@unbrained/pm-cli 2026.8.11 → 2026.8.13

package/dist/sdk/governance/gc.js

@@ -4,13 +4,13 @@
  * Implements the pm gc command surface and its agent-facing runtime behavior.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="0973a87f-2b63-5fa1-9624-82897d181f71")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="e982158e-4a8d-57a9-bd0b-24bd73aef342")}catch(e){}}();
 import fs from "node:fs/promises";
 import path from "node:path";
 import { runCheckpointGc } from "../../core/checkpoint/checkpoint-gc.js";
 import { runWorkspaceTransactionGc } from "../workspace-transaction-gc.js";
 import { runActiveOnIndexHooks, runActiveOnReadHooks, runActiveOnWriteHooks, } from "../../core/extensions/index.js";
-import { pathExists } from "../../core/fs/fs-utils.js";
+import { isFileMissingError, pathExists } from "../../core/fs/fs-utils.js";
 import { runLockGc } from "../../core/lock/lock-gc.js";
 import { EXIT_CODE } from "../../core/shared/constants.js";
 import { PmCliError } from "../../core/shared/errors.js";
@@ -73,12 +73,6 @@ const GC_TARGETS = [
         kind: "file",
     },
 ];
-function isErrno(error, code) {
-    return (typeof error === "object" &&
-        error !== null &&
-        "code" in error &&
-        error.code === code);
-}
 async function removeCacheFile(pmRoot, target, dryRun) {
     const relativePath = target.relativePath;
     const absolutePath = path.join(pmRoot, relativePath);
@@ -123,7 +117,7 @@ async function removeCacheFile(pmRoot, target, dryRun) {
         };
     }
     catch (error) {
-        if (isErrno(error, "ENOENT")) {
+        if (isFileMissingError(error)) {
             return {
                 removed: false,
                 warnings,
@@ -163,7 +157,7 @@ async function sweepWorkspaceSnapshotTemps(pmRoot, dryRun) {
                 scope: "project",
             })));
             const stats = await fs.stat(absolutePath).catch((error) => {
-                if (isErrno(error, "ENOENT")) {
+                if (isFileMissingError(error)) {
                     return undefined;
                 }
                 throw error;
@@ -373,4 +367,4 @@ export async function runGc(global, options = {}) {
     };
 }
 //# sourceMappingURL=gc.js.map
-//# debugId=0973a87f-2b63-5fa1-9624-82897d181f71
+//# debugId=e982158e-4a8d-57a9-bd0b-24bd73aef342

package/dist/sdk/governance/health.d.ts

@@ -15,6 +15,8 @@ export interface HealthCheck {
     name: "settings" | "directories" | "settings_values" | "telemetry" | "extensions" | "storage" | "locks" | "integrity" | "history_drift" | "vectorization";
     /** Lifecycle state reported for status. */
     status: HealthStatus;
+    /** Boolean companion to status for direct agent and assurance predicates. */
+    ok: boolean;
     /** Value that configures or reports details for this contract. */
     details: Record<string, unknown>;
 }
@@ -113,7 +115,7 @@ interface ExtensionHealthTriageSummary {
     top_warnings: string[];
     remediation: string[];
 }
-/** Advisory warnings are surfaced for visibility but never flip overall health to not-ok. Telemetry is opt-out, non-critical observability: a queued/unreachable telemetry endpoint or corrupt local telemetry state is not a project-health failure and must not block agents that gate on `pm health` `ok`. History over-compaction-threshold warnings are likewise advisory maintenance hints — a deep stream is healthy, just a candidate for `pm history-compact`. */
+/** Advisory warnings are surfaced for visibility but never flip overall health to not-ok. Telemetry is opt-out, non-critical observability: a queued/unreachable telemetry endpoint or corrupt local telemetry state is not a project-health failure and must not block agents that gate on `pm health` `ok`. History over-compaction-threshold warnings are likewise advisory maintenance hints — a deep stream is healthy, just a candidate for `pm history-compact`. Invalid legacy provenance values remain immutable diagnostic evidence: write-time resolvers reject new invalid values, while health reports the bounded aggregate without requiring truthful history to be rewritten. */
 declare function isAdvisoryHealthWarning(warning: string, requireMergeDrivers?: boolean): boolean;
 declare function warningCode(value: string): string;
 declare function normalizeExtensionNameForMatch(value: string): string;

package/dist/sdk/governance/health.js

@@ -4,11 +4,11 @@
  * Implements the pm health command surface and its agent-facing runtime behavior.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="539b0cb4-5e20-51e2-a33e-1a43ca961f05")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="5cee1eaa-73f3-5709-867f-a8d73081da8b")}catch(e){}}();
 import fs from "node:fs/promises";
 import path from "node:path";
 import { resolveItemTypeRegistry } from "../../core/item/type-registry.js";
-import { pathExists, readFileIfExists } from "../../core/fs/fs-utils.js";
+import { isFileMissingError, pathExists, readFileIfExists } from "../../core/fs/fs-utils.js";
 import { activateExtensions, getActiveExtensionRegistrations, loadExtensions, runActiveOnReadHooks, } from "../../core/extensions/index.js";
 import { collectRegisteredItemFieldNames } from "../../core/extensions/item-fields.js";
 import { KNOWN_EXTENSION_CAPABILITIES, } from "../../core/extensions/loader.js";
@@ -54,12 +54,13 @@ const TELEMETRY_SERVER_MAX_SCHEMA_VERSION_HEADERS = [
     "x-pm-telemetry-max-schema-version",
     "x-pm-telemetry-max-version",
 ];
-/** Advisory warnings are surfaced for visibility but never flip overall health to not-ok. Telemetry is opt-out, non-critical observability: a queued/unreachable telemetry endpoint or corrupt local telemetry state is not a project-health failure and must not block agents that gate on `pm health` `ok`. History over-compaction-threshold warnings are likewise advisory maintenance hints — a deep stream is healthy, just a candidate for `pm history-compact`. */
+/** Advisory warnings are surfaced for visibility but never flip overall health to not-ok. Telemetry is opt-out, non-critical observability: a queued/unreachable telemetry endpoint or corrupt local telemetry state is not a project-health failure and must not block agents that gate on `pm health` `ok`. History over-compaction-threshold warnings are likewise advisory maintenance hints — a deep stream is healthy, just a candidate for `pm history-compact`. Invalid legacy provenance values remain immutable diagnostic evidence: write-time resolvers reject new invalid values, while health reports the bounded aggregate without requiring truthful history to be rewritten. */
 function isAdvisoryHealthWarning(warning, requireMergeDrivers = false) {
     return (warning.startsWith("telemetry_") ||
         warning.startsWith("history_stream_over_compact_threshold:") ||
         warning.startsWith("stale_in_progress_items:") ||
         warning.startsWith("provenance_resolver_zero_success:") ||
+        warning.startsWith("provenance_value_domain_invalid:") ||
         (!requireMergeDrivers &&
             warning.startsWith("merge_driver_configuration_missing:")));
 }
@@ -206,7 +207,7 @@ async function listItemDocumentPaths(pmRoot, typeToFolder) {
             if (typeof error === "object" &&
                 error !== null &&
                 "code" in error &&
-                error.code === "ENOENT") {
+                isFileMissingError(error)) {
                 continue;
             }
             continue;
@@ -225,7 +226,7 @@ function shouldReportHistoryDirectoryUnreadable(error) {
     return !(typeof error === "object" &&
         error !== null &&
         "code" in error &&
-        error.code === "ENOENT");
+        isFileMissingError(error));
 }
 async function scanItemIntegrity(pmRoot, typeToFolder, schema) {
     const paths = await listItemDocumentPaths(pmRoot, typeToFolder);
@@ -360,6 +361,7 @@ async function buildIntegrityCheck(pmRoot, typeToFolder, schema, requireMergeDri
         check: {
             name: "integrity",
             status: normalizedWarnings.length === 0 ? "ok" : "warn",
+            ok: normalizedWarnings.length === 0,
             details: {
                 checked_item_files: itemScan.paths.length,
                 checked_history_streams: historyScan.files.length,
@@ -703,6 +705,7 @@ async function buildExtensionCheck(pmRoot, settings, noExtensionsFlag) {
         check: {
             name: "extensions",
             status: extensionWarnings.length === 0 ? "ok" : "warn",
+            ok: extensionWarnings.length === 0,
             details: {
                 ...loadResult,
                 loaded: loadedSummaries,
@@ -951,6 +954,7 @@ function applyBriefHealthProjection(result) {
         checks: result.checks.map((check) => ({
             name: check.name,
             status: check.status,
+            ok: check.ok,
             details: summarizeHealthCheckDetails(check, BRIEF_HEALTH_DETAIL_LIMIT),
         })),
         warnings: warningsSummary.sample,
@@ -978,6 +982,7 @@ function applySummaryHealthProjection(result) {
             .map((check) => ({
             name: check.name,
             status: check.status,
+            ok: check.ok,
             details: {},
         })),
         warning_count: warningsSummary.count,
@@ -1261,6 +1266,7 @@ async function buildTelemetryCheck(settings, options) {
         check: {
             name: "telemetry",
             status: warnings.length === 0 ? "ok" : "warn",
+            ok: warnings.length === 0,
             details: {
                 enabled: settings.telemetry.enabled,
                 capture_level: settings.telemetry.capture_level,
@@ -1306,6 +1312,7 @@ async function buildLocksCheck(pmRoot) {
             check: {
                 name: "locks",
                 status: "warn",
+                ok: false,
                 details: {
                     active_lock_count: 0,
                     stale_lock_count: 0,
@@ -1331,6 +1338,7 @@ async function buildLocksCheck(pmRoot) {
         check: {
             name: "locks",
             status: warnings.length === 0 ? "ok" : "warn",
+            ok: warnings.length === 0,
             details: {
                 active_lock_count: scan.active_lock_count,
                 stale_lock_count: scan.stale_lock_count,
@@ -1354,6 +1362,7 @@ async function buildHistoryDriftCheck(pmRoot, items) {
         check: {
             name: "history_drift",
             status: warnings.length === 0 ? "ok" : "warn",
+            ok: warnings.length === 0,
             details: {
                 checked_items: items.length,
                 cache_hit_verification: cacheHitVerification,
@@ -1519,6 +1528,7 @@ async function buildVectorizationCheck(pmRoot, settings, items, refreshPolicy, v
         check: {
             name: "vectorization",
             status: warnings.length === 0 ? "ok" : "warn",
+            ok: warnings.length === 0,
             details: {
                 semantic_runtime_available: snapshot.semanticRuntimeAvailable,
                 compatibility_mode_auto_defaults: snapshot.runtimeDefaults.auto_ollama_defaults_applied,
@@ -1661,7 +1671,7 @@ async function readHealthItems(params) {
 }
 function buildSkippedHealthCheck(name) {
     return {
-        check: { name, status: "ok", details: { skipped: true } },
+        check: { name, status: "ok", ok: true, details: { skipped: true } },
         warnings: [],
     };
 }
@@ -1670,6 +1680,7 @@ function buildSettingsHealthCheck(settingsPath, settings, normalizedSettingsRead
         name: "settings",
         /* c8 ignore next -- settings read-warning status split is covered in broader read-settings integration tests */
         status: normalizedSettingsReadWarnings.length === 0 ? "ok" : "warn",
+        ok: normalizedSettingsReadWarnings.length === 0,
         details: {
             path: settingsPath,
             version: settings.version,
@@ -1683,6 +1694,7 @@ function buildDirectoriesHealthCheck(directoryState, strictDirectories) {
     return {
         name: "directories",
         status: directoryState.missingDirs.length === 0 ? "ok" : "warn",
+        ok: directoryState.missingDirs.length === 0,
         details: {
             required: directoryState.requiredDirs,
             optional: directoryState.optionalDirs,
@@ -1697,6 +1709,7 @@ function buildSettingsValuesHealthCheck(settingWarnings) {
     return {
         name: "settings_values",
         status: settingWarnings.length === 0 ? "ok" : "warn",
+        ok: settingWarnings.length === 0,
         details: { warnings: settingWarnings },
     };
 }
@@ -1719,6 +1732,10 @@ function buildStorageHealthCheck(items, settings, historySummary, authorAttribut
             !hasStaleInProgressItems
             ? "ok"
             : "warn",
+        ok: historySummary.over_threshold.length === 0 &&
+            historySummary.orphaned.length === 0 &&
+            !hasActionableAuthorWarnings &&
+            !hasStaleInProgressItems,
         details: {
             items: items.length,
             history_streams: historySummary.count,
@@ -1990,4 +2007,4 @@ export const _testOnlyHealthCommand = {
     warningCode,
 };
 //# sourceMappingURL=health.js.map
-//# debugId=539b0cb4-5e20-51e2-a33e-1a43ca961f05
+//# debugId=5cee1eaa-73f3-5709-867f-a8d73081da8b

package/dist/sdk/governance/validate-item-reader.js

@@ -5,14 +5,14 @@
  * validation run.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="896ffe11-2cf1-5de0-8d07-5585d4f30c94")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="01f042d0-7f02-59f5-8894-cf48eb936d99")}catch(e){}}();
 import { listAllItemMetadata, listAllItemMetadataWithBody, } from "../../core/store/item-store.js";
 /** Load collections for normal checks and add bodies only when history hashes must be verified. */
 export async function readValidateItems(params) {
     if (params.includeBody) {
-        return listAllItemMetadataWithBody(params.pmRoot, params.settings.item_format, params.typeToFolder, params.warnings, params.settings.schema);
+        return listAllItemMetadataWithBody(params.pmRoot, params.settings.item_format, params.typeToFolder, params.warnings, params.settings.schema, { forceSourceScan: true });
     }
     return listAllItemMetadata(params.pmRoot, params.settings.item_format, params.typeToFolder, params.warnings, params.settings.schema);
 }
 //# sourceMappingURL=validate-item-reader.js.map
-//# debugId=896ffe11-2cf1-5de0-8d07-5585d4f30c94
+//# debugId=01f042d0-7f02-59f5-8894-cf48eb936d99

package/dist/sdk/governance/validate.d.ts

@@ -75,6 +75,8 @@ export interface ValidateCheck {
     name: ValidateCheckName;
     /** Lifecycle state reported for status. */
     status: ValidateStatus;
+    /** Direct machine predicate derived from whether status is ok. */
+    ok: boolean;
     /** Value that configures or reports details for this contract. */
     details: Record<string, unknown>;
 }

package/dist/sdk/governance/validate.js

@@ -4,7 +4,7 @@
  * Implements the pm validate command surface and its agent-facing runtime behavior.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="b5b7e497-f067-5504-9ffa-fd177997c518")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="7dd04a2f-1798-5c16-8740-5b7094f81cc0")}catch(e){}}();
 import fs from "node:fs/promises";
 import { realpathSync } from "node:fs";
 import { execFile } from "node:child_process";
@@ -13,7 +13,7 @@ import { promisify } from "node:util";
 import { buildRemediationCommands } from "../../core/diagnostics/remediation.js";
 import { getActiveExtensionRegistrations } from "../../core/extensions/index.js";
 import { collectRegisteredItemFieldNames } from "../../core/extensions/item-fields.js";
-import { pathExists } from "../../core/fs/fs-utils.js";
+import { isFileMissingError, pathExists } from "../../core/fs/fs-utils.js";
 import { scanHistoryDrift } from "../../core/history/drift-scan.js";
 import { normalizeStatusInput } from "../../core/item/status.js";
 import { resolveItemTypeRegistry } from "../../core/item/type-registry.js";
@@ -475,7 +475,7 @@ async function listFilesRecursive(basePath, relativePath, output) {
         entries = await fs.readdir(targetDirectory, { withFileTypes: true });
     }
     catch (error) {
-        if (hasFilesystemErrorCode(error, ["ENOENT"])) {
+        if (isFileMissingError(error)) {
             return;
         }
         throw error;
@@ -913,6 +913,7 @@ function buildMetadataCheck(items, metadataPolicy, statusRegistry, verboseDiagno
         check: {
             name: "metadata",
             status: warningTokens.length === 0 ? "ok" : "warn",
+            ok: warningTokens.length === 0,
             details,
         },
         warnings: warningTokens,
@@ -957,6 +958,7 @@ function buildResolutionCheck(items, statusRegistry, verboseDiagnostics) {
         check: {
             name: "resolution",
             status: warnings.length === 0 ? "ok" : "warn",
+            ok: warnings.length === 0,
             details: {
                 checked_closed_items: closedItems.length,
                 missing_resolution_items: missingResolutionRows.length,
@@ -1026,6 +1028,7 @@ function buildDependencyReferencesCheck(items, verboseDiagnostics, statusRegistr
         check: {
             name: "dependency_references",
             status: activeRows.length === 0 ? "ok" : "warn",
+            ok: activeRows.length === 0,
             details: {
                 checked_items: items.length,
                 dangling_reference_count: activeRows.length + legacyRows.length,
@@ -1582,6 +1585,7 @@ function buildLifecycleCheck(items, includeStaleBlockers, dependencyCycleSeverit
                 : warnings.length === 0
                     ? "ok"
                     : "warn",
+            ok: !hasErrorSeverityCycle && warnings.length === 0,
             details: {
                 checked_active_items: rows.activeItems.length,
                 active_closure_like_metadata_items: rows.closureLikeRows.length,
@@ -1709,6 +1713,7 @@ async function buildFilesCheck(items, workspaceRoot, pmRoot, fileScanMode, inclu
         check: {
             name: "files",
             status: warnings.length === 0 ? "ok" : "warn",
+            ok: warnings.length === 0,
             details: {
                 workspace_root: workspaceRoot,
                 scan_mode_requested: fileCandidates.requestedMode,
@@ -1786,6 +1791,7 @@ async function buildHistoryDriftCheck(pmRoot, items, verboseDiagnostics) {
         check: {
             name: "history_drift",
             status: warnings.length === 0 ? "ok" : "warn",
+            ok: warnings.length === 0,
             details: {
                 checked_items: items.length,
                 drifted_items_count: driftedItems.length,
@@ -1859,6 +1865,7 @@ function buildCommandReferencesCheck(items, idPrefix, verboseDiagnostics) {
         check: {
             name: "command_references",
             status: warnings.length === 0 ? "ok" : "warn",
+            ok: warnings.length === 0,
             details: {
                 checked_items: items.length,
                 linked_commands_scanned: linkedCommandsScanned,
@@ -1905,6 +1912,7 @@ function buildFormatVersionCheck(items, verboseDiagnostics) {
         check: {
             name: "format_version",
             status,
+            ok: status === "ok",
             details: {
                 checked_items: items.length,
                 current_format_version: CURRENT_ITEM_FORMAT_VERSION,
@@ -2108,13 +2116,15 @@ async function buildStorageIntegrityCheck(pmRoot, items, typeToFolder, settings)
     if (pendingMergeDecisions.length > 0) {
         warnings.push(`validate_merge_decisions_unreviewed:${pendingMergeDecisions.length}`);
     }
+    const status = errorCount > 0 ? "error" : warnings.length > 0 ? "warn" : "ok";
     return {
         check: {
             name: "storage_integrity",
             // Corruption findings fail the check; fence drift alone is a warning —
             // the workspace data is intact, but future merges of uncovered paths
             // would fall back to git's default text driver.
-            status: errorCount > 0 ? "error" : warnings.length > 0 ? "warn" : "ok",
+            status,
+            ok: status === "ok",
             details: {
                 ...scan,
                 merge_fence: fenceAudit,
@@ -2346,4 +2356,4 @@ export async function runValidate(options, global, services = {}) {
 }
 /* c8 ignore stop */
 //# sourceMappingURL=validate.js.map
-//# debugId=b5b7e497-f067-5504-9ffa-fd177997c518
+//# debugId=7dd04a2f-1798-5c16-8740-5b7094f81cc0

package/dist/sdk/graph/durable-cache.d.ts

@@ -1,4 +1,4 @@
-import type { RelationshipAuditSnapshot } from "./governance.js";
+import { type RelationshipAuditSnapshot } from "./governance.js";
 /** Envelope format version; any change invalidates persisted entries. */
 export declare const GRAPH_DURABLE_CACHE_VERSION = 1;
 /** Workspaces below this item count skip implicit persistence. */

package/dist/sdk/graph/durable-cache.js

@@ -15,10 +15,12 @@
  * threshold or after an explicit `pm graph index --rebuild` opt-in.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="ee260dcf-f4df-5997-a8d7-691c19c66a41")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="2f7f14e3-6d41-5f45-a560-ebfbb8aa5828")}catch(e){}}();
 import path from "node:path";
 import { readFileIfExists, removeFileIfExists, writeFileAtomic, } from "../../core/fs/fs-utils.js";
 import { acquireLock } from "../../core/lock/lock.js";
+import { isSemanticContextKind, } from "./governance.js";
+import { RELATIONSHIP_AUDIT_FINDING_CODES } from "./governance-contracts.js";
 /** Envelope format version; any change invalidates persisted entries. */
 export const GRAPH_DURABLE_CACHE_VERSION = 1;
 /** Workspaces below this item count skip implicit persistence. */
@@ -140,19 +142,127 @@ export function shouldPersistDurableGraphCache(itemCount, envelopeExists) {
 }
 /** Return whether a decoded value is a string-keyed non-negative integer count map. */
 function isNonnegativeCountRecord(value) {
-    return (typeof value === "object" &&
-        value !== null &&
-        !Array.isArray(value) &&
-        Object.values(value).every((count) => Number.isInteger(count) && count >= 0));
+    return isRecord(value) && Object.values(value).every(isNonnegativeInteger);
+}
+/** Return whether a decoded value is a non-array record. */
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** Return whether a decoded value is a non-negative integer. */
+function isNonnegativeInteger(value) {
+    return Number.isInteger(value) && Number(value) >= 0;
+}
+/** Return whether a decoded value is a finite share in the inclusive unit interval. */
+function isUnitShare(value) {
+    return (typeof value === "number" &&
+        Number.isFinite(value) &&
+        value >= 0 &&
+        value <= 1);
+}
+/** Apply a validator only when an optional decoded value is present. */
+function isOptionalValid(value, validate) {
+    return value === undefined || validate(value);
+}
+/** Return whether a decoded record contains finite shares in the inclusive unit interval. */
+function isUnitShareRecord(value) {
+    return isRecord(value) && Object.values(value).every(isUnitShare);
 }
 /** Return whether every decoded item-type coverage entry contains valid counts. */
 function isNonnegativeCoverageByTypeRecord(value) {
-    if (typeof value !== "object" || value === null || Array.isArray(value))
+    if (!isRecord(value))
         return false;
-    return Object.values(value).every((entry) => typeof entry === "object" &&
-        entry !== null &&
-        !Array.isArray(entry) &&
-        [entry.active, entry.isolated, entry.degree_leq_one].every((count) => Number.isInteger(count) && count >= 0));
+    return Object.values(value).every((entry) => isRecord(entry) &&
+        [entry.active, entry.isolated, entry.degree_leq_one].every(isNonnegativeInteger));
+}
+/** Decode optional structural fields while normalizing pre-structure baselines. */
+function decodeStructuralProfile(profile, affectedSubjectsByCode) {
+    const countFields = [
+        "articulation_points",
+        "bridge_edges",
+        "outcome_nodes",
+        "active_outcome_reachable_nodes",
+        "active_outcome_unreachable_nodes",
+        "terminal_nodes",
+        "terminal_outcome_reachable_nodes",
+        "terminal_outcome_unreachable_nodes",
+        "outcome_reachable_nodes",
+        "outcome_unreachable_nodes",
+    ];
+    const rateFields = [
+        "active_outcome_reachability_basis_points",
+        "terminal_outcome_reachability_basis_points",
+        "outcome_reachability_basis_points",
+    ];
+    const introducedStructuralFields = [
+        ...countFields,
+        ...rateFields,
+        "finding_subjects_by_code",
+    ];
+    const introducedStructuralFieldCount = introducedStructuralFields.filter((field) => profile[field] !== undefined).length;
+    if (introducedStructuralFieldCount !== 0 &&
+        introducedStructuralFieldCount !== introducedStructuralFields.length) {
+        return undefined;
+    }
+    const validCounts = countFields.every((field) => profile[field] === undefined || isNonnegativeInteger(profile[field]));
+    const validRates = rateFields.every((field) => profile[field] === undefined ||
+        (isNonnegativeInteger(profile[field]) && Number(profile[field]) <= 10_000));
+    if (!validCounts || !validRates)
+        return undefined;
+    if (profile.edge_basis !== undefined &&
+        profile.edge_basis !== "deduplicated_directed")
+        return undefined;
+    if (!isOptionalValid(profile.finding_subjects_by_code, isNonnegativeCountRecord))
+        return undefined;
+    const findingSubjects = isNonnegativeCountRecord(profile.finding_subjects_by_code)
+        ? profile.finding_subjects_by_code
+        : {};
+    return {
+        edge_basis: "deduplicated_directed",
+        ...Object.fromEntries(countFields.map((field) => [field, profile[field] ?? 0])),
+        ...Object.fromEntries(rateFields.map((field) => [field, profile[field] ?? 0])),
+        finding_subjects_by_code: Object.fromEntries(RELATIONSHIP_AUDIT_FINDING_CODES.map((code) => [
+            code,
+            findingSubjects[code] ?? affectedSubjectsByCode[code] ?? 0,
+        ])),
+    };
+}
+/** Decode and cross-check optional graph-composition fields as one coherent unit. */
+function decodeGraphComposition(edges, edgesByKind, edgeShareByKind, semanticEdgesValue, semanticEdgeShareValue) {
+    const values = [
+        edgeShareByKind,
+        semanticEdgesValue,
+        semanticEdgeShareValue,
+    ];
+    const presentCount = values.filter((value) => value !== undefined).length;
+    if (presentCount === 0) {
+        return {
+            edge_share_by_kind: {},
+            semantic_edges: 0,
+            semantic_edge_share: 0,
+        };
+    }
+    if (presentCount !== values.length ||
+        !isUnitShareRecord(edgeShareByKind) ||
+        !isNonnegativeInteger(semanticEdgesValue) ||
+        !isUnitShare(semanticEdgeShareValue)) {
+        return undefined;
+    }
+    const edgeEntries = Object.entries(edgesByKind);
+    if (edgeEntries.reduce((sum, [, count]) => sum + count, 0) !== edges ||
+        Object.keys(edgeShareByKind).length !== edgeEntries.length ||
+        edgeEntries.some(([kind, count]) => edgeShareByKind[kind] !== (edges === 0 ? 0 : count / edges))) {
+        return undefined;
+    }
+    const semanticEdges = edgeEntries.reduce((sum, [kind, count]) => sum + (isSemanticContextKind(kind) ? count : 0), 0);
+    if (semanticEdgesValue !== semanticEdges ||
+        semanticEdgeShareValue !== (edges === 0 ? 0 : semanticEdges / edges)) {
+        return undefined;
+    }
+    return {
+        edge_share_by_kind: edgeShareByKind,
+        semantic_edges: semanticEdgesValue,
+        semantic_edge_share: semanticEdgeShareValue,
+    };
 }
 /** Decode one persisted audit census baseline, undefined on any defect. */
 function decodeBaseline(raw) {
@@ -160,32 +270,49 @@ function decodeBaseline(raw) {
         return undefined;
     try {
         const parsed = JSON.parse(raw);
-        if (typeof parsed !== "object" || parsed === null)
+        if (!isRecord(parsed))
             return undefined;
         const snapshot = parsed;
         const profile = snapshot.profile;
-        if (typeof snapshot.saved_at !== "string" ||
-            typeof snapshot.fingerprint !== "string" ||
-            !isNonnegativeCountRecord(snapshot.affected_subjects_by_code) ||
-            typeof profile !== "object" ||
-            profile === null ||
-            ![
-                profile.nodes,
-                profile.edges,
-                profile.active_nodes,
-                profile.missing_nodes,
-                profile.isolated_active_nodes,
-                profile.degree_leq_one_active_nodes,
-            ].every((value) => Number.isInteger(value) && value >= 0) ||
-            !isNonnegativeCountRecord(profile.edges_by_kind) ||
-            (profile.coverage_by_type !== undefined &&
-                !isNonnegativeCoverageByTypeRecord(profile.coverage_by_type)))
+        if (typeof snapshot.saved_at !== "string")
+            return undefined;
+        if (typeof snapshot.fingerprint !== "string")
+            return undefined;
+        const affectedSubjectsByCode = snapshot.affected_subjects_by_code;
+        if (!isNonnegativeCountRecord(affectedSubjectsByCode)) {
+            return undefined;
+        }
+        if (!isRecord(profile))
+            return undefined;
+        if (![
+            profile.nodes,
+            profile.edges,
+            profile.active_nodes,
+            profile.missing_nodes,
+            profile.isolated_active_nodes,
+            profile.degree_leq_one_active_nodes,
+        ].every(isNonnegativeInteger)) {
+            return undefined;
+        }
+        if (!isNonnegativeCountRecord(profile.edges_by_kind))
+            return undefined;
+        if (!isOptionalValid(profile.coverage_by_type, isNonnegativeCoverageByTypeRecord)) {
+            return undefined;
+        }
+        const composition = decodeGraphComposition(profile.edges, profile.edges_by_kind, profile.edge_share_by_kind, profile.semantic_edges, profile.semantic_edge_share);
+        if (composition === undefined)
+            return undefined;
+        const structural = decodeStructuralProfile(profile, affectedSubjectsByCode);
+        if (structural === undefined)
             return undefined;
+        const { coverage_by_type = {} } = profile;
         return {
             ...snapshot,
             profile: {
                 ...profile,
-                coverage_by_type: profile.coverage_by_type ?? {},
+                ...composition,
+                ...structural,
+                coverage_by_type,
             },
         };
     }
@@ -202,4 +329,4 @@ export async function saveGraphAuditBaseline(pmRoot, snapshot) {
     await writeFileAtomic(graphAuditBaselinePath(pmRoot), JSON.stringify(snapshot));
 }
 //# sourceMappingURL=durable-cache.js.map
-//# debugId=ee260dcf-f4df-5997-a8d7-691c19c66a41
+//# debugId=2f7f14e3-6d41-5f45-a560-ebfbb8aa5828

package/dist/sdk/graph/governance-contracts.d.ts

@@ -0,0 +1,12 @@
+/**
+ * @module sdk/graph/governance-contracts
+ *
+ * Shared, runtime-visible relationship-audit finding identifiers used by the
+ * live audit and backward-compatible durable baseline decoder. Keeping the
+ * tuple authoritative prevents the public type and persisted zero census from
+ * drifting when a finding family is added.
+ */
+/** Stable machine-readable relationship audit finding families. */
+export declare const RELATIONSHIP_AUDIT_FINDING_CODES: readonly ["missing_reference_active", "missing_reference_terminal", "legacy_no_blocker_sentinel", "ordering_cycle", "legacy_ordering_cycle", "duplicate_edge", "legacy_duplicate_edge", "duplicate_dependency_row", "legacy_duplicate_dependency_row", "stale_lifecycle_block", "isolated_active_node", "sparse_active_node"];
+/** Machine-readable identifier for one relationship audit finding family. */
+export type RelationshipAuditFindingCode = (typeof RELATIONSHIP_AUDIT_FINDING_CODES)[number];

package/dist/sdk/graph/governance-contracts.js

@@ -0,0 +1,27 @@
+/**
+ * @module sdk/graph/governance-contracts
+ *
+ * Shared, runtime-visible relationship-audit finding identifiers used by the
+ * live audit and backward-compatible durable baseline decoder. Keeping the
+ * tuple authoritative prevents the public type and persisted zero census from
+ * drifting when a finding family is added.
+ */
+/** Stable machine-readable relationship audit finding families. */
+
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="a2043b27-3dfe-5da8-a10f-d92ff33f3c28")}catch(e){}}();
+export const RELATIONSHIP_AUDIT_FINDING_CODES = [
+    "missing_reference_active",
+    "missing_reference_terminal",
+    "legacy_no_blocker_sentinel",
+    "ordering_cycle",
+    "legacy_ordering_cycle",
+    "duplicate_edge",
+    "legacy_duplicate_edge",
+    "duplicate_dependency_row",
+    "legacy_duplicate_dependency_row",
+    "stale_lifecycle_block",
+    "isolated_active_node",
+    "sparse_active_node",
+];
+//# sourceMappingURL=governance-contracts.js.map
+//# debugId=a2043b27-3dfe-5da8-a10f-d92ff33f3c28