@milehimikey/em 1.8.1 → 1.9.1

package/dist/cli/ciInit.js

@@ -0,0 +1,298 @@
+// SPDX-License-Identifier: MIT
+// `em ci init` (MIL-166): scaffolds the CI enforcement preset docs/ci.md describes as a
+// copy-paste cookbook into two installed, plain GitHub Actions workflow files — converting
+// "machines check this" from available (a recipe someone has to know to copy) to default (a
+// command that installs it). Every check the preset wires already exists as its own `em`
+// command (docs/ci.md); this module only owns the YAML wiring around them.
+//
+// Same install discipline as `em skill install`/`em slice index` (see their own modules):
+//   - marker-delimited (src/util/markers.ts's "hash" style, since YAML has no `<!-- -->`
+//     comment syntax) — the managed job block sits between `# GENERATED:em-ci:start` /
+//     `# GENERATED:em-ci:end`, so a repo can add its own jobs above or below the markers, at
+//     the same indent under `jobs:`, and keep them across a future re-run.
+//   - idempotent — re-running with nothing changed leaves both files byte-identical; a file
+//     that already exists without our markers is left alone unless `--force` says to replace
+//     it wholesale (matching `em skill install`: existing-and-no-force is reported, not an
+//     error).
+//   - `--check` for CI self-verification — never writes; reports whether the managed block in
+//     each file still matches what the current preset would generate (missing / no-markers /
+//     stale / ok), CI-ready the same way `em slice index --check` is.
+//
+// The generated files are handed to the repo, not owned by `em` forever: past the initial
+// `em ci init`, edit them freely (see each file's own header comment). `--check` is there for a
+// team that would rather pin the vanilla preset and gate on drift — opt-in, the same posture
+// docs/ci.md already recommends for `em skill check` ("if you'd rather pin ... add `em skill
+// check` as its own gate instead of silently overwriting").
+import { existsSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { applyMarker, markerPair } from "../util/markers.js";
+export const CI_WORKFLOW_MARKER = "em-ci";
+export const CONFORM_WORKFLOW_MARKER = "em-conform";
+const CI_WORKFLOW_RELPATH = join(".github", "workflows", "em-ci.yml");
+const CONFORM_WORKFLOW_RELPATH = join(".github", "workflows", "em-conform.yml");
+export function ciWorkflowPath(repoRoot) {
+    return join(repoRoot, CI_WORKFLOW_RELPATH);
+}
+export function conformWorkflowPath(repoRoot) {
+    return join(repoRoot, CONFORM_WORKFLOW_RELPATH);
+}
+/** Characters that would break out of the double-quoted shell strings the generated workflow
+ *  embeds `model`/`testsDir` into (`"model.em"`, `"test"`) — same validate-the-input-not-the-
+ *  output posture as `em scaffold`'s name check (src/cli.ts). */
+const UNSAFE_ARG_CHARS = /["`$\n]/;
+export function findUnsafeCiInitArg(value) {
+    return UNSAFE_ARG_CHARS.test(value) ? value : null;
+}
+// ---- em-ci.yml (PR gates + push-triggered badge rebuild) ----
+/** The managed block only (no header/`on:`/`jobs:` scaffolding) — what gets written between
+ *  the marker pair, both for a fresh file and to patch an existing marked one in place. */
+export function ciManagedBody(model, testsDir) {
+    return `  validate:
+    name: em validate (changed .em files)
+    if: github.event_name == 'pull_request'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+      - name: Validate changed models
+        run: |
+          set -e
+          base="\${{ github.event.pull_request.base.sha }}"
+          head="\${{ github.event.pull_request.head.sha }}"
+          changed=$(git diff --name-only "$base" "$head" -- '*.em')
+          if [ -z "$changed" ]; then
+            echo "no .em files changed"
+            exit 0
+          fi
+          status=0
+          for f in $changed; do
+            echo "::group::em validate $f"
+            npx @milehimikey/em validate "$f" || status=1
+            npx @milehimikey/em validate "$f" --list-issues
+            echo "::endgroup::"
+          done
+          exit $status
+
+  slice-index:
+    name: "em slice index --check (README table drift)"
+    if: github.event_name == 'pull_request'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+      - name: Check README Slices table is current
+        run: npx @milehimikey/em slice index "${model}" --check
+
+  coverage:
+    name: "em coverage --strict (invariant citations)"
+    if: github.event_name == 'pull_request'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+      - name: Check invariant test coverage
+        run: npx @milehimikey/em coverage "${model}" --tests "${testsDir}" --strict
+
+  ledger:
+    name: em ledger (slice doc version/content agreement)
+    if: github.event_name == 'pull_request'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+      - name: Check slice doc version/content agreement
+        run: npx @milehimikey/em ledger "${model}" --from "\${{ github.event.pull_request.base.sha }}"
+
+  skill-check:
+    name: em skill check (vendored skill drift)
+    if: github.event_name == 'pull_request'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+      - name: Check vendored skill matches installed em
+        run: |
+          if [ -d .claude/skills/event-modeling ]; then
+            npx @milehimikey/em skill check
+          else
+            echo "no vendored skill at .claude/skills/event-modeling — skipping (run \`em skill install\` to opt in)"
+          fi
+
+  glossary:
+    name: "em glossary --fail-on-conflicts (cross-model vocabulary)"
+    if: github.event_name == 'pull_request'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+      - name: Check glossary consistency across models
+        run: npx @milehimikey/em glossary $(git ls-files '*.em') --fail-on-conflicts
+
+  status-badge:
+    name: rebuild status badge (advisory — publish only, never a gate)
+    if: github.event_name == 'push'
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+      - name: Rebuild status badge
+        run: npx @milehimikey/em status "${model}" --tests "${testsDir}" --badge -o status-badge.svg
+      - name: Commit badge if changed
+        run: |
+          if git diff --quiet -- status-badge.svg; then
+            echo "status-badge.svg unchanged"
+            exit 0
+          fi
+          git config user.name "em-ci"
+          git config user.email "em-ci@users.noreply.github.com"
+          git add status-badge.svg
+          git commit -m "em ci: rebuild status badge [skip ci]"
+          git push`;
+}
+function ciWorkflowHeader(model, emVersion) {
+    return `# Generated once by \`em ci init ${model}\` (em ${emVersion}) — docs/ci.md
+#
+# This file is yours from here: edit it, add jobs, remove ones you don't want. The content
+# between the GENERATED:${CI_WORKFLOW_MARKER} markers below is what a future \`em ci init\`
+# (e.g. after upgrading em) refreshes in place — add your own jobs above or below the markers,
+# at the same indent under \`jobs:\`, and they survive a re-run untouched. Every gate here fails
+# the PR the same way any other required check does; the status-badge job only ever publishes.
+# \`em ci init ${model} --check\` reports drift in the managed block — advisory unless you wire
+# it into a gate yourself (docs/ci.md).
+name: em ci
+
+on:
+  pull_request:
+    paths:
+      - "**/*.em"
+      - "**/slices/**"
+      - "**/README.md"
+  push:
+    branches: [main]
+
+jobs:
+`;
+}
+// Marker comment lines sit at column 0, not indented to the 2-space job-key column: YAML
+// comments are whitespace-agnostic (indentation only matters for actual content nodes), and
+// `applyMarker`'s regex only ever recognizes the marker text itself, not any indentation before
+// it on the same line — a fixed indent here would get silently swallowed into the discarded
+// middle capture group on the very first re-patch (was a real bug during development: the
+// closing marker's leading spaces vanished on a second `em ci init` run).
+export function buildCiWorkflowFile(model, testsDir, emVersion) {
+    const { start, end } = markerPair(CI_WORKFLOW_MARKER, "hash");
+    return `${ciWorkflowHeader(model, emVersion)}${start}\n${ciManagedBody(model, testsDir)}\n${end}\n`;
+}
+// ---- em-conform.yml (scheduled, advisory-only conformance cadence) ----
+/** The managed block only (no header/`on:`/`permissions:`/`jobs:` scaffolding) — what gets
+ *  written between the marker pair, both for a fresh file and to patch an existing marked one
+ *  in place. */
+export function conformManagedBody(model) {
+    const modelDir = dirname(model) === "." ? "." : dirname(model);
+    return `  conform:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Note reports already present
+        run: ls "$MODEL_DIR"/conformance/*-report.md 2>/dev/null | sort > /tmp/reports-before
+
+      - name: Run conform phase
+        run: |
+          npm i -g @milehimikey/em@1 @anthropic-ai/claude-code
+          em skill install --force
+          claude -p "/event-modeling conform" \\
+            --allowedTools "Bash(em:*),Bash(git:*),Read,Grep,Glob,Write,Edit"
+        env:
+          ANTHROPIC_API_KEY: \${{ secrets.ANTHROPIC_API_KEY }}
+
+      - name: Post report
+        run: |
+          ls "$MODEL_DIR"/conformance/*-report.md 2>/dev/null | sort > /tmp/reports-after
+          report=$(comm -13 /tmp/reports-before /tmp/reports-after | tail -1)
+          if [ -z "$report" ]; then
+            echo "the run produced no new report — nothing to post"
+            exit 0
+          fi
+          gh issue create --title "Model conformance report $(date +%F)" \\
+            --body-file "$report"
+        env:
+          GH_TOKEN: \${{ secrets.GITHUB_TOKEN }}
+    env:
+      MODEL_DIR: ${modelDir}`;
+}
+function conformWorkflowHeader(model, emVersion) {
+    return `# Generated once by \`em ci init ${model}\` (em ${emVersion}) — docs/ci.md#conformance-cadence-advisory
+#
+# This file is yours from here: edit it freely. It is advisory-only by construction — the job
+# never fails the build on drift (findings become a GitHub issue for a human to ratify), and
+# the state file's \`Last conformance:\` marker only advances when a human ratifies the run's
+# outcome locally and commits that update. Resist wiring this to every push; cadence, not
+# trigger, is the intended shape (docs/ci.md).
+name: model-conformance
+
+on:
+  schedule:
+    - cron: "0 6 * * 1"     # weekly, Monday 06:00 UTC
+  workflow_dispatch: {}     # and on demand
+
+permissions:
+  contents: read
+  issues: write             # the Post report step opens an issue
+
+jobs:
+`;
+}
+export function buildConformWorkflowFile(model, emVersion) {
+    const { start, end } = markerPair(CONFORM_WORKFLOW_MARKER, "hash");
+    return `${conformWorkflowHeader(model, emVersion)}${start}\n${conformManagedBody(model)}\n${end}\n`;
+}
+/**
+ * Decide what to do with one generated file: create it if missing, patch the managed block if
+ * the marker pair is present, or (without `force`) leave an existing unmarked file alone. Pure
+ * — never touches disk; `applyCiFile` below does the actual write.
+ *
+ * `generated` is the full from-scratch file content (header + `on:`/`jobs:` scaffolding +
+ * marker-wrapped body) — written verbatim for `create`/`would-replace`. `managedBody` is just
+ * the text between the markers, reused to patch an existing marked file in place without
+ * touching whatever a repo added around it.
+ */
+export function planCiFile(path, generated, managedBody, markerName, force) {
+    if (!existsSync(path))
+        return { kind: "create", content: generated };
+    const original = readFileSync(path, "utf8");
+    const updated = applyMarker(original, markerName, managedBody, "hash");
+    if (updated === null) {
+        return force ? { kind: "would-replace", content: generated } : { kind: "missing-markers" };
+    }
+    return updated === original ? { kind: "ok", content: original } : { kind: "stale", content: updated, current: original };
+}
+export function applyCiFile(path, status) {
+    if (status.kind === "create" || status.kind === "stale" || status.kind === "would-replace") {
+        writeFileSync(path, status.content, "utf8");
+    }
+}
+//# sourceMappingURL=ciInit.js.map

package/dist/cli/ciInit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ciInit.js","sourceRoot":"","sources":["../../src/cli/ciInit.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,wFAAwF;AACxF,2FAA2F;AAC3F,4FAA4F;AAC5F,yFAAyF;AACzF,2EAA2E;AAC3E,EAAE;AACF,0FAA0F;AAC1F,yFAAyF;AACzF,uFAAuF;AACvF,6FAA6F;AAC7F,2EAA2E;AAC3E,4FAA4F;AAC5F,6FAA6F;AAC7F,2FAA2F;AAC3F,cAAc;AACd,8FAA8F;AAC9F,6FAA6F;AAC7F,sEAAsE;AACtE,EAAE;AACF,0FAA0F;AAC1F,gGAAgG;AAChG,6FAA6F;AAC7F,6FAA6F;AAC7F,4DAA4D;AAE5D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAE7D,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAC1C,MAAM,CAAC,MAAM,uBAAuB,GAAG,YAAY,CAAC;AAEpD,MAAM,mBAAmB,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;AACtE,MAAM,wBAAwB,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;AAEhF,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,OAAO,IAAI,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;AAC7C,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,OAAO,IAAI,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC;AAClD,CAAC;AAED;;iEAEiE;AACjE,MAAM,gBAAgB,GAAG,SAAS,CAAC;AAEnC,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC;AAED,gEAAgE;AAEhE;2FAC2F;AAC3F,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,QAAgB;IAC3D,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gDAwCuC,KAAK;;;;;;;;;;;;6CAYR,KAAK,cAAc,QAAQ;;;;;;;;;;;;;;2CAc7B,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2CA2CL,KAAK,cAAc,QAAQ;;;;;;;;;;;mBAWnD,CAAC;AACpB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAE,SAAiB;IACxD,OAAO,oCAAoC,KAAK,UAAU,SAAS;;;0BAG3C,kBAAkB;;;;iBAI3B,KAAK;;;;;;;;;;;;;;CAcrB,CAAC;AACF,CAAC;AAED,yFAAyF;AACzF,4FAA4F;AAC5F,gGAAgG;AAChG,4FAA4F;AAC5F,0FAA0F;AAC1F,0EAA0E;AAC1E,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,QAAgB,EAAE,SAAiB;IACpF,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IAC9D,OAAO,GAAG,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,GAAG,KAAK,KAAK,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,GAAG,IAAI,CAAC;AACtG,CAAC;AAED,0EAA0E;AAE1E;;gBAEgB;AAChB,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/D,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAiCU,QAAQ,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa,EAAE,SAAiB;IAC7D,OAAO,oCAAoC,KAAK,UAAU,SAAS;;;;;;;;;;;;;;;;;;;CAmBpE,CAAC;AACF,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAa,EAAE,SAAiB;IACvE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;IACnE,OAAO,GAAG,qBAAqB,CAAC,KAAK,EAAE,SAAS,CAAC,GAAG,KAAK,KAAK,kBAAkB,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC;AACtG,CAAC;AAWD;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU,CACxB,IAAY,EACZ,SAAiB,EACjB,WAAmB,EACnB,UAAkB,EAClB,KAAc;IAEd,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAErE,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAEvE,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;IAC7F,CAAC;IACD,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC3H,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,MAAoB;IAC5D,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QAC3F,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC"}

package/dist/cli/conformSupersede.d.ts

@@ -0,0 +1,32 @@
+export type ApplySupersedeResult = {
+    ok: true;
+    content: string;
+    changed: boolean;
+} | {
+    ok: false;
+    message: string;
+};
+/**
+ * Pure text transform: inserts (or, if already present, no-ops on) a `> **Superseded as of
+ * `<revision>`** — findings <findings> since ruled (<on>).` banner line directly under `raw`'s
+ * first line. Refuses when `raw` has no first line to anchor under, or when any input carries
+ * control characters / an unsafe `findings` value that could corrupt the report or smuggle
+ * unintended markdown into it. No fs access — the caller reads/writes; see `runConformSupersede`
+ * below.
+ */
+export declare function applySupersededBanner(raw: string, revision: string, findings: string, on: string): ApplySupersedeResult;
+export type RunConformSupersedeResult = {
+    ok: true;
+    path: string;
+    changed: boolean;
+} | {
+    ok: false;
+    message: string;
+};
+/**
+ * Resolves `reportPath` (relative to `baseDir` — the `.em` file's directory, same convention
+ * every doc/note/report path in `em` uses) and applies the banner. Refuses cleanly when the
+ * report doesn't exist rather than creating one — `em conform-supersede` stamps an existing
+ * report, it never authors one.
+ */
+export declare function runConformSupersede(baseDir: string, reportPath: string, revision: string, findings: string, on: string): RunConformSupersedeResult;

package/dist/cli/conformSupersede.js

@@ -0,0 +1,102 @@
+// SPDX-License-Identifier: MIT
+// `em conform-supersede` (MIL-164): stamps a conformance report with a "this describes an
+// ancestor" banner once its findings have been ruled on (docs/process.md's "Ratifying
+// conformance findings" — stage 7 of workflow.md, the companion step to run alongside/after
+// `em slice ratify` once a report's findings are ruled). A reader following a superseded
+// report's file:line citations needs to know, before trusting them, that the report was
+// written against an older revision — the exact problem a stale-but-uncaptioned report causes
+// (Meridian Goods' 2026-08-23 report citing a file a later ruling renamed: correct as history,
+// misleading as a current view).
+//
+// Write strategy: additive-only text splice, never a parse+re-serialize of the report — same
+// surgical discipline ratify.ts/markImplemented.ts hold for slice-doc frontmatter, applied here
+// to a plain-markdown report instead. The banner is inserted as a blockquote line directly under
+// the report's title (its first line); every byte after that — the metadata bullets, Summary,
+// Findings, everything — is copied through verbatim. Repeated calls (a report ruled on
+// incrementally, across more than one session) accumulate one banner line per call rather than
+// overwriting the last — each stamp names its own revision/findings/date, so the accumulated
+// block reads as a small history of rulings, not a single mutable fact. Calling again with the
+// EXACT same revision/findings/date is a no-op (`changed: false`), same idempotency convention
+// every other `em` write command holds.
+import { existsSync, readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { isValidDateString } from "./stateFile.js";
+const BANNER_PREFIX = "> **Superseded as of `";
+/** Conservative charset for `--findings`: digits, commas, spaces, and either dash style (ASCII
+ *  hyphen or an en/em dash pasted from a report) — enough to write "1-3", "1, 2, 4", or "1–3",
+ *  nothing that could smuggle markdown/HTML into the banner it gets spliced into. */
+const FINDINGS_RE = /^[\d,\s\-–—]+$/;
+const CONTROL_CHARS_RE = /[\x00-\x1f\x7f]/;
+/**
+ * Pure text transform: inserts (or, if already present, no-ops on) a `> **Superseded as of
+ * `<revision>`** — findings <findings> since ruled (<on>).` banner line directly under `raw`'s
+ * first line. Refuses when `raw` has no first line to anchor under, or when any input carries
+ * control characters / an unsafe `findings` value that could corrupt the report or smuggle
+ * unintended markdown into it. No fs access — the caller reads/writes; see `runConformSupersede`
+ * below.
+ */
+export function applySupersededBanner(raw, revision, findings, on) {
+    const trimmedRev = revision.trim();
+    if (!trimmedRev)
+        return { ok: false, message: "a revision is required (--as-of)" };
+    if (CONTROL_CHARS_RE.test(trimmedRev) || trimmedRev.includes("`")) {
+        return { ok: false, message: "revision must not contain control characters or a backtick" };
+    }
+    const trimmedFindings = findings.trim();
+    if (!trimmedFindings)
+        return { ok: false, message: "a findings spec is required (--findings)" };
+    if (!FINDINGS_RE.test(trimmedFindings)) {
+        return {
+            ok: false,
+            message: `--findings "${findings}" must be a plain list/range of numbers (e.g. "1-3" or "1, 2, 4")`,
+        };
+    }
+    if (!isValidDateString(on)) {
+        return { ok: false, message: `invalid date "${on}" — expected YYYY-MM-DD` };
+    }
+    const firstNl = raw.indexOf("\n");
+    if (firstNl === -1) {
+        return { ok: false, message: "report has no title line to anchor the banner after" };
+    }
+    const eol = raw[firstNl - 1] === "\r" ? "\r\n" : "\n";
+    const titleEnd = firstNl - (eol === "\r\n" ? 1 : 0);
+    const titleLine = raw.slice(0, titleEnd);
+    const rest = raw.slice(firstNl + 1);
+    const newLine = `${BANNER_PREFIX}${trimmedRev}\`** — findings ${trimmedFindings} since ruled (${on}). This report describes an ancestor of the current model; verify file:line citations against the current code before relying on them.`;
+    const restLines = rest.split(eol);
+    const bannerLines = [];
+    let i = 0;
+    while (i < restLines.length && restLines[i].startsWith(BANNER_PREFIX)) {
+        bannerLines.push(restLines[i]);
+        i++;
+    }
+    if (bannerLines.includes(newLine)) {
+        return { ok: true, content: raw, changed: false }; // idempotent no-op — exact stamp already recorded
+    }
+    const remainder = restLines.slice(i).join(eol);
+    const newBannerBlock = [...bannerLines, newLine];
+    const content = `${titleLine}${eol}${newBannerBlock.join(eol)}${eol}${remainder}`;
+    return { ok: true, content, changed: true };
+}
+/**
+ * Resolves `reportPath` (relative to `baseDir` — the `.em` file's directory, same convention
+ * every doc/note/report path in `em` uses) and applies the banner. Refuses cleanly when the
+ * report doesn't exist rather than creating one — `em conform-supersede` stamps an existing
+ * report, it never authors one.
+ */
+export function runConformSupersede(baseDir, reportPath, revision, findings, on) {
+    const absPath = join(baseDir, reportPath);
+    if (!existsSync(absPath)) {
+        return { ok: false, message: `no such report: ${reportPath}` };
+    }
+    const raw = readFileSync(absPath, "utf8");
+    const result = applySupersededBanner(raw, revision, findings, on);
+    if (!result.ok) {
+        return { ok: false, message: `${reportPath}: ${result.message}` };
+    }
+    if (result.changed) {
+        writeFileSync(absPath, result.content, "utf8");
+    }
+    return { ok: true, path: reportPath, changed: result.changed };
+}
+//# sourceMappingURL=conformSupersede.js.map

package/dist/cli/conformSupersede.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conformSupersede.js","sourceRoot":"","sources":["../../src/cli/conformSupersede.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,0FAA0F;AAC1F,sFAAsF;AACtF,4FAA4F;AAC5F,yFAAyF;AACzF,wFAAwF;AACxF,8FAA8F;AAC9F,+FAA+F;AAC/F,iCAAiC;AACjC,EAAE;AACF,6FAA6F;AAC7F,gGAAgG;AAChG,iGAAiG;AACjG,8FAA8F;AAC9F,uFAAuF;AACvF,+FAA+F;AAC/F,6FAA6F;AAC7F,+FAA+F;AAC/F,+FAA+F;AAC/F,wCAAwC;AAExC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEnD,MAAM,aAAa,GAAG,wBAAwB,CAAC;AAE/C;;qFAEqF;AACrF,MAAM,WAAW,GAAG,gBAAgB,CAAC;AACrC,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAI3C;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAW,EAAE,QAAgB,EAAE,QAAgB,EAAE,EAAU;IAC/F,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;IACnF,IAAI,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,4DAA4D,EAAE,CAAC;IAC9F,CAAC;IACD,MAAM,eAAe,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IACxC,IAAI,CAAC,eAAe;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;IAChG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;QACvC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,eAAe,QAAQ,mEAAmE;SACpG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,CAAC;IAC9E,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC;IACvF,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;IAEpC,MAAM,OAAO,GAAG,GAAG,aAAa,GAAG,UAAU,mBAAmB,eAAe,iBAAiB,EAAE,wIAAwI,CAAC;IAE3O,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACtE,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC,EAAE,CAAC;IACN,CAAC;IACD,IAAI,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,kDAAkD;IACvG,CAAC;IACD,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,cAAc,GAAG,CAAC,GAAG,WAAW,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,GAAG,SAAS,GAAG,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,SAAS,EAAE,CAAC;IAClF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC9C,CAAC;AAID;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,UAAkB,EAAE,QAAgB,EAAE,QAAgB,EAAE,EAAU;IACrH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,UAAU,EAAE,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,UAAU,KAAK,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;AACjE,CAAC"}

package/dist/cli/coverage.d.ts

@@ -13,7 +13,12 @@ export declare const INV_TOKEN_RE: RegExp;
  * citing another slice's ID elsewhere (Dependencies, Open Questions, ...) doesn't cross-credit
  * that ID as this slice's own (MIL-149) — the section ends at the next `#`/`##` heading or EOF,
  * same boundary rule sliceDoc.ts's countOpenQuestions() uses, so a `### Added`/`#### Requirement`
- * subheading under `## Delta` stays in scope while a sibling `## Scenarios` does not.
+ * subheading under `## Delta` stays in scope while a sibling `## Scenarios` does not. Within that
+ * scope, only `STRUCTURAL_LINE_RE`'s bullet/subheading lines contribute — MIL-155 — so a wrapped
+ * continuation line that legitimately *cites* a sibling slice's ID while explaining this doc's own
+ * (e.g. an Invariants bullet's exactly-once rule wrapping onto a line naming another slice's
+ * queue-draining ID) doesn't cross-credit that citation just because it sits inside the ownership
+ * section too.
  */
 export declare function extractInvariantIds(body: string): string[];
 export interface Citation {

package/dist/cli/coverage.js

@@ -5,7 +5,9 @@
 // (the doc's `INV-*` tokens, a test file's source text), so the citation check is deterministic
 // and grep-shaped: extract every invariant ID a slice doc's own Invariants/Delta sections define
 // (MIL-149: not every ID its prose merely mentions — a doc narratively citing another slice's ID
-// doesn't own it), then scan a test tree for lines that cite it.
+// doesn't own it; MIL-155: including a citation embedded inside those very sections, e.g. an
+// Invariants bullet's explanation pointing at a sibling slice's ID), then scan a test tree for
+// lines that cite it.
 //
 // Deliberately a *second*, independent reader of doc bodies, alongside `em export`'s doc join
 // (docJoin.ts, MIL-91) — not a change to it. `em export`'s frontmatter-only contract is
@@ -42,6 +44,24 @@ export const INV_TOKEN_RE = /\bINV-[A-Za-z0-9]+(?:-[A-Za-z0-9]+)*\b/g;
  *  narratively *cite* another slice's ID without this doc owning it (MIL-149: such a mention was
  *  being cross-credited to the citing slice's own coverage ledger). */
 const OWNERSHIP_HEADING_RE = /^##\s+(?:Invariants(?:\s*\/\s*Business Rules)?|Delta)\s*$/i;
+/** A line contributes INV tokens only when it's *structural* — a top-level bullet/list item
+ *  (`- ...` / `* ...`, no leading indentation) or a subheading (`### ...` and deeper, since only
+ *  `#`/`##` toggles `inOwnershipSection` above) — never an indented continuation line wrapping a
+ *  multi-line bullet, nor a standalone prose paragraph with no bullet marker (MIL-155). Every
+ *  cross-credit MIL-149 missed turned out to have exactly this shape: a slice's own Invariants
+ *  bullet legitimately explains its rule across several wrapped lines, and a later wrapped line
+ *  names a sibling slice's ID for context — e.g. `request-payment`'s `INV-RP-1` bullet wraps onto
+ *  a line citing `payments-to-request`'s `INV-PTR-2` by way of explaining the exactly-once
+ *  mechanism. The bullet's own *opening* line is structural and trusted for every ID it mentions
+ *  (this also covers `## Delta`'s Renamed bullets, which legitimately declare two IDs — old and
+ *  new — on one line, and its `**MODIFIED (...):** INV-X — ...` bullets, whose bold label isn't
+ *  itself an ID); each wrapped continuation line is prose and contributes nothing. The indentation
+ *  test also covers MIL-156's blessed nested-elaboration-bullet shape: `templates/slice.md`'s
+ *  Invariants section now suggests a rule statement's optional rationale/edge-case detail go on
+ *  its own indented sub-bullet (`  - {{...}}`) rather than run on into the rule sentence, purely
+ *  for HTML-render readability — that sub-bullet is indented, so it's already excluded here the
+ *  same as any other continuation line, and never contributes (or steals) an ID. */
+const STRUCTURAL_LINE_RE = /^(?:[-*]\s|#{3,6}\s)/;
 /** Statuses `reference/implement.md`'s coverage gate applies to — a slice hasn't reached the
  *  point of needing test citations before `ready-to-implement`, and stays in scope forever after
  *  once `implemented` (tests shouldn't regress away from citing an invariant just because the
@@ -55,7 +75,12 @@ const IN_SCOPE_STATUSES = new Set(["ready-to-implement", "implemented"]);
  * citing another slice's ID elsewhere (Dependencies, Open Questions, ...) doesn't cross-credit
  * that ID as this slice's own (MIL-149) — the section ends at the next `#`/`##` heading or EOF,
  * same boundary rule sliceDoc.ts's countOpenQuestions() uses, so a `### Added`/`#### Requirement`
- * subheading under `## Delta` stays in scope while a sibling `## Scenarios` does not.
+ * subheading under `## Delta` stays in scope while a sibling `## Scenarios` does not. Within that
+ * scope, only `STRUCTURAL_LINE_RE`'s bullet/subheading lines contribute — MIL-155 — so a wrapped
+ * continuation line that legitimately *cites* a sibling slice's ID while explaining this doc's own
+ * (e.g. an Invariants bullet's exactly-once rule wrapping onto a line naming another slice's
+ * queue-draining ID) doesn't cross-credit that citation just because it sits inside the ownership
+ * section too.
  */
 export function extractInvariantIds(body) {
     const seen = new Set();
@@ -66,7 +91,7 @@ export function extractInvariantIds(body) {
             inOwnershipSection = OWNERSHIP_HEADING_RE.test(line);
             continue;
         }
-        if (!inOwnershipSection)
+        if (!inOwnershipSection || !STRUCTURAL_LINE_RE.test(line))
             continue;
         for (const m of line.matchAll(INV_TOKEN_RE)) {
             if (!seen.has(m[0])) {

package/dist/cli/coverage.js.map

@@ -1 +1 @@
-{"version":3,"file":"coverage.js","sourceRoot":"","sources":["../../src/cli/coverage.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,8FAA8F;AAC9F,iGAAiG;AACjG,6FAA6F;AAC7F,gGAAgG;AAChG,iGAAiG;AACjG,iGAAiG;AACjG,iEAAiE;AACjE,EAAE;AACF,8FAA8F;AAC9F,wFAAwF;AACxF,+FAA+F;AAC/F,+FAA+F;AAC/F,+FAA+F;AAC/F,wFAAwF;AACxF,EAAE;AACF,oGAAoG;AACpG,6FAA6F;AAC7F,kGAAkG;AAClG,uFAAuF;AACvF,+FAA+F;AAC/F,+FAA+F;AAC/F,8FAA8F;AAC9F,kGAAkG;AAClG,iGAAiG;AACjG,qFAAqF;AAErF,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAE7C;;;wCAGwC;AACxC,MAAM,CAAC,MAAM,YAAY,GAAG,yCAAyC,CAAC;AAEtE;;;;;;uEAMuE;AACvE,MAAM,oBAAoB,GAAG,4DAA4D,CAAC;AAE1F;;;6FAG6F;AAC7F,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,oBAAoB,EAAE,aAAa,CAAC,CAAC,CAAC;AAEzE;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,kBAAkB,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,kBAAkB;YAAE,SAAS;QAClC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACf,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAUD,iFAAiF;AACjF,6FAA6F;AAC7F,2FAA2F;AAC3F,oFAAoF;AACpF,0FAA0F;AAC1F,sFAAsF;AACtF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;AAE5D;;uEAEuE;AACvE,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IAChC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,GAAsB;IACxE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAqB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACzE,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,MAAM,UAAU,GAA4B,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAE7F,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACxF,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,8EAA8E;QAC1F,CAAC;QACD,IAAI,cAAc,CAAC,GAAG,CAAC;YAAE,SAAS;QAElC,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,KAAK,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC;gBAClC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAiCD;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAsB,EACtB,IAAgB,EAChB,OAAe,EACf,QAAgB;IAEhB,MAAM,MAAM,GACV,EAAE,CAAC;IACL,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAEjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,EAAE,GAAG,EAAE,GAAG,mBAAmB,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,CAAC;QACxF,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEhG,IAAI,GAAG,GAAa,EAAE,CAAC;QACvB,IAAI,OAAO,EAAE,CAAC;YACZ,yFAAyF;YACzF,wFAAwF;YACxF,+DAA+D;YAC/D,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACxE,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC/C,IAAI,MAAM;gBAAE,GAAG,GAAG,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9E,KAAK,MAAM,EAAE,IAAI,GAAG;YAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;IAE3D,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,MAAM,MAAM,GAAoB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE;QACtF,MAAM,UAAU,GAAwB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;YACrD,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;YACnC,eAAe,EAAE,CAAC;YAClB,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;gBAAE,cAAc,EAAE,CAAC;YACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QACrD,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC;AACrD,CAAC"}
+{"version":3,"file":"coverage.js","sourceRoot":"","sources":["../../src/cli/coverage.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,8FAA8F;AAC9F,iGAAiG;AACjG,6FAA6F;AAC7F,gGAAgG;AAChG,iGAAiG;AACjG,iGAAiG;AACjG,6FAA6F;AAC7F,+FAA+F;AAC/F,sBAAsB;AACtB,EAAE;AACF,8FAA8F;AAC9F,wFAAwF;AACxF,+FAA+F;AAC/F,+FAA+F;AAC/F,+FAA+F;AAC/F,wFAAwF;AACxF,EAAE;AACF,oGAAoG;AACpG,6FAA6F;AAC7F,kGAAkG;AAClG,uFAAuF;AACvF,+FAA+F;AAC/F,+FAA+F;AAC/F,8FAA8F;AAC9F,kGAAkG;AAClG,iGAAiG;AACjG,qFAAqF;AAErF,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAE7C;;;wCAGwC;AACxC,MAAM,CAAC,MAAM,YAAY,GAAG,yCAAyC,CAAC;AAEtE;;;;;;uEAMuE;AACvE,MAAM,oBAAoB,GAAG,4DAA4D,CAAC;AAE1F;;;;;;;;;;;;;;;;oFAgBoF;AACpF,MAAM,kBAAkB,GAAG,sBAAsB,CAAC;AAElD;;;6FAG6F;AAC7F,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,oBAAoB,EAAE,aAAa,CAAC,CAAC,CAAC;AAEzE;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,kBAAkB,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,kBAAkB,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACpE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACf,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAUD,iFAAiF;AACjF,6FAA6F;AAC7F,2FAA2F;AAC3F,oFAAoF;AACpF,0FAA0F;AAC1F,sFAAsF;AACtF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;AAE5D;;uEAEuE;AACvE,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IAChC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,GAAsB;IACxE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAqB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACzE,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,MAAM,UAAU,GAA4B,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAE7F,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACxF,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,8EAA8E;QAC1F,CAAC;QACD,IAAI,cAAc,CAAC,GAAG,CAAC;YAAE,SAAS;QAElC,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,KAAK,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC;gBAClC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAiCD;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAsB,EACtB,IAAgB,EAChB,OAAe,EACf,QAAgB;IAEhB,MAAM,MAAM,GACV,EAAE,CAAC;IACL,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAEjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,EAAE,GAAG,EAAE,GAAG,mBAAmB,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,CAAC;QACxF,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEhG,IAAI,GAAG,GAAa,EAAE,CAAC;QACvB,IAAI,OAAO,EAAE,CAAC;YACZ,yFAAyF;YACzF,wFAAwF;YACxF,+DAA+D;YAC/D,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACxE,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC/C,IAAI,MAAM;gBAAE,GAAG,GAAG,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9E,KAAK,MAAM,EAAE,IAAI,GAAG;YAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;IAE3D,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,MAAM,MAAM,GAAoB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE;QACtF,MAAM,UAAU,GAAwB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;YACrD,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;YACnC,eAAe,EAAE,CAAC;YAClB,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;gBAAE,cAAc,EAAE,CAAC;YACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QACrD,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC;AACrD,CAAC"}

package/dist/cli/frontmatterSurgery.d.ts

@@ -0,0 +1,28 @@
+/** A field line's matched span within a frontmatter `inner` string: `key[:]<ws>` prefix
+ *  (preserved verbatim on write) plus the value text that follows, lowercase-key-matched the
+ *  same way sliceDoc.ts's own parser folds keys for lookup. Column-0 only — same grammar as
+ *  sliceDoc.ts's `^([A-Za-z][\w-]*):\s*(.*)$`, so this never matches an indented/list-style line
+ *  the parser wouldn't treat as a field either. */
+export declare function fieldLineRegex(key: string): RegExp;
+/** Strip a value the same way sliceDoc.ts's splitFrontmatter does when reading (surrounding
+ *  quotes, then blank-after-trim collapses to "absent") — used here only to classify a *current*
+ *  field value for an idempotent/refusal guard, matching what the parser would have reported for
+ *  the same text. */
+export declare function normalizeFieldValue(raw: string | undefined): string | null;
+/** Same anchor as `fieldLineRegex`, but captures through the line's own trailing EOL (or
+ *  end-of-string, for a field that happens to be the frontmatter's last line) so a match can be
+ *  spliced out ENTIRELY — key, value, and terminator — rather than just replaced. Used by
+ *  `em slice reratify` (reratify.ts) to drop a now-stale `ratifiedBy:`/`ratifiedOn:` pair: those
+ *  fields describe who signed off the PRIOR version, and silently leaving them in place would
+ *  make a fresh version look already ratified. */
+export declare function fieldLineWithEolRegex(key: string): RegExp;
+/** Byte offsets of the frontmatter block's inner lines (between the two `---` fences), located
+ *  by walking lines with `indexOf` rather than `split(/\r?\n/)` — a rewrite can't afford the
+ *  line-ending normalization a split/join would silently perform across the WHOLE file the
+ *  moment it's written back (fine for a read-only parse, not for a surgical rewrite that must
+ *  preserve the body byte-for-byte). `null` when there's no well-formed leading `---`/`---`
+ *  fence, mirroring sliceDoc.ts's own "unterminated fence = no frontmatter" treatment. */
+export declare function locateFrontmatterInner(markdown: string): {
+    innerStart: number;
+    innerEnd: number;
+} | null;

package/dist/cli/frontmatterSurgery.js

@@ -0,0 +1,66 @@
+// SPDX-License-Identifier: MIT
+// Shared primitives for surgical in-place slice-doc frontmatter edits — extracted from
+// `markImplemented.ts` (MIL-103) when `ratify.ts` (MIL-165) needed the exact same "find one
+// field line's byte span, replace only that span, copy everything else through verbatim"
+// discipline. Both commands share the same non-negotiable contract: a parse+re-serialize
+// through sliceDoc.ts's own (deliberately read-only) parser would silently drop comments, key
+// order, spacing, and every field the command isn't allowed to touch — see markImplemented.ts's
+// module header for the full rationale, which applies unchanged here.
+//
+// Pure, fs-free — callers own reading/writing the file, same split as everywhere else in `em`.
+/** A field line's matched span within a frontmatter `inner` string: `key[:]<ws>` prefix
+ *  (preserved verbatim on write) plus the value text that follows, lowercase-key-matched the
+ *  same way sliceDoc.ts's own parser folds keys for lookup. Column-0 only — same grammar as
+ *  sliceDoc.ts's `^([A-Za-z][\w-]*):\s*(.*)$`, so this never matches an indented/list-style line
+ *  the parser wouldn't treat as a field either. */
+export function fieldLineRegex(key) {
+    // `[^\r\n]*` (not a lazy `.*?` + `\r?$`) deliberately -- JS regex `$`/multiline line-terminator
+    // semantics treat a lone `\r` as its own line boundary, which makes a trailing-`\r?$` anchor
+    // ambiguous on CRLF input. Excluding \r/\n from the value class sidesteps that entirely: the
+    // match always stops at the first \r or \n, full stop, no boundary-matching subtlety involved.
+    return new RegExp(`^(${key}[ \\t]*:[ \\t]*)([^\\r\\n]*)`, "im");
+}
+/** Strip a value the same way sliceDoc.ts's splitFrontmatter does when reading (surrounding
+ *  quotes, then blank-after-trim collapses to "absent") — used here only to classify a *current*
+ *  field value for an idempotent/refusal guard, matching what the parser would have reported for
+ *  the same text. */
+export function normalizeFieldValue(raw) {
+    if (raw === undefined)
+        return null;
+    const v = raw.trim().replace(/^["']|["']$/g, "");
+    return v === "" ? null : v;
+}
+/** Same anchor as `fieldLineRegex`, but captures through the line's own trailing EOL (or
+ *  end-of-string, for a field that happens to be the frontmatter's last line) so a match can be
+ *  spliced out ENTIRELY — key, value, and terminator — rather than just replaced. Used by
+ *  `em slice reratify` (reratify.ts) to drop a now-stale `ratifiedBy:`/`ratifiedOn:` pair: those
+ *  fields describe who signed off the PRIOR version, and silently leaving them in place would
+ *  make a fresh version look already ratified. */
+export function fieldLineWithEolRegex(key) {
+    return new RegExp(`^${key}[ \\t]*:[ \\t]*[^\\r\\n]*\\r?\\n?`, "im");
+}
+/** Byte offsets of the frontmatter block's inner lines (between the two `---` fences), located
+ *  by walking lines with `indexOf` rather than `split(/\r?\n/)` — a rewrite can't afford the
+ *  line-ending normalization a split/join would silently perform across the WHOLE file the
+ *  moment it's written back (fine for a read-only parse, not for a surgical rewrite that must
+ *  preserve the body byte-for-byte). `null` when there's no well-formed leading `---`/`---`
+ *  fence, mirroring sliceDoc.ts's own "unterminated fence = no frontmatter" treatment. */
+export function locateFrontmatterInner(markdown) {
+    if (!/^---[ \t]*\r?\n/.test(markdown))
+        return null;
+    const innerStart = markdown.indexOf("\n") + 1;
+    let pos = innerStart;
+    while (pos <= markdown.length) {
+        const nl = markdown.indexOf("\n", pos);
+        const lineEnd = nl === -1 ? markdown.length : nl;
+        const line = markdown.slice(pos, lineEnd);
+        if (/^---[ \t]*\r?$/.test(line)) {
+            return { innerStart, innerEnd: pos };
+        }
+        if (nl === -1)
+            break;
+        pos = nl + 1;
+    }
+    return null;
+}
+//# sourceMappingURL=frontmatterSurgery.js.map