feat(core): cli-3.23.1 — Loom M0: extract straymark-core (workspace + shared document model + typed graph) (#239)

CHARTER-01-loom-server M0 (T0.1–T0.7). Zero behavior change, verified by the
declared regression oracle: 635 tests pass and `straymark audit` output is
byte-for-byte identical pre/post refactor (JSON, cyclic-corpus JSON, text).

- Root Cargo workspace (core + cli); [profile.release] and Cargo.lock at root
- New straymark-core crate: document.rs moved verbatim; new core::graph —
  typed (RELATED_TO/SUPERSEDES/DOCUMENTS_ALTERNATIVE/CHANGES_API/
  ORIGINATES_FROM), bidirectional, orphan-preserving, dangling refs kept as
  resolved:false edges (Spec 001 §3)
- audit_engine::build_traceability is now a projection over the shared graph
- Additive Frontmatter fields: supersedes, alternatives_documented,
  originating_ailogs
- release-cli.yml: workspace target/ paths; publish straymark-core before cli
- Lands the Loom intention docs (experimento/, 2 dogfood ADRs); Charter →
  in-progress; AILOG-2026-06-12-001 with Batch Ledger

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

Author: montfort

.github/workflows/release-cli.yml

@@ -97,7 +97,8 @@ jobs:
         if: matrix.archive == 'tar.gz'
         shell: bash
         run: |
-          BINARY=cli/target/${{ matrix.target }}/release/straymark
+          # Workspace root target/ since Loom M0 (cli/ is a workspace member)
+          BINARY=target/${{ matrix.target }}/release/straymark
           ARCHIVE=straymark-cli-v${{ needs.resolve-version.outputs.version }}-${{ matrix.target }}.tar.gz
           tar czf "$ARCHIVE" -C "$(dirname "$BINARY")" "$(basename "$BINARY")"
           echo "ARCHIVE=$ARCHIVE" >> "$GITHUB_ENV"
@@ -106,7 +107,8 @@ jobs:
         if: matrix.archive == 'zip'
         shell: bash
         run: |
-          BINARY=cli/target/${{ matrix.target }}/release/straymark.exe
+          # Workspace root target/ since Loom M0 (cli/ is a workspace member)
+          BINARY=target/${{ matrix.target }}/release/straymark.exe
           ARCHIVE=straymark-cli-v${{ needs.resolve-version.outputs.version }}-${{ matrix.target }}.zip
           cp "$BINARY" straymark.exe
           7z a "$ARCHIVE" straymark.exe
@@ -181,7 +183,21 @@ jobs:
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@stable
 
-      - name: Publish to crates.io
+      - name: Publish straymark-core (if version not yet on crates.io)
+        env:
+          CARGO_REGISTRY_TOKEN: ${{ secrets.CRATES_IO_TOKEN }}
+        shell: bash
+        run: |
+          # straymark-cli depends on straymark-core by version; the core crate
+          # must exist on crates.io before the CLI can be published.
+          CORE_VERSION=$(grep '^version' core/Cargo.toml | head -1 | sed 's/.*"\(.*\)".*/\1/')
+          if curl -fsSL "https://crates.io/api/v1/crates/straymark-core/$CORE_VERSION" | grep -q '"num"'; then
+            echo "straymark-core $CORE_VERSION already published — skipping"
+          else
+            cargo publish --manifest-path core/Cargo.toml --allow-dirty
+          fi
+
+      - name: Publish straymark-cli to crates.io
         env:
           CARGO_REGISTRY_TOKEN: ${{ secrets.CRATES_IO_TOKEN }}
         run: cargo publish --manifest-path cli/Cargo.toml --allow-dirty

.gitignore

@@ -94,6 +94,7 @@ yarn.lock
 # CLI Build Artifacts
 # =============================================================================
 
+/target/
 cli/target/
 dist-staging/
 *.tar.gz

CHANGELOG.md

@@ -7,6 +7,22 @@ and this project uses [independent versioning](README.md#versioning) for Framewo
 
 ---
 
+## CLI 3.23.1 — `straymark-core` extraction (Loom M0)
+
+First milestone of the experimental **Loom** component (`experimento/`, `CHARTER-01-loom-server`): the document model and traceability graph move into a shared crate so the CLI and the upcoming Loom visualization server parse StrayMark documents with exactly the same code (`ADR-2026-06-02-001`). **No user-facing behavior changes** — the full test suite and the `straymark audit` output are byte-for-byte identical pre/post refactor.
+
+### Added (CLI)
+
+- **`straymark-core` crate** (published to crates.io): `core::document` (the document model, moved verbatim from `cli/src/document.rs`) and `core::graph` — a typed, bidirectional, orphan-preserving knowledge graph over frontmatter cross-links (`related`, `supersedes`, `alternatives_documented`, `api_changes`, `originating_ailogs`), with dangling references kept as first-class `resolved: false` edges (Loom Spec 001 §3).
+- New optional frontmatter fields parsed (additive): `supersedes`, `alternatives_documented`, `originating_ailogs`.
+
+### Changed (CLI)
+
+- The repository root is now a Cargo **workspace** (`core` + `cli`); `[profile.release]` and `Cargo.lock` live at the root. Release binaries are built from `target/` (workspace) instead of `cli/target/` — `release-cli.yml` adjusted accordingly, and it now publishes `straymark-core` before `straymark-cli`.
+- `audit_engine::build_traceability` is now a projection over `straymark_core::graph` (same output, one graph builder for all consumers).
+
+---
+
 ## Framework 4.26.0 / CLI 3.23.0 — `charter drift` is native Rust (Windows-native parity)
 
 Closes the last functional Windows-native gap ([#237](https://github.com/StrangeDaysTech/straymark/issues/237)): `straymark charter drift` no longer delegates to a bash script, so it runs without WSL or Git Bash.

CLAUDE.md

@@ -1,14 +1,23 @@
 # StrayMark — Development Instructions
 
-This is the StrayMark project repository. It contains two main components:
+This is the StrayMark project repository. It contains two main components, plus one experimental:
 
 - **Framework** (`dist/`): documentation templates, governance policies, and agent directives
 - **CLI** (`cli/`): the `straymark` Rust binary that manages the framework in user projects
+- **Loom** (`experimento/`, EXPERIMENTAL): knowledge-graph/architecture visualization server — see `experimento/README.md` and `experimento/CHARTER-01-loom-server.md`
+
+The Rust code is a **Cargo workspace** (root `Cargo.toml`, members `core` + `cli`): `straymark-core` holds the shared document model and knowledge graph (one parser for the CLI and Loom); `Cargo.lock` and `[profile.release]` live at the workspace root; build artifacts land in the root `target/`.
 
 ## Project Structure
 
 ```
 straymark/
+├── Cargo.toml              # Workspace root (members: core, cli) + release profile
+├── Cargo.lock
+├── core/                   # straymark-core: shared document model + typed knowledge graph
+│   └── src/
+│       ├── document.rs     # DocType, Frontmatter, parse_document, discover_documents
+│       └── graph.rs        # Typed, bidirectional, orphan-preserving graph builder
 ├── cli/                    # Rust CLI source code
 │   ├── src/
 │   │   ├── main.rs         # Entry point, command routing
@@ -23,8 +32,7 @@ straymark/
 │   │   ├── self_update.rs  # CLI auto-update
 │   │   └── utils.rs        # Output helpers, file hashing
 │   ├── tests/              # Integration tests
-│   ├── Cargo.toml
-│   └── Cargo.lock
+│   └── Cargo.toml
 ├── dist/                   # Framework distribution files
 │   ├── .straymark/          # Templates, governance, config
 │   ├── STRAYMARK.md         # Unified governance rules
@@ -59,7 +67,7 @@ Edit `cli/Cargo.toml`:
 version = "X.Y.Z"
 ```
 
-Run `cargo check` in `cli/` to update `Cargo.lock`.
+Run `cargo check` at the repo root to update the workspace `Cargo.lock`.
 
 Update version references in all docs that mention version numbers:
 - `docs/adopters/CLI-REFERENCE.md` (EN — versioning table + example outputs)
@@ -78,7 +86,7 @@ Update `CHANGELOG.md` (root) following [Keep a Changelog](https://keepachangelog
 
 ```bash
 git checkout -b chore/bump-cli-X.Y.Z
-git add cli/Cargo.toml cli/Cargo.lock docs/
+git add cli/Cargo.toml Cargo.lock docs/
 git commit -m "chore: bump CLI version to X.Y.Z"
 # Push, create PR, merge to main
 ```

cli/Cargo.lock Cargo.lockcli/Cargo.lock renamed to Cargo.lock

@@ -0,0 +1,10 @@
+[workspace]
+resolver = "2"
+members = ["core", "cli"]
+
+# Shared release profile (moved from cli/Cargo.toml when the workspace was
+# introduced in Loom M0 — profiles are only honored at the workspace root).
+[profile.release]
+opt-level = "z"
+lto = true
+strip = true

Cargo.toml

@@ -278,7 +278,7 @@ StrayMark uses independent version tags for each component:
 | Component | Tag prefix | Example | Includes |
 | --- | --- | --- | --- |
 | Framework | `fw-` | `fw-4.26.0` | Templates (12 types), governance, directives, Charter template + schema |
-| CLI | `cli-` | `cli-3.23.0` | The `straymark` binary |
+| CLI | `cli-` | `cli-3.23.1` | The `straymark` binary |
 
 Check installed versions with `straymark status` or `straymark about`.
 

README.md

@@ -1,6 +1,6 @@
 [package]
 name = "straymark-cli"
-version = "3.23.0"
+version = "3.23.1"
 edition = "2021"
 description = "CLI for StrayMark — the cognitive discipline your AI-assisted projects need"
 license = "MIT"
@@ -10,13 +10,14 @@ readme = "README.md"
 keywords = ["straymark", "documentation", "governance", "ai", "cli"]
 categories = ["command-line-utilities", "development-tools"]
 authors = ["Strange Days Tech, S.A.S."]
-include = ["src/**/*", "Cargo.toml", "Cargo.lock", "README.md"]
+include = ["src/**/*", "Cargo.toml", "README.md"]
 
 [[bin]]
 name = "straymark"
 path = "src/main.rs"
 
 [dependencies]
+straymark-core = { version = "0.1.0", path = "../core" }
 clap = { version = "4", features = ["derive"] }
 reqwest = { version = "0.12", features = ["blocking", "rustls-tls", "json"] }
 serde = { version = "1", features = ["derive"] }
@@ -52,7 +53,5 @@ assert_cmd = "2"
 predicates = "3"
 tempfile = "3"
 
-[profile.release]
-opt-level = "z"
-lto = true
-strip = true
+# [profile.release] moved to the workspace root Cargo.toml (Loom M0) —
+# cargo only honors profiles declared at the workspace root.

cli/Cargo.toml

@@ -4,7 +4,8 @@ use chrono::NaiveDate;
 use serde::Serialize;
 
 use crate::compliance::{self, ComplianceReport};
-use crate::document::StrayMarkDocument;
+use straymark_core::document::StrayMarkDocument;
+use straymark_core::graph::{EdgeType, Graph};
 
 /// A single entry in the audit timeline
 #[derive(Debug, Clone, Serialize)]
@@ -135,35 +136,36 @@ fn build_timeline(docs: &[&StrayMarkDocument]) -> Vec<TimelineEntry> {
     entries
 }
 
-/// Build traceability chains from document relationships
+/// Build traceability chains from document relationships.
+///
+/// Since Loom M0 this is a projection over the shared typed graph
+/// (`straymark_core::graph`): the legacy chain view keeps only resolved
+/// `RELATED_TO` edges between documents with explicit frontmatter ids, so the
+/// audit output is unchanged while the full graph (typed edges, orphans,
+/// dangling references, bidirectional adjacency) is available to other
+/// consumers (the Loom server).
 fn build_traceability(docs: &[&StrayMarkDocument]) -> Vec<TraceabilityChain> {
-    // Build lookup by ID and by filename stem
-    let mut doc_by_id: HashMap<String, &StrayMarkDocument> = HashMap::new();
-    let mut referenced_ids: HashSet<String> = HashSet::new();
-
-    for doc in docs {
-        if let Some(id) = &doc.frontmatter.id {
-            doc_by_id.insert(id.clone(), doc);
-        }
-    }
+    let graph = Graph::build(docs);
 
-    // Build adjacency: id -> list of ids it references
+    // Legacy adjacency: id -> ids it references via resolved RELATED_TO edges,
+    // both endpoints carrying explicit frontmatter ids.
     let mut adjacency: HashMap<String, Vec<String>> = HashMap::new();
-    for doc in docs {
-        if let Some(id) = &doc.frontmatter.id {
-            if let Some(related) = &doc.frontmatter.related {
-                let refs: Vec<String> = related
-                    .iter()
-                    .filter(|r| doc_by_id.contains_key(r.as_str()))
-                    .cloned()
-                    .collect();
-                for r in &refs {
-                    referenced_ids.insert(r.clone());
-                }
-                if !refs.is_empty() {
-                    adjacency.insert(id.clone(), refs);
-                }
-            }
+    let mut referenced_ids: HashSet<String> = HashSet::new();
+    for node in &graph.nodes {
+        if !node.has_explicit_id {
+            continue;
+        }
+        let refs: Vec<String> = graph
+            .out_edges(&node.id)
+            .filter(|e| e.edge_type == EdgeType::RelatedTo && e.resolved)
+            .filter(|e| graph.node(&e.target).is_some_and(|t| t.has_explicit_id))
+            .map(|e| e.target.clone())
+            .collect();
+        for r in &refs {
+            referenced_ids.insert(r.clone());
+        }
+        if !refs.is_empty() {
+            adjacency.insert(node.id.clone(), refs);
         }
     }
 
@@ -173,9 +175,11 @@ fn build_traceability(docs: &[&StrayMarkDocument]) -> Vec<TraceabilityChain> {
     }
 
     // Find root nodes: documents that are not referenced by others
-    let root_ids: Vec<String> = docs
+    let root_ids: Vec<String> = graph
+        .nodes
         .iter()
-        .filter_map(|d| d.frontmatter.id.clone())
+        .filter(|n| n.has_explicit_id)
+        .map(|n| n.id.clone())
         .filter(|id| !referenced_ids.contains(id))
         .filter(|id| adjacency.contains_key(id))
         .collect();
@@ -189,19 +193,15 @@ fn build_traceability(docs: &[&StrayMarkDocument]) -> Vec<TraceabilityChain> {
             continue;
         }
 
-        let root_doc = match doc_by_id.get(root_id.as_str()) {
-            Some(d) => d,
+        let root_doc = match graph.node(root_id) {
+            Some(n) => n,
             None => continue,
         };
 
         let root_node = TraceabilityNode {
             id: root_id.clone(),
-            doc_type: root_doc.doc_type.prefix().to_string(),
-            title: root_doc
-                .frontmatter
-                .title
-                .clone()
-                .unwrap_or_else(|| "Untitled".into()),
+            doc_type: root_doc.doc_type.clone(),
+            title: root_doc.title.clone(),
         };
 
         let mut chain_nodes = Vec::new();
@@ -226,15 +226,11 @@ fn build_traceability(docs: &[&StrayMarkDocument]) -> Vec<TraceabilityChain> {
             visited.insert(current_id.clone());
             globally_visited.insert(current_id.clone());
 
-            if let Some(doc) = doc_by_id.get(current_id.as_str()) {
+            if let Some(node) = graph.node(&current_id) {
                 chain_nodes.push(TraceabilityNode {
                     id: current_id.clone(),
-                    doc_type: doc.doc_type.prefix().to_string(),
-                    title: doc
-                        .frontmatter
-                        .title
-                        .clone()
-                        .unwrap_or_else(|| "Untitled".into()),
+                    doc_type: node.doc_type.clone(),
+                    title: node.title.clone(),
                 });
 
                 if let Some(refs) = adjacency.get(&current_id) {
@@ -333,7 +329,7 @@ pub fn generate_audit(
 #[cfg(test)]
 mod tests {
     use super::*;
-    use crate::document::{DocType, Frontmatter};
+    use straymark_core::document::{DocType, Frontmatter};
     use std::path::PathBuf;
 
     fn make_doc(filename: &str, doc_type: DocType, fm: Frontmatter) -> StrayMarkDocument {

cli/src/audit_engine.rs

@@ -16,7 +16,7 @@ use chrono::Local;
 use colored::Colorize;
 use std::path::{Path, PathBuf};
 
-use crate::document;
+use straymark_core::document;
 use crate::prompts;
 use crate::utils;