@unbrained/pm-cli 2026.8.11 → 2026.8.12

package/dist/sdk/governance/assurance-action.js

@@ -1,9 +1,10 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="597e1ac0-f461-5984-95a9-cd3447b1fea7")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="d7b8bd03-cd67-5f3f-9ac9-74808a03c2c7")}catch(e){}}();
 import { EXIT_CODE } from "../../core/shared/constants.js";
 import { PmCliError } from "../../core/shared/errors.js";
 import { ASSURANCE_GATE_TRIGGERS, evaluateAssuranceGate, getAssuranceDeclaration, listAssuranceDeclarations, listAssuranceVerdicts, putAssuranceDeclaration, recordAssuranceVerdict, removeAssuranceDeclaration, } from "./assurance.js";
 import { MAX_ASSURANCE_VERDICT_LIMIT } from "./assurance-limits.js";
+import { normalizeAssuranceMutation } from "./assurance-mutation-error.js";
 import { createAssuranceWorkspaceContext } from "./assurance-runtime.js";
 import { resolvePmRoot } from "../runtime-primitives.js";
 import { parseRuntimeInteger, readRuntimeString } from "../runtime-input.js";
@@ -148,16 +149,17 @@ export async function runAssuranceAction(input, global = {}) {
     if (!input.id) {
         throw new PmCliError(`assurance ${action} requires an id`, EXIT_CODE.USAGE);
     }
+    const id = input.id;
     if (action === "show") {
-        return getAssuranceDeclaration(pmRoot, kind, input.id);
+        return getAssuranceDeclaration(pmRoot, kind, id);
     }
     if (action === "remove") {
-        const receipt = await removeAssuranceDeclaration(pmRoot, kind, input.id, { author: input.author, message: input.message });
+        const receipt = await normalizeAssuranceMutation(() => removeAssuranceDeclaration(pmRoot, kind, id, { author: input.author, message: input.message }));
         return projectMutationReceipt(receipt, input.idOnly);
     }
     const definition = parseDefinition(kind, input.definition);
-    if (definition.id !== input.id) {
-        throw new PmCliError(`Assurance definition id ${definition.id} does not match requested id ${input.id}`, EXIT_CODE.USAGE);
+    if (definition.id !== id) {
+        throw new PmCliError(`Assurance definition id ${definition.id} does not match requested id ${id}`, EXIT_CODE.USAGE);
     }
     const mutationOptions = {
         author: input.author,
@@ -168,7 +170,7 @@ export async function runAssuranceAction(input, global = {}) {
             }
             : {}),
     };
-    const receipt = await putAssuranceDeclaration(pmRoot, kind, definition, mutationOptions);
+    const receipt = await normalizeAssuranceMutation(() => putAssuranceDeclaration(pmRoot, kind, definition, mutationOptions));
     return projectMutationReceipt(receipt, input.idOnly);
 }
 /** Normalize a generic SDK or MCP argument envelope into one assurance request. */
@@ -195,4 +197,4 @@ export function runAssuranceDispatch(args, options, global) {
     }, global);
 }
 //# sourceMappingURL=assurance-action.js.map
-//# debugId=597e1ac0-f461-5984-95a9-cd3447b1fea7
+//# debugId=d7b8bd03-cd67-5f3f-9ac9-74808a03c2c7

package/dist/sdk/governance/assurance-mutation-error.d.ts

@@ -0,0 +1,7 @@
+/** Expected declaration-validation or mutation-policy refusal. */
+export declare class AssuranceMutationRefusalError extends TypeError {
+    /** Create one typed refusal while retaining TypeError compatibility for SDK callers. */
+    constructor(message: string);
+}
+/** Normalize only expected assurance mutation refusals for CLI and MCP hosts. */
+export declare function normalizeAssuranceMutation<T>(operation: () => Promise<T>): Promise<T>;

package/dist/sdk/governance/assurance-mutation-error.js

@@ -0,0 +1,35 @@
+/**
+ * @module sdk/assurance-mutation-error
+ *
+ * Distinguishes expected assurance mutation refusals from unexpected runtime
+ * faults before transport layers normalize them into stable usage errors.
+ */
+
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="255eee6e-f6bb-5fd2-8a73-545e672d205d")}catch(e){}}();
+import { EXIT_CODE } from "../../core/shared/constants.js";
+import { PmCliError } from "../../core/shared/errors.js";
+/** Expected declaration-validation or mutation-policy refusal. */
+export class AssuranceMutationRefusalError extends TypeError {
+    /** Create one typed refusal while retaining TypeError compatibility for SDK callers. */
+    constructor(message) {
+        super(message);
+        this.name = "AssuranceMutationRefusalError";
+    }
+}
+/** Normalize only expected assurance mutation refusals for CLI and MCP hosts. */
+export async function normalizeAssuranceMutation(operation) {
+    try {
+        return await operation();
+    }
+    catch (error) {
+        if (error instanceof AssuranceMutationRefusalError) {
+            throw new PmCliError(error.message, EXIT_CODE.USAGE, {
+                code: "invalid_argument_value",
+                reason: "assurance_mutation_refused",
+            });
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=assurance-mutation-error.js.map
+//# debugId=255eee6e-f6bb-5fd2-8a73-545e672d205d

package/dist/sdk/governance/assurance-runtime.js

@@ -5,26 +5,29 @@
  * and verdict semantics in the host-neutral assurance module.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="0dbe4ce9-9714-588d-bc85-d2591b7a5400")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="abb3946c-ec68-52af-8521-ae0389f31f54")}catch(e){}}();
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 import { runGraph } from "../graph/run.js";
 import { runHealth } from "./health.js";
 import { runValidate } from "./validate.js";
-import { getHistoryPath, listAllItemMetadataLight, readHistoryEntries, readSettings, resolveItemTypeRegistry, resolveRuntimeStatusRegistry, } from "../runtime-primitives.js";
+import { getHistoryPath, listAllItemMetadata, readHistoryEntries, readSettings, resolveItemTypeRegistry, resolveRuntimeStatusRegistry, } from "../runtime-primitives.js";
 const execFileAsync = promisify(execFile);
 const HISTORY_READ_CONCURRENCY = 16;
 function valueAtPath(input, field) {
     let current = input;
     for (const segment of field.split(".")) {
-        if (typeof current !== "object" || current === null || Array.isArray(current)) {
+        if (typeof current !== "object" ||
+            current === null ||
+            Array.isArray(current)) {
             throw new TypeError(`assurance field ${field} is not present`);
         }
         current = current[segment];
     }
     if (typeof current === "number" && Number.isFinite(current))
         return current;
-    if (Array.isArray(current) && current.every((entry) => typeof entry === "string")) {
+    if (Array.isArray(current) &&
+        current.every((entry) => typeof entry === "string")) {
         return current;
     }
     throw new TypeError(`assurance field ${field} must resolve to a finite number or string array`);
@@ -33,8 +36,8 @@ function checkValue(result, checkName, field) {
     const check = result.checks.find((entry) => entry.name === checkName);
     if (!check)
         throw new TypeError(`assurance check ${checkName} is not present`);
-    const value = field === "status"
-        ? check.status === "ok"
+    const value = field === "status" || field === "ok"
+        ? check.ok
             ? 0
             : 1
         : valueAtPath(check.details, field);
@@ -85,7 +88,7 @@ export async function createAssuranceWorkspaceContext(pmRoot, options = {}) {
     const settings = await readSettings(pmRoot);
     const typeRegistry = resolveItemTypeRegistry(settings);
     const statusRegistry = resolveRuntimeStatusRegistry(settings.schema);
-    const metadata = await listAllItemMetadataLight(pmRoot, settings.item_format, typeRegistry.type_to_folder, undefined, settings.schema);
+    const metadata = await listAllItemMetadata(pmRoot, settings.item_format, typeRegistry.type_to_folder, undefined, settings.schema);
     const items = metadata.map((item) => ({
         ...item,
         id: item.id,
@@ -128,4 +131,4 @@ export async function createAssuranceWorkspaceContext(pmRoot, options = {}) {
     };
 }
 //# sourceMappingURL=assurance-runtime.js.map
-//# debugId=0dbe4ce9-9714-588d-bc85-d2591b7a5400
+//# debugId=abb3946c-ec68-52af-8521-ae0389f31f54

package/dist/sdk/governance/assurance.d.ts

@@ -32,11 +32,11 @@ export interface AssuranceItemRecord {
     /** Typed relationships. */
     dependencies?: AssuranceDependencyRecord[];
     /** Linked files. */
-    files?: Array<Record<string, unknown>>;
+    files?: object[];
     /** Linked tests. */
-    tests?: Array<Record<string, unknown>>;
+    tests?: object[];
     /** Linked docs. */
-    docs?: Array<Record<string, unknown>>;
+    docs?: object[];
     /** Extension-owned metadata remains filterable. */
     [key: string]: unknown;
 }
@@ -67,6 +67,8 @@ export interface AssuranceItemsSource {
     field?: string;
     /** Required exact value for field. */
     equals?: string | number | boolean | null;
+    /** Presence predicate for the selected field. */
+    state?: "present" | "missing";
 }
 /** Typed relationship-count source. */
 export interface AssuranceDependencyKindSource {
@@ -297,6 +299,8 @@ export interface AssuranceMeasurementCost {
 export interface AssuranceMeasurementResult {
     /** Measurement id. */
     id: string;
+    /** Stable fingerprint of the exact declaration that produced this result. */
+    definition_fingerprint: string;
     /** Observed value. */
     value: AssuranceValue;
     /** Population denominator. */
@@ -319,6 +323,8 @@ export interface AssuranceAssertionVerdict {
     assertion_id: string;
     /** Stable observation key used to obtain the evaluated value. */
     measurement_id: string;
+    /** Stable fingerprint of the measurement declaration used for this verdict. */
+    measurement_definition_fingerprint: string;
     /** Explicit scope. */
     scope: AssuranceScope;
     /** Population denominator. */
@@ -401,12 +407,12 @@ export declare function createEmptyAssuranceDocument(): AssuranceDocument;
 export declare function evaluateMeasurement(definition: AssuranceMeasurementDefinition, context: AssuranceEvaluationContext, definitions?: AssuranceMeasurementDefinition[]): Promise<AssuranceMeasurementResult>;
 /** Evaluate one assertion against a precomputed measurement receipt. */
 export declare function evaluateAssuranceAssertion(definition: AssuranceAssertionDefinition, measurement: AssuranceMeasurementResult, options?: {
-    owner_terminal?: boolean;
+    /** Whether the owning item is terminal. */ owner_terminal?: boolean;
 }): AssuranceAssertionVerdict;
 /** Evaluate a named gate into one presentation-independent verdict document. */
 export declare function evaluateAssuranceGate(gateId: string, document: AssuranceDocument, context: AssuranceEvaluationContext, options: {
-    trigger: AssuranceGateTrigger; /** Skip persistence in the caller. */
-    dry_run?: boolean;
+    /** Trigger being evaluated. */ trigger: AssuranceGateTrigger;
+    /** Skip persistence in the caller. */ dry_run?: boolean;
 }): Promise<AssuranceGateVerdict>;
 /** Read all declarations of one kind with a stable row selector receipt. */
 export declare function listAssuranceDeclarations(pmRoot: string, kind: AssuranceDeclarationKind): Promise<{