sphica 0.6.2 → 0.6.4

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://anthropic.com/claude-code/plugin.schema.json",
   "name": "sphica",
-  "version": "0.6.2",
+  "version": "0.6.4",
   "description": "Records Claude Code and Codex sessions on your machine and keeps past implementation and decisions, with their sources, for your agent to find.",
   "author": {
     "name": "iroha924",

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "sphica",
-  "version": "0.6.2",
+  "version": "0.6.4",
   "description": "Records Claude Code and Codex sessions on your machine and keeps past implementation and decisions, with their sources, for your agent to find.",
   "author": {
     "name": "iroha924",

package/README.md

@@ -25,6 +25,9 @@ The database is a single SQLite file on your machine.
 - **Forget what should not have been kept.** `/sphica:forget` removes the messages, pull request items, or file excerpts you pick, with their search entries and the bytes left in the database file, after you confirm in a dialog (if another session is reading the database, it asks you to run it again to finish clearing the bytes). Records that cited them are judged again and leave active when nothing else supports them; a record's own text stays as it was.
 - **Shown when it matters.** At session start, the current work; before the agent reads or edits a file, or runs a shell command that names it, the decisions tied to that file; when your prompt names a recorded option or code symbol, that record. Works in both Claude Code and Codex.
 - **Search in Japanese and English.** Records are made with search words in both languages, so a question in either language is more likely to find them.
+- **Find what you asked before.** Ask the agent whether you asked something like this before: `search` with `asked: true` shows your earlier messages in other sessions, the records that quote them (with what replaced them), and says "no recorded decision" when none was recorded, including a matter you raised in several sessions.
+- **See what is live, and what needs a look.** Ask for the overview: `view: "live"` lists every active decision and constraint by the directory it applies to; `view: "look"` lists records whose file is gone or whose symbol is not found, conditions you said would bring a rejected option back, and lines in your instruction files whose record was replaced. Nothing is expired or changed on its own.
+- **Rule text from records.** `/sphica:rules` drafts lines for CLAUDE.md, AGENTS.md, or `.claude/rules` from the constraints and decisions you pick, each marked with its record key so the overview flags it once the record changes. It never edits the file.
 - **Reviews check past decisions.** `/sphica:review` runs a reviewer per focus (correctness, security, written conventions, and past decisions by default; redundancy with `full`), and checks the diff against the records it touches.
 
 Records are never rewritten: a correction is a new record that supersedes the old one, and the history stays.

package/db/migrations/0003.sql

@@ -0,0 +1,193 @@
+-- Revision 2 → 3 of generation 2: a rejected option can carry a reconsider condition the owner stated, quoted as `reconsiders` evidence (issue #193).
+-- `sphica init` runs this in one transaction with foreign keys off (set outside the transaction), then checks foreign_key_check before
+-- committing. Every statement matches db/schema.sql at revision 3; server/test/migrate.test.ts compares a migrated database with a fresh one.
+
+-- Rebuild unit_option and unit_evidence (https://www.sqlite.org/lang_altertable.html#otheralter). What names them from elsewhere is dropped
+-- first, or the renames fail on it: the state rules, the search view, and the triggers that read the view. All are created again after.
+drop trigger unit_state_rules;
+drop trigger unit_fts_ai;
+drop trigger unit_fts_anchor_i;
+drop trigger unit_fts_anchor_u;
+drop trigger unit_fts_anchor_d;
+drop trigger unit_fts_alias_i;
+drop trigger unit_fts_alias_d;
+drop view unit_search_text;
+
+create table unit_option_new (
+  id integer primary key autoincrement not null,
+  unit_id integer not null references unit (id) on delete cascade,
+  position integer not null check (position > 0),
+  text text not null check (text <> ''),
+  outcome text not null check (outcome in ('chosen', 'rejected', 'deferred', 'proposed')),
+  why text,
+  -- For a rejected option, what the owner said would make it worth reconsidering; its words are a `reconsiders` evidence row on the option
+  reconsider_when text check (reconsider_when <> ''),
+  unique (unit_id, position),
+  check (reconsider_when is null or outcome = 'rejected'),
+  unique (unit_id, id)
+) strict;
+insert into unit_option_new (id, unit_id, position, text, outcome, why)
+  select id, unit_id, position, text, outcome, why from unit_option;
+-- AUTOINCREMENT never reuses an id: carry the counter over
+delete from sqlite_sequence where name = 'unit_option_new';
+insert into sqlite_sequence (name, seq) select 'unit_option_new', seq from sqlite_sequence where name = 'unit_option';
+create table unit_evidence_new (
+  id integer primary key autoincrement not null,
+  unit_id integer not null references unit (id) on delete cascade,
+  option_id integer,
+  source_id integer not null references source (id) on delete cascade,
+  span_start integer not null check (span_start >= 0),
+  span_end integer not null check (span_end > span_start),
+  role text not null check (role in ('states', 'proposes', 'rejects', 'explains', 'implements', 'reconsiders')),
+  -- A third party the owner reported ("X said ..."): hearsay by the owner, never X's own statement
+  reported_speaker text,
+  run_id integer not null references extraction_run (id),
+  added_at text not null check (strftime('%Y-%m-%dT%H:%M:%fZ', added_at) is added_at),
+  retracted_at text check (strftime('%Y-%m-%dT%H:%M:%fZ', retracted_at) is retracted_at),
+  retraction_reason text,
+  retraction_source_id integer references source (id),
+  retraction_span_start integer,
+  retraction_span_end integer,
+  foreign key (unit_id, option_id) references unit_option (unit_id, id) on delete cascade,
+  check ((retracted_at is null) = (retraction_reason is null)),
+  check ((retracted_at is null) = (retraction_source_id is null)),
+  check ((retraction_source_id is null) = (retraction_span_start is null)),
+  check ((retraction_source_id is null) = (retraction_span_end is null)),
+  check (retraction_span_end is null or retraction_span_end > retraction_span_start)
+) strict;
+insert into unit_evidence_new (id, unit_id, option_id, source_id, span_start, span_end, role, reported_speaker, run_id, added_at, retracted_at, retraction_reason, retraction_source_id, retraction_span_start, retraction_span_end)
+  select id, unit_id, option_id, source_id, span_start, span_end, role, reported_speaker, run_id, added_at, retracted_at, retraction_reason, retraction_source_id, retraction_span_start, retraction_span_end from unit_evidence;
+-- AUTOINCREMENT never reuses an id: carry the counter over
+delete from sqlite_sequence where name = 'unit_evidence_new';
+insert into sqlite_sequence (name, seq) select 'unit_evidence_new', seq from sqlite_sequence where name = 'unit_evidence';
+drop table unit_evidence;
+drop table unit_option;
+alter table unit_option_new rename to unit_option;
+alter table unit_evidence_new rename to unit_evidence;
+
+create trigger unit_option_sealed before insert on unit_option
+when exists (select 1 from unit_state where unit_id = new.unit_id) or exists (select 1 from unit_alias where unit_id = new.unit_id) begin
+  select raise(abort, 'options are written with the unit, before its first state; record a successor instead');
+end;
+create trigger unit_option_frozen before update on unit_option begin
+  select raise(abort, 'options are never rewritten; record a successor');
+end;
+create trigger unit_option_no_delete before delete on unit_option
+when exists (select 1 from unit where id = old.unit_id) begin
+  select raise(abort, 'options are never removed on their own');
+end;
+create unique index unit_evidence_unit_once on unit_evidence (unit_id, source_id, span_start, span_end, role) where option_id is null;
+create unique index unit_evidence_option_once on unit_evidence (option_id, source_id, span_start, span_end, role) where option_id is not null;
+create index unit_evidence_source on unit_evidence (source_id);
+create trigger unit_evidence_check before insert on unit_evidence begin
+  select raise(abort, 'evidence and unit belong to different projects')
+  where (select project_id from unit where id = new.unit_id) is not (select project_id from source where id = new.source_id)
+     or (select project_id from unit where id = new.unit_id) is not (select project_id from extraction_run where id = new.run_id);
+  select raise(abort, 'evidence span is outside the source text')
+  where new.span_end > (select length(cast(text as blob)) from source where id = new.source_id);
+  select raise(abort, 'a reported speaker is the owner reporting someone else, so it must cite an owner session message')
+  where new.reported_speaker is not null and (trim(new.reported_speaker) = '' or not exists (select 1 from source
+    where id = new.source_id and kind = 'session_message' and author_kind = 'owner'));
+  select raise(abort, 'reconsiders quotes the owner on a rejected option that has a reconsider condition')
+  where new.role = 'reconsiders' and (new.option_id is null
+    or not exists (select 1 from unit_option where id = new.option_id and reconsider_when is not null)
+    or not exists (select 1 from source where id = new.source_id and author_kind = 'owner'));
+end;
+create trigger unit_evidence_retract before update on unit_evidence begin
+  select raise(abort, 'evidence is only ever retracted, once')
+  where old.retracted_at is not null or new.unit_id is not old.unit_id or new.option_id is not old.option_id
+    or new.source_id is not old.source_id or new.span_start is not old.span_start or new.span_end is not old.span_end
+    or new.role is not old.role or new.reported_speaker is not old.reported_speaker or new.run_id is not old.run_id
+    or new.added_at is not old.added_at or new.retracted_at is null;
+  select raise(abort, 'the retraction must cite an owner span of the same project')
+  where not exists (select 1 from source s where s.id = new.retraction_source_id and s.author_kind = 'owner'
+    and s.project_id = (select project_id from unit where id = new.unit_id)
+    and new.retraction_span_end <= length(cast(s.text as blob)));
+end;
+create trigger unit_evidence_no_delete before delete on unit_evidence
+when exists (select 1 from unit where id = old.unit_id) and exists (select 1 from source where id = old.source_id)
+  and not (old.retracted_at is not null and exists (select 1 from source_forgotten where source_id = old.retraction_source_id)) begin
+  select raise(abort, 'evidence is retracted, never deleted');
+end;
+create trigger unit_evidence_retract_support after update of retracted_at on unit_evidence
+when exists (select 1 from unit where id = new.unit_id and lifecycle = 'active')
+  and not exists (select 1 from unit_evidence where unit_id = new.unit_id and retracted_at is null) begin
+  select raise(abort, 'move the unit back to candidate before retracting its last evidence');
+end;
+create trigger unit_rev_evidence_i after insert on unit_evidence begin update unit set revision = revision + 1 where id = new.unit_id; end;
+create trigger unit_rev_evidence_u after update on unit_evidence begin update unit set revision = revision + 1 where id = new.unit_id; end;
+create trigger unit_rev_evidence_d after delete on unit_evidence when exists (select 1 from unit where id = old.unit_id) begin
+  update unit set revision = revision + 1 where id = old.unit_id;
+end;
+create trigger unit_state_rules before insert on unit_state begin
+  select raise(abort, 'from_state must be the current lifecycle')
+  where new.from_state is not (select lifecycle from unit where id = new.unit_id)
+    and exists (select 1 from unit_state where unit_id = new.unit_id);
+  select raise(abort, 'a quarantined or unsourced unit cannot become active')
+  where new.to_state = 'active' and exists (select 1 from unit where id = new.unit_id and (extraction <> 'supported' or unsourced = 1));
+  select raise(abort, 'an active decision or constraint needs unretracted evidence and adoption')
+  where new.to_state = 'active' and exists (select 1 from unit u where u.id = new.unit_id and u.kind in ('decision', 'constraint') and (
+    not exists (select 1 from unit_evidence e where e.unit_id = u.id and e.option_id is null and e.retracted_at is null)
+    or not exists (select 1 from unit_adoption a where a.unit_id = u.id and a.retracted_at is null)));
+  select raise(abort, 'an active implementation needs code or commit evidence')
+  where new.to_state = 'active' and exists (select 1 from unit u where u.id = new.unit_id and u.kind = 'implementation' and not (
+    exists (select 1 from unit_evidence e join source s on s.id = e.source_id where e.unit_id = u.id and e.option_id is null
+      and e.retracted_at is null and e.role = 'implements' and s.kind in ('commit_message', 'file_excerpt'))
+    or exists (select 1 from unit_anchor a where a.unit_id = u.id and a.retired_at is null and a.role = 'evidence'
+      and (a.commit_sha is not null or (a.edit_observation_id is not null and exists (select 1 from unit_evidence e
+        join source s on s.id = e.source_id join edit_observation o on o.id = a.edit_observation_id
+        where e.unit_id = u.id and e.option_id is null and e.retracted_at is null and e.role = 'implements'
+          and s.session_id = o.session_id))))));
+  select raise(abort, 'an active unit needs unretracted evidence')
+  where new.to_state = 'active' and exists (select 1 from unit u where u.id = new.unit_id and u.kind in ('finding', 'dead_end', 'question')
+    and not exists (select 1 from unit_evidence e where e.unit_id = u.id and e.option_id is null and e.retracted_at is null));
+  -- A reconsider condition is the owner's: each needs a quote of the owner, written when the unit is saved. A quote retracted later, or
+  -- forgotten (forget's recheck is exempt, since the row is gone), leaves the unit as it was, and readers show the condition as unsupported
+  select raise(abort, 'a reconsider condition needs a quote of the owner')
+  where new.to_state = 'active' and new.forget_id is null and exists (select 1 from unit_option o where o.unit_id = new.unit_id
+    and o.reconsider_when is not null and not exists (select 1 from unit_evidence e join source s on s.id = e.source_id
+      where e.option_id = o.id and e.role = 'reconsiders' and s.author_kind = 'owner'));
+  select raise(abort, 'superseded needs a supersedes link from its successor')
+  where new.to_state = 'superseded' and not exists (select 1 from unit_link where to_unit = new.unit_id and kind = 'supersedes');
+end;
+create view unit_search_text as
+select u.id,
+  sphica_terms(u.text || char(10) || coalesce(u.why, '') || char(10) || coalesce(u.scope_note, '') || char(10)
+    || coalesce(u.revisit_when, '') || char(10)
+    || coalesce((select group_concat(o.text || ' ' || coalesce(o.why, '') || ' ' || coalesce(o.reconsider_when, ''), char(10))
+      from (select text, why, reconsider_when from unit_option where unit_id = u.id order by position) o), '')) as body,
+  sphica_terms(coalesce((select group_concat(a.path || ' ' || coalesce(a.symbol, ''), char(10))
+    from (select path, symbol from unit_anchor where unit_id = u.id and retired_at is null order by id) a), '')) as ident,
+  sphica_terms(coalesce((select group_concat(j.value, ' ')
+    from json_each((select terms from unit_alias where unit_id = u.id and content_hash = u.content_hash order by id desc limit 1)) j), ''))
+    as alias
+from unit u;
+create trigger unit_fts_ai after insert on unit begin
+  insert into unit_fts (rowid, body, ident, alias) select id, body, ident, alias from unit_search_text where id = new.id;
+end;
+create trigger unit_fts_option_i after insert on unit_option begin
+  delete from unit_fts where rowid = new.unit_id;
+  insert into unit_fts (rowid, body, ident, alias) select id, body, ident, alias from unit_search_text where id = new.unit_id;
+end;
+create trigger unit_fts_anchor_i after insert on unit_anchor begin
+  delete from unit_fts where rowid = new.unit_id;
+  insert into unit_fts (rowid, body, ident, alias) select id, body, ident, alias from unit_search_text where id = new.unit_id;
+end;
+create trigger unit_fts_anchor_u after update on unit_anchor begin
+  delete from unit_fts where rowid = new.unit_id;
+  insert into unit_fts (rowid, body, ident, alias) select id, body, ident, alias from unit_search_text where id = new.unit_id;
+end;
+create trigger unit_fts_anchor_d after delete on unit_anchor when exists (select 1 from unit where id = old.unit_id) begin
+  delete from unit_fts where rowid = old.unit_id;
+  insert into unit_fts (rowid, body, ident, alias) select id, body, ident, alias from unit_search_text where id = old.unit_id;
+end;
+create trigger unit_fts_alias_i after insert on unit_alias begin
+  delete from unit_fts where rowid = new.unit_id;
+  insert into unit_fts (rowid, body, ident, alias) select id, body, ident, alias from unit_search_text where id = new.unit_id;
+end;
+create trigger unit_fts_alias_d after delete on unit_alias when exists (select 1 from unit where id = old.unit_id) begin
+  delete from unit_fts where rowid = old.unit_id;
+  insert into unit_fts (rowid, body, ident, alias) select id, body, ident, alias from unit_search_text where id = old.unit_id;
+end;
+
+pragma user_version = 3;

package/db/schema.sql

@@ -265,7 +265,10 @@ create table unit_option (
   text text not null check (text <> ''),
   outcome text not null check (outcome in ('chosen', 'rejected', 'deferred', 'proposed')),
   why text,
+  -- For a rejected option, what the owner said would make it worth reconsidering; its words are a `reconsiders` evidence row on the option
+  reconsider_when text check (reconsider_when <> ''),
   unique (unit_id, position),
+  check (reconsider_when is null or outcome = 'rejected'),
   unique (unit_id, id)
 ) strict;
 create trigger unit_option_sealed before insert on unit_option
@@ -288,7 +291,7 @@ create table unit_evidence (
   source_id integer not null references source (id) on delete cascade,
   span_start integer not null check (span_start >= 0),
   span_end integer not null check (span_end > span_start),
-  role text not null check (role in ('states', 'proposes', 'rejects', 'explains', 'implements')),
+  role text not null check (role in ('states', 'proposes', 'rejects', 'explains', 'implements', 'reconsiders')),
   -- A third party the owner reported ("X said ..."): hearsay by the owner, never X's own statement
   reported_speaker text,
   run_id integer not null references extraction_run (id),
@@ -412,6 +415,12 @@ create trigger unit_state_rules before insert on unit_state begin
   select raise(abort, 'an active unit needs unretracted evidence')
   where new.to_state = 'active' and exists (select 1 from unit u where u.id = new.unit_id and u.kind in ('finding', 'dead_end', 'question')
     and not exists (select 1 from unit_evidence e where e.unit_id = u.id and e.option_id is null and e.retracted_at is null));
+  -- A reconsider condition is the owner's: each needs a quote of the owner, written when the unit is saved. A quote retracted later, or
+  -- forgotten (forget's recheck is exempt, since the row is gone), leaves the unit as it was, and readers show the condition as unsupported
+  select raise(abort, 'a reconsider condition needs a quote of the owner')
+  where new.to_state = 'active' and new.forget_id is null and exists (select 1 from unit_option o where o.unit_id = new.unit_id
+    and o.reconsider_when is not null and not exists (select 1 from unit_evidence e join source s on s.id = e.source_id
+      where e.option_id = o.id and e.role = 'reconsiders' and s.author_kind = 'owner'));
   select raise(abort, 'superseded needs a supersedes link from its successor')
   where new.to_state = 'superseded' and not exists (select 1 from unit_link where to_unit = new.unit_id and kind = 'supersedes');
 end;
@@ -494,6 +503,10 @@ create trigger unit_evidence_check before insert on unit_evidence begin
   select raise(abort, 'a reported speaker is the owner reporting someone else, so it must cite an owner session message')
   where new.reported_speaker is not null and (trim(new.reported_speaker) = '' or not exists (select 1 from source
     where id = new.source_id and kind = 'session_message' and author_kind = 'owner'));
+  select raise(abort, 'reconsiders quotes the owner on a rejected option that has a reconsider condition')
+  where new.role = 'reconsiders' and (new.option_id is null
+    or not exists (select 1 from unit_option where id = new.option_id and reconsider_when is not null)
+    or not exists (select 1 from source where id = new.source_id and author_kind = 'owner'));
 end;
 create trigger unit_evidence_retract before update on unit_evidence begin
   select raise(abort, 'evidence is only ever retracted, once')
@@ -602,14 +615,14 @@ create trigger unit_rev_anchor_i after insert on unit_anchor begin update unit s
 create trigger unit_rev_anchor_u after update on unit_anchor begin update unit set revision = revision + 1 where id = new.unit_id; end;
 create trigger unit_rev_alias_i after insert on unit_alias begin update unit set revision = revision + 1 where id = new.unit_id; end;
 
--- Unit search text: body (text, reason, scope, revisit condition, options), identifiers (live anchors), and the newest matching alias set.
+-- Unit search text: body (text, reason, scope, revisit condition, options and their reconsider conditions), identifiers (live anchors), and the newest matching alias set.
 -- search.ts weighs body and identifiers above aliases. Lifecycle is not indexed; queries filter it.
 create view unit_search_text as
 select u.id,
   sphica_terms(u.text || char(10) || coalesce(u.why, '') || char(10) || coalesce(u.scope_note, '') || char(10)
     || coalesce(u.revisit_when, '') || char(10)
-    || coalesce((select group_concat(o.text || ' ' || coalesce(o.why, ''), char(10))
-      from (select text, why from unit_option where unit_id = u.id order by position) o), '')) as body,
+    || coalesce((select group_concat(o.text || ' ' || coalesce(o.why, '') || ' ' || coalesce(o.reconsider_when, ''), char(10))
+      from (select text, why, reconsider_when from unit_option where unit_id = u.id order by position) o), '')) as body,
   sphica_terms(coalesce((select group_concat(a.path || ' ' || coalesce(a.symbol, ''), char(10))
     from (select path, symbol from unit_anchor where unit_id = u.id and retired_at is null order by id) a), '')) as ident,
   sphica_terms(coalesce((select group_concat(j.value, ' ')
@@ -739,4 +752,4 @@ create trigger capture_delivery_insert instead of insert on capture_delivery beg
   select last_insert_rowid(), j.value from json_each(coalesce(new.units, '[]')) j where true on conflict do nothing;
 end;
 
-pragma user_version = 2;
+pragma user_version = 3;

package/dist/capture.js

@@ -10813,7 +10813,7 @@ import os from "node:os";
 import path from "node:path";
 import { constants as C, DatabaseSync } from "node:sqlite";
 var SCHEMA_GENERATION = 2;
-var SCHEMA_REVISION = 2;
+var SCHEMA_REVISION = 3;
 var sphicaHome = () => process.env.SPHICA_HOME || path.join(os.homedir(), ".sphica");
 var dbFile = () => process.env.SPHICA_DB || path.join(sphicaHome(), "sphica.db");
 function requireRuntime() {

package/dist/cli.js

@@ -14187,7 +14187,7 @@ import os from "node:os";
 import path2 from "node:path";
 import { constants as C, DatabaseSync } from "node:sqlite";
 var SCHEMA_GENERATION = 2;
-var SCHEMA_REVISION = 2;
+var SCHEMA_REVISION = 3;
 var sphicaHome = () => process.env.SPHICA_HOME || path2.join(os.homedir(), ".sphica");
 var dbFile = () => process.env.SPHICA_DB || path2.join(sphicaHome(), "sphica.db");
 function requireRuntime() {

package/dist/deliver.js

@@ -11086,7 +11086,7 @@ import os from "node:os";
 import path2 from "node:path";
 import { constants as C, DatabaseSync } from "node:sqlite";
 var SCHEMA_GENERATION = 2;
-var SCHEMA_REVISION = 2;
+var SCHEMA_REVISION = 3;
 var sphicaHome = () => process.env.SPHICA_HOME || path2.join(os.homedir(), ".sphica");
 var dbFile = () => process.env.SPHICA_DB || path2.join(sphicaHome(), "sphica.db");
 function requireRuntime() {

package/dist/mcp-record.js

@@ -45527,7 +45527,7 @@ import os from "node:os";
 import path from "node:path";
 import { constants as C, DatabaseSync } from "node:sqlite";
 var SCHEMA_GENERATION = 2;
-var SCHEMA_REVISION = 2;
+var SCHEMA_REVISION = 3;
 var sphicaHome = () => process.env.SPHICA_HOME || path.join(os.homedir(), ".sphica");
 var dbFile = () => process.env.SPHICA_DB || path.join(sphicaHome(), "sphica.db");
 function requireRuntime() {
@@ -46091,7 +46091,14 @@ var UNIT_KINDS = [
 ];
 var STANCES = ["do", "dont", "defer"];
 var OPTION_OUTCOMES = ["chosen", "rejected", "deferred", "proposed"];
-var EVIDENCE_ROLES = ["states", "proposes", "rejects", "explains", "implements"];
+var EVIDENCE_ROLES = [
+  "states",
+  "proposes",
+  "rejects",
+  "explains",
+  "implements",
+  "reconsiders"
+];
 var WORK_STATUSES = ["active", "blocked", "paused", "done", "abandoned"];
 var HOSTS = ["claude-code", "codex"];
 var sessionId = (projectId, host, externalId) => uuidFrom(String(projectId), host, externalId);
@@ -46131,11 +46138,15 @@ function readText(root, rel) {
     return null;
   if (!st.isFile() || st.size > MAX_BYTES)
     return;
-  const inside = path2.relative(fs2.realpathSync(root), fs2.realpathSync(abs));
-  if (leaves(inside))
+  try {
+    const inside = path2.relative(fs2.realpathSync(root), fs2.realpathSync(abs));
+    if (leaves(inside))
+      return;
+    const buf = fs2.readFileSync(abs);
+    return buf.includes(0) ? undefined : buf.toString("utf8");
+  } catch {
     return;
-  const buf = fs2.readFileSync(abs);
-  return buf.includes(0) ? undefined : buf.toString("utf8");
+  }
 }
 function findSymbol(text, symbol2) {
   const re = new RegExp(`(?<![\\w$])${literal3(symbol2)}(?![\\w$])`);
@@ -47221,7 +47232,7 @@ var MAINTAINERS = new Set(["OWNER", "MEMBER", "COLLABORATOR"]);
 var text = (max) => exports_external.string().trim().min(1).max(max);
 var Quote = exports_external.object({ source: exports_external.string().regex(SOURCE_REF, "cite a source ref such as s12"), quote: exports_external.string() }).strict();
 var Evidence = Quote.extend({
-  role: exports_external.enum(EVIDENCE_ROLES),
+  role: exports_external.enum(EVIDENCE_ROLES).exclude(["reconsiders"]),
   reported_speaker: text(100).optional()
 }).strict();
 var Unit = exports_external.object({
@@ -47237,6 +47248,8 @@ var Unit = exports_external.object({
     text: text(500),
     outcome: exports_external.enum(OPTION_OUTCOMES),
     why: text(2000).optional(),
+    reconsider_when: text(1000).optional(),
+    reconsider_quote: Quote.optional(),
     evidence: exports_external.array(Evidence.partial({ role: true })).max(10).default([])
   }).strict()).max(12).default([]),
   evidence: exports_external.array(Evidence).max(20).default([]),
@@ -47300,10 +47313,20 @@ async function checkRecord(db, target, raw) {
       errors3.push(`${at}: stance is required for decisions and constraints, and only for them`);
     if (u.revisit_when !== undefined && u.stance !== "defer")
       errors3.push(`${at}: revisit_when goes only with stance defer`);
+    for (const o of u.options) {
+      if (o.reconsider_when === undefined !== (o.reconsider_quote === undefined))
+        errors3.push(`${at}: option "${head(o.text, 60)}": reconsider_when and reconsider_quote go together`);
+      else if (o.reconsider_when !== undefined && o.outcome !== "rejected")
+        errors3.push(`${at}: option "${head(o.text, 60)}": a reconsider condition goes only on a rejected option`);
+    }
   }
   const refs = new Set;
   for (const u of record3.units)
-    for (const q of [...u.evidence, ...u.adoption, ...u.options.flatMap((o) => o.evidence)])
+    for (const q of [
+      ...u.evidence,
+      ...u.adoption,
+      ...u.options.flatMap((o) => [...o.evidence, ...o.reconsider_quote ? [o.reconsider_quote] : []])
+    ])
       refs.add(Number(q.source.slice(1)));
   const sources = new Map((refs.size ? await db.selectFrom("source").select(["id", "kind", "author_kind", "author_login", "author_association", "text"]).where("project_id", "=", target.projectId).where("id", "in", [...refs]).execute() : []).map((s) => [s.id, s]));
   for (const r of refs) {
@@ -47342,12 +47365,30 @@ async function checkRecord(db, target, raw) {
       ];
     });
     const evidence = spans(u.evidence);
+    const reconsider = (o) => {
+      const q = o.reconsider_quote;
+      const s = q && sources.get(Number(q.source.slice(1)));
+      if (!q || !s || o.reconsider_when === undefined)
+        return null;
+      cites.add(s.id);
+      if (s.author_kind !== "owner") {
+        errors3.push(`${key}: option "${head(o.text, 60)}": reconsider_quote must quote the owner; ${q.source} is by ${s.author_login ?? s.author_kind}`);
+        return null;
+      }
+      const span = locate2(s.text, q.quote);
+      if (!span) {
+        errors3.push(`${key}: option "${head(o.text, 60)}": reconsider_quote not found in ${q.source}: "${head(q.quote, 80)}"`);
+        return null;
+      }
+      return { source: s.id, start: span[0], end: span[1] };
+    };
     const options = u.options.map((o) => ({
       input: o,
       evidence: spans(o.evidence.map((e) => ({
         ...e,
         role: e.role ?? (o.outcome === "rejected" ? "rejects" : o.outcome === "chosen" ? "states" : "explains")
-      })))
+      }))),
+      reconsider: reconsider(o)
     }));
     if (u.evidence.length === 0)
       quarantine.push("no evidence cited");
@@ -47465,7 +47506,7 @@ var contentHash = (u) => sha256(JSON.stringify([
   u.why ?? null,
   u.scope_note ?? null,
   u.revisit_when ?? null,
-  u.options.map((o) => [o.text, o.outcome, o.why ?? null])
+  u.options.map((o) => o.reconsider_when === undefined ? [o.text, o.outcome, o.why ?? null] : [o.text, o.outcome, o.why ?? null, o.reconsider_when])
 ]));
 var ACTIVATION = /needs|cannot become active/;
 async function saveRecord(trx, target, runId, checked, looked) {
@@ -47520,9 +47561,12 @@ ${checked.errors.map((e) => `  ${e}`).join(`
         position: i + 1,
         text: o.input.text,
         outcome: o.input.outcome,
-        why: o.input.why ?? null
+        why: o.input.why ?? null,
+        reconsider_when: o.input.reconsider_when ?? null
       }).returning("id").executeTakeFirstOrThrow();
       await evidence(o.evidence, option.id);
+      if (o.reconsider)
+        await evidence([{ ...o.reconsider, role: "reconsiders", reported: null }], option.id);
     }
     await evidence(p.evidence, null);
     for (const a of p.adoption) {
@@ -47656,7 +47700,7 @@ var Op = exports_external.discriminatedUnion("op", [
     source: SOURCE_REF2.optional(),
     file: File2.optional(),
     quote,
-    role: exports_external.enum(EVIDENCE_ROLES),
+    role: exports_external.enum(EVIDENCE_ROLES).exclude(["reconsiders"]),
     reported_speaker: exports_external.string().trim().min(1).max(100).optional()
   }).strict(),
   exports_external.object({ op: exports_external.literal("adopt"), unit, revision, source: SOURCE_REF2, quote }).strict(),