@milehimikey/em 1.8.0 → 1.9.0

package/dist/cli/changelogBuild.js

@@ -0,0 +1,89 @@
+// SPDX-License-Identifier: MIT
+// `em changelog`'s document builder (MIL-100), extracted out of cli.ts (MIL-167) so the MCP
+// server's `changelog` tool can call the exact same function the CLI command does — same
+// "one builder, two callers" pattern as buildDiffJson/buildGlossaryJson, just markdown instead
+// of JSON (the CLI command itself has no `--json` flag; the document IS the markdown text).
+//
+// Already pure enough to share as-is: no process.exit, no console — a per-revision compile
+// failure becomes that entry's `error` field, never a crash (see the docstring below). The only
+// impure bit (`readFileAtCommit`, a `git show`) is injected in, same convention as
+// changelog-git.ts/diff-inputs.ts's GitRunner.
+import { dirname, join } from "node:path";
+import { existsSync, readFileSync } from "node:fs";
+import { compile } from "../pipeline.js";
+import { ParseError } from "../parser/parser.js";
+import { hasErrors } from "../model/validate.js";
+import { diffModels } from "../model/diff.js";
+import { buildChangelog, parseDecisionsLog } from "../emit/changelog.js";
+import { readFileAtCommit } from "./changelog-git.js";
+import { STATE_FILE_NAME } from "./stateFile.js";
+/**
+ * Build the `em changelog` markdown document for an already-resolved commit list
+ * (oldest -> newest, see `listModelCommits`). Compiles every revision once; per-revision
+ * warnings are deliberately never surfaced (historical revisions can be noisy) — only a compile
+ * *failure* (parse error or validation error, same threshold `em diff` uses) surfaces, as that
+ * entry's error note, never a crash. Diffs are computed against the previous *parseable*
+ * revision, so a single bad revision in the middle of the walk doesn't break every entry after
+ * it. Content is read at each commit's own path (`readFileAtCommit`), so the walk survives
+ * renames.
+ */
+export function buildChangelogDoc(file, repoRoot, commits) {
+    const models = [];
+    const refsList = [];
+    const errors = [];
+    for (const c of commits) {
+        const rev = readFileAtCommit(repoRoot, c);
+        if (!rev.ok) {
+            models.push(null);
+            refsList.push(null);
+            errors.push(rev.message);
+            continue;
+        }
+        try {
+            const { model, refs, diagnostics } = compile(rev.content);
+            if (hasErrors(diagnostics)) {
+                models.push(null);
+                refsList.push(null);
+                errors.push(`validation errors at ${c.shortHash} — fix with \`em validate\` at that revision`);
+            }
+            else {
+                models.push(model);
+                refsList.push(refs);
+                errors.push(null);
+            }
+        }
+        catch (e) {
+            models.push(null);
+            refsList.push(null);
+            errors.push(e instanceof ParseError ? `parse error: ${e.message}` : e instanceof Error ? e.message : String(e));
+        }
+    }
+    const entries = [];
+    let prevParseable = -1;
+    commits.forEach((c, i) => {
+        const base = { shortHash: c.shortHash, date: c.date, subject: c.subject };
+        if (i === 0) {
+            entries.push({ ...base, diff: null });
+        }
+        else if (!models[i]) {
+            entries.push({ ...base, diff: null, error: errors[i] });
+        }
+        else if (prevParseable === -1) {
+            entries.push({ ...base, diff: null, error: `no earlier parseable revision to diff against (${commits[0].shortHash}: ${errors[0]})` });
+        }
+        else {
+            entries.push({
+                ...base,
+                diff: diffModels(models[prevParseable], models[i], refsList[prevParseable], refsList[i]),
+            });
+        }
+        if (models[i])
+            prevParseable = i;
+    });
+    const intro = models[0] ? { slices: models[0].slices.length, elements: models[0].elements.length } : null;
+    const introError = models[0] ? undefined : (errors[0] ?? undefined);
+    const stateFile = join(dirname(file), STATE_FILE_NAME);
+    const decisions = existsSync(stateFile) ? parseDecisionsLog(readFileSync(stateFile, "utf8")) : [];
+    return buildChangelog(entries, decisions, { file, intro, introError });
+}
+//# sourceMappingURL=changelogBuild.js.map

package/dist/cli/changelogBuild.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"changelogBuild.js","sourceRoot":"","sources":["../../src/cli/changelogBuild.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,4FAA4F;AAC5F,yFAAyF;AACzF,+FAA+F;AAC/F,4FAA4F;AAC5F,EAAE;AACF,2FAA2F;AAC3F,gGAAgG;AAChG,mFAAmF;AACnF,+CAA+C;AAE/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAGjD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAkC,MAAM,sBAAsB,CAAC;AACzG,OAAO,EAAE,gBAAgB,EAAc,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,QAAgB,EAAE,OAAqB;IACrF,MAAM,MAAM,GAA+B,EAAE,CAAC;IAC9C,MAAM,QAAQ,GAA0B,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC1D,IAAI,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAClB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,SAAS,8CAA8C,CAAC,CAAC;YACjG,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACnB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClH,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,IAAI,aAAa,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QAC1E,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;aAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC;QAC3D,CAAC;aAAM,IAAI,aAAa,KAAK,CAAC,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,kDAAkD,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACxI,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC;gBACX,GAAG,IAAI;gBACP,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,aAAa,CAAE,EAAE,MAAM,CAAC,CAAC,CAAE,EAAE,QAAQ,CAAC,aAAa,CAAE,EAAE,QAAQ,CAAC,CAAC,CAAE,CAAC;aAC7F,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,CAAC,CAAC,CAAC;YAAE,aAAa,GAAG,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAA0B,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACjI,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC;IAEpE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAElG,OAAO,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;AACzE,CAAC"}

package/dist/cli/ciInit.d.ts

@@ -0,0 +1,42 @@
+export declare const CI_WORKFLOW_MARKER = "em-ci";
+export declare const CONFORM_WORKFLOW_MARKER = "em-conform";
+export declare function ciWorkflowPath(repoRoot: string): string;
+export declare function conformWorkflowPath(repoRoot: string): string;
+export declare function findUnsafeCiInitArg(value: string): string | null;
+/** The managed block only (no header/`on:`/`jobs:` scaffolding) — what gets written between
+ *  the marker pair, both for a fresh file and to patch an existing marked one in place. */
+export declare function ciManagedBody(model: string, testsDir: string): string;
+export declare function buildCiWorkflowFile(model: string, testsDir: string, emVersion: string): string;
+/** The managed block only (no header/`on:`/`permissions:`/`jobs:` scaffolding) — what gets
+ *  written between the marker pair, both for a fresh file and to patch an existing marked one
+ *  in place. */
+export declare function conformManagedBody(model: string): string;
+export declare function buildConformWorkflowFile(model: string, emVersion: string): string;
+export type CiFileStatus = {
+    kind: "create";
+    content: string;
+} | {
+    kind: "ok";
+    content: string;
+} | {
+    kind: "stale";
+    content: string;
+    current: string;
+} | {
+    kind: "missing-markers";
+} | {
+    kind: "would-replace";
+    content: string;
+};
+/**
+ * Decide what to do with one generated file: create it if missing, patch the managed block if
+ * the marker pair is present, or (without `force`) leave an existing unmarked file alone. Pure
+ * — never touches disk; `applyCiFile` below does the actual write.
+ *
+ * `generated` is the full from-scratch file content (header + `on:`/`jobs:` scaffolding +
+ * marker-wrapped body) — written verbatim for `create`/`would-replace`. `managedBody` is just
+ * the text between the markers, reused to patch an existing marked file in place without
+ * touching whatever a repo added around it.
+ */
+export declare function planCiFile(path: string, generated: string, managedBody: string, markerName: string, force: boolean): CiFileStatus;
+export declare function applyCiFile(path: string, status: CiFileStatus): void;

package/dist/cli/ciInit.js

@@ -0,0 +1,298 @@
+// SPDX-License-Identifier: MIT
+// `em ci init` (MIL-166): scaffolds the CI enforcement preset docs/ci.md describes as a
+// copy-paste cookbook into two installed, plain GitHub Actions workflow files — converting
+// "machines check this" from available (a recipe someone has to know to copy) to default (a
+// command that installs it). Every check the preset wires already exists as its own `em`
+// command (docs/ci.md); this module only owns the YAML wiring around them.
+//
+// Same install discipline as `em skill install`/`em slice index` (see their own modules):
+//   - marker-delimited (src/util/markers.ts's "hash" style, since YAML has no `<!-- -->`
+//     comment syntax) — the managed job block sits between `# GENERATED:em-ci:start` /
+//     `# GENERATED:em-ci:end`, so a repo can add its own jobs above or below the markers, at
+//     the same indent under `jobs:`, and keep them across a future re-run.
+//   - idempotent — re-running with nothing changed leaves both files byte-identical; a file
+//     that already exists without our markers is left alone unless `--force` says to replace
+//     it wholesale (matching `em skill install`: existing-and-no-force is reported, not an
+//     error).
+//   - `--check` for CI self-verification — never writes; reports whether the managed block in
+//     each file still matches what the current preset would generate (missing / no-markers /
+//     stale / ok), CI-ready the same way `em slice index --check` is.
+//
+// The generated files are handed to the repo, not owned by `em` forever: past the initial
+// `em ci init`, edit them freely (see each file's own header comment). `--check` is there for a
+// team that would rather pin the vanilla preset and gate on drift — opt-in, the same posture
+// docs/ci.md already recommends for `em skill check` ("if you'd rather pin ... add `em skill
+// check` as its own gate instead of silently overwriting").
+import { existsSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { applyMarker, markerPair } from "../util/markers.js";
+export const CI_WORKFLOW_MARKER = "em-ci";
+export const CONFORM_WORKFLOW_MARKER = "em-conform";
+const CI_WORKFLOW_RELPATH = join(".github", "workflows", "em-ci.yml");
+const CONFORM_WORKFLOW_RELPATH = join(".github", "workflows", "em-conform.yml");
+export function ciWorkflowPath(repoRoot) {
+    return join(repoRoot, CI_WORKFLOW_RELPATH);
+}
+export function conformWorkflowPath(repoRoot) {
+    return join(repoRoot, CONFORM_WORKFLOW_RELPATH);
+}
+/** Characters that would break out of the double-quoted shell strings the generated workflow
+ *  embeds `model`/`testsDir` into (`"model.em"`, `"test"`) — same validate-the-input-not-the-
+ *  output posture as `em scaffold`'s name check (src/cli.ts). */
+const UNSAFE_ARG_CHARS = /["`$\n]/;
+export function findUnsafeCiInitArg(value) {
+    return UNSAFE_ARG_CHARS.test(value) ? value : null;
+}
+// ---- em-ci.yml (PR gates + push-triggered badge rebuild) ----
+/** The managed block only (no header/`on:`/`jobs:` scaffolding) — what gets written between
+ *  the marker pair, both for a fresh file and to patch an existing marked one in place. */
+export function ciManagedBody(model, testsDir) {
+    return `  validate:
+    name: em validate (changed .em files)
+    if: github.event_name == 'pull_request'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+      - name: Validate changed models
+        run: |
+          set -e
+          base="\${{ github.event.pull_request.base.sha }}"
+          head="\${{ github.event.pull_request.head.sha }}"
+          changed=$(git diff --name-only "$base" "$head" -- '*.em')
+          if [ -z "$changed" ]; then
+            echo "no .em files changed"
+            exit 0
+          fi
+          status=0
+          for f in $changed; do
+            echo "::group::em validate $f"
+            npx @milehimikey/em validate "$f" || status=1
+            npx @milehimikey/em validate "$f" --list-issues
+            echo "::endgroup::"
+          done
+          exit $status
+
+  slice-index:
+    name: "em slice index --check (README table drift)"
+    if: github.event_name == 'pull_request'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+      - name: Check README Slices table is current
+        run: npx @milehimikey/em slice index "${model}" --check
+
+  coverage:
+    name: "em coverage --strict (invariant citations)"
+    if: github.event_name == 'pull_request'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+      - name: Check invariant test coverage
+        run: npx @milehimikey/em coverage "${model}" --tests "${testsDir}" --strict
+
+  ledger:
+    name: em ledger (slice doc version/content agreement)
+    if: github.event_name == 'pull_request'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+      - name: Check slice doc version/content agreement
+        run: npx @milehimikey/em ledger "${model}" --from "\${{ github.event.pull_request.base.sha }}"
+
+  skill-check:
+    name: em skill check (vendored skill drift)
+    if: github.event_name == 'pull_request'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+      - name: Check vendored skill matches installed em
+        run: |
+          if [ -d .claude/skills/event-modeling ]; then
+            npx @milehimikey/em skill check
+          else
+            echo "no vendored skill at .claude/skills/event-modeling — skipping (run \`em skill install\` to opt in)"
+          fi
+
+  glossary:
+    name: "em glossary --fail-on-conflicts (cross-model vocabulary)"
+    if: github.event_name == 'pull_request'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+      - name: Check glossary consistency across models
+        run: npx @milehimikey/em glossary $(git ls-files '*.em') --fail-on-conflicts
+
+  status-badge:
+    name: rebuild status badge (advisory — publish only, never a gate)
+    if: github.event_name == 'push'
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+      - name: Rebuild status badge
+        run: npx @milehimikey/em status "${model}" --tests "${testsDir}" --badge -o status-badge.svg
+      - name: Commit badge if changed
+        run: |
+          if git diff --quiet -- status-badge.svg; then
+            echo "status-badge.svg unchanged"
+            exit 0
+          fi
+          git config user.name "em-ci"
+          git config user.email "em-ci@users.noreply.github.com"
+          git add status-badge.svg
+          git commit -m "em ci: rebuild status badge [skip ci]"
+          git push`;
+}
+function ciWorkflowHeader(model, emVersion) {
+    return `# Generated once by \`em ci init ${model}\` (em ${emVersion}) — docs/ci.md
+#
+# This file is yours from here: edit it, add jobs, remove ones you don't want. The content
+# between the GENERATED:${CI_WORKFLOW_MARKER} markers below is what a future \`em ci init\`
+# (e.g. after upgrading em) refreshes in place — add your own jobs above or below the markers,
+# at the same indent under \`jobs:\`, and they survive a re-run untouched. Every gate here fails
+# the PR the same way any other required check does; the status-badge job only ever publishes.
+# \`em ci init ${model} --check\` reports drift in the managed block — advisory unless you wire
+# it into a gate yourself (docs/ci.md).
+name: em ci
+
+on:
+  pull_request:
+    paths:
+      - "**/*.em"
+      - "**/slices/**"
+      - "**/README.md"
+  push:
+    branches: [main]
+
+jobs:
+`;
+}
+// Marker comment lines sit at column 0, not indented to the 2-space job-key column: YAML
+// comments are whitespace-agnostic (indentation only matters for actual content nodes), and
+// `applyMarker`'s regex only ever recognizes the marker text itself, not any indentation before
+// it on the same line — a fixed indent here would get silently swallowed into the discarded
+// middle capture group on the very first re-patch (was a real bug during development: the
+// closing marker's leading spaces vanished on a second `em ci init` run).
+export function buildCiWorkflowFile(model, testsDir, emVersion) {
+    const { start, end } = markerPair(CI_WORKFLOW_MARKER, "hash");
+    return `${ciWorkflowHeader(model, emVersion)}${start}\n${ciManagedBody(model, testsDir)}\n${end}\n`;
+}
+// ---- em-conform.yml (scheduled, advisory-only conformance cadence) ----
+/** The managed block only (no header/`on:`/`permissions:`/`jobs:` scaffolding) — what gets
+ *  written between the marker pair, both for a fresh file and to patch an existing marked one
+ *  in place. */
+export function conformManagedBody(model) {
+    const modelDir = dirname(model) === "." ? "." : dirname(model);
+    return `  conform:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Note reports already present
+        run: ls "$MODEL_DIR"/conformance/*-report.md 2>/dev/null | sort > /tmp/reports-before
+
+      - name: Run conform phase
+        run: |
+          npm i -g @milehimikey/em@1 @anthropic-ai/claude-code
+          em skill install --force
+          claude -p "/event-modeling conform" \\
+            --allowedTools "Bash(em:*),Bash(git:*),Read,Grep,Glob,Write,Edit"
+        env:
+          ANTHROPIC_API_KEY: \${{ secrets.ANTHROPIC_API_KEY }}
+
+      - name: Post report
+        run: |
+          ls "$MODEL_DIR"/conformance/*-report.md 2>/dev/null | sort > /tmp/reports-after
+          report=$(comm -13 /tmp/reports-before /tmp/reports-after | tail -1)
+          if [ -z "$report" ]; then
+            echo "the run produced no new report — nothing to post"
+            exit 0
+          fi
+          gh issue create --title "Model conformance report $(date +%F)" \\
+            --body-file "$report"
+        env:
+          GH_TOKEN: \${{ secrets.GITHUB_TOKEN }}
+    env:
+      MODEL_DIR: ${modelDir}`;
+}
+function conformWorkflowHeader(model, emVersion) {
+    return `# Generated once by \`em ci init ${model}\` (em ${emVersion}) — docs/ci.md#conformance-cadence-advisory
+#
+# This file is yours from here: edit it freely. It is advisory-only by construction — the job
+# never fails the build on drift (findings become a GitHub issue for a human to ratify), and
+# the state file's \`Last conformance:\` marker only advances when a human ratifies the run's
+# outcome locally and commits that update. Resist wiring this to every push; cadence, not
+# trigger, is the intended shape (docs/ci.md).
+name: model-conformance
+
+on:
+  schedule:
+    - cron: "0 6 * * 1"     # weekly, Monday 06:00 UTC
+  workflow_dispatch: {}     # and on demand
+
+permissions:
+  contents: read
+  issues: write             # the Post report step opens an issue
+
+jobs:
+`;
+}
+export function buildConformWorkflowFile(model, emVersion) {
+    const { start, end } = markerPair(CONFORM_WORKFLOW_MARKER, "hash");
+    return `${conformWorkflowHeader(model, emVersion)}${start}\n${conformManagedBody(model)}\n${end}\n`;
+}
+/**
+ * Decide what to do with one generated file: create it if missing, patch the managed block if
+ * the marker pair is present, or (without `force`) leave an existing unmarked file alone. Pure
+ * — never touches disk; `applyCiFile` below does the actual write.
+ *
+ * `generated` is the full from-scratch file content (header + `on:`/`jobs:` scaffolding +
+ * marker-wrapped body) — written verbatim for `create`/`would-replace`. `managedBody` is just
+ * the text between the markers, reused to patch an existing marked file in place without
+ * touching whatever a repo added around it.
+ */
+export function planCiFile(path, generated, managedBody, markerName, force) {
+    if (!existsSync(path))
+        return { kind: "create", content: generated };
+    const original = readFileSync(path, "utf8");
+    const updated = applyMarker(original, markerName, managedBody, "hash");
+    if (updated === null) {
+        return force ? { kind: "would-replace", content: generated } : { kind: "missing-markers" };
+    }
+    return updated === original ? { kind: "ok", content: original } : { kind: "stale", content: updated, current: original };
+}
+export function applyCiFile(path, status) {
+    if (status.kind === "create" || status.kind === "stale" || status.kind === "would-replace") {
+        writeFileSync(path, status.content, "utf8");
+    }
+}
+//# sourceMappingURL=ciInit.js.map

package/dist/cli/ciInit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ciInit.js","sourceRoot":"","sources":["../../src/cli/ciInit.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,wFAAwF;AACxF,2FAA2F;AAC3F,4FAA4F;AAC5F,yFAAyF;AACzF,2EAA2E;AAC3E,EAAE;AACF,0FAA0F;AAC1F,yFAAyF;AACzF,uFAAuF;AACvF,6FAA6F;AAC7F,2EAA2E;AAC3E,4FAA4F;AAC5F,6FAA6F;AAC7F,2FAA2F;AAC3F,cAAc;AACd,8FAA8F;AAC9F,6FAA6F;AAC7F,sEAAsE;AACtE,EAAE;AACF,0FAA0F;AAC1F,gGAAgG;AAChG,6FAA6F;AAC7F,6FAA6F;AAC7F,4DAA4D;AAE5D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAE7D,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAC1C,MAAM,CAAC,MAAM,uBAAuB,GAAG,YAAY,CAAC;AAEpD,MAAM,mBAAmB,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;AACtE,MAAM,wBAAwB,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;AAEhF,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,OAAO,IAAI,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;AAC7C,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,OAAO,IAAI,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC;AAClD,CAAC;AAED;;iEAEiE;AACjE,MAAM,gBAAgB,GAAG,SAAS,CAAC;AAEnC,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC;AAED,gEAAgE;AAEhE;2FAC2F;AAC3F,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,QAAgB;IAC3D,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gDAwCuC,KAAK;;;;;;;;;;;;6CAYR,KAAK,cAAc,QAAQ;;;;;;;;;;;;;;2CAc7B,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2CA2CL,KAAK,cAAc,QAAQ;;;;;;;;;;;mBAWnD,CAAC;AACpB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAE,SAAiB;IACxD,OAAO,oCAAoC,KAAK,UAAU,SAAS;;;0BAG3C,kBAAkB;;;;iBAI3B,KAAK;;;;;;;;;;;;;;CAcrB,CAAC;AACF,CAAC;AAED,yFAAyF;AACzF,4FAA4F;AAC5F,gGAAgG;AAChG,4FAA4F;AAC5F,0FAA0F;AAC1F,0EAA0E;AAC1E,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,QAAgB,EAAE,SAAiB;IACpF,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IAC9D,OAAO,GAAG,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,GAAG,KAAK,KAAK,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,GAAG,IAAI,CAAC;AACtG,CAAC;AAED,0EAA0E;AAE1E;;gBAEgB;AAChB,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/D,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAiCU,QAAQ,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa,EAAE,SAAiB;IAC7D,OAAO,oCAAoC,KAAK,UAAU,SAAS;;;;;;;;;;;;;;;;;;;CAmBpE,CAAC;AACF,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAa,EAAE,SAAiB;IACvE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;IACnE,OAAO,GAAG,qBAAqB,CAAC,KAAK,EAAE,SAAS,CAAC,GAAG,KAAK,KAAK,kBAAkB,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC;AACtG,CAAC;AAWD;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU,CACxB,IAAY,EACZ,SAAiB,EACjB,WAAmB,EACnB,UAAkB,EAClB,KAAc;IAEd,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAErE,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAEvE,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;IAC7F,CAAC;IACD,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC3H,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,MAAoB;IAC5D,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QAC3F,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC"}

package/dist/cli/conformSupersede.d.ts

@@ -0,0 +1,32 @@
+export type ApplySupersedeResult = {
+    ok: true;
+    content: string;
+    changed: boolean;
+} | {
+    ok: false;
+    message: string;
+};
+/**
+ * Pure text transform: inserts (or, if already present, no-ops on) a `> **Superseded as of
+ * `<revision>`** — findings <findings> since ruled (<on>).` banner line directly under `raw`'s
+ * first line. Refuses when `raw` has no first line to anchor under, or when any input carries
+ * control characters / an unsafe `findings` value that could corrupt the report or smuggle
+ * unintended markdown into it. No fs access — the caller reads/writes; see `runConformSupersede`
+ * below.
+ */
+export declare function applySupersededBanner(raw: string, revision: string, findings: string, on: string): ApplySupersedeResult;
+export type RunConformSupersedeResult = {
+    ok: true;
+    path: string;
+    changed: boolean;
+} | {
+    ok: false;
+    message: string;
+};
+/**
+ * Resolves `reportPath` (relative to `baseDir` — the `.em` file's directory, same convention
+ * every doc/note/report path in `em` uses) and applies the banner. Refuses cleanly when the
+ * report doesn't exist rather than creating one — `em conform-supersede` stamps an existing
+ * report, it never authors one.
+ */
+export declare function runConformSupersede(baseDir: string, reportPath: string, revision: string, findings: string, on: string): RunConformSupersedeResult;

package/dist/cli/conformSupersede.js

@@ -0,0 +1,102 @@
+// SPDX-License-Identifier: MIT
+// `em conform-supersede` (MIL-164): stamps a conformance report with a "this describes an
+// ancestor" banner once its findings have been ruled on (docs/process.md's "Ratifying
+// conformance findings" — stage 7 of workflow.md, the companion step to run alongside/after
+// `em slice ratify` once a report's findings are ruled). A reader following a superseded
+// report's file:line citations needs to know, before trusting them, that the report was
+// written against an older revision — the exact problem a stale-but-uncaptioned report causes
+// (Meridian Goods' 2026-08-23 report citing a file a later ruling renamed: correct as history,
+// misleading as a current view).
+//
+// Write strategy: additive-only text splice, never a parse+re-serialize of the report — same
+// surgical discipline ratify.ts/markImplemented.ts hold for slice-doc frontmatter, applied here
+// to a plain-markdown report instead. The banner is inserted as a blockquote line directly under
+// the report's title (its first line); every byte after that — the metadata bullets, Summary,
+// Findings, everything — is copied through verbatim. Repeated calls (a report ruled on
+// incrementally, across more than one session) accumulate one banner line per call rather than
+// overwriting the last — each stamp names its own revision/findings/date, so the accumulated
+// block reads as a small history of rulings, not a single mutable fact. Calling again with the
+// EXACT same revision/findings/date is a no-op (`changed: false`), same idempotency convention
+// every other `em` write command holds.
+import { existsSync, readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { isValidDateString } from "./stateFile.js";
+const BANNER_PREFIX = "> **Superseded as of `";
+/** Conservative charset for `--findings`: digits, commas, spaces, and either dash style (ASCII
+ *  hyphen or an en/em dash pasted from a report) — enough to write "1-3", "1, 2, 4", or "1–3",
+ *  nothing that could smuggle markdown/HTML into the banner it gets spliced into. */
+const FINDINGS_RE = /^[\d,\s\-–—]+$/;
+const CONTROL_CHARS_RE = /[\x00-\x1f\x7f]/;
+/**
+ * Pure text transform: inserts (or, if already present, no-ops on) a `> **Superseded as of
+ * `<revision>`** — findings <findings> since ruled (<on>).` banner line directly under `raw`'s
+ * first line. Refuses when `raw` has no first line to anchor under, or when any input carries
+ * control characters / an unsafe `findings` value that could corrupt the report or smuggle
+ * unintended markdown into it. No fs access — the caller reads/writes; see `runConformSupersede`
+ * below.
+ */
+export function applySupersededBanner(raw, revision, findings, on) {
+    const trimmedRev = revision.trim();
+    if (!trimmedRev)
+        return { ok: false, message: "a revision is required (--as-of)" };
+    if (CONTROL_CHARS_RE.test(trimmedRev) || trimmedRev.includes("`")) {
+        return { ok: false, message: "revision must not contain control characters or a backtick" };
+    }
+    const trimmedFindings = findings.trim();
+    if (!trimmedFindings)
+        return { ok: false, message: "a findings spec is required (--findings)" };
+    if (!FINDINGS_RE.test(trimmedFindings)) {
+        return {
+            ok: false,
+            message: `--findings "${findings}" must be a plain list/range of numbers (e.g. "1-3" or "1, 2, 4")`,
+        };
+    }
+    if (!isValidDateString(on)) {
+        return { ok: false, message: `invalid date "${on}" — expected YYYY-MM-DD` };
+    }
+    const firstNl = raw.indexOf("\n");
+    if (firstNl === -1) {
+        return { ok: false, message: "report has no title line to anchor the banner after" };
+    }
+    const eol = raw[firstNl - 1] === "\r" ? "\r\n" : "\n";
+    const titleEnd = firstNl - (eol === "\r\n" ? 1 : 0);
+    const titleLine = raw.slice(0, titleEnd);
+    const rest = raw.slice(firstNl + 1);
+    const newLine = `${BANNER_PREFIX}${trimmedRev}\`** — findings ${trimmedFindings} since ruled (${on}). This report describes an ancestor of the current model; verify file:line citations against the current code before relying on them.`;
+    const restLines = rest.split(eol);
+    const bannerLines = [];
+    let i = 0;
+    while (i < restLines.length && restLines[i].startsWith(BANNER_PREFIX)) {
+        bannerLines.push(restLines[i]);
+        i++;
+    }
+    if (bannerLines.includes(newLine)) {
+        return { ok: true, content: raw, changed: false }; // idempotent no-op — exact stamp already recorded
+    }
+    const remainder = restLines.slice(i).join(eol);
+    const newBannerBlock = [...bannerLines, newLine];
+    const content = `${titleLine}${eol}${newBannerBlock.join(eol)}${eol}${remainder}`;
+    return { ok: true, content, changed: true };
+}
+/**
+ * Resolves `reportPath` (relative to `baseDir` — the `.em` file's directory, same convention
+ * every doc/note/report path in `em` uses) and applies the banner. Refuses cleanly when the
+ * report doesn't exist rather than creating one — `em conform-supersede` stamps an existing
+ * report, it never authors one.
+ */
+export function runConformSupersede(baseDir, reportPath, revision, findings, on) {
+    const absPath = join(baseDir, reportPath);
+    if (!existsSync(absPath)) {
+        return { ok: false, message: `no such report: ${reportPath}` };
+    }
+    const raw = readFileSync(absPath, "utf8");
+    const result = applySupersededBanner(raw, revision, findings, on);
+    if (!result.ok) {
+        return { ok: false, message: `${reportPath}: ${result.message}` };
+    }
+    if (result.changed) {
+        writeFileSync(absPath, result.content, "utf8");
+    }
+    return { ok: true, path: reportPath, changed: result.changed };
+}
+//# sourceMappingURL=conformSupersede.js.map

package/dist/cli/conformSupersede.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conformSupersede.js","sourceRoot":"","sources":["../../src/cli/conformSupersede.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,0FAA0F;AAC1F,sFAAsF;AACtF,4FAA4F;AAC5F,yFAAyF;AACzF,wFAAwF;AACxF,8FAA8F;AAC9F,+FAA+F;AAC/F,iCAAiC;AACjC,EAAE;AACF,6FAA6F;AAC7F,gGAAgG;AAChG,iGAAiG;AACjG,8FAA8F;AAC9F,uFAAuF;AACvF,+FAA+F;AAC/F,6FAA6F;AAC7F,+FAA+F;AAC/F,+FAA+F;AAC/F,wCAAwC;AAExC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEnD,MAAM,aAAa,GAAG,wBAAwB,CAAC;AAE/C;;qFAEqF;AACrF,MAAM,WAAW,GAAG,gBAAgB,CAAC;AACrC,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAI3C;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAW,EAAE,QAAgB,EAAE,QAAgB,EAAE,EAAU;IAC/F,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;IACnF,IAAI,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,4DAA4D,EAAE,CAAC;IAC9F,CAAC;IACD,MAAM,eAAe,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IACxC,IAAI,CAAC,eAAe;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;IAChG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;QACvC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,eAAe,QAAQ,mEAAmE;SACpG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,CAAC;IAC9E,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC;IACvF,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;IAEpC,MAAM,OAAO,GAAG,GAAG,aAAa,GAAG,UAAU,mBAAmB,eAAe,iBAAiB,EAAE,wIAAwI,CAAC;IAE3O,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACtE,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC,EAAE,CAAC;IACN,CAAC;IACD,IAAI,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,kDAAkD;IACvG,CAAC;IACD,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,cAAc,GAAG,CAAC,GAAG,WAAW,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,GAAG,SAAS,GAAG,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,SAAS,EAAE,CAAC;IAClF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC9C,CAAC;AAID;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,UAAkB,EAAE,QAAgB,EAAE,QAAgB,EAAE,EAAU;IACrH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,UAAU,EAAE,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,UAAU,KAAK,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;AACjE,CAAC"}

package/dist/cli/coverage.d.ts

@@ -1,17 +1,24 @@
 import { NormalizedModel } from "../model/model.js";
 import { RefsResult } from "../model/refs.js";
-/** The stable INV token format, scanned across a slice doc's whole body (not just the
- *  `## Invariants / Business Rules` section — a `## Delta` section's Added/Modified/Renamed
- *  requirement IDs are just as citable, see templates/slice.md). `INV-` then one or more
- *  alphanumeric/hyphen segments — matches both `INV-1`/`INV-2` (the template's bare numbering)
- *  and `INV-CHK-4`/`INV-CHK-3a` (the per-slice mnemonic style reference/conform.md's own example
- *  uses). Exported so tests can assert against the exact grammar. */
+/** The stable INV token format. `INV-` then one or more alphanumeric/hyphen segments — matches
+ *  both `INV-1`/`INV-2` (the template's bare numbering) and `INV-CHK-4`/`INV-CHK-3a` (the
+ *  per-slice mnemonic style reference/conform.md's own example uses). Exported so tests can
+ *  assert against the exact grammar. */
 export declare const INV_TOKEN_RE: RegExp;
 /**
- * Extract every distinct `INV-*` token from a slice doc's body text, in first-occurrence order
- * (a rule stated once in `## Invariants` and mentioned again in a later `## Delta` section dedupes
- * to its first appearance — order is for stable, readable output, not a claim about which mention
- * is canonical).
+ * Extract every distinct `INV-*` token this slice doc *defines*, in first-occurrence order (a
+ * rule stated once in `## Invariants` and re-declared in a later `## Delta` section dedupes to
+ * its first appearance — order is for stable, readable output, not a claim about which mention is
+ * canonical). Scoped to `OWNERSHIP_HEADING_RE`'s sections only, so a doc's prose narratively
+ * citing another slice's ID elsewhere (Dependencies, Open Questions, ...) doesn't cross-credit
+ * that ID as this slice's own (MIL-149) — the section ends at the next `#`/`##` heading or EOF,
+ * same boundary rule sliceDoc.ts's countOpenQuestions() uses, so a `### Added`/`#### Requirement`
+ * subheading under `## Delta` stays in scope while a sibling `## Scenarios` does not. Within that
+ * scope, only `STRUCTURAL_LINE_RE`'s bullet/subheading lines contribute — MIL-155 — so a wrapped
+ * continuation line that legitimately *cites* a sibling slice's ID while explaining this doc's own
+ * (e.g. an Invariants bullet's exactly-once rule wrapping onto a line naming another slice's
+ * queue-draining ID) doesn't cross-credit that citation just because it sits inside the ownership
+ * section too.
  */
 export declare function extractInvariantIds(body: string): string[];
 export interface Citation {