@unbrained/pm-cli 2026.7.2 → 2026.7.4

package/dist/cli-bundle/chunks/{chunk-UWKEJMZU.js.map → chunk-4PJYRA3V.js.map}

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../../cli/commands/history-redact.ts", "../../../../../../../../core/history/history-rewrite.ts"],
-  "sourcesContent": ["/**\n * @module cli/commands/history-redact\n *\n * Implements the pm history redact command surface and its agent-facing runtime behavior.\n */\nimport fs from \"node:fs/promises\";\nimport { pathExists, readFileIfExists, writeFileAtomic } from \"../../core/fs/fs-utils.js\";\nimport { createHistoryEntry } from \"../../core/history/history.js\";\nimport { executeHistoryRewrite } from \"../../core/history/history-rewrite.js\";\nimport {\n  EMPTY_REPLAY_DOCUMENT,\n  historyEntriesToRaw,\n  replayHash,\n  replayToItemDocument,\n  tryApplyReplayPatch,\n  verifyHistoryChain,\n  type ReplayDocument,\n} from \"../../core/history/replay.js\";\nimport { normalizeItemId, normalizeRawItemId } from \"../../core/item/id.js\";\nimport { canonicalDocument, serializeItemDocument } from \"../../core/item/item-format.js\";\nimport { resolveItemTypeRegistry } from \"../../core/item/type-registry.js\";\nimport { EXIT_CODE } from \"../../core/shared/constants.js\";\nimport type { GlobalOptions } from \"../../core/shared/command-types.js\";\nimport { PmCliError } from \"../../core/shared/errors.js\";\nimport { nowIso } from \"../../core/shared/time.js\";\nimport { getActiveExtensionRegistrations, runActiveOnWriteHooks } from \"../../core/extensions/index.js\";\nimport { locateItem, readLocatedItem } from \"../../core/store/item-store.js\";\nimport { getHistoryPath, getItemPath, getSettingsPath, resolvePmRoot } from \"../../core/store/paths.js\";\nimport { readSettings } from \"../../core/store/settings.js\";\nimport { resolveAuthor } from \"../../core/shared/author.js\";\nimport type { HistoryEntry, HistoryPatchOp, ItemDocument } from \"../../types/index.js\";\nimport { readHistoryEntries } from \"./history.js\";\n\n/**\n * Documents the history redact command options payload exchanged by command, SDK, and package integrations.\n */\nexport interface HistoryRedactCommandOptions {\n  literal?: string[] | string;\n  regex?: string[] | string;\n  replacement?: string;\n  dryRun?: boolean;\n  author?: string;\n  message?: string;\n  force?: boolean;\n}\n\ninterface RegexRule {\n  kind: \"regex\";\n  source: string;\n  flags: string;\n  label: string;\n}\n\ninterface LiteralRule {\n  kind: \"literal\";\n  value: string;\n  label: string;\n}\n\ntype RedactionRule = RegexRule | LiteralRule;\n\ninterface RedactionRewriteResult {\n  entries: HistoryEntry[];\n  finalDocument: ReplayDocument;\n  entriesChanged: number;\n  replacements: number;\n}\n\ninterface HistoryIntegritySnapshot {\n  hashMismatchesBefore: number;\n  hashMismatchesAfter: number;\n  finalDocument: ReplayDocument;\n}\n\ninterface HistoryRedactCurrentItem {\n  raw: string | null;\n  path: string | null;\n  document: ItemDocument | null;\n}\n\ninterface HistoryRedactNextItem {\n  raw: string | null;\n  path: string | null;\n  document: ItemDocument | null;\n}\n\n/**\n * Documents the history subject payload exchanged by command, SDK, and package integrations.\n */\nexport interface HistorySubject {\n  id: string;\n  historyPath: string;\n  located: Awaited<ReturnType<typeof locateItem>>;\n}\n\n/**\n * Documents the history redact result payload exchanged by command, SDK, and package integrations.\n */\nexport interface HistoryRedactResult {\n  id: string;\n  dry_run: boolean;\n  changed: boolean;\n  patterns: {\n    literals: string[];\n    regex: string[];\n    replacement: string;\n  };\n  history: {\n    path: string;\n    entries_scanned: number;\n    entries_changed: number;\n    replacements: number;\n    hash_mismatches_before: number;\n    hash_mismatches_after: number;\n    preexisting_hash_mismatches: number;\n    audit_entry_added: boolean;\n    verify_ok: boolean;\n    verify_errors: string[];\n  };\n  item: {\n    existed_before: boolean;\n    exists_after: boolean;\n    path_before: string | null;\n    path_after: string | null;\n    changed: boolean;\n  };\n  warnings: string[];\n  generated_at: string;\n}\n\nfunction normalizeStringArrayInput(value: string[] | string | undefined): string[] {\n  if (Array.isArray(value)) {\n    return value;\n  }\n  if (typeof value === \"string\") {\n    return [value];\n  }\n  return [];\n}\n\nfunction normalizeRegexFlags(flags: string): string {\n  const unique: string[] = [];\n  for (const token of flags) {\n    if (!unique.includes(token)) {\n      unique.push(token);\n    }\n  }\n  if (!unique.includes(\"g\")) {\n    unique.push(\"g\");\n  }\n  return unique.join(\"\");\n}\n\nfunction parseRegexRule(spec: string): RegexRule {\n  const trimmed = spec.trim();\n  if (trimmed.length === 0) {\n    throw new PmCliError(\"history-redact --regex requires a non-empty pattern.\", EXIT_CODE.USAGE);\n  }\n\n  let source = trimmed;\n  let flags = \"g\";\n  if (trimmed.startsWith(\"/\") && trimmed.length > 1) {\n    /* c8 ignore start -- bare-slash regex literals are rejected earlier in argument validation. */\n    const slashIndex = trimmed.lastIndexOf(\"/\");\n    if (slashIndex > 0) {\n      source = trimmed.slice(1, slashIndex);\n      flags = normalizeRegexFlags(trimmed.slice(slashIndex + 1));\n    }\n    /* c8 ignore stop */\n  }\n  if (source.length === 0) {\n    throw new PmCliError(\"history-redact --regex cannot use an empty pattern.\", EXIT_CODE.USAGE);\n  }\n  try {\n    new RegExp(source, flags);\n  } catch (error) {\n    /* c8 ignore start -- RegExp constructor failures are normalized in higher-level parser tests. */\n    throw new PmCliError(\n      `Invalid --regex value \"${spec}\": ${error instanceof Error ? error.message : String(error)}`,\n      EXIT_CODE.USAGE,\n    );\n    /* c8 ignore stop */\n  }\n\n  return {\n    kind: \"regex\",\n    source,\n    flags,\n    label: `/${source}/${flags}`,\n  };\n}\n\nfunction buildRedactionRules(\n  literalInput: string[] | string | undefined,\n  regexInput: string[] | string | undefined,\n): RedactionRule[] {\n  const literalRules = [...new Set(normalizeStringArrayInput(literalInput).map((entry) => entry.trim()))]\n    .filter((entry) => entry.length > 0)\n    .map<LiteralRule>((entry) => ({\n      kind: \"literal\",\n      value: entry,\n      label: entry,\n    }));\n  const regexRules = [...new Set(normalizeStringArrayInput(regexInput).map((entry) => entry.trim()))]\n    .filter((entry) => entry.length > 0)\n    .map(parseRegexRule);\n\n  const rules = [...literalRules, ...regexRules];\n  if (rules.length === 0) {\n    throw new PmCliError(\n      \"history-redact requires at least one matcher via --literal or --regex.\",\n      EXIT_CODE.USAGE,\n      {\n        code: \"missing_required_argument\",\n        required: \"Provide --literal <value> and/or --regex <pattern>.\",\n        examples: [\n          'pm history-redact pm-a1b2 --literal \"[redacted_path_prefix]/private\"',\n          'pm history-redact pm-a1b2 --regex \"/192\\\\\\\\.168\\\\\\\\.[0-9.]+/g\" --replacement \"[scrubbed_ip]\"',\n        ],\n      },\n    );\n  }\n  return rules;\n}\n\nfunction applyLiteralRule(value: string, literal: string, replacement: string): { value: string; replacements: number } {\n  if (literal.length === 0) {\n    return { value, replacements: 0 };\n  }\n  let cursor = 0;\n  let replacements = 0;\n  while (cursor <= value.length) {\n    const index = value.indexOf(literal, cursor);\n    if (index === -1) {\n      break;\n    }\n    replacements += 1;\n    cursor = index + Math.max(1, literal.length);\n  }\n  if (replacements === 0) {\n    return { value, replacements: 0 };\n  }\n  return {\n    value: value.split(literal).join(replacement),\n    replacements,\n  };\n}\n\nfunction applyRegexRule(value: string, rule: RegexRule, replacement: string): { value: string; replacements: number } {\n  const regex = new RegExp(rule.source, rule.flags);\n  const matches = [...value.matchAll(regex)];\n  if (matches.length === 0) {\n    return { value, replacements: 0 };\n  }\n  return {\n    value: value.replace(regex, replacement),\n    replacements: matches.length,\n  };\n}\n\nfunction redactStringValue(value: string, rules: RedactionRule[], replacement: string): { value: string; replacements: number } {\n  let next = value;\n  let replacements = 0;\n  for (const rule of rules) {\n    const result =\n      rule.kind === \"literal\"\n        ? applyLiteralRule(next, rule.value, replacement)\n        : applyRegexRule(next, rule, replacement);\n    next = result.value;\n    replacements += result.replacements;\n  }\n  return {\n    value: next,\n    replacements,\n  };\n}\n\nfunction redactUnknownValue(value: unknown, rules: RedactionRule[], replacement: string): { value: unknown; replacements: number } {\n  if (typeof value === \"string\") {\n    return redactStringValue(value, rules, replacement);\n  }\n  if (Array.isArray(value)) {\n    let replacements = 0;\n    const nextValues = value.map((entry) => {\n      const redacted = redactUnknownValue(entry, rules, replacement);\n      replacements += redacted.replacements;\n      return redacted.value;\n    });\n    return {\n      value: nextValues,\n      replacements,\n    };\n  }\n  if (typeof value === \"object\" && value !== null) {\n    let replacements = 0;\n    const nextRecord: Record<string, unknown> = {};\n    for (const [key, entry] of Object.entries(value)) {\n      const redacted = redactUnknownValue(entry, rules, replacement);\n      replacements += redacted.replacements;\n      nextRecord[key] = redacted.value;\n    }\n    return {\n      value: nextRecord,\n      replacements,\n    };\n  }\n  return {\n    value,\n    replacements: 0,\n  };\n}\n\nfunction applyHistoryPatch(current: ReplayDocument, patch: HistoryPatchOp[], entryNumber: number, op: string): ReplayDocument {\n  const result = tryApplyReplayPatch(current, patch);\n  /* c8 ignore start -- invalid patch replay paths are covered by replay helper tests. */\n  if (!result.ok) {\n    throw new PmCliError(\n      `history-redact failed to apply patch at entry ${entryNumber} (op=${op}): ${\n        result.error instanceof Error ? result.error.message : String(result.error)\n      }`,\n      EXIT_CODE.GENERIC_FAILURE,\n    );\n  }\n  /* c8 ignore stop */\n  return result.document;\n}\n\nfunction inspectHistoryIntegrity(entries: HistoryEntry[]): HistoryIntegritySnapshot {\n  let replay = structuredClone(EMPTY_REPLAY_DOCUMENT);\n  let hashMismatchesBefore = 0;\n  let hashMismatchesAfter = 0;\n  for (let index = 0; index < entries.length; index += 1) {\n    const entry = entries[index];\n    if (replayHash(replay) !== entry.before_hash) {\n      hashMismatchesBefore += 1;\n    }\n    replay = applyHistoryPatch(replay, entry.patch, index + 1, entry.op);\n    /* c8 ignore start -- after-hash mismatch branch is exercised in dedicated history integrity tests. */\n    if (replayHash(replay) !== entry.after_hash) {\n      hashMismatchesAfter += 1;\n    }\n    /* c8 ignore stop */\n  }\n  return {\n    hashMismatchesBefore,\n    hashMismatchesAfter,\n    finalDocument: replay,\n  };\n}\n\nfunction redactHistoryEntry(entry: HistoryEntry, rules: RedactionRule[], replacement: string): {\n  entry: HistoryEntry;\n  replacements: number;\n  changed: boolean;\n} {\n  let replacements = 0;\n  let changed = false;\n  let nextMessage = entry.message;\n\n  if (typeof entry.message === \"string\") {\n    const redactedMessage = redactStringValue(entry.message, rules, replacement);\n    nextMessage = redactedMessage.value;\n    replacements += redactedMessage.replacements;\n    if (redactedMessage.replacements > 0) {\n      changed = true;\n    }\n  }\n\n  const nextPatch = entry.patch.map((operation) => {\n    /* c8 ignore start -- patch operations without `value` are covered in lower-level patch adapters. */\n    if (!Object.prototype.hasOwnProperty.call(operation, \"value\")) {\n      return operation;\n    }\n    /* c8 ignore stop */\n    const redactedValue = redactUnknownValue(operation.value, rules, replacement);\n    replacements += redactedValue.replacements;\n    if (redactedValue.replacements > 0) {\n      changed = true;\n      return {\n        ...operation,\n        value: redactedValue.value,\n      };\n    }\n    return operation;\n  });\n\n  return {\n    entry: {\n      ...entry,\n      message: nextMessage,\n      patch: nextPatch,\n    },\n    replacements,\n    changed,\n  };\n}\n\nfunction rewriteHistoryEntries(entries: HistoryEntry[], rules: RedactionRule[], replacement: string): RedactionRewriteResult {\n  let replay = structuredClone(EMPTY_REPLAY_DOCUMENT);\n  let entriesChanged = 0;\n  let replacements = 0;\n  const rewrittenEntries: HistoryEntry[] = [];\n\n  for (let index = 0; index < entries.length; index += 1) {\n    const redacted = redactHistoryEntry(entries[index], rules, replacement);\n    replacements += redacted.replacements;\n    if (redacted.changed) {\n      entriesChanged += 1;\n    }\n    const beforeHash = replayHash(replay);\n    replay = applyHistoryPatch(replay, redacted.entry.patch, index + 1, redacted.entry.op);\n    const afterHash = replayHash(replay);\n    rewrittenEntries.push({\n      ...redacted.entry,\n      before_hash: beforeHash,\n      after_hash: afterHash,\n    });\n  }\n\n  return {\n    entries: rewrittenEntries,\n    finalDocument: replay,\n    entriesChanged,\n    replacements,\n  };\n}\n\nfunction hasItemMetadata(replay: ReplayDocument): boolean {\n  return Object.keys(replay.metadata).length > 0;\n}\n\nasync function loadHistoryRedactCurrentItem(\n  subject: HistorySubject,\n  settings: Awaited<ReturnType<typeof readSettings>>,\n): Promise<HistoryRedactCurrentItem> {\n  const currentItemPath = subject.located?.itemPath ?? null;\n  if (!subject.located) {\n    return { raw: null, path: currentItemPath, document: null };\n  }\n  const loaded = await readLocatedItem(subject.located, { schema: settings.schema });\n  return { raw: loaded.raw, path: currentItemPath, document: loaded.document };\n}\n\nfunction resolveHistoryRedactNextItem(params: {\n  pmRoot: string;\n  subject: HistorySubject;\n  settings: Awaited<ReturnType<typeof readSettings>>;\n  typeToFolder: Record<string, string>;\n  finalDocument: ReplayDocument;\n}): HistoryRedactNextItem {\n  if (!hasItemMetadata(params.finalDocument)) {\n    return { raw: null, path: null, document: null };\n  }\n  const canonical = canonicalDocument(replayToItemDocument(params.finalDocument), { schema: params.settings.schema });\n  if (canonical.metadata.id !== params.subject.id) {\n    throw new PmCliError(\n      `history-redact would change item id from ${params.subject.id} to ${canonical.metadata.id}; narrow your patterns.`,\n      EXIT_CODE.USAGE,\n    );\n  }\n  return {\n    document: canonical,\n    path: getItemPath(params.pmRoot, canonical.metadata.type, params.subject.id, \"toon\", params.typeToFolder),\n    raw: serializeItemDocument(canonical, {\n      format: \"toon\",\n      schema: params.settings.schema,\n    }),\n  };\n}\n\n/* v8 ignore start -- message passthrough/plural formatting is deterministic around covered redaction outcomes */\nfunction buildHistoryRedactMessage(options: HistoryRedactCommandOptions, rewritten: RedactionRewriteResult): string {\n  if (typeof options.message === \"string\" && options.message.trim().length > 0) {\n    return options.message;\n  }\n  return `history-redact replaced ${rewritten.replacements} match(es) across ${rewritten.entriesChanged} entr${\n    rewritten.entriesChanged === 1 ? \"y\" : \"ies\"\n  }.`;\n}\n/* v8 ignore stop */\n\nfunction buildHistoryRedactEntries(params: {\n  rewritten: RedactionRewriteResult;\n  dryRun: boolean;\n  changed: boolean;\n  nextItemDocument: ItemDocument | null;\n  author: string;\n  message: string;\n}): { rewrittenEntries: HistoryEntry[]; auditEntryAdded: boolean } {\n  const rewrittenEntries = [...params.rewritten.entries];\n  if (params.dryRun || !params.changed) {\n    return { rewrittenEntries, auditEntryAdded: false };\n  }\n  /* c8 ignore next -- fallback replay-to-item conversion runs only when rewritten final metadata is absent. */\n  const finalDocument = params.nextItemDocument ?? replayToItemDocument(params.rewritten.finalDocument);\n  rewrittenEntries.push(\n    createHistoryEntry({\n      nowIso: nowIso(),\n      author: params.author,\n      op: \"history_redact\",\n      before: finalDocument,\n      after: finalDocument,\n      message: params.message,\n    }),\n  );\n  return { rewrittenEntries, auditEntryAdded: true };\n}\n\nasync function applyHistoryRedactRewrite(params: {\n  pmRoot: string;\n  subject: HistorySubject;\n  settings: Awaited<ReturnType<typeof readSettings>>;\n  typeRegistry: ReturnType<typeof resolveItemTypeRegistry>;\n  historyRawBeforeLock: string | null;\n  currentItem: HistoryRedactCurrentItem;\n  nextItem: HistoryRedactNextItem;\n  author: string;\n  force: boolean | undefined;\n  rewrittenEntries: HistoryEntry[];\n}): Promise<string[]> {\n  return executeHistoryRewrite({\n    pmRoot: params.pmRoot,\n    subject: params.subject,\n    settings: params.settings,\n    typeRegistry: params.typeRegistry,\n    historyRawBeforeLock: params.historyRawBeforeLock,\n    currentItemRawBeforeLock: params.currentItem.raw,\n    operation: \"history-redact\",\n    author: params.author,\n    force: params.force,\n    itemDocument: params.currentItem.document,\n    applyRewrite: async ({ historyRawUnderLock }) => {\n      const affectedItemPaths = new Set<string>();\n      if (params.currentItem.path) {\n        affectedItemPaths.add(params.currentItem.path);\n      }\n      if (params.nextItem.path) {\n        affectedItemPaths.add(params.nextItem.path);\n      }\n      const itemSnapshots = new Map<string, string>();\n      if (params.currentItem.path && params.currentItem.raw !== null) {\n        itemSnapshots.set(params.currentItem.path, params.currentItem.raw);\n      }\n      try {\n        /* c8 ignore next -- item-write diff branch requires path and content divergence under lock races. */\n        if (params.nextItem.path && params.nextItem.raw !== null && params.nextItem.raw !== params.currentItem.raw) {\n          await writeFileAtomic(params.nextItem.path, params.nextItem.raw);\n        }\n        if (params.currentItem.path && (!params.nextItem.path || params.nextItem.path !== params.currentItem.path)) {\n          await fs.rm(params.currentItem.path, { force: true });\n        }\n        await writeFileAtomic(params.subject.historyPath, historyEntriesToRaw(params.rewrittenEntries));\n      } catch (error) {\n        await rollbackHistoryRedactRewrite(params.subject.historyPath, historyRawUnderLock, affectedItemPaths, itemSnapshots);\n        throw error;\n      }\n    },\n    applyPostRewrite: async () => runHistoryRedactWriteHooks(params.subject.historyPath, [\n      params.nextItem.path,\n      params.currentItem.path,\n    ]),\n  });\n}\n\nasync function rollbackHistoryRedactRewrite(\n  historyPath: string,\n  historyRawUnderLock: string | null,\n  affectedItemPaths: Set<string>,\n  itemSnapshots: Map<string, string>,\n): Promise<void> {\n  /* c8 ignore start -- no-history-under-lock rollback path is exercised in lock-race integration tests. */\n  if (historyRawUnderLock === null) {\n    await fs.rm(historyPath, { force: true });\n  } else {\n    await writeFileAtomic(historyPath, historyRawUnderLock);\n  }\n  /* c8 ignore stop */\n  for (const itemPath of affectedItemPaths) {\n    const snapshot = itemSnapshots.get(itemPath);\n    /* c8 ignore start -- missing snapshot rollback occurs only for create/delete race permutations. */\n    if (snapshot === undefined) {\n      await fs.rm(itemPath, { force: true });\n    } else {\n      await writeFileAtomic(itemPath, snapshot);\n    }\n    /* c8 ignore stop */\n  }\n}\n\nasync function runHistoryRedactWriteHooks(historyPath: string, itemHookPaths: Array<string | null>): Promise<string[]> {\n  const hookWarnings: string[] = [];\n  const uniqueItemHookPaths = new Set(itemHookPaths.filter((itemPath): itemPath is string => itemPath !== null));\n  for (const itemHookPath of uniqueItemHookPaths) {\n    hookWarnings.push(\n      ...(await runActiveOnWriteHooks({\n        path: itemHookPath,\n        scope: \"project\",\n        op: \"history_redact\",\n      })),\n    );\n  }\n  hookWarnings.push(\n    ...(await runActiveOnWriteHooks({\n      path: historyPath,\n      scope: \"project\",\n      op: \"history_redact:history\",\n    })),\n  );\n  return hookWarnings;\n}\n\n/**\n * Implements resolve history subject for the public runtime surface of this module.\n */\nexport async function resolveHistorySubject(\n  pmRoot: string,\n  id: string,\n  settings: Awaited<ReturnType<typeof readSettings>>,\n  typeToFolder: Record<string, string>,\n): Promise<HistorySubject> {\n  const located = await locateItem(pmRoot, id, settings.id_prefix, settings.item_format, typeToFolder);\n  if (located) {\n    return {\n      id: located.id,\n      historyPath: getHistoryPath(pmRoot, located.id),\n      located,\n    };\n  }\n\n  const normalizedId = normalizeItemId(id, settings.id_prefix);\n  const rawNormalizedId = normalizeRawItemId(id);\n  const candidateIds = normalizedId === rawNormalizedId ? [normalizedId] : [normalizedId, rawNormalizedId];\n  for (const candidateId of candidateIds) {\n    const historyPath = getHistoryPath(pmRoot, candidateId);\n    if (await pathExists(historyPath)) {\n      return {\n        id: candidateId,\n        historyPath,\n        located: null,\n      };\n    }\n  }\n  throw new PmCliError(`Item ${id} not found`, EXIT_CODE.NOT_FOUND);\n}\n\n/**\n * Implements run history redact for the public runtime surface of this module.\n */\nexport async function runHistoryRedact(\n  id: string,\n  options: HistoryRedactCommandOptions,\n  global: GlobalOptions,\n): Promise<HistoryRedactResult> {\n  const pmRoot = resolvePmRoot(process.cwd(), global.path);\n  if (!(await pathExists(getSettingsPath(pmRoot)))) {\n    throw new PmCliError(`Tracker is not initialized at ${pmRoot}. Run pm init first.`, EXIT_CODE.NOT_FOUND);\n  }\n\n  const settings = await readSettings(pmRoot);\n  const typeRegistry = resolveItemTypeRegistry(settings, getActiveExtensionRegistrations());\n  const replacement = typeof options.replacement === \"string\" && options.replacement.length > 0 ? options.replacement : \"[redacted]\";\n  const rules = buildRedactionRules(options.literal, options.regex);\n  const subject = await resolveHistorySubject(pmRoot, id, settings, typeRegistry.type_to_folder);\n\n  if (!(await pathExists(subject.historyPath))) {\n    throw new PmCliError(`No history stream exists for ${subject.id}.`, EXIT_CODE.NOT_FOUND);\n  }\n  const historyRawBeforeLock = await readFileIfExists(subject.historyPath);\n  const historyEntries = await readHistoryEntries(subject.historyPath, subject.id);\n  if (historyEntries.length === 0) {\n    throw new PmCliError(`No history entries exist for ${subject.id}; nothing to redact.`, EXIT_CODE.USAGE);\n  }\n\n  const integritySnapshot = inspectHistoryIntegrity(historyEntries);\n  const rewritten = rewriteHistoryEntries(historyEntries, rules, replacement);\n  const preexistingHashMismatches = integritySnapshot.hashMismatchesBefore + integritySnapshot.hashMismatchesAfter;\n  const dryRun = Boolean(options.dryRun);\n  const changed = rewritten.replacements > 0;\n  const warnings: string[] = [];\n  if (preexistingHashMismatches > 0) {\n    warnings.push(`history_redact_preexisting_hash_mismatches:${preexistingHashMismatches}`);\n  }\n  if (!changed) {\n    warnings.push(\"history_redact_no_matches\");\n  }\n\n  const currentItem = await loadHistoryRedactCurrentItem(subject, settings);\n  const nextItem = resolveHistoryRedactNextItem({\n    pmRoot,\n    subject,\n    settings,\n    typeToFolder: typeRegistry.type_to_folder,\n    finalDocument: rewritten.finalDocument,\n  });\n\n  const itemChanged =\n    /* c8 ignore next -- null-coalescing item-path comparison branch is exercised in broader command integration coverage. */\n    (currentItem.path ?? null) !== (nextItem.path ?? null) ||\n    /* c8 ignore next -- null-coalescing item-content comparison branch is exercised in broader command integration coverage. */\n    (currentItem.raw ?? null) !== (nextItem.raw ?? null);\n\n  const author = resolveAuthor(options.author, settings.author_default);\n  const redactionMessage = buildHistoryRedactMessage(options, rewritten);\n  const { rewrittenEntries, auditEntryAdded } = buildHistoryRedactEntries({\n    rewritten,\n    dryRun,\n    changed,\n    nextItemDocument: nextItem.document,\n    author,\n    message: redactionMessage,\n  });\n  const historyVerify = verifyHistoryChain(rewrittenEntries);\n  /* c8 ignore start -- invalid rewritten chains are covered by history verification unit tests. */\n  if (!historyVerify.ok) {\n    throw new PmCliError(\n      `history-redact produced an invalid rewritten chain (${historyVerify.errors.join(\", \")}).`,\n      EXIT_CODE.GENERIC_FAILURE,\n    );\n  }\n  /* c8 ignore stop */\n\n  if (!dryRun && changed) {\n    warnings.push(\n      ...(await applyHistoryRedactRewrite({\n        pmRoot,\n        subject,\n        settings,\n        typeRegistry,\n        historyRawBeforeLock,\n        currentItem,\n        nextItem,\n        author,\n        force: options.force,\n        rewrittenEntries,\n      })),\n    );\n  }\n\n  return {\n    id: subject.id,\n    dry_run: dryRun,\n    changed,\n    patterns: {\n      literals: rules.filter((rule): rule is LiteralRule => rule.kind === \"literal\").map((rule) => rule.value),\n      regex: rules.filter((rule): rule is RegexRule => rule.kind === \"regex\").map((rule) => `/${rule.source}/${rule.flags}`),\n      replacement,\n    },\n    history: {\n      path: subject.historyPath,\n      entries_scanned: historyEntries.length,\n      entries_changed: rewritten.entriesChanged,\n      replacements: rewritten.replacements,\n      hash_mismatches_before: integritySnapshot.hashMismatchesBefore,\n      hash_mismatches_after: integritySnapshot.hashMismatchesAfter,\n      preexisting_hash_mismatches: preexistingHashMismatches,\n      audit_entry_added: auditEntryAdded,\n      verify_ok: historyVerify.ok,\n      verify_errors: historyVerify.errors,\n    },\n    item: {\n      existed_before: currentItem.path !== null,\n      exists_after: nextItem.path !== null,\n      path_before: currentItem.path,\n      path_after: nextItem.path,\n      changed: itemChanged,\n    },\n    /* c8 ignore next -- warning dedupe ordering is covered indirectly by command-level smoke tests. */\n    warnings: [...new Set(warnings)].sort((left, right) => left.localeCompare(right)),\n    generated_at: nowIso(),\n  };\n}\n\nexport const _testOnly = {\n  applyLiteralRule,\n  applyRegexRule,\n  buildRedactionRules,\n  hasItemMetadata,\n  normalizeRegexFlags,\n  normalizeStringArrayInput,\n  parseRegexRule,\n  redactStringValue,\n  redactUnknownValue,\n};\n", "/**\n * @module core/history/history-rewrite\n *\n * Implements append-only history and replay behavior for History Rewrite.\n */\nimport { readFileIfExists } from \"../fs/fs-utils.js\";\nimport type { ItemTypeRegistry } from \"../item/type-registry.js\";\nimport { acquireLock } from \"../lock/lock.js\";\nimport { EXIT_CODE } from \"../shared/constants.js\";\nimport { PmCliError } from \"../shared/errors.js\";\nimport { locateItem, readLocatedItem } from \"../store/item-store.js\";\nimport { resolveGovernanceKnobs } from \"../store/settings.js\";\nimport type { ItemDocument, PmSettings } from \"../../types/index.js\";\n\ntype LoadedItem = Awaited<ReturnType<typeof readLocatedItem>>;\n\n/**\n * Documents the history rewrite subject payload exchanged by command, SDK, and package integrations.\n */\nexport interface HistoryRewriteSubject {\n  id: string;\n  historyPath: string;\n}\n\n/**\n * Documents the history rewrite ownership params payload exchanged by command, SDK, and package integrations.\n */\nexport interface HistoryRewriteOwnershipParams {\n  itemDocument: ItemDocument | null;\n  subjectId: string;\n  author: string;\n  force: boolean | undefined;\n  settings: PmSettings;\n}\n\n/**\n * Apply ownership_enforcement governance to a history-rewriting operation.\n * Returns the warning(s) the caller should append (empty when no conflict or strict-throws).\n * Throws PmCliError(CONFLICT) in strict mode when the assignee conflicts and --force is not set.\n */\nexport function checkHistoryRewriteOwnership(params: HistoryRewriteOwnershipParams): string[] {\n  if (!params.itemDocument) return [];\n  const assigned = params.itemDocument.metadata?.assignee?.trim();\n  if (!assigned || assigned === params.author || params.force) return [];\n\n  const governance = resolveGovernanceKnobs(params.settings);\n  if (governance.ownership_enforcement === \"strict\") {\n    throw new PmCliError(\n      `Item ${params.subjectId} is assigned to ${assigned}. Use --force to override.`,\n      EXIT_CODE.CONFLICT,\n    );\n  }\n  if (governance.ownership_enforcement === \"warn\") {\n    return [`ownership_warning:assignee_conflict:${params.subjectId}:${assigned}`];\n  }\n  return [];\n}\n\n/**\n * Documents the verify history rewrite drift params payload exchanged by command, SDK, and package integrations.\n */\nexport interface VerifyHistoryRewriteDriftParams {\n  pmRoot: string;\n  subject: HistoryRewriteSubject;\n  settings: PmSettings;\n  typeRegistry: ItemTypeRegistry;\n  historyRawBeforeLock: string | null;\n  currentItemRawBeforeLock: string | null;\n  /** Short operation name used in the conflict message (e.g. \"history-redact\"). */\n  operation: string;\n}\n\n/**\n * Documents the verified history rewrite state payload exchanged by command, SDK, and package integrations.\n */\nexport interface VerifiedHistoryRewriteState {\n  historyRawUnderLock: string | null;\n  locatedUnderLock: Awaited<ReturnType<typeof locateItem>>;\n  loadedItemUnderLock: LoadedItem | null;\n}\n\n/**\n * Re-read the history stream and the located item document under the acquired lock and\n * compare both with the pre-lock raw snapshots. Throws PmCliError(CONFLICT) if either\n * diverged while waiting for the lock so the caller surfaces an actionable retry.\n */\nexport async function verifyHistoryRewriteNoDrift(\n  params: VerifyHistoryRewriteDriftParams,\n): Promise<VerifiedHistoryRewriteState> {\n  const historyRawUnderLock = await readFileIfExists(params.subject.historyPath);\n  if (historyRawUnderLock !== params.historyRawBeforeLock) {\n    throw new PmCliError(\n      `History for ${params.subject.id} changed while waiting for lock; retry ${params.operation}.`,\n      EXIT_CODE.CONFLICT,\n    );\n  }\n  const locatedUnderLock = await locateItem(\n    params.pmRoot,\n    params.subject.id,\n    params.settings.id_prefix,\n    params.settings.item_format,\n    params.typeRegistry.type_to_folder,\n  );\n  const loadedItemUnderLock = locatedUnderLock\n    ? await readLocatedItem(locatedUnderLock, { schema: params.settings.schema })\n    : null;\n  if ((loadedItemUnderLock?.raw ?? null) !== (params.currentItemRawBeforeLock ?? null)) {\n    throw new PmCliError(\n      `Item ${params.subject.id} changed while waiting for lock; retry ${params.operation}.`,\n      EXIT_CODE.CONFLICT,\n    );\n  }\n  return { historyRawUnderLock, locatedUnderLock, loadedItemUnderLock };\n}\n\n/**\n * Documents the execute history rewrite params payload exchanged by command, SDK, and package integrations.\n */\nexport interface ExecuteHistoryRewriteParams {\n  pmRoot: string;\n  subject: HistoryRewriteSubject;\n  settings: PmSettings;\n  typeRegistry: ItemTypeRegistry;\n  historyRawBeforeLock: string | null;\n  currentItemRawBeforeLock: string | null;\n  /** Short operation name used in conflict guidance (e.g. \"history-redact\"). */\n  operation: string;\n  author: string;\n  force: boolean | undefined;\n  itemDocument: ItemDocument | null;\n  applyRewrite: (verified: VerifiedHistoryRewriteState) => Promise<void>;\n  applyPostRewrite?: (verified: VerifiedHistoryRewriteState) => Promise<string[]>;\n}\n\n/**\n * Shared lock/verify/ownership orchestration for history-rewrite commands.\n * Callers provide the operation-specific write/rollback logic and optional\n * post-write hook execution while this helper enforces the common governance +\n * lock sequencing contract.\n */\nexport async function executeHistoryRewrite(params: ExecuteHistoryRewriteParams): Promise<string[]> {\n  const warnings = [...checkHistoryRewriteOwnership({\n    itemDocument: params.itemDocument,\n    subjectId: params.subject.id,\n    author: params.author,\n    force: params.force,\n    settings: params.settings,\n  })];\n  const releaseLock = await acquireLock(\n    params.pmRoot,\n    params.subject.id,\n    params.settings.locks.ttl_seconds,\n    params.author,\n    Boolean(params.force),\n    params.settings.governance.force_required_for_stale_lock,\n  );\n  try {\n    const verified = await verifyHistoryRewriteNoDrift({\n      pmRoot: params.pmRoot,\n      subject: params.subject,\n      settings: params.settings,\n      typeRegistry: params.typeRegistry,\n      historyRawBeforeLock: params.historyRawBeforeLock,\n      currentItemRawBeforeLock: params.currentItemRawBeforeLock,\n      operation: params.operation,\n    });\n    await params.applyRewrite(verified);\n    if (params.applyPostRewrite) {\n      warnings.push(...(await params.applyPostRewrite(verified)));\n    }\n    return warnings;\n  } finally {\n    await releaseLock();\n  }\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAKA,OAAO,QAAQ;;;;;;;;;;ACmCT,SAAU,6BAA6B,QAAqC;AAChF,MAAI,CAAC,OAAO;AAAc,WAAO,CAAA;AACjC,QAAM,WAAW,OAAO,aAAa,UAAU,UAAU,KAAI;AAC7D,MAAI,CAAC,YAAY,aAAa,OAAO,UAAU,OAAO;AAAO,WAAO,CAAA;AAEpE,QAAM,aAAa,uBAAuB,OAAO,QAAQ;AACzD,MAAI,WAAW,0BAA0B,UAAU;AACjD,UAAM,IAAI,WACR,QAAQ,OAAO,SAAS,mBAAmB,QAAQ,8BACnD,UAAU,QAAQ;EAEtB;AACA,MAAI,WAAW,0BAA0B,QAAQ;AAC/C,WAAO,CAAC,uCAAuC,OAAO,SAAS,IAAI,QAAQ,EAAE;EAC/E;AACA,SAAO,CAAA;AACT;AA8BA,eAAsB,4BACpB,QAAuC;AAEvC,QAAM,sBAAsB,MAAM,iBAAiB,OAAO,QAAQ,WAAW;AAC7E,MAAI,wBAAwB,OAAO,sBAAsB;AACvD,UAAM,IAAI,WACR,eAAe,OAAO,QAAQ,EAAE,0CAA0C,OAAO,SAAS,KAC1F,UAAU,QAAQ;EAEtB;AACA,QAAM,mBAAmB,MAAM,WAC7B,OAAO,QACP,OAAO,QAAQ,IACf,OAAO,SAAS,WAChB,OAAO,SAAS,aAChB,OAAO,aAAa,cAAc;AAEpC,QAAM,sBAAsB,mBACxB,MAAM,gBAAgB,kBAAkB,EAAE,QAAQ,OAAO,SAAS,OAAM,CAAE,IAC1E;AACJ,OAAK,qBAAqB,OAAO,WAAW,OAAO,4BAA4B,OAAO;AACpF,UAAM,IAAI,WACR,QAAQ,OAAO,QAAQ,EAAE,0CAA0C,OAAO,SAAS,KACnF,UAAU,QAAQ;EAEtB;AACA,SAAO,EAAE,qBAAqB,kBAAkB,oBAAmB;AACrE;AA2BA,eAAsB,sBAAsB,QAAmC;AAC7E,QAAM,WAAW,CAAC,GAAG,6BAA6B;IAChD,cAAc,OAAO;IACrB,WAAW,OAAO,QAAQ;IAC1B,QAAQ,OAAO;IACf,OAAO,OAAO;IACd,UAAU,OAAO;GAClB,CAAC;AACF,QAAM,cAAc,MAAM,YACxB,OAAO,QACP,OAAO,QAAQ,IACf,OAAO,SAAS,MAAM,aACtB,OAAO,QACP,QAAQ,OAAO,KAAK,GACpB,OAAO,SAAS,WAAW,6BAA6B;AAE1D,MAAI;AACF,UAAM,WAAW,MAAM,4BAA4B;MACjD,QAAQ,OAAO;MACf,SAAS,OAAO;MAChB,UAAU,OAAO;MACjB,cAAc,OAAO;MACrB,sBAAsB,OAAO;MAC7B,0BAA0B,OAAO;MACjC,WAAW,OAAO;KACnB;AACD,UAAM,OAAO,aAAa,QAAQ;AAClC,QAAI,OAAO,kBAAkB;AAC3B,eAAS,KAAK,GAAI,MAAM,OAAO,iBAAiB,QAAQ,CAAE;IAC5D;AACA,WAAO;EACT;AACE,UAAM,YAAW;EACnB;AACF;;;;;;;;;;AD5CA,SAAS,0BAA0B,OAAoC;AACrE,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO;EACT;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,CAAC,KAAK;EACf;AACA,SAAO,CAAA;AACT;AAEA,SAAS,oBAAoB,OAAa;AACxC,QAAM,SAAmB,CAAA;AACzB,aAAW,SAAS,OAAO;AACzB,QAAI,CAAC,OAAO,SAAS,KAAK,GAAG;AAC3B,aAAO,KAAK,KAAK;IACnB;EACF;AACA,MAAI,CAAC,OAAO,SAAS,GAAG,GAAG;AACzB,WAAO,KAAK,GAAG;EACjB;AACA,SAAO,OAAO,KAAK,EAAE;AACvB;AAEA,SAAS,eAAe,MAAY;AAClC,QAAM,UAAU,KAAK,KAAI;AACzB,MAAI,QAAQ,WAAW,GAAG;AACxB,UAAM,IAAI,WAAW,wDAAwD,UAAU,KAAK;EAC9F;AAEA,MAAI,SAAS;AACb,MAAI,QAAQ;AACZ,MAAI,QAAQ,WAAW,GAAG,KAAK,QAAQ,SAAS,GAAG;AAEjD,UAAM,aAAa,QAAQ,YAAY,GAAG;AAC1C,QAAI,aAAa,GAAG;AAClB,eAAS,QAAQ,MAAM,GAAG,UAAU;AACpC,cAAQ,oBAAoB,QAAQ,MAAM,aAAa,CAAC,CAAC;IAC3D;EAEF;AACA,MAAI,OAAO,WAAW,GAAG;AACvB,UAAM,IAAI,WAAW,uDAAuD,UAAU,KAAK;EAC7F;AACA,MAAI;AACF,QAAI,OAAO,QAAQ,KAAK;EAC1B,SAAS,OAAO;AAEd,UAAM,IAAI,WACR,0BAA0B,IAAI,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC,IAC1F,UAAU,KAAK;EAGnB;AAEA,SAAO;IACL,MAAM;IACN;IACA;IACA,OAAO,IAAI,MAAM,IAAI,KAAK;;AAE9B;AAEA,SAAS,oBACP,cACA,YAAyC;AAEzC,QAAM,eAAe,CAAC,GAAG,IAAI,IAAI,0BAA0B,YAAY,EAAE,IAAI,CAAC,UAAU,MAAM,KAAI,CAAE,CAAC,CAAC,EACnG,OAAO,CAAC,UAAU,MAAM,SAAS,CAAC,EAClC,IAAiB,CAAC,WAAW;IAC5B,MAAM;IACN,OAAO;IACP,OAAO;IACP;AACJ,QAAM,aAAa,CAAC,GAAG,IAAI,IAAI,0BAA0B,UAAU,EAAE,IAAI,CAAC,UAAU,MAAM,KAAI,CAAE,CAAC,CAAC,EAC/F,OAAO,CAAC,UAAU,MAAM,SAAS,CAAC,EAClC,IAAI,cAAc;AAErB,QAAM,QAAQ,CAAC,GAAG,cAAc,GAAG,UAAU;AAC7C,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,IAAI,WACR,0EACA,UAAU,OACV;MACE,MAAM;MACN,UAAU;MACV,UAAU;QACR;QACA;;KAEH;EAEL;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,OAAe,SAAiB,aAAmB;AAC3E,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAO,EAAE,OAAO,cAAc,EAAC;EACjC;AACA,MAAI,SAAS;AACb,MAAI,eAAe;AACnB,SAAO,UAAU,MAAM,QAAQ;AAC7B,UAAM,QAAQ,MAAM,QAAQ,SAAS,MAAM;AAC3C,QAAI,UAAU,IAAI;AAChB;IACF;AACA,oBAAgB;AAChB,aAAS,QAAQ,KAAK,IAAI,GAAG,QAAQ,MAAM;EAC7C;AACA,MAAI,iBAAiB,GAAG;AACtB,WAAO,EAAE,OAAO,cAAc,EAAC;EACjC;AACA,SAAO;IACL,OAAO,MAAM,MAAM,OAAO,EAAE,KAAK,WAAW;IAC5C;;AAEJ;AAEA,SAAS,eAAe,OAAe,MAAiB,aAAmB;AACzE,QAAM,QAAQ,IAAI,OAAO,KAAK,QAAQ,KAAK,KAAK;AAChD,QAAM,UAAU,CAAC,GAAG,MAAM,SAAS,KAAK,CAAC;AACzC,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAO,EAAE,OAAO,cAAc,EAAC;EACjC;AACA,SAAO;IACL,OAAO,MAAM,QAAQ,OAAO,WAAW;IACvC,cAAc,QAAQ;;AAE1B;AAEA,SAAS,kBAAkB,OAAe,OAAwB,aAAmB;AACnF,MAAI,OAAO;AACX,MAAI,eAAe;AACnB,aAAW,QAAQ,OAAO;AACxB,UAAM,SACJ,KAAK,SAAS,YACV,iBAAiB,MAAM,KAAK,OAAO,WAAW,IAC9C,eAAe,MAAM,MAAM,WAAW;AAC5C,WAAO,OAAO;AACd,oBAAgB,OAAO;EACzB;AACA,SAAO;IACL,OAAO;IACP;;AAEJ;AAEA,SAAS,mBAAmB,OAAgB,OAAwB,aAAmB;AACrF,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,kBAAkB,OAAO,OAAO,WAAW;EACpD;AACA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,QAAI,eAAe;AACnB,UAAM,aAAa,MAAM,IAAI,CAAC,UAAS;AACrC,YAAM,WAAW,mBAAmB,OAAO,OAAO,WAAW;AAC7D,sBAAgB,SAAS;AACzB,aAAO,SAAS;IAClB,CAAC;AACD,WAAO;MACL,OAAO;MACP;;EAEJ;AACA,MAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C,QAAI,eAAe;AACnB,UAAM,aAAsC,CAAA;AAC5C,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,GAAG;AAChD,YAAM,WAAW,mBAAmB,OAAO,OAAO,WAAW;AAC7D,sBAAgB,SAAS;AACzB,iBAAW,GAAG,IAAI,SAAS;IAC7B;AACA,WAAO;MACL,OAAO;MACP;;EAEJ;AACA,SAAO;IACL;IACA,cAAc;;AAElB;AAEA,SAAS,kBAAkB,SAAyB,OAAyB,aAAqB,IAAU;AAC1G,QAAM,SAAS,oBAAoB,SAAS,KAAK;AAEjD,MAAI,CAAC,OAAO,IAAI;AACd,UAAM,IAAI,WACR,iDAAiD,WAAW,QAAQ,EAAE,MACpE,OAAO,iBAAiB,QAAQ,OAAO,MAAM,UAAU,OAAO,OAAO,KAAK,CAC5E,IACA,UAAU,eAAe;EAE7B;AAEA,SAAO,OAAO;AAChB;AAEA,SAAS,wBAAwB,SAAuB;AACtD,MAAI,SAAS,gBAAgB,qBAAqB;AAClD,MAAI,uBAAuB;AAC3B,MAAI,sBAAsB;AAC1B,WAAS,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,SAAS,GAAG;AACtD,UAAM,QAAQ,QAAQ,KAAK;AAC3B,QAAI,WAAW,MAAM,MAAM,MAAM,aAAa;AAC5C,8BAAwB;IAC1B;AACA,aAAS,kBAAkB,QAAQ,MAAM,OAAO,QAAQ,GAAG,MAAM,EAAE;AAEnE,QAAI,WAAW,MAAM,MAAM,MAAM,YAAY;AAC3C,6BAAuB;IACzB;EAEF;AACA,SAAO;IACL;IACA;IACA,eAAe;;AAEnB;AAEA,SAAS,mBAAmB,OAAqB,OAAwB,aAAmB;AAK1F,MAAI,eAAe;AACnB,MAAI,UAAU;AACd,MAAI,cAAc,MAAM;AAExB,MAAI,OAAO,MAAM,YAAY,UAAU;AACrC,UAAM,kBAAkB,kBAAkB,MAAM,SAAS,OAAO,WAAW;AAC3E,kBAAc,gBAAgB;AAC9B,oBAAgB,gBAAgB;AAChC,QAAI,gBAAgB,eAAe,GAAG;AACpC,gBAAU;IACZ;EACF;AAEA,QAAM,YAAY,MAAM,MAAM,IAAI,CAAC,cAAa;AAE9C,QAAI,CAAC,OAAO,UAAU,eAAe,KAAK,WAAW,OAAO,GAAG;AAC7D,aAAO;IACT;AAEA,UAAM,gBAAgB,mBAAmB,UAAU,OAAO,OAAO,WAAW;AAC5E,oBAAgB,cAAc;AAC9B,QAAI,cAAc,eAAe,GAAG;AAClC,gBAAU;AACV,aAAO;QACL,GAAG;QACH,OAAO,cAAc;;IAEzB;AACA,WAAO;EACT,CAAC;AAED,SAAO;IACL,OAAO;MACL,GAAG;MACH,SAAS;MACT,OAAO;;IAET;IACA;;AAEJ;AAEA,SAAS,sBAAsB,SAAyB,OAAwB,aAAmB;AACjG,MAAI,SAAS,gBAAgB,qBAAqB;AAClD,MAAI,iBAAiB;AACrB,MAAI,eAAe;AACnB,QAAM,mBAAmC,CAAA;AAEzC,WAAS,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,SAAS,GAAG;AACtD,UAAM,WAAW,mBAAmB,QAAQ,KAAK,GAAG,OAAO,WAAW;AACtE,oBAAgB,SAAS;AACzB,QAAI,SAAS,SAAS;AACpB,wBAAkB;IACpB;AACA,UAAM,aAAa,WAAW,MAAM;AACpC,aAAS,kBAAkB,QAAQ,SAAS,MAAM,OAAO,QAAQ,GAAG,SAAS,MAAM,EAAE;AACrF,UAAM,YAAY,WAAW,MAAM;AACnC,qBAAiB,KAAK;MACpB,GAAG,SAAS;MACZ,aAAa;MACb,YAAY;KACb;EACH;AAEA,SAAO;IACL,SAAS;IACT,eAAe;IACf;IACA;;AAEJ;AAEA,SAAS,gBAAgB,QAAsB;AAC7C,SAAO,OAAO,KAAK,OAAO,QAAQ,EAAE,SAAS;AAC/C;AAEA,eAAe,6BACb,SACA,UAAkD;AAElD,QAAM,kBAAkB,QAAQ,SAAS,YAAY;AACrD,MAAI,CAAC,QAAQ,SAAS;AACpB,WAAO,EAAE,KAAK,MAAM,MAAM,iBAAiB,UAAU,KAAI;EAC3D;AACA,QAAM,SAAS,MAAM,gBAAgB,QAAQ,SAAS,EAAE,QAAQ,SAAS,OAAM,CAAE;AACjF,SAAO,EAAE,KAAK,OAAO,KAAK,MAAM,iBAAiB,UAAU,OAAO,SAAQ;AAC5E;AAEA,SAAS,6BAA6B,QAMrC;AACC,MAAI,CAAC,gBAAgB,OAAO,aAAa,GAAG;AAC1C,WAAO,EAAE,KAAK,MAAM,MAAM,MAAM,UAAU,KAAI;EAChD;AACA,QAAM,YAAY,kBAAkB,qBAAqB,OAAO,aAAa,GAAG,EAAE,QAAQ,OAAO,SAAS,OAAM,CAAE;AAClH,MAAI,UAAU,SAAS,OAAO,OAAO,QAAQ,IAAI;AAC/C,UAAM,IAAI,WACR,4CAA4C,OAAO,QAAQ,EAAE,OAAO,UAAU,SAAS,EAAE,2BACzF,UAAU,KAAK;EAEnB;AACA,SAAO;IACL,UAAU;IACV,MAAM,YAAY,OAAO,QAAQ,UAAU,SAAS,MAAM,OAAO,QAAQ,IAAI,QAAQ,OAAO,YAAY;IACxG,KAAK,sBAAsB,WAAW;MACpC,QAAQ;MACR,QAAQ,OAAO,SAAS;KACzB;;AAEL;AAGA,SAAS,0BAA0B,SAAsC,WAAiC;AACxG,MAAI,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,KAAI,EAAG,SAAS,GAAG;AAC5E,WAAO,QAAQ;EACjB;AACA,SAAO,2BAA2B,UAAU,YAAY,qBAAqB,UAAU,cAAc,QACnG,UAAU,mBAAmB,IAAI,MAAM,KACzC;AACF;AAGA,SAAS,0BAA0B,QAOlC;AACC,QAAM,mBAAmB,CAAC,GAAG,OAAO,UAAU,OAAO;AACrD,MAAI,OAAO,UAAU,CAAC,OAAO,SAAS;AACpC,WAAO,EAAE,kBAAkB,iBAAiB,MAAK;EACnD;AAEA,QAAM,gBAAgB,OAAO,oBAAoB,qBAAqB,OAAO,UAAU,aAAa;AACpG,mBAAiB,KACf,mBAAmB;IACjB,QAAQ,OAAM;IACd,QAAQ,OAAO;IACf,IAAI;IACJ,QAAQ;IACR,OAAO;IACP,SAAS,OAAO;GACjB,CAAC;AAEJ,SAAO,EAAE,kBAAkB,iBAAiB,KAAI;AAClD;AAEA,eAAe,0BAA0B,QAWxC;AACC,SAAO,sBAAsB;IAC3B,QAAQ,OAAO;IACf,SAAS,OAAO;IAChB,UAAU,OAAO;IACjB,cAAc,OAAO;IACrB,sBAAsB,OAAO;IAC7B,0BAA0B,OAAO,YAAY;IAC7C,WAAW;IACX,QAAQ,OAAO;IACf,OAAO,OAAO;IACd,cAAc,OAAO,YAAY;IACjC,cAAc,OAAO,EAAE,oBAAmB,MAAM;AAC9C,YAAM,oBAAoB,oBAAI,IAAG;AACjC,UAAI,OAAO,YAAY,MAAM;AAC3B,0BAAkB,IAAI,OAAO,YAAY,IAAI;MAC/C;AACA,UAAI,OAAO,SAAS,MAAM;AACxB,0BAAkB,IAAI,OAAO,SAAS,IAAI;MAC5C;AACA,YAAM,gBAAgB,oBAAI,IAAG;AAC7B,UAAI,OAAO,YAAY,QAAQ,OAAO,YAAY,QAAQ,MAAM;AAC9D,sBAAc,IAAI,OAAO,YAAY,MAAM,OAAO,YAAY,GAAG;MACnE;AACA,UAAI;AAEF,YAAI,OAAO,SAAS,QAAQ,OAAO,SAAS,QAAQ,QAAQ,OAAO,SAAS,QAAQ,OAAO,YAAY,KAAK;AAC1G,gBAAM,gBAAgB,OAAO,SAAS,MAAM,OAAO,SAAS,GAAG;QACjE;AACA,YAAI,OAAO,YAAY,SAAS,CAAC,OAAO,SAAS,QAAQ,OAAO,SAAS,SAAS,OAAO,YAAY,OAAO;AAC1G,gBAAM,GAAG,GAAG,OAAO,YAAY,MAAM,EAAE,OAAO,KAAI,CAAE;QACtD;AACA,cAAM,gBAAgB,OAAO,QAAQ,aAAa,oBAAoB,OAAO,gBAAgB,CAAC;MAChG,SAAS,OAAO;AACd,cAAM,6BAA6B,OAAO,QAAQ,aAAa,qBAAqB,mBAAmB,aAAa;AACpH,cAAM;MACR;IACF;IACA,kBAAkB,YAAY,2BAA2B,OAAO,QAAQ,aAAa;MACnF,OAAO,SAAS;MAChB,OAAO,YAAY;KACpB;GACF;AACH;AAEA,eAAe,6BACb,aACA,qBACA,mBACA,eAAkC;AAGlC,MAAI,wBAAwB,MAAM;AAChC,UAAM,GAAG,GAAG,aAAa,EAAE,OAAO,KAAI,CAAE;EAC1C,OAAO;AACL,UAAM,gBAAgB,aAAa,mBAAmB;EACxD;AAEA,aAAW,YAAY,mBAAmB;AACxC,UAAM,WAAW,cAAc,IAAI,QAAQ;AAE3C,QAAI,aAAa,QAAW;AAC1B,YAAM,GAAG,GAAG,UAAU,EAAE,OAAO,KAAI,CAAE;IACvC,OAAO;AACL,YAAM,gBAAgB,UAAU,QAAQ;IAC1C;EAEF;AACF;AAEA,eAAe,2BAA2B,aAAqB,eAAmC;AAChG,QAAM,eAAyB,CAAA;AAC/B,QAAM,sBAAsB,IAAI,IAAI,cAAc,OAAO,CAAC,aAAiC,aAAa,IAAI,CAAC;AAC7G,aAAW,gBAAgB,qBAAqB;AAC9C,iBAAa,KACX,GAAI,MAAM,sBAAsB;MAC9B,MAAM;MACN,OAAO;MACP,IAAI;KACL,CAAE;EAEP;AACA,eAAa,KACX,GAAI,MAAM,sBAAsB;IAC9B,MAAM;IACN,OAAO;IACP,IAAI;GACL,CAAE;AAEL,SAAO;AACT;AAKA,eAAsB,sBACpB,QACA,IACA,UACA,cAAoC;AAEpC,QAAM,UAAU,MAAM,WAAW,QAAQ,IAAI,SAAS,WAAW,SAAS,aAAa,YAAY;AACnG,MAAI,SAAS;AACX,WAAO;MACL,IAAI,QAAQ;MACZ,aAAa,eAAe,QAAQ,QAAQ,EAAE;MAC9C;;EAEJ;AAEA,QAAM,eAAe,gBAAgB,IAAI,SAAS,SAAS;AAC3D,QAAM,kBAAkB,mBAAmB,EAAE;AAC7C,QAAM,eAAe,iBAAiB,kBAAkB,CAAC,YAAY,IAAI,CAAC,cAAc,eAAe;AACvG,aAAW,eAAe,cAAc;AACtC,UAAM,cAAc,eAAe,QAAQ,WAAW;AACtD,QAAI,MAAM,WAAW,WAAW,GAAG;AACjC,aAAO;QACL,IAAI;QACJ;QACA,SAAS;;IAEb;EACF;AACA,QAAM,IAAI,WAAW,QAAQ,EAAE,cAAc,UAAU,SAAS;AAClE;AAKA,eAAsB,iBACpB,IACA,SACAA,SAAqB;AAErB,QAAM,SAAS,cAAc,QAAQ,IAAG,GAAIA,QAAO,IAAI;AACvD,MAAI,CAAE,MAAM,WAAW,gBAAgB,MAAM,CAAC,GAAI;AAChD,UAAM,IAAI,WAAW,iCAAiC,MAAM,wBAAwB,UAAU,SAAS;EACzG;AAEA,QAAM,WAAW,MAAM,aAAa,MAAM;AAC1C,QAAM,eAAe,wBAAwB,UAAU,gCAA+B,CAAE;AACxF,QAAM,cAAc,OAAO,QAAQ,gBAAgB,YAAY,QAAQ,YAAY,SAAS,IAAI,QAAQ,cAAc;AACtH,QAAM,QAAQ,oBAAoB,QAAQ,SAAS,QAAQ,KAAK;AAChE,QAAM,UAAU,MAAM,sBAAsB,QAAQ,IAAI,UAAU,aAAa,cAAc;AAE7F,MAAI,CAAE,MAAM,WAAW,QAAQ,WAAW,GAAI;AAC5C,UAAM,IAAI,WAAW,gCAAgC,QAAQ,EAAE,KAAK,UAAU,SAAS;EACzF;AACA,QAAM,uBAAuB,MAAM,iBAAiB,QAAQ,WAAW;AACvE,QAAM,iBAAiB,MAAM,mBAAmB,QAAQ,aAAa,QAAQ,EAAE;AAC/E,MAAI,eAAe,WAAW,GAAG;AAC/B,UAAM,IAAI,WAAW,gCAAgC,QAAQ,EAAE,wBAAwB,UAAU,KAAK;EACxG;AAEA,QAAM,oBAAoB,wBAAwB,cAAc;AAChE,QAAM,YAAY,sBAAsB,gBAAgB,OAAO,WAAW;AAC1E,QAAM,4BAA4B,kBAAkB,uBAAuB,kBAAkB;AAC7F,QAAM,SAAS,QAAQ,QAAQ,MAAM;AACrC,QAAM,UAAU,UAAU,eAAe;AACzC,QAAM,WAAqB,CAAA;AAC3B,MAAI,4BAA4B,GAAG;AACjC,aAAS,KAAK,8CAA8C,yBAAyB,EAAE;EACzF;AACA,MAAI,CAAC,SAAS;AACZ,aAAS,KAAK,2BAA2B;EAC3C;AAEA,QAAM,cAAc,MAAM,6BAA6B,SAAS,QAAQ;AACxE,QAAM,WAAW,6BAA6B;IAC5C;IACA;IACA;IACA,cAAc,aAAa;IAC3B,eAAe,UAAU;GAC1B;AAED,QAAM;;KAEH,YAAY,QAAQ,WAAW,SAAS,QAAQ;KAEhD,YAAY,OAAO,WAAW,SAAS,OAAO;;AAEjD,QAAM,SAAS,cAAc,QAAQ,QAAQ,SAAS,cAAc;AACpE,QAAM,mBAAmB,0BAA0B,SAAS,SAAS;AACrE,QAAM,EAAE,kBAAkB,gBAAe,IAAK,0BAA0B;IACtE;IACA;IACA;IACA,kBAAkB,SAAS;IAC3B;IACA,SAAS;GACV;AACD,QAAM,gBAAgB,mBAAmB,gBAAgB;AAEzD,MAAI,CAAC,cAAc,IAAI;AACrB,UAAM,IAAI,WACR,uDAAuD,cAAc,OAAO,KAAK,IAAI,CAAC,MACtF,UAAU,eAAe;EAE7B;AAGA,MAAI,CAAC,UAAU,SAAS;AACtB,aAAS,KACP,GAAI,MAAM,0BAA0B;MAClC;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA,OAAO,QAAQ;MACf;KACD,CAAE;EAEP;AAEA,SAAO;IACL,IAAI,QAAQ;IACZ,SAAS;IACT;IACA,UAAU;MACR,UAAU,MAAM,OAAO,CAAC,SAA8B,KAAK,SAAS,SAAS,EAAE,IAAI,CAAC,SAAS,KAAK,KAAK;MACvG,OAAO,MAAM,OAAO,CAAC,SAA4B,KAAK,SAAS,OAAO,EAAE,IAAI,CAAC,SAAS,IAAI,KAAK,MAAM,IAAI,KAAK,KAAK,EAAE;MACrH;;IAEF,SAAS;MACP,MAAM,QAAQ;MACd,iBAAiB,eAAe;MAChC,iBAAiB,UAAU;MAC3B,cAAc,UAAU;MACxB,wBAAwB,kBAAkB;MAC1C,uBAAuB,kBAAkB;MACzC,6BAA6B;MAC7B,mBAAmB;MACnB,WAAW,cAAc;MACzB,eAAe,cAAc;;IAE/B,MAAM;MACJ,gBAAgB,YAAY,SAAS;MACrC,cAAc,SAAS,SAAS;MAChC,aAAa,YAAY;MACzB,YAAY,SAAS;MACrB,SAAS;;;IAGX,UAAU,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;IAChF,cAAc,OAAM;;AAExB;AAEO,IAAM,YAAY;EACvB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;",
-  "names": ["global"]
+  "sourcesContent": ["/**\n * @module cli/commands/history-redact\n *\n * Implements the pm history redact command surface and its agent-facing runtime behavior.\n */\nimport fs from \"node:fs/promises\";\nimport { pathExists, readFileIfExists, writeFileAtomic } from \"../../core/fs/fs-utils.js\";\nimport { createHistoryEntry } from \"../../core/history/history.js\";\nimport { executeHistoryRewrite } from \"../../core/history/history-rewrite.js\";\nimport {\n  EMPTY_REPLAY_DOCUMENT,\n  historyEntriesToRaw,\n  replayHash,\n  replayToItemDocument,\n  tryApplyReplayPatch,\n  verifyHistoryChain,\n  type ReplayDocument,\n} from \"../../core/history/replay.js\";\nimport { normalizeItemId, normalizeRawItemId } from \"../../core/item/id.js\";\nimport { canonicalDocument, serializeItemDocument } from \"../../core/item/item-format.js\";\nimport { resolveItemTypeRegistry } from \"../../core/item/type-registry.js\";\nimport { EXIT_CODE } from \"../../core/shared/constants.js\";\nimport type { GlobalOptions } from \"../../core/shared/command-types.js\";\nimport { PmCliError } from \"../../core/shared/errors.js\";\nimport { nowIso } from \"../../core/shared/time.js\";\nimport { getActiveExtensionRegistrations, runActiveOnWriteHooks } from \"../../core/extensions/index.js\";\nimport { locateItem, readLocatedItem } from \"../../core/store/item-store.js\";\nimport { getHistoryPath, getItemPath, getSettingsPath, resolvePmRoot } from \"../../core/store/paths.js\";\nimport { readSettings } from \"../../core/store/settings.js\";\nimport { resolveAuthor } from \"../../core/shared/author.js\";\nimport type { HistoryEntry, HistoryPatchOp, ItemDocument } from \"../../types/index.js\";\nimport { readHistoryEntries } from \"./history.js\";\n\n/**\n * Documents the history redact command options payload exchanged by command, SDK, and package integrations.\n */\nexport interface HistoryRedactCommandOptions {\n  literal?: string[] | string;\n  regex?: string[] | string;\n  replacement?: string;\n  dryRun?: boolean;\n  author?: string;\n  message?: string;\n  force?: boolean;\n}\n\ninterface RegexRule {\n  kind: \"regex\";\n  source: string;\n  flags: string;\n  label: string;\n}\n\ninterface LiteralRule {\n  kind: \"literal\";\n  value: string;\n  label: string;\n}\n\ntype RedactionRule = RegexRule | LiteralRule;\n\ninterface RedactionRewriteResult {\n  entries: HistoryEntry[];\n  finalDocument: ReplayDocument;\n  entriesChanged: number;\n  replacements: number;\n}\n\ninterface HistoryIntegritySnapshot {\n  hashMismatchesBefore: number;\n  hashMismatchesAfter: number;\n  finalDocument: ReplayDocument;\n}\n\ninterface HistoryRedactCurrentItem {\n  raw: string | null;\n  path: string | null;\n  document: ItemDocument | null;\n}\n\ninterface HistoryRedactNextItem {\n  raw: string | null;\n  path: string | null;\n  document: ItemDocument | null;\n}\n\n/**\n * Documents the history subject payload exchanged by command, SDK, and package integrations.\n */\nexport interface HistorySubject {\n  id: string;\n  historyPath: string;\n  located: Awaited<ReturnType<typeof locateItem>>;\n}\n\n/**\n * Documents the history redact result payload exchanged by command, SDK, and package integrations.\n */\nexport interface HistoryRedactResult {\n  id: string;\n  dry_run: boolean;\n  changed: boolean;\n  patterns: {\n    literals: string[];\n    regex: string[];\n    replacement: string;\n  };\n  history: {\n    path: string;\n    entries_scanned: number;\n    entries_changed: number;\n    replacements: number;\n    hash_mismatches_before: number;\n    hash_mismatches_after: number;\n    preexisting_hash_mismatches: number;\n    audit_entry_added: boolean;\n    verify_ok: boolean;\n    verify_errors: string[];\n  };\n  item: {\n    existed_before: boolean;\n    exists_after: boolean;\n    path_before: string | null;\n    path_after: string | null;\n    changed: boolean;\n  };\n  warnings: string[];\n  generated_at: string;\n}\n\nfunction normalizeStringArrayInput(value: string[] | string | undefined): string[] {\n  if (Array.isArray(value)) {\n    return value;\n  }\n  if (typeof value === \"string\") {\n    return [value];\n  }\n  return [];\n}\n\nfunction normalizeRegexFlags(flags: string): string {\n  const unique: string[] = [];\n  for (const token of flags) {\n    if (!unique.includes(token)) {\n      unique.push(token);\n    }\n  }\n  if (!unique.includes(\"g\")) {\n    unique.push(\"g\");\n  }\n  return unique.join(\"\");\n}\n\nfunction parseRegexRule(spec: string): RegexRule {\n  const trimmed = spec.trim();\n  if (trimmed.length === 0) {\n    throw new PmCliError(\"history-redact --regex requires a non-empty pattern.\", EXIT_CODE.USAGE);\n  }\n\n  let source = trimmed;\n  let flags = \"g\";\n  if (trimmed.startsWith(\"/\") && trimmed.length > 1) {\n    /* c8 ignore start -- bare-slash regex literals are rejected earlier in argument validation. */\n    const slashIndex = trimmed.lastIndexOf(\"/\");\n    if (slashIndex > 0) {\n      source = trimmed.slice(1, slashIndex);\n      flags = normalizeRegexFlags(trimmed.slice(slashIndex + 1));\n    }\n    /* c8 ignore stop */\n  }\n  if (source.length === 0) {\n    throw new PmCliError(\"history-redact --regex cannot use an empty pattern.\", EXIT_CODE.USAGE);\n  }\n  try {\n    new RegExp(source, flags);\n  } catch (error) {\n    /* c8 ignore start -- RegExp constructor failures are normalized in higher-level parser tests. */\n    throw new PmCliError(\n      `Invalid --regex value \"${spec}\": ${error instanceof Error ? error.message : String(error)}`,\n      EXIT_CODE.USAGE,\n    );\n    /* c8 ignore stop */\n  }\n\n  return {\n    kind: \"regex\",\n    source,\n    flags,\n    label: `/${source}/${flags}`,\n  };\n}\n\nfunction buildRedactionRules(\n  literalInput: string[] | string | undefined,\n  regexInput: string[] | string | undefined,\n): RedactionRule[] {\n  const literalRules = [...new Set(normalizeStringArrayInput(literalInput).map((entry) => entry.trim()))]\n    .filter((entry) => entry.length > 0)\n    .map<LiteralRule>((entry) => ({\n      kind: \"literal\",\n      value: entry,\n      label: entry,\n    }));\n  const regexRules = [...new Set(normalizeStringArrayInput(regexInput).map((entry) => entry.trim()))]\n    .filter((entry) => entry.length > 0)\n    .map(parseRegexRule);\n\n  const rules = [...literalRules, ...regexRules];\n  if (rules.length === 0) {\n    throw new PmCliError(\n      \"history-redact requires at least one matcher via --literal or --regex.\",\n      EXIT_CODE.USAGE,\n      {\n        code: \"missing_required_argument\",\n        required: \"Provide --literal <value> and/or --regex <pattern>.\",\n        examples: [\n          'pm history-redact pm-a1b2 --literal \"[redacted_path_prefix]/private\"',\n          'pm history-redact pm-a1b2 --regex \"/192\\\\\\\\.168\\\\\\\\.[0-9.]+/g\" --replacement \"[scrubbed_ip]\"',\n        ],\n      },\n    );\n  }\n  return rules;\n}\n\nfunction applyLiteralRule(value: string, literal: string, replacement: string): { value: string; replacements: number } {\n  if (literal.length === 0) {\n    return { value, replacements: 0 };\n  }\n  let cursor = 0;\n  let replacements = 0;\n  while (cursor <= value.length) {\n    const index = value.indexOf(literal, cursor);\n    if (index === -1) {\n      break;\n    }\n    replacements += 1;\n    cursor = index + Math.max(1, literal.length);\n  }\n  if (replacements === 0) {\n    return { value, replacements: 0 };\n  }\n  return {\n    value: value.split(literal).join(replacement),\n    replacements,\n  };\n}\n\nfunction applyRegexRule(value: string, rule: RegexRule, replacement: string): { value: string; replacements: number } {\n  const regex = new RegExp(rule.source, rule.flags);\n  const matches = [...value.matchAll(regex)];\n  if (matches.length === 0) {\n    return { value, replacements: 0 };\n  }\n  return {\n    value: value.replace(regex, replacement),\n    replacements: matches.length,\n  };\n}\n\nfunction redactStringValue(value: string, rules: RedactionRule[], replacement: string): { value: string; replacements: number } {\n  let next = value;\n  let replacements = 0;\n  for (const rule of rules) {\n    const result =\n      rule.kind === \"literal\"\n        ? applyLiteralRule(next, rule.value, replacement)\n        : applyRegexRule(next, rule, replacement);\n    next = result.value;\n    replacements += result.replacements;\n  }\n  return {\n    value: next,\n    replacements,\n  };\n}\n\nfunction redactUnknownValue(value: unknown, rules: RedactionRule[], replacement: string): { value: unknown; replacements: number } {\n  if (typeof value === \"string\") {\n    return redactStringValue(value, rules, replacement);\n  }\n  if (Array.isArray(value)) {\n    let replacements = 0;\n    const nextValues = value.map((entry) => {\n      const redacted = redactUnknownValue(entry, rules, replacement);\n      replacements += redacted.replacements;\n      return redacted.value;\n    });\n    return {\n      value: nextValues,\n      replacements,\n    };\n  }\n  if (typeof value === \"object\" && value !== null) {\n    let replacements = 0;\n    const nextRecord: Record<string, unknown> = {};\n    for (const [key, entry] of Object.entries(value)) {\n      const redacted = redactUnknownValue(entry, rules, replacement);\n      replacements += redacted.replacements;\n      nextRecord[key] = redacted.value;\n    }\n    return {\n      value: nextRecord,\n      replacements,\n    };\n  }\n  return {\n    value,\n    replacements: 0,\n  };\n}\n\nfunction applyHistoryPatch(current: ReplayDocument, patch: HistoryPatchOp[], entryNumber: number, op: string): ReplayDocument {\n  const result = tryApplyReplayPatch(current, patch);\n  /* c8 ignore start -- invalid patch replay paths are covered by replay helper tests. */\n  if (!result.ok) {\n    throw new PmCliError(\n      `history-redact failed to apply patch at entry ${entryNumber} (op=${op}): ${\n        result.error instanceof Error ? result.error.message : String(result.error)\n      }`,\n      EXIT_CODE.GENERIC_FAILURE,\n    );\n  }\n  /* c8 ignore stop */\n  return result.document;\n}\n\nfunction inspectHistoryIntegrity(entries: HistoryEntry[]): HistoryIntegritySnapshot {\n  let replay = structuredClone(EMPTY_REPLAY_DOCUMENT);\n  let hashMismatchesBefore = 0;\n  let hashMismatchesAfter = 0;\n  for (let index = 0; index < entries.length; index += 1) {\n    const entry = entries[index];\n    if (replayHash(replay) !== entry.before_hash) {\n      hashMismatchesBefore += 1;\n    }\n    replay = applyHistoryPatch(replay, entry.patch, index + 1, entry.op);\n    /* c8 ignore start -- after-hash mismatch branch is exercised in dedicated history integrity tests. */\n    if (replayHash(replay) !== entry.after_hash) {\n      hashMismatchesAfter += 1;\n    }\n    /* c8 ignore stop */\n  }\n  return {\n    hashMismatchesBefore,\n    hashMismatchesAfter,\n    finalDocument: replay,\n  };\n}\n\nfunction redactHistoryEntry(entry: HistoryEntry, rules: RedactionRule[], replacement: string): {\n  entry: HistoryEntry;\n  replacements: number;\n  changed: boolean;\n} {\n  let replacements = 0;\n  let changed = false;\n  let nextMessage = entry.message;\n\n  if (typeof entry.message === \"string\") {\n    const redactedMessage = redactStringValue(entry.message, rules, replacement);\n    nextMessage = redactedMessage.value;\n    replacements += redactedMessage.replacements;\n    if (redactedMessage.replacements > 0) {\n      changed = true;\n    }\n  }\n\n  const nextPatch = entry.patch.map((operation) => {\n    /* c8 ignore start -- patch operations without `value` are covered in lower-level patch adapters. */\n    if (!Object.prototype.hasOwnProperty.call(operation, \"value\")) {\n      return operation;\n    }\n    /* c8 ignore stop */\n    const redactedValue = redactUnknownValue(operation.value, rules, replacement);\n    replacements += redactedValue.replacements;\n    if (redactedValue.replacements > 0) {\n      changed = true;\n      return {\n        ...operation,\n        value: redactedValue.value,\n      };\n    }\n    return operation;\n  });\n\n  return {\n    entry: {\n      ...entry,\n      message: nextMessage,\n      patch: nextPatch,\n    },\n    replacements,\n    changed,\n  };\n}\n\nfunction rewriteHistoryEntries(entries: HistoryEntry[], rules: RedactionRule[], replacement: string): RedactionRewriteResult {\n  let replay = structuredClone(EMPTY_REPLAY_DOCUMENT);\n  let entriesChanged = 0;\n  let replacements = 0;\n  const rewrittenEntries: HistoryEntry[] = [];\n\n  for (let index = 0; index < entries.length; index += 1) {\n    const redacted = redactHistoryEntry(entries[index], rules, replacement);\n    replacements += redacted.replacements;\n    if (redacted.changed) {\n      entriesChanged += 1;\n    }\n    const beforeHash = replayHash(replay);\n    replay = applyHistoryPatch(replay, redacted.entry.patch, index + 1, redacted.entry.op);\n    const afterHash = replayHash(replay);\n    rewrittenEntries.push({\n      ...redacted.entry,\n      before_hash: beforeHash,\n      after_hash: afterHash,\n    });\n  }\n\n  return {\n    entries: rewrittenEntries,\n    finalDocument: replay,\n    entriesChanged,\n    replacements,\n  };\n}\n\nfunction hasItemMetadata(replay: ReplayDocument): boolean {\n  return Object.keys(replay.metadata).length > 0;\n}\n\nasync function loadHistoryRedactCurrentItem(\n  subject: HistorySubject,\n  settings: Awaited<ReturnType<typeof readSettings>>,\n): Promise<HistoryRedactCurrentItem> {\n  const currentItemPath = subject.located?.itemPath ?? null;\n  if (!subject.located) {\n    return { raw: null, path: currentItemPath, document: null };\n  }\n  const loaded = await readLocatedItem(subject.located, { schema: settings.schema });\n  return { raw: loaded.raw, path: currentItemPath, document: loaded.document };\n}\n\nfunction resolveHistoryRedactNextItem(params: {\n  pmRoot: string;\n  subject: HistorySubject;\n  settings: Awaited<ReturnType<typeof readSettings>>;\n  typeToFolder: Record<string, string>;\n  finalDocument: ReplayDocument;\n}): HistoryRedactNextItem {\n  if (!hasItemMetadata(params.finalDocument)) {\n    return { raw: null, path: null, document: null };\n  }\n  const canonical = canonicalDocument(replayToItemDocument(params.finalDocument), { schema: params.settings.schema });\n  if (canonical.metadata.id !== params.subject.id) {\n    throw new PmCliError(\n      `history-redact would change item id from ${params.subject.id} to ${canonical.metadata.id}; narrow your patterns.`,\n      EXIT_CODE.USAGE,\n    );\n  }\n  return {\n    document: canonical,\n    path: getItemPath(params.pmRoot, canonical.metadata.type, params.subject.id, \"toon\", params.typeToFolder),\n    raw: serializeItemDocument(canonical, {\n      format: \"toon\",\n      schema: params.settings.schema,\n    }),\n  };\n}\n\n/* v8 ignore start -- message passthrough/plural formatting is deterministic around covered redaction outcomes */\nfunction buildHistoryRedactMessage(options: HistoryRedactCommandOptions, rewritten: RedactionRewriteResult): string {\n  if (typeof options.message === \"string\" && options.message.trim().length > 0) {\n    return options.message;\n  }\n  return `history-redact replaced ${rewritten.replacements} match(es) across ${rewritten.entriesChanged} entr${\n    rewritten.entriesChanged === 1 ? \"y\" : \"ies\"\n  }.`;\n}\n/* v8 ignore stop */\n\nfunction buildHistoryRedactEntries(params: {\n  rewritten: RedactionRewriteResult;\n  dryRun: boolean;\n  changed: boolean;\n  nextItemDocument: ItemDocument | null;\n  author: string;\n  message: string;\n}): { rewrittenEntries: HistoryEntry[]; auditEntryAdded: boolean } {\n  const rewrittenEntries = [...params.rewritten.entries];\n  if (params.dryRun || !params.changed) {\n    return { rewrittenEntries, auditEntryAdded: false };\n  }\n  /* c8 ignore next -- fallback replay-to-item conversion runs only when rewritten final metadata is absent. */\n  const finalDocument = params.nextItemDocument ?? replayToItemDocument(params.rewritten.finalDocument);\n  rewrittenEntries.push(\n    createHistoryEntry({\n      nowIso: nowIso(),\n      author: params.author,\n      op: \"history_redact\",\n      before: finalDocument,\n      after: finalDocument,\n      message: params.message,\n    }),\n  );\n  return { rewrittenEntries, auditEntryAdded: true };\n}\n\nasync function applyHistoryRedactRewrite(params: {\n  pmRoot: string;\n  subject: HistorySubject;\n  settings: Awaited<ReturnType<typeof readSettings>>;\n  typeRegistry: ReturnType<typeof resolveItemTypeRegistry>;\n  historyRawBeforeLock: string | null;\n  currentItem: HistoryRedactCurrentItem;\n  nextItem: HistoryRedactNextItem;\n  author: string;\n  force: boolean | undefined;\n  rewrittenEntries: HistoryEntry[];\n}): Promise<string[]> {\n  return executeHistoryRewrite({\n    pmRoot: params.pmRoot,\n    subject: params.subject,\n    settings: params.settings,\n    typeRegistry: params.typeRegistry,\n    historyRawBeforeLock: params.historyRawBeforeLock,\n    currentItemRawBeforeLock: params.currentItem.raw,\n    operation: \"history-redact\",\n    author: params.author,\n    force: params.force,\n    itemDocument: params.currentItem.document,\n    applyRewrite: async ({ historyRawUnderLock }) => {\n      const affectedItemPaths = new Set<string>();\n      if (params.currentItem.path) {\n        affectedItemPaths.add(params.currentItem.path);\n      }\n      if (params.nextItem.path) {\n        affectedItemPaths.add(params.nextItem.path);\n      }\n      const itemSnapshots = new Map<string, string>();\n      if (params.currentItem.path && params.currentItem.raw !== null) {\n        itemSnapshots.set(params.currentItem.path, params.currentItem.raw);\n      }\n      try {\n        /* c8 ignore next -- item-write diff branch requires path and content divergence under lock races. */\n        if (params.nextItem.path && params.nextItem.raw !== null && params.nextItem.raw !== params.currentItem.raw) {\n          await writeFileAtomic(params.nextItem.path, params.nextItem.raw);\n        }\n        if (params.currentItem.path && (!params.nextItem.path || params.nextItem.path !== params.currentItem.path)) {\n          await fs.rm(params.currentItem.path, { force: true });\n        }\n        await writeFileAtomic(params.subject.historyPath, historyEntriesToRaw(params.rewrittenEntries));\n      } catch (error) {\n        await rollbackHistoryRedactRewrite(params.subject.historyPath, historyRawUnderLock, affectedItemPaths, itemSnapshots);\n        throw error;\n      }\n    },\n    applyPostRewrite: async () => runHistoryRedactWriteHooks(params.subject.historyPath, [\n      params.nextItem.path,\n      params.currentItem.path,\n    ]),\n  });\n}\n\nasync function rollbackHistoryRedactRewrite(\n  historyPath: string,\n  historyRawUnderLock: string | null,\n  affectedItemPaths: Set<string>,\n  itemSnapshots: Map<string, string>,\n): Promise<void> {\n  /* c8 ignore start -- no-history-under-lock rollback path is exercised in lock-race integration tests. */\n  if (historyRawUnderLock === null) {\n    await fs.rm(historyPath, { force: true });\n  } else {\n    await writeFileAtomic(historyPath, historyRawUnderLock);\n  }\n  /* c8 ignore stop */\n  for (const itemPath of affectedItemPaths) {\n    const snapshot = itemSnapshots.get(itemPath);\n    /* c8 ignore start -- missing snapshot rollback occurs only for create/delete race permutations. */\n    if (snapshot === undefined) {\n      await fs.rm(itemPath, { force: true });\n    } else {\n      await writeFileAtomic(itemPath, snapshot);\n    }\n    /* c8 ignore stop */\n  }\n}\n\nasync function runHistoryRedactWriteHooks(historyPath: string, itemHookPaths: Array<string | null>): Promise<string[]> {\n  const hookWarnings: string[] = [];\n  const uniqueItemHookPaths = new Set(itemHookPaths.filter((itemPath): itemPath is string => itemPath !== null));\n  for (const itemHookPath of uniqueItemHookPaths) {\n    hookWarnings.push(\n      ...(await runActiveOnWriteHooks({\n        path: itemHookPath,\n        scope: \"project\",\n        op: \"history_redact\",\n      })),\n    );\n  }\n  hookWarnings.push(\n    ...(await runActiveOnWriteHooks({\n      path: historyPath,\n      scope: \"project\",\n      op: \"history_redact:history\",\n    })),\n  );\n  return hookWarnings;\n}\n\n/**\n * Implements resolve history subject for the public runtime surface of this module.\n */\nexport async function resolveHistorySubject(\n  pmRoot: string,\n  id: string,\n  settings: Awaited<ReturnType<typeof readSettings>>,\n  typeToFolder: Record<string, string>,\n): Promise<HistorySubject> {\n  const located = await locateItem(pmRoot, id, settings.id_prefix, settings.item_format, typeToFolder);\n  if (located) {\n    return {\n      id: located.id,\n      historyPath: getHistoryPath(pmRoot, located.id),\n      located,\n    };\n  }\n\n  const normalizedId = normalizeItemId(id, settings.id_prefix);\n  const rawNormalizedId = normalizeRawItemId(id);\n  const candidateIds = normalizedId === rawNormalizedId ? [normalizedId] : [normalizedId, rawNormalizedId];\n  for (const candidateId of candidateIds) {\n    const historyPath = getHistoryPath(pmRoot, candidateId);\n    if (await pathExists(historyPath)) {\n      return {\n        id: candidateId,\n        historyPath,\n        located: null,\n      };\n    }\n  }\n  throw new PmCliError(`Item ${id} not found`, EXIT_CODE.NOT_FOUND);\n}\n\n/**\n * Implements run history redact for the public runtime surface of this module.\n */\nexport async function runHistoryRedact(\n  id: string,\n  options: HistoryRedactCommandOptions,\n  global: GlobalOptions,\n): Promise<HistoryRedactResult> {\n  const pmRoot = resolvePmRoot(process.cwd(), global.path);\n  if (!(await pathExists(getSettingsPath(pmRoot)))) {\n    throw new PmCliError(`Tracker is not initialized at ${pmRoot}. Run pm init first.`, EXIT_CODE.NOT_FOUND);\n  }\n\n  const settings = await readSettings(pmRoot);\n  const typeRegistry = resolveItemTypeRegistry(settings, getActiveExtensionRegistrations());\n  const replacement = typeof options.replacement === \"string\" && options.replacement.length > 0 ? options.replacement : \"[redacted]\";\n  const rules = buildRedactionRules(options.literal, options.regex);\n  const subject = await resolveHistorySubject(pmRoot, id, settings, typeRegistry.type_to_folder);\n\n  if (!(await pathExists(subject.historyPath))) {\n    throw new PmCliError(`No history stream exists for ${subject.id}.`, EXIT_CODE.NOT_FOUND);\n  }\n  const historyRawBeforeLock = await readFileIfExists(subject.historyPath);\n  const historyEntries = await readHistoryEntries(subject.historyPath, subject.id);\n  if (historyEntries.length === 0) {\n    throw new PmCliError(`No history entries exist for ${subject.id}; nothing to redact.`, EXIT_CODE.USAGE);\n  }\n\n  const integritySnapshot = inspectHistoryIntegrity(historyEntries);\n  const rewritten = rewriteHistoryEntries(historyEntries, rules, replacement);\n  const preexistingHashMismatches = integritySnapshot.hashMismatchesBefore + integritySnapshot.hashMismatchesAfter;\n  const dryRun = Boolean(options.dryRun);\n  const changed = rewritten.replacements > 0;\n  const warnings: string[] = [];\n  if (preexistingHashMismatches > 0) {\n    warnings.push(`history_redact_preexisting_hash_mismatches:${preexistingHashMismatches}`);\n  }\n  if (!changed) {\n    warnings.push(\"history_redact_no_matches\");\n  }\n\n  const currentItem = await loadHistoryRedactCurrentItem(subject, settings);\n  const nextItem = resolveHistoryRedactNextItem({\n    pmRoot,\n    subject,\n    settings,\n    typeToFolder: typeRegistry.type_to_folder,\n    finalDocument: rewritten.finalDocument,\n  });\n\n  const itemChanged =\n    /* c8 ignore next -- null-coalescing item-path comparison branch is exercised in broader command integration coverage. */\n    (currentItem.path ?? null) !== (nextItem.path ?? null) ||\n    /* c8 ignore next -- null-coalescing item-content comparison branch is exercised in broader command integration coverage. */\n    (currentItem.raw ?? null) !== (nextItem.raw ?? null);\n\n  const author = resolveAuthor(options.author, settings.author_default);\n  const redactionMessage = buildHistoryRedactMessage(options, rewritten);\n  const { rewrittenEntries, auditEntryAdded } = buildHistoryRedactEntries({\n    rewritten,\n    dryRun,\n    changed,\n    nextItemDocument: nextItem.document,\n    author,\n    message: redactionMessage,\n  });\n  const historyVerify = verifyHistoryChain(rewrittenEntries);\n  /* c8 ignore start -- invalid rewritten chains are covered by history verification unit tests. */\n  if (!historyVerify.ok) {\n    throw new PmCliError(\n      `history-redact produced an invalid rewritten chain (${historyVerify.errors.join(\", \")}).`,\n      EXIT_CODE.GENERIC_FAILURE,\n    );\n  }\n  /* c8 ignore stop */\n\n  if (!dryRun && changed) {\n    warnings.push(\n      ...(await applyHistoryRedactRewrite({\n        pmRoot,\n        subject,\n        settings,\n        typeRegistry,\n        historyRawBeforeLock,\n        currentItem,\n        nextItem,\n        author,\n        force: options.force,\n        rewrittenEntries,\n      })),\n    );\n  }\n\n  return {\n    id: subject.id,\n    dry_run: dryRun,\n    changed,\n    patterns: {\n      literals: rules.filter((rule): rule is LiteralRule => rule.kind === \"literal\").map((rule) => rule.value),\n      regex: rules.filter((rule): rule is RegexRule => rule.kind === \"regex\").map((rule) => `/${rule.source}/${rule.flags}`),\n      replacement,\n    },\n    history: {\n      path: subject.historyPath,\n      entries_scanned: historyEntries.length,\n      entries_changed: rewritten.entriesChanged,\n      replacements: rewritten.replacements,\n      hash_mismatches_before: integritySnapshot.hashMismatchesBefore,\n      hash_mismatches_after: integritySnapshot.hashMismatchesAfter,\n      preexisting_hash_mismatches: preexistingHashMismatches,\n      audit_entry_added: auditEntryAdded,\n      verify_ok: historyVerify.ok,\n      verify_errors: historyVerify.errors,\n    },\n    item: {\n      existed_before: currentItem.path !== null,\n      exists_after: nextItem.path !== null,\n      path_before: currentItem.path,\n      path_after: nextItem.path,\n      changed: itemChanged,\n    },\n    /* c8 ignore next -- warning dedupe ordering is covered indirectly by command-level smoke tests. */\n    warnings: [...new Set(warnings)].sort((left, right) => left.localeCompare(right)),\n    generated_at: nowIso(),\n  };\n}\n\nexport const _testOnly = {\n  applyLiteralRule,\n  applyRegexRule,\n  buildRedactionRules,\n  hasItemMetadata,\n  normalizeRegexFlags,\n  normalizeStringArrayInput,\n  parseRegexRule,\n  redactStringValue,\n  redactUnknownValue,\n};\n", "/**\n * @module core/history/history-rewrite\n *\n * Implements append-only history and replay behavior for History Rewrite.\n */\nimport fs from \"node:fs/promises\";\nimport { readFileIfExists, writeFileAtomic } from \"../fs/fs-utils.js\";\nimport type { ItemTypeRegistry } from \"../item/type-registry.js\";\nimport { acquireLock } from \"../lock/lock.js\";\nimport { EXIT_CODE } from \"../shared/constants.js\";\nimport { PmCliError } from \"../shared/errors.js\";\nimport { locateItem, readLocatedItem } from \"../store/item-store.js\";\nimport { resolveGovernanceKnobs } from \"../store/settings.js\";\nimport type { ItemDocument, PmSettings } from \"../../types/index.js\";\n\ntype LoadedItem = Awaited<ReturnType<typeof readLocatedItem>>;\ntype HistoryRawWriter = (filePath: string, content: string) => Promise<void>;\n\n/**\n * Documents the history rewrite subject payload exchanged by command, SDK, and package integrations.\n */\nexport interface HistoryRewriteSubject {\n  id: string;\n  historyPath: string;\n}\n\n/**\n * Documents the history rewrite ownership params payload exchanged by command, SDK, and package integrations.\n */\nexport interface HistoryRewriteOwnershipParams {\n  itemDocument: ItemDocument | null;\n  subjectId: string;\n  author: string;\n  force: boolean | undefined;\n  settings: PmSettings;\n}\n\n/**\n * Apply ownership_enforcement governance to a history-rewriting operation.\n * Returns the warning(s) the caller should append (empty when no conflict or strict-throws).\n * Throws PmCliError(CONFLICT) in strict mode when the assignee conflicts and --force is not set.\n */\nexport function checkHistoryRewriteOwnership(params: HistoryRewriteOwnershipParams): string[] {\n  if (!params.itemDocument) return [];\n  const assigned = params.itemDocument.metadata?.assignee?.trim();\n  if (!assigned || assigned === params.author || params.force) return [];\n\n  const governance = resolveGovernanceKnobs(params.settings);\n  if (governance.ownership_enforcement === \"strict\") {\n    throw new PmCliError(\n      `Item ${params.subjectId} is assigned to ${assigned}. Use --force to override.`,\n      EXIT_CODE.CONFLICT,\n    );\n  }\n  if (governance.ownership_enforcement === \"warn\") {\n    return [`ownership_warning:assignee_conflict:${params.subjectId}:${assigned}`];\n  }\n  return [];\n}\n\n/**\n * Documents the verify history rewrite drift params payload exchanged by command, SDK, and package integrations.\n */\nexport interface VerifyHistoryRewriteDriftParams {\n  pmRoot: string;\n  subject: HistoryRewriteSubject;\n  settings: PmSettings;\n  typeRegistry: ItemTypeRegistry;\n  historyRawBeforeLock: string | null;\n  currentItemRawBeforeLock: string | null;\n  /** Short operation name used in the conflict message (e.g. \"history-redact\"). */\n  operation: string;\n}\n\n/**\n * Documents the verified history rewrite state payload exchanged by command, SDK, and package integrations.\n */\nexport interface VerifiedHistoryRewriteState {\n  historyRawUnderLock: string | null;\n  locatedUnderLock: Awaited<ReturnType<typeof locateItem>>;\n  loadedItemUnderLock: LoadedItem | null;\n}\n\n/**\n * Re-read the history stream and the located item document under the acquired lock and\n * compare both with the pre-lock raw snapshots. Throws PmCliError(CONFLICT) if either\n * diverged while waiting for the lock so the caller surfaces an actionable retry.\n */\nexport async function verifyHistoryRewriteNoDrift(\n  params: VerifyHistoryRewriteDriftParams,\n): Promise<VerifiedHistoryRewriteState> {\n  const historyRawUnderLock = await readFileIfExists(params.subject.historyPath);\n  if (historyRawUnderLock !== params.historyRawBeforeLock) {\n    throw new PmCliError(\n      `History for ${params.subject.id} changed while waiting for lock; retry ${params.operation}.`,\n      EXIT_CODE.CONFLICT,\n    );\n  }\n  const locatedUnderLock = await locateItem(\n    params.pmRoot,\n    params.subject.id,\n    params.settings.id_prefix,\n    params.settings.item_format,\n    params.typeRegistry.type_to_folder,\n  );\n  const loadedItemUnderLock = locatedUnderLock\n    ? await readLocatedItem(locatedUnderLock, { schema: params.settings.schema })\n    : null;\n  if ((loadedItemUnderLock?.raw ?? null) !== (params.currentItemRawBeforeLock ?? null)) {\n    throw new PmCliError(\n      `Item ${params.subject.id} changed while waiting for lock; retry ${params.operation}.`,\n      EXIT_CODE.CONFLICT,\n    );\n  }\n  return { historyRawUnderLock, locatedUnderLock, loadedItemUnderLock };\n}\n\n/**\n * Documents the execute history rewrite params payload exchanged by command, SDK, and package integrations.\n */\nexport interface ExecuteHistoryRewriteParams {\n  pmRoot: string;\n  subject: HistoryRewriteSubject;\n  settings: PmSettings;\n  typeRegistry: ItemTypeRegistry;\n  historyRawBeforeLock: string | null;\n  currentItemRawBeforeLock: string | null;\n  /** Short operation name used in conflict guidance (e.g. \"history-redact\"). */\n  operation: string;\n  author: string;\n  force: boolean | undefined;\n  itemDocument: ItemDocument | null;\n  applyRewrite: (verified: VerifiedHistoryRewriteState) => Promise<void>;\n  applyPostRewrite?: (verified: VerifiedHistoryRewriteState) => Promise<string[]>;\n}\n\n/**\n * Writes the rewritten history stream and restores the under-lock snapshot on failure.\n */\nexport async function writeHistoryRawWithRollback(params: {\n  historyPath: string;\n  nextHistoryRaw: string;\n  historyRawUnderLock: string | null;\n  writeHistoryRaw?: HistoryRawWriter;\n}): Promise<void> {\n  const writeHistoryRaw = params.writeHistoryRaw ?? writeFileAtomic;\n  try {\n    await writeHistoryRaw(params.historyPath, params.nextHistoryRaw);\n  } catch (error) {\n    try {\n      if (params.historyRawUnderLock === null) {\n        await fs.rm(params.historyPath, { force: true });\n      } else {\n        await writeHistoryRaw(params.historyPath, params.historyRawUnderLock);\n      }\n    } catch (rollbackError) {\n      throw new AggregateError(\n        [error, rollbackError],\n        `History rewrite failed and rollback also failed: ${String(error)}`,\n      );\n    }\n    throw error;\n  }\n}\n\n/**\n * Shared lock/verify/ownership orchestration for history-rewrite commands.\n * Callers provide the operation-specific write/rollback logic and optional\n * post-write hook execution while this helper enforces the common governance +\n * lock sequencing contract.\n */\nexport async function executeHistoryRewrite(params: ExecuteHistoryRewriteParams): Promise<string[]> {\n  const warnings = [...checkHistoryRewriteOwnership({\n    itemDocument: params.itemDocument,\n    subjectId: params.subject.id,\n    author: params.author,\n    force: params.force,\n    settings: params.settings,\n  })];\n  const releaseLock = await acquireLock(\n    params.pmRoot,\n    params.subject.id,\n    params.settings.locks.ttl_seconds,\n    params.author,\n    Boolean(params.force),\n    params.settings.governance.force_required_for_stale_lock,\n  );\n  try {\n    const verified = await verifyHistoryRewriteNoDrift({\n      pmRoot: params.pmRoot,\n      subject: params.subject,\n      settings: params.settings,\n      typeRegistry: params.typeRegistry,\n      historyRawBeforeLock: params.historyRawBeforeLock,\n      currentItemRawBeforeLock: params.currentItemRawBeforeLock,\n      operation: params.operation,\n    });\n    await params.applyRewrite(verified);\n    if (params.applyPostRewrite) {\n      warnings.push(...(await params.applyPostRewrite(verified)));\n    }\n    return warnings;\n  } finally {\n    await releaseLock();\n  }\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAKA,OAAOA,SAAQ;;;ACAf,OAAO,QAAQ;;;;;;;;AAqCT,SAAU,6BAA6B,QAAqC;AAChF,MAAI,CAAC,OAAO;AAAc,WAAO,CAAA;AACjC,QAAM,WAAW,OAAO,aAAa,UAAU,UAAU,KAAI;AAC7D,MAAI,CAAC,YAAY,aAAa,OAAO,UAAU,OAAO;AAAO,WAAO,CAAA;AAEpE,QAAM,aAAa,uBAAuB,OAAO,QAAQ;AACzD,MAAI,WAAW,0BAA0B,UAAU;AACjD,UAAM,IAAI,WACR,QAAQ,OAAO,SAAS,mBAAmB,QAAQ,8BACnD,UAAU,QAAQ;EAEtB;AACA,MAAI,WAAW,0BAA0B,QAAQ;AAC/C,WAAO,CAAC,uCAAuC,OAAO,SAAS,IAAI,QAAQ,EAAE;EAC/E;AACA,SAAO,CAAA;AACT;AA8BA,eAAsB,4BACpB,QAAuC;AAEvC,QAAM,sBAAsB,MAAM,iBAAiB,OAAO,QAAQ,WAAW;AAC7E,MAAI,wBAAwB,OAAO,sBAAsB;AACvD,UAAM,IAAI,WACR,eAAe,OAAO,QAAQ,EAAE,0CAA0C,OAAO,SAAS,KAC1F,UAAU,QAAQ;EAEtB;AACA,QAAM,mBAAmB,MAAM,WAC7B,OAAO,QACP,OAAO,QAAQ,IACf,OAAO,SAAS,WAChB,OAAO,SAAS,aAChB,OAAO,aAAa,cAAc;AAEpC,QAAM,sBAAsB,mBACxB,MAAM,gBAAgB,kBAAkB,EAAE,QAAQ,OAAO,SAAS,OAAM,CAAE,IAC1E;AACJ,OAAK,qBAAqB,OAAO,WAAW,OAAO,4BAA4B,OAAO;AACpF,UAAM,IAAI,WACR,QAAQ,OAAO,QAAQ,EAAE,0CAA0C,OAAO,SAAS,KACnF,UAAU,QAAQ;EAEtB;AACA,SAAO,EAAE,qBAAqB,kBAAkB,oBAAmB;AACrE;AAwBA,eAAsB,4BAA4B,QAKjD;AACC,QAAM,kBAAkB,OAAO,mBAAmB;AAClD,MAAI;AACF,UAAM,gBAAgB,OAAO,aAAa,OAAO,cAAc;EACjE,SAAS,OAAO;AACd,QAAI;AACF,UAAI,OAAO,wBAAwB,MAAM;AACvC,cAAM,GAAG,GAAG,OAAO,aAAa,EAAE,OAAO,KAAI,CAAE;MACjD,OAAO;AACL,cAAM,gBAAgB,OAAO,aAAa,OAAO,mBAAmB;MACtE;IACF,SAAS,eAAe;AACtB,YAAM,IAAI,eACR,CAAC,OAAO,aAAa,GACrB,oDAAoD,OAAO,KAAK,CAAC,EAAE;IAEvE;AACA,UAAM;EACR;AACF;AAQA,eAAsB,sBAAsB,QAAmC;AAC7E,QAAM,WAAW,CAAC,GAAG,6BAA6B;IAChD,cAAc,OAAO;IACrB,WAAW,OAAO,QAAQ;IAC1B,QAAQ,OAAO;IACf,OAAO,OAAO;IACd,UAAU,OAAO;GAClB,CAAC;AACF,QAAM,cAAc,MAAM,YACxB,OAAO,QACP,OAAO,QAAQ,IACf,OAAO,SAAS,MAAM,aACtB,OAAO,QACP,QAAQ,OAAO,KAAK,GACpB,OAAO,SAAS,WAAW,6BAA6B;AAE1D,MAAI;AACF,UAAM,WAAW,MAAM,4BAA4B;MACjD,QAAQ,OAAO;MACf,SAAS,OAAO;MAChB,UAAU,OAAO;MACjB,cAAc,OAAO;MACrB,sBAAsB,OAAO;MAC7B,0BAA0B,OAAO;MACjC,WAAW,OAAO;KACnB;AACD,UAAM,OAAO,aAAa,QAAQ;AAClC,QAAI,OAAO,kBAAkB;AAC3B,eAAS,KAAK,GAAI,MAAM,OAAO,iBAAiB,QAAQ,CAAE;IAC5D;AACA,WAAO;EACT;AACE,UAAM,YAAW;EACnB;AACF;;;;;;;;;;AD3EA,SAAS,0BAA0B,OAAoC;AACrE,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO;EACT;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,CAAC,KAAK;EACf;AACA,SAAO,CAAA;AACT;AAEA,SAAS,oBAAoB,OAAa;AACxC,QAAM,SAAmB,CAAA;AACzB,aAAW,SAAS,OAAO;AACzB,QAAI,CAAC,OAAO,SAAS,KAAK,GAAG;AAC3B,aAAO,KAAK,KAAK;IACnB;EACF;AACA,MAAI,CAAC,OAAO,SAAS,GAAG,GAAG;AACzB,WAAO,KAAK,GAAG;EACjB;AACA,SAAO,OAAO,KAAK,EAAE;AACvB;AAEA,SAAS,eAAe,MAAY;AAClC,QAAM,UAAU,KAAK,KAAI;AACzB,MAAI,QAAQ,WAAW,GAAG;AACxB,UAAM,IAAI,WAAW,wDAAwD,UAAU,KAAK;EAC9F;AAEA,MAAI,SAAS;AACb,MAAI,QAAQ;AACZ,MAAI,QAAQ,WAAW,GAAG,KAAK,QAAQ,SAAS,GAAG;AAEjD,UAAM,aAAa,QAAQ,YAAY,GAAG;AAC1C,QAAI,aAAa,GAAG;AAClB,eAAS,QAAQ,MAAM,GAAG,UAAU;AACpC,cAAQ,oBAAoB,QAAQ,MAAM,aAAa,CAAC,CAAC;IAC3D;EAEF;AACA,MAAI,OAAO,WAAW,GAAG;AACvB,UAAM,IAAI,WAAW,uDAAuD,UAAU,KAAK;EAC7F;AACA,MAAI;AACF,QAAI,OAAO,QAAQ,KAAK;EAC1B,SAAS,OAAO;AAEd,UAAM,IAAI,WACR,0BAA0B,IAAI,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC,IAC1F,UAAU,KAAK;EAGnB;AAEA,SAAO;IACL,MAAM;IACN;IACA;IACA,OAAO,IAAI,MAAM,IAAI,KAAK;;AAE9B;AAEA,SAAS,oBACP,cACA,YAAyC;AAEzC,QAAM,eAAe,CAAC,GAAG,IAAI,IAAI,0BAA0B,YAAY,EAAE,IAAI,CAAC,UAAU,MAAM,KAAI,CAAE,CAAC,CAAC,EACnG,OAAO,CAAC,UAAU,MAAM,SAAS,CAAC,EAClC,IAAiB,CAAC,WAAW;IAC5B,MAAM;IACN,OAAO;IACP,OAAO;IACP;AACJ,QAAM,aAAa,CAAC,GAAG,IAAI,IAAI,0BAA0B,UAAU,EAAE,IAAI,CAAC,UAAU,MAAM,KAAI,CAAE,CAAC,CAAC,EAC/F,OAAO,CAAC,UAAU,MAAM,SAAS,CAAC,EAClC,IAAI,cAAc;AAErB,QAAM,QAAQ,CAAC,GAAG,cAAc,GAAG,UAAU;AAC7C,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,IAAI,WACR,0EACA,UAAU,OACV;MACE,MAAM;MACN,UAAU;MACV,UAAU;QACR;QACA;;KAEH;EAEL;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,OAAe,SAAiB,aAAmB;AAC3E,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAO,EAAE,OAAO,cAAc,EAAC;EACjC;AACA,MAAI,SAAS;AACb,MAAI,eAAe;AACnB,SAAO,UAAU,MAAM,QAAQ;AAC7B,UAAM,QAAQ,MAAM,QAAQ,SAAS,MAAM;AAC3C,QAAI,UAAU,IAAI;AAChB;IACF;AACA,oBAAgB;AAChB,aAAS,QAAQ,KAAK,IAAI,GAAG,QAAQ,MAAM;EAC7C;AACA,MAAI,iBAAiB,GAAG;AACtB,WAAO,EAAE,OAAO,cAAc,EAAC;EACjC;AACA,SAAO;IACL,OAAO,MAAM,MAAM,OAAO,EAAE,KAAK,WAAW;IAC5C;;AAEJ;AAEA,SAAS,eAAe,OAAe,MAAiB,aAAmB;AACzE,QAAM,QAAQ,IAAI,OAAO,KAAK,QAAQ,KAAK,KAAK;AAChD,QAAM,UAAU,CAAC,GAAG,MAAM,SAAS,KAAK,CAAC;AACzC,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAO,EAAE,OAAO,cAAc,EAAC;EACjC;AACA,SAAO;IACL,OAAO,MAAM,QAAQ,OAAO,WAAW;IACvC,cAAc,QAAQ;;AAE1B;AAEA,SAAS,kBAAkB,OAAe,OAAwB,aAAmB;AACnF,MAAI,OAAO;AACX,MAAI,eAAe;AACnB,aAAW,QAAQ,OAAO;AACxB,UAAM,SACJ,KAAK,SAAS,YACV,iBAAiB,MAAM,KAAK,OAAO,WAAW,IAC9C,eAAe,MAAM,MAAM,WAAW;AAC5C,WAAO,OAAO;AACd,oBAAgB,OAAO;EACzB;AACA,SAAO;IACL,OAAO;IACP;;AAEJ;AAEA,SAAS,mBAAmB,OAAgB,OAAwB,aAAmB;AACrF,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,kBAAkB,OAAO,OAAO,WAAW;EACpD;AACA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,QAAI,eAAe;AACnB,UAAM,aAAa,MAAM,IAAI,CAAC,UAAS;AACrC,YAAM,WAAW,mBAAmB,OAAO,OAAO,WAAW;AAC7D,sBAAgB,SAAS;AACzB,aAAO,SAAS;IAClB,CAAC;AACD,WAAO;MACL,OAAO;MACP;;EAEJ;AACA,MAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C,QAAI,eAAe;AACnB,UAAM,aAAsC,CAAA;AAC5C,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,GAAG;AAChD,YAAM,WAAW,mBAAmB,OAAO,OAAO,WAAW;AAC7D,sBAAgB,SAAS;AACzB,iBAAW,GAAG,IAAI,SAAS;IAC7B;AACA,WAAO;MACL,OAAO;MACP;;EAEJ;AACA,SAAO;IACL;IACA,cAAc;;AAElB;AAEA,SAAS,kBAAkB,SAAyB,OAAyB,aAAqB,IAAU;AAC1G,QAAM,SAAS,oBAAoB,SAAS,KAAK;AAEjD,MAAI,CAAC,OAAO,IAAI;AACd,UAAM,IAAI,WACR,iDAAiD,WAAW,QAAQ,EAAE,MACpE,OAAO,iBAAiB,QAAQ,OAAO,MAAM,UAAU,OAAO,OAAO,KAAK,CAC5E,IACA,UAAU,eAAe;EAE7B;AAEA,SAAO,OAAO;AAChB;AAEA,SAAS,wBAAwB,SAAuB;AACtD,MAAI,SAAS,gBAAgB,qBAAqB;AAClD,MAAI,uBAAuB;AAC3B,MAAI,sBAAsB;AAC1B,WAAS,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,SAAS,GAAG;AACtD,UAAM,QAAQ,QAAQ,KAAK;AAC3B,QAAI,WAAW,MAAM,MAAM,MAAM,aAAa;AAC5C,8BAAwB;IAC1B;AACA,aAAS,kBAAkB,QAAQ,MAAM,OAAO,QAAQ,GAAG,MAAM,EAAE;AAEnE,QAAI,WAAW,MAAM,MAAM,MAAM,YAAY;AAC3C,6BAAuB;IACzB;EAEF;AACA,SAAO;IACL;IACA;IACA,eAAe;;AAEnB;AAEA,SAAS,mBAAmB,OAAqB,OAAwB,aAAmB;AAK1F,MAAI,eAAe;AACnB,MAAI,UAAU;AACd,MAAI,cAAc,MAAM;AAExB,MAAI,OAAO,MAAM,YAAY,UAAU;AACrC,UAAM,kBAAkB,kBAAkB,MAAM,SAAS,OAAO,WAAW;AAC3E,kBAAc,gBAAgB;AAC9B,oBAAgB,gBAAgB;AAChC,QAAI,gBAAgB,eAAe,GAAG;AACpC,gBAAU;IACZ;EACF;AAEA,QAAM,YAAY,MAAM,MAAM,IAAI,CAAC,cAAa;AAE9C,QAAI,CAAC,OAAO,UAAU,eAAe,KAAK,WAAW,OAAO,GAAG;AAC7D,aAAO;IACT;AAEA,UAAM,gBAAgB,mBAAmB,UAAU,OAAO,OAAO,WAAW;AAC5E,oBAAgB,cAAc;AAC9B,QAAI,cAAc,eAAe,GAAG;AAClC,gBAAU;AACV,aAAO;QACL,GAAG;QACH,OAAO,cAAc;;IAEzB;AACA,WAAO;EACT,CAAC;AAED,SAAO;IACL,OAAO;MACL,GAAG;MACH,SAAS;MACT,OAAO;;IAET;IACA;;AAEJ;AAEA,SAAS,sBAAsB,SAAyB,OAAwB,aAAmB;AACjG,MAAI,SAAS,gBAAgB,qBAAqB;AAClD,MAAI,iBAAiB;AACrB,MAAI,eAAe;AACnB,QAAM,mBAAmC,CAAA;AAEzC,WAAS,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,SAAS,GAAG;AACtD,UAAM,WAAW,mBAAmB,QAAQ,KAAK,GAAG,OAAO,WAAW;AACtE,oBAAgB,SAAS;AACzB,QAAI,SAAS,SAAS;AACpB,wBAAkB;IACpB;AACA,UAAM,aAAa,WAAW,MAAM;AACpC,aAAS,kBAAkB,QAAQ,SAAS,MAAM,OAAO,QAAQ,GAAG,SAAS,MAAM,EAAE;AACrF,UAAM,YAAY,WAAW,MAAM;AACnC,qBAAiB,KAAK;MACpB,GAAG,SAAS;MACZ,aAAa;MACb,YAAY;KACb;EACH;AAEA,SAAO;IACL,SAAS;IACT,eAAe;IACf;IACA;;AAEJ;AAEA,SAAS,gBAAgB,QAAsB;AAC7C,SAAO,OAAO,KAAK,OAAO,QAAQ,EAAE,SAAS;AAC/C;AAEA,eAAe,6BACb,SACA,UAAkD;AAElD,QAAM,kBAAkB,QAAQ,SAAS,YAAY;AACrD,MAAI,CAAC,QAAQ,SAAS;AACpB,WAAO,EAAE,KAAK,MAAM,MAAM,iBAAiB,UAAU,KAAI;EAC3D;AACA,QAAM,SAAS,MAAM,gBAAgB,QAAQ,SAAS,EAAE,QAAQ,SAAS,OAAM,CAAE;AACjF,SAAO,EAAE,KAAK,OAAO,KAAK,MAAM,iBAAiB,UAAU,OAAO,SAAQ;AAC5E;AAEA,SAAS,6BAA6B,QAMrC;AACC,MAAI,CAAC,gBAAgB,OAAO,aAAa,GAAG;AAC1C,WAAO,EAAE,KAAK,MAAM,MAAM,MAAM,UAAU,KAAI;EAChD;AACA,QAAM,YAAY,kBAAkB,qBAAqB,OAAO,aAAa,GAAG,EAAE,QAAQ,OAAO,SAAS,OAAM,CAAE;AAClH,MAAI,UAAU,SAAS,OAAO,OAAO,QAAQ,IAAI;AAC/C,UAAM,IAAI,WACR,4CAA4C,OAAO,QAAQ,EAAE,OAAO,UAAU,SAAS,EAAE,2BACzF,UAAU,KAAK;EAEnB;AACA,SAAO;IACL,UAAU;IACV,MAAM,YAAY,OAAO,QAAQ,UAAU,SAAS,MAAM,OAAO,QAAQ,IAAI,QAAQ,OAAO,YAAY;IACxG,KAAK,sBAAsB,WAAW;MACpC,QAAQ;MACR,QAAQ,OAAO,SAAS;KACzB;;AAEL;AAGA,SAAS,0BAA0B,SAAsC,WAAiC;AACxG,MAAI,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,KAAI,EAAG,SAAS,GAAG;AAC5E,WAAO,QAAQ;EACjB;AACA,SAAO,2BAA2B,UAAU,YAAY,qBAAqB,UAAU,cAAc,QACnG,UAAU,mBAAmB,IAAI,MAAM,KACzC;AACF;AAGA,SAAS,0BAA0B,QAOlC;AACC,QAAM,mBAAmB,CAAC,GAAG,OAAO,UAAU,OAAO;AACrD,MAAI,OAAO,UAAU,CAAC,OAAO,SAAS;AACpC,WAAO,EAAE,kBAAkB,iBAAiB,MAAK;EACnD;AAEA,QAAM,gBAAgB,OAAO,oBAAoB,qBAAqB,OAAO,UAAU,aAAa;AACpG,mBAAiB,KACf,mBAAmB;IACjB,QAAQ,OAAM;IACd,QAAQ,OAAO;IACf,IAAI;IACJ,QAAQ;IACR,OAAO;IACP,SAAS,OAAO;GACjB,CAAC;AAEJ,SAAO,EAAE,kBAAkB,iBAAiB,KAAI;AAClD;AAEA,eAAe,0BAA0B,QAWxC;AACC,SAAO,sBAAsB;IAC3B,QAAQ,OAAO;IACf,SAAS,OAAO;IAChB,UAAU,OAAO;IACjB,cAAc,OAAO;IACrB,sBAAsB,OAAO;IAC7B,0BAA0B,OAAO,YAAY;IAC7C,WAAW;IACX,QAAQ,OAAO;IACf,OAAO,OAAO;IACd,cAAc,OAAO,YAAY;IACjC,cAAc,OAAO,EAAE,oBAAmB,MAAM;AAC9C,YAAM,oBAAoB,oBAAI,IAAG;AACjC,UAAI,OAAO,YAAY,MAAM;AAC3B,0BAAkB,IAAI,OAAO,YAAY,IAAI;MAC/C;AACA,UAAI,OAAO,SAAS,MAAM;AACxB,0BAAkB,IAAI,OAAO,SAAS,IAAI;MAC5C;AACA,YAAM,gBAAgB,oBAAI,IAAG;AAC7B,UAAI,OAAO,YAAY,QAAQ,OAAO,YAAY,QAAQ,MAAM;AAC9D,sBAAc,IAAI,OAAO,YAAY,MAAM,OAAO,YAAY,GAAG;MACnE;AACA,UAAI;AAEF,YAAI,OAAO,SAAS,QAAQ,OAAO,SAAS,QAAQ,QAAQ,OAAO,SAAS,QAAQ,OAAO,YAAY,KAAK;AAC1G,gBAAM,gBAAgB,OAAO,SAAS,MAAM,OAAO,SAAS,GAAG;QACjE;AACA,YAAI,OAAO,YAAY,SAAS,CAAC,OAAO,SAAS,QAAQ,OAAO,SAAS,SAAS,OAAO,YAAY,OAAO;AAC1G,gBAAMC,IAAG,GAAG,OAAO,YAAY,MAAM,EAAE,OAAO,KAAI,CAAE;QACtD;AACA,cAAM,gBAAgB,OAAO,QAAQ,aAAa,oBAAoB,OAAO,gBAAgB,CAAC;MAChG,SAAS,OAAO;AACd,cAAM,6BAA6B,OAAO,QAAQ,aAAa,qBAAqB,mBAAmB,aAAa;AACpH,cAAM;MACR;IACF;IACA,kBAAkB,YAAY,2BAA2B,OAAO,QAAQ,aAAa;MACnF,OAAO,SAAS;MAChB,OAAO,YAAY;KACpB;GACF;AACH;AAEA,eAAe,6BACb,aACA,qBACA,mBACA,eAAkC;AAGlC,MAAI,wBAAwB,MAAM;AAChC,UAAMA,IAAG,GAAG,aAAa,EAAE,OAAO,KAAI,CAAE;EAC1C,OAAO;AACL,UAAM,gBAAgB,aAAa,mBAAmB;EACxD;AAEA,aAAW,YAAY,mBAAmB;AACxC,UAAM,WAAW,cAAc,IAAI,QAAQ;AAE3C,QAAI,aAAa,QAAW;AAC1B,YAAMA,IAAG,GAAG,UAAU,EAAE,OAAO,KAAI,CAAE;IACvC,OAAO;AACL,YAAM,gBAAgB,UAAU,QAAQ;IAC1C;EAEF;AACF;AAEA,eAAe,2BAA2B,aAAqB,eAAmC;AAChG,QAAM,eAAyB,CAAA;AAC/B,QAAM,sBAAsB,IAAI,IAAI,cAAc,OAAO,CAAC,aAAiC,aAAa,IAAI,CAAC;AAC7G,aAAW,gBAAgB,qBAAqB;AAC9C,iBAAa,KACX,GAAI,MAAM,sBAAsB;MAC9B,MAAM;MACN,OAAO;MACP,IAAI;KACL,CAAE;EAEP;AACA,eAAa,KACX,GAAI,MAAM,sBAAsB;IAC9B,MAAM;IACN,OAAO;IACP,IAAI;GACL,CAAE;AAEL,SAAO;AACT;AAKA,eAAsB,sBACpB,QACA,IACA,UACA,cAAoC;AAEpC,QAAM,UAAU,MAAM,WAAW,QAAQ,IAAI,SAAS,WAAW,SAAS,aAAa,YAAY;AACnG,MAAI,SAAS;AACX,WAAO;MACL,IAAI,QAAQ;MACZ,aAAa,eAAe,QAAQ,QAAQ,EAAE;MAC9C;;EAEJ;AAEA,QAAM,eAAe,gBAAgB,IAAI,SAAS,SAAS;AAC3D,QAAM,kBAAkB,mBAAmB,EAAE;AAC7C,QAAM,eAAe,iBAAiB,kBAAkB,CAAC,YAAY,IAAI,CAAC,cAAc,eAAe;AACvG,aAAW,eAAe,cAAc;AACtC,UAAM,cAAc,eAAe,QAAQ,WAAW;AACtD,QAAI,MAAM,WAAW,WAAW,GAAG;AACjC,aAAO;QACL,IAAI;QACJ;QACA,SAAS;;IAEb;EACF;AACA,QAAM,IAAI,WAAW,QAAQ,EAAE,cAAc,UAAU,SAAS;AAClE;AAKA,eAAsB,iBACpB,IACA,SACAC,SAAqB;AAErB,QAAM,SAAS,cAAc,QAAQ,IAAG,GAAIA,QAAO,IAAI;AACvD,MAAI,CAAE,MAAM,WAAW,gBAAgB,MAAM,CAAC,GAAI;AAChD,UAAM,IAAI,WAAW,iCAAiC,MAAM,wBAAwB,UAAU,SAAS;EACzG;AAEA,QAAM,WAAW,MAAM,aAAa,MAAM;AAC1C,QAAM,eAAe,wBAAwB,UAAU,gCAA+B,CAAE;AACxF,QAAM,cAAc,OAAO,QAAQ,gBAAgB,YAAY,QAAQ,YAAY,SAAS,IAAI,QAAQ,cAAc;AACtH,QAAM,QAAQ,oBAAoB,QAAQ,SAAS,QAAQ,KAAK;AAChE,QAAM,UAAU,MAAM,sBAAsB,QAAQ,IAAI,UAAU,aAAa,cAAc;AAE7F,MAAI,CAAE,MAAM,WAAW,QAAQ,WAAW,GAAI;AAC5C,UAAM,IAAI,WAAW,gCAAgC,QAAQ,EAAE,KAAK,UAAU,SAAS;EACzF;AACA,QAAM,uBAAuB,MAAM,iBAAiB,QAAQ,WAAW;AACvE,QAAM,iBAAiB,MAAM,mBAAmB,QAAQ,aAAa,QAAQ,EAAE;AAC/E,MAAI,eAAe,WAAW,GAAG;AAC/B,UAAM,IAAI,WAAW,gCAAgC,QAAQ,EAAE,wBAAwB,UAAU,KAAK;EACxG;AAEA,QAAM,oBAAoB,wBAAwB,cAAc;AAChE,QAAM,YAAY,sBAAsB,gBAAgB,OAAO,WAAW;AAC1E,QAAM,4BAA4B,kBAAkB,uBAAuB,kBAAkB;AAC7F,QAAM,SAAS,QAAQ,QAAQ,MAAM;AACrC,QAAM,UAAU,UAAU,eAAe;AACzC,QAAM,WAAqB,CAAA;AAC3B,MAAI,4BAA4B,GAAG;AACjC,aAAS,KAAK,8CAA8C,yBAAyB,EAAE;EACzF;AACA,MAAI,CAAC,SAAS;AACZ,aAAS,KAAK,2BAA2B;EAC3C;AAEA,QAAM,cAAc,MAAM,6BAA6B,SAAS,QAAQ;AACxE,QAAM,WAAW,6BAA6B;IAC5C;IACA;IACA;IACA,cAAc,aAAa;IAC3B,eAAe,UAAU;GAC1B;AAED,QAAM;;KAEH,YAAY,QAAQ,WAAW,SAAS,QAAQ;KAEhD,YAAY,OAAO,WAAW,SAAS,OAAO;;AAEjD,QAAM,SAAS,cAAc,QAAQ,QAAQ,SAAS,cAAc;AACpE,QAAM,mBAAmB,0BAA0B,SAAS,SAAS;AACrE,QAAM,EAAE,kBAAkB,gBAAe,IAAK,0BAA0B;IACtE;IACA;IACA;IACA,kBAAkB,SAAS;IAC3B;IACA,SAAS;GACV;AACD,QAAM,gBAAgB,mBAAmB,gBAAgB;AAEzD,MAAI,CAAC,cAAc,IAAI;AACrB,UAAM,IAAI,WACR,uDAAuD,cAAc,OAAO,KAAK,IAAI,CAAC,MACtF,UAAU,eAAe;EAE7B;AAGA,MAAI,CAAC,UAAU,SAAS;AACtB,aAAS,KACP,GAAI,MAAM,0BAA0B;MAClC;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA,OAAO,QAAQ;MACf;KACD,CAAE;EAEP;AAEA,SAAO;IACL,IAAI,QAAQ;IACZ,SAAS;IACT;IACA,UAAU;MACR,UAAU,MAAM,OAAO,CAAC,SAA8B,KAAK,SAAS,SAAS,EAAE,IAAI,CAAC,SAAS,KAAK,KAAK;MACvG,OAAO,MAAM,OAAO,CAAC,SAA4B,KAAK,SAAS,OAAO,EAAE,IAAI,CAAC,SAAS,IAAI,KAAK,MAAM,IAAI,KAAK,KAAK,EAAE;MACrH;;IAEF,SAAS;MACP,MAAM,QAAQ;MACd,iBAAiB,eAAe;MAChC,iBAAiB,UAAU;MAC3B,cAAc,UAAU;MACxB,wBAAwB,kBAAkB;MAC1C,uBAAuB,kBAAkB;MACzC,6BAA6B;MAC7B,mBAAmB;MACnB,WAAW,cAAc;MACzB,eAAe,cAAc;;IAE/B,MAAM;MACJ,gBAAgB,YAAY,SAAS;MACrC,cAAc,SAAS,SAAS;MAChC,aAAa,YAAY;MACzB,YAAY,SAAS;MACrB,SAAS;;;IAGX,UAAU,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;IAChF,cAAc,OAAM;;AAExB;AAEO,IAAM,YAAY;EACvB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;",
+  "names": ["fs", "fs", "global"]
 }

package/dist/cli-bundle/chunks/{chunk-EMPGXBUF.js → chunk-4SHME4VR.js}

@@ -2,7 +2,7 @@
 !function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="1f86aff5-7cfc-566c-8c4b-af6365719945")}catch(e){}}();
 import {
   toNonEmptyStringOrUndefined
-} from "./chunk-I66WE2HE.js";
+} from "./chunk-SL2ANJSV.js";
 
 // dist/core/governance/metadata-coverage.js
 function normalizeStatus(status, registry) {
@@ -257,6 +257,6 @@ export {
   computeMetadataCoverage,
   groupItemsByDimension
 };
-//# sourceMappingURL=chunk-EMPGXBUF.js.map
+//# sourceMappingURL=chunk-4SHME4VR.js.map
 
 //# debugId=1f86aff5-7cfc-566c-8c4b-af6365719945

package/dist/cli-bundle/chunks/{chunk-6ITZLD4T.js → chunk-5FYY76HR.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-CZVISY5A.js";
 import {
   runClose
-} from "./chunk-WJAMWAHZ.js";
+} from "./chunk-NGDK3KEZ.js";
 import {
   COMMON_UNSET_FIELD_DEFINITIONS_AFTER_AUTHOR,
   COMMON_UNSET_FIELD_DEFINITIONS_AFTER_CLOSE_REASON_BEFORE_AUTHOR,
@@ -17,6 +17,7 @@ import {
   isLegacyNoneToken,
   normalizeRiskInput,
   normalizeSeverityInput,
+  parseCommandUnsetTargets,
   parseConfidenceInput,
   parseDocs,
   parseEventEntries,
@@ -28,7 +29,7 @@ import {
   parseTypeOptionEntries,
   resolvePriority,
   resolveRuntimeUnsetFieldDefinition
-} from "./chunk-MNBPX5JS.js";
+} from "./chunk-2VK677OA.js";
 import {
   applyTagRemovals,
   assertNoUnknownCsvKeys,
@@ -38,15 +39,15 @@ import {
   parseCsvKv,
   parseOptionalNumber,
   parseTags
-} from "./chunk-ZNHEYCDD.js";
+} from "./chunk-N2LOJUBB.js";
 import {
   normalizeParentReferenceValue,
   validateMissingParentReference,
   validateSprintOrReleaseValue
-} from "./chunk-EUKTMRN3.js";
+} from "./chunk-TUV7SIWZ.js";
 import {
   buildInvalidTypeError
-} from "./chunk-3LCUASYG.js";
+} from "./chunk-A2W3XKAD.js";
 import {
   applyRegisteredItemFieldDefaultsAndValidation,
   buildItemNotFoundError,
@@ -57,15 +58,16 @@ import {
   parseRegisteredItemFieldAssignments,
   readLocatedItem,
   toItemRecord
-} from "./chunk-JXAUVO6X.js";
+} from "./chunk-CN4OAA2G.js";
 import {
   collectRuntimeUpdateFieldValues,
   normalizeStatusInput
-} from "./chunk-IEEJQCZ4.js";
+} from "./chunk-CQFZRLXQ.js";
 import {
   resolveIsoOrRelative
-} from "./chunk-AIAIXG7I.js";
+} from "./chunk-MZG6I2Q2.js";
 import {
+  COMMON_MUTATION_COMMAND_OPTION_KEYS,
   DEPENDENCY_KIND_VALUES,
   EXIT_CODE,
   ISSUE_SEVERITY_VALUES,
@@ -87,13 +89,13 @@ import {
   resolveTypeName,
   stableValueEquals,
   validateTypeOptions
-} from "./chunk-7NSPKJUS.js";
+} from "./chunk-BDDYM4LH.js";
 
 // dist/cli/commands/update.js
 !(function() {
   try {
     var e = "undefined" != typeof window ? window : "undefined" != typeof global ? global : "undefined" != typeof globalThis ? globalThis : "undefined" != typeof self ? self : {}, n = new e.Error().stack;
-    n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "6156dbbd-29ea-58f5-ba6e-c9ae989e23e3");
+    n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "38934707-a55f-55b8-8d46-131923475005");
   } catch (e2) {
   }
 })();
@@ -176,31 +178,18 @@ function normalizeLegacyNoneUpdateOptions(options) {
   return applyLegacyNoneCollectionNormalizers(normalized, UPDATE_LEGACY_NONE_COLLECTION_NORMALIZERS);
 }
 function parseUpdateUnsetTargets(raw, runtimeFieldRegistry, extensionFieldNames = []) {
-  const frontMatterKeys = /* @__PURE__ */ new Set();
-  const optionKeys = /* @__PURE__ */ new Set();
-  if (!raw || raw.length === 0) {
-    return { frontMatterKeys, optionKeys };
-  }
-  for (const entry of raw) {
-    const trimmed = entry.trim().toLowerCase();
-    if (!trimmed) {
-      throw new PmCliError("--unset values must not be empty", EXIT_CODE.USAGE);
-    }
-    if (isLegacyNoneToken(trimmed)) {
-      throw new PmCliError('--unset no longer accepts "none" or "null". Specify concrete field names such as --unset deadline', EXIT_CODE.USAGE);
-    }
-    const extensionFieldName = extensionFieldNames.find((fieldName) => {
-      const normalizedFieldName = fieldName.toLowerCase();
-      return normalizedFieldName === trimmed || normalizedFieldName.replaceAll("_", "-") === trimmed || normalizedFieldName.replaceAll("-", "_") === trimmed;
-    });
-    const definition = UPDATE_UNSET_ALIAS_MAP.get(trimmed) ?? resolveRuntimeUnsetFieldDefinition(trimmed, "update", runtimeFieldRegistry) ?? (extensionFieldName ? { optionKey: "field", frontMatterKey: extensionFieldName } : void 0);
-    if (!definition) {
-      throw new PmCliError(`Unsupported --unset field "${entry}". Supported fields: ${UPDATE_UNSET_SUPPORTED_CANONICAL_FIELDS}`, EXIT_CODE.USAGE);
+  return parseCommandUnsetTargets({
+    raw,
+    supportedFields: UPDATE_UNSET_SUPPORTED_CANONICAL_FIELDS,
+    resolveDefinition: (trimmed) => {
+      const extensionFieldName = extensionFieldNames.find((fieldName) => {
+        const normalizedFieldName = fieldName.toLowerCase();
+        return normalizedFieldName === trimmed || normalizedFieldName.replaceAll("_", "-") === trimmed || normalizedFieldName.replaceAll("-", "_") === trimmed;
+      });
+      const definition = UPDATE_UNSET_ALIAS_MAP.get(trimmed) ?? resolveRuntimeUnsetFieldDefinition(trimmed, "update", runtimeFieldRegistry) ?? (extensionFieldName ? { optionKey: "field", frontMatterKey: extensionFieldName } : void 0);
+      return definition;
     }
-    frontMatterKeys.add(definition.frontMatterKey);
-    optionKeys.add(definition.optionKey);
-  }
-  return { frontMatterKeys, optionKeys };
+  });
 }
 var AUDIT_RESTRICTED_FLAG_REPLACEMENTS = /* @__PURE__ */ new Map([
   ["--comment", (id) => `pm comments ${id} --add "<text>" --allow-audit-comment`],
@@ -682,41 +671,12 @@ function enforceUpdateOptionsByType(typeName, options, typeRegistry, runtimeFiel
     }
   }
 }
+var UPDATE_LEGACY_COMMON_SCALAR_OPTION_EXCLUSIONS = /* @__PURE__ */ new Set(["order", "rank"]);
+var UPDATE_LEGACY_COMMON_SCALAR_OPTION_KEYS = COMMON_MUTATION_COMMAND_OPTION_KEYS.filter((key) => !UPDATE_LEGACY_COMMON_SCALAR_OPTION_EXCLUSIONS.has(key));
 var UPDATE_LEGACY_SCALAR_OPTION_KEYS = [
   "tags",
   "closeReason",
-  "deadline",
-  "estimatedMinutes",
-  "acceptanceCriteria",
-  "definitionOfReady",
-  "goal",
-  "objective",
-  "value",
-  "impact",
-  "outcome",
-  "whyNow",
-  "assignee",
-  "parent",
-  "reviewer",
-  "risk",
-  "confidence",
-  "sprint",
-  "release",
-  "blockedBy",
-  "blockedReason",
-  "unblockNote",
-  "reporter",
-  "severity",
-  "environment",
-  "reproSteps",
-  "resolution",
-  "expectedResult",
-  "actualResult",
-  "affectedVersion",
-  "fixedVersion",
-  "component",
-  "regression",
-  "customerImpact"
+  ...UPDATE_LEGACY_COMMON_SCALAR_OPTION_KEYS
 ];
 var UPDATE_SIMPLE_FIELD_FLAG_KEYS = [
   "title",
@@ -726,38 +686,7 @@ var UPDATE_SIMPLE_FIELD_FLAG_KEYS = [
   "closeReason",
   "priority",
   "type",
-  "deadline",
-  "estimatedMinutes",
-  "acceptanceCriteria",
-  "definitionOfReady",
-  "goal",
-  "objective",
-  "value",
-  "impact",
-  "outcome",
-  "whyNow",
-  "assignee",
-  "parent",
-  "reviewer",
-  "risk",
-  "confidence",
-  "sprint",
-  "release",
-  "blockedBy",
-  "blockedReason",
-  "unblockNote",
-  "reporter",
-  "severity",
-  "environment",
-  "reproSteps",
-  "resolution",
-  "expectedResult",
-  "actualResult",
-  "affectedVersion",
-  "fixedVersion",
-  "component",
-  "regression",
-  "customerImpact",
+  ...COMMON_MUTATION_COMMAND_OPTION_KEYS,
   "dep",
   "depRemove",
   "comment",
@@ -1636,4 +1565,4 @@ export {
   runUpdate,
   _testOnlyUpdateCommand
 };
-//# sourceMappingURL=chunk-6ITZLD4T.js.map
+//# sourceMappingURL=chunk-5FYY76HR.js.map