@unbrained/pm-cli 2026.5.30 → 2026.5.31

package/dist/cli-bundle/chunks/chunk-U7FMKRXH.js

@@ -0,0 +1,362 @@
+import {
+  resolveAuthor
+} from "./chunk-O7IWB35H.js";
+import {
+  readHistoryEntries
+} from "./chunk-LRBOHPUE.js";
+import {
+  EMPTY_REPLAY_DOCUMENT,
+  normalizeReplayPatchOps,
+  replayHash,
+  toReplayDocument
+} from "./chunk-JFWUHHS2.js";
+import {
+  appendHistoryEntry,
+  createHistoryEntry,
+  enforceHistoryStreamPolicyForItem,
+  locateItem,
+  readLocatedItem
+} from "./chunk-BUPWJ3IJ.js";
+import {
+  acquireLock
+} from "./chunk-4AEZR5EJ.js";
+import {
+  normalizeItemId,
+  normalizeRawItemId
+} from "./chunk-CEFIVZPG.js";
+import {
+  canonicalDocument,
+  serializeItemDocument
+} from "./chunk-MD7K4JYF.js";
+import {
+  resolveItemTypeRegistry
+} from "./chunk-WDPXDQFG.js";
+import {
+  nowIso
+} from "./chunk-PVNQLCIS.js";
+import {
+  EXIT_CODE,
+  PmCliError,
+  getActiveExtensionRegistrations,
+  getHistoryPath,
+  getItemPath,
+  getSettingsPath,
+  pathExists,
+  readFileIfExists,
+  readSettings,
+  resolvePmRoot,
+  runActiveOnWriteHooks,
+  writeFileAtomic
+} from "./chunk-LSXGH6NE.js";
+
+// dist/cli/commands/restore.js
+import jsonPatch from "fast-json-patch";
+import fs from "node:fs/promises";
+!(function() {
+  try {
+    var e = "undefined" != typeof window ? window : "undefined" != typeof global ? global : "undefined" != typeof globalThis ? globalThis : "undefined" != typeof self ? self : {}, n = new e.Error().stack;
+    n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "d40fa5ec-9a3f-52de-980b-b83b2e0021d1");
+  } catch (e2) {
+  }
+})();
+function ensureReplayTarget(target, history) {
+  const trimmed = target.trim();
+  if (!trimmed) {
+    throw new PmCliError("Missing restore target. Use a timestamp or version number.", EXIT_CODE.USAGE);
+  }
+  if (/^\d+$/.test(trimmed)) {
+    const version = Number(trimmed);
+    if (!Number.isSafeInteger(version) || version < 1 || version > history.length) {
+      throw new PmCliError(`Restore version must be between 1 and ${history.length} for this item.`, EXIT_CODE.USAGE);
+    }
+    return {
+      kind: "version",
+      raw: trimmed,
+      historyIndex: version - 1
+    };
+  }
+  const parsedTarget = Date.parse(trimmed);
+  if (!Number.isFinite(parsedTarget)) {
+    throw new PmCliError(`Invalid restore target "${target}". Use a positive version number or ISO timestamp.`, EXIT_CODE.USAGE);
+  }
+  let index = -1;
+  for (let i = 0; i < history.length; i += 1) {
+    const entryTimestamp = Date.parse(history[i].ts);
+    if (!Number.isFinite(entryTimestamp)) {
+      throw new PmCliError(`History for this item contains invalid timestamp at entry ${i + 1}.`, EXIT_CODE.GENERIC_FAILURE);
+    }
+    if (entryTimestamp <= parsedTarget) {
+      index = i;
+    }
+  }
+  if (index < 0) {
+    throw new PmCliError(`No history entries exist at or before timestamp ${trimmed}.`, EXIT_CODE.USAGE);
+  }
+  return {
+    kind: "timestamp",
+    raw: trimmed,
+    historyIndex: index
+  };
+}
+function extractPatchFailureContext(patch, error) {
+  const context = {};
+  if (error instanceof Error && error.message.trim().length > 0) {
+    context.reason = error.message.trim();
+  }
+  if (typeof error !== "object" || error === null) {
+    return context;
+  }
+  const candidate = error;
+  if (typeof candidate.index === "number" && Number.isInteger(candidate.index) && candidate.index >= 0) {
+    context.patchIndex = candidate.index;
+  }
+  const operationRecord = typeof candidate.operation === "object" && candidate.operation !== null ? candidate.operation : null;
+  if (operationRecord && typeof operationRecord.op === "string") {
+    context.op = operationRecord.op;
+  }
+  if (operationRecord && typeof operationRecord.path === "string") {
+    context.path = operationRecord.path;
+  }
+  if (operationRecord && typeof operationRecord.from === "string") {
+    context.from = operationRecord.from;
+  }
+  if ((context.op === void 0 || context.path === void 0) && context.patchIndex !== void 0) {
+    const fallback = patch[context.patchIndex];
+    if (fallback) {
+      context.op = context.op ?? fallback.op;
+      context.path = context.path ?? fallback.path;
+      context.from = context.from ?? fallback.from;
+    }
+  }
+  return context;
+}
+function applyHistoryPatch(current, patch, entryNumber, entryOp) {
+  try {
+    const normalizedPatch = normalizeReplayPatchOps(patch);
+    const applied = jsonPatch.applyPatch(structuredClone(current), normalizedPatch, true, false).newDocument;
+    if (typeof applied !== "object" || applied === null || !("metadata" in applied) || !("body" in applied) || typeof applied.body !== "string" || typeof applied.metadata !== "object" || applied.metadata === null) {
+      throw new PmCliError(`History replay produced an invalid document shape at entry ${entryNumber}.`, EXIT_CODE.GENERIC_FAILURE);
+    }
+    const replay = applied;
+    return {
+      metadata: replay.metadata,
+      body: replay.body
+    };
+  } catch (error) {
+    if (error instanceof PmCliError) {
+      throw error;
+    }
+    const failureContext = extractPatchFailureContext(patch, error);
+    const contextTokens = [
+      `history_op=${entryOp}`,
+      failureContext.patchIndex !== void 0 ? `patch_index=${failureContext.patchIndex}` : null,
+      failureContext.op ? `op=${failureContext.op}` : null,
+      failureContext.path ? `path=${failureContext.path}` : null,
+      failureContext.from ? `from=${failureContext.from}` : null
+    ].filter((token) => token !== null);
+    const reasonSuffix = failureContext.reason ? ` ${failureContext.reason}` : "";
+    throw new PmCliError(`Failed to apply history patch at entry ${entryNumber} (${contextTokens.join(", ")}).${reasonSuffix}`, EXIT_CODE.GENERIC_FAILURE);
+  }
+}
+function replayToTarget(history, targetIndex) {
+  let document = structuredClone(EMPTY_REPLAY_DOCUMENT);
+  for (let i = 0; i <= targetIndex; i += 1) {
+    const entry = history[i];
+    const beforeHash = replayHash(document);
+    if (beforeHash !== entry.before_hash) {
+      throw new PmCliError(`History hash mismatch before replay at entry ${i + 1}.`, EXIT_CODE.GENERIC_FAILURE);
+    }
+    document = applyHistoryPatch(document, entry.patch, i + 1, entry.op);
+    const afterHash = replayHash(document);
+    if (afterHash !== entry.after_hash) {
+      throw new PmCliError(`History hash mismatch after replay at entry ${i + 1}.`, EXIT_CODE.GENERIC_FAILURE);
+    }
+  }
+  return document;
+}
+function ensureMaterializedRestoreTarget(replayDocument, target) {
+  if (Object.keys(replayDocument.metadata).length > 0) {
+    return replayDocument;
+  }
+  throw new PmCliError(`Restore target ${target.raw} resolves to a deleted state; choose a version or timestamp where the item exists.`, EXIT_CODE.USAGE);
+}
+function replayCurrentDocument(history) {
+  const currentReplay = replayToTarget(history, history.length - 1);
+  if (Object.keys(currentReplay.metadata).length === 0) {
+    return {
+      metadata: {},
+      body: currentReplay.body
+    };
+  }
+  return canonicalDocument({
+    metadata: currentReplay.metadata,
+    body: currentReplay.body
+  });
+}
+async function resolveRestoreSubject(pmRoot, id, settings, typeToFolder) {
+  const located = await locateItem(pmRoot, id, settings.id_prefix, settings.item_format, typeToFolder);
+  if (located) {
+    const historyPath = getHistoryPath(pmRoot, located.id);
+    const historyPolicy = await enforceHistoryStreamPolicyForItem({
+      pmRoot,
+      settings,
+      itemId: located.id,
+      commandLabel: "restore"
+    });
+    return {
+      id: located.id,
+      historyPath,
+      located,
+      historyPolicyWarnings: historyPolicy.warnings
+    };
+  }
+  const normalizedId = normalizeItemId(id, settings.id_prefix);
+  const rawNormalizedId = normalizeRawItemId(id);
+  const candidateIds = normalizedId === rawNormalizedId ? [normalizedId] : [normalizedId, rawNormalizedId];
+  for (const candidateId of candidateIds) {
+    const historyPath = getHistoryPath(pmRoot, candidateId);
+    if (await pathExists(historyPath)) {
+      return {
+        id: candidateId,
+        historyPath,
+        located: null,
+        historyPolicyWarnings: []
+      };
+    }
+  }
+  throw new PmCliError(`Item ${id} not found`, EXIT_CODE.NOT_FOUND);
+}
+function changedFields(beforeDocument, afterDocument) {
+  const beforeReplay = toReplayDocument(beforeDocument);
+  const afterReplay = toReplayDocument(afterDocument);
+  const patch = jsonPatch.compare(beforeReplay, afterReplay);
+  const fields = /* @__PURE__ */ new Set();
+  for (const op of patch) {
+    if (op.path === "/body" || op.path.startsWith("/body/")) {
+      fields.add("body");
+      continue;
+    }
+    const segment = op.path.replace(/^\/(?:metadata|front_matter)\/?/, "").split("/")[0];
+    fields.add(segment.replaceAll("~1", "/").replaceAll("~0", "~"));
+  }
+  return Array.from(fields).sort((a, b) => a.localeCompare(b));
+}
+async function runRestore(id, target, options, global2) {
+  const pmRoot = resolvePmRoot(process.cwd(), global2.path);
+  if (!await pathExists(getSettingsPath(pmRoot))) {
+    throw new PmCliError(`Tracker is not initialized at ${pmRoot}. Run pm init first.`, EXIT_CODE.NOT_FOUND);
+  }
+  const settings = await readSettings(pmRoot);
+  const typeRegistry = resolveItemTypeRegistry(settings, getActiveExtensionRegistrations());
+  const subject = await resolveRestoreSubject(pmRoot, id, settings, typeRegistry.type_to_folder);
+  const resolvedId = subject.id;
+  const historyRawBeforeLock = await readFileIfExists(subject.historyPath);
+  const history = await readHistoryEntries(subject.historyPath, resolvedId);
+  if (history.length === 0) {
+    throw new PmCliError(`No history exists for ${resolvedId}; restore is unavailable.`, EXIT_CODE.NOT_FOUND);
+  }
+  const resolvedTarget = ensureReplayTarget(target, history);
+  const replayDocument = ensureMaterializedRestoreTarget(replayToTarget(history, resolvedTarget.historyIndex), resolvedTarget);
+  const restoredDocument = canonicalDocument({
+    metadata: replayDocument.metadata,
+    body: replayDocument.body
+  }, { schema: settings.schema });
+  if (restoredDocument.metadata.id !== resolvedId) {
+    throw new PmCliError(`Restore target resolved to item ${restoredDocument.metadata.id}, expected ${resolvedId}.`, EXIT_CODE.GENERIC_FAILURE);
+  }
+  const loadedItemBeforeLock = subject.located ? await readLocatedItem(subject.located, { schema: settings.schema }) : null;
+  const currentItemRawBeforeLock = loadedItemBeforeLock?.raw ?? null;
+  const author = resolveAuthor(options.author, settings.author_default);
+  const releaseLock = await acquireLock(pmRoot, resolvedId, settings.locks.ttl_seconds, author, Boolean(options.force), settings.governance.force_required_for_stale_lock);
+  try {
+    const historyRawUnderLock = await readFileIfExists(subject.historyPath);
+    if (historyRawUnderLock !== historyRawBeforeLock) {
+      throw new PmCliError(`History for ${resolvedId} changed while waiting for lock; retry restore.`, EXIT_CODE.CONFLICT);
+    }
+    const locatedUnderLock = await locateItem(pmRoot, resolvedId, settings.id_prefix, settings.item_format, typeRegistry.type_to_folder);
+    const loadedItemUnderLock = locatedUnderLock ? await readLocatedItem(locatedUnderLock, { schema: settings.schema }) : null;
+    if ((loadedItemUnderLock?.raw ?? null) !== currentItemRawBeforeLock) {
+      throw new PmCliError(`Item ${resolvedId} changed while waiting for lock; retry restore.`, EXIT_CODE.CONFLICT);
+    }
+    const existingItemPath = locatedUnderLock?.itemPath ?? null;
+    const itemFormat = "toon";
+    let resolvedCurrentDocument;
+    let resolvedOriginalRaw = null;
+    if (loadedItemUnderLock) {
+      resolvedCurrentDocument = loadedItemUnderLock.document;
+      resolvedOriginalRaw = loadedItemUnderLock.raw;
+    } else {
+      resolvedCurrentDocument = replayCurrentDocument(history);
+    }
+    const assigned = resolvedCurrentDocument.metadata.assignee?.trim();
+    const ownershipWarnings = [];
+    const hasOwnershipConflict = assigned && assigned !== author && !options.force;
+    if (hasOwnershipConflict) {
+      if (settings.governance.ownership_enforcement === "strict") {
+        throw new PmCliError(`Item ${resolvedId} is assigned to ${assigned}. Use --force to override.`, EXIT_CODE.CONFLICT);
+      }
+      if (settings.governance.ownership_enforcement === "warn") {
+        ownershipWarnings.push(`ownership_warning:assignee_conflict:${resolvedId}:${assigned}`);
+      }
+    }
+    const serializedRestore = serializeItemDocument(restoredDocument, { format: itemFormat, schema: settings.schema });
+    const restoredItemPath = getItemPath(pmRoot, restoredDocument.metadata.type, resolvedId, itemFormat, typeRegistry.type_to_folder);
+    await writeFileAtomic(restoredItemPath, serializedRestore);
+    if (existingItemPath && restoredItemPath !== existingItemPath) {
+      await fs.rm(existingItemPath);
+    }
+    const historyEntry = createHistoryEntry({
+      nowIso: nowIso(),
+      author,
+      op: "restore",
+      before: resolvedCurrentDocument,
+      after: restoredDocument,
+      message: options.message
+    });
+    try {
+      await appendHistoryEntry(subject.historyPath, historyEntry);
+    } catch (error) {
+      if (existingItemPath && resolvedOriginalRaw !== null && restoredItemPath !== existingItemPath) {
+        await writeFileAtomic(existingItemPath, resolvedOriginalRaw);
+        await fs.rm(restoredItemPath, { force: true });
+      } else if (existingItemPath && resolvedOriginalRaw !== null) {
+        await writeFileAtomic(existingItemPath, resolvedOriginalRaw);
+      } else {
+        await fs.rm(restoredItemPath, { force: true });
+      }
+      throw error;
+    }
+    const hookWarnings = [
+      ...await runActiveOnWriteHooks({
+        path: restoredItemPath,
+        scope: "project",
+        op: "restore"
+      }),
+      ...await runActiveOnWriteHooks({
+        path: subject.historyPath,
+        scope: "project",
+        op: "restore:history"
+      })
+    ];
+    const targetEntry = history[resolvedTarget.historyIndex];
+    return {
+      item: restoredDocument.metadata,
+      restored_from: {
+        kind: resolvedTarget.kind,
+        target: resolvedTarget.raw,
+        history_index: resolvedTarget.historyIndex + 1,
+        entry_ts: targetEntry.ts,
+        entry_op: targetEntry.op
+      },
+      changed_fields: changedFields(resolvedCurrentDocument, restoredDocument),
+      warnings: [...subject.historyPolicyWarnings, ...ownershipWarnings, ...hookWarnings]
+    };
+  } finally {
+    await releaseLock();
+  }
+}
+
+export {
+  runRestore
+};
+//# sourceMappingURL=chunk-U7FMKRXH.js.map

package/dist/cli-bundle/chunks/chunk-U7FMKRXH.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../../cli/commands/restore.ts"],
+  "sourcesContent": ["import jsonPatch from \"fast-json-patch\";\nimport fs from \"node:fs/promises\";\nimport { pathExists, readFileIfExists, writeFileAtomic } from \"../../core/fs/fs-utils.js\";\nimport { appendHistoryEntry, createHistoryEntry } from \"../../core/history/history.js\";\nimport {\n  EMPTY_REPLAY_DOCUMENT,\n  normalizeReplayPatchOps,\n  replayHash,\n  toReplayDocument,\n  type ReplayDocument as CanonicalReplayDocument,\n} from \"../../core/history/replay.js\";\nimport { enforceHistoryStreamPolicyForItem } from \"../../core/history/history-stream-policy.js\";\nimport { normalizeItemId, normalizeRawItemId } from \"../../core/item/id.js\";\nimport { canonicalDocument, serializeItemDocument } from \"../../core/item/item-format.js\";\nimport { resolveItemTypeRegistry } from \"../../core/item/type-registry.js\";\nimport { acquireLock } from \"../../core/lock/lock.js\";\nimport { EXIT_CODE } from \"../../core/shared/constants.js\";\nimport type { GlobalOptions } from \"../../core/shared/command-types.js\";\nimport { PmCliError } from \"../../core/shared/errors.js\";\nimport { nowIso } from \"../../core/shared/time.js\";\nimport { getActiveExtensionRegistrations, runActiveOnWriteHooks } from \"../../core/extensions/index.js\";\nimport { locateItem, readLocatedItem } from \"../../core/store/item-store.js\";\nimport { getHistoryPath, getItemPath, getSettingsPath, resolvePmRoot } from \"../../core/store/paths.js\";\nimport { readSettings } from \"../../core/store/settings.js\";\nimport { resolveAuthor } from \"../../core/shared/author.js\";\nimport type { HistoryEntry, HistoryPatchOp, ItemDocument, ItemMetadata } from \"../../types/index.js\";\nimport { readHistoryEntries } from \"./history.js\";\n\ninterface ResolvedRestoreTarget {\n  kind: \"version\" | \"timestamp\";\n  raw: string;\n  historyIndex: number;\n}\n\ninterface ResolvedRestoreSubject {\n  id: string;\n  historyPath: string;\n  located: Awaited<ReturnType<typeof locateItem>>;\n  historyPolicyWarnings: string[];\n}\n\nexport interface RestoreCommandOptions {\n  author?: string;\n  message?: string;\n  force?: boolean;\n}\n\nexport interface RestoreResult {\n  item: ItemMetadata;\n  restored_from: {\n    kind: \"version\" | \"timestamp\";\n    target: string;\n    history_index: number;\n    entry_ts: string;\n    entry_op: string;\n  };\n  changed_fields: string[];\n  warnings: string[];\n}\n\nfunction ensureReplayTarget(target: string, history: HistoryEntry[]): ResolvedRestoreTarget {\n  const trimmed = target.trim();\n  if (!trimmed) {\n    throw new PmCliError(\"Missing restore target. Use a timestamp or version number.\", EXIT_CODE.USAGE);\n  }\n\n  if (/^\\d+$/.test(trimmed)) {\n    const version = Number(trimmed);\n    if (!Number.isSafeInteger(version) || version < 1 || version > history.length) {\n      throw new PmCliError(\n        `Restore version must be between 1 and ${history.length} for this item.`,\n        EXIT_CODE.USAGE,\n      );\n    }\n    return {\n      kind: \"version\",\n      raw: trimmed,\n      historyIndex: version - 1,\n    };\n  }\n\n  const parsedTarget = Date.parse(trimmed);\n  if (!Number.isFinite(parsedTarget)) {\n    throw new PmCliError(\n      `Invalid restore target \"${target}\". Use a positive version number or ISO timestamp.`,\n      EXIT_CODE.USAGE,\n    );\n  }\n\n  let index = -1;\n  for (let i = 0; i < history.length; i += 1) {\n    const entryTimestamp = Date.parse(history[i].ts);\n    if (!Number.isFinite(entryTimestamp)) {\n      throw new PmCliError(\n        `History for this item contains invalid timestamp at entry ${i + 1}.`,\n        EXIT_CODE.GENERIC_FAILURE,\n      );\n    }\n    if (entryTimestamp <= parsedTarget) {\n      index = i;\n    }\n  }\n\n  if (index < 0) {\n    throw new PmCliError(`No history entries exist at or before timestamp ${trimmed}.`, EXIT_CODE.USAGE);\n  }\n\n  return {\n    kind: \"timestamp\",\n    raw: trimmed,\n    historyIndex: index,\n  };\n}\n\nfunction extractPatchFailureContext(\n  patch: HistoryPatchOp[],\n  error: unknown,\n): { patchIndex?: number; op?: string; path?: string; from?: string; reason?: string } {\n  const context: { patchIndex?: number; op?: string; path?: string; from?: string; reason?: string } = {};\n  if (error instanceof Error && error.message.trim().length > 0) {\n    context.reason = error.message.trim();\n  }\n  if (typeof error !== \"object\" || error === null) {\n    return context;\n  }\n  const candidate = error as {\n    index?: unknown;\n    operation?: unknown;\n  };\n  if (typeof candidate.index === \"number\" && Number.isInteger(candidate.index) && candidate.index >= 0) {\n    context.patchIndex = candidate.index;\n  }\n  const operationRecord =\n    typeof candidate.operation === \"object\" && candidate.operation !== null\n      ? (candidate.operation as { op?: unknown; path?: unknown; from?: unknown })\n      : null;\n  if (operationRecord && typeof operationRecord.op === \"string\") {\n    context.op = operationRecord.op;\n  }\n  if (operationRecord && typeof operationRecord.path === \"string\") {\n    context.path = operationRecord.path;\n  }\n  if (operationRecord && typeof operationRecord.from === \"string\") {\n    context.from = operationRecord.from;\n  }\n  if ((context.op === undefined || context.path === undefined) && context.patchIndex !== undefined) {\n    const fallback = patch[context.patchIndex];\n    if (fallback) {\n      context.op = context.op ?? fallback.op;\n      context.path = context.path ?? fallback.path;\n      context.from = context.from ?? fallback.from;\n    }\n  }\n  return context;\n}\n\nfunction applyHistoryPatch(\n  current: CanonicalReplayDocument,\n  patch: HistoryPatchOp[],\n  entryNumber: number,\n  entryOp: string,\n): CanonicalReplayDocument {\n  try {\n    const normalizedPatch = normalizeReplayPatchOps(patch);\n    const applied = jsonPatch.applyPatch(\n      structuredClone(current),\n      normalizedPatch as jsonPatch.Operation[],\n      true,\n      false,\n    ).newDocument as unknown;\n    if (\n      typeof applied !== \"object\" ||\n      applied === null ||\n      !(\"metadata\" in applied) ||\n      !(\"body\" in applied) ||\n      typeof (applied as { body: unknown }).body !== \"string\" ||\n      typeof (applied as { metadata: unknown }).metadata !== \"object\" ||\n      (applied as { metadata: unknown }).metadata === null\n    ) {\n      throw new PmCliError(\n        `History replay produced an invalid document shape at entry ${entryNumber}.`,\n        EXIT_CODE.GENERIC_FAILURE,\n      );\n    }\n    const replay = applied as { metadata: Record<string, unknown>; body: string };\n    return {\n      metadata: replay.metadata,\n      body: replay.body,\n    };\n  } catch (error: unknown) {\n    if (error instanceof PmCliError) {\n      throw error;\n    }\n    const failureContext = extractPatchFailureContext(patch, error);\n    const contextTokens = [\n      `history_op=${entryOp}`,\n      failureContext.patchIndex !== undefined ? `patch_index=${failureContext.patchIndex}` : null,\n      failureContext.op ? `op=${failureContext.op}` : null,\n      failureContext.path ? `path=${failureContext.path}` : null,\n      failureContext.from ? `from=${failureContext.from}` : null,\n    ].filter((token): token is string => token !== null);\n    const reasonSuffix = failureContext.reason ? ` ${failureContext.reason}` : \"\";\n    throw new PmCliError(\n      `Failed to apply history patch at entry ${entryNumber} (${contextTokens.join(\", \")}).${reasonSuffix}`,\n      EXIT_CODE.GENERIC_FAILURE,\n    );\n  }\n}\n\nfunction replayToTarget(history: HistoryEntry[], targetIndex: number): CanonicalReplayDocument {\n  let document: CanonicalReplayDocument = structuredClone(EMPTY_REPLAY_DOCUMENT);\n\n  for (let i = 0; i <= targetIndex; i += 1) {\n    const entry = history[i];\n    const beforeHash = replayHash(document);\n    if (beforeHash !== entry.before_hash) {\n      throw new PmCliError(\n        `History hash mismatch before replay at entry ${i + 1}.`,\n        EXIT_CODE.GENERIC_FAILURE,\n      );\n    }\n\n    document = applyHistoryPatch(document, entry.patch, i + 1, entry.op);\n\n    const afterHash = replayHash(document);\n    if (afterHash !== entry.after_hash) {\n      throw new PmCliError(\n        `History hash mismatch after replay at entry ${i + 1}.`,\n        EXIT_CODE.GENERIC_FAILURE,\n      );\n    }\n  }\n\n  return document;\n}\n\nfunction ensureMaterializedRestoreTarget(\n  replayDocument: CanonicalReplayDocument,\n  target: ResolvedRestoreTarget,\n): CanonicalReplayDocument {\n  if (Object.keys(replayDocument.metadata).length > 0) {\n    return replayDocument;\n  }\n  throw new PmCliError(\n    `Restore target ${target.raw} resolves to a deleted state; choose a version or timestamp where the item exists.`,\n    EXIT_CODE.USAGE,\n  );\n}\n\nfunction replayCurrentDocument(history: HistoryEntry[]): ItemDocument {\n  const currentReplay = replayToTarget(history, history.length - 1);\n  if (Object.keys(currentReplay.metadata).length === 0) {\n    return {\n      metadata: {} as ItemMetadata,\n      body: currentReplay.body,\n    };\n  }\n  return canonicalDocument({\n    metadata: currentReplay.metadata as unknown as ItemMetadata,\n    body: currentReplay.body,\n  });\n}\n\nasync function resolveRestoreSubject(\n  pmRoot: string,\n  id: string,\n  settings: Awaited<ReturnType<typeof readSettings>>,\n  typeToFolder: Record<string, string>,\n): Promise<ResolvedRestoreSubject> {\n  const located = await locateItem(pmRoot, id, settings.id_prefix, settings.item_format, typeToFolder);\n  if (located) {\n    const historyPath = getHistoryPath(pmRoot, located.id);\n    const historyPolicy = await enforceHistoryStreamPolicyForItem({\n      pmRoot,\n      settings,\n      itemId: located.id,\n      commandLabel: \"restore\",\n    });\n    return {\n      id: located.id,\n      historyPath,\n      located,\n      historyPolicyWarnings: historyPolicy.warnings,\n    };\n  }\n\n  const normalizedId = normalizeItemId(id, settings.id_prefix);\n  const rawNormalizedId = normalizeRawItemId(id);\n  const candidateIds = normalizedId === rawNormalizedId ? [normalizedId] : [normalizedId, rawNormalizedId];\n  for (const candidateId of candidateIds) {\n    const historyPath = getHistoryPath(pmRoot, candidateId);\n    if (await pathExists(historyPath)) {\n      return {\n        id: candidateId,\n        historyPath,\n        located: null,\n        historyPolicyWarnings: [],\n      };\n    }\n  }\n\n  throw new PmCliError(`Item ${id} not found`, EXIT_CODE.NOT_FOUND);\n}\n\nfunction changedFields(beforeDocument: ItemDocument, afterDocument: ItemDocument): string[] {\n  const beforeReplay = toReplayDocument(beforeDocument);\n  const afterReplay = toReplayDocument(afterDocument);\n  const patch = jsonPatch.compare(beforeReplay, afterReplay) as HistoryPatchOp[];\n  const fields = new Set<string>();\n\n  for (const op of patch) {\n    if (op.path === \"/body\" || op.path.startsWith(\"/body/\")) {\n      fields.add(\"body\");\n      continue;\n    }\n    const segment = op.path.replace(/^\\/(?:metadata|front_matter)\\/?/, \"\").split(\"/\")[0];\n    fields.add(segment.replaceAll(\"~1\", \"/\").replaceAll(\"~0\", \"~\"));\n  }\n\n  return Array.from(fields).sort((a, b) => a.localeCompare(b));\n}\n\nexport async function runRestore(\n  id: string,\n  target: string,\n  options: RestoreCommandOptions,\n  global: GlobalOptions,\n): Promise<RestoreResult> {\n  const pmRoot = resolvePmRoot(process.cwd(), global.path);\n  if (!(await pathExists(getSettingsPath(pmRoot)))) {\n    throw new PmCliError(`Tracker is not initialized at ${pmRoot}. Run pm init first.`, EXIT_CODE.NOT_FOUND);\n  }\n\n  const settings = await readSettings(pmRoot);\n  const typeRegistry = resolveItemTypeRegistry(settings, getActiveExtensionRegistrations());\n  const subject = await resolveRestoreSubject(pmRoot, id, settings, typeRegistry.type_to_folder);\n  const resolvedId = subject.id;\n  const historyRawBeforeLock = await readFileIfExists(subject.historyPath);\n  const history = await readHistoryEntries(subject.historyPath, resolvedId);\n  if (history.length === 0) {\n    throw new PmCliError(`No history exists for ${resolvedId}; restore is unavailable.`, EXIT_CODE.NOT_FOUND);\n  }\n\n  const resolvedTarget = ensureReplayTarget(target, history);\n  const replayDocument = ensureMaterializedRestoreTarget(replayToTarget(history, resolvedTarget.historyIndex), resolvedTarget);\n  const restoredDocument = canonicalDocument(\n    {\n      metadata: replayDocument.metadata as unknown as ItemMetadata,\n      body: replayDocument.body,\n    },\n    { schema: settings.schema },\n  );\n\n  if (restoredDocument.metadata.id !== resolvedId) {\n    throw new PmCliError(\n      `Restore target resolved to item ${restoredDocument.metadata.id}, expected ${resolvedId}.`,\n      EXIT_CODE.GENERIC_FAILURE,\n    );\n  }\n  const loadedItemBeforeLock = subject.located ? await readLocatedItem(subject.located, { schema: settings.schema }) : null;\n  const currentItemRawBeforeLock = loadedItemBeforeLock?.raw ?? null;\n\n  const author = resolveAuthor(options.author, settings.author_default);\n  const releaseLock = await acquireLock(\n    pmRoot,\n    resolvedId,\n    settings.locks.ttl_seconds,\n    author,\n    Boolean(options.force),\n    settings.governance.force_required_for_stale_lock,\n  );\n\n  try {\n    const historyRawUnderLock = await readFileIfExists(subject.historyPath);\n    if (historyRawUnderLock !== historyRawBeforeLock) {\n      throw new PmCliError(\n        `History for ${resolvedId} changed while waiting for lock; retry restore.`,\n        EXIT_CODE.CONFLICT,\n      );\n    }\n    const locatedUnderLock = await locateItem(\n      pmRoot,\n      resolvedId,\n      settings.id_prefix,\n      settings.item_format,\n      typeRegistry.type_to_folder,\n    );\n    const loadedItemUnderLock = locatedUnderLock ? await readLocatedItem(locatedUnderLock, { schema: settings.schema }) : null;\n    if ((loadedItemUnderLock?.raw ?? null) !== currentItemRawBeforeLock) {\n      throw new PmCliError(`Item ${resolvedId} changed while waiting for lock; retry restore.`, EXIT_CODE.CONFLICT);\n    }\n\n    const existingItemPath = locatedUnderLock?.itemPath ?? null;\n    const itemFormat = \"toon\";\n    let resolvedCurrentDocument: ItemDocument;\n    let resolvedOriginalRaw: string | null = null;\n    if (loadedItemUnderLock) {\n      resolvedCurrentDocument = loadedItemUnderLock.document;\n      resolvedOriginalRaw = loadedItemUnderLock.raw;\n    } else {\n      resolvedCurrentDocument = replayCurrentDocument(history);\n    }\n    const assigned = resolvedCurrentDocument.metadata.assignee?.trim();\n    const ownershipWarnings: string[] = [];\n    const hasOwnershipConflict = assigned && assigned !== author && !options.force;\n    if (hasOwnershipConflict) {\n      if (settings.governance.ownership_enforcement === \"strict\") {\n        throw new PmCliError(\n          `Item ${resolvedId} is assigned to ${assigned}. Use --force to override.`,\n          EXIT_CODE.CONFLICT,\n        );\n      }\n      if (settings.governance.ownership_enforcement === \"warn\") {\n        ownershipWarnings.push(`ownership_warning:assignee_conflict:${resolvedId}:${assigned}`);\n      }\n    }\n\n    const serializedRestore = serializeItemDocument(restoredDocument, { format: itemFormat, schema: settings.schema });\n    const restoredItemPath = getItemPath(\n      pmRoot,\n      restoredDocument.metadata.type,\n      resolvedId,\n      itemFormat,\n      typeRegistry.type_to_folder,\n    );\n    await writeFileAtomic(restoredItemPath, serializedRestore);\n    if (existingItemPath && restoredItemPath !== existingItemPath) {\n      await fs.rm(existingItemPath);\n    }\n\n    const historyEntry = createHistoryEntry({\n      nowIso: nowIso(),\n      author,\n      op: \"restore\",\n      before: resolvedCurrentDocument,\n      after: restoredDocument,\n      message: options.message,\n    });\n\n    try {\n      await appendHistoryEntry(subject.historyPath, historyEntry);\n    } catch (error: unknown) {\n      if (existingItemPath && resolvedOriginalRaw !== null && restoredItemPath !== existingItemPath) {\n        await writeFileAtomic(existingItemPath, resolvedOriginalRaw);\n        await fs.rm(restoredItemPath, { force: true });\n      } else if (existingItemPath && resolvedOriginalRaw !== null) {\n        await writeFileAtomic(existingItemPath, resolvedOriginalRaw);\n      } else {\n        await fs.rm(restoredItemPath, { force: true });\n      }\n      throw error;\n    }\n    const hookWarnings = [\n      ...(await runActiveOnWriteHooks({\n        path: restoredItemPath,\n        scope: \"project\",\n        op: \"restore\",\n      })),\n      ...(await runActiveOnWriteHooks({\n        path: subject.historyPath,\n        scope: \"project\",\n        op: \"restore:history\",\n      })),\n    ];\n\n    const targetEntry = history[resolvedTarget.historyIndex];\n    return {\n      item: restoredDocument.metadata,\n      restored_from: {\n        kind: resolvedTarget.kind,\n        target: resolvedTarget.raw,\n        history_index: resolvedTarget.historyIndex + 1,\n        entry_ts: targetEntry.ts,\n        entry_op: targetEntry.op,\n      },\n      changed_fields: changedFields(resolvedCurrentDocument, restoredDocument),\n      warnings: [...subject.historyPolicyWarnings, ...ownershipWarnings, ...hookWarnings],\n    };\n  } finally {\n    await releaseLock();\n  }\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,eAAe;AACtB,OAAO,QAAQ;;;;;;;;AA2Df,SAAS,mBAAmB,QAAgB,SAAuB;AACjE,QAAM,UAAU,OAAO,KAAI;AAC3B,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,WAAW,8DAA8D,UAAU,KAAK;EACpG;AAEA,MAAI,QAAQ,KAAK,OAAO,GAAG;AACzB,UAAM,UAAU,OAAO,OAAO;AAC9B,QAAI,CAAC,OAAO,cAAc,OAAO,KAAK,UAAU,KAAK,UAAU,QAAQ,QAAQ;AAC7E,YAAM,IAAI,WACR,yCAAyC,QAAQ,MAAM,mBACvD,UAAU,KAAK;IAEnB;AACA,WAAO;MACL,MAAM;MACN,KAAK;MACL,cAAc,UAAU;;EAE5B;AAEA,QAAM,eAAe,KAAK,MAAM,OAAO;AACvC,MAAI,CAAC,OAAO,SAAS,YAAY,GAAG;AAClC,UAAM,IAAI,WACR,2BAA2B,MAAM,sDACjC,UAAU,KAAK;EAEnB;AAEA,MAAI,QAAQ;AACZ,WAAS,IAAI,GAAG,IAAI,QAAQ,QAAQ,KAAK,GAAG;AAC1C,UAAM,iBAAiB,KAAK,MAAM,QAAQ,CAAC,EAAE,EAAE;AAC/C,QAAI,CAAC,OAAO,SAAS,cAAc,GAAG;AACpC,YAAM,IAAI,WACR,6DAA6D,IAAI,CAAC,KAClE,UAAU,eAAe;IAE7B;AACA,QAAI,kBAAkB,cAAc;AAClC,cAAQ;IACV;EACF;AAEA,MAAI,QAAQ,GAAG;AACb,UAAM,IAAI,WAAW,mDAAmD,OAAO,KAAK,UAAU,KAAK;EACrG;AAEA,SAAO;IACL,MAAM;IACN,KAAK;IACL,cAAc;;AAElB;AAEA,SAAS,2BACP,OACA,OAAc;AAEd,QAAM,UAA+F,CAAA;AACrG,MAAI,iBAAiB,SAAS,MAAM,QAAQ,KAAI,EAAG,SAAS,GAAG;AAC7D,YAAQ,SAAS,MAAM,QAAQ,KAAI;EACrC;AACA,MAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C,WAAO;EACT;AACA,QAAM,YAAY;AAIlB,MAAI,OAAO,UAAU,UAAU,YAAY,OAAO,UAAU,UAAU,KAAK,KAAK,UAAU,SAAS,GAAG;AACpG,YAAQ,aAAa,UAAU;EACjC;AACA,QAAM,kBACJ,OAAO,UAAU,cAAc,YAAY,UAAU,cAAc,OAC9D,UAAU,YACX;AACN,MAAI,mBAAmB,OAAO,gBAAgB,OAAO,UAAU;AAC7D,YAAQ,KAAK,gBAAgB;EAC/B;AACA,MAAI,mBAAmB,OAAO,gBAAgB,SAAS,UAAU;AAC/D,YAAQ,OAAO,gBAAgB;EACjC;AACA,MAAI,mBAAmB,OAAO,gBAAgB,SAAS,UAAU;AAC/D,YAAQ,OAAO,gBAAgB;EACjC;AACA,OAAK,QAAQ,OAAO,UAAa,QAAQ,SAAS,WAAc,QAAQ,eAAe,QAAW;AAChG,UAAM,WAAW,MAAM,QAAQ,UAAU;AACzC,QAAI,UAAU;AACZ,cAAQ,KAAK,QAAQ,MAAM,SAAS;AACpC,cAAQ,OAAO,QAAQ,QAAQ,SAAS;AACxC,cAAQ,OAAO,QAAQ,QAAQ,SAAS;IAC1C;EACF;AACA,SAAO;AACT;AAEA,SAAS,kBACP,SACA,OACA,aACA,SAAe;AAEf,MAAI;AACF,UAAM,kBAAkB,wBAAwB,KAAK;AACrD,UAAM,UAAU,UAAU,WACxB,gBAAgB,OAAO,GACvB,iBACA,MACA,KAAK,EACL;AACF,QACE,OAAO,YAAY,YACnB,YAAY,QACZ,EAAE,cAAc,YAChB,EAAE,UAAU,YACZ,OAAQ,QAA8B,SAAS,YAC/C,OAAQ,QAAkC,aAAa,YACtD,QAAkC,aAAa,MAChD;AACA,YAAM,IAAI,WACR,8DAA8D,WAAW,KACzE,UAAU,eAAe;IAE7B;AACA,UAAM,SAAS;AACf,WAAO;MACL,UAAU,OAAO;MACjB,MAAM,OAAO;;EAEjB,SAAS,OAAgB;AACvB,QAAI,iBAAiB,YAAY;AAC/B,YAAM;IACR;AACA,UAAM,iBAAiB,2BAA2B,OAAO,KAAK;AAC9D,UAAM,gBAAgB;MACpB,cAAc,OAAO;MACrB,eAAe,eAAe,SAAY,eAAe,eAAe,UAAU,KAAK;MACvF,eAAe,KAAK,MAAM,eAAe,EAAE,KAAK;MAChD,eAAe,OAAO,QAAQ,eAAe,IAAI,KAAK;MACtD,eAAe,OAAO,QAAQ,eAAe,IAAI,KAAK;MACtD,OAAO,CAAC,UAA2B,UAAU,IAAI;AACnD,UAAM,eAAe,eAAe,SAAS,IAAI,eAAe,MAAM,KAAK;AAC3E,UAAM,IAAI,WACR,0CAA0C,WAAW,KAAK,cAAc,KAAK,IAAI,CAAC,KAAK,YAAY,IACnG,UAAU,eAAe;EAE7B;AACF;AAEA,SAAS,eAAe,SAAyB,aAAmB;AAClE,MAAI,WAAoC,gBAAgB,qBAAqB;AAE7E,WAAS,IAAI,GAAG,KAAK,aAAa,KAAK,GAAG;AACxC,UAAM,QAAQ,QAAQ,CAAC;AACvB,UAAM,aAAa,WAAW,QAAQ;AACtC,QAAI,eAAe,MAAM,aAAa;AACpC,YAAM,IAAI,WACR,gDAAgD,IAAI,CAAC,KACrD,UAAU,eAAe;IAE7B;AAEA,eAAW,kBAAkB,UAAU,MAAM,OAAO,IAAI,GAAG,MAAM,EAAE;AAEnE,UAAM,YAAY,WAAW,QAAQ;AACrC,QAAI,cAAc,MAAM,YAAY;AAClC,YAAM,IAAI,WACR,+CAA+C,IAAI,CAAC,KACpD,UAAU,eAAe;IAE7B;EACF;AAEA,SAAO;AACT;AAEA,SAAS,gCACP,gBACA,QAA6B;AAE7B,MAAI,OAAO,KAAK,eAAe,QAAQ,EAAE,SAAS,GAAG;AACnD,WAAO;EACT;AACA,QAAM,IAAI,WACR,kBAAkB,OAAO,GAAG,sFAC5B,UAAU,KAAK;AAEnB;AAEA,SAAS,sBAAsB,SAAuB;AACpD,QAAM,gBAAgB,eAAe,SAAS,QAAQ,SAAS,CAAC;AAChE,MAAI,OAAO,KAAK,cAAc,QAAQ,EAAE,WAAW,GAAG;AACpD,WAAO;MACL,UAAU,CAAA;MACV,MAAM,cAAc;;EAExB;AACA,SAAO,kBAAkB;IACvB,UAAU,cAAc;IACxB,MAAM,cAAc;GACrB;AACH;AAEA,eAAe,sBACb,QACA,IACA,UACA,cAAoC;AAEpC,QAAM,UAAU,MAAM,WAAW,QAAQ,IAAI,SAAS,WAAW,SAAS,aAAa,YAAY;AACnG,MAAI,SAAS;AACX,UAAM,cAAc,eAAe,QAAQ,QAAQ,EAAE;AACrD,UAAM,gBAAgB,MAAM,kCAAkC;MAC5D;MACA;MACA,QAAQ,QAAQ;MAChB,cAAc;KACf;AACD,WAAO;MACL,IAAI,QAAQ;MACZ;MACA;MACA,uBAAuB,cAAc;;EAEzC;AAEA,QAAM,eAAe,gBAAgB,IAAI,SAAS,SAAS;AAC3D,QAAM,kBAAkB,mBAAmB,EAAE;AAC7C,QAAM,eAAe,iBAAiB,kBAAkB,CAAC,YAAY,IAAI,CAAC,cAAc,eAAe;AACvG,aAAW,eAAe,cAAc;AACtC,UAAM,cAAc,eAAe,QAAQ,WAAW;AACtD,QAAI,MAAM,WAAW,WAAW,GAAG;AACjC,aAAO;QACL,IAAI;QACJ;QACA,SAAS;QACT,uBAAuB,CAAA;;IAE3B;EACF;AAEA,QAAM,IAAI,WAAW,QAAQ,EAAE,cAAc,UAAU,SAAS;AAClE;AAEA,SAAS,cAAc,gBAA8B,eAA2B;AAC9E,QAAM,eAAe,iBAAiB,cAAc;AACpD,QAAM,cAAc,iBAAiB,aAAa;AAClD,QAAM,QAAQ,UAAU,QAAQ,cAAc,WAAW;AACzD,QAAM,SAAS,oBAAI,IAAG;AAEtB,aAAW,MAAM,OAAO;AACtB,QAAI,GAAG,SAAS,WAAW,GAAG,KAAK,WAAW,QAAQ,GAAG;AACvD,aAAO,IAAI,MAAM;AACjB;IACF;AACA,UAAM,UAAU,GAAG,KAAK,QAAQ,mCAAmC,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC;AACnF,WAAO,IAAI,QAAQ,WAAW,MAAM,GAAG,EAAE,WAAW,MAAM,GAAG,CAAC;EAChE;AAEA,SAAO,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;AAC7D;AAEA,eAAsB,WACpB,IACA,QACA,SACAA,SAAqB;AAErB,QAAM,SAAS,cAAc,QAAQ,IAAG,GAAIA,QAAO,IAAI;AACvD,MAAI,CAAE,MAAM,WAAW,gBAAgB,MAAM,CAAC,GAAI;AAChD,UAAM,IAAI,WAAW,iCAAiC,MAAM,wBAAwB,UAAU,SAAS;EACzG;AAEA,QAAM,WAAW,MAAM,aAAa,MAAM;AAC1C,QAAM,eAAe,wBAAwB,UAAU,gCAA+B,CAAE;AACxF,QAAM,UAAU,MAAM,sBAAsB,QAAQ,IAAI,UAAU,aAAa,cAAc;AAC7F,QAAM,aAAa,QAAQ;AAC3B,QAAM,uBAAuB,MAAM,iBAAiB,QAAQ,WAAW;AACvE,QAAM,UAAU,MAAM,mBAAmB,QAAQ,aAAa,UAAU;AACxE,MAAI,QAAQ,WAAW,GAAG;AACxB,UAAM,IAAI,WAAW,yBAAyB,UAAU,6BAA6B,UAAU,SAAS;EAC1G;AAEA,QAAM,iBAAiB,mBAAmB,QAAQ,OAAO;AACzD,QAAM,iBAAiB,gCAAgC,eAAe,SAAS,eAAe,YAAY,GAAG,cAAc;AAC3H,QAAM,mBAAmB,kBACvB;IACE,UAAU,eAAe;IACzB,MAAM,eAAe;KAEvB,EAAE,QAAQ,SAAS,OAAM,CAAE;AAG7B,MAAI,iBAAiB,SAAS,OAAO,YAAY;AAC/C,UAAM,IAAI,WACR,mCAAmC,iBAAiB,SAAS,EAAE,cAAc,UAAU,KACvF,UAAU,eAAe;EAE7B;AACA,QAAM,uBAAuB,QAAQ,UAAU,MAAM,gBAAgB,QAAQ,SAAS,EAAE,QAAQ,SAAS,OAAM,CAAE,IAAI;AACrH,QAAM,2BAA2B,sBAAsB,OAAO;AAE9D,QAAM,SAAS,cAAc,QAAQ,QAAQ,SAAS,cAAc;AACpE,QAAM,cAAc,MAAM,YACxB,QACA,YACA,SAAS,MAAM,aACf,QACA,QAAQ,QAAQ,KAAK,GACrB,SAAS,WAAW,6BAA6B;AAGnD,MAAI;AACF,UAAM,sBAAsB,MAAM,iBAAiB,QAAQ,WAAW;AACtE,QAAI,wBAAwB,sBAAsB;AAChD,YAAM,IAAI,WACR,eAAe,UAAU,mDACzB,UAAU,QAAQ;IAEtB;AACA,UAAM,mBAAmB,MAAM,WAC7B,QACA,YACA,SAAS,WACT,SAAS,aACT,aAAa,cAAc;AAE7B,UAAM,sBAAsB,mBAAmB,MAAM,gBAAgB,kBAAkB,EAAE,QAAQ,SAAS,OAAM,CAAE,IAAI;AACtH,SAAK,qBAAqB,OAAO,UAAU,0BAA0B;AACnE,YAAM,IAAI,WAAW,QAAQ,UAAU,mDAAmD,UAAU,QAAQ;IAC9G;AAEA,UAAM,mBAAmB,kBAAkB,YAAY;AACvD,UAAM,aAAa;AACnB,QAAI;AACJ,QAAI,sBAAqC;AACzC,QAAI,qBAAqB;AACvB,gCAA0B,oBAAoB;AAC9C,4BAAsB,oBAAoB;IAC5C,OAAO;AACL,gCAA0B,sBAAsB,OAAO;IACzD;AACA,UAAM,WAAW,wBAAwB,SAAS,UAAU,KAAI;AAChE,UAAM,oBAA8B,CAAA;AACpC,UAAM,uBAAuB,YAAY,aAAa,UAAU,CAAC,QAAQ;AACzE,QAAI,sBAAsB;AACxB,UAAI,SAAS,WAAW,0BAA0B,UAAU;AAC1D,cAAM,IAAI,WACR,QAAQ,UAAU,mBAAmB,QAAQ,8BAC7C,UAAU,QAAQ;MAEtB;AACA,UAAI,SAAS,WAAW,0BAA0B,QAAQ;AACxD,0BAAkB,KAAK,uCAAuC,UAAU,IAAI,QAAQ,EAAE;MACxF;IACF;AAEA,UAAM,oBAAoB,sBAAsB,kBAAkB,EAAE,QAAQ,YAAY,QAAQ,SAAS,OAAM,CAAE;AACjH,UAAM,mBAAmB,YACvB,QACA,iBAAiB,SAAS,MAC1B,YACA,YACA,aAAa,cAAc;AAE7B,UAAM,gBAAgB,kBAAkB,iBAAiB;AACzD,QAAI,oBAAoB,qBAAqB,kBAAkB;AAC7D,YAAM,GAAG,GAAG,gBAAgB;IAC9B;AAEA,UAAM,eAAe,mBAAmB;MACtC,QAAQ,OAAM;MACd;MACA,IAAI;MACJ,QAAQ;MACR,OAAO;MACP,SAAS,QAAQ;KAClB;AAED,QAAI;AACF,YAAM,mBAAmB,QAAQ,aAAa,YAAY;IAC5D,SAAS,OAAgB;AACvB,UAAI,oBAAoB,wBAAwB,QAAQ,qBAAqB,kBAAkB;AAC7F,cAAM,gBAAgB,kBAAkB,mBAAmB;AAC3D,cAAM,GAAG,GAAG,kBAAkB,EAAE,OAAO,KAAI,CAAE;MAC/C,WAAW,oBAAoB,wBAAwB,MAAM;AAC3D,cAAM,gBAAgB,kBAAkB,mBAAmB;MAC7D,OAAO;AACL,cAAM,GAAG,GAAG,kBAAkB,EAAE,OAAO,KAAI,CAAE;MAC/C;AACA,YAAM;IACR;AACA,UAAM,eAAe;MACnB,GAAI,MAAM,sBAAsB;QAC9B,MAAM;QACN,OAAO;QACP,IAAI;OACL;MACD,GAAI,MAAM,sBAAsB;QAC9B,MAAM,QAAQ;QACd,OAAO;QACP,IAAI;OACL;;AAGH,UAAM,cAAc,QAAQ,eAAe,YAAY;AACvD,WAAO;MACL,MAAM,iBAAiB;MACvB,eAAe;QACb,MAAM,eAAe;QACrB,QAAQ,eAAe;QACvB,eAAe,eAAe,eAAe;QAC7C,UAAU,YAAY;QACtB,UAAU,YAAY;;MAExB,gBAAgB,cAAc,yBAAyB,gBAAgB;MACvE,UAAU,CAAC,GAAG,QAAQ,uBAAuB,GAAG,mBAAmB,GAAG,YAAY;;EAEtF;AACE,UAAM,YAAW;EACnB;AACF;",
+  "names": ["global"]
+}

package/dist/cli-bundle/chunks/chunk-VGICHR7D.js

@@ -0,0 +1,141 @@
+import {
+  verifyHistoryChain
+} from "./chunk-JFWUHHS2.js";
+import {
+  hashDocument
+} from "./chunk-BUPWJ3IJ.js";
+import {
+  getHistoryPath,
+  writeFileAtomic
+} from "./chunk-LSXGH6NE.js";
+
+// dist/core/history/drift-scan.js
+import fs from "fs/promises";
+import path from "node:path";
+!(function() {
+  try {
+    var e = "undefined" != typeof window ? window : "undefined" != typeof global ? global : "undefined" != typeof globalThis ? globalThis : "undefined" != typeof self ? self : {}, n = new e.Error().stack;
+    n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "e8559b46-0199-506f-bf98-8f92a4474215");
+  } catch (e2) {
+  }
+})();
+var DRIFT_CACHE_VERSION = 1;
+var DRIFT_CACHE_FILENAME = "history-drift-cache.json";
+function getDriftCachePath(pmRoot) {
+  return path.join(pmRoot, "runtime", DRIFT_CACHE_FILENAME);
+}
+async function loadDriftCache(pmRoot) {
+  try {
+    const raw = await fs.readFile(getDriftCachePath(pmRoot), "utf8");
+    const parsed = JSON.parse(raw);
+    if (parsed.version !== DRIFT_CACHE_VERSION || typeof parsed.entries !== "object" || parsed.entries === null) {
+      return null;
+    }
+    return parsed;
+  } catch {
+    return null;
+  }
+}
+function isErrno(error, code) {
+  return typeof error === "object" && error !== null && "code" in error && error.code === code;
+}
+async function verifyHistoryStream(historyPath) {
+  const raw = await fs.readFile(historyPath, "utf8");
+  if (raw.trim().length === 0) {
+    return null;
+  }
+  const entries = [];
+  let latestAfterHash = null;
+  for (const line of raw.split(/\r?\n/)) {
+    const trimmed = line.trim();
+    if (trimmed.length === 0) {
+      continue;
+    }
+    const parsed = JSON.parse(trimmed);
+    if (typeof parsed.after_hash !== "string" || parsed.after_hash.trim().length === 0) {
+      throw new Error("missing after_hash");
+    }
+    entries.push(parsed);
+    latestAfterHash = parsed.after_hash;
+  }
+  if (!latestAfterHash) {
+    return null;
+  }
+  return { latestAfterHash, chainOk: verifyHistoryChain(entries).ok };
+}
+async function scanHistoryDrift(pmRoot, items) {
+  const missingStreams = [];
+  const unreadableStreams = [];
+  const hashMismatches = [];
+  const chainMismatches = [];
+  const cache = await loadDriftCache(pmRoot);
+  const previousEntries = cache?.entries ?? {};
+  const nextEntries = {};
+  let cacheDirty = false;
+  for (const item of items) {
+    const historyPath = getHistoryPath(pmRoot, item.id);
+    let stat;
+    try {
+      stat = await fs.stat(historyPath);
+    } catch (error) {
+      if (isErrno(error, "ENOENT")) {
+        missingStreams.push(item.id);
+      } else {
+        unreadableStreams.push(item.id);
+      }
+      continue;
+    }
+    const cached = previousEntries[item.id];
+    let verification;
+    if (cached && cached.mtime_ms === stat.mtimeMs && cached.ctime_ms === stat.ctimeMs && cached.size === stat.size) {
+      verification = { latestAfterHash: cached.latest_after_hash, chainOk: cached.chain_ok };
+    } else {
+      cacheDirty = true;
+      let result;
+      try {
+        result = await verifyHistoryStream(historyPath);
+      } catch {
+        unreadableStreams.push(item.id);
+        continue;
+      }
+      if (!result) {
+        missingStreams.push(item.id);
+        continue;
+      }
+      verification = result;
+    }
+    if (!verification.chainOk) {
+      chainMismatches.push(item.id);
+    }
+    nextEntries[item.id] = {
+      mtime_ms: stat.mtimeMs,
+      ctime_ms: stat.ctimeMs,
+      size: stat.size,
+      latest_after_hash: verification.latestAfterHash,
+      chain_ok: verification.chainOk
+    };
+    const { body, ...frontMatter } = item;
+    const currentHash = hashDocument({
+      metadata: frontMatter,
+      body
+    });
+    if (currentHash !== verification.latestAfterHash) {
+      hashMismatches.push(item.id);
+    }
+  }
+  if (cacheDirty || Object.keys(previousEntries).length !== Object.keys(nextEntries).length) {
+    const cachePath = getDriftCachePath(pmRoot);
+    try {
+      await fs.mkdir(path.dirname(cachePath), { recursive: true });
+      await writeFileAtomic(cachePath, JSON.stringify({ version: DRIFT_CACHE_VERSION, entries: nextEntries }));
+    } catch {
+    }
+  }
+  const driftedItems = [.../* @__PURE__ */ new Set([...missingStreams, ...unreadableStreams, ...hashMismatches, ...chainMismatches])].sort((a, b) => a.localeCompare(b));
+  return { missingStreams, unreadableStreams, hashMismatches, chainMismatches, driftedItems };
+}
+
+export {
+  scanHistoryDrift
+};
+//# sourceMappingURL=chunk-VGICHR7D.js.map

package/dist/cli-bundle/chunks/chunk-VGICHR7D.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../../core/history/drift-scan.ts"],
+  "sourcesContent": ["import fs from \"fs/promises\";\nimport path from \"node:path\";\nimport { getHistoryPath } from \"../store/paths.js\";\nimport { writeFileAtomic } from \"../fs/fs-utils.js\";\nimport { hashDocument } from \"./history.js\";\nimport { verifyHistoryChain } from \"./replay.js\";\nimport type { HistoryEntry, ItemMetadata } from \"../../types/index.js\";\n\nexport interface DriftScanResult {\n  missingStreams: string[];\n  unreadableStreams: string[];\n  hashMismatches: string[];\n  chainMismatches: string[];\n  driftedItems: string[];\n}\n\nconst DRIFT_CACHE_VERSION = 1;\nconst DRIFT_CACHE_FILENAME = \"history-drift-cache.json\";\n\ninterface DriftCacheEntry {\n  mtime_ms: number;\n  ctime_ms: number;\n  size: number;\n  latest_after_hash: string;\n  chain_ok: boolean;\n}\n\ninterface DriftCacheEnvelope {\n  version: number;\n  entries: Record<string, DriftCacheEntry>;\n}\n\nfunction getDriftCachePath(pmRoot: string): string {\n  return path.join(pmRoot, \"runtime\", DRIFT_CACHE_FILENAME);\n}\n\nasync function loadDriftCache(pmRoot: string): Promise<DriftCacheEnvelope | null> {\n  try {\n    const raw = await fs.readFile(getDriftCachePath(pmRoot), \"utf8\");\n    const parsed = JSON.parse(raw) as DriftCacheEnvelope;\n    if (parsed.version !== DRIFT_CACHE_VERSION || typeof parsed.entries !== \"object\" || parsed.entries === null) {\n      return null;\n    }\n    return parsed;\n  } catch {\n    return null;\n  }\n}\n\nfunction isErrno(error: unknown, code: string): boolean {\n  return typeof error === \"object\" && error !== null && \"code\" in error && (error as { code?: string }).code === code;\n}\n\ninterface StreamVerification {\n  latestAfterHash: string;\n  chainOk: boolean;\n}\n\n/**\n * Read and fully verify one history stream's hash chain. Returns null for an\n * empty/missing stream (caller records it as a missing stream).\n */\nasync function verifyHistoryStream(historyPath: string): Promise<StreamVerification | null> {\n  const raw = await fs.readFile(historyPath, \"utf8\");\n  if (raw.trim().length === 0) {\n    return null;\n  }\n  const entries: HistoryEntry[] = [];\n  let latestAfterHash: string | null = null;\n  for (const line of raw.split(/\\r?\\n/)) {\n    const trimmed = line.trim();\n    if (trimmed.length === 0) {\n      continue;\n    }\n    const parsed = JSON.parse(trimmed) as HistoryEntry;\n    if (typeof parsed.after_hash !== \"string\" || parsed.after_hash.trim().length === 0) {\n      throw new Error(\"missing after_hash\");\n    }\n    entries.push(parsed);\n    latestAfterHash = parsed.after_hash;\n  }\n  /* c8 ignore start -- defensive guard for future history schema changes. */\n  if (!latestAfterHash) {\n    return null;\n  }\n  /* c8 ignore stop */\n  return { latestAfterHash, chainOk: verifyHistoryChain(entries).ok };\n}\n\n/**\n * Scan every item's history stream for drift (missing/unreadable streams, broken\n * hash chains, and item/history hash mismatches).\n *\n * Full chain re-verification of a 17MB+ history tree is the dominant cost of\n * `pm health`. We cache the per-stream verification keyed by the history file's\n * mtime/size: an unchanged file has an identical chain and latest stored hash, so\n * we skip re-reading and re-hashing it. Item-side changes are still caught every\n * run because the current document hash is recomputed and compared to the cached\n * `latest_after_hash`.\n */\nexport async function scanHistoryDrift(\n  pmRoot: string,\n  items: Array<ItemMetadata & { body: string }>,\n): Promise<DriftScanResult> {\n  const missingStreams: string[] = [];\n  const unreadableStreams: string[] = [];\n  const hashMismatches: string[] = [];\n  const chainMismatches: string[] = [];\n\n  const cache = await loadDriftCache(pmRoot);\n  const previousEntries: Record<string, DriftCacheEntry> = cache?.entries ?? {};\n  const nextEntries: Record<string, DriftCacheEntry> = {};\n  let cacheDirty = false;\n\n  for (const item of items) {\n    const historyPath = getHistoryPath(pmRoot, item.id);\n\n    let stat: Awaited<ReturnType<typeof fs.stat>>;\n    try {\n      stat = await fs.stat(historyPath);\n    } catch (error: unknown) {\n      if (isErrno(error, \"ENOENT\")) {\n        missingStreams.push(item.id);\n      } else {\n        unreadableStreams.push(item.id);\n      }\n      continue;\n    }\n\n    const cached = previousEntries[item.id];\n    let verification: StreamVerification;\n    if (cached && cached.mtime_ms === stat.mtimeMs && cached.ctime_ms === stat.ctimeMs && cached.size === stat.size) {\n      verification = { latestAfterHash: cached.latest_after_hash, chainOk: cached.chain_ok };\n    } else {\n      cacheDirty = true;\n      let result: StreamVerification | null;\n      try {\n        result = await verifyHistoryStream(historyPath);\n      } catch {\n        unreadableStreams.push(item.id);\n        continue;\n      }\n      if (!result) {\n        missingStreams.push(item.id);\n        continue;\n      }\n      verification = result;\n    }\n\n    if (!verification.chainOk) {\n      chainMismatches.push(item.id);\n    }\n    nextEntries[item.id] = {\n      mtime_ms: stat.mtimeMs,\n      ctime_ms: stat.ctimeMs,\n      size: stat.size,\n      latest_after_hash: verification.latestAfterHash,\n      chain_ok: verification.chainOk,\n    };\n\n    const { body, ...frontMatter } = item;\n    const currentHash = hashDocument({\n      metadata: frontMatter as ItemMetadata,\n      body,\n    });\n    if (currentHash !== verification.latestAfterHash) {\n      hashMismatches.push(item.id);\n    }\n  }\n\n  if (cacheDirty || Object.keys(previousEntries).length !== Object.keys(nextEntries).length) {\n    const cachePath = getDriftCachePath(pmRoot);\n    try {\n      await fs.mkdir(path.dirname(cachePath), { recursive: true });\n      await writeFileAtomic(cachePath, JSON.stringify({ version: DRIFT_CACHE_VERSION, entries: nextEntries }));\n    } catch {\n      // Best-effort cache write: a failed persist must never fail a health scan.\n    }\n  }\n\n  const driftedItems = [...new Set([...missingStreams, ...unreadableStreams, ...hashMismatches, ...chainMismatches])].sort((a, b) =>\n    a.localeCompare(b),\n  );\n  return { missingStreams, unreadableStreams, hashMismatches, chainMismatches, driftedItems };\n}\n"],
+  "mappings": ";;;;;;;;;;;;AAAA,OAAO,QAAQ;AACf,OAAO,UAAU;;;;;;;;AAejB,IAAM,sBAAsB;AAC5B,IAAM,uBAAuB;AAe7B,SAAS,kBAAkB,QAAc;AACvC,SAAO,KAAK,KAAK,QAAQ,WAAW,oBAAoB;AAC1D;AAEA,eAAe,eAAe,QAAc;AAC1C,MAAI;AACF,UAAM,MAAM,MAAM,GAAG,SAAS,kBAAkB,MAAM,GAAG,MAAM;AAC/D,UAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,QAAI,OAAO,YAAY,uBAAuB,OAAO,OAAO,YAAY,YAAY,OAAO,YAAY,MAAM;AAC3G,aAAO;IACT;AACA,WAAO;EACT,QAAQ;AACN,WAAO;EACT;AACF;AAEA,SAAS,QAAQ,OAAgB,MAAY;AAC3C,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,UAAU,SAAU,MAA4B,SAAS;AACjH;AAWA,eAAe,oBAAoB,aAAmB;AACpD,QAAM,MAAM,MAAM,GAAG,SAAS,aAAa,MAAM;AACjD,MAAI,IAAI,KAAI,EAAG,WAAW,GAAG;AAC3B,WAAO;EACT;AACA,QAAM,UAA0B,CAAA;AAChC,MAAI,kBAAiC;AACrC,aAAW,QAAQ,IAAI,MAAM,OAAO,GAAG;AACrC,UAAM,UAAU,KAAK,KAAI;AACzB,QAAI,QAAQ,WAAW,GAAG;AACxB;IACF;AACA,UAAM,SAAS,KAAK,MAAM,OAAO;AACjC,QAAI,OAAO,OAAO,eAAe,YAAY,OAAO,WAAW,KAAI,EAAG,WAAW,GAAG;AAClF,YAAM,IAAI,MAAM,oBAAoB;IACtC;AACA,YAAQ,KAAK,MAAM;AACnB,sBAAkB,OAAO;EAC3B;AAEA,MAAI,CAAC,iBAAiB;AACpB,WAAO;EACT;AAEA,SAAO,EAAE,iBAAiB,SAAS,mBAAmB,OAAO,EAAE,GAAE;AACnE;AAaA,eAAsB,iBACpB,QACA,OAA6C;AAE7C,QAAM,iBAA2B,CAAA;AACjC,QAAM,oBAA8B,CAAA;AACpC,QAAM,iBAA2B,CAAA;AACjC,QAAM,kBAA4B,CAAA;AAElC,QAAM,QAAQ,MAAM,eAAe,MAAM;AACzC,QAAM,kBAAmD,OAAO,WAAW,CAAA;AAC3E,QAAM,cAA+C,CAAA;AACrD,MAAI,aAAa;AAEjB,aAAW,QAAQ,OAAO;AACxB,UAAM,cAAc,eAAe,QAAQ,KAAK,EAAE;AAElD,QAAI;AACJ,QAAI;AACF,aAAO,MAAM,GAAG,KAAK,WAAW;IAClC,SAAS,OAAgB;AACvB,UAAI,QAAQ,OAAO,QAAQ,GAAG;AAC5B,uBAAe,KAAK,KAAK,EAAE;MAC7B,OAAO;AACL,0BAAkB,KAAK,KAAK,EAAE;MAChC;AACA;IACF;AAEA,UAAM,SAAS,gBAAgB,KAAK,EAAE;AACtC,QAAI;AACJ,QAAI,UAAU,OAAO,aAAa,KAAK,WAAW,OAAO,aAAa,KAAK,WAAW,OAAO,SAAS,KAAK,MAAM;AAC/G,qBAAe,EAAE,iBAAiB,OAAO,mBAAmB,SAAS,OAAO,SAAQ;IACtF,OAAO;AACL,mBAAa;AACb,UAAI;AACJ,UAAI;AACF,iBAAS,MAAM,oBAAoB,WAAW;MAChD,QAAQ;AACN,0BAAkB,KAAK,KAAK,EAAE;AAC9B;MACF;AACA,UAAI,CAAC,QAAQ;AACX,uBAAe,KAAK,KAAK,EAAE;AAC3B;MACF;AACA,qBAAe;IACjB;AAEA,QAAI,CAAC,aAAa,SAAS;AACzB,sBAAgB,KAAK,KAAK,EAAE;IAC9B;AACA,gBAAY,KAAK,EAAE,IAAI;MACrB,UAAU,KAAK;MACf,UAAU,KAAK;MACf,MAAM,KAAK;MACX,mBAAmB,aAAa;MAChC,UAAU,aAAa;;AAGzB,UAAM,EAAE,MAAM,GAAG,YAAW,IAAK;AACjC,UAAM,cAAc,aAAa;MAC/B,UAAU;MACV;KACD;AACD,QAAI,gBAAgB,aAAa,iBAAiB;AAChD,qBAAe,KAAK,KAAK,EAAE;IAC7B;EACF;AAEA,MAAI,cAAc,OAAO,KAAK,eAAe,EAAE,WAAW,OAAO,KAAK,WAAW,EAAE,QAAQ;AACzF,UAAM,YAAY,kBAAkB,MAAM;AAC1C,QAAI;AACF,YAAM,GAAG,MAAM,KAAK,QAAQ,SAAS,GAAG,EAAE,WAAW,KAAI,CAAE;AAC3D,YAAM,gBAAgB,WAAW,KAAK,UAAU,EAAE,SAAS,qBAAqB,SAAS,YAAW,CAAE,CAAC;IACzG,QAAQ;IAER;EACF;AAEA,QAAM,eAAe,CAAC,GAAG,oBAAI,IAAI,CAAC,GAAG,gBAAgB,GAAG,mBAAmB,GAAG,gBAAgB,GAAG,eAAe,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,MAC3H,EAAE,cAAc,CAAC,CAAC;AAEpB,SAAO,EAAE,gBAAgB,mBAAmB,gBAAgB,iBAAiB,aAAY;AAC3F;",
+  "names": []
+}