@unbrained/pm-cli 2026.10.11 → 2026.10.13

package/dist/sdk/governance/assurance-action.d.ts

@@ -12,84 +12,84 @@ export declare const ASSURANCE_DECLARATION_KINDS: readonly ["measurement", "asse
 export type AssuranceAction = (typeof ASSURANCE_ACTIONS)[number];
 /** Transport-neutral assurance action request. */
 export interface AssuranceActionInput {
-    /** CRUD, evaluation, or verdict-history action. */
-    action: string;
-    /** Declaration kind for registry actions. */
-    kind?: string;
-    /** Declaration id, gate id, or verdict gate filter. */
-    id?: string;
-    /** JSON object or serialized JSON declaration for put. */
-    definition?: unknown;
-    /** Lifecycle trigger for gate evaluation. */
-    trigger?: string;
-    /** Explicit commit, tree, or snapshot identity. */
-    tree?: string;
-    /** Verdict-history gate filter when id is used by another host field. */
-    gate?: string;
-    /** Maximum newest durable verdicts returned. */
-    limit?: number | string;
-    /** Evaluate without appending an immutable verdict. */
-    dry_run?: boolean;
-    /** Retain the complete mutation receipt; assurance receipts are complete by default. */
-    fullChangedFields?: boolean;
-    /** Project declaration mutations to their stable id. */
-    idOnly?: boolean;
-    /** Explicit author override. */
-    author?: string;
-    /** Audited mutation rationale. */
-    message?: string;
-    /** Built-in preset selected for preview or application. */
-    preset?: string;
-    /** pm item that owns preset or derived assertions. */
-    owner?: string;
-    /** Explicitly accept derived proposals. */
-    apply?: boolean;
-    /** Explicit next assertion enforcement level. */
-    enforcement?: string;
+/** CRUD, evaluation, or verdict-history action. */
+action: string;
+/** Declaration kind for registry actions. */
+kind?: string;
+/** Declaration id, gate id, or verdict gate filter. */
+id?: string;
+/** JSON object or serialized JSON declaration for put. */
+definition?: unknown;
+/** Lifecycle trigger for gate evaluation. */
+trigger?: string;
+/** Explicit commit, tree, or snapshot identity. */
+tree?: string;
+/** Verdict-history gate filter when id is used by another host field. */
+gate?: string;
+/** Maximum newest durable verdicts returned. */
+limit?: number | string;
+/** Evaluate without appending an immutable verdict. */
+dry_run?: boolean;
+/** Retain the complete mutation receipt; assurance receipts are complete by default. */
+fullChangedFields?: boolean;
+/** Project declaration mutations to their stable id. */
+idOnly?: boolean;
+/** Explicit author override. */
+author?: string;
+/** Audited mutation rationale. */
+message?: string;
+/** Built-in preset selected for preview or application. */
+preset?: string;
+/** pm item that owns preset or derived assertions. */
+owner?: string;
+/** Explicitly accept derived proposals. */
+apply?: boolean;
+/** Explicit next assertion enforcement level. */
+enforcement?: string;
 }
 /** Embedding-host capabilities used only while evaluating assurance actions. */
 export interface AssuranceActionRuntimeOptions {
-    /** Workspace adapters and provider capabilities supplied by an SDK host. */
-    workspace?: Omit<CreateAssuranceWorkspaceContextOptions, "tree_id" | "trigger">;
+/** Workspace adapters and provider capabilities supplied by an SDK host. */
+workspace?: Omit<CreateAssuranceWorkspaceContextOptions, "tree_id" | "trigger">;
 }
 /** Result union returned by transport-neutral assurance execution. */
 export type AssuranceActionResult = AssuranceDeclaration | AssuranceMutationReceipt | AssuranceGateVerdict | AssuranceBundleMutationReceipt | AssurancePreset | DefectChangeRiskReport | DefectRecurrenceCoverageReport | {
-    items: AssuranceDerivedProposal[];
-    count: number;
-    applied?: AssuranceBundleMutationReceipt;
+items: AssuranceDerivedProposal[];
+count: number;
+applied?: AssuranceBundleMutationReceipt;
 } | {
-    items: Array<{
-        id: AssurancePresetId;
-        title: string;
-        description: string;
-    }>;
-    count: number;
-    row_contract: {
-        row_keys: ["items"];
-        jq_selector: ".items[]";
-    };
+items: Array<{
+id: AssurancePresetId;
+title: string;
+description: string;
+}>;
+count: number;
+row_contract: {
+row_keys: ["items"];
+jq_selector: ".items[]";
+};
 } | {
-    id: string;
+id: string;
 } | {
-    /** Registry declarations. */
-    items: AssuranceDeclaration[];
-    /** Number of declarations. */
-    count: number;
-    /** Stable row-selection contract. */
-    row_contract: {
-        row_keys: ["items"];
-        jq_selector: ".items[]";
-    };
+/** Registry declarations. */
+items: AssuranceDeclaration[];
+/** Number of declarations. */
+count: number;
+/** Stable row-selection contract. */
+row_contract: {
+row_keys: ["items"];
+jq_selector: ".items[]";
+};
 } | {
-    /** Durable gate verdicts. */
-    items: AssuranceGateVerdict[];
-    /** Number of verdicts. */
-    count: number;
-    /** Stable row-selection contract. */
-    row_contract: {
-        row_keys: ["items"];
-        jq_selector: ".items[]";
-    };
+/** Durable gate verdicts. */
+items: AssuranceGateVerdict[];
+/** Number of verdicts. */
+count: number;
+/** Stable row-selection contract. */
+row_contract: {
+row_keys: ["items"];
+jq_selector: ".items[]";
+};
 };
 /** Execute one assurance request through the public assurance SDK primitives. */
 export declare function runAssuranceAction(input: AssuranceActionInput, global?: Pick<GlobalOptions, "path">, runtime?: AssuranceActionRuntimeOptions): Promise<AssuranceActionResult>;

package/dist/sdk/governance/assurance-action.js

@@ -1,2 +1,2 @@
-(function(){try{var e=typeof window<"u"?window:typeof global<"u"?global:typeof globalThis<"u"?globalThis:typeof self<"u"?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="0311387c-c7c3-598c-961c-489e8a94ad29")}catch{}})();import{createHash}from"node:crypto";import{EXIT_CODE}from"../../core/shared/constants.js";import{PmCliError}from"../../core/shared/errors.js";import{stableStringify}from"../../core/shared/serialization.js";import{ASSURANCE_GATE_TRIGGERS,evaluateAssuranceGate,getAssuranceDeclaration,listAssuranceDeclarations,listAssuranceVerdicts,putAssuranceDeclaration,recordAssuranceVerdict,removeAssuranceDeclaration}from"./assurance.js";import{ASSURANCE_PRESET_IDS,acceptAssuranceProposals,applyAssurancePreset,createAssurancePreset,deriveAssuranceProposals,promoteAssuranceAssertion}from"./assurance-presets.js";import{MAX_ASSURANCE_VERDICT_LIMIT}from"./assurance-limits.js";import{normalizeAssuranceEvaluation,normalizeAssuranceMutation}from"./assurance-mutation-error.js";import{createAssuranceWorkspaceContext}from"./assurance-runtime.js";import{resolvePmRoot}from"../runtime-primitives.js";import{parseRuntimeInteger,readRuntimeString}from"../runtime-input.js";import{analyzeDefectChangeRisk,buildDefectRecurrenceIndex,parseDefectChangeRiskRequest}from"./defect-recurrence.js";import{defectRecurrenceItemSignals}from"./defect-recurrence-signals.js";import{readDefectRecurrenceRecord}from"./defect-recurrence-graph.js";import{analyzeDefectRecurrenceCoverage,parseDefectRecurrenceCoverageRequest}from"./defect-recurrence-coverage.js";import{createUnknownSubcommandError}from"../agent/subcommand-recovery.js";let riskIndexCache;const ASSURANCE_ACTIONS=["list","show","put","remove","run","verdicts","presets","apply","derive","promote","risk","lineages"],ASSURANCE_DECLARATION_KINDS=["measurement","assertion","gate"];function parseAction(value){if(ASSURANCE_ACTIONS.includes(value))return value;throw createUnknownSubcommandError({command_path:"assurance",token:value,allowed:ASSURANCE_ACTIONS,display_name:"assurance action"})}function missingAssuranceArgument(operand,detail,example){throw new PmCliError(detail,EXIT_CODE.USAGE,{code:"missing_required_argument",required:`Provide the missing assurance operand: ${operand}.`,examples:[example],recovery:{missing:[operand]}})}function parseKind(value){if(!value)return missingAssuranceArgument("kind",`Assurance declaration kind is required. Expected: ${ASSURANCE_DECLARATION_KINDS.join(", ")}`,"pm assurance list measurement");if(ASSURANCE_DECLARATION_KINDS.includes(value))return value;throw new PmCliError(`Assurance declaration kind is required. Expected: ${ASSURANCE_DECLARATION_KINDS.join(", ")}`,EXIT_CODE.USAGE)}function parsePreset(value){if(!value)return missingAssuranceArgument("preset",`Assurance preset is required. Expected: ${ASSURANCE_PRESET_IDS.join(", ")}`,"pm assurance apply software-delivery --owner <pm-item-id>");if(ASSURANCE_PRESET_IDS.includes(value))return value;throw new PmCliError(`Assurance preset is required. Expected: ${ASSURANCE_PRESET_IDS.join(", ")}`,EXIT_CODE.USAGE)}function requireOwner(input){return input.owner?.trim()?input.owner.trim():missingAssuranceArgument("owner","assurance preset and derivation actions require --owner <pm-item-id>","pm assurance apply software-delivery --owner <pm-item-id>")}function parseDefinition(kind,value){let parsed=value;if(typeof value=="string")if(!value.trim())parsed=void 0;else try{parsed=JSON.parse(value)}catch(error){throw new PmCliError("assurance definition must be valid JSON",EXIT_CODE.USAGE,{reason:error instanceof Error?error.message:"invalid_json"})}if(typeof parsed!="object"||parsed===null||Array.isArray(parsed))throw new PmCliError("assurance put requires a JSON object definition",EXIT_CODE.USAGE);return parsed}async function readDocument(pmRoot){const[measurements,assertions,gates]=await Promise.all([listAssuranceDeclarations(pmRoot,"measurement"),listAssuranceDeclarations(pmRoot,"assertion"),listAssuranceDeclarations(pmRoot,"gate")]);return{version:1,measurements:measurements.items,assertions:assertions.items,gates:gates.items}}function projectMutationReceipt(receipt,idOnly){return idOnly===!0?{id:receipt.id}:receipt}async function authorizedDecisionIds(pmRoot,definition){const decisionId=definition.authorization_decision;if(!decisionId)return[];const context=await createAssuranceWorkspaceContext(pmRoot,{include_history:!1,resolve_tree:!1}),decision=context.items.find(item=>item.id===decisionId),terminalStatuses=new Set(context.terminal_statuses);if(!decision||decision.type.toLowerCase()!=="decision"||!terminalStatuses.has(decision.status))throw new PmCliError(`Assurance authorization ${decisionId} must name a terminal Decision item`,EXIT_CODE.USAGE);return[decision.id]}async function runVerdictsAction(input,pmRoot){const limit=parseRuntimeInteger(input.limit,"assurance verdict limit");if(limit!==void 0&&(limit<1||limit>MAX_ASSURANCE_VERDICT_LIMIT))throw new PmCliError(`assurance verdict limit must be an integer from 1 through ${MAX_ASSURANCE_VERDICT_LIMIT}`,EXIT_CODE.USAGE);const items=await listAssuranceVerdicts(pmRoot,{gate_id:input.id??input.gate,limit});return{items,count:items.length,row_contract:{row_keys:["items"],jq_selector:".items[]"}}}async function runAdoptionAction(action,input,pmRoot){if(action==="presets"){if(input.preset??input.id)return createAssurancePreset(parsePreset(input.preset??input.id),requireOwner(input));const items=ASSURANCE_PRESET_IDS.map(id=>{const preset=createAssurancePreset(id,"pm-owner");return{id,title:preset.title,description:preset.description}});return{items,count:items.length,row_contract:{row_keys:["items"],jq_selector:".items[]"}}}if(action==="apply")return normalizeAssuranceMutation(()=>applyAssurancePreset(pmRoot,parsePreset(input.preset??input.id),requireOwner(input),{author:input.author,message:input.message}));if(action==="derive"){const proposals=await deriveAssuranceProposals(await createAssuranceWorkspaceContext(pmRoot,{resolve_tree:!1,trigger:"derive"}),requireOwner(input)),applied=input.apply?await normalizeAssuranceMutation(()=>acceptAssuranceProposals(pmRoot,proposals,{author:input.author,message:input.message??"Accept observation-derived assurance proposals"})):void 0;return{items:proposals,count:proposals.length,...applied?{applied}:{}}}if(!input.id)return missingAssuranceArgument("assertion-id","assurance promote requires an assertion id","pm assurance promote <assertion-id> --enforcement warn");if(input.enforcement!=="warn"&&input.enforcement!=="block")throw new PmCliError("assurance promote requires --enforcement warn|block",EXIT_CODE.USAGE);const definition=await getAssuranceDeclaration(pmRoot,"assertion",input.id);return normalizeAssuranceMutation(()=>promoteAssuranceAssertion(pmRoot,definition,input.enforcement,{author:input.author,message:input.message}))}async function runGateAction(input,pmRoot,runtime){if(!input.id)return missingAssuranceArgument("gate-id","assurance run requires a gate id","pm assurance run <gate-id> --trigger ci --dry-run");const gateId=input.id;if(!input.trigger)throw new PmCliError("assurance run requires a trigger",EXIT_CODE.USAGE);if(!ASSURANCE_GATE_TRIGGERS.includes(input.trigger))throw new PmCliError(`Unknown assurance trigger ${input.trigger}. Expected: ${ASSURANCE_GATE_TRIGGERS.join(", ")}`,EXIT_CODE.USAGE);const trigger=input.trigger,[document,workspaceContext]=await Promise.all([readDocument(pmRoot),createAssuranceWorkspaceContext(pmRoot,{...runtime.workspace,tree_id:input.tree,trigger})]),verdict=await normalizeAssuranceEvaluation(()=>evaluateAssuranceGate(gateId,document,workspaceContext,{trigger,dry_run:input.dry_run===!0}));return verdict.dry_run||await recordAssuranceVerdict(pmRoot,verdict,{author:input.author,message:input.message}),verdict}function throwRiskUsageError(error){throw error instanceof PmCliError?error:new PmCliError(error instanceof Error?error.message:"assurance risk request is invalid",EXIT_CODE.USAGE)}function parseRecurrenceActionRequest(input){if(input.limit!==void 0)throw new PmCliError(`assurance ${input.action} does not accept --limit; set limit inside the definition`,EXIT_CODE.USAGE);let definition=input.definition;if(typeof definition=="string")try{definition=JSON.parse(definition)}catch(error){throw new PmCliError(`assurance ${input.action} definition must be valid JSON`,EXIT_CODE.USAGE,{reason:error instanceof Error?error.message:"invalid_json"})}try{return input.action==="lineages"?parseDefectRecurrenceCoverageRequest(definition):parseDefectChangeRiskRequest(definition)}catch(error){return throwRiskUsageError(error)}}function changedRiskItemIds(cached,current){const changed=new Set;for(const[itemId,itemFingerprint]of current)cached.item_fingerprints.get(itemId)!==itemFingerprint&&changed.add(itemId);for(const itemId of cached.item_fingerprints.keys())current.has(itemId)||changed.add(itemId);return changed}function buildCachedRiskIndex(pmRoot,request,items){const policySerialized=stableStringify(request.policy),cached=riskIndexCache?.pm_root===pmRoot?riskIndexCache:void 0,itemFingerprints=new Map(items.map(item=>[item.id,createHash("sha256").update(stableStringify([defectRecurrenceItemSignals(item),readDefectRecurrenceRecord(item)])).digest("hex")])),reusable=cached?.policy_serialized===policySerialized?cached:void 0,changed=reusable?changedRiskItemIds(reusable,itemFingerprints):new Set,index=buildDefectRecurrenceIndex(request.policy,reusable?items.filter(item=>changed.has(item.id)):items,reusable?{previous_index:reusable.index,changed_item_ids:[...changed]}:{});return riskIndexCache={pm_root:pmRoot,policy_serialized:policySerialized,item_fingerprints:itemFingerprints,index},index}async function runRecurrenceAction(input,pmRoot){const request=parseRecurrenceActionRequest(input),context=await createAssuranceWorkspaceContext(pmRoot,{strict_read:!0,include_history:!1,resolve_tree:!1});try{return"change"in request?analyzeDefectChangeRisk(buildCachedRiskIndex(pmRoot,request,context.items),request.change,{cursor:request.cursor,limit:request.limit}):analyzeDefectRecurrenceCoverage(request.policy,context.items,request)}catch(error){return throwRiskUsageError(error)}}async function runAssuranceAction(input,global2={},runtime={}){const action=parseAction(input.action),pmRoot=resolvePmRoot(process.cwd(),global2.path);if(action==="presets"||action==="apply"||action==="derive"||action==="promote")return runAdoptionAction(action,input,pmRoot);if(action==="verdicts")return runVerdictsAction(input,pmRoot);if(action==="run")return runGateAction(input,pmRoot,runtime);if(["risk","lineages"].includes(action))return runRecurrenceAction(input,pmRoot);const kind=parseKind(input.kind);if(action==="list")return listAssuranceDeclarations(pmRoot,kind);if(!input.id)return missingAssuranceArgument("id",`assurance ${action} requires an id`,`pm assurance ${action} ${kind} <id>`);const id=input.id;if(action==="show")return getAssuranceDeclaration(pmRoot,kind,id);if(action==="remove"){const receipt2=await normalizeAssuranceMutation(()=>removeAssuranceDeclaration(pmRoot,kind,id,{author:input.author,message:input.message}));return projectMutationReceipt(receipt2,input.idOnly)}const definition=parseDefinition(kind,input.definition);if(definition.id!==id)throw new PmCliError(`Assurance definition id ${definition.id} does not match requested id ${id}`,EXIT_CODE.USAGE);const mutationOptions={author:input.author,message:input.message,...kind==="assertion"?{authorized_decision_ids:await authorizedDecisionIds(pmRoot,definition)}:{}},receipt=await normalizeAssuranceMutation(()=>putAssuranceDeclaration(pmRoot,kind,definition,mutationOptions));return projectMutationReceipt(receipt,input.idOnly)}function runAssuranceDispatch(args,options,global2){const merged={...args,...options};return runAssuranceAction({action:readRuntimeString(merged,"subcommand")??readRuntimeString(merged,"assuranceAction")??readRuntimeString(merged,"operation")??"",kind:readRuntimeString(merged,"kind"),id:readRuntimeString(merged,"id"),definition:merged.definition,trigger:readRuntimeString(merged,"trigger"),tree:readRuntimeString(merged,"treeId")??readRuntimeString(merged,"tree"),gate:readRuntimeString(merged,"gate"),limit:parseRuntimeInteger(merged.limit,"assurance verdict limit"),dry_run:merged.dryRun===!0||merged.dry_run===!0,fullChangedFields:merged.fullChangedFields===!0,idOnly:merged.idOnly===!0,author:readRuntimeString(merged,"author"),message:readRuntimeString(merged,"message"),preset:readRuntimeString(merged,"preset"),owner:readRuntimeString(merged,"owner"),apply:merged.apply===!0,enforcement:readRuntimeString(merged,"enforcement")},global2)}export{ASSURANCE_ACTIONS,ASSURANCE_DECLARATION_KINDS,runAssuranceAction,runAssuranceDispatch};
+(function(){try{var e=typeof window<"u"?window:typeof global<"u"?global:typeof globalThis<"u"?globalThis:typeof self<"u"?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="676125a5-e16e-5fa2-819f-f4028dc0c3c2")}catch{}})();import{createHash}from"node:crypto";import{EXIT_CODE}from"../../core/shared/constants.js";import{PmCliError}from"../../core/shared/errors.js";import{stableStringify}from"../../core/shared/serialization.js";import{ASSURANCE_GATE_TRIGGERS,evaluateAssuranceGate,getAssuranceDeclaration,listAssuranceDeclarations,listAssuranceVerdicts,putAssuranceDeclaration,recordAssuranceVerdict,removeAssuranceDeclaration}from"./assurance.js";import{ASSURANCE_PRESET_IDS,acceptAssuranceProposals,applyAssurancePreset,createAssurancePreset,deriveAssuranceProposals,promoteAssuranceAssertion}from"./assurance-presets.js";import{MAX_ASSURANCE_VERDICT_LIMIT}from"./assurance-limits.js";import{normalizeAssuranceEvaluation,normalizeAssuranceMutation}from"./assurance-mutation-error.js";import{createAssuranceWorkspaceContext}from"./assurance-runtime.js";import{resolvePmRoot}from"../runtime-primitives.js";import{parseRuntimeInteger,readRuntimeString}from"../runtime-input.js";import{analyzeDefectChangeRisk,DefectRecurrencePolicyParseError,buildDefectRecurrenceIndex,parseDefectChangeRiskRequest}from"./defect-recurrence.js";import{defectRecurrenceItemSignals}from"./defect-recurrence-signals.js";import{readDefectRecurrenceRecord}from"./defect-recurrence-graph.js";import{analyzeDefectRecurrenceCoverage,parseDefectRecurrenceCoverageRequest}from"./defect-recurrence-coverage.js";import{createUnknownSubcommandError}from"../agent/subcommand-recovery.js";let riskIndexCache;const ASSURANCE_ACTIONS=["list","show","put","remove","run","verdicts","presets","apply","derive","promote","risk","lineages"],ASSURANCE_DECLARATION_KINDS=["measurement","assertion","gate"];function parseAction(value){if(ASSURANCE_ACTIONS.includes(value))return value;throw createUnknownSubcommandError({command_path:"assurance",token:value,allowed:ASSURANCE_ACTIONS,display_name:"assurance action"})}function missingAssuranceArgument(operand,detail,example){throw new PmCliError(detail,EXIT_CODE.USAGE,{code:"missing_required_argument",required:`Provide the missing assurance operand: ${operand}.`,examples:[example],recovery:{missing:[operand]}})}function parseKind(value){if(!value)return missingAssuranceArgument("kind",`Assurance declaration kind is required. Expected: ${ASSURANCE_DECLARATION_KINDS.join(", ")}`,"pm assurance list measurement");if(ASSURANCE_DECLARATION_KINDS.includes(value))return value;throw new PmCliError(`Assurance declaration kind is required. Expected: ${ASSURANCE_DECLARATION_KINDS.join(", ")}`,EXIT_CODE.USAGE)}function parsePreset(value){if(!value)return missingAssuranceArgument("preset",`Assurance preset is required. Expected: ${ASSURANCE_PRESET_IDS.join(", ")}`,"pm assurance apply software-delivery --owner <pm-item-id>");if(ASSURANCE_PRESET_IDS.includes(value))return value;throw new PmCliError(`Assurance preset is required. Expected: ${ASSURANCE_PRESET_IDS.join(", ")}`,EXIT_CODE.USAGE)}function requireOwner(input){return input.owner?.trim()?input.owner.trim():missingAssuranceArgument("owner","assurance preset and derivation actions require --owner <pm-item-id>","pm assurance apply software-delivery --owner <pm-item-id>")}function parseDefinition(kind,value){let parsed=value;if(typeof value=="string")if(!value.trim())parsed=void 0;else try{parsed=JSON.parse(value)}catch(error){throw new PmCliError("assurance definition must be valid JSON",EXIT_CODE.USAGE,{reason:error instanceof Error?error.message:"invalid_json"})}if(typeof parsed!="object"||parsed===null||Array.isArray(parsed))throw new PmCliError("assurance put requires a JSON object definition",EXIT_CODE.USAGE);return parsed}async function readDocument(pmRoot){const[measurements,assertions,gates]=await Promise.all([listAssuranceDeclarations(pmRoot,"measurement"),listAssuranceDeclarations(pmRoot,"assertion"),listAssuranceDeclarations(pmRoot,"gate")]);return{version:1,measurements:measurements.items,assertions:assertions.items,gates:gates.items}}function projectMutationReceipt(receipt,idOnly){return idOnly===!0?{id:receipt.id}:receipt}async function authorizedDecisionIds(pmRoot,definition){const decisionId=definition.authorization_decision;if(!decisionId)return[];const context=await createAssuranceWorkspaceContext(pmRoot,{include_history:!1,resolve_tree:!1}),decision=context.items.find(item=>item.id===decisionId),terminalStatuses=new Set(context.terminal_statuses);if(!decision||decision.type.toLowerCase()!=="decision"||!terminalStatuses.has(decision.status))throw new PmCliError(`Assurance authorization ${decisionId} must name a terminal Decision item`,EXIT_CODE.USAGE);return[decision.id]}async function runVerdictsAction(input,pmRoot){const limit=parseRuntimeInteger(input.limit,"assurance verdict limit");if(limit!==void 0&&(limit<1||limit>MAX_ASSURANCE_VERDICT_LIMIT))throw new PmCliError(`assurance verdict limit must be an integer from 1 through ${MAX_ASSURANCE_VERDICT_LIMIT}`,EXIT_CODE.USAGE);const items=await listAssuranceVerdicts(pmRoot,{gate_id:input.id??input.gate,limit});return{items,count:items.length,row_contract:{row_keys:["items"],jq_selector:".items[]"}}}async function runAdoptionAction(action,input,pmRoot){if(action==="presets"){if(input.preset??input.id)return createAssurancePreset(parsePreset(input.preset??input.id),requireOwner(input));const items=ASSURANCE_PRESET_IDS.map(id=>{const preset=createAssurancePreset(id,"pm-owner");return{id,title:preset.title,description:preset.description}});return{items,count:items.length,row_contract:{row_keys:["items"],jq_selector:".items[]"}}}if(action==="apply")return normalizeAssuranceMutation(()=>applyAssurancePreset(pmRoot,parsePreset(input.preset??input.id),requireOwner(input),{author:input.author,message:input.message}));if(action==="derive"){const proposals=await deriveAssuranceProposals(await createAssuranceWorkspaceContext(pmRoot,{resolve_tree:!1,trigger:"derive"}),requireOwner(input)),applied=input.apply?await normalizeAssuranceMutation(()=>acceptAssuranceProposals(pmRoot,proposals,{author:input.author,message:input.message??"Accept observation-derived assurance proposals"})):void 0;return{items:proposals,count:proposals.length,...applied?{applied}:{}}}if(!input.id)return missingAssuranceArgument("assertion-id","assurance promote requires an assertion id","pm assurance promote <assertion-id> --enforcement warn");if(input.enforcement!=="warn"&&input.enforcement!=="block")throw new PmCliError("assurance promote requires --enforcement warn|block",EXIT_CODE.USAGE);const definition=await getAssuranceDeclaration(pmRoot,"assertion",input.id);return normalizeAssuranceMutation(()=>promoteAssuranceAssertion(pmRoot,definition,input.enforcement,{author:input.author,message:input.message}))}async function runGateAction(input,pmRoot,runtime){if(!input.id)return missingAssuranceArgument("gate-id","assurance run requires a gate id","pm assurance run <gate-id> --trigger ci --dry-run");const gateId=input.id;if(!input.trigger)throw new PmCliError("assurance run requires a trigger",EXIT_CODE.USAGE);if(!ASSURANCE_GATE_TRIGGERS.includes(input.trigger))throw new PmCliError(`Unknown assurance trigger ${input.trigger}. Expected: ${ASSURANCE_GATE_TRIGGERS.join(", ")}`,EXIT_CODE.USAGE);const trigger=input.trigger,[document,workspaceContext]=await Promise.all([readDocument(pmRoot),createAssuranceWorkspaceContext(pmRoot,{...runtime.workspace,tree_id:input.tree,trigger})]),verdict=await normalizeAssuranceEvaluation(()=>evaluateAssuranceGate(gateId,document,workspaceContext,{trigger,dry_run:input.dry_run===!0}));return verdict.dry_run||await recordAssuranceVerdict(pmRoot,verdict,{author:input.author,message:input.message}),verdict}function throwRiskUsageError(error){throw error instanceof PmCliError?error:new PmCliError(error instanceof Error?error.message:"assurance risk request is invalid",EXIT_CODE.USAGE)}function parseRecurrenceActionRequest(input){if(input.limit!==void 0)throw new PmCliError(`assurance ${input.action} does not accept --limit; set limit inside the definition`,EXIT_CODE.USAGE);let definition=input.definition;if(typeof definition=="string")try{definition=JSON.parse(definition)}catch(error){throw new PmCliError(`assurance ${input.action} definition must be valid JSON`,EXIT_CODE.USAGE,{reason:error instanceof Error?error.message:"invalid_json"})}try{return input.action==="lineages"?parseDefectRecurrenceCoverageRequest(definition):parseDefectChangeRiskRequest(definition)}catch(error){if(input.action==="risk"&&error instanceof DefectRecurrencePolicyParseError)throw new PmCliError(error.message,EXIT_CODE.USAGE,{required:"Supply definition.policy with the project's declared recurrence policy and definition.change with the proposed change; no policy is inferred.",recovery:{suggested_retry:`pm assurance ${input.action} --help`,suggested_retry_args:["assurance",input.action,"--help"]}});return throwRiskUsageError(error)}}function changedRiskItemIds(cached,current){const changed=new Set;for(const[itemId,itemFingerprint]of current)cached.item_fingerprints.get(itemId)!==itemFingerprint&&changed.add(itemId);for(const itemId of cached.item_fingerprints.keys())current.has(itemId)||changed.add(itemId);return changed}function buildCachedRiskIndex(pmRoot,request,items){const policySerialized=stableStringify(request.policy),cached=riskIndexCache?.pm_root===pmRoot?riskIndexCache:void 0,itemFingerprints=new Map(items.map(item=>[item.id,createHash("sha256").update(stableStringify([defectRecurrenceItemSignals(item),readDefectRecurrenceRecord(item)])).digest("hex")])),reusable=cached?.policy_serialized===policySerialized?cached:void 0,changed=reusable?changedRiskItemIds(reusable,itemFingerprints):new Set,index=buildDefectRecurrenceIndex(request.policy,reusable?items.filter(item=>changed.has(item.id)):items,reusable?{previous_index:reusable.index,changed_item_ids:[...changed]}:{});return riskIndexCache={pm_root:pmRoot,policy_serialized:policySerialized,item_fingerprints:itemFingerprints,index},index}async function runRecurrenceAction(input,pmRoot){const request=parseRecurrenceActionRequest(input),context=await createAssuranceWorkspaceContext(pmRoot,{strict_read:!0,include_history:!1,resolve_tree:!1});try{return"change"in request?analyzeDefectChangeRisk(buildCachedRiskIndex(pmRoot,request,context.items),request.change,{cursor:request.cursor,limit:request.limit}):analyzeDefectRecurrenceCoverage(request.policy,context.items,request)}catch(error){return throwRiskUsageError(error)}}async function runAssuranceAction(input,global2={},runtime={}){const action=parseAction(input.action),pmRoot=resolvePmRoot(process.cwd(),global2.path);if(action==="presets"||action==="apply"||action==="derive"||action==="promote")return runAdoptionAction(action,input,pmRoot);if(action==="verdicts")return runVerdictsAction(input,pmRoot);if(action==="run")return runGateAction(input,pmRoot,runtime);if(["risk","lineages"].includes(action))return runRecurrenceAction(input,pmRoot);const kind=parseKind(input.kind);if(action==="list")return listAssuranceDeclarations(pmRoot,kind);if(!input.id)return missingAssuranceArgument("id",`assurance ${action} requires an id`,`pm assurance ${action} ${kind} <id>`);const id=input.id;if(action==="show")return getAssuranceDeclaration(pmRoot,kind,id);if(action==="remove"){const receipt2=await normalizeAssuranceMutation(()=>removeAssuranceDeclaration(pmRoot,kind,id,{author:input.author,message:input.message}));return projectMutationReceipt(receipt2,input.idOnly)}const definition=parseDefinition(kind,input.definition);if(definition.id!==id)throw new PmCliError(`Assurance definition id ${definition.id} does not match requested id ${id}`,EXIT_CODE.USAGE);const mutationOptions={author:input.author,message:input.message,...kind==="assertion"?{authorized_decision_ids:await authorizedDecisionIds(pmRoot,definition)}:{}},receipt=await normalizeAssuranceMutation(()=>putAssuranceDeclaration(pmRoot,kind,definition,mutationOptions));return projectMutationReceipt(receipt,input.idOnly)}function runAssuranceDispatch(args,options,global2){const merged={...args,...options};return runAssuranceAction({action:readRuntimeString(merged,"subcommand")??readRuntimeString(merged,"assuranceAction")??readRuntimeString(merged,"operation")??"",kind:readRuntimeString(merged,"kind"),id:readRuntimeString(merged,"id"),definition:merged.definition,trigger:readRuntimeString(merged,"trigger"),tree:readRuntimeString(merged,"treeId")??readRuntimeString(merged,"tree"),gate:readRuntimeString(merged,"gate"),limit:parseRuntimeInteger(merged.limit,"assurance verdict limit"),dry_run:merged.dryRun===!0||merged.dry_run===!0,fullChangedFields:merged.fullChangedFields===!0,idOnly:merged.idOnly===!0,author:readRuntimeString(merged,"author"),message:readRuntimeString(merged,"message"),preset:readRuntimeString(merged,"preset"),owner:readRuntimeString(merged,"owner"),apply:merged.apply===!0,enforcement:readRuntimeString(merged,"enforcement")},global2)}export{ASSURANCE_ACTIONS,ASSURANCE_DECLARATION_KINDS,runAssuranceAction,runAssuranceDispatch};
 //# sourceMappingURL=assurance-action.js.map

package/dist/sdk/governance/assurance-mutation-error.d.ts

@@ -1,53 +1,53 @@
 /** Machine-readable location of a refused assurance evaluation. */
 export interface AssuranceEvaluationRefusalContext {
-    /** Gate being evaluated. */
-    gate_id?: string;
-    /** Assertion whose measurement failed. */
-    assertion_id?: string;
-    /** Measurement whose source failed. */
-    measurement_id?: string;
-    /** Measurement source discriminant. */
-    source_kind?: string;
-    /** Field selected from a graph, validate, or health result. */
-    field?: string;
-    /** Validate or health check selected by the source. */
-    check?: string;
+/** Gate being evaluated. */
+gate_id?: string;
+/** Assertion whose measurement failed. */
+assertion_id?: string;
+/** Measurement whose source failed. */
+measurement_id?: string;
+/** Measurement source discriminant. */
+source_kind?: string;
+/** Field selected from a graph, validate, or health result. */
+field?: string;
+/** Validate or health check selected by the source. */
+check?: string;
 }
 /** Machine-readable location of a failed measurement source resolution. */
 export interface AssuranceSourceResolutionContext {
-    /** Measurement that owns the failed source, once evaluation identifies it. */
-    measurement_id?: string;
-    /** Measurement source discriminant. */
-    source_kind: string;
-    /** Field selected from the source result. */
-    field: string;
-    /** Optional validate or health check selector. */
-    check?: string;
+/** Measurement that owns the failed source, once evaluation identifies it. */
+measurement_id?: string;
+/** Measurement source discriminant. */
+source_kind: string;
+/** Field selected from the source result. */
+field: string;
+/** Optional validate or health check selector. */
+check?: string;
 }
 /** Expected declaration-validation or mutation-policy refusal. */
 export declare class AssuranceMutationRefusalError extends TypeError {
-    /** Create one typed refusal while retaining TypeError compatibility for SDK callers. */
-    constructor(message: string);
+/** Create one typed refusal while retaining TypeError compatibility for SDK callers. */
+constructor(message: string);
 }
 /** Expected gate-policy refusal caused by an incomplete or disallowed provider contract. */
 export declare class AssuranceEvaluationRefusalError extends TypeError {
-    /** Structured evaluation location retained across CLI, SDK, and MCP. */
-    readonly context: AssuranceEvaluationRefusalContext;
-    /** Create one typed refusal while retaining TypeError compatibility for SDK callers. */
-    constructor(message: string, context?: AssuranceEvaluationRefusalContext);
+/** Structured evaluation location retained across CLI, SDK, and MCP. */
+readonly context: AssuranceEvaluationRefusalContext;
+/** Create one typed refusal while retaining TypeError compatibility for SDK callers. */
+constructor(message: string, context?: AssuranceEvaluationRefusalContext);
 }
 /** Expected failure to resolve one declared external measurement source. */
 export declare class AssuranceSourceResolutionError extends TypeError {
-    /** Measurement that owns the failed source, once evaluation identifies it. */
-    readonly measurement_id?: string;
-    /** Measurement source discriminant. */
-    readonly source_kind: string;
-    /** Field selected from the source result. */
-    readonly field: string;
-    /** Optional validate or health check selector. */
-    readonly check?: string;
-    /** Create one source-local refusal before gate context is attached. */
-    constructor(message: string, context: AssuranceSourceResolutionContext);
+/** Measurement that owns the failed source, once evaluation identifies it. */
+readonly measurement_id?: string;
+/** Measurement source discriminant. */
+readonly source_kind: string;
+/** Field selected from the source result. */
+readonly field: string;
+/** Optional validate or health check selector. */
+readonly check?: string;
+/** Create one source-local refusal before gate context is attached. */
+constructor(message: string, context: AssuranceSourceResolutionContext);
 }
 /** Normalize only expected assurance mutation refusals for CLI and MCP hosts. */
 export declare function normalizeAssuranceMutation<T>(operation: () => Promise<T>): Promise<T>;

package/dist/sdk/governance/assurance-presets.d.ts

@@ -11,44 +11,44 @@ export declare const ASSURANCE_PRESET_IDS: readonly ["software-delivery", "resea
 export type AssurancePresetId = (typeof ASSURANCE_PRESET_IDS)[number];
 /** Readable preset bundle before or after application. */
 export interface AssurancePreset {
-    /** Stable preset id. */
-    id: AssurancePresetId;
-    /** Human-readable project shape. */
-    title: string;
-    /** Why the initial contract is useful. */
-    description: string;
-    /** Ordinary declarations that become editable workspace data. */
-    declarations: AssuranceDeclarationBundle;
+/** Stable preset id. */
+id: AssurancePresetId;
+/** Human-readable project shape. */
+title: string;
+/** Why the initial contract is useful. */
+description: string;
+/** Ordinary declarations that become editable workspace data. */
+declarations: AssuranceDeclarationBundle;
 }
 /** One observe-level candidate produced from authoritative workspace state. */
 export interface AssuranceDerivedProposal {
-    /** Stable proposal id. */
-    id: string;
-    /** Population used to calculate the proposed threshold. */
-    population_size: number;
-    /** Scope applied while measuring. */
-    scope: AssuranceScope;
-    /** Observed value proposed as the initial ceiling. */
-    observed: number;
-    /** Ordinary declarations created only after explicit acceptance. */
-    declarations: AssuranceDeclarationBundle;
+/** Stable proposal id. */
+id: string;
+/** Population used to calculate the proposed threshold. */
+population_size: number;
+/** Scope applied while measuring. */
+scope: AssuranceScope;
+/** Observed value proposed as the initial ceiling. */
+observed: number;
+/** Ordinary declarations created only after explicit acceptance. */
+declarations: AssuranceDeclarationBundle;
 }
 /** Materialize one built-in preset as ordinary declarations owned by a pm item. */
 export declare function createAssurancePreset(id: AssurancePresetId, ownerItemId: string): AssurancePreset;
 /** Apply one preset atomically; a second identical application is idempotent. */
 export declare function applyAssurancePreset(pmRoot: string, id: AssurancePresetId, ownerItemId: string, options?: {
-    author?: string;
-    message?: string;
+author?: string;
+message?: string;
 }): Promise<AssuranceBundleMutationReceipt>;
 /** Propose active-scope evidence ceilings from the record without persisting them. */
 export declare function deriveAssuranceProposals(context: AssuranceEvaluationContext, ownerItemId: string): Promise<AssuranceDerivedProposal[]>;
 /** Accept all derived proposals in one audited registry transaction. */
 export declare function acceptAssuranceProposals(pmRoot: string, proposals: readonly AssuranceDerivedProposal[], options?: {
-    author?: string;
-    message?: string;
+author?: string;
+message?: string;
 }): Promise<AssuranceBundleMutationReceipt>;
 /** Promote one assertion by exactly one enforcement level and audit the transition. */
 export declare function promoteAssuranceAssertion(pmRoot: string, definition: AssuranceAssertionDefinition, enforcement: Exclude<AssuranceEnforcement, "observe">, options?: {
-    author?: string;
-    message?: string;
+author?: string;
+message?: string;
 }): Promise<Awaited<ReturnType<typeof putAssuranceDeclaration>>>;

package/dist/sdk/governance/assurance-runtime.d.ts

@@ -3,20 +3,20 @@ import type { AssuranceEvaluationContext, AssuranceExternalMeasurementResult, As
 export type AssuranceProviderResolver = (source: AssuranceProviderSource) => Promise<AssuranceExternalMeasurementResult>;
 /** Workspace binding options. */
 export interface CreateAssuranceWorkspaceContextOptions {
-    /** Refuse incomplete item or directory reads through the public strict-list contract. */
-    strict_read?: boolean;
-    /** Explicit tree identity; otherwise the current Git commit is used. */
-    tree_id?: string;
-    /** Load immutable item history for history-backed measurements. */
-    include_history?: boolean;
-    /** Resolve a Git identity; item-only callers can skip this subprocess. */
-    resolve_tree?: boolean;
-    /** Provider resolvers keyed by stable provider id. */
-    providers?: Readonly<Record<string, AssuranceProviderResolver>>;
-    /** Capabilities for host-provided resolvers that are not extension registrations. */
-    provider_capabilities?: AssuranceEvaluationContext["provider_capabilities"];
-    /** Gate trigger supplied to extension provider resolvers. */
-    trigger?: string;
+/** Refuse incomplete item or directory reads through the public strict-list contract. */
+strict_read?: boolean;
+/** Explicit tree identity; otherwise the current Git commit is used. */
+tree_id?: string;
+/** Load immutable item history for history-backed measurements. */
+include_history?: boolean;
+/** Resolve a Git identity; item-only callers can skip this subprocess. */
+resolve_tree?: boolean;
+/** Provider resolvers keyed by stable provider id. */
+providers?: Readonly<Record<string, AssuranceProviderResolver>>;
+/** Capabilities for host-provided resolvers that are not extension registrations. */
+provider_capabilities?: AssuranceEvaluationContext["provider_capabilities"];
+/** Gate trigger supplied to extension provider resolvers. */
+trigger?: string;
 }
 /**
  * Build an assurance context from authoritative workspace data and public SDK