@unbrained/pm-cli 2026.7.14 → 2026.7.15

package/dist/cli-bundle/chunks/{chunk-QZ7LT3XE.js → chunk-ONREO4ST.js}

@@ -4,7 +4,7 @@ import {
   nowIso,
   readSettings,
   writeSettings
-} from "./chunk-GSEADLRH.js";
+} from "./chunk-Q7A43DS4.js";
 import {
   EXIT_CODE,
   appendLineAtomic,
@@ -13,7 +13,7 @@ import {
   resolvePmPackageRootFromModule,
   resolveTelemetryErrorCategory,
   writeFileAtomic
-} from "./chunk-GXXC7QSK.js";
+} from "./chunk-QKECXBBG.js";
 
 // dist/core/telemetry/observability.js
 var SETUP_ROOT_COMMANDS = /* @__PURE__ */ new Set([
@@ -1826,6 +1826,6 @@ export {
   finishTelemetryCommand,
   emitTelemetryErrorEvent
 };
-//# sourceMappingURL=chunk-QZ7LT3XE.js.map
+//# sourceMappingURL=chunk-ONREO4ST.js.map
 
 //# debugId=483206fd-6bae-5a77-bdc2-a264974d50fe

package/dist/cli-bundle/chunks/chunk-OW4JWD5M.js

@@ -0,0 +1,61 @@
+
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="fff60ee6-8be3-5896-bb4b-1edb35521f42")}catch(e){}}();
+import {
+  ensureMaterializedHistoryTarget,
+  readHistoryEntries,
+  replayHistoryToTarget,
+  replayToCanonicalItemDocument,
+  resolveHistorySubject,
+  resolveHistoryTarget
+} from "./chunk-GOSLKLFE.js";
+import {
+  getActiveExtensionRegistrations,
+  readSettings
+} from "./chunk-Q7A43DS4.js";
+import {
+  EXIT_CODE,
+  PmCliError,
+  getSettingsPath,
+  pathExists,
+  resolveItemTypeRegistry,
+  resolvePmRoot
+} from "./chunk-QKECXBBG.js";
+
+// dist/sdk/history-read.js
+async function getItemAt(id, target, options = {}) {
+  const pmRoot = resolvePmRoot(options.cwd ?? process.cwd(), options.pmRoot);
+  if (!await pathExists(getSettingsPath(pmRoot))) {
+    throw new PmCliError(`Tracker is not initialized at ${pmRoot}. Run pm init first.`, EXIT_CODE.NOT_FOUND);
+  }
+  const settings = await readSettings(pmRoot);
+  const typeRegistry = resolveItemTypeRegistry(settings, getActiveExtensionRegistrations());
+  const subject = await resolveHistorySubject(pmRoot, id, settings, typeRegistry.type_to_folder);
+  const history = await readHistoryEntries(subject.historyPath, subject.id);
+  if (history.length === 0) {
+    throw new PmCliError(`No history exists for ${subject.id}; point-in-time reads are unavailable.`, EXIT_CODE.NOT_FOUND);
+  }
+  const resolvedTarget = resolveHistoryTarget(target, history);
+  const replay = ensureMaterializedHistoryTarget(replayHistoryToTarget(history, resolvedTarget.historyIndex), resolvedTarget);
+  const document = replayToCanonicalItemDocument(replay, {
+    schema: settings.schema
+  });
+  if (document.metadata.id !== subject.id) {
+    throw new PmCliError(`History target resolved to item ${document.metadata.id}, expected ${subject.id}.`, EXIT_CODE.GENERIC_FAILURE);
+  }
+  const targetEntry = history[resolvedTarget.historyIndex];
+  return {
+    document,
+    reconstructed: true,
+    as_of_version: resolvedTarget.historyIndex + 1,
+    as_of_timestamp: targetEntry.ts,
+    target: resolvedTarget,
+    history_length: history.length
+  };
+}
+
+export {
+  getItemAt
+};
+//# sourceMappingURL=chunk-OW4JWD5M.js.map
+
+//# debugId=fff60ee6-8be3-5896-bb4b-1edb35521f42

package/dist/cli-bundle/chunks/chunk-OW4JWD5M.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../../sdk/history-read.ts"],"sourcesContent":["/**\n * @module sdk/history-read\n *\n * Public, mutation-free item time-travel reads backed by the same verified\n * replay kernel used by `pm restore`. Integrators can use this primitive as a\n * building block for provenance browsers, immutable records, and VCS-like\n * systems without acquiring locks or appending history.\n */\nimport { getActiveExtensionRegistrations } from \"../core/extensions/index.js\";\nimport { pathExists } from \"../core/fs/fs-utils.js\";\nimport {\n  applyHistoryPatch,\n  ensureMaterializedHistoryTarget,\n  extractPatchFailureContext,\n  replayHistoryToTarget,\n  resolveHistoryTarget,\n  type ResolvedHistoryTarget,\n} from \"../core/history/projection.js\";\nimport { readHistoryEntries } from \"../core/history/read.js\";\nimport { replayToCanonicalItemDocument } from \"../core/history/replay.js\";\nimport { resolveItemTypeRegistry } from \"../core/item/type-registry.js\";\nimport { EXIT_CODE } from \"../core/shared/constants.js\";\nimport { PmCliError } from \"../core/shared/errors.js\";\nimport { getSettingsPath, resolvePmRoot } from \"../core/store/paths.js\";\nimport { readSettings } from \"../core/store/settings.js\";\nimport type { ItemDocument } from \"../types/index.js\";\nimport { resolveHistorySubject } from \"./history-redact.js\";\n\n/** Workspace resolution controls accepted by {@link getItemAt}. */\nexport interface GetItemAtOptions {\n  /** Explicit tracker root, equivalent to the CLI global `--path`. */\n  pmRoot?: string;\n  /** Working directory used when discovering the nearest tracker. */\n  cwd?: string;\n}\n\n/** Verified historical item projection returned by {@link getItemAt}. */\nexport interface GetItemAtResult {\n  /** Reconstructed canonical item document at the selected version. */\n  document: ItemDocument;\n  /** Always true, preventing consumers from confusing this with current state. */\n  reconstructed: true;\n  /** One-based version included in the projection. */\n  as_of_version: number;\n  /** Timestamp of the final included history entry. */\n  as_of_timestamp: string;\n  /** Normalized target resolution metadata shared with restore. */\n  target: ResolvedHistoryTarget;\n  /** Total number of entries currently available in the stream. */\n  history_length: number;\n}\n\n/**\n * Reconstruct one item at a one-based version or ISO timestamp without locks,\n * item writes, history writes, or derived-index mutations.\n */\nexport async function getItemAt(\n  id: string,\n  target: string,\n  options: GetItemAtOptions = {},\n): Promise<GetItemAtResult> {\n  const pmRoot = resolvePmRoot(options.cwd ?? process.cwd(), options.pmRoot);\n  if (!(await pathExists(getSettingsPath(pmRoot)))) {\n    throw new PmCliError(\n      `Tracker is not initialized at ${pmRoot}. Run pm init first.`,\n      EXIT_CODE.NOT_FOUND,\n    );\n  }\n  const settings = await readSettings(pmRoot);\n  const typeRegistry = resolveItemTypeRegistry(\n    settings,\n    getActiveExtensionRegistrations(),\n  );\n  const subject = await resolveHistorySubject(\n    pmRoot,\n    id,\n    settings,\n    typeRegistry.type_to_folder,\n  );\n  const history = await readHistoryEntries(subject.historyPath, subject.id);\n  if (history.length === 0) {\n    throw new PmCliError(\n      `No history exists for ${subject.id}; point-in-time reads are unavailable.`,\n      EXIT_CODE.NOT_FOUND,\n    );\n  }\n  const resolvedTarget = resolveHistoryTarget(target, history);\n  const replay = ensureMaterializedHistoryTarget(\n    replayHistoryToTarget(history, resolvedTarget.historyIndex),\n    resolvedTarget,\n  );\n  const document = replayToCanonicalItemDocument(replay, {\n    schema: settings.schema,\n  });\n  if (document.metadata.id !== subject.id) {\n    throw new PmCliError(\n      `History target resolved to item ${document.metadata.id}, expected ${subject.id}.`,\n      EXIT_CODE.GENERIC_FAILURE,\n    );\n  }\n  const targetEntry = history[resolvedTarget.historyIndex];\n  return {\n    document,\n    reconstructed: true,\n    as_of_version: resolvedTarget.historyIndex + 1,\n    as_of_timestamp: targetEntry.ts,\n    target: resolvedTarget,\n    history_length: history.length,\n  };\n}\n\nexport {\n  applyHistoryPatch,\n  ensureMaterializedHistoryTarget,\n  extractPatchFailureContext,\n  readHistoryEntries,\n  replayHistoryToTarget,\n  resolveHistoryTarget,\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAwDA,eAAsB,UACpB,IACA,QACA,UAA4B,CAAA,GAAE;AAE9B,QAAM,SAAS,cAAc,QAAQ,OAAO,QAAQ,IAAG,GAAI,QAAQ,MAAM;AACzE,MAAI,CAAE,MAAM,WAAW,gBAAgB,MAAM,CAAC,GAAI;AAChD,UAAM,IAAI,WACR,iCAAiC,MAAM,wBACvC,UAAU,SAAS;EAEvB;AACA,QAAM,WAAW,MAAM,aAAa,MAAM;AAC1C,QAAM,eAAe,wBACnB,UACA,gCAA+B,CAAE;AAEnC,QAAM,UAAU,MAAM,sBACpB,QACA,IACA,UACA,aAAa,cAAc;AAE7B,QAAM,UAAU,MAAM,mBAAmB,QAAQ,aAAa,QAAQ,EAAE;AACxE,MAAI,QAAQ,WAAW,GAAG;AACxB,UAAM,IAAI,WACR,yBAAyB,QAAQ,EAAE,0CACnC,UAAU,SAAS;EAEvB;AACA,QAAM,iBAAiB,qBAAqB,QAAQ,OAAO;AAC3D,QAAM,SAAS,gCACb,sBAAsB,SAAS,eAAe,YAAY,GAC1D,cAAc;AAEhB,QAAM,WAAW,8BAA8B,QAAQ;IACrD,QAAQ,SAAS;GAClB;AACD,MAAI,SAAS,SAAS,OAAO,QAAQ,IAAI;AACvC,UAAM,IAAI,WACR,mCAAmC,SAAS,SAAS,EAAE,cAAc,QAAQ,EAAE,KAC/E,UAAU,eAAe;EAE7B;AACA,QAAM,cAAc,QAAQ,eAAe,YAAY;AACvD,SAAO;IACL;IACA,eAAe;IACf,eAAe,eAAe,eAAe;IAC7C,iBAAiB,YAAY;IAC7B,QAAQ;IACR,gBAAgB,QAAQ;;AAE5B","debugId":"fff60ee6-8be3-5896-bb4b-1edb35521f42"}

package/dist/cli-bundle/chunks/{chunk-3CMRNVTO.js → chunk-P74IZQ7A.js}

@@ -5,29 +5,29 @@ import {
   loadMutationCheckpoint,
   restoreCheckpointItems,
   writeMutationCheckpoint
-} from "./chunk-ZTRBSABY.js";
+} from "./chunk-PGY23YTC.js";
 import {
   runRestore
-} from "./chunk-ZAYYDNB3.js";
-import {
-  runClose
-} from "./chunk-TZRTLMWM.js";
-import {
-  resolveAuthor
-} from "./chunk-CUFW7ITY.js";
+} from "./chunk-HO4KXD6I.js";
 import {
   hasListFilters
 } from "./chunk-N7V7TI6J.js";
 import {
   runList
-} from "./chunk-6TTOHMTB.js";
+} from "./chunk-UXONS674.js";
+import {
+  resolveAuthor
+} from "./chunk-CUFW7ITY.js";
+import {
+  runClose
+} from "./chunk-UFXU44HV.js";
 import {
   getActiveExtensionRegistrations,
   isTerminalStatus,
   listAllItemMetadataLight,
   nowIso,
   readSettings
-} from "./chunk-GSEADLRH.js";
+} from "./chunk-Q7A43DS4.js";
 import {
   EXIT_CODE,
   PmCliError,
@@ -37,7 +37,7 @@ import {
   resolvePmRoot,
   resolveRuntimeStatusRegistry,
   toErrorMessage
-} from "./chunk-GXXC7QSK.js";
+} from "./chunk-QKECXBBG.js";
 
 // dist/cli/commands/close-many.js
 var CLOSE_MANY_CHECKPOINT_SCHEMA_VERSION = 1;
@@ -399,6 +399,6 @@ export {
   runCloseMany,
   _testOnly
 };
-//# sourceMappingURL=chunk-3CMRNVTO.js.map
+//# sourceMappingURL=chunk-P74IZQ7A.js.map
 
 //# debugId=25f9bc90-a71d-54c0-916a-8c3972f6df68

package/dist/cli-bundle/chunks/chunk-PENXZX3U.js

@@ -0,0 +1,172 @@
+import {
+  DEFAULT_EXTENSION_PRIORITY,
+  EXIT_CODE,
+  PmCliError,
+  isCanonicalPathWithinDirectory,
+  isPathWithinDirectory,
+  pathExists
+} from "./chunk-BSEQUTQP.js";
+
+// dist/sdk/command-line.js
+!(function() {
+  try {
+    var e = "undefined" != typeof window ? window : "undefined" != typeof global ? global : "undefined" != typeof globalThis ? globalThis : "undefined" != typeof self ? self : {}, n = new e.Error().stack;
+    n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "82ea8f22-efe9-5310-9fc7-a373063b7f0b");
+  } catch (e2) {
+  }
+})();
+var quoteWindowsCommandArg = (arg) => {
+  let escaped = '"';
+  let pendingBackslashes = 0;
+  for (const character of arg) {
+    if (character === "\\") {
+      pendingBackslashes += 1;
+      continue;
+    }
+    escaped += "\\".repeat(character === '"' ? pendingBackslashes * 2 + 1 : pendingBackslashes);
+    escaped += character;
+    pendingBackslashes = 0;
+  }
+  return `${escaped}${"\\".repeat(pendingBackslashes * 2)}"`;
+};
+var quoteCommandArg = (arg, platform = process.platform) => {
+  const safePattern = platform === "win32" ? /^[A-Za-z0-9._:/\\@=-]+$/ : /^[A-Za-z0-9._:/@=-]+$/;
+  if (safePattern.test(arg)) {
+    return arg;
+  }
+  if (platform === "win32") {
+    return quoteWindowsCommandArg(arg);
+  }
+  return `"${arg.replace(/(["\\$`])/g, "\\$1")}"`;
+};
+var renderPmCommand = (argv, platform = process.platform) => {
+  const args = argv.map((token) => quoteCommandArg(token, platform)).join(" ");
+  return args.length > 0 ? `pm ${args}` : "pm";
+};
+
+// dist/sdk/extension/shared.js
+import fs from "node:fs/promises";
+import path from "node:path";
+!(function() {
+  try {
+    var e = "undefined" != typeof window ? window : "undefined" != typeof global ? global : "undefined" != typeof globalThis ? globalThis : "undefined" != typeof self ? self : {}, n = new e.Error().stack;
+    n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "79cbf5a9-d060-546d-aa23-79e4b16fa6dc");
+  } catch (e2) {
+  }
+})();
+function normalizeStringList(values) {
+  return [
+    ...new Set(values.map((value) => value.trim()).filter((value) => value.length > 0))
+  ].sort((left, right) => left.localeCompare(right));
+}
+function normalizeExtensionNameForMatch(value) {
+  return value.trim().toLowerCase();
+}
+function normalizeManagedDirectoryName(name) {
+  const normalized = name.trim().toLowerCase().replace(/[^a-z0-9._-]+/g, "-");
+  let start = 0;
+  while (normalized[start] === "-") {
+    start += 1;
+  }
+  let end = normalized.length;
+  while (end > start && normalized[end - 1] === "-") {
+    end -= 1;
+  }
+  const directoryName = normalized.slice(start, end);
+  if (directoryName.length === 0) {
+    throw new PmCliError("Extension manifest name must resolve to a non-empty directory name.", EXIT_CODE.USAGE);
+  }
+  if (directoryName === "." || directoryName === "..") {
+    throw new PmCliError('Extension manifest name must not resolve to "." or "..".', EXIT_CODE.USAGE);
+  }
+  return directoryName;
+}
+function parseOptionalManifestPriority(value) {
+  if (value === void 0 || value === null) {
+    return DEFAULT_EXTENSION_PRIORITY;
+  }
+  return typeof value === "number" && Number.isInteger(value) ? value : null;
+}
+function parseOptionalManifestCapabilities(value) {
+  if (value === void 0 || value === null) {
+    return [];
+  }
+  if (!Array.isArray(value) || value.some((entry) => typeof entry !== "string")) {
+    return null;
+  }
+  return normalizeStringList(value.map((entry) => String(entry).toLowerCase()));
+}
+function parseExtensionManifest(raw) {
+  if (typeof raw !== "object" || raw === null) {
+    return null;
+  }
+  const candidate = raw;
+  if (typeof candidate.name !== "string" || candidate.name.trim().length === 0) {
+    return null;
+  }
+  if (typeof candidate.version !== "string" || candidate.version.trim().length === 0) {
+    return null;
+  }
+  if (typeof candidate.entry !== "string" || candidate.entry.trim().length === 0) {
+    return null;
+  }
+  const priority = parseOptionalManifestPriority(candidate.priority);
+  const capabilities = parseOptionalManifestCapabilities(candidate.capabilities);
+  if (priority === null || capabilities === null) {
+    return null;
+  }
+  return {
+    name: candidate.name.trim(),
+    version: candidate.version.trim(),
+    entry: candidate.entry.trim(),
+    priority,
+    capabilities
+  };
+}
+async function validateExtensionDirectory(directory) {
+  const manifestPath = path.join(directory, "manifest.json");
+  if (!await pathExists(manifestPath)) {
+    throw new PmCliError(`Extension manifest is missing at "${manifestPath}".`, EXIT_CODE.USAGE);
+  }
+  let parsedManifest;
+  try {
+    parsedManifest = JSON.parse(await fs.readFile(manifestPath, "utf8"));
+  } catch (error) {
+    throw new PmCliError(`Failed to parse extension manifest at "${manifestPath}": ${formatManifestReadError(error)}`, EXIT_CODE.USAGE);
+  }
+  const manifest = parseExtensionManifest(parsedManifest);
+  if (!manifest) {
+    throw new PmCliError(`Extension manifest at "${manifestPath}" is invalid.`, EXIT_CODE.USAGE);
+  }
+  const entryPath = path.resolve(directory, manifest.entry);
+  if (!isPathWithinDirectory(directory, entryPath)) {
+    throw new PmCliError(`Extension entry "${manifest.entry}" resolves outside extension directory "${directory}".`, EXIT_CODE.USAGE);
+  }
+  if (!await pathExists(entryPath)) {
+    throw new PmCliError(`Extension entry file is missing at "${entryPath}".`, EXIT_CODE.USAGE);
+  }
+  if (!await isCanonicalPathWithinDirectory(directory, entryPath)) {
+    throw new PmCliError(`Extension entry "${manifest.entry}" resolves outside extension directory after symlink resolution.`, EXIT_CODE.USAGE);
+  }
+  return {
+    directory,
+    manifest_path: manifestPath,
+    entry_path: entryPath,
+    manifest
+  };
+}
+function formatManifestReadError(error) {
+  return error instanceof Error ? error.message : String(error);
+}
+
+export {
+  quoteWindowsCommandArg,
+  quoteCommandArg,
+  renderPmCommand,
+  normalizeStringList,
+  normalizeExtensionNameForMatch,
+  normalizeManagedDirectoryName,
+  parseExtensionManifest,
+  validateExtensionDirectory
+};
+//# sourceMappingURL=chunk-PENXZX3U.js.map

package/dist/cli-bundle/chunks/chunk-PENXZX3U.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../../sdk/command-line.ts", "../../../../../../../../sdk/extension/shared.ts"],
+  "sourcesContent": ["/**\n * @module sdk/command-line\n *\n * Renders copy-safe pm command suggestions for SDK and CLI diagnostics.\n */\n\n/** Quote one Windows argument with the linear CommandLineToArgvW escaping algorithm. */\nexport const quoteWindowsCommandArg = (arg: string): string => {\n  let escaped = '\"';\n  let pendingBackslashes = 0;\n  for (const character of arg) {\n    if (character === \"\\\\\") {\n      pendingBackslashes += 1;\n      continue;\n    }\n    escaped += \"\\\\\".repeat(\n      character === '\"' ? pendingBackslashes * 2 + 1 : pendingBackslashes,\n    );\n    escaped += character;\n    pendingBackslashes = 0;\n  }\n  return `${escaped}${\"\\\\\".repeat(pendingBackslashes * 2)}\"`;\n};\n\n/** Quote one command argument only when platform shell-significant characters require it. */\nexport const quoteCommandArg = (\n  arg: string,\n  platform: NodeJS.Platform = process.platform,\n): string => {\n  const safePattern =\n    platform === \"win32\" ? /^[A-Za-z0-9._:/\\\\@=-]+$/ : /^[A-Za-z0-9._:/@=-]+$/;\n  if (safePattern.test(arg)) {\n    return arg;\n  }\n  if (platform === \"win32\") {\n    return quoteWindowsCommandArg(arg);\n  }\n  return `\"${arg.replace(/([\"\\\\$`])/g, \"\\\\$1\")}\"`;\n};\n\n/** Render a complete pm command from already-tokenized arguments. */\nexport const renderPmCommand = (\n  argv: string[],\n  platform: NodeJS.Platform = process.platform,\n): string => {\n  const args = argv.map((token) => quoteCommandArg(token, platform)).join(\" \");\n  return args.length > 0 ? `pm ${args}` : \"pm\";\n};\n", "/**\n * @module sdk/extension/shared\n *\n * Implements extension package-management support for Shared.\n */\nimport fs from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { pathExists } from \"../../core/fs/fs-utils.js\";\nimport { isPathWithinDirectory } from \"../../core/fs/path-utils.js\";\nimport { EXIT_CODE } from \"../../core/shared/constants.js\";\nimport { PmCliError } from \"../../core/shared/errors.js\";\nimport {\n  DEFAULT_EXTENSION_PRIORITY,\n  isCanonicalPathWithinDirectory,\n  type ExtensionManifest,\n} from \"../../core/extensions/loader.js\";\n\nexport { DEFAULT_EXTENSION_PRIORITY, isCanonicalPathWithinDirectory };\n\n/** Documents the validated extension directory payload exchanged by command, SDK, and package integrations. */\nexport interface ValidatedExtensionDirectory {\n  /** Value that configures or reports directory for this contract. */\n  directory: string;\n  /** Filesystem path used for manifest resolution. */\n  manifest_path: string;\n  /** Filesystem path used for entry resolution. */\n  entry_path: string;\n  /** Declarative package manifest consumed by the extension loader. */\n  manifest: ExtensionManifest;\n}\n\n/** Implements normalize string list for the public runtime surface of this module. */\nexport function normalizeStringList(values: readonly string[]): string[] {\n  return [\n    ...new Set(\n      values.map((value) => value.trim()).filter((value) => value.length > 0),\n    ),\n  ].sort((left, right) => left.localeCompare(right));\n}\n\n/** Implements normalize extension name for match for the public runtime surface of this module. */\nexport function normalizeExtensionNameForMatch(value: string): string {\n  return value.trim().toLowerCase();\n}\n\n/** Implements normalize managed directory name for the public runtime surface of this module. */\nexport function normalizeManagedDirectoryName(name: string): string {\n  const normalized = name\n    .trim()\n    .toLowerCase()\n    .replace(/[^a-z0-9._-]+/g, \"-\");\n  let start = 0;\n  while (normalized[start] === \"-\") {\n    start += 1;\n  }\n  let end = normalized.length;\n  while (end > start && normalized[end - 1] === \"-\") {\n    end -= 1;\n  }\n  const directoryName = normalized.slice(start, end);\n  if (directoryName.length === 0) {\n    throw new PmCliError(\n      \"Extension manifest name must resolve to a non-empty directory name.\",\n      EXIT_CODE.USAGE,\n    );\n  }\n  if (directoryName === \".\" || directoryName === \"..\") {\n    // Manifest-controlled input must resolve to a dedicated child directory, never\n    // the extensions root itself or its parent (path-traversal guard).\n    throw new PmCliError(\n      'Extension manifest name must not resolve to \".\" or \"..\".',\n      EXIT_CODE.USAGE,\n    );\n  }\n  return directoryName;\n}\n\nfunction parseOptionalManifestPriority(value: unknown): number | null {\n  if (value === undefined || value === null) {\n    return DEFAULT_EXTENSION_PRIORITY;\n  }\n  return typeof value === \"number\" && Number.isInteger(value) ? value : null;\n}\n\nfunction parseOptionalManifestCapabilities(value: unknown): string[] | null {\n  if (value === undefined || value === null) {\n    return [];\n  }\n  if (\n    !Array.isArray(value) ||\n    value.some((entry) => typeof entry !== \"string\")\n  ) {\n    return null;\n  }\n  return normalizeStringList(value.map((entry) => String(entry).toLowerCase()));\n}\n\n/** Implements parse extension manifest for the public runtime surface of this module. */\nexport function parseExtensionManifest(raw: unknown): ExtensionManifest | null {\n  if (typeof raw !== \"object\" || raw === null) {\n    return null;\n  }\n  const candidate = raw as Record<string, unknown>;\n  if (\n    typeof candidate.name !== \"string\" ||\n    candidate.name.trim().length === 0\n  ) {\n    return null;\n  }\n  if (\n    typeof candidate.version !== \"string\" ||\n    candidate.version.trim().length === 0\n  ) {\n    return null;\n  }\n  if (\n    typeof candidate.entry !== \"string\" ||\n    candidate.entry.trim().length === 0\n  ) {\n    return null;\n  }\n\n  const priority = parseOptionalManifestPriority(candidate.priority);\n  const capabilities = parseOptionalManifestCapabilities(\n    candidate.capabilities,\n  );\n  if (priority === null || capabilities === null) {\n    return null;\n  }\n\n  return {\n    name: candidate.name.trim(),\n    version: candidate.version.trim(),\n    entry: candidate.entry.trim(),\n    priority,\n    capabilities,\n  };\n}\n\n/** Implements validate extension directory for the public runtime surface of this module. */\nexport async function validateExtensionDirectory(\n  directory: string,\n): Promise<ValidatedExtensionDirectory> {\n  const manifestPath = path.join(directory, \"manifest.json\");\n  if (!(await pathExists(manifestPath))) {\n    throw new PmCliError(\n      `Extension manifest is missing at \"${manifestPath}\".`,\n      EXIT_CODE.USAGE,\n    );\n  }\n\n  let parsedManifest: unknown;\n  try {\n    parsedManifest = JSON.parse(\n      await fs.readFile(manifestPath, \"utf8\"),\n    ) as unknown;\n  } catch (error: unknown) {\n    throw new PmCliError(\n      `Failed to parse extension manifest at \"${manifestPath}\": ${formatManifestReadError(error)}`,\n      EXIT_CODE.USAGE,\n    );\n  }\n\n  const manifest = parseExtensionManifest(parsedManifest);\n  if (!manifest) {\n    throw new PmCliError(\n      `Extension manifest at \"${manifestPath}\" is invalid.`,\n      EXIT_CODE.USAGE,\n    );\n  }\n\n  const entryPath = path.resolve(directory, manifest.entry);\n  if (!isPathWithinDirectory(directory, entryPath)) {\n    throw new PmCliError(\n      `Extension entry \"${manifest.entry}\" resolves outside extension directory \"${directory}\".`,\n      EXIT_CODE.USAGE,\n    );\n  }\n  if (!(await pathExists(entryPath))) {\n    throw new PmCliError(\n      `Extension entry file is missing at \"${entryPath}\".`,\n      EXIT_CODE.USAGE,\n    );\n  }\n  if (!(await isCanonicalPathWithinDirectory(directory, entryPath))) {\n    throw new PmCliError(\n      `Extension entry \"${manifest.entry}\" resolves outside extension directory after symlink resolution.`,\n      EXIT_CODE.USAGE,\n    );\n  }\n\n  return {\n    directory,\n    manifest_path: manifestPath,\n    entry_path: entryPath,\n    manifest,\n  };\n}\n\nfunction formatManifestReadError(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n\n/** Public contract for test only extension shared, shared by SDK and presentation-layer consumers. */\nexport const _testOnlyExtensionShared = {\n  formatManifestReadError,\n};\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;AAOO,IAAM,yBAAyB,CAAC,QAAuB;AAC5D,MAAI,UAAU;AACd,MAAI,qBAAqB;AACzB,aAAW,aAAa,KAAK;AAC3B,QAAI,cAAc,MAAM;AACtB,4BAAsB;AACtB;IACF;AACA,eAAW,KAAK,OACd,cAAc,MAAM,qBAAqB,IAAI,IAAI,kBAAkB;AAErE,eAAW;AACX,yBAAqB;EACvB;AACA,SAAO,GAAG,OAAO,GAAG,KAAK,OAAO,qBAAqB,CAAC,CAAC;AACzD;AAGO,IAAM,kBAAkB,CAC7B,KACA,WAA4B,QAAQ,aAC1B;AACV,QAAM,cACJ,aAAa,UAAU,4BAA4B;AACrD,MAAI,YAAY,KAAK,GAAG,GAAG;AACzB,WAAO;EACT;AACA,MAAI,aAAa,SAAS;AACxB,WAAO,uBAAuB,GAAG;EACnC;AACA,SAAO,IAAI,IAAI,QAAQ,cAAc,MAAM,CAAC;AAC9C;AAGO,IAAM,kBAAkB,CAC7B,MACA,WAA4B,QAAQ,aAC1B;AACV,QAAM,OAAO,KAAK,IAAI,CAAC,UAAU,gBAAgB,OAAO,QAAQ,CAAC,EAAE,KAAK,GAAG;AAC3E,SAAO,KAAK,SAAS,IAAI,MAAM,IAAI,KAAK;AAC1C;;;AC1CA,OAAO,QAAQ;AACf,OAAO,UAAU;A;;;;;;;AA0BX,SAAU,oBAAoB,QAAyB;AAC3D,SAAO;IACL,GAAG,IAAI,IACL,OAAO,IAAI,CAAC,UAAU,MAAM,KAAI,CAAE,EAAE,OAAO,CAAC,UAAU,MAAM,SAAS,CAAC,CAAC;IAEzE,KAAK,CAAC,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;AACnD;AAGM,SAAU,+BAA+B,OAAa;AAC1D,SAAO,MAAM,KAAI,EAAG,YAAW;AACjC;AAGM,SAAU,8BAA8B,MAAY;AACxD,QAAM,aAAa,KAChB,KAAI,EACJ,YAAW,EACX,QAAQ,kBAAkB,GAAG;AAChC,MAAI,QAAQ;AACZ,SAAO,WAAW,KAAK,MAAM,KAAK;AAChC,aAAS;EACX;AACA,MAAI,MAAM,WAAW;AACrB,SAAO,MAAM,SAAS,WAAW,MAAM,CAAC,MAAM,KAAK;AACjD,WAAO;EACT;AACA,QAAM,gBAAgB,WAAW,MAAM,OAAO,GAAG;AACjD,MAAI,cAAc,WAAW,GAAG;AAC9B,UAAM,IAAI,WACR,uEACA,UAAU,KAAK;EAEnB;AACA,MAAI,kBAAkB,OAAO,kBAAkB,MAAM;AAGnD,UAAM,IAAI,WACR,4DACA,UAAU,KAAK;EAEnB;AACA,SAAO;AACT;AAEA,SAAS,8BAA8B,OAAc;AACnD,MAAI,UAAU,UAAa,UAAU,MAAM;AACzC,WAAO;EACT;AACA,SAAO,OAAO,UAAU,YAAY,OAAO,UAAU,KAAK,IAAI,QAAQ;AACxE;AAEA,SAAS,kCAAkC,OAAc;AACvD,MAAI,UAAU,UAAa,UAAU,MAAM;AACzC,WAAO,CAAA;EACT;AACA,MACE,CAAC,MAAM,QAAQ,KAAK,KACpB,MAAM,KAAK,CAAC,UAAU,OAAO,UAAU,QAAQ,GAC/C;AACA,WAAO;EACT;AACA,SAAO,oBAAoB,MAAM,IAAI,CAAC,UAAU,OAAO,KAAK,EAAE,YAAW,CAAE,CAAC;AAC9E;AAGM,SAAU,uBAAuB,KAAY;AACjD,MAAI,OAAO,QAAQ,YAAY,QAAQ,MAAM;AAC3C,WAAO;EACT;AACA,QAAM,YAAY;AAClB,MACE,OAAO,UAAU,SAAS,YAC1B,UAAU,KAAK,KAAI,EAAG,WAAW,GACjC;AACA,WAAO;EACT;AACA,MACE,OAAO,UAAU,YAAY,YAC7B,UAAU,QAAQ,KAAI,EAAG,WAAW,GACpC;AACA,WAAO;EACT;AACA,MACE,OAAO,UAAU,UAAU,YAC3B,UAAU,MAAM,KAAI,EAAG,WAAW,GAClC;AACA,WAAO;EACT;AAEA,QAAM,WAAW,8BAA8B,UAAU,QAAQ;AACjE,QAAM,eAAe,kCACnB,UAAU,YAAY;AAExB,MAAI,aAAa,QAAQ,iBAAiB,MAAM;AAC9C,WAAO;EACT;AAEA,SAAO;IACL,MAAM,UAAU,KAAK,KAAI;IACzB,SAAS,UAAU,QAAQ,KAAI;IAC/B,OAAO,UAAU,MAAM,KAAI;IAC3B;IACA;;AAEJ;AAGA,eAAsB,2BACpB,WAAiB;AAEjB,QAAM,eAAe,KAAK,KAAK,WAAW,eAAe;AACzD,MAAI,CAAE,MAAM,WAAW,YAAY,GAAI;AACrC,UAAM,IAAI,WACR,qCAAqC,YAAY,MACjD,UAAU,KAAK;EAEnB;AAEA,MAAI;AACJ,MAAI;AACF,qBAAiB,KAAK,MACpB,MAAM,GAAG,SAAS,cAAc,MAAM,CAAC;EAE3C,SAAS,OAAgB;AACvB,UAAM,IAAI,WACR,0CAA0C,YAAY,MAAM,wBAAwB,KAAK,CAAC,IAC1F,UAAU,KAAK;EAEnB;AAEA,QAAM,WAAW,uBAAuB,cAAc;AACtD,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,WACR,0BAA0B,YAAY,iBACtC,UAAU,KAAK;EAEnB;AAEA,QAAM,YAAY,KAAK,QAAQ,WAAW,SAAS,KAAK;AACxD,MAAI,CAAC,sBAAsB,WAAW,SAAS,GAAG;AAChD,UAAM,IAAI,WACR,oBAAoB,SAAS,KAAK,2CAA2C,SAAS,MACtF,UAAU,KAAK;EAEnB;AACA,MAAI,CAAE,MAAM,WAAW,SAAS,GAAI;AAClC,UAAM,IAAI,WACR,uCAAuC,SAAS,MAChD,UAAU,KAAK;EAEnB;AACA,MAAI,CAAE,MAAM,+BAA+B,WAAW,SAAS,GAAI;AACjE,UAAM,IAAI,WACR,oBAAoB,SAAS,KAAK,oEAClC,UAAU,KAAK;EAEnB;AAEA,SAAO;IACL;IACA,eAAe;IACf,YAAY;IACZ;;AAEJ;AAEA,SAAS,wBAAwB,OAAc;AAC7C,SAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC9D;",
+  "names": []
+}

package/dist/cli-bundle/chunks/{chunk-ZTRBSABY.js → chunk-PGY23YTC.js}

@@ -2,14 +2,14 @@
 !function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="b82858eb-c433-52f9-bd8b-b0374037a312")}catch(e){}}();
 import {
   nowIso
-} from "./chunk-GSEADLRH.js";
+} from "./chunk-Q7A43DS4.js";
 import {
   EXIT_CODE,
   PmCliError,
   pathExists,
   toErrorMessage,
   writeFileAtomic
-} from "./chunk-GXXC7QSK.js";
+} from "./chunk-QKECXBBG.js";
 
 // dist/core/checkpoint/mutation-checkpoint.js
 import { mkdir, readFile } from "node:fs/promises";
@@ -130,6 +130,6 @@ export {
   loadMutationCheckpoint,
   restoreCheckpointItems
 };
-//# sourceMappingURL=chunk-ZTRBSABY.js.map
+//# sourceMappingURL=chunk-PGY23YTC.js.map
 
 //# debugId=b82858eb-c433-52f9-bd8b-b0374037a312

package/dist/cli-bundle/chunks/{chunk-H2QBAKLQ.js → chunk-PMOSXADO.js}

@@ -7,14 +7,14 @@ import {
   deleteItem,
   readSettings,
   toItemRecord
-} from "./chunk-GSEADLRH.js";
+} from "./chunk-Q7A43DS4.js";
 import {
   EXIT_CODE,
   PmCliError,
   getSettingsPath,
   pathExists,
   resolvePmRoot
-} from "./chunk-GXXC7QSK.js";
+} from "./chunk-QKECXBBG.js";
 
 // dist/cli/commands/delete.js
 import path from "node:path";
@@ -47,6 +47,6 @@ async function runDelete(id, options, global) {
 export {
   runDelete
 };
-//# sourceMappingURL=chunk-H2QBAKLQ.js.map
+//# sourceMappingURL=chunk-PMOSXADO.js.map
 
 //# debugId=d8843f20-911c-538e-bf11-1dfb1c189304

package/dist/cli-bundle/chunks/chunk-PNTULOGU.js

@@ -0,0 +1,9 @@
+// dist/cli/commands/history-redact.js
+!(function() {
+  try {
+    var e = "undefined" != typeof window ? window : "undefined" != typeof global ? global : "undefined" != typeof globalThis ? globalThis : "undefined" != typeof self ? self : {}, n = new e.Error().stack;
+    n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "9c8bd422-4982-5eb8-97c4-34a48b2c5b78");
+  } catch (e2) {
+  }
+})();
+//# sourceMappingURL=chunk-PNTULOGU.js.map

package/dist/cli-bundle/chunks/{chunk-GSEADLRH.js → chunk-Q7A43DS4.js}

@@ -58,7 +58,7 @@ import {
   toErrorMessage,
   weekdayOrderIndex,
   writeFileAtomic
-} from "./chunk-GXXC7QSK.js";
+} from "./chunk-QKECXBBG.js";
 
 // dist/core/extensions/command-hook-context.js
 function createCoreCommandHookContext(options) {
@@ -5462,6 +5462,6 @@ export {
   mutateItem,
   deleteItem
 };
-//# sourceMappingURL=chunk-GSEADLRH.js.map
+//# sourceMappingURL=chunk-Q7A43DS4.js.map
 
 //# debugId=e468cc5b-3706-5898-8d97-4deeb3bc0835

package/dist/cli-bundle/chunks/{chunk-QSPARJWF.js → chunk-QEHQ2GVG.js}

@@ -4,7 +4,7 @@ import {
   parseAnnotationTextInput,
   resolveAnnotationInput,
   runAnnotationCommand
-} from "./chunk-4RXTMU57.js";
+} from "./chunk-UY2ACEMF.js";
 
 // dist/cli/commands/notes.js
 async function runNotes(id, options, global) {
@@ -30,6 +30,6 @@ async function runNotes(id, options, global) {
 export {
   runNotes
 };
-//# sourceMappingURL=chunk-QSPARJWF.js.map
+//# sourceMappingURL=chunk-QEHQ2GVG.js.map
 
 //# debugId=1401c7cc-d6e7-5373-a39e-084832b21dc6

package/dist/cli-bundle/chunks/{chunk-VJTAEIPC.js → chunk-QIPLHNP7.js}

@@ -1,13 +1,13 @@
+import {
+  parseLimit
+} from "./chunk-NU3IMIEA.js";
 import {
   resolveAuthor
 } from "./chunk-YRYYFGV3.js";
-import {
-  parseLimit
-} from "./chunk-YQYG2V23.js";
 import {
   createStdinTokenResolver,
   parseCsvKv
-} from "./chunk-WD6MSYMP.js";
+} from "./chunk-TKOVBP6C.js";
 import {
   getActiveExtensionRegistrations,
   locateItem,
@@ -15,7 +15,7 @@ import {
   nowIso,
   readLocatedItem,
   readSettings
-} from "./chunk-T4BRCB6Z.js";
+} from "./chunk-XSJUSQAE.js";
 import {
   EXIT_CODE,
   PmCliError,
@@ -23,7 +23,7 @@ import {
   pathExists,
   resolveItemTypeRegistry,
   resolvePmRoot
-} from "./chunk-AFWZRL7M.js";
+} from "./chunk-BSEQUTQP.js";
 
 // dist/sdk/annotations.js
 import { readFile } from "node:fs/promises";
@@ -313,4 +313,4 @@ export {
   runAnnotationCommand,
   resolveAnnotationIndex
 };
-//# sourceMappingURL=chunk-VJTAEIPC.js.map
+//# sourceMappingURL=chunk-QIPLHNP7.js.map

package/dist/cli-bundle/chunks/{chunk-GXXC7QSK.js → chunk-QKECXBBG.js}

@@ -1,6 +1,6 @@
 // dist/core/fs/fs-utils.js
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="ba4552f4-7447-5279-9f14-c098d7bf03af")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="6ce8375b-cf60-55c9-af8e-877c883d8622")}catch(e){}}();
 import * as fs from "node:fs/promises";
 import path from "node:path";
 import crypto from "node:crypto";
@@ -6234,6 +6234,6 @@ export {
   parseRegisteredItemFieldAssignments,
   applyRegisteredItemFieldDefaultsAndValidation
 };
-//# sourceMappingURL=chunk-GXXC7QSK.js.map
+//# sourceMappingURL=chunk-QKECXBBG.js.map
 
-//# debugId=ba4552f4-7447-5279-9f14-c098d7bf03af
+//# debugId=6ce8375b-cf60-55c9-af8e-877c883d8622