@milehimikey/em 1.6.0 → 1.7.0

package/dist/catalog/sliceReadyValidate.js

@@ -0,0 +1,85 @@
+// SPDX-License-Identifier: MIT
+// `em validate --slice-ready <key>` (MIL-87): the handoff gate without the bridge. Gives em
+// itself a native version of the readiness check that used to live only in em-sdd-bridge's
+// `assertReadyToImplement` — status: ready-to-implement AND every Open Question checked —
+// so any toolchain reading slice docs directly (not just ones routed through the bridge) has
+// a gate to enforce.
+//
+// Deliberately single-slice, opt-in — unlike catalog/lineageValidate.ts (MIL-84) and
+// catalog/frontmatterCoherenceValidate.ts (MIL-85), which run unconditionally on every
+// `em validate` because they only fire on genuine anomalies. "Not yet ready-to-implement" /
+// "has unchecked Open Questions" is the NORMAL state of most slices most of the time (drafts,
+// reviewed-but-not-ready-yet, ...) — splicing this into the unconditional diagnostic set would
+// make plain `em validate` permanently noisy on any healthy in-progress model. So this only
+// ever runs for the one slice named by `--slice-ready <key>`.
+//
+// "Note binding" (the ticket's own phrase) means reusing docJoin.ts's resolveSliceDocJoin — the
+// same note-gated resolution `em export` (MIL-91) uses — rather than the filename-only
+// readSliceDoc/existsSync convention `em catalog`/`em render` deliberately use instead (that
+// convention has a tested invariant of ignoring `note` entirely; this module doesn't touch it).
+// A slice with no `note "slices/<key>.md"` element bound to it isn't ready by definition: there's
+// nothing ratified to check status/Open Questions against.
+//
+// version/status/link coherence (MIL-85) is folded in for free at the CLI layer (src/cli.ts):
+// validateFrontmatterCoherence already runs unconditionally and already tags its diagnostics
+// with `refs: [sliceKey]`, so the `--slice-ready` branch filters the full combined diagnostic
+// set by that ref instead of this module re-deriving classifyImplementationDrift.
+import { makeDiag, pushDiag } from "../model/rules.js";
+import { resolveSliceDocJoin } from "./docJoin.js";
+import { readSliceDoc } from "./readSliceDoc.js";
+/**
+ * Readiness gate for one slice, named by its export key (`refs.sliceKeys`). `baseDir` is the
+ * `.em` file's directory, same convention every other doc/note path in em uses. Always warning-
+ * severity (fits validate's existing warning-producer shape) except for a bad `sliceKey` itself,
+ * which is an error — a CLI-argument mistake, not a model-quality finding. The `--slice-ready`
+ * flag in src/cli.ts is what decides whether these warnings gate the exit code.
+ */
+export function validateSliceReady(model, refs, baseDir, sliceKey) {
+    const sliceIndex = refs.sliceKeys.indexOf(sliceKey);
+    if (sliceIndex === -1) {
+        return [
+            makeDiag("slice-ready-unknown-slice", {
+                message: `no slice with export key "${sliceKey}" in this model`,
+                refs: [sliceKey],
+            }),
+        ];
+    }
+    const slice = model.slices[sliceIndex];
+    const { doc, diagnostics: joinDiagnostics } = resolveSliceDocJoin(slice, sliceKey, baseDir, (id) => refs.refById.get(id));
+    if (doc.reason === "no-doc-bound") {
+        return [
+            makeDiag("slice-ready-no-doc-bound", {
+                message: `slice "${sliceKey}" has no doc bound via \`note "slices/${sliceKey}.md"\` — bind a slice doc before it can be ready-to-implement`,
+                line: slice.line,
+                refs: [sliceKey],
+            }),
+        ];
+    }
+    if (doc.reason === "binding-missing-file" || doc.reason === "frontmatter-invalid") {
+        // Reuse docJoin's own diagnostics verbatim — don't re-code binding-missing-file/
+        // frontmatter-invalid a second time under a slice-ready-specific code.
+        return joinDiagnostics;
+    }
+    // doc.reason === null: found, usable frontmatter.
+    const diags = [];
+    if (doc.status !== "ready-to-implement") {
+        pushDiag(diags, "slice-ready-status-not-ready", {
+            message: `slice "${sliceKey}" is status: ${doc.status ?? "(none)"}, not ready-to-implement`,
+            line: slice.line,
+            refs: [sliceKey],
+        });
+    }
+    // resolveSliceDocJoin's SliceDocExport deliberately never carries Open Questions counts (same
+    // hard boundary that keeps doc.html/doc.raw out of it) — re-read via readSliceDoc for the
+    // full SliceDoc. Non-null: doc.reason === null already implies the file exists and parses.
+    const parsed = readSliceDoc(baseDir, sliceKey);
+    if (parsed.openQuestionsUnchecked > 0) {
+        pushDiag(diags, "slice-ready-open-questions-unchecked", {
+            message: `slice "${sliceKey}" has ${parsed.openQuestionsUnchecked} of ${parsed.openQuestionsTotal} Open Question(s) unchecked`,
+            line: slice.line,
+            refs: [sliceKey],
+        });
+    }
+    return diags;
+}
+//# sourceMappingURL=sliceReadyValidate.js.map

package/dist/catalog/sliceReadyValidate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sliceReadyValidate.js","sourceRoot":"","sources":["../../src/catalog/sliceReadyValidate.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,4FAA4F;AAC5F,2FAA2F;AAC3F,0FAA0F;AAC1F,6FAA6F;AAC7F,qBAAqB;AACrB,EAAE;AACF,qFAAqF;AACrF,uFAAuF;AACvF,4FAA4F;AAC5F,8FAA8F;AAC9F,+FAA+F;AAC/F,4FAA4F;AAC5F,8DAA8D;AAC9D,EAAE;AACF,gGAAgG;AAChG,uFAAuF;AACvF,6FAA6F;AAC7F,gGAAgG;AAChG,kGAAkG;AAClG,2DAA2D;AAC3D,EAAE;AACF,8FAA8F;AAC9F,6FAA6F;AAC7F,8FAA8F;AAC9F,kFAAkF;AAKlF,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAsB,EACtB,IAAgB,EAChB,OAAe,EACf,QAAgB;IAEhB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,QAAQ,CAAC,2BAA2B,EAAE;gBACpC,OAAO,EAAE,6BAA6B,QAAQ,iBAAiB;gBAC/D,IAAI,EAAE,CAAC,QAAQ,CAAC;aACjB,CAAC;SACH,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,eAAe,EAAE,GAAG,mBAAmB,CAC/D,KAAK,EACL,QAAQ,EACR,OAAO,EACP,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAE,CAC9B,CAAC;IAEF,IAAI,GAAG,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QAClC,OAAO;YACL,QAAQ,CAAC,0BAA0B,EAAE;gBACnC,OAAO,EAAE,UAAU,QAAQ,yCAAyC,QAAQ,+DAA+D;gBAC3I,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,CAAC,QAAQ,CAAC;aACjB,CAAC;SACH,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,sBAAsB,IAAI,GAAG,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;QAClF,iFAAiF;QACjF,uEAAuE;QACvE,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,kDAAkD;IAClD,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,IAAI,GAAG,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;QACxC,QAAQ,CAAC,KAAK,EAAE,8BAA8B,EAAE;YAC9C,OAAO,EAAE,UAAU,QAAQ,gBAAgB,GAAG,CAAC,MAAM,IAAI,QAAQ,0BAA0B;YAC3F,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,CAAC,QAAQ,CAAC;SACjB,CAAC,CAAC;IACL,CAAC;IAED,8FAA8F;IAC9F,0FAA0F;IAC1F,2FAA2F;IAC3F,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAE,CAAC;IAChD,IAAI,MAAM,CAAC,sBAAsB,GAAG,CAAC,EAAE,CAAC;QACtC,QAAQ,CAAC,KAAK,EAAE,sCAAsC,EAAE;YACtD,OAAO,EAAE,UAAU,QAAQ,SAAS,MAAM,CAAC,sBAAsB,OAAO,MAAM,CAAC,kBAAkB,6BAA6B;YAC9H,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,CAAC,QAAQ,CAAC;SACjB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/cli/diff-inputs.d.ts

@@ -1,3 +1,4 @@
+import { SliceDoc } from "../catalog/sliceDoc.js";
 /** Resolved `em diff` invocation, or a user-facing `error` for an invalid form. */
 export type DiffPlan = {
     error: string;
@@ -42,3 +43,22 @@ export type RevisionResult = {
  * unit-testable without a real repository.
  */
 export declare function resolveRevision(file: string, rev: string, runGit?: GitRunner): RevisionResult;
+/**
+ * Resolve a slice's doc (`slices/<sliceKey>.md`, relative to `anchorFile`'s directory — same
+ * convention as every other doc/note path in em) at git revision `rev`. Unlike
+ * `resolveRevision`, a missing doc at a revision is routine (not every slice had a doc yet, or
+ * the doc simply isn't tracked) rather than a user-facing error — so every failure mode
+ * collapses to `null`, for `em diff`'s lineage annotation (MIL-84) to treat as "nothing to
+ * annotate with" rather than aborting the diff.
+ */
+export declare function resolveDocAtRevision(anchorFile: string, sliceKey: string, rev: string, runGit?: GitRunner): SliceDoc | null;
+/**
+ * Slice doc keys (filename stems under `slices/`, relative to `anchorFile`'s directory — same
+ * anchor convention as `resolveDocAtRevision`) present at git revision `rev`. Used by `em ledger`
+ * (MIL-89) to discover the candidate set of docs to compare across two revisions, reusing the
+ * same repo-root resolution `showAtRevision` does rather than a second, divergent way of finding
+ * "what slice docs exist here." Returns `[]` (not an error) when the repo can't be resolved or
+ * `slices/` didn't exist at `rev` — both routine (a model with no slice docs yet), matching
+ * `resolveDocAtRevision`'s "missing is routine" stance.
+ */
+export declare function listSliceKeysAtRevision(anchorFile: string, rev: string, runGit?: GitRunner): string[];

package/dist/cli/diff-inputs.js

@@ -4,7 +4,8 @@
 // unit-tested without spawning a subprocess or a real git repo (cli.ts keeps the
 // process.exit/console wiring; see test/diff-inputs.test.ts).
 import { spawnSync } from "node:child_process";
-import { dirname, resolve } from "node:path";
+import { basename, dirname, resolve } from "node:path";
+import { parseSliceDoc } from "../catalog/sliceDoc.js";
 /**
  * Validate the `em diff` argument/flag combination. Pure — no I/O. The two forms
  * (two files, or one file across git revisions) are mutually exclusive.
@@ -33,30 +34,86 @@ export const realGit = (args) => {
     const r = spawnSync("git", args, { encoding: "utf8" });
     return { status: r.status, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
 };
+/**
+ * Read `targetAbs`'s content at git revision `rev`, resolving the repo root from
+ * `anchorFile`'s directory (a file known to be somewhere inside the repo — doesn't itself have
+ * to be `targetAbs`, e.g. a slice doc resolved relative to its `.em` file's location). The git
+ * runner is injectable so every failure branch is unit-testable without a real repository.
+ *
+ * Existence/path lookup uses `git ls-tree -r --name-only <rev>` — scoped to `rev` itself, not
+ * `git ls-files` (which reflects the *current* index/working tree). A doc that existed at
+ * `rev` but has since been deleted — the routine case for a `superseded-by`-carrying doc, which
+ * gets removed in the very commit that performs the split/merge/removal it records — would
+ * otherwise resolve to "not tracked" even though `git show <rev>:<path>` can read it just fine.
+ */
+function showAtRevision(runGit, anchorFile, targetAbs, rev) {
+    const toplevel = runGit(["-C", dirname(resolve(anchorFile)), "rev-parse", "--show-toplevel"]);
+    if (toplevel.status !== 0)
+        return { ok: false, reason: "no-repo" };
+    const repoRoot = toplevel.stdout.trim();
+    const lsTree = runGit(["-C", repoRoot, "ls-tree", "-r", "--name-only", rev, "--", targetAbs]);
+    const relPath = lsTree.stdout.trim().split("\n")[0];
+    if (!relPath)
+        return { ok: false, reason: "not-tracked", repoRoot };
+    const show = runGit(["-C", repoRoot, "show", `${rev}:${relPath}`]);
+    if (show.status !== 0) {
+        return { ok: false, reason: "show-failed", relPath, detail: (show.stderr || "").trim() || "unknown git error" };
+    }
+    return { ok: true, content: show.stdout };
+}
 /**
  * Resolve `file`'s content at git revision `rev` via `git show <rev>:<repo-relative-path>`.
  * The git runner is injectable so the not-a-repo / not-tracked / bad-rev branches are
  * unit-testable without a real repository.
  */
 export function resolveRevision(file, rev, runGit = realGit) {
-    const abs = resolve(file);
-    const toplevel = runGit(["-C", dirname(abs), "rev-parse", "--show-toplevel"]);
-    if (toplevel.status !== 0) {
-        return { ok: false, message: `em diff: ${file} is not inside a git repository (needed for --from/--to)` };
+    const result = showAtRevision(runGit, file, resolve(file), rev);
+    if (result.ok)
+        return result;
+    switch (result.reason) {
+        case "no-repo":
+            return { ok: false, message: `em diff: ${file} is not inside a git repository (needed for --from/--to)` };
+        case "not-tracked":
+            return { ok: false, message: `em diff: ${file} is not tracked by git in ${result.repoRoot}` };
+        case "show-failed":
+            return { ok: false, message: `em diff: cannot read ${result.relPath} at revision "${rev}": ${result.detail}` };
     }
+}
+/**
+ * Resolve a slice's doc (`slices/<sliceKey>.md`, relative to `anchorFile`'s directory — same
+ * convention as every other doc/note path in em) at git revision `rev`. Unlike
+ * `resolveRevision`, a missing doc at a revision is routine (not every slice had a doc yet, or
+ * the doc simply isn't tracked) rather than a user-facing error — so every failure mode
+ * collapses to `null`, for `em diff`'s lineage annotation (MIL-84) to treat as "nothing to
+ * annotate with" rather than aborting the diff.
+ */
+export function resolveDocAtRevision(anchorFile, sliceKey, rev, runGit = realGit) {
+    const targetAbs = resolve(dirname(resolve(anchorFile)), "slices", `${sliceKey}.md`);
+    const result = showAtRevision(runGit, anchorFile, targetAbs, rev);
+    return result.ok ? parseSliceDoc(result.content) : null;
+}
+/**
+ * Slice doc keys (filename stems under `slices/`, relative to `anchorFile`'s directory — same
+ * anchor convention as `resolveDocAtRevision`) present at git revision `rev`. Used by `em ledger`
+ * (MIL-89) to discover the candidate set of docs to compare across two revisions, reusing the
+ * same repo-root resolution `showAtRevision` does rather than a second, divergent way of finding
+ * "what slice docs exist here." Returns `[]` (not an error) when the repo can't be resolved or
+ * `slices/` didn't exist at `rev` — both routine (a model with no slice docs yet), matching
+ * `resolveDocAtRevision`'s "missing is routine" stance.
+ */
+export function listSliceKeysAtRevision(anchorFile, rev, runGit = realGit) {
+    const toplevel = runGit(["-C", dirname(resolve(anchorFile)), "rev-parse", "--show-toplevel"]);
+    if (toplevel.status !== 0)
+        return [];
     const repoRoot = toplevel.stdout.trim();
-    const lsFiles = runGit(["-C", repoRoot, "ls-files", "--full-name", "--", abs]);
-    const relPath = lsFiles.stdout.trim().split("\n")[0];
-    if (!relPath) {
-        return { ok: false, message: `em diff: ${file} is not tracked by git in ${repoRoot}` };
-    }
-    const show = runGit(["-C", repoRoot, "show", `${rev}:${relPath}`]);
-    if (show.status !== 0) {
-        return {
-            ok: false,
-            message: `em diff: cannot read ${relPath} at revision "${rev}": ${(show.stderr || "").trim() || "unknown git error"}`,
-        };
-    }
-    return { ok: true, content: show.stdout };
+    const slicesDirAbs = resolve(dirname(resolve(anchorFile)), "slices");
+    const lsTree = runGit(["-C", repoRoot, "ls-tree", "-r", "--name-only", rev, "--", slicesDirAbs]);
+    if (lsTree.status !== 0)
+        return [];
+    return lsTree.stdout
+        .split("\n")
+        .map((line) => line.trim())
+        .filter((line) => line.endsWith(".md"))
+        .map((line) => basename(line, ".md"));
 }
 //# sourceMappingURL=diff-inputs.js.map

package/dist/cli/diff-inputs.js.map

@@ -1 +1 @@
-{"version":3,"file":"diff-inputs.js","sourceRoot":"","sources":["../../src/cli/diff-inputs.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,sEAAsE;AACtE,gFAAgF;AAChF,iFAAiF;AACjF,8DAA8D;AAE9D,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQ7C;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAe,EACf,OAA2B,EAC3B,IAAoC;IAEpC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO;gBACL,KAAK,EAAE,yFAAyF;aACjG,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC;IACpD,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,KAAK,EAAE,oFAAoF;SAC5F,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC7C,CAAC;AAUD,kFAAkF;AAClF,MAAM,CAAC,MAAM,OAAO,GAAc,CAAC,IAAI,EAAE,EAAE;IACzC,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACvD,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;AAC9E,CAAC,CAAC;AAKF;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,GAAW,EAAE,SAAoB,OAAO;IACpF,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC9E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,IAAI,0DAA0D,EAAE,CAAC;IAC5G,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,IAAI,6BAA6B,QAAQ,EAAE,EAAE,CAAC;IACzF,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAG,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC;IACnE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,wBAAwB,OAAO,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,mBAAmB,EAAE;SACtH,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;AAC5C,CAAC"}
+{"version":3,"file":"diff-inputs.js","sourceRoot":"","sources":["../../src/cli/diff-inputs.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,sEAAsE;AACtE,gFAAgF;AAChF,iFAAiF;AACjF,8DAA8D;AAE9D,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,aAAa,EAAY,MAAM,wBAAwB,CAAC;AAQjE;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAe,EACf,OAA2B,EAC3B,IAAoC;IAEpC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO;gBACL,KAAK,EAAE,yFAAyF;aACjG,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC;IACpD,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,KAAK,EAAE,oFAAoF;SAC5F,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC7C,CAAC;AAUD,kFAAkF;AAClF,MAAM,CAAC,MAAM,OAAO,GAAc,CAAC,IAAI,EAAE,EAAE;IACzC,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACvD,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;AAC9E,CAAC,CAAC;AAWF;;;;;;;;;;;GAWG;AACH,SAAS,cAAc,CAAC,MAAiB,EAAE,UAAkB,EAAE,SAAiB,EAAE,GAAW;IAC3F,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC9F,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACnE,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IAC9F,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;IACpE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAG,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC;IACnE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,mBAAmB,EAAE,CAAC;IAClH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,GAAW,EAAE,SAAoB,OAAO;IACpF,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAC7B,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,SAAS;YACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,IAAI,0DAA0D,EAAE,CAAC;QAC5G,KAAK,aAAa;YAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,IAAI,6BAA6B,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QAChG,KAAK,aAAa;YAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,wBAAwB,MAAM,CAAC,OAAO,iBAAiB,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;IACnH,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAkB,EAAE,QAAgB,EAAE,GAAW,EAAE,SAAoB,OAAO;IACjH,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,QAAQ,KAAK,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAkB,EAAE,GAAW,EAAE,SAAoB,OAAO;IAClG,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC9F,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;IACjG,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,MAAM,CAAC,MAAM;SACjB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;SACtC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;AAC1C,CAAC"}

package/dist/cli/ledgerCheck.d.ts

@@ -0,0 +1,38 @@
+import { GitRunner } from "./diff-inputs.js";
+export type LedgerFindingCode = "ledger-content-without-version-bump" | "ledger-version-without-content-change" | "ledger-version-regression";
+export interface LedgerFinding {
+    sliceKey: string;
+    code: LedgerFindingCode;
+    message: string;
+    oldVersion: number;
+    newVersion: number;
+    bodyChanged: boolean;
+    lineageChanged: boolean;
+}
+export type LedgerSkipReason = "no-prior-revision" | "deleted" | "frontmatter-invalid";
+export interface LedgerSkip {
+    sliceKey: string;
+    reason: LedgerSkipReason;
+}
+export interface LedgerCheckResult {
+    findings: LedgerFinding[];
+    skipped: LedgerSkip[];
+    /** Total slice keys considered (the union of both revisions' `slices/*.md` — every key that
+     *  produced either a finding, a skip, or a clean pass). Lets a caller report "N checked"
+     *  without re-deriving it from findings.length + skipped.length + (silent clean count). */
+    checkedCount: number;
+}
+/**
+ * Compare every slice doc's version:/content agreement between two revisions of `anchorFile`'s
+ * repo. `to` null means "the current working tree" (same convention as `em diff`). Pure aside
+ * from the injected GitRunner and fs reads via readSliceDoc — no process.exit, no console.
+ *
+ * Deliberately excludes `status`/`implementedIn` from the content comparison: those change
+ * independently by design during re-ratification (docs/slice-doc-schema.md, "`status` under
+ * re-ratification") — including them would false-positive on every ordinary lifecycle
+ * transition. Also excludes `pattern`/`swimlane`/`schemaVersion`: decorative, not currently
+ * exposed on `SliceDoc` at all. Body comparison is `.trim()`-only — strips leading/trailing
+ * whitespace, avoiding a false positive from a trailing-newline/CRLF-only re-save, without
+ * risking a false negative on a real prose edit.
+ */
+export declare function checkLedger(anchorFile: string, from: string, to: string | null, runGit?: GitRunner): LedgerCheckResult;

package/dist/cli/ledgerCheck.js

@@ -0,0 +1,116 @@
+// SPDX-License-Identifier: MIT
+// `em ledger` (MIL-89): checks that a slice doc's `version:` frontmatter field and its content
+// (body + lineage refs) always change together across two git revisions — a version bump with
+// no real content change is a no-op ledger entry, a content change with no version bump is a
+// stale ratification signal, and a version going backwards is a typo/regression. Opt-in,
+// CI-recipe tier — never folded into `em validate`, which stays a fast function of the current
+// tree (see lineageValidate.ts's header comment, which named this exact shape during MIL-84).
+//
+// Sibling to diff-inputs.ts in role: testable input handling / git-revision logic factored out
+// of cli.ts, with an injectable GitRunner and no process.exit/console — see
+// test/ledgerCheck.test.ts. Reuses resolveDocAtRevision/listSliceKeysAtRevision rather than
+// second, divergent git plumbing.
+import { existsSync, readdirSync } from "node:fs";
+import { basename, dirname, join, resolve } from "node:path";
+import { hasUsableFrontmatter } from "../catalog/sliceDoc.js";
+import { readSliceDoc } from "../catalog/readSliceDoc.js";
+import { realGit, listSliceKeysAtRevision, resolveDocAtRevision } from "./diff-inputs.js";
+/** Slice keys currently on disk under `<baseDir>/slices/*.md` — the working-tree counterpart to
+ *  `listSliceKeysAtRevision`, used when `to` is null (compare against the working tree). */
+function listSliceKeysOnDisk(baseDir) {
+    const dir = join(baseDir, "slices");
+    if (!existsSync(dir))
+        return [];
+    return readdirSync(dir)
+        .filter((name) => name.endsWith(".md"))
+        .map((name) => basename(name, ".md"));
+}
+/** True when two lineage refs (or their absence) carry the same declared text — compared on
+ *  `raw` so a malformed ref (null sliceKey/version) still counts as a real change if its text
+ *  changes, not silently treated as equal to another malformed ref. */
+function refEqual(a, b) {
+    if (a === null || b === null)
+        return a === b;
+    return a.raw === b.raw;
+}
+function refListEqual(a, b) {
+    if (a.length !== b.length)
+        return false;
+    return a.every((ref, i) => refEqual(ref, b[i]));
+}
+/** True when either side's declared lineage (`split-from`/`merged-from`/`superseded-by`)
+ *  differs — these describe what the doc *asserts*, same-commit-authoring convention means a
+ *  legitimate change here always co-occurs with a version bump (docs/slice-doc-schema.md). */
+function lineageChanged(oldDoc, newDoc) {
+    return (!refEqual(oldDoc.splitFrom, newDoc.splitFrom) ||
+        !refListEqual(oldDoc.mergedFrom, newDoc.mergedFrom) ||
+        !refListEqual(oldDoc.supersededBy, newDoc.supersededBy));
+}
+/**
+ * Compare every slice doc's version:/content agreement between two revisions of `anchorFile`'s
+ * repo. `to` null means "the current working tree" (same convention as `em diff`). Pure aside
+ * from the injected GitRunner and fs reads via readSliceDoc — no process.exit, no console.
+ *
+ * Deliberately excludes `status`/`implementedIn` from the content comparison: those change
+ * independently by design during re-ratification (docs/slice-doc-schema.md, "`status` under
+ * re-ratification") — including them would false-positive on every ordinary lifecycle
+ * transition. Also excludes `pattern`/`swimlane`/`schemaVersion`: decorative, not currently
+ * exposed on `SliceDoc` at all. Body comparison is `.trim()`-only — strips leading/trailing
+ * whitespace, avoiding a false positive from a trailing-newline/CRLF-only re-save, without
+ * risking a false negative on a real prose edit.
+ */
+export function checkLedger(anchorFile, from, to, runGit = realGit) {
+    const baseDir = dirname(resolve(anchorFile));
+    const oldKeys = listSliceKeysAtRevision(anchorFile, from, runGit);
+    const newKeys = to ? listSliceKeysAtRevision(anchorFile, to, runGit) : listSliceKeysOnDisk(baseDir);
+    const keys = [...new Set([...oldKeys, ...newKeys])].sort();
+    const findings = [];
+    const skipped = [];
+    for (const sliceKey of keys) {
+        const oldDoc = resolveDocAtRevision(anchorFile, sliceKey, from, runGit);
+        if (!oldDoc) {
+            skipped.push({ sliceKey, reason: "no-prior-revision" });
+            continue;
+        }
+        const newDoc = to ? resolveDocAtRevision(anchorFile, sliceKey, to, runGit) : readSliceDoc(baseDir, sliceKey);
+        if (!newDoc) {
+            skipped.push({ sliceKey, reason: "deleted" });
+            continue;
+        }
+        // hasUsableFrontmatter() only checks that the `version` key is *present*
+        // (missingRequiredFields), not that its value parsed to a valid positive integer —
+        // `version: abc`/`version: 0`/`version: 1.5` all pass that gate with SliceDoc.version still
+        // null (see sliceDoc.ts's parseVersion()). lineageValidate.ts hits the same gap and handles
+        // it the same way: an explicit null check, routed to the same skip a missing key gets,
+        // rather than a non-null assertion that would corrupt a finding's message/classification.
+        if (!hasUsableFrontmatter(oldDoc) || !hasUsableFrontmatter(newDoc) || oldDoc.version === null || newDoc.version === null) {
+            skipped.push({ sliceKey, reason: "frontmatter-invalid" });
+            continue;
+        }
+        const oldVersion = oldDoc.version;
+        const newVersion = newDoc.version;
+        const bodyChanged = oldDoc.body.trim() !== newDoc.body.trim();
+        const docsLineageChanged = lineageChanged(oldDoc, newDoc);
+        const contentChanged = bodyChanged || docsLineageChanged;
+        let code = null;
+        if (newVersion < oldVersion) {
+            code = "ledger-version-regression";
+        }
+        else if (contentChanged && newVersion === oldVersion) {
+            code = "ledger-content-without-version-bump";
+        }
+        else if (!contentChanged && newVersion > oldVersion) {
+            code = "ledger-version-without-content-change";
+        }
+        if (!code)
+            continue;
+        const message = code === "ledger-version-regression"
+            ? `slice "${sliceKey}": version went backwards (v${oldVersion} -> v${newVersion})`
+            : code === "ledger-content-without-version-bump"
+                ? `slice "${sliceKey}": doc content changed but version: didn't bump (still v${oldVersion})`
+                : `slice "${sliceKey}": version: bumped (v${oldVersion} -> v${newVersion}) but doc content is unchanged`;
+        findings.push({ sliceKey, code, message, oldVersion, newVersion, bodyChanged, lineageChanged: docsLineageChanged });
+    }
+    return { findings, skipped, checkedCount: keys.length };
+}
+//# sourceMappingURL=ledgerCheck.js.map

package/dist/cli/ledgerCheck.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledgerCheck.js","sourceRoot":"","sources":["../../src/cli/ledgerCheck.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,+FAA+F;AAC/F,8FAA8F;AAC9F,6FAA6F;AAC7F,yFAAyF;AACzF,+FAA+F;AAC/F,8FAA8F;AAC9F,EAAE;AACF,+FAA+F;AAC/F,4EAA4E;AAC5E,4FAA4F;AAC5F,kCAAkC;AAElC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAsB,MAAM,wBAAwB,CAAC;AAClF,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAa,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAiCrG;4FAC4F;AAC5F,SAAS,mBAAmB,CAAC,OAAe;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACpC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,OAAO,WAAW,CAAC,GAAG,CAAC;SACpB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;SACtC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED;;uEAEuE;AACvE,SAAS,QAAQ,CAAC,CAAkB,EAAE,CAAkB;IACtD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7C,OAAO,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC;AACzB,CAAC;AAED,SAAS,YAAY,CAAC,CAAa,EAAE,CAAa;IAChD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;8FAE8F;AAC9F,SAAS,cAAc,CAAC,MAAgB,EAAE,MAAgB;IACxD,OAAO,CACL,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC;QAC7C,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;QACnD,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,CACxD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,WAAW,CAAC,UAAkB,EAAE,IAAY,EAAE,EAAiB,EAAE,SAAoB,OAAO;IAC1G,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,uBAAuB,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,UAAU,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACpG,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAE3D,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAiB,EAAE,CAAC;IAEjC,KAAK,MAAM,QAAQ,IAAI,IAAI,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,oBAAoB,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACxE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACxD,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC7G,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,yEAAyE;QACzE,mFAAmF;QACnF,4FAA4F;QAC5F,4FAA4F;QAC5F,uFAAuF;QACvF,0FAA0F;QAC1F,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YACzH,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;YAC1D,SAAS;QACX,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC;QAClC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC;QAClC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9D,MAAM,kBAAkB,GAAG,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,cAAc,GAAG,WAAW,IAAI,kBAAkB,CAAC;QAEzD,IAAI,IAAI,GAA6B,IAAI,CAAC;QAC1C,IAAI,UAAU,GAAG,UAAU,EAAE,CAAC;YAC5B,IAAI,GAAG,2BAA2B,CAAC;QACrC,CAAC;aAAM,IAAI,cAAc,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;YACvD,IAAI,GAAG,qCAAqC,CAAC;QAC/C,CAAC;aAAM,IAAI,CAAC,cAAc,IAAI,UAAU,GAAG,UAAU,EAAE,CAAC;YACtD,IAAI,GAAG,uCAAuC,CAAC;QACjD,CAAC;QACD,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,MAAM,OAAO,GACX,IAAI,KAAK,2BAA2B;YAClC,CAAC,CAAC,UAAU,QAAQ,+BAA+B,UAAU,QAAQ,UAAU,GAAG;YAClF,CAAC,CAAC,IAAI,KAAK,qCAAqC;gBAC9C,CAAC,CAAC,UAAU,QAAQ,2DAA2D,UAAU,GAAG;gBAC5F,CAAC,CAAC,UAAU,QAAQ,wBAAwB,UAAU,QAAQ,UAAU,gCAAgC,CAAC;QAE/G,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACtH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;AAC1D,CAAC"}

package/dist/cli/skillCheck.d.ts

@@ -0,0 +1,18 @@
+export type SkillCheckFindingCode = "skill-check-not-installed" | "skill-check-stamp-missing" | "skill-check-stamp-mismatch" | "skill-check-content-drift";
+export interface SkillCheckFinding {
+    code: SkillCheckFindingCode;
+    message: string;
+    vendoredStamp?: string | null;
+    installedVersion?: string;
+    driftedFiles?: string[];
+}
+export interface SkillCheckResult {
+    findings: SkillCheckFinding[];
+    ok: boolean;
+}
+/**
+ * Pure: compares vendoredDir against packagedDir (content) and installedVersion (em --version
+ * — injected, never re-derived; see src/cli.ts's PKG_VERSION) against the vendored SKILL.md's
+ * em-version: stamp. No process.exit, no console.
+ */
+export declare function checkSkillSync(packagedDir: string, vendoredDir: string, installedVersion: string): SkillCheckResult;

package/dist/cli/skillCheck.js

@@ -0,0 +1,63 @@
+// SPDX-License-Identifier: MIT
+// `em skill check` (MIL-93): checks a consuming repo's vendored skill copy for drift against
+// the em package actually installed — the downstream half of the skill-drift problem (the
+// in-repo half is MIL-92's skillVersionCheck.ts, which checks *this* repo's own package.json
+// against *its own* bundled skill across two git revisions). This check has no git revisions
+// at all: both sides are directories on disk right now, so unlike ledgerCheck.ts/
+// skillVersionCheck.ts there's no GitRunner to inject.
+//
+// Two independent signals, both reported (never short-circuited on the first):
+//  - the vendored SKILL.md's em-version: stamp vs. the installed em's own version
+//  - a full content diff against the packaged skill (reusing planSkillSync's hash-walk), which
+//    catches a hand-edited vendored file even when its stamp still happens to match — the
+//    ticket's explicit "stamp says current, content isn't" case.
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { extractEmVersionStamp } from "./skillVersionCheck.js";
+import { planSkillSync } from "./skillSync.js";
+/**
+ * Pure: compares vendoredDir against packagedDir (content) and installedVersion (em --version
+ * — injected, never re-derived; see src/cli.ts's PKG_VERSION) against the vendored SKILL.md's
+ * em-version: stamp. No process.exit, no console.
+ */
+export function checkSkillSync(packagedDir, vendoredDir, installedVersion) {
+    if (!existsSync(vendoredDir)) {
+        return {
+            ok: false,
+            findings: [
+                {
+                    code: "skill-check-not-installed",
+                    message: `no vendored skill found at ${vendoredDir} — run \`em skill sync\` first`,
+                },
+            ],
+        };
+    }
+    const findings = [];
+    const skillMdPath = join(vendoredDir, "SKILL.md");
+    const vendoredStamp = existsSync(skillMdPath) ? extractEmVersionStamp(readFileSync(skillMdPath, "utf8")) : null;
+    if (vendoredStamp === null) {
+        findings.push({
+            code: "skill-check-stamp-missing",
+            message: `${skillMdPath} has no em-version: stamp — vendored copy predates MIL-92 or was hand-edited`,
+        });
+    }
+    else if (vendoredStamp !== installedVersion) {
+        findings.push({
+            code: "skill-check-stamp-mismatch",
+            message: `vendored skill's em-version: stamp (${vendoredStamp}) doesn't match installed em (${installedVersion}) — run \`em skill sync\``,
+            vendoredStamp,
+            installedVersion,
+        });
+    }
+    const plan = planSkillSync(packagedDir, vendoredDir);
+    if (plan.changes.length > 0) {
+        const driftedFiles = plan.changes.map((c) => c.relPath).sort();
+        findings.push({
+            code: "skill-check-content-drift",
+            message: `vendored skill differs from the packaged skill in ${driftedFiles.length} file(s) — run \`em skill sync\``,
+            driftedFiles,
+        });
+    }
+    return { findings, ok: findings.length === 0 };
+}
+//# sourceMappingURL=skillCheck.js.map

package/dist/cli/skillCheck.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skillCheck.js","sourceRoot":"","sources":["../../src/cli/skillCheck.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,6FAA6F;AAC7F,0FAA0F;AAC1F,6FAA6F;AAC7F,6FAA6F;AAC7F,kFAAkF;AAClF,uDAAuD;AACvD,EAAE;AACF,+EAA+E;AAC/E,kFAAkF;AAClF,+FAA+F;AAC/F,0FAA0F;AAC1F,iEAAiE;AAEjE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAqB/C;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,WAAmB,EAAE,WAAmB,EAAE,gBAAwB;IAC/F,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,2BAA2B;oBACjC,OAAO,EAAE,8BAA8B,WAAW,gCAAgC;iBACnF;aACF;SACF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAwB,EAAE,CAAC;IAEzC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEhH,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;QAC3B,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,2BAA2B;YACjC,OAAO,EAAE,GAAG,WAAW,8EAA8E;SACtG,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,aAAa,KAAK,gBAAgB,EAAE,CAAC;QAC9C,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,4BAA4B;YAClC,OAAO,EAAE,uCAAuC,aAAa,iCAAiC,gBAAgB,2BAA2B;YACzI,aAAa;YACb,gBAAgB;SACjB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,aAAa,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IACrD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/D,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,2BAA2B;YACjC,OAAO,EAAE,qDAAqD,YAAY,CAAC,MAAM,kCAAkC;YACnH,YAAY;SACb,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;AACjD,CAAC"}

package/dist/cli/skillSync.d.ts

@@ -0,0 +1,22 @@
+export type SkillSyncFileChangeKind = "added" | "modified" | "removed";
+export interface SkillSyncFileChange {
+    relPath: string;
+    kind: SkillSyncFileChangeKind;
+}
+export interface SkillSyncPlan {
+    /** Sorted by relPath. Empty means vendoredDir already matches packagedDir exactly. */
+    changes: SkillSyncFileChange[];
+    /** Files present, identical, in both dirs — not listed in `changes`. */
+    unchangedCount: number;
+}
+/**
+ * Pure: compares packagedDir (source of truth) against vendoredDir (which may not exist yet —
+ * that's the fresh-sync case, not an error) by per-file sha256. No fs writes.
+ */
+export declare function planSkillSync(packagedDir: string, vendoredDir: string): SkillSyncPlan;
+/**
+ * Shell: applies a plan produced by planSkillSync — copies added/modified files from
+ * packagedDir into vendoredDir, deletes removed files from vendoredDir. Idempotent; a plan
+ * with no changes is a no-op. Creates vendoredDir (and any needed subdirectories) as needed.
+ */
+export declare function applySkillSync(plan: SkillSyncPlan, packagedDir: string, vendoredDir: string): void;

package/dist/cli/skillSync.js

@@ -0,0 +1,69 @@
+// SPDX-License-Identifier: MIT
+// `em skill sync` (MIL-93): materializes/updates a consuming repo's vendored copy of the
+// event-modeling skill from the em package actually installed. Unlike `em ledger`/
+// skillVersionCheck.ts (which diff two *git revisions* of the same repo), this diffs two
+// *directories on disk right now* — the packaged skill bundled with the running em, and a
+// vendored copy in some other repo — so there's no GitRunner here at all.
+//
+// Contract: the vendored copy is read-only from the consuming repo's point of view. Local
+// edits are never merged — sync always makes vendoredDir byte-identical to packagedDir, the
+// same "you don't own this copy" stance rlm-blueprint's hand-rolled sync guard already
+// enforced by hand. That's why, unlike `em skill install`, there's no --force/confirmation
+// gate: overwriting is the entire point.
+//
+// Split into a pure plan (walk + hash, no writes) and a thin apply (the actual fs mutation) so
+// `em skill check` (src/cli/skillCheck.ts) can reuse planSkillSync's diff for its own
+// content-drift detection without performing any writes.
+import { existsSync, mkdirSync, copyFileSync, readFileSync, rmSync } from "node:fs";
+import { createHash } from "node:crypto";
+import { dirname, join } from "node:path";
+import { walkDir } from "../util/walkDir.js";
+function sha256(path) {
+    return createHash("sha256").update(readFileSync(path)).digest("hex");
+}
+/**
+ * Pure: compares packagedDir (source of truth) against vendoredDir (which may not exist yet —
+ * that's the fresh-sync case, not an error) by per-file sha256. No fs writes.
+ */
+export function planSkillSync(packagedDir, vendoredDir) {
+    const packagedFiles = new Set(walkDir(packagedDir));
+    const vendoredFiles = new Set(existsSync(vendoredDir) ? walkDir(vendoredDir) : []);
+    const allPaths = [...new Set([...packagedFiles, ...vendoredFiles])].sort();
+    const changes = [];
+    let unchangedCount = 0;
+    for (const relPath of allPaths) {
+        const inPackaged = packagedFiles.has(relPath);
+        const inVendored = vendoredFiles.has(relPath);
+        if (inPackaged && !inVendored) {
+            changes.push({ relPath, kind: "added" });
+        }
+        else if (!inPackaged && inVendored) {
+            changes.push({ relPath, kind: "removed" });
+        }
+        else if (sha256(join(packagedDir, relPath)) !== sha256(join(vendoredDir, relPath))) {
+            changes.push({ relPath, kind: "modified" });
+        }
+        else {
+            unchangedCount++;
+        }
+    }
+    return { changes, unchangedCount };
+}
+/**
+ * Shell: applies a plan produced by planSkillSync — copies added/modified files from
+ * packagedDir into vendoredDir, deletes removed files from vendoredDir. Idempotent; a plan
+ * with no changes is a no-op. Creates vendoredDir (and any needed subdirectories) as needed.
+ */
+export function applySkillSync(plan, packagedDir, vendoredDir) {
+    for (const change of plan.changes) {
+        const dest = join(vendoredDir, change.relPath);
+        if (change.kind === "removed") {
+            rmSync(dest);
+        }
+        else {
+            mkdirSync(dirname(dest), { recursive: true });
+            copyFileSync(join(packagedDir, change.relPath), dest);
+        }
+    }
+}
+//# sourceMappingURL=skillSync.js.map

package/dist/cli/skillSync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skillSync.js","sourceRoot":"","sources":["../../src/cli/skillSync.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,yFAAyF;AACzF,mFAAmF;AACnF,yFAAyF;AACzF,0FAA0F;AAC1F,0EAA0E;AAC1E,EAAE;AACF,0FAA0F;AAC1F,4FAA4F;AAC5F,uFAAuF;AACvF,2FAA2F;AAC3F,yCAAyC;AACzC,EAAE;AACF,+FAA+F;AAC/F,sFAAsF;AACtF,yDAAyD;AAEzD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACpF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAgB7C,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,WAAmB,EAAE,WAAmB;IACpE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,aAAa,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAE3E,MAAM,OAAO,GAA0B,EAAE,CAAC;IAC1C,IAAI,cAAc,GAAG,CAAC,CAAC;IAEvB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,UAAU,IAAI,CAAC,UAAU,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3C,CAAC;aAAM,IAAI,CAAC,UAAU,IAAI,UAAU,EAAE,CAAC;YACrC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7C,CAAC;aAAM,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;YACrF,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,cAAc,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAmB,EAAE,WAAmB,EAAE,WAAmB;IAC1F,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;AACH,CAAC"}