.root), ".sdd", "changes", slug);
+  const dir = path16.join(path16.resolve(opts.root), ".sdd", "changes", slug);
   if (!SLUG_RE.test(slug)) {
     return {
       slug,
@@ -12746,20 +12857,20 @@ async function createChange(opts) {
   await ensureDir(dir);
   const templates = templatesFor(language);
   const files = [];
-  const metaFile = path15.join(dir, "meta.yaml");
+  const metaFile = path16.join(dir, "meta.yaml");
   await writeText(metaFile, changeMetaYaml(meta));
   files.push(metaFile);
   if (lane === "fix") {
-    const fixFile = path15.join(dir, "fix.md");
+    const fixFile = path16.join(dir, "fix.md");
     await writeText(fixFile, renderTemplate(templates.fix, { TITLE: title }));
     files.push(fixFile);
     return { slug, dir, files, diagnostics };
   }
-  const proposalFile = path15.join(dir, "proposal.md");
+  const proposalFile = path16.join(dir, "proposal.md");
   await writeText(proposalFile, renderTemplate(templates.proposal, { TITLE: title }));
   files.push(proposalFile);
   const domainUpper = domain.replace(/[^a-z0-9]/gi, "").toUpperCase() || "GEN";
-  const deltaFile = path15.join(dir, "spec.md");
+  const deltaFile = path16.join(dir, "spec.md");
   await writeText(deltaFile, templates.specDelta({ title, domainUpper, domain }));
   files.push(deltaFile);
   return { slug, dir, files, diagnostics };
@@ -12872,7 +12983,7 @@ async function restoreFile(file, previous) {
   }
 }
 async function archiveChange(opts) {
-  const root = path16.resolve(opts.root);
+  const root = path17.resolve(opts.root);
   const diagnostics = [];
   const { config } = await loadWorkspace(root);
   const language = opts.language ?? config.project.language;
@@ -12888,16 +12999,43 @@ async function archiveChange(opts) {
       return { slug: opts.slug, fold: emptyFold, diagnostics, dryRun: opts.dryRun ?? false };
     }
     const nowFix = opts.now ?? /* @__PURE__ */ new Date();
-    const targetFix = path16.join(root, ".sdd", "changes", "archive", `${localMonth(nowFix)}-${opts.slug}`);
+    const targetFix = path17.join(root, ".sdd", "changes", "archive", `${localMonth(nowFix)}-${opts.slug}`);
     if (await exists(targetFix)) {
       diagnostics.push(diag("ATLAS-ARCH-002", "error", `Ya existe un cambio archivado en ${targetFix}`, { path: targetFix }));
       return { slug: opts.slug, fold: emptyFold, diagnostics, dryRun: opts.dryRun ?? false };
     }
+    let livingFix;
+    let livingCreated = false;
+    if (!opts.dryRun) {
+      const fixRaw = await readTextIfExists(path17.join(change.dir, "fix.md")) ?? "";
+      try {
+        const written = await writeLivingFix(root, {
+          slug: opts.slug,
+          date: localDate(nowFix),
+          result: "pass",
+          ...change.meta.domain !== void 0 ? { domain: change.meta.domain } : {},
+          ...change.meta.title !== void 0 ? { title: change.meta.title } : {},
+          covers: change.fixCovers ?? [],
+          content: fixRaw
+        });
+        livingFix = written.relativePath;
+        livingCreated = written.created;
+      } catch (error) {
+        diagnostics.push(
+          diag("ATLAS-ARCH-006", "error", `No se pudo conservar el fix vivo: ${error.message}`, {
+            path: path17.join(root, ".sdd", "fixes"),
+            suggestion: "Revisa los permisos de .sdd/fixes y vuelve a intentar; el fix sigue sin archivar"
+          })
+        );
+        return { slug: opts.slug, fold: emptyFold, diagnostics, dryRun: false };
+      }
+    }
     if (!opts.dryRun) {
-      await ensureDir(path16.dirname(targetFix));
+      await ensureDir(path17.dirname(targetFix));
       try {
         await moveDirectory(change.dir, targetFix);
       } catch (error) {
+        if (livingCreated && livingFix) await removeFile(path17.join(root, livingFix));
         diagnostics.push(
           diag("ATLAS-ARCH-004", "error", `No se pudo mover el cambio al hist\xF3rico: ${error.message}`, {
             path: change.dir,
@@ -12906,9 +13044,16 @@ async function archiveChange(opts) {
         );
         return { slug: opts.slug, fold: emptyFold, diagnostics, dryRun: false };
       }
-      await regenerateIndex(root, config);
+      await regenerateIndex(root, config, nowFix);
     }
-    return { slug: opts.slug, archivedTo: targetFix, fold: emptyFold, diagnostics, dryRun: opts.dryRun ?? false };
+    return {
+      slug: opts.slug,
+      archivedTo: targetFix,
+      ...livingFix !== void 0 ? { livingFix } : {},
+      fold: emptyFold,
+      diagnostics,
+      dryRun: opts.dryRun ?? false
+    };
   }
   if (!change.delta) {
     diagnostics.push(diag("ATLAS-ARCH-003", "error", `El cambio "${opts.slug}" no tiene spec.md (delta): no hay nada que plegar`, { path: change.dir }));
@@ -12916,10 +13061,10 @@ async function archiveChange(opts) {
   }
   const domain = change.meta.domain;
   if (!domain) {
-    diagnostics.push(diag("ATLAS-ARCH-001", "error", `El cambio "${opts.slug}" no declara domain en meta.yaml`, { path: path16.join(change.dir, "meta.yaml") }));
+    diagnostics.push(diag("ATLAS-ARCH-001", "error", `El cambio "${opts.slug}" no declara domain en meta.yaml`, { path: path17.join(change.dir, "meta.yaml") }));
     return { slug: opts.slug, fold: { content: "", applied: { added: [], modified: [], removed: [], renamed: [] }, diagnostics }, diagnostics, dryRun: opts.dryRun ?? false };
   }
-  const specFile = path16.join(root, ".sdd", "specs", domain, "spec.md");
+  const specFile = path17.join(root, ".sdd", "specs", domain, "spec.md");
   const existing = await readTextIfExists(specFile);
   const base = existing ?? `---
 domain: ${domain}
@@ -12949,8 +13094,8 @@ ${Object.entries(nextFm).map(([k, v]) => `${k}: ${String(v)}`).join("\n")}
 
 ${body}`;
   const month = localMonth(now);
-  const archiveDir = path16.join(root, ".sdd", "changes", "archive");
-  const target = path16.join(archiveDir, `${month}-${opts.slug}`);
+  const archiveDir = path17.join(root, ".sdd", "changes", "archive");
+  const target = path17.join(archiveDir, `${month}-${opts.slug}`);
   if (await exists(target)) {
     diagnostics.push(diag("ATLAS-ARCH-002", "error", `Ya existe un cambio archivado en ${target}`, { path: target }));
     return { slug: opts.slug, domain, fold, diagnostics, dryRun: opts.dryRun ?? false };
@@ -12976,17 +13121,370 @@ ${body}`;
 }
 async function regenerateIndex(root, cfg, now = /* @__PURE__ */ new Date()) {
   const { workspace, config } = cfg ? { workspace: (await loadWorkspace(root)).workspace, config: cfg } : await loadWorkspace(root);
-  const archiveDir = path16.join(root, ".sdd", "changes", "archive");
+  const archiveDir = path17.join(root, ".sdd", "changes", "archive");
   const archived = await exists(archiveDir) ? (await fs.readdir(archiveDir)).filter((e) => !e.startsWith(".")).length : 0;
+  const fixes = await loadLivingFixes(root);
   const markdown2 = indexMarkdown({
     projectName: config.project.name,
     language: config.project.language,
     specs: workspace.specs.map((s) => ({ domain: s.domain, requirements: s.spec.requirements.length })),
     changes: workspace.changes.map((c) => ({ slug: c.slug, lane: c.meta?.lane ?? config.lanes.default })),
+    fixes: fixes.map((fix) => ({ slug: fix.slug, date: fix.date, result: fix.result, ...fix.domain !== void 0 ? { domain: fix.domain } : {} })),
     archived
   });
   void now;
-  await writeText(path16.join(root, ".sdd", "INDEX.md"), markdown2);
+  await writeText(path17.join(root, ".sdd", "INDEX.md"), markdown2);
+}
+async function removeFile(file) {
+  try {
+    await rm(file, { force: true });
+  } catch {
+  }
+}
+var SCHEMA_VERSION = 1;
+var BACKUP_DIRNAME = ".backup";
+var BACKUP_POINTER = ".latest";
+var SCHEMA_MIGRATIONS = [
+  {
+    id: "0001-sellar-version-de-esquema",
+    description: "Sella la versi\xF3n de esquema vigente en los elementos que no la declaran",
+    from: 0,
+    to: SCHEMA_VERSION
+  }
+];
+var FIXED_ARTIFACTS = ["config.yaml", "approvals.yaml", path18.join("profiles", "detected.yaml")];
+var CHANGE_ARTIFACTS = ["meta.yaml", path18.join("mockups", "manifest.yaml")];
+async function pushChangeArtifacts(out, sddDir, relDir) {
+  for (const rel of CHANGE_ARTIFACTS) {
+    const abs = path18.join(sddDir, relDir, rel);
+    if (await exists(abs)) out.push({ artifact: toPosix(path18.join(relDir, rel)), path: abs });
+  }
+}
+async function collectVersionedArtifacts(root) {
+  const sddDir = path18.join(root, ".sdd");
+  const out = [];
+  for (const rel of FIXED_ARTIFACTS) {
+    const abs = path18.join(sddDir, rel);
+    if (await exists(abs)) out.push({ artifact: toPosix(rel), path: abs });
+  }
+  const changesDir = path18.join(sddDir, "changes");
+  for (const slug of await listDirs(changesDir)) {
+    if (slug === "archive") continue;
+    await pushChangeArtifacts(out, sddDir, path18.join("changes", slug));
+  }
+  for (const entry of await listDirs(path18.join(changesDir, "archive"))) {
+    await pushChangeArtifacts(out, sddDir, path18.join("changes", "archive", entry));
+  }
+  return out;
+}
+function readArtifactVersion(content) {
+  let data;
+  try {
+    data = parseYaml8(content);
+  } catch (err) {
+    return { state: "unreadable", reason: `YAML inv\xE1lido (${err.message})` };
+  }
+  if (data === null || data === void 0) return { state: "absent" };
+  if (typeof data !== "object" || Array.isArray(data)) return { state: "unreadable", reason: "la ra\xEDz no es un mapa de claves y valores" };
+  const raw = data["schema_version"];
+  if (raw === void 0) return { state: "absent" };
+  if (typeof raw !== "number" || !Number.isInteger(raw) || raw < 1) return { state: "unreadable", reason: `schema_version con valor no v\xE1lido: ${String(raw)}` };
+  return { state: "ok", version: raw };
+}
+function stampSchemaVersion(content, version) {
+  const line = `schema_version: ${version}`;
+  const bom = content.startsWith("\uFEFF") ? "\uFEFF" : "";
+  const body = bom ? content.slice(1) : content;
+  if (body.trim() === "") return `${bom}${line}
+`;
+  const eol = body.includes("\r\n") ? "\r\n" : "\n";
+  const lines = body.split(/\r?\n/);
+  const trailing = lines.length > 1 && lines[lines.length - 1] === "";
+  let index = 0;
+  while (index < lines.length) {
+    const trimmed = (lines[index] ?? "").trim();
+    if (trimmed === "" || trimmed.startsWith("#")) {
+      index += 1;
+      continue;
+    }
+    break;
+  }
+  if ((lines[index] ?? "").trim() === "---") index += 1;
+  const insertAt = trailing ? Math.min(index, lines.length - 1) : index;
+  lines.splice(insertAt, 0, line);
+  const next = bom + lines.join(eol);
+  const check = readArtifactVersion(next);
+  if (check.state !== "ok" || check.version !== version) return void 0;
+  return next;
+}
+async function planUpgrade(root) {
+  const artifacts = await collectVersionedArtifacts(root);
+  const pending = [];
+  const newer = [];
+  const unreadable = [];
+  for (const found of artifacts) {
+    const content = await readTextIfExists(found.path);
+    if (content === void 0) continue;
+    const state = readArtifactVersion(content);
+    if (state.state === "unreadable") {
+      unreadable.push({ ...found, reason: state.reason });
+      continue;
+    }
+    if (state.state === "ok") {
+      if (state.version > SCHEMA_VERSION) {
+        newer.push({ ...found, reason: `produce la versi\xF3n ${state.version}, m\xE1s nueva que la vigente (${SCHEMA_VERSION})` });
+        continue;
+      }
+      if (state.version === SCHEMA_VERSION) continue;
+    }
+    const from = state.state === "ok" ? state.version : 0;
+    const migration = SCHEMA_MIGRATIONS.find((m) => m.from === from);
+    if (!migration) {
+      unreadable.push({ ...found, reason: `no hay migraci\xF3n registrada desde la versi\xF3n ${from}` });
+      continue;
+    }
+    const stamped = stampSchemaVersion(content, migration.to);
+    if (stamped === void 0) {
+      unreadable.push({ ...found, reason: "no se pudo sellar con seguridad sin alterar el resto del contenido" });
+      continue;
+    }
+    pending.push({ ...found, from, to: migration.to, migration: migration.id, summary: migration.description });
+  }
+  return { root, currentVersion: SCHEMA_VERSION, pending, newer, unreadable, upToDate: pending.length === 0 };
+}
+async function removeDir(dir) {
+  try {
+    await fs2.rm(dir, { recursive: true, force: true });
+  } catch {
+  }
+}
+async function removeFile2(file) {
+  try {
+    await fs2.rm(file, { force: true });
+  } catch {
+  }
+}
+function backupName(now) {
+  return `${localCompact(now)}${localOffset(now).replace(":", "")}`;
+}
+async function applyUpgrade(root, now = /* @__PURE__ */ new Date()) {
+  const plan = await planUpgrade(root);
+  if (plan.pending.length === 0) return { status: "up-to-date", plan, applied: [] };
+  const sddDir = path18.join(root, ".sdd");
+  const backupRoot = path18.join(sddDir, BACKUP_DIRNAME);
+  const name = backupName(now);
+  const backupDir = path18.join(backupRoot, name);
+  const pointerFile = path18.join(backupRoot, BACKUP_POINTER);
+  const previous = [];
+  try {
+    for (const item of plan.pending) {
+      const content = await readTextIfExists(item.path);
+      if (content === void 0) throw new Error("el elemento desapareci\xF3 mientras se respaldaba");
+      previous.push({ item, contents: content });
+      await writeText(path18.join(backupDir, "files", ...item.artifact.split("/")), content);
+    }
+    await writeText(
+      path18.join(backupDir, "backup.yaml"),
+      stringifyYaml6(
+        {
+          schema_version: SCHEMA_VERSION,
+          created_at: localStamp(now),
+          to_version: SCHEMA_VERSION,
+          files: plan.pending.map((i) => ({ artifact: i.artifact, from: i.from, to: i.to, migration: i.migration }))
+        },
+        { lineWidth: 120 }
+      )
+    );
+    await writeText(pointerFile, `${name}
+`);
+  } catch (err) {
+    await removeDir(backupDir);
+    await removeFile2(pointerFile);
+    return { status: "failed", plan, applied: [], failure: { artifact: "(respaldo)", message: err.message } };
+  }
+  const written = [];
+  for (const { item, contents } of previous) {
+    try {
+      const next = stampSchemaVersion(contents, item.to);
+      if (next === void 0) throw new Error("no se pudo sellar con seguridad");
+      await writeText(item.path, next);
+      written.push(item);
+    } catch (err) {
+      for (const w of written) {
+        const prev = previous.find((p) => p.item.artifact === w.artifact);
+        if (prev) {
+          try {
+            await writeText(prev.item.path, prev.contents);
+          } catch {
+          }
+        }
+      }
+      await removeFile2(pointerFile);
+      await removeDir(backupDir);
+      return { status: "failed", plan, applied: [], failure: { artifact: item.artifact, message: err.message } };
+    }
+  }
+  for (const dir of await listDirs(backupRoot)) {
+    if (dir !== name) await removeDir(path18.join(backupRoot, dir));
+  }
+  return {
+    status: "applied",
+    plan,
+    applied: written,
+    backup: {
+      name,
+      dir: backupDir,
+      relativeDir: toPosix(path18.relative(root, backupDir)),
+      createdAt: localStamp(now),
+      files: plan.pending.map((i) => i.artifact)
+    }
+  };
+}
+async function rollbackUpgrade(root) {
+  const sddDir = path18.join(root, ".sdd");
+  const backupRoot = path18.join(sddDir, BACKUP_DIRNAME);
+  const pointerFile = path18.join(backupRoot, BACKUP_POINTER);
+  const name = (await readTextIfExists(pointerFile))?.trim();
+  if (!name) return { status: "no-backup", restored: [] };
+  const backupDir = path18.join(backupRoot, name);
+  const manifestRaw = await readTextIfExists(path18.join(backupDir, "backup.yaml"));
+  if (manifestRaw === void 0) return { status: "no-backup", restored: [] };
+  let files = [];
+  try {
+    const parsed = parseYaml8(manifestRaw);
+    files = (parsed?.files ?? []).filter((f) => typeof f?.artifact === "string");
+  } catch {
+    return { status: "no-backup", restored: [] };
+  }
+  const restored = [];
+  for (const file of files) {
+    const from = path18.join(backupDir, "files", ...file.artifact.split("/"));
+    const to = path18.join(sddDir, ...file.artifact.split("/"));
+    const content = await readTextIfExists(from);
+    if (content === void 0) continue;
+    try {
+      await writeText(to, content);
+      restored.push(file.artifact);
+    } catch (err) {
+      return { status: "failed", restored, backup: name, failure: { artifact: file.artifact, message: err.message } };
+    }
+  }
+  await removeDir(backupDir);
+  await removeFile2(pointerFile);
+  return { status: "restored", restored, backup: name };
+}
+async function upgradeAdvisory(root) {
+  const plan = await planUpgrade(root);
+  const diagnostics = [];
+  if (plan.pending.length > 0) {
+    diagnostics.push(
+      diag("ATLAS-UPGRADE-001", "warning", `El estado del proyecto no corresponde a la versi\xF3n vigente: ${plan.pending.length} elemento(s) por actualizar`, {
+        suggestion: "Vista previa: `satlas upgrade` \xB7 Aplicar: `satlas upgrade --apply`"
+      })
+    );
+  }
+  for (const item of plan.newer) {
+    diagnostics.push(
+      diag("ATLAS-UPGRADE-002", "warning", `El proyecto fue producido por una versi\xF3n m\xE1s nueva: "${item.artifact}" (${item.reason})`, {
+        path: item.path,
+        suggestion: "Actualiza la herramienta; no se actualiza hacia atr\xE1s"
+      })
+    );
+  }
+  for (const item of plan.unreadable) {
+    diagnostics.push(
+      diag("ATLAS-UPGRADE-003", "warning", `No se pudo interpretar "${item.artifact}": ${item.reason}`, {
+        path: item.path,
+        suggestion: "Revisa el elemento; no se modificar\xE1"
+      })
+    );
+  }
+  return { plan, diagnostics };
+}
+var SARIF_SCHEMA = "https://json.schemastore.org/sarif-2.1.0.json";
+var SARIF_VERSION = "2.1.0";
+var TOOL_NAME = "SpecAtlas";
+var TOOL_URL = "https://github.com/AlonsoAM/specatlas";
+var RULE_FAMILIES = [
+  [/^LINT-STR-/, "Estructura de los artefactos"],
+  [/^LINT-BIZ-/, "Lenguaje de negocio de la especificaci\xF3n"],
+  [/^LINT-DLT-/, "Delta de especificaci\xF3n"],
+  [/^LINT-EVD-/, "Evidencia registrada"],
+  [/^LINT-TSK-/, "Tareas declaradas"],
+  [/^LINT-PLN-/, "Plan t\xE9cnico"],
+  [/^(LINT-MKP|MKP)-/, "Mockups"],
+  [/^TRACE-/, "Trazabilidad requisito, escenario, tarea y evidencia"],
+  [/^PACK-/, "Pack de cumplimiento"],
+  [/^ATLAS-UPGRADE-/, "Actualizaci\xF3n del estado del proyecto"],
+  [/^ATLAS-ADAPTERS-/, "Adaptadores de agente"],
+  [/^ATLAS-CI-/, "Comprobaci\xF3n continua"],
+  [/^ATLAS-/, "Estado del proyecto"]
+];
+function ruleDescription(code) {
+  for (const [pattern, description] of RULE_FAMILIES) {
+    if (pattern.test(code)) return description;
+  }
+  return code;
+}
+function sarifLevel(severity) {
+  if (severity === "error") return "error";
+  if (severity === "warning") return "warning";
+  return "note";
+}
+function resultOf(diagnostic, root) {
+  const result = {
+    ruleId: diagnostic.code,
+    level: sarifLevel(diagnostic.severity),
+    message: { text: diagnostic.message }
+  };
+  if (diagnostic.path) {
+    const rel = path19.relative(root, diagnostic.path);
+    if (rel !== "") {
+      const physicalLocation = {
+        artifactLocation: { uri: toPosix(rel) },
+        ...diagnostic.line ? { region: { startLine: diagnostic.line } } : {}
+      };
+      result.locations = [{ physicalLocation }];
+    }
+  }
+  return result;
+}
+function toSarifReport(opts) {
+  const rules = /* @__PURE__ */ new Map();
+  const results = [];
+  for (const diagnostic of opts.diagnostics) {
+    let rule = rules.get(diagnostic.code);
+    if (!rule) {
+      rule = { id: diagnostic.code, shortDescription: { text: ruleDescription(diagnostic.code) } };
+      if (diagnostic.suggestion) rule.help = { text: diagnostic.suggestion };
+      rules.set(diagnostic.code, rule);
+    } else if (!rule.help && diagnostic.suggestion) {
+      rule.help = { text: diagnostic.suggestion };
+    }
+    results.push(resultOf(diagnostic, opts.root));
+  }
+  return {
+    $schema: SARIF_SCHEMA,
+    version: SARIF_VERSION,
+    runs: [
+      {
+        tool: {
+          driver: {
+            name: TOOL_NAME,
+            informationUri: TOOL_URL,
+            version: opts.version,
+            rules: [...rules.values()]
+          }
+        },
+        results,
+        invocations: [{ executionSuccessful: !(opts.failed ?? false) }]
+      }
+    ]
+  };
+}
+function toSarifText(opts) {
+  return `${JSON.stringify(toSarifReport(opts), null, 2)}
+`;
 }
 async function runDoctor(root) {
   const findings = [];
@@ -12995,7 +13493,7 @@ async function runDoctor(root) {
   const approvals = await loadApprovals(workspace.sddDir);
   findings.push(...approvals.diagnostics);
   for (const change of workspace.changes) {
-    const deltaPath = path17.join(change.dir, "spec.md");
+    const deltaPath = path20.join(change.dir, "spec.md");
     const deltaContent = await readTextIfExists(deltaPath);
     const approval = verifyApproval(change, approvals.byArtifact, config, deltaContent ?? void 0);
     if ((change.planPath || change.tasks) && (approval.status === "missing" || approval.status === "stale")) {
@@ -13017,7 +13515,7 @@ async function runDoctor(root) {
     }
     for (const override of change.meta?.overrides ?? []) {
       if (!override.reason.trim() || !override.by.trim()) {
-        findings.push(diag("ATLAS-LIFECYCLE-004", "error", `Override del gate "${override.gate}" sin motivo o autor`, { path: path17.join(change.dir, "meta.yaml") }));
+        findings.push(diag("ATLAS-LIFECYCLE-004", "error", `Override del gate "${override.gate}" sin motivo o autor`, { path: path20.join(change.dir, "meta.yaml") }));
       }
     }
   }
@@ -13049,7 +13547,7 @@ function livingRequirementsMap(specs) {
   return map;
 }
 async function runCiGate(opts) {
-  const root = path18.resolve(opts.root);
+  const root = path21.resolve(opts.root);
   const { workspace, config } = await loadWorkspace(root);
   const diagnostics = [];
   const checks = [];
@@ -13060,7 +13558,7 @@ async function runCiGate(opts) {
   let changesErrors = 0;
   let changesWarnings = 0;
   for (const change of workspace.changes) {
-    const lintFindings = change.delta ? lintDelta(change.delta, living, path18.join(change.dir, "spec.md"), { language: config.spec.language }) : [];
+    const lintFindings = change.delta ? lintDelta(change.delta, living, path21.join(change.dir, "spec.md"), { language: config.spec.language }) : [];
     const trace = checkTrace({
       specs: workspace.specs,
       change,
@@ -13169,6 +13667,7 @@ var CATALOG = [
   { name: "trace", description: "Verifica la trazabilidad requisito \u2192 escenario \u2192 tarea \u2192 evidencia", flags: ["change", "require-evidence", "json"], usage: "satlas trace [--change <slug>] [--require-evidence] [--json]" },
   { name: "waves", description: "Calcula las olas paralelas de construcci\xF3n", flags: ["change", "max-parallel", "json"], usage: "satlas waves [--change <slug>] [--max-parallel N] [--json]" },
   { name: "doctor", description: "Diagn\xF3stico de salud del workspace", flags: ["json"], usage: "satlas doctor [--json]" },
+  { name: "upgrade", description: "Actualiza el estado del proyecto a la versi\xF3n vigente (vista previa por defecto)", flags: ["apply", "rollback", "json"], usage: "satlas upgrade [--apply | --rollback] [--json]" },
   { name: "approve", description: "Firma la aprobaci\xF3n de un artefacto (spec): local o desde la etiqueta de un issue de GitHub", flags: ["by", "channel", "note", "dry-run", "from-github", "label", "json"], usage: 'satlas approve <slug|ruta> --by "<nombre>" | satlas approve <slug> --from-github' },
   { name: "issue", description: "Sincroniza el cambio con un issue de GitHub (tracker, no gate)", flags: ["labels", "json"], usage: "satlas issue sync <slug> [--labels a,b] | satlas issue status <slug>" },
   { name: "adapters", description: "Compila (o verifica) los prompts a artefactos de agente", flags: ["targets", "check", "json"], usage: "satlas adapters [--targets opencode,claude-code,cursor,copilot,gemini,codex,generic] [--check]" },
@@ -13179,7 +13678,7 @@ var CATALOG = [
   { name: "analyze", description: "Chequeo cruzado (lint + trace + waves + mockups) y escribe analyze.md", flags: ["json"], usage: "satlas analyze <slug>" },
   { name: "mockup", description: "Planifica, valida o captura los mockups del cambio", flags: ["plan", "check", "capture", "require", "json"], usage: "satlas mockup <slug> [--plan|--check|--capture|--require]" },
   { name: "present", description: "Genera el paquete de propuesta para el stakeholder (HTML autocontenido)", flags: ["json"], usage: "satlas present <slug>" },
-  { name: "ci", description: "Gate de pipeline: specs + cambios + doctor + adaptadores (sin agente)", flags: ["strict", "json"], usage: "satlas ci [--strict]" },
+  { name: "ci", description: "Gate de pipeline: specs + cambios + doctor + adaptadores (sin agente)", flags: ["strict", "sarif", "json"], usage: "satlas ci [--strict] [--sarif <ruta>]" },
   { name: "mcp", description: "V\xEDa de consulta de solo lectura para asistentes (protocolo MCP sobre entrada/salida est\xE1ndar)", flags: [], usage: "satlas mcp" },
   { name: "metrics", description: "M\xE9tricas locales del workspace (progreso, WIP, throughput, evidencia)", flags: ["json"], usage: "satlas metrics [--json]" },
   { name: "run", description: "Persiste runs y eventos de ejecuci\xF3n (auditor\xEDa y reanudaci\xF3n)", flags: ["phase", "inputs", "data", "slug", "status", "json"], usage: "satlas run start|event|status|show|list" },
@@ -13201,6 +13700,7 @@ var ES2 = {
   "status.title": "Estado de los cambios",
   "status.changes": "Cambios activos",
   "status.specs": "Specs vivas",
+  "status.fixes": "Fixes vivos",
   "status.next": "siguiente:",
   "status.tasks": "tareas",
   "status.evidence": "evidencia",
@@ -13216,6 +13716,8 @@ var ES2 = {
   "init.done": "Workspace SDD creado.",
   "new.title": "Nuevo cambio",
   "new.done": "Cambio creado. Siguiente: escribe la spec funcional.",
+  "upgrade.title": "Actualizar el estado del proyecto",
+  "upgrade.preview": "Vista previa",
   "summary.findings": "hallazgos",
   "label.errors": "errores",
   "label.warnings": "avisos",
@@ -13233,6 +13735,7 @@ var EN2 = {
   "status.title": "Change status",
   "status.changes": "Active changes",
   "status.specs": "Living specs",
+  "status.fixes": "Living fixes",
   "status.next": "next:",
   "status.tasks": "tasks",
   "status.evidence": "evidence",
@@ -13248,6 +13751,8 @@ var EN2 = {
   "init.done": "SDD workspace created.",
   "new.title": "New change",
   "new.done": "Change created. Next: write the business spec.",
+  "upgrade.title": "Upgrade project state",
+  "upgrade.preview": "Preview",
   "summary.findings": "findings",
   "label.errors": "errors",
   "label.warnings": "warnings",
@@ -13275,26 +13780,26 @@ function cliVersion() {
 }
 
 // src/commands/adapters.ts
-import path21 from "path";
+import path25 from "path";
 
 // ../adapters/dist/index.js
-import path19 from "path";
-import { stringify as stringifyYaml5 } from "yaml";
 import path22 from "path";
+import { stringify as stringifyYaml7 } from "yaml";
+import path23 from "path";
 async function loadWorkflow(workflowDir) {
-  const phasesDir = path19.join(workflowDir, "phases");
-  const snippetsDir = path19.join(workflowDir, "snippets");
+  const phasesDir = path22.join(workflowDir, "phases");
+  const snippetsDir = path22.join(workflowDir, "snippets");
   const phases = [];
   const snippets = /* @__PURE__ */ new Map();
   const hashParts = [];
   for (const entry of (await listDir(phasesDir)).sort()) {
     if (!entry.endsWith(".md")) continue;
-    const filePath = path19.join(phasesDir, entry);
+    const filePath = path22.join(phasesDir, entry);
     const raw = await readText(filePath);
     hashParts.push(raw);
     const fm = parseFrontmatter(raw, filePath);
     const data = fm.data;
-    const id = typeof data["id"] === "string" ? data["id"] : path19.basename(entry, ".md");
+    const id = typeof data["id"] === "string" ? data["id"] : path22.basename(entry, ".md");
     phases.push({
       id,
       title: typeof data["title"] === "string" ? data["title"] : id,
@@ -13308,9 +13813,9 @@ async function loadWorkflow(workflowDir) {
   }
   for (const entry of (await listDir(snippetsDir)).sort()) {
     if (!entry.endsWith(".md")) continue;
-    const raw = await readTextIfExists(path19.join(snippetsDir, entry)) ?? "";
+    const raw = await readTextIfExists(path22.join(snippetsDir, entry)) ?? "";
     hashParts.push(raw);
-    snippets.set(path19.basename(entry, ".md"), raw.trim());
+    snippets.set(path22.basename(entry, ".md"), raw.trim());
   }
   return { phases: phases.sort((a, b) => a.id.localeCompare(b.id)), snippets, sourceHash: sha256(hashParts.join("\n---\n")) };
 }
@@ -13334,7 +13839,7 @@ function vars(language, slugToken, commandPrefix) {
   return { SLUG: slugToken, LANGUAGE: language, LANGUAGE_NAME: LANGUAGE_NAMES[language], SDD_DIR: ".sdd", COMMAND_PREFIX: commandPrefix };
 }
 function frontmatter(data, body) {
-  const yaml2 = stringifyYaml5(data, { lineWidth: 0 }).trimEnd();
+  const yaml2 = stringifyYaml7(data, { lineWidth: 0 }).trimEnd();
   return `---
 ${yaml2}
 ---
@@ -13492,11 +13997,11 @@ Reglas: la spec es funcional y de negocio (sin tecnolog\xEDa); la trazabilidad e
 function tomlString(value) {
   return `"${value.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
 }
-var MANIFEST_REL = path22.join(".sdd", ".generated", "manifest.json");
+var MANIFEST_REL = path23.join(".sdd", ".generated", "manifest.json");
 var BEGIN = "<!-- BEGIN specatlas -->";
 var END = "<!-- END specatlas -->";
 async function compileTargets(opts) {
-  const root = path22.resolve(opts.root);
+  const root = path23.resolve(opts.root);
   const language = opts.language ?? "es";
   const diagnostics = [];
   const sources = await loadWorkflow(opts.workflowDir);
@@ -13504,7 +14009,7 @@ async function compileTargets(opts) {
     diagnostics.push({
       code: "ATLAS-ADAPTERS-002",
       severity: "error",
-      message: `No hay fases en ${path22.join(opts.workflowDir, "phases")}`,
+      message: `No hay fases en ${path23.join(opts.workflowDir, "phases")}`,
       suggestion: "Revisa la carpeta workflow/phases del proyecto"
     });
   }
@@ -13516,7 +14021,7 @@ async function compileTargets(opts) {
     }
   }
   const compiled = [...deduped.values()];
-  const manifestPath = path22.join(root, MANIFEST_REL);
+  const manifestPath = path23.join(root, MANIFEST_REL);
   const previous = await readManifest(manifestPath);
   const previousHashes = /* @__PURE__ */ new Map();
   for (const files2 of Object.values(previous?.targets ?? {})) {
@@ -13527,7 +14032,7 @@ async function compileTargets(opts) {
   const stale = [];
   const missing = [];
   for (const file of compiled) {
-    const abs = path22.join(root, file.path);
+    const abs = path23.join(root, file.path);
     const finalContent = file.path === "AGENTS.md" ? mergeAgentsBlock(await readTextIfExists(abs) ?? "", file.content) : file.content;
     const hash = artifactHash(finalContent);
     const existing = await readTextIfExists(abs);
@@ -13543,7 +14048,7 @@ async function compileTargets(opts) {
       stale.push(file.path);
     }
     if (!opts.check && status !== "unchanged") {
-      await ensureDir(path22.dirname(abs));
+      await ensureDir(path23.dirname(abs));
       await writeText(abs, finalContent);
       written.push(file.path);
     }
@@ -13597,7 +14102,7 @@ async function readManifest(manifestPath) {
   }
 }
 async function checkAdapters(opts) {
-  const manifestPath = path22.join(path22.resolve(opts.root), MANIFEST_REL);
+  const manifestPath = path23.join(path23.resolve(opts.root), MANIFEST_REL);
   const manifestRaw = await readTextIfExists(manifestPath);
   if (manifestRaw === void 0) return { ok: false, manifest: false, stale: [], missing: [], orphaned: [] };
   const manifest = await readManifest(manifestPath);
@@ -13614,7 +14119,7 @@ async function checkAdapters(opts) {
 }
 
 // src/paths.ts
-import path20 from "path";
+import path24 from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 async function resolveProfilesDir() {
   const env = process.env["SPECATLAS_PROFILES_DIR"];
@@ -13624,16 +14129,16 @@ async function resolveProfilesDir() {
 async function resolveWorkflowDir() {
   const env = process.env["SPECATLAS_WORKFLOW_DIR"];
   if (env && await exists(env)) return env;
-  return walkUpFor(path20.join("workflow", "phases"));
+  return walkUpFor(path24.join("workflow", "phases"));
 }
 async function walkUpFor(relative) {
-  let dir = path20.dirname(fileURLToPath2(import.meta.url));
+  let dir = path24.dirname(fileURLToPath2(import.meta.url));
   for (let i = 0; i < 8; i += 1) {
-    const candidate = path20.join(dir, relative);
+    const candidate = path24.join(dir, relative);
     if (await exists(candidate)) {
-      return relative.includes(path20.sep) ? path20.dirname(candidate) : candidate;
+      return relative.includes(path24.sep) ? path24.dirname(candidate) : candidate;
     }
-    const parent = path20.dirname(dir);
+    const parent = path24.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
@@ -13711,7 +14216,7 @@ async function runAdapters(ctx) {
   for (const [target, count2] of byTarget) lines.push(`  ${target}: ${count2} archivo(s)`);
   if (report.written.length > 0) {
     lines.push("");
-    for (const p of report.written) lines.push(`  + ${path21.relative(ctx.cwd, path21.join(root, p))}`);
+    for (const p of report.written) lines.push(`  + ${path25.relative(ctx.cwd, path25.join(root, p))}`);
   } else {
     lines.push("");
     lines.push("Sin cambios: los adaptadores ya estaban al d\xEDa.");
@@ -13722,7 +14227,7 @@ async function runAdapters(ctx) {
 }
 
 // src/commands/adopt.ts
-import path23 from "path";
+import path26 from "path";
 async function runAdopt(ctx) {
   const { root } = await requireWorkspace(ctx);
   const domainsFlag = flagString(ctx.flags, "domains") ?? flagString(ctx.flags, "domain");
@@ -13742,11 +14247,11 @@ async function runAdopt(ctx) {
   }
   if (result.createdSpecs.length > 0) {
     lines.push("");
-    for (const spec of result.createdSpecs) lines.push(`  ${result.dryRun ? "[dry-run] " : "+ "}${path23.relative(ctx.cwd, spec)}`);
+    for (const spec of result.createdSpecs) lines.push(`  ${result.dryRun ? "[dry-run] " : "+ "}${path26.relative(ctx.cwd, spec)}`);
   }
   if (result.reportPath && !result.dryRun) {
     lines.push("");
-    lines.push(`  Informe: ${path23.relative(ctx.cwd, result.reportPath)}`);
+    lines.push(`  Informe: ${path26.relative(ctx.cwd, result.reportPath)}`);
   }
   lines.push("");
   lines.push("Siguiente: fase /satlas-adopt por dominio (requisitos AS-IS) y luego:");
@@ -13759,8 +14264,8 @@ async function runAdopt(ctx) {
     diagnostics: result.diagnostics,
     data: {
       domains: result.domains.map((d) => ({ name: d.name, files: d.files, existingSpec: d.existingSpec })),
-      createdSpecs: result.createdSpecs.map((s) => path23.relative(ctx.cwd, s)),
-      reportPath: result.reportPath ? path23.relative(ctx.cwd, result.reportPath) : void 0,
+      createdSpecs: result.createdSpecs.map((s) => path26.relative(ctx.cwd, s)),
+      reportPath: result.reportPath ? path26.relative(ctx.cwd, result.reportPath) : void 0,
       stack: result.stack,
       dryRun: result.dryRun
     },
@@ -13769,7 +14274,7 @@ async function runAdopt(ctx) {
 }
 
 // src/commands/analyze.ts
-import path24 from "path";
+import path27 from "path";
 async function runAnalyzeCommand(ctx) {
   const { root } = await requireWorkspace(ctx);
   const slug = ctx.positionals[0];
@@ -13780,23 +14285,23 @@ async function runAnalyzeCommand(ctx) {
   const lines = [`An\xE1lisis \u2014 ${slug}`, "", `  estado: ${result.status}`, `  hallazgos: ${result.summary.errors} errores, ${result.summary.warnings} avisos`, `  evidencia: ${result.evidence.done}/${result.evidence.total} escenarios`];
   if (result.waves) lines.push(`  olas: ${result.waves.blocks} bloque(s), ${result.waves.waves} ola(s), ${result.waves.tasks} tarea(s)`);
   if (result.mockups) lines.push(`  mockups: ${result.mockups.screens} pantalla(s)${result.mockups.stale ? " (desactualizados)" : ""}`);
-  if (result.path) lines.push("", `  informe: ${path24.relative(ctx.cwd, result.path)}`);
+  if (result.path) lines.push("", `  informe: ${path27.relative(ctx.cwd, result.path)}`);
   for (const finding of result.findings) {
     lines.push(`  ${finding.severity.toUpperCase()} ${finding.code} \u2014 ${finding.message}`);
   }
   return {
     exitCode: result.status === "blocked" ? 1 : 0,
     diagnostics: result.findings,
-    data: result.path ? { ...result, path: path24.relative(ctx.cwd, result.path) } : result,
+    data: result.path ? { ...result, path: path27.relative(ctx.cwd, result.path) } : result,
     text: lines
   };
 }
 
 // src/commands/approve.ts
-import path26 from "path";
+import path29 from "path";
 
 // src/commands/issue.ts
-import path25 from "path";
+import path28 from "path";
 async function runIssue(ctx) {
   const action = ctx.positionals[0] ?? "status";
   const slug = ctx.positionals[1];
@@ -13824,7 +14329,7 @@ async function runIssue(ctx) {
       return { exitCode: 2, diagnostics: [{ code: "ATLAS-ISSUE-000", severity: "error", message: "Falta el slug: satlas issue status <slug>" }] };
     }
     const change = await loadChange(root, slug);
-    const { config } = await loadConfig(path25.join(root, ".sdd"));
+    const { config } = await loadConfig(path28.join(root, ".sdd"));
     const tracker = change.meta?.tracker;
     const lines = [`Issue de ${slug}`, ""];
     if (!tracker || tracker.provider !== "github") {
@@ -13895,7 +14400,7 @@ async function runApprove(ctx) {
     };
   }
   const { root, workspace, config } = await requireWorkspace(ctx);
-  const artifact = target.includes("/") || target.includes("\\") ? target : path26.join("changes", target, "spec.md");
+  const artifact = target.includes("/") || target.includes("\\") ? target : path29.join("changes", target, "spec.md");
   const channelFlag = flagString(ctx.flags, "channel");
   const channel = channelFlag === "presentation" || channelFlag === "editor" || channelFlag === "pr" || channelFlag === "tracker" ? channelFlag : "cli";
   const change = workspace.changes.find(
@@ -13936,13 +14441,13 @@ async function runApprove(ctx) {
   return {
     exitCode: hasErrors2 ? 1 : 0,
     diagnostics: result.diagnostics,
-    data: result.approval ? { ...result.approval, file: path26.relative(ctx.cwd, result.file) } : void 0,
+    data: result.approval ? { ...result.approval, file: path29.relative(ctx.cwd, result.file) } : void 0,
     text: lines
   };
 }
 
 // src/commands/archive.ts
-import path27 from "path";
+import path30 from "path";
 async function runArchive(ctx) {
   const slug = ctx.positionals[0];
   if (!slug) {
@@ -13966,29 +14471,35 @@ async function runArchive(ctx) {
   }
   const result = await archiveChange({ root, slug, language: config.project.language, dryRun });
   const lines = [msg("archive.title", ctx.language), ""];
-  if (result.fold.applied.added.length + result.fold.applied.modified.length + result.fold.applied.removed.length + result.fold.applied.renamed.length > 0) {
+  const operations = result.fold.applied.added.length + result.fold.applied.modified.length + result.fold.applied.removed.length + result.fold.applied.renamed.length;
+  if (operations > 0) {
     lines.push(`${dryRun ? "[dry-run] " : ""}${msg("archive.done", ctx.language)}`);
     lines.push(`  agregados: ${result.fold.applied.added.join(", ") || "\u2014"}`);
     lines.push(`  modificados: ${result.fold.applied.modified.join(", ") || "\u2014"}`);
     lines.push(`  eliminados: ${result.fold.applied.removed.join(", ") || "\u2014"}`);
     lines.push(`  renombrados: ${result.fold.applied.renamed.join(", ") || "\u2014"}`);
-    if (result.archivedTo) lines.push(`  archivado en: ${path27.relative(ctx.cwd, result.archivedTo)}`);
+  } else if (result.livingFix) {
+    lines.push(`${dryRun ? "[dry-run] " : ""}Fix archivado y conservado como fix vivo.`);
+    lines.push(`  fix vivo: ${result.livingFix}`);
   } else {
     lines.push("El delta no contiene operaciones (ADDED/MODIFIED/REMOVED/RENAMED).");
   }
+  if (result.archivedTo) lines.push(`  archivado en: ${path30.relative(ctx.cwd, result.archivedTo)}`);
   const hasErrors2 = result.diagnostics.some((d) => d.severity === "error");
   return {
     exitCode: hasErrors2 ? 1 : 0,
     diagnostics: result.diagnostics,
-    data: { slug: result.slug, domain: result.domain, archivedTo: result.archivedTo, applied: result.fold.applied, dryRun: result.dryRun },
+    data: { slug: result.slug, domain: result.domain, archivedTo: result.archivedTo, livingFix: result.livingFix, applied: result.fold.applied, dryRun: result.dryRun },
     text: lines
   };
 }
 
 // src/commands/ci.ts
+import path31 from "path";
 async function runCi(ctx) {
   const { root, config } = await requireWorkspace(ctx);
   const strict = flagBool(ctx.flags, "strict");
+  const sarifPath = flagString(ctx.flags, "sarif");
   const extra = [];
   const workflowDir = await resolveWorkflowDir();
   if (workflowDir) {
@@ -14006,28 +14517,54 @@ async function runCi(ctx) {
     });
   }
   const gate = await runCiGate({ root, strict, extra });
+  const diagnostics = [...gate.diagnostics];
   const lines = ["CI de SpecAtlas", ""];
+  let sarifWritten;
+  if (sarifPath) {
+    const target = path31.resolve(ctx.cwd, sarifPath);
+    try {
+      await writeText(target, toSarifText({ diagnostics: gate.diagnostics, root, version: cliVersion(), failed: gate.failed }));
+      sarifWritten = path31.relative(ctx.cwd, target);
+    } catch (err) {
+      diagnostics.push({
+        code: "ATLAS-CI-SARIF-001",
+        severity: "warning",
+        message: `No se pudo escribir el informe SARIF en "${sarifPath}": ${err.message}`,
+        suggestion: "Revisa que la ruta sea escribible; el veredicto de la comprobaci\xF3n no cambia"
+      });
+    }
+  }
   for (const check of gate.checks) {
     lines.push(`  ${check.errors === 0 && check.warnings === 0 ? "OK  " : "FALLA"} ${check.name}: ${check.errors} errores, ${check.warnings} avisos`);
   }
   lines.push("");
   lines.push(gate.failed ? "Resultado: BLOQUEADO" : "Resultado: OK");
   if (strict) lines.push("(modo estricto: los avisos tambi\xE9n bloquean)");
+  if (sarifPath) {
+    lines.push(sarifWritten ? `Informe SARIF: ${sarifWritten} (${gate.diagnostics.length} hallazgo(s))` : `Informe SARIF: no se pudo escribir en "${sarifPath}"`);
+  }
   return {
     exitCode: gate.failed ? 1 : 0,
-    diagnostics: gate.diagnostics,
-    data: { checks: gate.checks, errors: gate.errors, warnings: gate.warnings, strict, failed: gate.failed },
+    diagnostics,
+    data: {
+      checks: gate.checks,
+      errors: gate.errors,
+      warnings: gate.warnings,
+      strict,
+      failed: gate.failed,
+      ...sarifWritten ? { sarif: sarifWritten } : {}
+    },
     text: lines
   };
 }
 
 // src/commands/profile.ts
-import path28 from "path";
+import path32 from "path";
 async function runProfile(ctx) {
   const action = ctx.positionals[0] ?? "detect";
   const { root, workspace } = await requireWorkspace(ctx);
   const officialDir = await resolveProfilesDir();
-  const customDir = path28.join(workspace.sddDir, "profiles", "custom");
+  const customDir = path32.join(workspace.sddDir, "profiles", "custom");
   const profiles = [...officialDir ? await loadProfilesFromDir(officialDir) : [], ...await loadProfilesFromDir(customDir)];
   if (action === "detect") {
     const result = await detectProfiles(root, profiles);
@@ -14056,7 +14593,7 @@ async function runProfile(ctx) {
     if (!name) {
       return { exitCode: 2, diagnostics: [{ code: "ATLAS-PROFILE-001", severity: "error", message: "Falta el nombre del perfil: satlas profile create <nombre>" }] };
     }
-    const file = path28.join(customDir, `${name}.yaml`);
+    const file = path32.join(customDir, `${name}.yaml`);
     if (await exists(file)) {
       return { exitCode: 2, diagnostics: [{ code: "ATLAS-PROFILE-002", severity: "error", message: `El perfil ya existe: ${file}` }] };
     }
@@ -14065,7 +14602,7 @@ async function runProfile(ctx) {
       exitCode: 0,
       diagnostics: [],
       data: { file },
-      text: [`Perfil creado: ${path28.relative(ctx.cwd, file)}`, "", "Ed\xEDtalo con los comandos reales de tu stack (build/lint/test) y tus anti-patrones."]
+      text: [`Perfil creado: ${path32.relative(ctx.cwd, file)}`, "", "Ed\xEDtalo con los comandos reales de tu stack (build/lint/test) y tus anti-patrones."]
     };
   }
   return {
@@ -14074,7 +14611,7 @@ async function runProfile(ctx) {
   };
 }
 async function isInside(dir, name) {
-  return exists(path28.join(dir, `${name}.yaml`));
+  return exists(path32.join(dir, `${name}.yaml`));
 }
 function profileTemplate(name) {
   return `name: ${name}
@@ -14102,7 +14639,7 @@ assumptions: []
 }
 
 // src/commands/doctor.ts
-import path29 from "path";
+import path33 from "path";
 async function runDoctorCommand(ctx) {
   const { root, config } = await requireWorkspace(ctx);
   const report = await runDoctor(root);
@@ -14119,12 +14656,15 @@ async function runDoctorCommand(ctx) {
       report.summary.warnings += 1;
     }
   }
+  const advisory = await upgradeAdvisory(root);
+  report.findings.push(...advisory.diagnostics);
+  report.summary = countBySeverity(report.findings);
   const lines = [msg("doctor.title", ctx.language), ""];
   if (report.findings.length === 0) {
     lines.push("Sin hallazgos. El workspace est\xE1 sano.");
   } else {
     for (const finding of report.findings) {
-      const location = finding.path ? ` ${path29.relative(ctx.cwd, finding.path)}${finding.line ? `:${finding.line}` : ""}` : "";
+      const location = finding.path ? ` ${path33.relative(ctx.cwd, finding.path)}${finding.line ? `:${finding.line}` : ""}` : "";
       lines.push(`  ${finding.severity.toUpperCase()}  ${finding.code}${location} \u2014 ${finding.message}`);
       if (finding.suggestion) lines.push(`       \u21B3 ${finding.suggestion}`);
     }
@@ -14198,7 +14738,7 @@ async function runHelp(ctx, commandName) {
 }
 
 // src/commands/init.ts
-import path30 from "path";
+import path34 from "path";
 async function runInit(ctx) {
   const languageFlag = flagString(ctx.flags, "language");
   const language = languageFlag === "en" ? "en" : languageFlag === "es" ? "es" : void 0;
@@ -14245,11 +14785,11 @@ async function runInit(ctx) {
   const lines = [msg("init.title", ctx.language), ""];
   if (result.created.length > 0) {
     lines.push(msg("init.done", ctx.language));
-    for (const file of result.created) lines.push(`  + ${path30.relative(ctx.cwd, file)}`);
+    for (const file of result.created) lines.push(`  + ${path34.relative(ctx.cwd, file)}`);
     if (compiled.length > 0) {
       lines.push("");
       lines.push("Adaptadores compilados:");
-      for (const file of compiled) lines.push(`  + ${path30.relative(ctx.cwd, path30.join(ctx.cwd, file))}`);
+      for (const file of compiled) lines.push(`  + ${path34.relative(ctx.cwd, path34.join(ctx.cwd, file))}`);
     }
     lines.push("");
     lines.push("Siguiente: crea un cambio con `satlas new <slug>` y escribe la spec funcional.");
@@ -14259,8 +14799,8 @@ async function runInit(ctx) {
     exitCode: hasErrors2 ? 1 : 0,
     diagnostics: result.diagnostics,
     data: {
-      sddDir: path30.relative(ctx.cwd, result.sddDir),
-      created: result.created.map((f) => path30.relative(ctx.cwd, f)),
+      sddDir: path34.relative(ctx.cwd, result.sddDir),
+      created: result.created.map((f) => path34.relative(ctx.cwd, f)),
       detected: result.detected?.matches.map((m) => ({ name: m.name, score: m.score })),
       best: result.detected?.best?.name
     },
@@ -14301,7 +14841,7 @@ async function runMetrics(ctx) {
 }
 
 // src/commands/mockup.ts
-import path31 from "path";
+import path35 from "path";
 async function runMockup(ctx) {
   const { root, workspace, config } = await requireWorkspace(ctx);
   const slug = ctx.positionals[0];
@@ -14350,17 +14890,17 @@ async function runMockup(ctx) {
     `  pantallas: ${plan.screens.length}`,
     ...plan.screens.map((s) => `    - ${s.id}: ${s.title} (${s.illustrates.length} escenario(s))`),
     "",
-    `  plan: ${path31.relative(ctx.cwd, planFile)}`,
-    `  manifiesto: ${path31.relative(ctx.cwd, manifestFile)}`,
+    `  plan: ${path35.relative(ctx.cwd, planFile)}`,
+    `  manifiesto: ${path35.relative(ctx.cwd, manifestFile)}`,
     "",
     "Siguiente: genera el HTML de cada pantalla (fase /satlas-mockup) y valida con `satlas mockup " + slug + " --check`."
   ];
-  return { exitCode: 0, diagnostics: [], data: { plan, planFile: path31.relative(ctx.cwd, planFile), manifestFile: path31.relative(ctx.cwd, manifestFile) }, text: lines };
+  return { exitCode: 0, diagnostics: [], data: { plan, planFile: path35.relative(ctx.cwd, planFile), manifestFile: path35.relative(ctx.cwd, manifestFile) }, text: lines };
 }
 
 // src/mcp/server.ts
-import { promises as fs2 } from "fs";
-import path34 from "path";
+import { promises as fs3 } from "fs";
+import path38 from "path";
 import { createInterface } from "readline/promises";
 
 // src/mcp/protocol.ts
@@ -14421,13 +14961,39 @@ function stringArg(args, key) {
   return typeof value === "string" && value.trim() !== "" ? value.trim() : void 0;
 }
 
+// src/mcp/tools/fixes.ts
+async function runAtlasFixes(_args, host) {
+  const resolved = await host.getWorkspace();
+  if (!resolved) return noWorkspaceResult();
+  const fixes = await loadLivingFixes(resolved.root);
+  if (fixes.length === 0) {
+    const activeFix = resolved.workspace.changes.find((change) => change.meta?.lane === "fix");
+    return jsonResult({
+      fixes: [],
+      message: "No hay fixes vivos registrados.",
+      action: activeFix ? `satlas archive ${activeFix.slug}` : "satlas new <slug> --lane fix"
+    });
+  }
+  return jsonResult({
+    fixes: fixes.map((fix) => ({
+      slug: fix.slug,
+      date: fix.date,
+      result: fix.result,
+      domain: fix.domain,
+      title: fix.title,
+      covers: fix.covers,
+      content: fix.content
+    }))
+  });
+}
+
 // src/mcp/tools/glossary.ts
-import path32 from "path";
+import path36 from "path";
 async function runAtlasGlossary(_args, host) {
   const resolved = await host.getWorkspace();
   if (!resolved) return noWorkspaceResult();
   const { root, config } = resolved;
-  const glossaryPath = path32.resolve(root, config.spec.glossary);
+  const glossaryPath = path36.resolve(root, config.spec.glossary);
   const raw = await readTextIfExists(glossaryPath);
   if (raw === void 0) {
     return jsonResult({
@@ -14473,7 +15039,7 @@ async function runAtlasImpact(args, host) {
 }
 
 // src/evaluate.ts
-import path33 from "path";
+import path37 from "path";
 function livingRequirementsMap2(specs) {
   const map = /* @__PURE__ */ new Map();
   for (const spec of specs) {
@@ -14482,7 +15048,7 @@ function livingRequirementsMap2(specs) {
   return map;
 }
 async function evaluateChange(workspace, config, change, approvals) {
-  const deltaPath = path33.join(change.dir, "spec.md");
+  const deltaPath = path37.join(change.dir, "spec.md");
   const deltaContent = await readTextIfExists(deltaPath);
   const approval = verifyApproval(change, approvals, config, deltaContent ?? void 0);
   const living = livingRequirementsMap2(workspace.specs);
@@ -14658,7 +15224,8 @@ var HANDLERS = {
   atlas_validate: runAtlasValidate,
   atlas_trace: runAtlasTrace,
   atlas_impact: runAtlasImpact,
-  atlas_glossary: runAtlasGlossary
+  atlas_glossary: runAtlasGlossary,
+  atlas_fixes: runAtlasFixes
 };
 async function runToolByName(name, args, host) {
   const handler = HANDLERS[name];
@@ -14727,6 +15294,15 @@ function listTools() {
         properties: {},
         additionalProperties: false
       }
+    },
+    {
+      name: "atlas_fixes",
+      description: "Fixes vivos (carril express ya archivado): identidad, resultado de su evidencia, contenido y requisitos que declaran. Solo lectura.",
+      inputSchema: {
+        type: "object",
+        properties: {},
+        additionalProperties: false
+      }
     }
   ];
 }
@@ -14744,12 +15320,12 @@ var WorkspaceCache = class {
   }
 };
 async function workspaceStamp(root) {
-  const sddDir = path34.join(root, ".sdd");
-  const markers = [sddDir, path34.join(sddDir, "config.yaml"), path34.join(sddDir, "changes"), path34.join(sddDir, "specs"), path34.join(sddDir, "approvals.yaml")];
+  const sddDir = path38.join(root, ".sdd");
+  const markers = [sddDir, path38.join(sddDir, "config.yaml"), path38.join(sddDir, "changes"), path38.join(sddDir, "specs"), path38.join(sddDir, "approvals.yaml")];
   let stamp = 0;
   for (const marker of markers) {
     try {
-      const st = await fs2.stat(marker);
+      const st = await fs3.stat(marker);
       stamp = Math.max(stamp, st.mtimeMs);
     } catch {
     }
@@ -14763,7 +15339,7 @@ async function resolveMcpWorkspace(cwd, cache) {
   const cached2 = cache.get(root);
   if (cached2 && cached2.mtimeMs === stamp) return cached2.value;
   const { workspace, config } = await loadWorkspace(root);
-  const approvals = await loadApprovals(path34.join(root, ".sdd"));
+  const approvals = await loadApprovals(path38.join(root, ".sdd"));
   const value = { root, workspace, config, approvals: approvals.byArtifact };
   cache.set(root, stamp, value);
   return value;
@@ -14855,7 +15431,7 @@ async function runMcp(ctx) {
 }
 
 // src/commands/packs.ts
-import path35 from "path";
+import path39 from "path";
 async function runPacks(ctx) {
   const { root, config, workspace } = await requireWorkspace(ctx);
   const slug = flagString(ctx.flags, "check");
@@ -14913,14 +15489,14 @@ async function runPacks(ctx) {
     data: {
       slug,
       packs: evaluations.map((evaluation) => ({ id: evaluation.pack.id, status: evaluation.status, passed: evaluation.passed, failed: evaluation.failed, results: evaluation.results })),
-      analyzePath: path35.posix.join(".sdd", "changes", slug, "analyze.md")
+      analyzePath: path39.posix.join(".sdd", "changes", slug, "analyze.md")
     },
     text: lines
   };
 }
 
 // src/commands/new.ts
-import path36 from "path";
+import path40 from "path";
 async function runNew(ctx) {
   const slug = ctx.positionals[0];
   if (!slug) {
@@ -14946,14 +15522,14 @@ async function runNew(ctx) {
     msg("new.title", ctx.language),
     "",
     msg("new.done", ctx.language),
-    ...result.files.map((f) => `  + ${path36.relative(ctx.cwd, f)}`),
+    ...result.files.map((f) => `  + ${path40.relative(ctx.cwd, f)}`),
     "",
     `Siguiente: /satlas.specify ${result.slug} \u2014 escribe la especificaci\xF3n 100% funcional y de negocio.`
   ];
   return {
     exitCode: hasErrors2 ? 1 : 0,
     diagnostics: result.diagnostics,
-    data: { slug: result.slug, files: result.files.map((f) => path36.relative(ctx.cwd, f)) },
+    data: { slug: result.slug, files: result.files.map((f) => path40.relative(ctx.cwd, f)) },
     text: lines
   };
 }
@@ -14988,7 +15564,7 @@ async function runNext(ctx) {
 }
 
 // src/commands/present.ts
-import path37 from "path";
+import path41 from "path";
 async function runPresentCommand(ctx) {
   const { root } = await requireWorkspace(ctx);
   const slug = ctx.positionals[0];
@@ -15000,7 +15576,7 @@ async function runPresentCommand(ctx) {
   if (result.path) {
     lines.push("Propuesta generada");
     lines.push("");
-    lines.push(`  archivo: ${path37.relative(ctx.cwd, result.path)}`);
+    lines.push(`  archivo: ${path41.relative(ctx.cwd, result.path)}`);
     if (result.hash) lines.push(`  hash de la spec: ${shortHash(result.hash)}`);
     lines.push("");
     lines.push("\xC1brela en el navegador y comp\xE1rtela con el stakeholder.");
@@ -15010,7 +15586,7 @@ async function runPresentCommand(ctx) {
   return {
     exitCode: hasErrors2 ? 1 : 0,
     diagnostics: result.diagnostics,
-    data: result.path ? { path: path37.relative(ctx.cwd, result.path), hash: result.hash } : void 0,
+    data: result.path ? { path: path41.relative(ctx.cwd, result.path), hash: result.hash } : void 0,
     text: lines
   };
 }
@@ -15086,7 +15662,8 @@ function usage(usageText) {
 
 // src/commands/status.ts
 async function runStatus(ctx) {
-  const { workspace, config, approvals } = await requireWorkspace(ctx);
+  const { root, workspace, config, approvals } = await requireWorkspace(ctx);
+  const advisory = await upgradeAdvisory(root);
   const lines = [msg("status.title", ctx.language), ""];
   const changes = [];
   if (workspace.changes.length === 0) {
@@ -15118,17 +15695,44 @@ async function runStatus(ctx) {
   for (const spec of workspace.specs) {
     lines.push(`  ${spec.domain} \u2014 ${spec.spec.requirements.length} requisitos`);
   }
-  const errors = workspace.diagnostics.filter((d) => d.severity === "error").length;
+  const fixes = await loadLivingFixes(root);
+  lines.push("");
+  lines.push(`${msg("status.fixes", ctx.language)}: ${fixes.length}`);
+  if (fixes.length === 0) {
+    lines.push("  (se llenan al archivar un fix)");
+  } else {
+    for (const fix of fixes) {
+      lines.push(`  ${fix.date || "\u2014"}  ${(fix.domain ?? "\u2014").padEnd(10)} ${fix.slug} \u2014 ${fix.result}`);
+    }
+  }
+  const diagnostics = [...workspace.diagnostics, ...advisory.diagnostics];
+  const errors = diagnostics.filter((d) => d.severity === "error").length;
   return {
     exitCode: errors > 0 ? 1 : 0,
-    diagnostics: workspace.diagnostics,
-    data: { changes, specs: workspace.specs.map((s) => ({ domain: s.domain, requirements: s.spec.requirements.length })) },
+    diagnostics,
+    data: {
+      changes,
+      specs: workspace.specs.map((s) => ({ domain: s.domain, requirements: s.spec.requirements.length })),
+      fixes: fixes.map((fix) => ({
+        slug: fix.slug,
+        date: fix.date,
+        result: fix.result,
+        ...fix.domain !== void 0 ? { domain: fix.domain } : {},
+        covers: fix.covers
+      })),
+      upgrade: {
+        currentVersion: advisory.plan.currentVersion,
+        pending: advisory.plan.pending.length,
+        newer: advisory.plan.newer.length,
+        unreadable: advisory.plan.unreadable.length
+      }
+    },
     text: lines
   };
 }
 
 // src/commands/trace.ts
-import path38 from "path";
+import path42 from "path";
 async function runTrace(ctx) {
   const { workspace, config } = await requireWorkspace(ctx);
   const slug = flagString(ctx.flags, "change");
@@ -15148,7 +15752,7 @@ async function runTrace(ctx) {
     data.push({ slug: change.slug, nodes: result.graph.nodes.length, edges: result.graph.edges.length, summary: result.summary, findings: result.findings });
     lines.push(`  ${change.slug}: ${result.graph.nodes.length} nodos, ${result.graph.edges.length} aristas, ${errors} errores, ${result.summary.warnings} avisos`);
     for (const finding of result.findings) {
-      const location = finding.path ? ` (${path38.relative(ctx.cwd, finding.path)}${finding.line ? `:${finding.line}` : ""})` : "";
+      const location = finding.path ? ` (${path42.relative(ctx.cwd, finding.path)}${finding.line ? `:${finding.line}` : ""})` : "";
       lines.push(`    ${finding.severity.toUpperCase()} ${finding.code} \u2014 ${finding.message}${location}`);
     }
   }
@@ -15157,12 +15761,130 @@ async function runTrace(ctx) {
   return { exitCode: blockingErrors > 0 ? 1 : 0, diagnostics, data: { changes: data }, text: lines };
 }
 
+// src/commands/upgrade.ts
+import path43 from "path";
+async function runUpgrade(ctx) {
+  const { root } = await requireWorkspace(ctx);
+  const apply = flagBool(ctx.flags, "apply");
+  const rollback = flagBool(ctx.flags, "rollback");
+  if (apply && rollback) {
+    return {
+      exitCode: 2,
+      diagnostics: [
+        {
+          code: "ATLAS-UPGRADE-CLI-001",
+          severity: "error",
+          message: "Elige una sola acci\xF3n: --apply o --rollback",
+          suggestion: "Vista previa: `satlas upgrade` \xB7 Aplicar: `satlas upgrade --apply` \xB7 Revertir: `satlas upgrade --rollback`"
+        }
+      ]
+    };
+  }
+  if (rollback) return renderRollback(await rollbackUpgrade(root), ctx);
+  if (apply) return renderApply(await applyUpgrade(root), ctx);
+  return renderPreview(await planUpgrade(root), root, ctx);
+}
+function summarizable(plan) {
+  return {
+    currentVersion: plan.currentVersion,
+    upToDate: plan.upToDate,
+    pending: plan.pending.map((i) => ({ artifact: i.artifact, from: i.from, to: i.to, migration: i.migration })),
+    newer: plan.newer.map((n) => ({ artifact: n.artifact, reason: n.reason })),
+    unreadable: plan.unreadable.map((u) => ({ artifact: u.artifact, reason: u.reason }))
+  };
+}
+function renderPreview(plan, root, ctx) {
+  const lines = [msg("upgrade.title", ctx.language), ""];
+  if (plan.upToDate && plan.newer.length === 0 && plan.unreadable.length === 0) {
+    lines.push(`El estado del proyecto est\xE1 al d\xEDa (versi\xF3n ${plan.currentVersion}). No hay nada que actualizar.`);
+    return { exitCode: 0, diagnostics: [], data: summarizable(plan), text: lines };
+  }
+  lines.push(`${msg("upgrade.preview", ctx.language)}: no se modifica nada.`);
+  lines.push(`  Versi\xF3n vigente: ${plan.currentVersion}`);
+  if (plan.pending.length === 0) {
+    lines.push("  Elementos por actualizar: 0");
+  } else {
+    lines.push(`  Elementos por actualizar: ${plan.pending.length}`);
+    for (const item of plan.pending) {
+      lines.push(`    ${item.artifact}  ${item.from} \u2192 ${item.to}  (${item.migration})`);
+    }
+    lines.push("");
+    lines.push(`Aplica la actualizaci\xF3n con \`satlas upgrade --apply\`.`);
+  }
+  for (const item of plan.newer) {
+    lines.push(`  Aviso: "${item.artifact}" ${item.reason}`);
+  }
+  for (const item of plan.unreadable) {
+    lines.push(`  Ilegible: "${item.artifact}" \u2014 ${item.reason}`);
+    lines.push(`    \u21B3 ${path43.relative(ctx.cwd, item.path)}`);
+  }
+  return { exitCode: 0, diagnostics: [], data: summarizable(plan), text: lines };
+}
+function renderApply(report, ctx) {
+  const lines = [msg("upgrade.title", ctx.language), ""];
+  if (report.status === "up-to-date") {
+    lines.push("No hab\xEDa nada que actualizar; no se escribi\xF3 ning\xFAn elemento.");
+    return { exitCode: 0, diagnostics: [], data: { status: report.status, plan: summarizable(report.plan) }, text: lines };
+  }
+  if (report.status === "failed") {
+    lines.push(`La actualizaci\xF3n fall\xF3 en "${report.failure?.artifact}": ${report.failure?.message}`);
+    lines.push("El proyecto qued\xF3 exactamente como estaba.");
+    return {
+      exitCode: 1,
+      diagnostics: [{ code: "ATLAS-UPGRADE-101", severity: "error", message: `Fall\xF3 la actualizaci\xF3n en "${report.failure?.artifact}": ${report.failure?.message}` }],
+      data: { status: report.status, failure: report.failure },
+      text: lines
+    };
+  }
+  lines.push(`Actualizaci\xF3n aplicada: ${report.applied.length} elemento(s) a la versi\xF3n ${report.plan.currentVersion}.`);
+  lines.push(`Respaldo recuperable: ${report.backup?.relativeDir}`);
+  if (report.plan.unreadable.length > 0) {
+    lines.push(`No se tocaron ${report.plan.unreadable.length} elemento(s) ilegible(s).`);
+  }
+  return {
+    exitCode: 0,
+    diagnostics: [],
+    data: {
+      status: report.status,
+      applied: report.applied.map((i) => i.artifact),
+      backup: report.backup,
+      plan: summarizable(report.plan)
+    },
+    text: lines
+  };
+}
+function renderRollback(report, ctx) {
+  const lines = [msg("upgrade.title", ctx.language), ""];
+  if (report.status === "no-backup") {
+    lines.push("No hay respaldo disponible para revertir; no se modific\xF3 nada.");
+    return {
+      exitCode: 1,
+      diagnostics: [{ code: "ATLAS-UPGRADE-102", severity: "warning", message: "No hay respaldo disponible para revertir la \xFAltima actualizaci\xF3n" }],
+      data: { status: report.status },
+      text: lines
+    };
+  }
+  if (report.status === "failed") {
+    lines.push(`La reversi\xF3n fall\xF3 en "${report.failure?.artifact}": ${report.failure?.message}`);
+    lines.push("El respaldo se conserva para reintentar.");
+    return {
+      exitCode: 1,
+      diagnostics: [{ code: "ATLAS-UPGRADE-103", severity: "error", message: `Fall\xF3 la reversi\xF3n en "${report.failure?.artifact}": ${report.failure?.message}` }],
+      data: { status: report.status, failure: report.failure },
+      text: lines
+    };
+  }
+  lines.push(`Se restaur\xF3 el estado previo: ${report.restored.length} elemento(s). El respaldo qued\xF3 consumido.`);
+  return { exitCode: 0, diagnostics: [], data: { status: report.status, restored: report.restored, backup: report.backup }, text: lines };
+}
+
 // src/commands/validate.ts
-import path39 from "path";
+import path44 from "path";
 async function runValidate(ctx) {
-  const { workspace, config, approvals } = await requireWorkspace(ctx);
+  const { root, workspace, config, approvals } = await requireWorkspace(ctx);
   const slug = flagString(ctx.flags, "change");
   const strict = flagBool(ctx.flags, "strict");
+  const advisory = slug ? void 0 : await upgradeAdvisory(root);
   const diagnostics = [];
   const lines = [msg("validate.title", ctx.language), ""];
   for (const spec of workspace.specs) {
@@ -15184,22 +15906,35 @@ async function runValidate(ctx) {
     for (const finding of evaluation.lintFindings) {
       lines.push(`    ${finding.severity.toUpperCase()} ${finding.code}${finding.line ? `:${finding.line}` : ""} \u2014 ${finding.message}`);
     }
-    lines.push(`    archivo: ${path39.relative(ctx.cwd, path39.join(change.dir, "spec.md"))}`);
+    lines.push(`    archivo: ${path44.relative(ctx.cwd, path44.join(change.dir, "spec.md"))}`);
   }
   if (targets.length === 0) lines.push("Sin cambios activos.");
+  if (advisory && advisory.plan.pending.length > 0) {
+    lines.push(`Actualizaci\xF3n pendiente: ${advisory.plan.pending.length} elemento(s) (vista previa: \`satlas upgrade\`).`);
+  }
   const errors = diagnostics.filter((d) => d.severity === "error").length;
   const warnings = diagnostics.filter((d) => d.severity === "warning").length;
   if (errors === 0 && warnings === 0) lines.push(msg("validate.ok", ctx.language));
   return {
     exitCode: errors > 0 || strict && warnings > 0 ? 1 : 0,
-    diagnostics,
-    data: { changes, errors, warnings },
+    diagnostics: advisory ? [...diagnostics, ...advisory.diagnostics] : diagnostics,
+    data: {
+      changes,
+      errors,
+      warnings,
+      upgrade: advisory ? {
+        currentVersion: advisory.plan.currentVersion,
+        pending: advisory.plan.pending.length,
+        newer: advisory.plan.newer.length,
+        unreadable: advisory.plan.unreadable.length
+      } : void 0
+    },
     text: lines
   };
 }
 
 // src/commands/verify.ts
-import path40 from "path";
+import path45 from "path";
 async function runVerify(ctx) {
   const { root, workspace } = await requireWorkspace(ctx);
   const slug = ctx.positionals[0];
@@ -15242,7 +15977,7 @@ async function runVerify(ctx) {
     return { exitCode: 2, diagnostics: [{ code: "ATLAS-VERIFY-001", severity: "error", message: "Falta --by <nombre> (o define meta.owner)" }] };
   }
   const profilesDir = await resolveProfilesDir();
-  const profile = await loadActiveProfile(path40.join(root, ".sdd"), [profilesDir ?? "", path40.join(root, ".sdd", "profiles", "custom")].filter(Boolean));
+  const profile = await loadActiveProfile(path45.join(root, ".sdd"), [profilesDir ?? "", path45.join(root, ".sdd", "profiles", "custom")].filter(Boolean));
   const record = await recordEvidence({
     root,
     slug,
@@ -15264,7 +15999,7 @@ async function runVerify(ctx) {
     if (record.evidence.command) lines.push(`  comando: ${record.evidence.command}`);
     lines.push(`  resultado: ${record.evidence.result}`);
     if (record.evidence.outputHash) lines.push(`  hash:    ${record.evidence.outputHash}`);
-    lines.push(`  archivo: ${path40.relative(ctx.cwd, record.path)}`);
+    lines.push(`  archivo: ${path45.relative(ctx.cwd, record.path)}`);
     if (record.stdout) {
       lines.push("");
       lines.push("  salida (\xFAltimas l\xEDneas):");
@@ -15279,7 +16014,7 @@ async function runVerify(ctx) {
   return {
     exitCode: record.exitCode === 0 ? 0 : 1,
     diagnostics: record.diagnostics,
-    data: { evidence: record.evidence, path: path40.relative(ctx.cwd, record.path), exitCode: record.exitCode },
+    data: { evidence: record.evidence, path: path45.relative(ctx.cwd, record.path), exitCode: record.exitCode },
     text: lines
   };
 }
@@ -15334,6 +16069,7 @@ var HANDLERS2 = {
   trace: runTrace,
   waves: runWaves,
   doctor: runDoctorCommand,
+  upgrade: runUpgrade,
   approve: runApprove,
   issue: runIssue,
   adapters: runAdapters,
@@ -15378,7 +16114,7 @@ async function requireWorkspace(ctx) {
     throw new CliError("ATLAS-WS-001", msg("cli.noWorkspace", ctx.language), 2);
   }
   const { workspace, config } = await loadWorkspace(root);
-  const approvals = await loadApprovals(path41.join(root, ".sdd"));
+  const approvals = await loadApprovals(path46.join(root, ".sdd"));
   return { root, workspace, config, approvals: approvals.byArtifact };
 }
 var CliError = class extends Error {
@@ -15445,7 +16181,7 @@ function printResult(command, result, json2, language) {
   }
   const lines = [...result.text ?? []];
   for (const d of result.diagnostics) {
-    const location = d.path ? ` ${path41.relative(process.cwd(), d.path)}${d.line ? `:${d.line}` : ""}` : "";
+    const location = d.path ? ` ${path46.relative(process.cwd(), d.path)}${d.line ? `:${d.line}` : ""}` : "";
     lines.push(`${d.severity === "error" ? "ERROR" : d.severity === "warning" ? "AVISO" : "NOTA"}  ${d.code}${location} \u2014 ${d.message}`);
     if (d.suggestion) lines.push(`       \u21B3 ${d.suggestion}`);
   }