@milehimikey/em 1.9.1 → 1.11.0

package/dist/system/manifest.js

@@ -0,0 +1,178 @@
+// SPDX-License-Identifier: MIT
+// Parses a seam manifest (`system.yaml`, MIL-194) into a plain, validated shape — the declared
+// list of models in a system plus the seams binding one model's `public` event/view to another
+// model's reaction. This is the one place the manifest's own schema is enforced; everything
+// downstream (src/system/verify.ts) trusts the returned `SystemManifest`.
+//
+// YAML because the manifest is human-authored (and JSON is a YAML subset, so a `.json` manifest
+// parses here unchanged). Pure: text in, manifest + diagnostics out — the caller (src/cli/
+// systemInputs.ts) owns reading the file and resolving each model's `source` path, so this
+// module never touches the filesystem. Line numbers come from the YAML parser's own
+// `LineCounter`, so a shape error points at the offending entry, not just "the manifest".
+import { LineCounter, parseDocument, isMap, isSeq, isScalar } from "yaml";
+import { pushDiag } from "../model/rules.js";
+/** The only manifest schema version accepted (`systemSchemaVersion`). Bumped, with a range
+ *  check here, the day the manifest's shape changes incompatibly. */
+export const SYSTEM_MANIFEST_SCHEMA_VERSION = "1.0";
+const TOP_KEYS = new Set(["systemSchemaVersion", "name", "models", "seams"]);
+const MODEL_KEYS = new Set(["source", "owner"]);
+const SEAM_KEYS = new Set(["from", "to", "description"]);
+/** Parse and shape-check manifest text. Every problem is a `system-manifest-invalid` error
+ *  diagnostic (never a throw), and `ok: false` means the manifest can't be used at all — the
+ *  caller refuses rather than verifying a partial system. Unknown keys are errors, not ignored:
+ *  a misspelled `seam:` silently declaring zero seams would defeat the whole check. */
+export function parseManifest(text) {
+    const diagnostics = [];
+    const lineCounter = new LineCounter();
+    const doc = parseDocument(text, { lineCounter, prettyErrors: false });
+    const lineOf = (node) => {
+        const range = node && "range" in node ? node.range : isPairLike(node) ? node.key?.range : undefined;
+        return range ? lineCounter.linePos(range[0]).line : undefined;
+    };
+    const invalid = (message, line) => pushDiag(diagnostics, "system-manifest-invalid", { message, line });
+    if (doc.errors.length > 0) {
+        for (const e of doc.errors) {
+            const line = e.linePos?.[0]?.line;
+            invalid(`YAML parse error: ${e.message.trim()}`, line);
+        }
+        return { ok: false, diagnostics };
+    }
+    const root = doc.contents;
+    if (!isMap(root)) {
+        invalid("manifest must be a YAML mapping with `systemSchemaVersion`, `models`, and optionally `name`/`seams`");
+        return { ok: false, diagnostics };
+    }
+    for (const pair of root.items) {
+        const key = scalarString(pair.key);
+        if (key === undefined || !TOP_KEYS.has(key)) {
+            invalid(`unknown top-level key ${describeKey(pair.key)} — expected one of: ${[...TOP_KEYS].join(", ")}`, lineOf(pair));
+        }
+    }
+    // systemSchemaVersion — required, and exactly the one version this em understands.
+    const versionNode = root.get("systemSchemaVersion", true);
+    const version = scalarString(versionNode);
+    if (version === undefined) {
+        invalid(`missing or non-string \`systemSchemaVersion\` — set \`systemSchemaVersion: "${SYSTEM_MANIFEST_SCHEMA_VERSION}"\``, lineOf(versionNode));
+    }
+    else if (version !== SYSTEM_MANIFEST_SCHEMA_VERSION) {
+        invalid(`unsupported systemSchemaVersion "${version}" — this em accepts "${SYSTEM_MANIFEST_SCHEMA_VERSION}"`, lineOf(versionNode));
+    }
+    // name — optional string.
+    const nameNode = root.get("name", true);
+    let name = null;
+    if (nameNode !== undefined) {
+        const n = scalarString(nameNode);
+        if (n === undefined)
+            invalid("`name` must be a string", lineOf(nameNode));
+        else
+            name = n;
+    }
+    // models — required mapping, ≥ 1 entry, each `{ source, owner? }`.
+    const models = [];
+    const modelsNode = root.get("models", true);
+    if (!isMap(modelsNode)) {
+        invalid("`models` must be a mapping of model key -> { source, owner? } with at least one entry", lineOf(modelsNode ?? root));
+    }
+    else if (modelsNode.items.length === 0) {
+        invalid("`models` must declare at least one model", lineOf(modelsNode));
+    }
+    else {
+        for (const pair of modelsNode.items) {
+            const key = scalarString(pair.key);
+            const line = lineOf(pair) ?? lineOf(modelsNode);
+            if (key === undefined || key.trim() === "") {
+                invalid(`model key ${describeKey(pair.key)} must be a non-empty string`, line);
+                continue;
+            }
+            const entry = pair.value;
+            if (!isMap(entry)) {
+                invalid(`model "${key}" must be a mapping with a \`source\` (a .em file or an \`em export --json\` document)`, line);
+                continue;
+            }
+            for (const p of entry.items) {
+                const k = scalarString(p.key);
+                if (k === undefined || !MODEL_KEYS.has(k))
+                    invalid(`model "${key}": unknown key ${describeKey(p.key)} — expected source, owner`, lineOf(p));
+            }
+            const source = scalarString(entry.get("source", true));
+            if (source === undefined || source.trim() === "") {
+                invalid(`model "${key}": \`source\` must be a non-empty path string`, line);
+                continue;
+            }
+            const ownerNode = entry.get("owner", true);
+            let owner = null;
+            if (ownerNode !== undefined) {
+                const o = scalarString(ownerNode);
+                if (o === undefined)
+                    invalid(`model "${key}": \`owner\` must be a string`, lineOf(ownerNode));
+                else
+                    owner = o;
+            }
+            models.push({ key, source, owner, line: line ?? 1 });
+        }
+    }
+    // seams — optional sequence of `{ from, to, description? }`.
+    const seams = [];
+    const seamsNode = root.get("seams", true);
+    if (seamsNode !== undefined && !(isScalar(seamsNode) && seamsNode.value === null)) {
+        if (!isSeq(seamsNode)) {
+            invalid("`seams` must be a list of { from, to, description? } entries", lineOf(seamsNode));
+        }
+        else {
+            seamsNode.items.forEach((item, i) => {
+                const line = lineOf(item) ?? lineOf(seamsNode);
+                if (!isMap(item)) {
+                    invalid(`seams[${i}] must be a mapping with \`from\` and \`to\``, line);
+                    return;
+                }
+                for (const p of item.items) {
+                    const k = scalarString(p.key);
+                    if (k === undefined || !SEAM_KEYS.has(k))
+                        invalid(`seams[${i}]: unknown key ${describeKey(p.key)} — expected from, to, description`, lineOf(p));
+                }
+                const from = scalarString(item.get("from", true));
+                const to = scalarString(item.get("to", true));
+                if (from === undefined || from.trim() === "")
+                    invalid(`seams[${i}]: \`from\` must be a qualified ref string (<modelKey>:<sliceKey>/<kind>.<slug>)`, line);
+                if (to === undefined || to.trim() === "")
+                    invalid(`seams[${i}]: \`to\` must be a qualified ref string (<modelKey>:<sliceKey>/<kind>.<slug>, or <modelKey>:<sliceKey>)`, line);
+                const descNode = item.get("description", true);
+                let description = null;
+                if (descNode !== undefined && !(isScalar(descNode) && descNode.value === null)) {
+                    const d = scalarString(descNode);
+                    if (d === undefined)
+                        invalid(`seams[${i}]: \`description\` must be a string`, lineOf(descNode));
+                    else
+                        description = d;
+                }
+                if (from !== undefined && from.trim() !== "" && to !== undefined && to.trim() !== "") {
+                    seams.push({ from: from.trim(), to: to.trim(), description, line: line ?? 1 });
+                }
+            });
+        }
+    }
+    if (diagnostics.length > 0)
+        return { ok: false, diagnostics };
+    return {
+        ok: true,
+        manifest: { systemSchemaVersion: version, name, models, seams },
+        diagnostics,
+    };
+}
+function isPairLike(node) {
+    return typeof node === "object" && node !== null && "key" in node && "value" in node && !("range" in node);
+}
+/** A scalar node's value as a string — `undefined` for a missing node, a non-scalar, or a
+ *  non-string scalar (numbers/booleans/null are never accepted where a string is required, so
+ *  `systemSchemaVersion: 1.0` — a YAML float — is rejected, not silently coerced). */
+function scalarString(node) {
+    if (!isScalar(node))
+        return undefined;
+    return typeof node.value === "string" ? node.value : undefined;
+}
+function describeKey(node) {
+    if (isScalar(node))
+        return `"${String(node.value)}"`;
+    return "(non-scalar key)";
+}
+//# sourceMappingURL=manifest.js.map

package/dist/system/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/system/manifest.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,+FAA+F;AAC/F,+FAA+F;AAC/F,4FAA4F;AAC5F,0EAA0E;AAC1E,EAAE;AACF,gGAAgG;AAChG,2FAA2F;AAC3F,2FAA2F;AAC3F,oFAAoF;AACpF,0FAA0F;AAE1F,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAc,MAAM,MAAM,CAAC;AAEtF,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C;qEACqE;AACrE,MAAM,CAAC,MAAM,8BAA8B,GAAG,KAAK,CAAC;AAqCpD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,qBAAqB,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AAC7E,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AAChD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;AAEzD;;;uFAGuF;AACvF,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,WAAW,GAAiB,EAAE,CAAC;IACrC,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;IACtC,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,CAAC,IAAoC,EAAsB,EAAE;QAC1E,MAAM,KAAK,GAAG,IAAI,IAAI,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,GAAmB,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QACrH,OAAO,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,IAAa,EAAE,EAAE,CACjD,QAAQ,CAAC,WAAW,EAAE,yBAAyB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAEtE,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;YAClC,OAAO,CAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IACpC,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC1B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACjB,OAAO,CAAC,qGAAqG,CAAC,CAAC;QAC/G,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IACpC,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5C,OAAO,CAAC,yBAAyB,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,uBAAuB,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACzH,CAAC;IACH,CAAC;IAED,mFAAmF;IACnF,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAqB,CAAC;IAC9E,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IAC1C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,CAAC,+EAA+E,8BAA8B,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;IACnJ,CAAC;SAAM,IAAI,OAAO,KAAK,8BAA8B,EAAE,CAAC;QACtD,OAAO,CAAC,oCAAoC,OAAO,wBAAwB,8BAA8B,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;IACrI,CAAC;IAED,0BAA0B;IAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAqB,CAAC;IAC5D,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,yBAAyB,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;;YACrE,IAAI,GAAG,CAAC,CAAC;IAChB,CAAC;IAED,mEAAmE;IACnE,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAqB,CAAC;IAChE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,uFAAuF,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC;IAC/H,CAAC;SAAM,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO,CAAC,0CAA0C,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1E,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC;YAChD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBAC3C,OAAO,CAAC,aAAa,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,6BAA6B,EAAE,IAAI,CAAC,CAAC;gBAC/E,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAoB,CAAC;YACxC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClB,OAAO,CAAC,UAAU,GAAG,wFAAwF,EAAE,IAAI,CAAC,CAAC;gBACrH,SAAS;YACX,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC5B,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC9B,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;oBAAE,OAAO,CAAC,UAAU,GAAG,kBAAkB,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,2BAA2B,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9I,CAAC;YACD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAqB,CAAC,CAAC;YAC3E,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBACjD,OAAO,CAAC,UAAU,GAAG,+CAA+C,EAAE,IAAI,CAAC,CAAC;gBAC5E,SAAS;YACX,CAAC;YACD,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAqB,CAAC;YAC/D,IAAI,KAAK,GAAkB,IAAI,CAAC;YAChC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,CAAC,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;gBAClC,IAAI,CAAC,KAAK,SAAS;oBAAE,OAAO,CAAC,UAAU,GAAG,+BAA+B,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;;oBACzF,KAAK,GAAG,CAAC,CAAC;YACjB,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAqB,CAAC;IAC9D,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,KAAK,KAAK,IAAI,CAAC,EAAE,CAAC;QAClF,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,8DAA8D,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7F,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;gBAClC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAY,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC;gBACvD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjB,OAAO,CAAC,SAAS,CAAC,8CAA8C,EAAE,IAAI,CAAC,CAAC;oBACxE,OAAO;gBACT,CAAC;gBACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBAC3B,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;oBAC9B,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;wBAAE,OAAO,CAAC,SAAS,CAAC,kBAAkB,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,mCAAmC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;gBAClJ,CAAC;gBACD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAqB,CAAC,CAAC;gBACtE,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAqB,CAAC,CAAC;gBAClE,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;oBAAE,OAAO,CAAC,SAAS,CAAC,kFAAkF,EAAE,IAAI,CAAC,CAAC;gBAC1J,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE;oBAAE,OAAO,CAAC,SAAS,CAAC,0GAA0G,EAAE,IAAI,CAAC,CAAC;gBAC9K,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAqB,CAAC;gBACnE,IAAI,WAAW,GAAkB,IAAI,CAAC;gBACtC,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,KAAK,KAAK,IAAI,CAAC,EAAE,CAAC;oBAC/E,MAAM,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;oBACjC,IAAI,CAAC,KAAK,SAAS;wBAAE,OAAO,CAAC,SAAS,CAAC,qCAAqC,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;;wBAC3F,WAAW,GAAG,CAAC,CAAC;gBACvB,CAAC;gBACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;oBACrF,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;gBACjF,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAC9D,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE,EAAE,mBAAmB,EAAE,OAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE;QAChE,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAa;IAC/B,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,IAAI,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC;AAC7G,CAAC;AAED;;sFAEsF;AACtF,SAAS,YAAY,CAAC,IAAa;IACjC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACtC,OAAO,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED,SAAS,WAAW,CAAC,IAAa;IAChC,IAAI,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;IACrD,OAAO,kBAAkB,CAAC;AAC5B,CAAC"}

package/dist/system/verify.d.ts

@@ -0,0 +1,88 @@
+import { ElementKind } from "../parser/ast.js";
+import type { Diagnostic } from "../model/validate.js";
+import type { SystemManifest } from "./manifest.js";
+/** The subset of one `em export --json` document `verifySystem` reads. */
+export interface SystemExportElement {
+    ref: string;
+    kind: ElementKind;
+    name: string;
+    line: number;
+    public: boolean;
+}
+export interface SystemExportSlice {
+    key: string;
+    name: string;
+    elements: SystemExportElement[];
+}
+export interface SystemExportDoc {
+    schemaVersion: string;
+    model: {
+        key: string;
+        name: string | null;
+        slices: SystemExportSlice[];
+        edges: {
+            from: string;
+            to: string;
+        }[];
+    };
+}
+export type SystemSourceKind = "em" | "export";
+/** One model, loaded by the caller: the manifest's entry plus its export document and the
+ *  path diagnostics about it should point at (the `.em` file, or the export `.json`). */
+export interface SystemModelInput {
+    key: string;
+    source: string;
+    sourceKind: SystemSourceKind;
+    owner: string | null;
+    /** Path diagnostics about this model's elements point at — resolved, as the CLI prints it. */
+    file: string;
+    doc: SystemExportDoc;
+}
+/** A diagnostic plus the file it concerns — `em status --json`'s multi-model convention. */
+export interface SystemDiagnostic extends Diagnostic {
+    file: string;
+}
+export interface SystemModelReport {
+    key: string;
+    name: string | null;
+    source: string;
+    sourceKind: SystemSourceKind;
+    owner: string | null;
+    /** Unqualified (`<sliceKey>/<kind>.<slug>`) refs of every `public` element, export order. */
+    publicSurface: string[];
+}
+export interface SystemSeamReport {
+    /** Resolved, element-level qualified ref when the endpoint resolved; else the ref as written. */
+    from: string;
+    to: string;
+    fromSlice: string | null;
+    toSlice: string | null;
+    description: string | null;
+    status: "verified" | "error";
+    /** Codes of every diagnostic raised on this seam (errors and warnings), in raise order. */
+    diagnostics: string[];
+}
+export interface ContextMap {
+    nodes: {
+        key: string;
+        name: string | null;
+        owner: string | null;
+    }[];
+    /** One edge per ordered model pair with at least one declared seam (verified or not), sorted
+     *  by (from, to); `seams` counts the declarations. */
+    edges: {
+        from: string;
+        to: string;
+        seams: number;
+    }[];
+}
+export interface SystemReport {
+    name: string | null;
+    models: SystemModelReport[];
+    seams: SystemSeamReport[];
+    contextMap: ContextMap;
+    diagnostics: SystemDiagnostic[];
+}
+/** Verify `manifest` against the loaded `models` (one per manifest entry, same order).
+ *  `manifestFile` is the path manifest-level diagnostics point at. */
+export declare function verifySystem(manifest: SystemManifest, models: SystemModelInput[], manifestFile: string): SystemReport;

package/dist/system/verify.js

@@ -0,0 +1,263 @@
+// SPDX-License-Identifier: MIT
+// Verifies a seam manifest against the models' export documents (MIL-194) — the cross-model
+// half of the bedrock "both ends of a flow" rule. A seam is a `public` event/view on one side
+// bound to a reaction (translation/automation-kind element) on the other; `em` already has both
+// ends of every seam, it just never had them as data. This module makes the binding explicit and
+// checks it: both endpoints resolve, the source really is `public`, the consumer really is a
+// reaction, nothing published goes unread, nothing externally fed goes unclaimed, and the old
+// portal name-matching heuristic is demoted to a lint (`undeclared-seam-candidate`).
+//
+// It reads EXPORT DOCUMENTS ONLY — the `SystemExportDoc` shape below is the slice of `em
+// export --json` (schema >= 1.10: `model.key`, `model.edges`) this check needs, and nothing here
+// touches a NormalizedModel. That's the constraint the ticket sets ("models still compile
+// independently — no compile-time coupling"): a `.em` source is compiled into the same export
+// document by the caller (src/cli/systemInputs.ts), so this verifier can't tell a co-located
+// repo from a CI job aggregating exports from ten repos. Pure: no fs, no clock; output order
+// is manifest order for models/seams and stable derivation order for everything else.
+import { AUTOMATION_KINDS } from "../parser/ast.js";
+import { normalizeName } from "../model/model.js";
+import { formatQualifiedRef, parseQualifiedRef } from "../model/qualifiedRef.js";
+import { pushDiag } from "../model/rules.js";
+const SEAM_ERROR_CODES = new Set([
+    "system-manifest-invalid",
+    "seam-endpoint-unresolved",
+    "seam-source-not-public",
+    "seam-consumer-not-reaction",
+]);
+/** Verify `manifest` against the loaded `models` (one per manifest entry, same order).
+ *  `manifestFile` is the path manifest-level diagnostics point at. */
+export function verifySystem(manifest, models, manifestFile) {
+    const diagnostics = [];
+    const raise = (file, code, extra) => {
+        const bucket = [];
+        pushDiag(bucket, code, extra);
+        diagnostics.push({ ...bucket[0], file });
+    };
+    const qualify = formatQualifiedRef;
+    // Models are addressed by their MANIFEST key throughout — even on a mismatch, so a seam
+    // written against the manifest's own vocabulary still verifies and the one error tells the
+    // author exactly which key to change.
+    const byKey = new Map();
+    for (const m of models) {
+        byKey.set(m.key, m);
+        if (m.doc.model.key !== m.key) {
+            const entry = manifest.models.find((e) => e.key === m.key);
+            const modelLabel = m.doc.model.name === null ? "(unnamed model)" : `model "${m.doc.model.name}"`;
+            raise(manifestFile, "system-model-key-mismatch", {
+                message: `manifest key "${m.key}" does not match the computed key "${m.doc.model.key}" of ${modelLabel} ` +
+                    `(${m.source}) — rename the manifest entry to "${m.doc.model.key}"`,
+                line: entry?.line,
+            });
+        }
+    }
+    const isReaction = (el) => AUTOMATION_KINDS.has(el.kind);
+    const isSurface = (el) => el.public === true && (el.kind === "event" || el.kind === "view");
+    const findElement = (model, ref) => {
+        for (const slice of model.doc.model.slices) {
+            for (const element of slice.elements)
+                if (element.ref === ref)
+                    return { slice, element };
+        }
+        return undefined;
+    };
+    // ---- Seams: resolve both endpoints, then check what each one is. ----
+    const consumedSurface = new Set(); // qualified refs named as a resolved `from`
+    const boundReactions = new Set(); // qualified refs named as a resolved `to`
+    const declaredPairs = new Map(); // fromQualified -> set of toQualified
+    const seenPairs = new Set();
+    const seamsByModelPair = new Map();
+    const seams = manifest.seams.map((seam, i) => {
+        const codes = [];
+        const seamRaise = (code, message, refs) => {
+            codes.push(code);
+            raise(manifestFile, code, { message: `seams[${i}] (${seam.from} -> ${seam.to}): ${message}`, line: seam.line, refs });
+        };
+        const resolveModel = (raw, side) => {
+            const parsed = parseQualifiedRef(raw);
+            if (parsed.modelKey === null) {
+                seamRaise("system-manifest-invalid", `\`${side}\` must be a model-qualified ref (<modelKey>:<sliceKey>/<kind>.<slug>), got "${raw}"`);
+                return undefined;
+            }
+            const model = byKey.get(parsed.modelKey);
+            if (!model) {
+                seamRaise("system-manifest-invalid", `\`${side}\` names unknown model key "${parsed.modelKey}" — declared models are: ${manifest.models.map((m) => m.key).join(", ")}`);
+                return undefined;
+            }
+            return { modelKey: parsed.modelKey, ref: parsed.ref, model };
+        };
+        // `from`: an element ref that must be a `public` event/view.
+        let from;
+        const fromModel = resolveModel(seam.from, "from");
+        if (fromModel) {
+            const hit = findElement(fromModel.model, fromModel.ref);
+            if (!hit) {
+                seamRaise("seam-endpoint-unresolved", `no element "${fromModel.ref}" in model "${fromModel.modelKey}" — check \`em export\`'s refs, or re-declare the seam after a rename`);
+            }
+            else {
+                from = { modelKey: fromModel.modelKey, model: fromModel.model, ...hit };
+                if (!isSurface(hit.element)) {
+                    const why = hit.element.kind === "event" || hit.element.kind === "view"
+                        ? "is not marked `public`"
+                        : `is a ${hit.element.kind}, not a \`public\` event or view`;
+                    seamRaise("seam-source-not-public", `${hit.element.kind} "${hit.element.name}" ${why}`, [qualify(from.modelKey, hit.element.ref)]);
+                }
+            }
+        }
+        // `to`: an element ref to a reaction, or a bare slice ref containing exactly one reaction.
+        let to;
+        const toModel = resolveModel(seam.to, "to");
+        if (toModel) {
+            if (toModel.ref.includes("/")) {
+                const hit = findElement(toModel.model, toModel.ref);
+                if (!hit) {
+                    seamRaise("seam-endpoint-unresolved", `no element "${toModel.ref}" in model "${toModel.modelKey}" — check \`em export\`'s refs, or re-declare the seam after a rename`);
+                }
+                else {
+                    to = { modelKey: toModel.modelKey, model: toModel.model, ...hit };
+                    if (!isReaction(hit.element)) {
+                        seamRaise("seam-consumer-not-reaction", `${hit.element.kind} "${hit.element.name}" is not a reaction — \`to\` must name a translation/automation/processor/saga element`, [qualify(to.modelKey, hit.element.ref)]);
+                    }
+                }
+            }
+            else {
+                const slice = toModel.model.doc.model.slices.find((s) => s.key === toModel.ref);
+                if (!slice) {
+                    seamRaise("seam-endpoint-unresolved", `no slice "${toModel.ref}" in model "${toModel.modelKey}"`);
+                }
+                else {
+                    const reactions = slice.elements.filter(isReaction);
+                    if (reactions.length === 1) {
+                        to = { modelKey: toModel.modelKey, model: toModel.model, slice, element: reactions[0] };
+                    }
+                    else {
+                        seamRaise("seam-consumer-not-reaction", reactions.length === 0
+                            ? `slice "${slice.name}" has no reaction element — \`to\` must name (or contain exactly one) translation/automation element`
+                            : `slice "${slice.name}" has ${reactions.length} reaction elements (${reactions.map((r) => r.ref).join(", ")}) — name one explicitly`, [qualify(toModel.modelKey, slice.key)]);
+                    }
+                }
+            }
+        }
+        const fromQualified = from ? qualify(from.modelKey, from.element.ref) : seam.from;
+        const toQualified = to ? qualify(to.modelKey, to.element.ref) : seam.to;
+        // Duplicate: same resolved (from, to) pair declared twice (a bare-slice `to` and its
+        // element-level spelling are the same seam). Warned on the second occurrence.
+        const pairKey = `${fromQualified} -> ${toQualified}`;
+        if (seenPairs.has(pairKey)) {
+            seamRaise("seam-duplicate", "already declared earlier in the manifest");
+        }
+        seenPairs.add(pairKey);
+        // A half-resolved seam still claims the endpoint it did resolve, so a typo on one side
+        // doesn't ALSO report the other side as dangling/unbound on top of the resolution error.
+        if (from)
+            consumedSurface.add(fromQualified);
+        if (to)
+            boundReactions.add(toQualified);
+        if (from && to) {
+            if (!declaredPairs.has(fromQualified))
+                declaredPairs.set(fromQualified, new Set());
+            declaredPairs.get(fromQualified).add(toQualified);
+        }
+        if (fromModel && toModel) {
+            const k = `${fromModel.modelKey} ${toModel.modelKey}`;
+            seamsByModelPair.set(k, (seamsByModelPair.get(k) ?? 0) + 1);
+        }
+        const hasError = codes.some((c) => SEAM_ERROR_CODES.has(c));
+        return {
+            from: fromQualified,
+            to: toQualified,
+            fromSlice: from ? qualify(from.modelKey, from.slice.key) : null,
+            toSlice: to ? qualify(to.modelKey, to.slice.key) : null,
+            description: seam.description,
+            status: hasError ? "error" : "verified",
+            diagnostics: codes,
+        };
+    });
+    // ---- Per-model surface + the two "other end missing" checks, manifest order. ----
+    const modelReports = models.map((m) => {
+        const publicSurface = [];
+        for (const slice of m.doc.model.slices) {
+            for (const el of slice.elements) {
+                if (!isSurface(el))
+                    continue;
+                publicSurface.push(el.ref);
+                const q = qualify(m.key, el.ref);
+                if (!consumedSurface.has(q)) {
+                    raise(m.file, "dangling-public-event", {
+                        message: `public ${el.kind} "${el.name}" (${q}) is consumed by no declared seam — declare its reader, or drop \`public\``,
+                        line: el.line,
+                        refs: [q],
+                    });
+                }
+            }
+        }
+        return { key: m.key, name: m.doc.model.name, source: m.source, sourceKind: m.sourceKind, owner: m.owner, publicSurface };
+    });
+    // "Externally fed" is computed from the export's own edge list, never re-derived: a reaction
+    // with no incoming edge in `model.edges` (no `from` view feeds it — pattern, `from`, or arrow)
+    // is fed from outside its model by construction. With no seam claiming it, nobody in the
+    // system says what feeds it.
+    for (const m of models) {
+        const fedInside = new Set(m.doc.model.edges.map((e) => e.to));
+        for (const slice of m.doc.model.slices) {
+            for (const el of slice.elements) {
+                if (!isReaction(el) || fedInside.has(el.ref))
+                    continue;
+                const q = qualify(m.key, el.ref);
+                if (boundReactions.has(q))
+                    continue;
+                raise(m.file, "unbound-translation", {
+                    message: `${el.kind} "${el.name}" (${q}) has no in-model source and no seam feeds it — declare the seam whose \`to\` is this reaction, or add a \`from\``,
+                    line: el.line,
+                    refs: [q],
+                });
+            }
+        }
+    }
+    // The old portal heuristic, demoted: a public element in model A sharing its normalized
+    // name with a reaction or event in model B (B != A), with no seam between them.
+    for (const a of models) {
+        for (const aSlice of a.doc.model.slices) {
+            for (const el of aSlice.elements) {
+                if (!isSurface(el))
+                    continue;
+                const aq = qualify(a.key, el.ref);
+                const wanted = normalizeName(el.name);
+                for (const b of models) {
+                    if (b === a)
+                        continue;
+                    for (const bSlice of b.doc.model.slices) {
+                        for (const other of bSlice.elements) {
+                            const matchKind = isReaction(other) ? "reaction" : other.kind === "event" ? "event" : undefined;
+                            if (!matchKind || normalizeName(other.name) !== wanted)
+                                continue;
+                            const bq = qualify(b.key, other.ref);
+                            const declared = declaredPairs.get(aq);
+                            const connected = matchKind === "reaction"
+                                ? declared?.has(bq) === true
+                                : [...(declared ?? [])].some((t) => t.startsWith(`${b.key}:`));
+                            if (connected)
+                                continue;
+                            raise(a.file, "undeclared-seam-candidate", {
+                                message: `public ${el.kind} "${el.name}" (${aq}) and ${other.kind} "${other.name}" (${bq}) look connected by name, ` +
+                                    "but no seam declares it — declare the seam or rename",
+                                line: el.line,
+                                refs: [aq, bq],
+                            });
+                        }
+                    }
+                }
+            }
+        }
+    }
+    const contextMap = {
+        nodes: modelReports.map((m) => ({ key: m.key, name: m.name, owner: m.owner })),
+        edges: [...seamsByModelPair.entries()]
+            .map(([k, count]) => {
+            const [from, to] = k.split(" ");
+            return { from, to, seams: count };
+        })
+            .sort((x, y) => x.from.localeCompare(y.from) || x.to.localeCompare(y.to)),
+    };
+    return { name: manifest.name, models: modelReports, seams, contextMap, diagnostics };
+}
+//# sourceMappingURL=verify.js.map

package/dist/system/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/system/verify.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,4FAA4F;AAC5F,8FAA8F;AAC9F,gGAAgG;AAChG,iGAAiG;AACjG,6FAA6F;AAC7F,8FAA8F;AAC9F,qFAAqF;AACrF,EAAE;AACF,yFAAyF;AACzF,iGAAiG;AACjG,0FAA0F;AAC1F,8FAA8F;AAC9F,6FAA6F;AAC7F,6FAA6F;AAC7F,sFAAsF;AAEtF,OAAO,EAAE,gBAAgB,EAAe,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAY,MAAM,mBAAmB,CAAC;AA0FvD,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC;IACpD,yBAAyB;IACzB,0BAA0B;IAC1B,wBAAwB;IACxB,4BAA4B;CAC7B,CAAC,CAAC;AAEH;sEACsE;AACtE,MAAM,UAAU,YAAY,CAAC,QAAwB,EAAE,MAA0B,EAAE,YAAoB;IACrG,MAAM,WAAW,GAAuB,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,IAAc,EAAE,KAA0D,EAAE,EAAE;QACzG,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9B,WAAW,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,kBAAkB,CAAC;IAEnC,wFAAwF;IACxF,2FAA2F;IAC3F,sCAAsC;IACtC,MAAM,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAClD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;YAC3D,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC;YACjG,KAAK,CAAC,YAAY,EAAE,2BAA2B,EAAE;gBAC/C,OAAO,EACL,iBAAiB,CAAC,CAAC,GAAG,sCAAsC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,QAAQ,UAAU,GAAG;oBAChG,IAAI,CAAC,CAAC,MAAM,qCAAqC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG;gBACrE,IAAI,EAAE,KAAK,EAAE,IAAI;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,EAAuB,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IAC9E,MAAM,SAAS,GAAG,CAAC,EAAuB,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,OAAO,IAAI,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IAEjH,MAAM,WAAW,GAAG,CAAC,KAAuB,EAAE,GAAW,EAA0E,EAAE;QACnI,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAC3C,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ;gBAAE,IAAI,OAAO,CAAC,GAAG,KAAK,GAAG;oBAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAC3F,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF,wEAAwE;IACxE,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC,CAAC,4CAA4C;IACvF,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC,CAAC,0CAA0C;IACpF,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuB,CAAC,CAAC,sCAAsC;IAC5F,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEnD,MAAM,KAAK,GAAuB,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QAC/D,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,CAAC,IAAc,EAAE,OAAe,EAAE,IAAe,EAAE,EAAE;YACrE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,MAAM,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,MAAM,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACxH,CAAC,CAAC;QAEF,MAAM,YAAY,GAAG,CAAC,GAAW,EAAE,IAAmB,EAA0E,EAAE;YAChI,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBAC7B,SAAS,CAAC,yBAAyB,EAAE,KAAK,IAAI,gFAAgF,GAAG,GAAG,CAAC,CAAC;gBACtI,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,SAAS,CACP,yBAAyB,EACzB,KAAK,IAAI,+BAA+B,MAAM,CAAC,QAAQ,4BAA4B,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAClI,CAAC;gBACF,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC;QAC/D,CAAC,CAAC;QAEF,6DAA6D;QAC7D,IAAI,IAAkC,CAAC;QACvC,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAClD,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,GAAG,GAAG,WAAW,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;YACxD,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,SAAS,CACP,0BAA0B,EAC1B,eAAe,SAAS,CAAC,GAAG,eAAe,SAAS,CAAC,QAAQ,uEAAuE,CACrI,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,GAAG,GAAG,EAAE,CAAC;gBACxE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC5B,MAAM,GAAG,GACP,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM;wBACzD,CAAC,CAAC,wBAAwB;wBAC1B,CAAC,CAAC,QAAQ,GAAG,CAAC,OAAO,CAAC,IAAI,kCAAkC,CAAC;oBACjE,SAAS,CAAC,wBAAwB,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACrI,CAAC;YACH,CAAC;QACH,CAAC;QAED,2FAA2F;QAC3F,IAAI,EAAgC,CAAC;QACrC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC5C,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9B,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;gBACpD,IAAI,CAAC,GAAG,EAAE,CAAC;oBACT,SAAS,CACP,0BAA0B,EAC1B,eAAe,OAAO,CAAC,GAAG,eAAe,OAAO,CAAC,QAAQ,uEAAuE,CACjI,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,GAAG,EAAE,CAAC;oBAClE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC7B,SAAS,CACP,4BAA4B,EAC5B,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,CAAC,IAAI,wFAAwF,EAChI,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CACxC,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;gBAChF,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,SAAS,CAAC,0BAA0B,EAAE,aAAa,OAAO,CAAC,GAAG,eAAe,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACpG,CAAC;qBAAM,CAAC;oBACN,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;oBACpD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBAC3B,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1F,CAAC;yBAAM,CAAC;wBACN,SAAS,CACP,4BAA4B,EAC5B,SAAS,CAAC,MAAM,KAAK,CAAC;4BACpB,CAAC,CAAC,UAAU,KAAK,CAAC,IAAI,sGAAsG;4BAC5H,CAAC,CAAC,UAAU,KAAK,CAAC,IAAI,SAAS,SAAS,CAAC,MAAM,uBAAuB,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,EACvI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CACvC,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAClF,MAAM,WAAW,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAExE,qFAAqF;QACrF,8EAA8E;QAC9E,MAAM,OAAO,GAAG,GAAG,aAAa,OAAO,WAAW,EAAE,CAAC;QACrD,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,SAAS,CAAC,gBAAgB,EAAE,0CAA0C,CAAC,CAAC;QAC1E,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAEvB,uFAAuF;QACvF,yFAAyF;QACzF,IAAI,IAAI;YAAE,eAAe,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC7C,IAAI,EAAE;YAAE,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACxC,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;YACf,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC;gBAAE,aAAa,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;YACnF,aAAa,CAAC,GAAG,CAAC,aAAa,CAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,SAAS,IAAI,OAAO,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,GAAG,SAAS,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACtD,gBAAgB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,EAAE,EAAE,WAAW;YACf,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;YAC/D,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;YACvD,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU;YACvC,WAAW,EAAE,KAAK;SACnB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,oFAAoF;IACpF,MAAM,YAAY,GAAwB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACzD,MAAM,aAAa,GAAa,EAAE,CAAC;QACnC,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACvC,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAChC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAC7B,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;gBAC3B,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;gBACjC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5B,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,uBAAuB,EAAE;wBACrC,OAAO,EAAE,UAAU,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI,MAAM,CAAC,4EAA4E;wBACzH,IAAI,EAAE,EAAE,CAAC,IAAI;wBACb,IAAI,EAAE,CAAC,CAAC,CAAC;qBACV,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,aAAa,EAAE,CAAC;IAC3H,CAAC,CAAC,CAAC;IAEH,6FAA6F;IAC7F,+FAA+F;IAC/F,yFAAyF;IACzF,6BAA6B;IAC7B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9D,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACvC,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAChC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC;oBAAE,SAAS;gBACvD,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;gBACjC,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;oBAAE,SAAS;gBACpC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,qBAAqB,EAAE;oBACnC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI,MAAM,CAAC,mHAAmH;oBACzJ,IAAI,EAAE,EAAE,CAAC,IAAI;oBACb,IAAI,EAAE,CAAC,CAAC,CAAC;iBACV,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,wFAAwF;IACxF,gFAAgF;IAChF,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,KAAK,MAAM,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACxC,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACjC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAC7B,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;gBAClC,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;gBACtC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;oBACvB,IAAI,CAAC,KAAK,CAAC;wBAAE,SAAS;oBACtB,KAAK,MAAM,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;wBACxC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;4BACpC,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;4BAChG,IAAI,CAAC,SAAS,IAAI,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM;gCAAE,SAAS;4BACjE,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;4BACrC,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;4BACvC,MAAM,SAAS,GACb,SAAS,KAAK,UAAU;gCACtB,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,IAAI;gCAC5B,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;4BACnE,IAAI,SAAS;gCAAE,SAAS;4BACxB,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,2BAA2B,EAAE;gCACzC,OAAO,EACL,UAAU,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI,MAAM,EAAE,SAAS,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,MAAM,EAAE,4BAA4B;oCAC3G,sDAAsD;gCACxD,IAAI,EAAE,EAAE,CAAC,IAAI;gCACb,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;6BACf,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAe;QAC7B,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC9E,KAAK,EAAE,CAAC,GAAG,gBAAgB,CAAC,OAAO,EAAE,CAAC;aACnC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE;YAClB,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChC,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QACpC,CAAC,CAAC;aACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;KAC5E,CAAC;IAEF,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;AACvF,CAAC"}

package/dist/templates.d.ts

@@ -1,8 +1,11 @@
 export declare const STARTER_EM = "model \"Order Fulfillment\"\n\npersona Customer\npersona Manager\n\ncontext Order\ncontext Payment\n\n# --- Command pattern: UI -> command -> event ---\nslice \"Browse Catalog\" {\n  ui Product Catalog @Customer\n  command Place Order\n  event Order Placed @Order\n}\n\n# --- View pattern: event -> read model -> UI ---\nslice \"View Open Orders\" {\n  view Open Orders from \"Order Placed\"\n  ui Order List @Customer\n}\n\nslice \"Checkout\" {\n  ui Checkout Screen @Customer\n  command Submit Payment\n  event Payment Requested @Payment\n}\n\n# --- View pattern: a human view of pending payments ---\nslice \"Manager Review\" {\n  view Pending Payments from \"Payment Requested\"\n  ui Payment Dashboard @Manager\n}\n\n# --- Read model the automation watches, in its own slice ---\nslice \"Payments To Process\" {\n  view Payments To Process from \"Payment Requested\"\n}\n\n# --- Automation slice: the processor, the command it triggers, and that command's event ---\nslice \"Capture Payment\" {\n  processor Payment Gateway from \"Payments To Process\"\n  command Capture Payment\n  event Payment Captured @Payment\n}\n\nslice \"Show Receipt\" {\n  view Receipts from \"Payment Captured\"\n  ui Receipt Screen @Customer\n}\n";
 /** Raw copy of templates/model-readme.md, \`{{...}}\` placeholders intact — see scaffoldReadme(). */
-export declare const MODEL_README_TEMPLATE = "# {{Model Name}}\n\n{{One-paragraph description of the business process(es) this event model covers.}}\n\n## Live view\nWhile modeling, run the live view so the team can watch the diagram update:\n\n```bash\nem watch {{model-name}}.em -o {{model-name}}.svg --serve   # re-render + instant push-reload\n# then open the URL it prints (http://localhost:5173/?svg={{model-name}}.svg) and share the screen\n```\n\nPan/zoom to navigate the diagram (drag, scroll; **Fit** resets), and click **Review mode** in\nthe header for a slice-by-slice walkthrough. If a save fails to render, the viewer keeps the\nlast good diagram and shows an error banner until the next successful load.\n\nStatic render: `em render {{model-name}}.em -o {{model-name}}.svg`\n\n## Patterns legend\n- **State Change** \u2014 UI \u2192 Command \u2192 Event\n- **State View** \u2014 Event(s) \u2192 Read Model \u2192 UI\n- **Automation** \u2014 Read Model (slice before) \u2192 Processor + Command \u2192 Event, together\n- **Translation** \u2014 External input (or Read Model, slice before) \u2192 Translation + Command \u2192 Event, together\n\nBetween them these are the only legal connections: `ui \u2192 command`, `command \u2192 event`,\n`event \u2192 read model`, `read model \u2192 ui`, `read model \u2192 reaction`, `reaction \u2192 command`. A command\nnever reaches a read model directly \u2014 the event goes between them. Every slice is joined up at\nboth ends: something triggers each command (the screen it's issued from, or the reaction that\ntriggers it, also in this slice), and every event a command records is read by some read model \u2014 so each State\nChange slice is paired with the State View slice that projects its event. A read model repeated\nalong the timeline (`view X again`) shows the same projection at a later point; the instances are\nnever connected to one another.\n\n## Slices\n<!-- The canonical slice index \u2014 the ONE place slices are enumerated (the state file\n     points here rather than keeping its own copy). Generated \u2014 run\n     `em slice index {{model-name}}.em` to (re)write the table below from the model and its\n     slice docs; never hand-edit between the markers. -->\n<!-- GENERATED:slices:start -->\n| # | Slice | Pattern | Status | Ratified by | Owner | Tracking | Implemented in | Design doc |\n|---|-------|---------|--------|-------------|-------|----------|----------------|------------|\n<!-- GENERATED:slices:end -->\n\n## Status\nSee [`.event-modeling.md`](.event-modeling.md) for current phase, decisions, and open questions.\n";
+export declare const MODEL_README_TEMPLATE = "# {{Model Name}}\n\n{{One-paragraph description of the business process(es) this event model covers.}}\n\n## Live view\nWhile modeling, run the live view so the team can watch the diagram update:\n\n```bash\nem watch {{model-name}}.em -o {{model-name}}.svg --serve   # re-render + instant push-reload\n# then open the URL it prints (http://localhost:5173/?svg={{model-name}}.svg) and share the screen\n```\n\nPan/zoom to navigate the diagram (drag, scroll; **Fit** resets), and click **Review mode** in\nthe header for a slice-by-slice walkthrough. If a save fails to render, the viewer keeps the\nlast good diagram and shows an error banner until the next successful load.\n\nStatic render: `em render {{model-name}}.em -o {{model-name}}.svg`\n\n## Patterns legend\n- **State Change** \u2014 UI \u2192 Command \u2192 Event\n- **State View** \u2014 Event(s) \u2192 Read Model \u2192 UI\n- **Automation** \u2014 Read Model (slice before) \u2192 Processor + Command \u2192 Event, together\n- **Translation** \u2014 External input (or Read Model, slice before) \u2192 Translation + Command \u2192 Event, together\n\nBetween them these are the only legal connections: `ui \u2192 command`, `command \u2192 event`,\n`event \u2192 read model`, `read model \u2192 ui`, `read model \u2192 reaction`, `reaction \u2192 command`. A command\nnever reaches a read model directly \u2014 the event goes between them. Every slice is joined up at\nboth ends: something triggers each command (the screen it's issued from, or the reaction that\ntriggers it, also in this slice), and every event a command records is read by some read model \u2014 so each State\nChange slice is paired with the State View slice that projects its event. A read model repeated\nalong the timeline (`view X again`) shows the same projection at a later point; the instances are\nnever connected to one another.\n\n## Slices\n<!-- The canonical slice index \u2014 the ONE place slices are enumerated (the state file\n     points here rather than keeping its own copy). Generated \u2014 run\n     `em slice index {{model-name}}.em` to (re)write the table below from the model and its\n     slice docs; never hand-edit between the markers. -->\n<!-- GENERATED:slices:start -->\n| # | Slice | Pattern | Status | Reviewed by | Ratified by | Owner | Tracking | Implemented in | Design doc |\n|---|-------|---------|--------|-------------|-------------|-------|----------|----------------|------------|\n<!-- GENERATED:slices:end -->\n\n## Status\nSee [`.event-modeling.md`](.event-modeling.md) for current phase, decisions, and open questions.\n";
 /** Raw copy of templates/state.md, \`{{...}}\` placeholders intact — see scaffoldStateFile(). */
 export declare const STATE_TEMPLATE = "<!--\nResumable progress state for an event model. Stored as <model>/.event-modeling.md\nThe skill reads this on `/event-modeling` (no arg) to resume where you left off.\nKeep it current at the end of every working session.\n-->\n\n# Event Modeling Progress \u2014 {{Model Name}}\n\n- **Model file:** `{{model-name}}.em`\n- **Current phase:** {{discover | extract | model | slice | implement | conform | review | validate}}\n- **Current step:** {{1\u20137, see methodology; or extraction round R1\u2013R7}}\n- **Last updated:** {{YYYY-MM-DD}}\n- **Last conformance:** {{YYYY-MM-DD @ <target-repo revision> \u2014 report: conformance/<date>-report.md | never}}\n- **Last stakeholder review:** {{YYYY-MM-DD \u2014 attendees: see Participants | never}}\n\n## Session inputs\n- **Scope line:** {{one-line description of what's in/out of bounds for this model}}\n- **PRD / spec reference:** {{path, link, or \"none\"}}\n- **Headless/API model:** {{yes | no}}\n- **Source mode:** {{greenfield | extract-event-driven | extract-procedural}}\n- **Existing system refs:** {{repo paths, event-schema/topic locations, docs \u2014 or \"n/a\"}}\n\n## Participants\n<!-- Populate at session start. Live workshop: one human proxy relays questions to the room;\n     attribute every answer/decision in the Decisions log to a named participant here. -->\n- {{Name}} \u2014 {{role}} \u2014 {{domain area}}\n\n## Extraction progress (existing-system models only \u2014 delete for greenfield)\n- [ ] R1. Candidate events (extracted/synthesized, filtered, confirmed)\n- [ ] R2. Timeline order (as-is narrative, actors/callers, first render)\n- [ ] R3. Commands / inputs\n- [ ] R4. Read models / outputs (validate from here)\n- [ ] R5. Boundaries & reactions (reaction shares its slice with the command it triggers)\n- [ ] R6. Gap & TBD reconciliation\n- [ ] R7. Convergence (render + validate clean, user confirmed as-is)\n\n## Steps completed\n- [ ] 1. Brainstorm events\n- [ ] 2. Plot / storyboard (personas + UI)\n- [ ] 3. Inputs (commands)\n- [ ] 4. Outputs (read models)\n- [ ] 5. Swimlanes & apply patterns\n- [ ] 6. Elaborate scenarios\n- [ ] 7. Evaluate completeness (`em validate` clean)\n\n## Decisions log\n<!-- Resolved choices, with the reasoning, so they aren't re-litigated. In a live workshop,\n     attribute each entry to the participant who made the call (see Participants above). -->\n- {{YYYY-MM-DD}}: {{decision}} \u2014 {{why}} \u2014 by {{participant, if a live workshop}}\n\n## Usage log\n<!-- The team's only usage signal today (see docs/usage-data.md) \u2014 cheap and coarse on purpose.\n     One line per session: phase(s) touched, and validate diagnostic *categories* hit (one of\n     the exact fixed strings in docs/usage-data.md#categories, e.g. \"read model has no\n     consumer\" \u2014 never the full instance message or any domain content). Append, never edit\n     past entries. -->\n- {{YYYY-MM-DD}}: phases: {{discover | extract | model | slice | implement | conform | review | validate | watch, ...}} \u2014 validate: {{diagnostic category (docs/usage-data.md#categories), ... | none}}\n\n## Open questions / parking lot\n<!-- Unresolved items to bring back to the user. Never guess these. Metadata is optional and\n     flat \u2014 add only what's known: source (ticket/conversation that spawned it), blocked on\n     (who/what), revisit (when). -->\n- [ ] {{question}} \u2014 source: {{ticket/conversation link, optional}} \u2014 blocked on: {{who/what, optional}} \u2014 revisit: {{when, optional}}\n\n## Slice inventory\n<!-- Deliberately NOT a table: the canonical slice index (slice, pattern, status, doc link)\n     lives in README.md's \"Slices\" section \u2014 one source of truth, updated there. This file\n     only tracks resumable session state. -->\nSee `README.md` \u2192 **Slices** for the slice index and per-slice doc status.\n";
+/** Raw copy of templates/constitution.md, \`{{...}}\` placeholders intact — see
+ *  scaffoldConstitution(). */
+export declare const CONSTITUTION_TEMPLATE = "<!--\nThe implementation constitution: the house rules an implementing agent follows on EVERY slice \u2014\nstack, code style, testing norms, NFR baselines, review norms. It answers \"how do we build things\nhere\" once, so no slice doc has to repeat it and no agent has to invent it. Slice docs say WHAT to\nbuild; this says HOW it gets built here.\n\nWhere this document lives:\n  - No SDD tool: `constitution.md` beside the model \u2014 `em scaffold` writes it there.\n  - spec-kit project (a `.specify/` directory exists anywhere above the model): the document IS\n    `.specify/memory/constitution.md`. em writes no second copy; the sections below merge into\n    that file under these same headings, never overwriting text already there, and ratification is\n    recorded in spec-kit's own `**Ratified**:` footer line instead of the frontmatter below.\n\nHow it gets filled: not by an agent guessing. Each section opens with the question a short\nfacilitated conversation asks before the first slice is implemented \u2014 the procedure is \"Before the\nfirst slice: the constitution\" in the `event-modeling-implement` skill's `reference/implement.md`\n(`em contract` prints it). Replace each `{{...}}` block with the real answers; delete the guidance\ncomments and any row that doesn't apply.\n\nRatification: `ratifiedBy:`/`ratifiedOn:` are the same identity discipline slice docs use \u2014 a\nNAMED human and an ISO date, hand-filled at sign-off (no `em` command writes this file).\n**A constitution with an empty `ratifiedBy:` is a draft**: an implementing agent treats it as\nunratified, says so, and does not proceed on unilateral style or stack decisions for a first slice.\n\n`em status` reports this document as present or absent per model \u2014 existence only. em never reads\nor validates its content, and nothing here is machine-parsed.\n-->\n\n---\nschemaVersion: 1\nratifiedBy:\nratifiedOn:\n---\n# {{Project Name}} \u2014 implementation constitution\n\nThe house rules for how implementation happens in this project. They bound every \"purely\ntechnical choice\" an implementing agent would otherwise make alone.\n\n## Stack and architectural shape\n\n> **What do we build on, what shape does the code take, and which implementation skill or\n> approach does each slice pattern route to?**\n\n- **Languages / runtimes:** {{e.g. Kotlin 2.x on JVM 21; TypeScript 5 on Node 24}}\n- **Frameworks / platform:** {{web framework, persistence, messaging, build tool}}\n- **Architectural pattern:** {{e.g. event-sourced CQRS with vertical slices; layered service over\n  a relational store; functional core / imperative shell}}\n- **Where a slice's code lives:** {{one package per slice, per context, ...}}\n\nRouting \u2014 which implementation skill or approach each of the four slice patterns uses:\n\n| Pattern | Skill / approach |\n|---|---|\n| State Change | {{e.g. the `axon-*` skill set \u2014 axon-entity-patterns, then axon-entity-testing}} |\n| State View | {{e.g. the `axon-*` skill set \u2014 axon-projection-patterns, then axon-projection-testing}} |\n| Automation | {{e.g. the `axon-*` skill set \u2014 axon-policy-patterns, then axon-policy-testing}} |\n| Translation | {{e.g. the `axon-*` skill set \u2014 axon-translation-patterns}} |\n\nAn agent implementing a slice reads the doc's `pattern:` frontmatter and follows that row \u2014 this\ntable is the only routing rule.\n\n## Code style\n\n> **What does \"idiomatic\" mean in this codebase \u2014 formatting, naming, module layout?**\n\n- **Formatter / linter:** {{the tool and the command that runs it \u2014 never hand-format against it}}\n- **Naming:** {{commands, events, handlers, files, test names}}\n- **Module layout:** {{what lives in which file/package, and what may not import what}}\n- **Idiomatic here means:** {{the two or three habits a new contributor most often gets wrong}}\n\n## Testing norms\n\n> **What must be tested for each slice pattern, where do those tests live, and how are they named\n> so `em coverage` can trace invariant IDs?**\n\n- **Levels required per pattern:** {{e.g. State Change \u2014 decider unit tests plus a\n  given/when/then fixture test; State View \u2014 projection tests; Automation / Translation \u2014\n  reaction tests, including a negative case}}\n- **Invariant tests:** {{where they live}} \u2014 every `INV-<MNEMONIC>-n` in a slice doc needs at least\n  one test **citing that exact ID** in its name or a comment, so\n  `em coverage <model>.em --tests <dir>` can trace it.\n- **Scenario tests:** {{where they live}} \u2014 one per `## Scenarios (Given / When / Then)` entry,\n  with rejection scenarios asserting the doc's named rejection reason.\n- **Test naming convention:** {{the exact pattern, e.g. `INV-ORD-3: rejects a second submit`}}\n- **What \"green\" means:** {{the command CI runs}}\n\n## NFR baselines\n\n> **What standing non-functional defaults does every slice inherit \u2014 authz, PII, performance,\n> observability?**\n\n- **Authorization model:** {{who may issue which commands, how it's enforced, and where}}\n- **PII / data handling:** {{what is sensitive, what may be logged, retention}}\n- **Performance defaults:** {{latency / throughput budgets that apply unless a slice says otherwise}}\n- **Observability:** {{logging, metrics, tracing every slice is expected to emit}}\n\nA slice doc's own `## Non-Functional Requirements` section overrides these for that slice; where\nit is silent, these apply.\n\n## Review and merge norms\n\n> **Who reviews an implementation PR, what blocks a merge, and how does the slice doc's status\n> flip fit in?**\n\n- **Reviewers:** {{who \u2014 a team, a CODEOWNERS rule, the slice's ratifier}}\n- **What blocks a merge:** {{e.g. a failing suite, an uncovered invariant, a gap that belongs back\n  at the model}}\n- **Branch / commit conventions:** {{...}}\n- **At merge:** run `em slice mark-implemented <model>.em <slice-key> <pr-url>` \u2014 the one edit an\n  implementing agent makes to a ratified slice doc, run by {{the PR author | CI}}. Never bump\n  `version:`; that moves only when a delta is ratified.\n";
 /** Same STARTER_EM content `em init` writes, titled from an arbitrary display name — used by
  *  `em scaffold`, which (unlike `em init`) knows a name to title the model with. */
 export declare function starterEmFor(title: string): string;
@@ -18,3 +21,13 @@ export declare function scaffoldReadme(displayName: string, slugName: string): s
  *  the template's own guidance comment intact where it has one — per the skill's "don't guess,
  *  park it" principle, never a fabricated example. Never leaves \`{{...}}\` in the result. */
 export declare function scaffoldStateFile(displayName: string, slugName: string, today: string): string;
+/** Fill CONSTITUTION_TEMPLATE's project-name placeholder for `em scaffold` (MIL-202).
+ *
+ *  Unlike `scaffoldReadme`/`scaffoldStateFile`, this one **deliberately leaves every other
+ *  \`{{...}}\` block intact**: they are the unanswered questions of the elicitation conversation
+ *  the implement skill runs before the first slice ("Before the first slice: the constitution"),
+ *  not mechanical fields em could fill. An unanswered constitution must read as unanswered — the
+ *  placeholders are the todo list, and the empty `ratifiedBy:` frontmatter says it's still a
+ *  draft. Nothing in `em` ever parses this file's body; only its existence is reported
+ *  (`em status`'s `constitution` field). */
+export declare function scaffoldConstitution(displayName: string): string;