@milehimikey/em 1.6.1 → 1.7.0

package/dist/catalog/lineageValidate.js

@@ -0,0 +1,161 @@
+// SPDX-License-Identifier: MIT
+// `em validate`'s lineage-ref resolution (MIL-84): checks what the *current tree* can prove
+// wrong about a slice doc's `split-from`/`merged-from`/`superseded-by` frontmatter, and stays
+// silent about what it can't. Ratified ruling (Linear MIL-84, 2026-08-13):
+//
+//   Backward lineage refs (`split-from`, `merged-from`) are claims about history; for
+//   rename/merge/remove the predecessor is *supposed* to be absent from the current tree —
+//   `merged-from: cart@v3` on a doc whose predecessor was legitimately removed references an
+//   absent key forever, that's steady state, not a defect. So a backward ref naming a key
+//   absent from the current model gets NO diagnostic, not even a warning.
+//
+//   What *is* checked (all errors, all current-tree-checkable): malformed ref grammar;
+//   self-reference/cycles; a dangling forward ref (`superseded-by` naming an absent key —
+//   forward refs point at the *present*, so absence is a real broken reference); impossible
+//   version arithmetic when the referenced key resolves in-tree (a ref to a version number
+//   higher than the target doc's own current `version:` — a reference to a future that hasn't
+//   happened).
+//
+// Deep historical verification (did slice@vN actually, once, exist?) is deliberately out of
+// scope here — a same-commit authoring convention substitutes for it (see
+// docs/slice-doc-schema.md's lineage section): the lineage ref is written in the same
+// ratification commit that performs the operation it records, so the PR diff already contains
+// both sides of the claim. `em ledger` (MIL-89, src/cli/ledgerCheck.ts) is that CI-recipe-tier,
+// two-revision shape for a related but different invariant — version:/content agreement, not
+// lineage-ref resolution — kept opt-in and separate for the same reason: it needs git history,
+// and this command stays a fast function of the current tree.
+import { pushDiag } from "../model/rules.js";
+import { readSliceDoc } from "./readSliceDoc.js";
+function edgesOf(ownerKey, ownerLine, doc) {
+    const edges = [];
+    if (doc.splitFrom)
+        edges.push({ ownerKey, ownerLine, field: "split-from", ref: doc.splitFrom });
+    for (const ref of doc.mergedFrom)
+        edges.push({ ownerKey, ownerLine, field: "merged-from", ref });
+    for (const ref of doc.supersededBy)
+        edges.push({ ownerKey, ownerLine, field: "superseded-by", ref });
+    return edges;
+}
+/**
+ * Resolve every slice's lineage refs against the current tree and report what the current tree
+ * can prove wrong. `baseDir` is the `.em` file's directory (doc paths, like every other
+ * doc/note path in em, are relative to it).
+ */
+export function validateLineage(model, refs, baseDir) {
+    const diags = [];
+    const inModel = new Set(refs.sliceKeys);
+    // Cache doc reads: a slice can be visited both as an edge owner and as another edge's
+    // resolved target, and there's no reason to read the same file twice.
+    const docCache = new Map();
+    const docFor = (sliceKey) => {
+        if (!docCache.has(sliceKey))
+            docCache.set(sliceKey, readSliceDoc(baseDir, sliceKey));
+        return docCache.get(sliceKey);
+    };
+    const edges = [];
+    model.slices.forEach((slice, i) => {
+        const sliceKey = refs.sliceKeys[i];
+        const doc = docFor(sliceKey);
+        if (doc)
+            edges.push(...edgesOf(sliceKey, slice.line, doc));
+    });
+    // Malformed grammar, self-reference, and dangling-forward are each a single edge-local check.
+    // Version arithmetic and cycles need every edge whose target resolves in-model, gathered
+    // first, so they're handled in a second pass below.
+    const resolvableEdges = [];
+    for (const edge of edges) {
+        if (edge.ref.sliceKey === null) {
+            pushDiag(diags, "lineage-ref-malformed", {
+                message: `slice "${edge.ownerKey}"'s ${edge.field} value "${edge.ref.raw}" doesn't match the <slice-key>@v<N> grammar`,
+                line: edge.ownerLine,
+                refs: [edge.ownerKey],
+            });
+            continue;
+        }
+        if (edge.ref.sliceKey === edge.ownerKey) {
+            pushDiag(diags, "lineage-ref-cycle", {
+                message: `slice "${edge.ownerKey}"'s ${edge.field} names itself (${edge.ref.raw})`,
+                line: edge.ownerLine,
+                refs: [edge.ownerKey],
+            });
+            continue;
+        }
+        if (edge.field === "superseded-by" && !inModel.has(edge.ref.sliceKey)) {
+            pushDiag(diags, "lineage-forward-dangling", {
+                message: `slice "${edge.ownerKey}"'s superseded-by names "${edge.ref.sliceKey}", which isn't a slice in the current model`,
+                line: edge.ownerLine,
+                refs: [edge.ownerKey],
+            });
+            continue;
+        }
+        if (inModel.has(edge.ref.sliceKey))
+            resolvableEdges.push(edge);
+        // else: a backward ref (split-from/merged-from) naming a key absent from the current
+        // model — the expected steady state for a real split/merge/remove. No diagnostic.
+    }
+    // Version arithmetic: only checkable when the target resolves in-model AND its own doc has a
+    // readable numeric version. Silently skip otherwise — can't check what isn't there.
+    for (const edge of resolvableEdges) {
+        const targetDoc = docFor(edge.ref.sliceKey);
+        if (!targetDoc || targetDoc.version === null)
+            continue;
+        if (edge.ref.version > targetDoc.version) {
+            pushDiag(diags, "lineage-version-impossible", {
+                message: `slice "${edge.ownerKey}"'s ${edge.field} names "${edge.ref.sliceKey}"@v${edge.ref.version}, but "${edge.ref.sliceKey}" is only at v${targetDoc.version}`,
+                line: edge.ownerLine,
+                refs: [edge.ownerKey, edge.ref.sliceKey],
+            });
+        }
+    }
+    // Multi-node cycles: adjacency over edges whose target resolves in-model (self-loops already
+    // reported above, and excluded here so they aren't double-counted as a 1-node "cycle"). 3-color
+    // DFS, same shape as model/validate.ts's findTypeCycles(), adapted to string slice keys.
+    const adjacency = new Map();
+    for (const edge of resolvableEdges) {
+        if (edge.ref.sliceKey === edge.ownerKey)
+            continue;
+        const list = adjacency.get(edge.ownerKey);
+        if (list)
+            list.push(edge.ref.sliceKey);
+        else
+            adjacency.set(edge.ownerKey, [edge.ref.sliceKey]);
+    }
+    const color = new Map(); // 0 = white, 1 = gray (on stack), 2 = black (done)
+    const stack = [];
+    const reportedCycles = new Set();
+    const lineOf = new Map();
+    model.slices.forEach((slice, i) => lineOf.set(refs.sliceKeys[i], slice.line));
+    function visit(key) {
+        color.set(key, 1);
+        stack.push(key);
+        for (const dep of adjacency.get(key) ?? []) {
+            const c = color.get(dep) ?? 0;
+            if (c === 0) {
+                visit(dep);
+            }
+            else if (c === 1) {
+                const idx = stack.indexOf(dep);
+                const cyclePath = [...stack.slice(idx), dep];
+                const dedupeKey = [...new Set(cyclePath)].sort().join(",");
+                if (!reportedCycles.has(dedupeKey)) {
+                    reportedCycles.add(dedupeKey);
+                    const cycleRefs = [...new Set(cyclePath)];
+                    pushDiag(diags, "lineage-ref-cycle", {
+                        message: `slice "${dep}" is part of a lineage cycle: ${cyclePath.join(" -> ")}`,
+                        line: lineOf.get(dep),
+                        refs: cycleRefs,
+                    });
+                }
+            }
+            // c === 2 (black): already fully explored via another path — not a new cycle.
+        }
+        stack.pop();
+        color.set(key, 2);
+    }
+    for (const key of adjacency.keys()) {
+        if ((color.get(key) ?? 0) === 0)
+            visit(key);
+    }
+    return diags;
+}
+//# sourceMappingURL=lineageValidate.js.map

package/dist/catalog/lineageValidate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lineageValidate.js","sourceRoot":"","sources":["../../src/catalog/lineageValidate.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,4FAA4F;AAC5F,8FAA8F;AAC9F,2EAA2E;AAC3E,EAAE;AACF,sFAAsF;AACtF,2FAA2F;AAC3F,6FAA6F;AAC7F,0FAA0F;AAC1F,0EAA0E;AAC1E,EAAE;AACF,uFAAuF;AACvF,0FAA0F;AAC1F,4FAA4F;AAC5F,2FAA2F;AAC3F,8FAA8F;AAC9F,eAAe;AACf,EAAE;AACF,4FAA4F;AAC5F,0EAA0E;AAC1E,sFAAsF;AACtF,8FAA8F;AAC9F,gGAAgG;AAChG,6FAA6F;AAC7F,+FAA+F;AAC/F,8DAA8D;AAK9D,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAWjD,SAAS,OAAO,CAAC,QAAgB,EAAE,SAAiB,EAAE,GAAa;IACjE,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,IAAI,GAAG,CAAC,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;IAChG,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;IACjG,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,YAAY;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC;IACrG,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,KAAsB,EAAE,IAAgB,EAAE,OAAe;IACvF,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAExC,sFAAsF;IACtF,sEAAsE;IACtE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IACpD,MAAM,MAAM,GAAG,CAAC,QAAgB,EAAmB,EAAE;QACnD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;QACrF,OAAO,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC;IACjC,CAAC,CAAC;IAEF,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7B,IAAI,GAAG;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,8FAA8F;IAC9F,yFAAyF;IACzF,oDAAoD;IACpD,MAAM,eAAe,GAAkB,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC/B,QAAQ,CAAC,KAAK,EAAE,uBAAuB,EAAE;gBACvC,OAAO,EAAE,UAAU,IAAI,CAAC,QAAQ,OAAO,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,GAAG,CAAC,GAAG,8CAA8C;gBACtH,IAAI,EAAE,IAAI,CAAC,SAAS;gBACpB,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;aACtB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,EAAE;gBACnC,OAAO,EAAE,UAAU,IAAI,CAAC,QAAQ,OAAO,IAAI,CAAC,KAAK,kBAAkB,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG;gBAClF,IAAI,EAAE,IAAI,CAAC,SAAS;gBACpB,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;aACtB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,KAAK,eAAe,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtE,QAAQ,CAAC,KAAK,EAAE,0BAA0B,EAAE;gBAC1C,OAAO,EAAE,UAAU,IAAI,CAAC,QAAQ,4BAA4B,IAAI,CAAC,GAAG,CAAC,QAAQ,6CAA6C;gBAC1H,IAAI,EAAE,IAAI,CAAC,SAAS;gBACpB,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;aACtB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,qFAAqF;QACrF,kFAAkF;IACpF,CAAC;IAED,6FAA6F;IAC7F,oFAAoF;IACpF,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,OAAO,KAAK,IAAI;YAAE,SAAS;QACvD,IAAI,IAAI,CAAC,GAAG,CAAC,OAAQ,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC;YAC1C,QAAQ,CAAC,KAAK,EAAE,4BAA4B,EAAE;gBAC5C,OAAO,EAAE,UAAU,IAAI,CAAC,QAAQ,OAAO,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,GAAG,CAAC,QAAQ,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,UAAU,IAAI,CAAC,GAAG,CAAC,QAAQ,iBAAiB,SAAS,CAAC,OAAO,EAAE;gBAClK,IAAI,EAAE,IAAI,CAAC,SAAS;gBACpB,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,QAAS,CAAC;aAC1C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,6FAA6F;IAC7F,gGAAgG;IAChG,yFAAyF;IACzF,MAAM,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC9C,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;YAAE,SAAS;QAClD,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAS,CAAC,CAAC;;YACnC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,QAAS,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAC,CAAC,mDAAmD;IAC/F,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAE9E,SAAS,KAAK,CAAC,GAAW;QACxB,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3C,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACZ,KAAK,CAAC,GAAG,CAAC,CAAC;YACb,CAAC;iBAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnB,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC/B,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;gBAC7C,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC3D,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;oBACnC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;oBAC9B,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;oBAC1C,QAAQ,CAAC,KAAK,EAAE,mBAAmB,EAAE;wBACnC,OAAO,EAAE,UAAU,GAAG,iCAAiC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;wBAC/E,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;wBACrB,IAAI,EAAE,SAAS;qBAChB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,8EAA8E;QAChF,CAAC;QACD,KAAK,CAAC,GAAG,EAAE,CAAC;QACZ,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/catalog/readSliceDoc.d.ts

@@ -0,0 +1,2 @@
+import { SliceDoc } from "./sliceDoc.js";
+export declare function readSliceDoc(baseDir: string, sliceKey: string): SliceDoc | null;

package/dist/catalog/readSliceDoc.js

@@ -0,0 +1,21 @@
+// SPDX-License-Identifier: MIT
+// Lowest-level slice-doc read: given a base dir and a slice's export key,
+// read+parse `slices/<sliceKey>.md` if it exists. Never throws — a missing
+// file is routine (not every slice has reached specify yet), so this is a
+// plain `null`, not an exception or a diagnostic. Shared by `em export`'s
+// doc join (catalog/docJoin.ts, which additionally gates on a `note` binding
+// and produces export-shaped diagnostics for a *missing-but-bound* doc — a
+// concern this module doesn't have), `em diff`'s lineage annotation
+// (model/diff.ts, via cli.ts), and `em validate`'s lineage-ref resolution
+// (catalog/lineageValidate.ts) — three callers with different reactions to
+// "no doc here," so the read itself stays opinion-free.
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { parseSliceDoc } from "./sliceDoc.js";
+export function readSliceDoc(baseDir, sliceKey) {
+    const path = join(baseDir, "slices", `${sliceKey}.md`);
+    if (!existsSync(path))
+        return null;
+    return parseSliceDoc(readFileSync(path, "utf8"));
+}
+//# sourceMappingURL=readSliceDoc.js.map

package/dist/catalog/readSliceDoc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readSliceDoc.js","sourceRoot":"","sources":["../../src/catalog/readSliceDoc.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,0EAA0E;AAC1E,2EAA2E;AAC3E,0EAA0E;AAC1E,0EAA0E;AAC1E,6EAA6E;AAC7E,2EAA2E;AAC3E,oEAAoE;AACpE,0EAA0E;AAC1E,2EAA2E;AAC3E,wDAAwD;AAExD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAY,MAAM,eAAe,CAAC;AAExD,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,QAAgB;IAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,QAAQ,KAAK,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,aAAa,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AACnD,CAAC"}

package/dist/catalog/sliceDoc.d.ts

@@ -1,10 +1,101 @@
+/** A parsed `<slice-key>@v<N>` lineage reference. */
+export interface SliceRef {
+    /** The exact frontmatter value this ref was read from, e.g. "checkout@v4".
+     *  Always present, even when the grammar didn't match — nothing is silently
+     *  dropped the way an unrecognized top-level key is. */
+    raw: string;
+    /** The referenced slice's doc key (its kebab-case filename stem), lowercased,
+     *  or null if `raw` doesn't match the `<slice-key>@v<N>` grammar. Whether
+     *  this actually names a real slice/version is NOT checked here — that's
+     *  MIL-84 (lineage-aware `em diff`/`em validate`). */
+    sliceKey: string | null;
+    /** The referenced version number, or null if `raw` didn't match the grammar. */
+    version: number | null;
+}
 export interface SliceDoc {
     /** The doc's raw markdown, as read from disk. */
     raw: string;
-    /** Lowercased value of the doc's `- **Status:** ...` line, or null if no such line is found
-     *  (a freeform doc that doesn't follow the slice.md template). */
+    /** The doc's body text — everything after the frontmatter fence (or the whole doc, if no
+     *  fence) — the same text `html`/`openQuestionsTotal` are already derived from. Exposed so a
+     *  two-revision content-agreement check (MIL-89, `em ledger`) can diff body text across git
+     *  revisions without frontmatter noise leaking in. */
+    body: string;
+    /** Lowercased status value from frontmatter `status:` (canonical) or a legacy
+     *  `- **Status:** ...` bullet line, or null if neither is found (a freeform
+     *  doc that doesn't follow the slice.md template). */
     status: string | null;
-    /** The whole doc rendered to HTML. */
+    /** This slice's own ratified-content version, from frontmatter `version:`
+     *  (e.g. `version: 1`) — a cache of git truth (docset module 06), not
+     *  derived or validated against git history. Null when absent or
+     *  non-numeric. Distinct from the frontmatter dialect's own `schemaVersion`,
+     *  which this parser still doesn't expose. */
+    version: number | null;
+    /** Lineage: this doc split off exactly one prior slice, from frontmatter
+     *  `split-from:`. Null when this doc wasn't produced by a split. */
+    splitFrom: SliceRef | null;
+    /** Lineage: this doc was produced by merging one or more prior slices, from
+     *  frontmatter `merged-from:` (comma-separated). Empty array when absent —
+     *  the common case. */
+    mergedFrom: SliceRef[];
+    /** Lineage: this doc has been superseded by one or more successor slices —
+     *  a rename, or the retired side of a split/merge — from frontmatter
+     *  `superseded-by:` (comma-separated). Empty array when absent — the
+     *  common case; most slices are never superseded. */
+    supersededBy: SliceRef[];
+    /** Frontmatter `implementedIn:` — free text, typically a PR/commit link — or null
+     *  when absent. No legacy bullet-line form, same as `version`/lineage. */
+    implementedIn: string | null;
+    /** True when a well-formed leading `---`/`---` frontmatter fence was found and
+     *  closed — independent of which keys it contained. False for a legacy
+     *  status-bullet-only doc, a doc with no frontmatter at all, or an
+     *  unterminated fence (splitFrontmatter() already treats that as "absent"). */
+    frontmatterPresent: boolean;
+    /** Which of REQUIRED_FRONTMATTER_KEYS were absent (or present-but-empty, which
+     *  the parser already treats as absent) from the frontmatter. Empty whenever
+     *  frontmatterPresent is false too — check frontmatterPresent separately to
+     *  distinguish "no frontmatter at all" from "every required key present".
+     *  Presence-only: doesn't validate `pattern`'s/`status`'s enum values, matching
+     *  this parser's existing lenient, informational treatment of those keys. */
+    missingRequiredFields: string[];
+    /** The whole doc rendered to HTML, with any leading frontmatter block stripped
+     *  first (otherwise its `---` fences render as stray <hr>s and the raw
+     *  `key: value` lines leak into the body). */
     html: string;
+    /** Count of GFM task-list items (`- [ ]` / `- [x]`) found under the `## Open Questions`
+     *  heading (case-insensitive), up to the next `#`/`##` heading or EOF. Both 0 when the doc
+     *  has no such heading — nothing for MIL-87's readiness check to block on. See
+     *  `openQuestionsUnchecked` for how many of these are still unresolved. */
+    openQuestionsTotal: number;
+    /** Of `openQuestionsTotal`, how many are still `- [ ]` (unchecked). 0 when every Open
+     *  Question has been checked off, or when there's no Open Questions section at all. */
+    openQuestionsUnchecked: number;
 }
+/** Frontmatter keys docs/slice-doc-schema.md's required-vs-optional table marks
+ *  required at every `status` — the mechanical basis for `frontmatter-invalid`
+ *  (MIL-91). `implementedIn` is deliberately excluded: its requirement depends on
+ *  whether the slice has *ever* reached `implemented`, which is git history this
+ *  parser has no access to and doesn't attempt to check. */
+export declare const REQUIRED_FRONTMATTER_KEYS: readonly ["schemaversion", "pattern", "swimlane", "status", "version"];
+/** True when a doc's frontmatter is well-formed enough to trust its canonical fields: a closed
+ *  fence was found AND every REQUIRED_FRONTMATTER_KEYS entry is present. The single gate `em
+ *  export`'s doc join (MIL-91, `frontmatter-invalid`) and `em validate`'s frontmatter-coherence
+ *  check (MIL-85) both call, instead of each re-deriving `!frontmatterPresent ||
+ *  missingRequiredFields.length > 0` and risking the two silently drifting apart on what counts
+ *  as "usable" as the required-fields list evolves. A doc that fails this — no fence at all
+ *  (e.g. MIL-86's legacy body-label dialect), or missing any required key — has nothing reliable
+ *  enough to classify; treat it as unreadable rather than guess. */
+export declare function hasUsableFrontmatter(doc: Pick<SliceDoc, "frontmatterPresent" | "missingRequiredFields">): boolean;
+/**
+ * Parses a single `<slice-key>@v<N>` lineage reference (`split-from`, and each
+ * comma-separated item of `merged-from`/`superseded-by`). Never throws: a
+ * value that doesn't match the grammar still comes back with the original
+ * text in `raw` and null `sliceKey`/`version`, so a malformed value stays
+ * visible — to a human reading the doc, or to MIL-84's validation — instead
+ * of being silently dropped like an unrecognized `status`. Exported so MIL-84
+ * (lineage diff/validate) and MIL-91 (export join) share this grammar instead
+ * of re-deriving it. `sliceKey` matches `kebabSlug()`'s output
+ * (src/util/slug.ts) — lowercase alphanumerics/hyphens, no assumption it
+ * starts with a letter.
+ */
+export declare function parseSliceRef(raw: string): SliceRef;
 export declare function parseSliceDoc(markdown: string): SliceDoc;

package/dist/catalog/sliceDoc.js

@@ -3,18 +3,168 @@
 // .claude/skills/event-modeling/templates/slice.md) for `em catalog`. `em`
 // has never parsed this markdown structurally before — it only checked the
 // file exists (cli.ts's warnMissingNotes). This is deliberately shallow: pull
-// the one bold-label line the index page needs (`- **Status:** ...`) with a
-// regex rather than a full frontmatter parser, and render the whole doc body
-// as HTML for the per-slice detail page. Pure — no fs access; the caller
-// reads the file and hands us its text.
+// the status/version/lineage values the index page and downstream consumers
+// need, and render the doc body as HTML for the per-slice detail page. Pure —
+// no fs access; the caller reads the file and hands us its text.
+//
+// Two status dialects: a leading YAML frontmatter block (`status: ...`) is
+// canonical (MIL-86); a `- **Status:** ...` bullet line is legacy/accepted
+// input for docs written before the frontmatter dialect existed. Frontmatter
+// wins when both are somehow present. No `yaml` dependency — the 1.1.1 revert
+// (6de0a05) dropped it on purpose; frontmatter is a plain top-level-scalar
+// line-scan, same spirit as the bullet-line regex it now sits alongside.
+//
+// `version` and the three lineage keys (`split-from`/`merged-from`/
+// `superseded-by`) are canonical, frontmatter-only fields (MIL-90) — no
+// legacy bullet-line form exists for them. Full schema: docs/slice-doc-schema.md.
+// `#`-prefixed lines (the template's commented-out optional lineage guidance)
+// are inert: they don't match the key regex below, so they're skipped exactly
+// like any other non-`key: value` line — safe to leave in an unfinished doc.
+//
+// `implementedIn`, `frontmatterPresent`, and `missingRequiredFields` (MIL-91)
+// exist so `em export`'s doc join (src/catalog/docJoin.ts) can mechanically
+// classify a doc as `frontmatter-invalid` — no frontmatter fence at all, or
+// missing one of the keys docs/slice-doc-schema.md says are required at every
+// status — without export re-deriving frontmatter-shape rules of its own.
 import { marked } from "marked";
+/** Frontmatter keys docs/slice-doc-schema.md's required-vs-optional table marks
+ *  required at every `status` — the mechanical basis for `frontmatter-invalid`
+ *  (MIL-91). `implementedIn` is deliberately excluded: its requirement depends on
+ *  whether the slice has *ever* reached `implemented`, which is git history this
+ *  parser has no access to and doesn't attempt to check. */
+export const REQUIRED_FRONTMATTER_KEYS = ["schemaversion", "pattern", "swimlane", "status", "version"];
+/** True when a doc's frontmatter is well-formed enough to trust its canonical fields: a closed
+ *  fence was found AND every REQUIRED_FRONTMATTER_KEYS entry is present. The single gate `em
+ *  export`'s doc join (MIL-91, `frontmatter-invalid`) and `em validate`'s frontmatter-coherence
+ *  check (MIL-85) both call, instead of each re-deriving `!frontmatterPresent ||
+ *  missingRequiredFields.length > 0` and risking the two silently drifting apart on what counts
+ *  as "usable" as the required-fields list evolves. A doc that fails this — no fence at all
+ *  (e.g. MIL-86's legacy body-label dialect), or missing any required key — has nothing reliable
+ *  enough to classify; treat it as unreadable rather than guess. */
+export function hasUsableFrontmatter(doc) {
+    return doc.frontmatterPresent && doc.missingRequiredFields.length === 0;
+}
 const STATUS_LINE = /^-\s*\*\*Status:\*\*\s*(.+?)\s*$/im;
+const SLICE_REF = /^([a-z0-9]+(?:-[a-z0-9]+)*)@v(\d+)$/i;
+const OPEN_QUESTIONS_HEADING = /^##\s+Open Questions\s*$/i;
+const TASK_ITEM = /^[ \t]*[-*]\s*\[([ xX])\]/;
+/**
+ * Counts GFM task-list items under a `## Open Questions` heading (MIL-87), scanning `body`
+ * (post-frontmatter, pre-HTML-render text — the same text `html` below is built from) rather
+ * than the rendered HTML, which would be needlessly fragile to scrape. The section ends at the
+ * next `#`/`##` heading or EOF; a doc with no such heading counts as zero/zero, not an error —
+ * most slice docs won't have open questions left by the time they're read.
+ */
+function countOpenQuestions(body) {
+    const lines = body.split(/\r?\n/);
+    const start = lines.findIndex((l) => OPEN_QUESTIONS_HEADING.test(l));
+    if (start === -1)
+        return { openQuestionsTotal: 0, openQuestionsUnchecked: 0 };
+    let openQuestionsTotal = 0;
+    let openQuestionsUnchecked = 0;
+    for (let i = start + 1; i < lines.length; i++) {
+        if (/^#{1,2}\s/.test(lines[i]))
+            break;
+        const m = lines[i].match(TASK_ITEM);
+        if (!m)
+            continue;
+        openQuestionsTotal++;
+        if (m[1] === " ")
+            openQuestionsUnchecked++;
+    }
+    return { openQuestionsTotal, openQuestionsUnchecked };
+}
+/**
+ * Parses a single `<slice-key>@v<N>` lineage reference (`split-from`, and each
+ * comma-separated item of `merged-from`/`superseded-by`). Never throws: a
+ * value that doesn't match the grammar still comes back with the original
+ * text in `raw` and null `sliceKey`/`version`, so a malformed value stays
+ * visible — to a human reading the doc, or to MIL-84's validation — instead
+ * of being silently dropped like an unrecognized `status`. Exported so MIL-84
+ * (lineage diff/validate) and MIL-91 (export join) share this grammar instead
+ * of re-deriving it. `sliceKey` matches `kebabSlug()`'s output
+ * (src/util/slug.ts) — lowercase alphanumerics/hyphens, no assumption it
+ * starts with a letter.
+ */
+export function parseSliceRef(raw) {
+    const trimmed = raw.trim();
+    const m = trimmed.match(SLICE_REF);
+    return m
+        ? { raw: trimmed, sliceKey: m[1].toLowerCase(), version: Number(m[2]) }
+        : { raw: trimmed, sliceKey: null, version: null };
+}
+function parseSliceRefList(raw) {
+    if (!raw)
+        return [];
+    return raw
+        .split(",")
+        .map((s) => s.trim())
+        .filter(Boolean)
+        .map(parseSliceRef);
+}
+function parseVersion(raw) {
+    if (!raw)
+        return null;
+    const n = Number(raw);
+    return Number.isInteger(n) && n > 0 ? n : null;
+}
+/**
+ * Splits a leading YAML frontmatter block (`---` ... `---`) off the doc, if
+ * present. Deliberately minimal: top-level scalar `key: value` lines only —
+ * no lists, no nesting. Returns the scalar fields (lowercased keys) and the
+ * remaining body with the frontmatter fences removed. An unterminated `---`
+ * fence is treated as "no frontmatter" (the whole doc is the body). Like
+ * every other frontmatter convention (Jekyll, Hugo, ...), the fence must be
+ * the literal first thing in the file — the template's own guidance comment
+ * must be deleted before the frontmatter counts as present.
+ */
+function splitFrontmatter(markdown) {
+    if (!/^---\s*\r?\n/.test(markdown))
+        return { fields: new Map(), body: markdown, frontmatterPresent: false };
+    const lines = markdown.split(/\r?\n/);
+    const fields = new Map();
+    let closeIndex = -1;
+    for (let i = 1; i < lines.length; i++) {
+        if (/^---\s*$/.test(lines[i])) {
+            closeIndex = i;
+            break;
+        }
+        const m = lines[i].match(/^([A-Za-z][\w-]*):\s*(.*)$/);
+        if (!m)
+            continue;
+        const value = m[2].trim().replace(/^["']|["']$/g, "");
+        if (value)
+            fields.set(m[1].toLowerCase(), value);
+    }
+    if (closeIndex === -1)
+        return { fields: new Map(), body: markdown, frontmatterPresent: false };
+    return { fields, body: lines.slice(closeIndex + 1).join("\n"), frontmatterPresent: true };
+}
 export function parseSliceDoc(markdown) {
-    const match = markdown.match(STATUS_LINE);
+    const { fields, body, frontmatterPresent } = splitFrontmatter(markdown);
+    const legacyMatch = body.match(STATUS_LINE);
+    const frontmatterStatus = fields.get("status");
+    const status = frontmatterStatus
+        ? frontmatterStatus.toLowerCase()
+        : legacyMatch
+            ? legacyMatch[1].trim().toLowerCase()
+            : null;
+    const splitFromRaw = fields.get("split-from");
+    const { openQuestionsTotal, openQuestionsUnchecked } = countOpenQuestions(body);
     return {
         raw: markdown,
-        status: match ? match[1].trim().toLowerCase() : null,
-        html: marked.parse(markdown, { async: false }),
+        body,
+        status,
+        version: parseVersion(fields.get("version")),
+        splitFrom: splitFromRaw ? parseSliceRef(splitFromRaw) : null,
+        mergedFrom: parseSliceRefList(fields.get("merged-from")),
+        supersededBy: parseSliceRefList(fields.get("superseded-by")),
+        implementedIn: fields.get("implementedin") ?? null,
+        frontmatterPresent,
+        missingRequiredFields: REQUIRED_FRONTMATTER_KEYS.filter((k) => !fields.has(k)),
+        html: marked.parse(body, { async: false }),
+        openQuestionsTotal,
+        openQuestionsUnchecked,
     };
 }
 //# sourceMappingURL=sliceDoc.js.map

package/dist/catalog/sliceDoc.js.map

@@ -1 +1 @@
-{"version":3,"file":"sliceDoc.js","sourceRoot":"","sources":["../../src/catalog/sliceDoc.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,yDAAyD;AACzD,2EAA2E;AAC3E,2EAA2E;AAC3E,8EAA8E;AAC9E,4EAA4E;AAC5E,6EAA6E;AAC7E,yEAAyE;AACzE,wCAAwC;AAExC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAYhC,MAAM,WAAW,GAAG,oCAAoC,CAAC;AAEzD,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC1C,OAAO;QACL,GAAG,EAAE,QAAQ;QACb,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;QACpD,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAW;KACzD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"sliceDoc.js","sourceRoot":"","sources":["../../src/catalog/sliceDoc.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,yDAAyD;AACzD,2EAA2E;AAC3E,2EAA2E;AAC3E,8EAA8E;AAC9E,4EAA4E;AAC5E,8EAA8E;AAC9E,iEAAiE;AACjE,EAAE;AACF,2EAA2E;AAC3E,2EAA2E;AAC3E,6EAA6E;AAC7E,8EAA8E;AAC9E,2EAA2E;AAC3E,yEAAyE;AACzE,EAAE;AACF,oEAAoE;AACpE,wEAAwE;AACxE,kFAAkF;AAClF,8EAA8E;AAC9E,8EAA8E;AAC9E,6EAA6E;AAC7E,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,8EAA8E;AAC9E,0EAA0E;AAE1E,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AA4EhC;;;;4DAI4D;AAC5D,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,eAAe,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AAEhH;;;;;;;oEAOoE;AACpE,MAAM,UAAU,oBAAoB,CAAC,GAAmE;IACtG,OAAO,GAAG,CAAC,kBAAkB,IAAI,GAAG,CAAC,qBAAqB,CAAC,MAAM,KAAK,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,WAAW,GAAG,oCAAoC,CAAC;AACzD,MAAM,SAAS,GAAG,sCAAsC,CAAC;AACzD,MAAM,sBAAsB,GAAG,2BAA2B,CAAC;AAC3D,MAAM,SAAS,GAAG,2BAA2B,CAAC;AAE9C;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,EAAE,sBAAsB,EAAE,CAAC,EAAE,CAAC;IAE9E,IAAI,kBAAkB,GAAG,CAAC,CAAC;IAC3B,IAAI,sBAAsB,GAAG,CAAC,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,MAAM;QACtC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,kBAAkB,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,sBAAsB,EAAE,CAAC;IAC7C,CAAC;IACD,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,CAAC;AACxD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACnC,OAAO,CAAC;QACN,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;QACvE,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAuB;IAChD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,OAAO,GAAG;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,aAAa,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,YAAY,CAAC,GAAuB;IAC3C,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,gBAAgB,CACvB,QAAgB;IAEhB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC;IAE5G,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9B,UAAU,GAAG,CAAC,CAAC;YACf,MAAM;QACR,CAAC;QACD,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACvD,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QACtD,IAAI,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,UAAU,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC;IAC/F,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACxE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,iBAAiB,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,iBAAiB;QAC9B,CAAC,CAAC,iBAAiB,CAAC,WAAW,EAAE;QACjC,CAAC,CAAC,WAAW;YACX,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC9C,MAAM,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAChF,OAAO;QACL,GAAG,EAAE,QAAQ;QACb,IAAI;QACJ,MAAM;QACN,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5C,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI;QAC5D,UAAU,EAAE,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACxD,YAAY,EAAE,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC5D,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,IAAI;QAClD,kBAAkB;QAClB,qBAAqB,EAAE,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9E,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAW;QACpD,kBAAkB;QAClB,sBAAsB;KACvB,CAAC;AACJ,CAAC"}

package/dist/catalog/sliceReadyValidate.d.ts

@@ -0,0 +1,11 @@
+import { NormalizedModel } from "../model/model.js";
+import { RefsResult } from "../model/refs.js";
+import { Diagnostic } from "../model/validate.js";
+/**
+ * Readiness gate for one slice, named by its export key (`refs.sliceKeys`). `baseDir` is the
+ * `.em` file's directory, same convention every other doc/note path in em uses. Always warning-
+ * severity (fits validate's existing warning-producer shape) except for a bad `sliceKey` itself,
+ * which is an error — a CLI-argument mistake, not a model-quality finding. The `--slice-ready`
+ * flag in src/cli.ts is what decides whether these warnings gate the exit code.
+ */
+export declare function validateSliceReady(model: NormalizedModel, refs: RefsResult, baseDir: string, sliceKey: string): Diagnostic[];

package/dist/catalog/sliceReadyValidate.js

@@ -0,0 +1,85 @@
+// SPDX-License-Identifier: MIT
+// `em validate --slice-ready <key>` (MIL-87): the handoff gate without the bridge. Gives em
+// itself a native version of the readiness check that used to live only in em-sdd-bridge's
+// `assertReadyToImplement` — status: ready-to-implement AND every Open Question checked —
+// so any toolchain reading slice docs directly (not just ones routed through the bridge) has
+// a gate to enforce.
+//
+// Deliberately single-slice, opt-in — unlike catalog/lineageValidate.ts (MIL-84) and
+// catalog/frontmatterCoherenceValidate.ts (MIL-85), which run unconditionally on every
+// `em validate` because they only fire on genuine anomalies. "Not yet ready-to-implement" /
+// "has unchecked Open Questions" is the NORMAL state of most slices most of the time (drafts,
+// reviewed-but-not-ready-yet, ...) — splicing this into the unconditional diagnostic set would
+// make plain `em validate` permanently noisy on any healthy in-progress model. So this only
+// ever runs for the one slice named by `--slice-ready <key>`.
+//
+// "Note binding" (the ticket's own phrase) means reusing docJoin.ts's resolveSliceDocJoin — the
+// same note-gated resolution `em export` (MIL-91) uses — rather than the filename-only
+// readSliceDoc/existsSync convention `em catalog`/`em render` deliberately use instead (that
+// convention has a tested invariant of ignoring `note` entirely; this module doesn't touch it).
+// A slice with no `note "slices/<key>.md"` element bound to it isn't ready by definition: there's
+// nothing ratified to check status/Open Questions against.
+//
+// version/status/link coherence (MIL-85) is folded in for free at the CLI layer (src/cli.ts):
+// validateFrontmatterCoherence already runs unconditionally and already tags its diagnostics
+// with `refs: [sliceKey]`, so the `--slice-ready` branch filters the full combined diagnostic
+// set by that ref instead of this module re-deriving classifyImplementationDrift.
+import { makeDiag, pushDiag } from "../model/rules.js";
+import { resolveSliceDocJoin } from "./docJoin.js";
+import { readSliceDoc } from "./readSliceDoc.js";
+/**
+ * Readiness gate for one slice, named by its export key (`refs.sliceKeys`). `baseDir` is the
+ * `.em` file's directory, same convention every other doc/note path in em uses. Always warning-
+ * severity (fits validate's existing warning-producer shape) except for a bad `sliceKey` itself,
+ * which is an error — a CLI-argument mistake, not a model-quality finding. The `--slice-ready`
+ * flag in src/cli.ts is what decides whether these warnings gate the exit code.
+ */
+export function validateSliceReady(model, refs, baseDir, sliceKey) {
+    const sliceIndex = refs.sliceKeys.indexOf(sliceKey);
+    if (sliceIndex === -1) {
+        return [
+            makeDiag("slice-ready-unknown-slice", {
+                message: `no slice with export key "${sliceKey}" in this model`,
+                refs: [sliceKey],
+            }),
+        ];
+    }
+    const slice = model.slices[sliceIndex];
+    const { doc, diagnostics: joinDiagnostics } = resolveSliceDocJoin(slice, sliceKey, baseDir, (id) => refs.refById.get(id));
+    if (doc.reason === "no-doc-bound") {
+        return [
+            makeDiag("slice-ready-no-doc-bound", {
+                message: `slice "${sliceKey}" has no doc bound via \`note "slices/${sliceKey}.md"\` — bind a slice doc before it can be ready-to-implement`,
+                line: slice.line,
+                refs: [sliceKey],
+            }),
+        ];
+    }
+    if (doc.reason === "binding-missing-file" || doc.reason === "frontmatter-invalid") {
+        // Reuse docJoin's own diagnostics verbatim — don't re-code binding-missing-file/
+        // frontmatter-invalid a second time under a slice-ready-specific code.
+        return joinDiagnostics;
+    }
+    // doc.reason === null: found, usable frontmatter.
+    const diags = [];
+    if (doc.status !== "ready-to-implement") {
+        pushDiag(diags, "slice-ready-status-not-ready", {
+            message: `slice "${sliceKey}" is status: ${doc.status ?? "(none)"}, not ready-to-implement`,
+            line: slice.line,
+            refs: [sliceKey],
+        });
+    }
+    // resolveSliceDocJoin's SliceDocExport deliberately never carries Open Questions counts (same
+    // hard boundary that keeps doc.html/doc.raw out of it) — re-read via readSliceDoc for the
+    // full SliceDoc. Non-null: doc.reason === null already implies the file exists and parses.
+    const parsed = readSliceDoc(baseDir, sliceKey);
+    if (parsed.openQuestionsUnchecked > 0) {
+        pushDiag(diags, "slice-ready-open-questions-unchecked", {
+            message: `slice "${sliceKey}" has ${parsed.openQuestionsUnchecked} of ${parsed.openQuestionsTotal} Open Question(s) unchecked`,
+            line: slice.line,
+            refs: [sliceKey],
+        });
+    }
+    return diags;
+}
+//# sourceMappingURL=sliceReadyValidate.js.map

package/dist/catalog/sliceReadyValidate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sliceReadyValidate.js","sourceRoot":"","sources":["../../src/catalog/sliceReadyValidate.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,4FAA4F;AAC5F,2FAA2F;AAC3F,0FAA0F;AAC1F,6FAA6F;AAC7F,qBAAqB;AACrB,EAAE;AACF,qFAAqF;AACrF,uFAAuF;AACvF,4FAA4F;AAC5F,8FAA8F;AAC9F,+FAA+F;AAC/F,4FAA4F;AAC5F,8DAA8D;AAC9D,EAAE;AACF,gGAAgG;AAChG,uFAAuF;AACvF,6FAA6F;AAC7F,gGAAgG;AAChG,kGAAkG;AAClG,2DAA2D;AAC3D,EAAE;AACF,8FAA8F;AAC9F,6FAA6F;AAC7F,8FAA8F;AAC9F,kFAAkF;AAKlF,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAsB,EACtB,IAAgB,EAChB,OAAe,EACf,QAAgB;IAEhB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,QAAQ,CAAC,2BAA2B,EAAE;gBACpC,OAAO,EAAE,6BAA6B,QAAQ,iBAAiB;gBAC/D,IAAI,EAAE,CAAC,QAAQ,CAAC;aACjB,CAAC;SACH,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,eAAe,EAAE,GAAG,mBAAmB,CAC/D,KAAK,EACL,QAAQ,EACR,OAAO,EACP,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAE,CAC9B,CAAC;IAEF,IAAI,GAAG,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QAClC,OAAO;YACL,QAAQ,CAAC,0BAA0B,EAAE;gBACnC,OAAO,EAAE,UAAU,QAAQ,yCAAyC,QAAQ,+DAA+D;gBAC3I,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,CAAC,QAAQ,CAAC;aACjB,CAAC;SACH,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,sBAAsB,IAAI,GAAG,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;QAClF,iFAAiF;QACjF,uEAAuE;QACvE,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,kDAAkD;IAClD,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,IAAI,GAAG,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;QACxC,QAAQ,CAAC,KAAK,EAAE,8BAA8B,EAAE;YAC9C,OAAO,EAAE,UAAU,QAAQ,gBAAgB,GAAG,CAAC,MAAM,IAAI,QAAQ,0BAA0B;YAC3F,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,CAAC,QAAQ,CAAC;SACjB,CAAC,CAAC;IACL,CAAC;IAED,8FAA8F;IAC9F,0FAA0F;IAC1F,2FAA2F;IAC3F,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAE,CAAC;IAChD,IAAI,MAAM,CAAC,sBAAsB,GAAG,CAAC,EAAE,CAAC;QACtC,QAAQ,CAAC,KAAK,EAAE,sCAAsC,EAAE;YACtD,OAAO,EAAE,UAAU,QAAQ,SAAS,MAAM,CAAC,sBAAsB,OAAO,MAAM,CAAC,kBAAkB,6BAA6B;YAC9H,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,CAAC,QAAQ,CAAC;SACjB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/cli/diff-inputs.d.ts

@@ -1,3 +1,4 @@
+import { SliceDoc } from "../catalog/sliceDoc.js";
 /** Resolved `em diff` invocation, or a user-facing `error` for an invalid form. */
 export type DiffPlan = {
     error: string;
@@ -42,3 +43,22 @@ export type RevisionResult = {
  * unit-testable without a real repository.
  */
 export declare function resolveRevision(file: string, rev: string, runGit?: GitRunner): RevisionResult;
+/**
+ * Resolve a slice's doc (`slices/<sliceKey>.md`, relative to `anchorFile`'s directory — same
+ * convention as every other doc/note path in em) at git revision `rev`. Unlike
+ * `resolveRevision`, a missing doc at a revision is routine (not every slice had a doc yet, or
+ * the doc simply isn't tracked) rather than a user-facing error — so every failure mode
+ * collapses to `null`, for `em diff`'s lineage annotation (MIL-84) to treat as "nothing to
+ * annotate with" rather than aborting the diff.
+ */
+export declare function resolveDocAtRevision(anchorFile: string, sliceKey: string, rev: string, runGit?: GitRunner): SliceDoc | null;
+/**
+ * Slice doc keys (filename stems under `slices/`, relative to `anchorFile`'s directory — same
+ * anchor convention as `resolveDocAtRevision`) present at git revision `rev`. Used by `em ledger`
+ * (MIL-89) to discover the candidate set of docs to compare across two revisions, reusing the
+ * same repo-root resolution `showAtRevision` does rather than a second, divergent way of finding
+ * "what slice docs exist here." Returns `[]` (not an error) when the repo can't be resolved or
+ * `slices/` didn't exist at `rev` — both routine (a model with no slice docs yet), matching
+ * `resolveDocAtRevision`'s "missing is routine" stance.
+ */
+export declare function listSliceKeysAtRevision(anchorFile: string, rev: string, runGit?: GitRunner): string[];