exec.sh: warn on stale-DESCRIBE and co-owned restatements; roll back an mxbuild crash on the written model

[MendixMau]

Status: draft, on hold for a field run, which waits for the maintainer. Depends on #315 (chore/baseline-word-trim): it is merged into this branch because that PR frees the baseline words this one uses. Merge #315 first. Apart from the first commit, this branch does not touch project-bin/exec.sh; the one call still needed there is listed as a pending follow-up below.

#261: a script restated from a stale DESCRIBE reverts earlier work

Problem. Script B was drafted from a DESCRIBE taken before script A ran. Running B put four old messages back, and every gate stayed green.

Fix. New project-bin/describe-baseline.sh:

• stamp: writes -- baseline: <Doc> sha256=<hash> (or absent) for each restated document.
• verify: runs DESCRIBE again and reports drift with a short diff.
• record-applied: run after a gate pass; records each document's hash after the write in .claude/loop/describe-baseline/applied.tsv.
• live and applied-by: helpers used by script-owners.sh.

verify reports SAME in two cases: the live body is this script's own recorded write (a re-run after a clean exec), or a baselined document is absent (a rebuild onto a fresh model).

#269: one document, several owning scripts

Problem. On three field apps, 99 of 579, 130 of 357 and 38 of 159 documents were created by more than one script. Replaying an older script reverts the newer one.

Fix. New project-bin/script-owners.sh with docs, report, count and check, plus -- supersedes: / -- superseded-by: headers.

• Run order and header names ignore a leading done-, the rename iterative-build-loop.md gives an executed script.
• The two "replaying this reverts O" verdicts ask the model first. If the document is absent, or its live body was applied by this script or an older one, there is no warning. So a rebuild that replays scripts in run order with supersedes headers stays quiet. With no ./mxcli to ask, it stays a conflict.
• gate-check.sh prints the co-owned count when it is above 0. Information only.
• exec.sh warns by default, and the warning lands in the BUILD-LOG row. It refuses under MXTK_RESTATE_GUARD=refuse or exec approval ask.

From #309 (refs)

• mxbuild crash after the write. When mxbuild ran clean on the baseline and then crashes on the written model, the snapshot is restored and a BUILD-LOG row is written. If the baseline was not measured, the write is kept as before. The message now says STOP and names restore-mpr.sh.

• STOP 29. DESCRIBE omits role and layout-row visibility, so the row gives a command with no | to run before restating:

  grep -la -e ModuleRoles -e ConditionalVisibilitySettings /dev/null $(grep -rlF '<Doc name>' mprcontents/)

  A hit may be an empty setting, or a unit that only names the document. A hit means "check it in Studio Pro".

"Not found" detection

No capture of DESCRIBE on a missing microflow or page exists in this repo. The match follows the not-found output recorded for other kinds:

• Error: entity not found: ZKT35.Widget (duration: …), EXIT 1 (a 2026-08-07 retest log under bug-logs/)
• Error: constant not found: Nope.X, rc 1 (v0.24.0, project-bin/conformance-check.sh)

So it matches defensively: non-zero exit, no DESCRIBE body, and not found: <Doc> in either stream. "Parse error" and "no describable document named" fail the call instead of reading as absent. A real missing-microflow capture should be added during the field run.

Pending follow-up: one line in exec.sh (another PR owns exec.sh tonight)

Insert right after the LOOK-owed block (the look-ledger.sh owe call):

# ── Applied record (describe-baseline.sh, #261) ──────────────────────────────
if [ "$PATCH_MODE" = 0 ] && [ "$GATE_STATE" = "pass" ] && [ "$EXEC_STATUS" -eq 0 ] \
   && [ -f "$(dirname "$0")/describe-baseline.sh" ]; then
  PROJECT_ROOT="$PROJECT_ROOT" bash "$(dirname "$0")/describe-baseline.sh" record-applied "$SCRIPT" >/dev/null 2>&1 || true
fi

• Without it, re-running a stamped script after a clean exec reads as drift, and under ask it is refused.
• The fixture's exec-level case for this prints NOT RUN until exec.sh carries the line.
• With the line applied to a copy of exec.sh, the fixture passes 67/67.

Skills

learned-mdl-preflight.md changes:

• STOP 21 now covers drafting ahead of a batch (stamp the DESCRIBE, add supersedes).
• New STOP 29.
• No other text in the file was shortened to make room. An earlier commit on this branch had shortened the STOP 16/22/23 history cells; it is reverted, and the room comes from chore(context): free baseline word budget without dropping rules #315.

Checks (after merging #315 and master)

• LC_ALL=C bin/render-routing.sh --check: in sync, baseline 76,467 of 80,000 words, exit 0.
• check-scripts, check-portability, check-no-private-citations, the leak guard (LEAKGUARD_ALLOW_NO_DENYLIST=1) and check-pr-discipline: all clean.
• tests/wave2/test-restatement-guard.sh: 65 ok plus 1 NOT RUN (the pending exec.sh case); 67/67 with the follow-up line. Against master's exec.sh, the guard and crash cases fail.
• Run earlier on this branch: test-bug07-08.sh 43/0, test-exec-lock-watch.sh 45/0, test-exec-change-class.sh 20/0, test-model-stamp.sh 33/0, test-bug03-gates.sh 31/0.

Field run

Still owed. Nothing has run against a real project yet.

Refs #261
Refs #269
Refs #309

🤖 Generated with Claude Code

https://claude.ai/code/session_01VJgWP5vEoAsNsJYqCDMGNw