@unbrained/pm-cli 2026.8.12 → 2026.8.13

package/dist/sdk/governance/health.js

@@ -4,11 +4,11 @@
  * Implements the pm health command surface and its agent-facing runtime behavior.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="af3d60bd-94d4-52e8-90e3-7929ce04428c")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="5cee1eaa-73f3-5709-867f-a8d73081da8b")}catch(e){}}();
 import fs from "node:fs/promises";
 import path from "node:path";
 import { resolveItemTypeRegistry } from "../../core/item/type-registry.js";
-import { pathExists, readFileIfExists } from "../../core/fs/fs-utils.js";
+import { isFileMissingError, pathExists, readFileIfExists } from "../../core/fs/fs-utils.js";
 import { activateExtensions, getActiveExtensionRegistrations, loadExtensions, runActiveOnReadHooks, } from "../../core/extensions/index.js";
 import { collectRegisteredItemFieldNames } from "../../core/extensions/item-fields.js";
 import { KNOWN_EXTENSION_CAPABILITIES, } from "../../core/extensions/loader.js";
@@ -207,7 +207,7 @@ async function listItemDocumentPaths(pmRoot, typeToFolder) {
             if (typeof error === "object" &&
                 error !== null &&
                 "code" in error &&
-                error.code === "ENOENT") {
+                isFileMissingError(error)) {
                 continue;
             }
             continue;
@@ -226,7 +226,7 @@ function shouldReportHistoryDirectoryUnreadable(error) {
     return !(typeof error === "object" &&
         error !== null &&
         "code" in error &&
-        error.code === "ENOENT");
+        isFileMissingError(error));
 }
 async function scanItemIntegrity(pmRoot, typeToFolder, schema) {
     const paths = await listItemDocumentPaths(pmRoot, typeToFolder);
@@ -2007,4 +2007,4 @@ export const _testOnlyHealthCommand = {
     warningCode,
 };
 //# sourceMappingURL=health.js.map
-//# debugId=af3d60bd-94d4-52e8-90e3-7929ce04428c
+//# debugId=5cee1eaa-73f3-5709-867f-a8d73081da8b

package/dist/sdk/governance/validate.js

@@ -4,7 +4,7 @@
  * Implements the pm validate command surface and its agent-facing runtime behavior.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="5affc1f1-2b4f-5f04-a6cb-c3e389bcb356")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="7dd04a2f-1798-5c16-8740-5b7094f81cc0")}catch(e){}}();
 import fs from "node:fs/promises";
 import { realpathSync } from "node:fs";
 import { execFile } from "node:child_process";
@@ -13,7 +13,7 @@ import { promisify } from "node:util";
 import { buildRemediationCommands } from "../../core/diagnostics/remediation.js";
 import { getActiveExtensionRegistrations } from "../../core/extensions/index.js";
 import { collectRegisteredItemFieldNames } from "../../core/extensions/item-fields.js";
-import { pathExists } from "../../core/fs/fs-utils.js";
+import { isFileMissingError, pathExists } from "../../core/fs/fs-utils.js";
 import { scanHistoryDrift } from "../../core/history/drift-scan.js";
 import { normalizeStatusInput } from "../../core/item/status.js";
 import { resolveItemTypeRegistry } from "../../core/item/type-registry.js";
@@ -475,7 +475,7 @@ async function listFilesRecursive(basePath, relativePath, output) {
         entries = await fs.readdir(targetDirectory, { withFileTypes: true });
     }
     catch (error) {
-        if (hasFilesystemErrorCode(error, ["ENOENT"])) {
+        if (isFileMissingError(error)) {
             return;
         }
         throw error;
@@ -2356,4 +2356,4 @@ export async function runValidate(options, global, services = {}) {
 }
 /* c8 ignore stop */
 //# sourceMappingURL=validate.js.map
-//# debugId=5affc1f1-2b4f-5f04-a6cb-c3e389bcb356
+//# debugId=7dd04a2f-1798-5c16-8740-5b7094f81cc0

package/dist/sdk/graph/durable-cache.js

@@ -15,11 +15,12 @@
  * threshold or after an explicit `pm graph index --rebuild` opt-in.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="4cb399d6-7311-5e2d-a8d2-e0140530ec72")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="2f7f14e3-6d41-5f45-a560-ebfbb8aa5828")}catch(e){}}();
 import path from "node:path";
 import { readFileIfExists, removeFileIfExists, writeFileAtomic, } from "../../core/fs/fs-utils.js";
 import { acquireLock } from "../../core/lock/lock.js";
 import { isSemanticContextKind, } from "./governance.js";
+import { RELATIONSHIP_AUDIT_FINDING_CODES } from "./governance-contracts.js";
 /** Envelope format version; any change invalidates persisted entries. */
 export const GRAPH_DURABLE_CACHE_VERSION = 1;
 /** Workspaces below this item count skip implicit persistence. */
@@ -173,6 +174,58 @@ function isNonnegativeCoverageByTypeRecord(value) {
     return Object.values(value).every((entry) => isRecord(entry) &&
         [entry.active, entry.isolated, entry.degree_leq_one].every(isNonnegativeInteger));
 }
+/** Decode optional structural fields while normalizing pre-structure baselines. */
+function decodeStructuralProfile(profile, affectedSubjectsByCode) {
+    const countFields = [
+        "articulation_points",
+        "bridge_edges",
+        "outcome_nodes",
+        "active_outcome_reachable_nodes",
+        "active_outcome_unreachable_nodes",
+        "terminal_nodes",
+        "terminal_outcome_reachable_nodes",
+        "terminal_outcome_unreachable_nodes",
+        "outcome_reachable_nodes",
+        "outcome_unreachable_nodes",
+    ];
+    const rateFields = [
+        "active_outcome_reachability_basis_points",
+        "terminal_outcome_reachability_basis_points",
+        "outcome_reachability_basis_points",
+    ];
+    const introducedStructuralFields = [
+        ...countFields,
+        ...rateFields,
+        "finding_subjects_by_code",
+    ];
+    const introducedStructuralFieldCount = introducedStructuralFields.filter((field) => profile[field] !== undefined).length;
+    if (introducedStructuralFieldCount !== 0 &&
+        introducedStructuralFieldCount !== introducedStructuralFields.length) {
+        return undefined;
+    }
+    const validCounts = countFields.every((field) => profile[field] === undefined || isNonnegativeInteger(profile[field]));
+    const validRates = rateFields.every((field) => profile[field] === undefined ||
+        (isNonnegativeInteger(profile[field]) && Number(profile[field]) <= 10_000));
+    if (!validCounts || !validRates)
+        return undefined;
+    if (profile.edge_basis !== undefined &&
+        profile.edge_basis !== "deduplicated_directed")
+        return undefined;
+    if (!isOptionalValid(profile.finding_subjects_by_code, isNonnegativeCountRecord))
+        return undefined;
+    const findingSubjects = isNonnegativeCountRecord(profile.finding_subjects_by_code)
+        ? profile.finding_subjects_by_code
+        : {};
+    return {
+        edge_basis: "deduplicated_directed",
+        ...Object.fromEntries(countFields.map((field) => [field, profile[field] ?? 0])),
+        ...Object.fromEntries(rateFields.map((field) => [field, profile[field] ?? 0])),
+        finding_subjects_by_code: Object.fromEntries(RELATIONSHIP_AUDIT_FINDING_CODES.map((code) => [
+            code,
+            findingSubjects[code] ?? affectedSubjectsByCode[code] ?? 0,
+        ])),
+    };
+}
 /** Decode and cross-check optional graph-composition fields as one coherent unit. */
 function decodeGraphComposition(edges, edgesByKind, edgeShareByKind, semanticEdgesValue, semanticEdgeShareValue) {
     const values = [
@@ -225,7 +278,8 @@ function decodeBaseline(raw) {
             return undefined;
         if (typeof snapshot.fingerprint !== "string")
             return undefined;
-        if (!isNonnegativeCountRecord(snapshot.affected_subjects_by_code)) {
+        const affectedSubjectsByCode = snapshot.affected_subjects_by_code;
+        if (!isNonnegativeCountRecord(affectedSubjectsByCode)) {
             return undefined;
         }
         if (!isRecord(profile))
@@ -248,12 +302,16 @@ function decodeBaseline(raw) {
         const composition = decodeGraphComposition(profile.edges, profile.edges_by_kind, profile.edge_share_by_kind, profile.semantic_edges, profile.semantic_edge_share);
         if (composition === undefined)
             return undefined;
+        const structural = decodeStructuralProfile(profile, affectedSubjectsByCode);
+        if (structural === undefined)
+            return undefined;
         const { coverage_by_type = {} } = profile;
         return {
             ...snapshot,
             profile: {
                 ...profile,
                 ...composition,
+                ...structural,
                 coverage_by_type,
             },
         };
@@ -271,4 +329,4 @@ export async function saveGraphAuditBaseline(pmRoot, snapshot) {
     await writeFileAtomic(graphAuditBaselinePath(pmRoot), JSON.stringify(snapshot));
 }
 //# sourceMappingURL=durable-cache.js.map
-//# debugId=4cb399d6-7311-5e2d-a8d2-e0140530ec72
+//# debugId=2f7f14e3-6d41-5f45-a560-ebfbb8aa5828

package/dist/sdk/graph/governance-contracts.d.ts

@@ -0,0 +1,12 @@
+/**
+ * @module sdk/graph/governance-contracts
+ *
+ * Shared, runtime-visible relationship-audit finding identifiers used by the
+ * live audit and backward-compatible durable baseline decoder. Keeping the
+ * tuple authoritative prevents the public type and persisted zero census from
+ * drifting when a finding family is added.
+ */
+/** Stable machine-readable relationship audit finding families. */
+export declare const RELATIONSHIP_AUDIT_FINDING_CODES: readonly ["missing_reference_active", "missing_reference_terminal", "legacy_no_blocker_sentinel", "ordering_cycle", "legacy_ordering_cycle", "duplicate_edge", "legacy_duplicate_edge", "duplicate_dependency_row", "legacy_duplicate_dependency_row", "stale_lifecycle_block", "isolated_active_node", "sparse_active_node"];
+/** Machine-readable identifier for one relationship audit finding family. */
+export type RelationshipAuditFindingCode = (typeof RELATIONSHIP_AUDIT_FINDING_CODES)[number];

package/dist/sdk/graph/governance-contracts.js

@@ -0,0 +1,27 @@
+/**
+ * @module sdk/graph/governance-contracts
+ *
+ * Shared, runtime-visible relationship-audit finding identifiers used by the
+ * live audit and backward-compatible durable baseline decoder. Keeping the
+ * tuple authoritative prevents the public type and persisted zero census from
+ * drifting when a finding family is added.
+ */
+/** Stable machine-readable relationship audit finding families. */
+
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="a2043b27-3dfe-5da8-a10f-d92ff33f3c28")}catch(e){}}();
+export const RELATIONSHIP_AUDIT_FINDING_CODES = [
+    "missing_reference_active",
+    "missing_reference_terminal",
+    "legacy_no_blocker_sentinel",
+    "ordering_cycle",
+    "legacy_ordering_cycle",
+    "duplicate_edge",
+    "legacy_duplicate_edge",
+    "duplicate_dependency_row",
+    "legacy_duplicate_dependency_row",
+    "stale_lifecycle_block",
+    "isolated_active_node",
+    "sparse_active_node",
+];
+//# sourceMappingURL=governance-contracts.js.map
+//# debugId=a2043b27-3dfe-5da8-a10f-d92ff33f3c28

package/dist/sdk/graph/governance.d.ts

@@ -14,10 +14,10 @@
  */
 import type { RelationshipEdge } from "../relationships.js";
 import type { WorkspaceRelationshipAssembly } from "./assembly.js";
+import { type RelationshipAuditFindingCode } from "./governance-contracts.js";
+export type { RelationshipAuditFindingCode } from "./governance-contracts.js";
 /** Severity ladder shared by every relationship audit finding. */
 export type RelationshipAuditSeverity = "error" | "warning" | "info";
-/** Machine-readable identifier for one relationship audit finding family. */
-export type RelationshipAuditFindingCode = "missing_reference_active" | "missing_reference_terminal" | "legacy_no_blocker_sentinel" | "ordering_cycle" | "legacy_ordering_cycle" | "duplicate_edge" | "legacy_duplicate_edge" | "duplicate_dependency_row" | "legacy_duplicate_dependency_row" | "stale_lifecycle_block" | "isolated_active_node" | "sparse_active_node";
 /** One policy-aware relationship audit finding with bounded evidence. */
 export interface RelationshipAuditFinding {
     /** Machine-readable finding family identifier. */
@@ -72,6 +72,34 @@ export interface RelationshipCoverageProfile {
     degree_leq_one_active_nodes: number;
     /** Deterministic per-type connectivity coverage; untyped nodes bucket under `(untyped)`. */
     coverage_by_type: Record<string, RelationshipCoverageTypeProfile>;
+    /** Undirected cut vertices whose removal increases the component count. */
+    articulation_points: number;
+    /** Undirected cut edges whose removal disconnects their endpoints. */
+    bridge_edges: number;
+    /** Milestone nodes whose title explicitly declares an outcome. */
+    outcome_nodes: number;
+    /** Active non-outcome nodes with a typed hierarchy or implements path to an outcome. */
+    active_outcome_reachable_nodes: number;
+    /** Active non-outcome nodes without a typed hierarchy or implements path to an outcome. */
+    active_outcome_unreachable_nodes: number;
+    /** Active typed-outcome reachability expressed as integer basis points. */
+    active_outcome_reachability_basis_points: number;
+    /** Terminal non-placeholder, non-outcome nodes included in the all-status census. */
+    terminal_nodes: number;
+    /** Terminal non-outcome nodes with a typed hierarchy or implements path to an outcome. */
+    terminal_outcome_reachable_nodes: number;
+    /** Terminal non-outcome nodes without a typed hierarchy or implements path to an outcome. */
+    terminal_outcome_unreachable_nodes: number;
+    /** Terminal typed-outcome reachability expressed as integer basis points. */
+    terminal_outcome_reachability_basis_points: number;
+    /** All active and terminal non-outcome nodes with a typed path to an outcome. */
+    outcome_reachable_nodes: number;
+    /** All active and terminal non-outcome nodes without a typed path to an outcome. */
+    outcome_unreachable_nodes: number;
+    /** All-status typed-outcome reachability expressed as integer basis points. */
+    outcome_reachability_basis_points: number;
+    /** Affected-subject census containing every known finding code, including zero populations. */
+    finding_subjects_by_code: Record<RelationshipAuditFindingCode, number>;
 }
 /** Tuning and policy inputs accepted by the relationship audit. */
 export interface RelationshipAuditOptions {

package/dist/sdk/graph/governance.js

@@ -1,8 +1,13 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="996cfe8f-1b9b-534e-9e22-ede6f76d7cac")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="ab8a4904-0302-5e36-9963-750b3ba79876")}catch(e){}}();
 import { isTransitiveKind, orientTransitiveEdge, transitiveFamilyKey, } from "./analytics.js";
+import { findRelationshipCutStructure } from "./centrality.js";
+import { RELATIONSHIP_AUDIT_FINDING_CODES, } from "./governance-contracts.js";
 /** Default bounded sample size applied to every finding family. */
 const DEFAULT_MAX_SAMPLE_SIZE = 25;
+/** Canonical item type and title marker that identify explicit outcomes. */
+const OUTCOME_MILESTONE_TYPE = "milestone";
+const OUTCOME_MILESTONE_TITLE_PREFIX = "outcome milestone:";
 /** Relationship kinds that preserve why work exists or how evidence supports it. */
 const SEMANTIC_CONTEXT_KINDS = new Set([
     "discovered_from",
@@ -290,6 +295,104 @@ function collectDuplicateRowFindings(assembly, maxSampleSize) {
     appendFinding(findings, legacy, maxSampleSize, "legacy_duplicate_dependency_row", "info", "Identical repeated dependency rows on terminal holders are historical storage noise with no scheduling effect.", (count) => `${count} exactly duplicated stored dependency row(s) on terminal holder(s)`, "Leave as history debt or clean up in a dedicated changelog-safe closed-item batch.");
     return findings;
 }
+/** Build the reverse typed paths that can carry context toward an outcome. */
+function buildOutcomeReverseIndex(assembly, signal) {
+    const reverse = new Map();
+    for (const edge of assembly.graph.edges()) {
+        signal?.throwIfAborted();
+        const definition = assembly.graph.registry().require(edge.kind);
+        let oriented;
+        if (definition.hierarchy) {
+            oriented = orientTransitiveEdge(edge, definition);
+        }
+        else if (definition.kind === "implements") {
+            oriented = { from: edge.source, to: edge.target };
+        }
+        if (oriented === undefined)
+            continue;
+        const sources = reverse.get(oriented.to) ?? new Set();
+        sources.add(oriented.from);
+        reverse.set(oriented.to, sources);
+    }
+    return reverse;
+}
+/** Expand outcome nodes through every deterministic reverse typed path. */
+function expandOutcomeReachability(outcomes, reverse, signal) {
+    const reachable = new Set(outcomes);
+    const queue = [...outcomes].sort();
+    for (let index = 0; index < queue.length; index += 1) {
+        signal?.throwIfAborted();
+        for (const source of [...(reverse.get(queue[index]) ?? [])].sort()) {
+            if (reachable.has(source))
+                continue;
+            reachable.add(source);
+            queue.push(source);
+        }
+    }
+    return reachable;
+}
+/** Count active and terminal nodes against the resolved outcome-reachable set. */
+function tallyOutcomeReachability(nodeStates, outcomes, reachable, signal) {
+    let activeReachable = 0;
+    let activeUnreachable = 0;
+    let terminal = 0;
+    let terminalReachable = 0;
+    for (const state of nodeStates.values()) {
+        signal?.throwIfAborted();
+        if (outcomes.has(state.id))
+            continue;
+        if (state.missing || state.status === "external")
+            continue;
+        if (state.terminal) {
+            terminal += 1;
+            if (reachable.has(state.id))
+                terminalReachable += 1;
+            continue;
+        }
+        if (reachable.has(state.id))
+            activeReachable += 1;
+        else
+            activeUnreachable += 1;
+    }
+    const active = activeReachable + activeUnreachable;
+    const terminalUnreachable = terminal - terminalReachable;
+    const outcomeReachable = activeReachable + terminalReachable;
+    const outcomeUnreachable = activeUnreachable + terminalUnreachable;
+    const outcomePopulation = outcomeReachable + outcomeUnreachable;
+    return {
+        active_outcome_reachable_nodes: activeReachable,
+        active_outcome_unreachable_nodes: activeUnreachable,
+        active_outcome_reachability_basis_points: active === 0 ? 0 : Math.floor((activeReachable * 10_000) / active),
+        terminal_nodes: terminal,
+        terminal_outcome_reachable_nodes: terminalReachable,
+        terminal_outcome_unreachable_nodes: terminalUnreachable,
+        terminal_outcome_reachability_basis_points: terminal === 0 ? 0 : Math.floor((terminalReachable * 10_000) / terminal),
+        outcome_reachable_nodes: outcomeReachable,
+        outcome_unreachable_nodes: outcomeUnreachable,
+        outcome_reachability_basis_points: outcomePopulation === 0
+            ? 0
+            : Math.floor((outcomeReachable * 10_000) / outcomePopulation),
+    };
+}
+/**
+ * Count nodes with an explicit typed path to an outcome milestone. Hierarchy
+ * edges flow child to parent and `implements` flows implementation to outcome;
+ * unrelated association edges deliberately contribute no reachability.
+ */
+function profileOutcomeReachability(assembly, nodeStates, signal) {
+    const outcomes = new Set(assembly.details
+        .filter((detail) => detail.type?.toLowerCase() === OUTCOME_MILESTONE_TYPE &&
+        detail.title
+            .trim()
+            .toLowerCase()
+            .startsWith(OUTCOME_MILESTONE_TITLE_PREFIX))
+        .map((detail) => detail.id));
+    const reachable = expandOutcomeReachability(outcomes, buildOutcomeReverseIndex(assembly, signal), signal);
+    return {
+        outcome_nodes: outcomes.size,
+        ...tallyOutcomeReachability(nodeStates, outcomes, reachable, signal),
+    };
+}
 /** Fold one active node's degree into the aggregate and per-type coverage tallies. */
 function tallyActiveCoverageNode(tallies, state, degree, exemptIsolates, isolateExemptTypes) {
     tallies.active += 1;
@@ -316,7 +419,7 @@ function tallyActiveCoverageNode(tallies, state, degree, exemptIsolates, isolate
     else
         tallies.sparse.push(state.id);
 }
-function collectCoverageReport(assembly, nodeStates, exemptIsolates, isolateExemptTypes, maxSampleSize, edgesByKind) {
+function collectCoverageReport(assembly, nodeStates, exemptIsolates, isolateExemptTypes, maxSampleSize, edgesByKind, signal) {
     const tallies = {
         active: 0,
         missing: 0,
@@ -327,6 +430,7 @@ function collectCoverageReport(assembly, nodeStates, exemptIsolates, isolateExem
         byType: new Map(),
     };
     for (const id of assembly.graph.nodes()) {
+        signal?.throwIfAborted();
         const state = nodeStates.get(id);
         /* c8 ignore next -- every graph node originates from assembly details by construction */
         if (!state)
@@ -346,6 +450,10 @@ function collectCoverageReport(assembly, nodeStates, exemptIsolates, isolateExem
     const edgeCount = assembly.graph.edges().length;
     const sortedEdgesByKind = Object.fromEntries(Object.entries(edgesByKind).sort(([left], [right]) => left.localeCompare(right)));
     const semanticEdges = Object.entries(sortedEdgesByKind).reduce((count, [kind, value]) => count + (isSemanticContextKind(kind) ? value : 0), 0);
+    const cutStructure = findRelationshipCutStructure(assembly.graph, {
+        signal,
+    }).value;
+    const outcomeReachability = profileOutcomeReachability(assembly, nodeStates, signal);
     return {
         findings,
         profile: {
@@ -364,6 +472,10 @@ function collectCoverageReport(assembly, nodeStates, exemptIsolates, isolateExem
             isolated_active_nodes: tallies.isolated,
             degree_leq_one_active_nodes: tallies.degreeLeqOne,
             coverage_by_type: Object.fromEntries([...tallies.byType.entries()].sort(([left], [right]) => left < right ? -1 : 1)),
+            articulation_points: cutStructure.articulationPoints.length,
+            bridge_edges: cutStructure.bridges.length,
+            ...outcomeReachability,
+            finding_subjects_by_code: Object.fromEntries(RELATIONSHIP_AUDIT_FINDING_CODES.map((code) => [code, 0])),
         },
     };
 }
@@ -410,14 +522,21 @@ export function auditWorkspaceRelationshipGraph(assembly, options = {}) {
     options.signal?.throwIfAborted();
     findings.push(...collectDuplicateEdgeFindings(assembly, nodeStates, maxSampleSize), ...collectDuplicateRowFindings(assembly, maxSampleSize));
     options.signal?.throwIfAborted();
-    const coverage = collectCoverageReport(assembly, nodeStates, exemptIsolates, isolateExemptTypes, maxSampleSize, edgesByKind);
+    const coverage = collectCoverageReport(assembly, nodeStates, exemptIsolates, isolateExemptTypes, maxSampleSize, edgesByKind, options.signal);
     findings.push(...coverage.findings);
     findings.sort((left, right) => SEVERITY_RANK[left.severity] - SEVERITY_RANK[right.severity] ||
         left.code.localeCompare(right.code) ||
         left.sample[0].localeCompare(right.sample[0]));
+    const findingSubjectsByCode = coverage.profile.finding_subjects_by_code;
+    for (const finding of findings) {
+        findingSubjectsByCode[finding.code] += finding.count;
+    }
     return {
         findings,
-        profile: coverage.profile,
+        profile: {
+            ...coverage.profile,
+            finding_subjects_by_code: findingSubjectsByCode,
+        },
     };
 }
 /** Subtract two count records, keeping only non-zero signed deltas in sorted key order. */
@@ -491,4 +610,4 @@ export function diffRelationshipAuditSnapshots(baseline, current) {
     };
 }
 //# sourceMappingURL=governance.js.map
-//# debugId=996cfe8f-1b9b-534e-9e22-ede6f76d7cac
+//# debugId=ab8a4904-0302-5e36-9963-750b3ba79876

package/dist/sdk/guide.js

@@ -4,7 +4,8 @@
  * Implements the pm guide command surface and its agent-facing runtime behavior.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="9376fbdf-c942-5fa6-9252-92125ae44e73")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="27be0fa5-1c6a-53de-a0e8-179aab7c795a")}catch(e){}}();
+import { isFileAbsentError } from "../core/fs/fs-utils.js";
 import { readFile } from "node:fs/promises";
 import path from "node:path";
 import { resolveConfiguredPmPackageRoot, EXIT_CODE, PmCliError, } from "./runtime-primitives.js";
@@ -119,8 +120,7 @@ async function renderGuideDocs(topic, depth, packageRoot) {
             }
         }
         catch (error) {
-            const code = error?.code;
-            const missing = code === "ENOENT";
+            const missing = isFileAbsentError(error);
             docs.push({
                 path: doc.path,
                 purpose: doc.purpose,
@@ -277,4 +277,4 @@ export function renderGuideMarkdown(result) {
     return lines.join("\n");
 }
 //# sourceMappingURL=guide.js.map
-//# debugId=9376fbdf-c942-5fa6-9252-92125ae44e73
+//# debugId=27be0fa5-1c6a-53de-a0e8-179aab7c795a

package/dist/sdk/index.d.ts

@@ -58,6 +58,7 @@ export * from "./compose.js";
 export * from "./governance/assurance.js";
 export * from "./governance/assurance-action.js";
 export * from "./governance/assurance-runtime.js";
+export * from "./governance/assurance-presets.js";
 export * from "./compile-cache.js";
 export * from "./environment/project-runtime-compatibility.js";
 export * from "./environment/source-context.js";
@@ -94,7 +95,7 @@ export { runDeps, type DepsCollapseMode, type DepsFormat, type DepsGraphEdge, ty
 export * from "./graph/index.js";
 export { runDocs } from "./docs.js";
 export { runFiles, runFilesDiscover, runFilesLookup, type FilesDiscoveryCandidate, type FilesLookupItem, type FilesLookupMatch, } from "./files.js";
-export { applyPathMigrations, applyStandaloneNote, artifactKey, dedupeLinkedArtifacts, ensureScope, expandAddGlobEntries, normalizeLinkedPath, parseAddEntries, parseAddGlobEntries, parseMigrateEntries, parseRemoveEntries, renameArtifactsResultKey, runLinkedArtifacts, sortLinkedArtifacts, validateLinkedPaths, type AddGlobEntry, type LinkedArtifact, type LinkedArtifactCommandOptions, type LinkedArtifactKindConfig, type LinkedArtifactResult, type LinkedPathValidation, type PathMigration, } from "./linked-artifacts.js";
+export { applyPathMigrations, applyStandaloneNote, artifactKey, assertLinkedArtifactMutationIsUnambiguous, dedupeLinkedArtifacts, ensureScope, expandAddGlobEntries, normalizeLinkedPath, parseAddEntries, parseAddGlobEntries, parseMigrateEntries, parseRemoveEntries, renameArtifactsResultKey, runLinkedArtifacts, sortLinkedArtifacts, validateLinkedPaths, type AddGlobEntry, type LinkedArtifact, type LinkedArtifactCommandOptions, type LinkedArtifactKindConfig, type LinkedArtifactResult, type LinkedPathValidation, type PathMigration, } from "./linked-artifacts.js";
 export * from "./pagination.js";
 export * from "./query/item-filter-options.js";
 export * from "./query/parsers.js";

package/dist/sdk/index.js

@@ -4,7 +4,7 @@
  * Defines public SDK APIs and package-author helpers for Index.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="14672b89-6a87-59a0-8164-6b01a9c91ee1")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="8664ab01-dc47-5344-b2d7-9ac315e8a74b")}catch(e){}}();
 export { PM_COMMAND_VISIBILITY_CONTRACTS, PM_MCP_PROMPT_CONTRACTS, PM_MCP_RESOURCE_CONTRACTS, PM_MCP_TOOL_COMMAND_CONTRACTS, listPmCommandsForTier, listPmMcpToolsForProfile, renderPmCommandVisibilityMarkdown, resolvePmCommandVisibilityTier, } from "./agent-capability-contracts.js";
 export * from "./agent-session-context.js";
 export { isErrnoError, limitAnnotationEntries, parseAnnotationTextInput, readAnnotationEntries, normalizeAnnotationTransportOptions, resolveAnnotationInput, resolveAnnotationIndex, runAnnotationCommand, wrapOwnershipConflict, } from "./annotations.js";
@@ -56,6 +56,7 @@ export * from "./compose.js";
 export * from "./governance/assurance.js";
 export * from "./governance/assurance-action.js";
 export * from "./governance/assurance-runtime.js";
+export * from "./governance/assurance-presets.js";
 export * from "./compile-cache.js";
 export * from "./environment/project-runtime-compatibility.js";
 export * from "./environment/source-context.js";
@@ -92,7 +93,7 @@ export { runDeps, } from "./dependencies.js";
 export * from "./graph/index.js";
 export { runDocs } from "./docs.js";
 export { runFiles, runFilesDiscover, runFilesLookup, } from "./files.js";
-export { applyPathMigrations, applyStandaloneNote, artifactKey, dedupeLinkedArtifacts, ensureScope, expandAddGlobEntries, normalizeLinkedPath, parseAddEntries, parseAddGlobEntries, parseMigrateEntries, parseRemoveEntries, renameArtifactsResultKey, runLinkedArtifacts, sortLinkedArtifacts, validateLinkedPaths, } from "./linked-artifacts.js";
+export { applyPathMigrations, applyStandaloneNote, artifactKey, assertLinkedArtifactMutationIsUnambiguous, dedupeLinkedArtifacts, ensureScope, expandAddGlobEntries, normalizeLinkedPath, parseAddEntries, parseAddGlobEntries, parseMigrateEntries, parseRemoveEntries, renameArtifactsResultKey, runLinkedArtifacts, sortLinkedArtifacts, validateLinkedPaths, } from "./linked-artifacts.js";
 export * from "./pagination.js";
 export * from "./query/item-filter-options.js";
 export * from "./query/parsers.js";
@@ -150,4 +151,4 @@ export * from "./governance.js";
 export * from "./query.js";
 export * from "./testing.js";
 //# sourceMappingURL=index.js.map
-//# debugId=14672b89-6a87-59a0-8164-6b01a9c91ee1
+//# debugId=8664ab01-dc47-5344-b2d7-9ac315e8a74b

package/dist/sdk/linked-artifacts.d.ts

@@ -115,6 +115,8 @@ export declare function parseRemoveEntries(raw: string[] | undefined): string[];
 export declare function parseMigrateEntries(raw: string[] | undefined): PathMigration[];
 /** Implements apply path migrations for the public runtime surface of this module. */
 export declare function applyPathMigrations(artifactPath: string, migrations: PathMigration[]): string;
+/** Reject a transaction that resolves the same linked path into both add and remove sets. */
+export declare function assertLinkedArtifactMutationIsUnambiguous(adds: LinkedArtifact[], removes: string[], migrations?: PathMigration[]): void;
 /** Implements normalize linked path for the public runtime surface of this module. */
 export declare function normalizeLinkedPath(value: string): string;
 /** Anchor a local linked path to the project workspace while preserving remote references and absolute paths. */

package/dist/sdk/linked-artifacts.js

@@ -4,11 +4,11 @@
  * Implements the pm linked artifacts command surface and its agent-facing runtime behavior.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="3fe80124-596b-591c-9f0d-fbbc129c6bb4")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="585364aa-e5ff-56b6-8276-8f741fbd6be4")}catch(e){}}();
 import fs from "node:fs/promises";
 import path from "node:path";
 import fg from "fast-glob";
-import { pathExists } from "../core/fs/fs-utils.js";
+import { isFileAbsentError, pathExists } from "../core/fs/fs-utils.js";
 import { getActiveExtensionRegistrations } from "../core/extensions/index.js";
 import { assertNoUnknownCsvKeys, createStdinTokenResolver, looksLikeGenericKeyValueEntry, parseCsvKv, } from "../core/item/parse.js";
 import { resolveItemTypeRegistry } from "../core/item/type-registry.js";
@@ -179,6 +179,30 @@ export function applyPathMigrations(artifactPath, migrations) {
     }
     return next;
 }
+/** Reject a transaction that resolves the same linked path into both add and remove sets. */
+export function assertLinkedArtifactMutationIsUnambiguous(adds, removes, migrations = []) {
+    if (adds.length === 0 || removes.length === 0) {
+        return;
+    }
+    const addedPaths = new Set(adds.map((entry) => applyPathMigrations(entry.path, migrations)));
+    const conflicts = [
+        ...new Set(removes
+            .map((entry) => applyPathMigrations(entry, migrations))
+            .filter((entry) => addedPaths.has(entry))),
+    ].sort((left, right) => left.localeCompare(right));
+    if (conflicts.length === 0) {
+        return;
+    }
+    throw new PmCliError(`Linked artifact mutation cannot add and remove the same normalized path in one transaction: ${conflicts.join(", ")}. Split the replacement into separate commands so each history event has one unambiguous intent.`, EXIT_CODE.USAGE, {
+        code: "linked_artifact_mutation_conflict",
+        reason: "same_path_added_and_removed",
+        required: "Use distinct normalized paths for --add and --remove in one invocation.",
+        why: "Conflicting batch intent cannot be applied deterministically without silently discarding metadata or a removal.",
+        nextSteps: [
+            "Run the removal and addition as separate commands with a --message describing each intent.",
+        ],
+    });
+}
 /** Implements normalize linked path for the public runtime surface of this module. */
 export function normalizeLinkedPath(value) {
     return value.split(path.sep).join("/");
@@ -293,7 +317,7 @@ export async function validateLinkedPaths(paths, workspaceRoot = process.cwd())
             if (typeof error === "object" &&
                 error !== null &&
                 "code" in error &&
-                error.code === "ENOENT") {
+                isFileAbsentError(error)) {
                 missingPaths.push(relativePath);
                 continue;
             }
@@ -384,6 +408,7 @@ export async function runLinkedArtifacts(id, options, global, config) {
     const adds = applyStandaloneNote([...parsedAdds, ...expandedGlobAdds], options.note, parsedAdds.length > 0 || addGlobs.length > 0);
     const removes = parseRemoveEntries(resolvedRemoves).map((entry) => anchorLinkedPath(entry, workspaceRoot, invocationRoot));
     const migrations = parseMigrateEntries(resolvedMigrations);
+    assertLinkedArtifactMutationIsUnambiguous(adds, removes, migrations);
     const shouldMutate = adds.length > 0 || removes.length > 0 || migrations.length > 0;
     if (!shouldMutate) {
         const located = await locateItem(pmRoot, id, settings.id_prefix, settings.item_format, typeRegistry.type_to_folder);
@@ -454,4 +479,4 @@ export function renameArtifactsResultKey(result, key) {
     return out;
 }
 //# sourceMappingURL=linked-artifacts.js.map
-//# debugId=3fe80124-596b-591c-9f0d-fbbc129c6bb4
+//# debugId=585364aa-e5ff-56b6-8276-8f741fbd6be4