@unbrained/pm-cli 2026.8.12 → 2026.8.14

package/dist/core/lock/lock.js

@@ -4,7 +4,8 @@
  * Coordinates tracker lock ownership and cleanup for Lock.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="c638b65d-148a-5b42-8f24-d6fa9d5ac7d3")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="a9ad8a9f-de6e-5bce-8685-844f1129d5fb")}catch(e){}}();
+import { isFileMissingError } from "../fs/fs-utils.js";
 import fs from "node:fs/promises";
 import path from "node:path";
 import { randomUUID } from "node:crypto";
@@ -70,7 +71,7 @@ async function readLockInfo(lockPath) {
         return parseLockInfo(raw);
     }
     catch (error) {
-        if (isErrno(error, "ENOENT")) {
+        if (isFileMissingError(error)) {
             return {
                 info: null,
                 warnings: [],
@@ -294,7 +295,7 @@ async function removeExpiredStaleCleanupGate(gatePath) {
         }
     }
     catch (error) {
-        return isErrno(error, "ENOENT");
+        return isFileMissingError(error);
     }
     const owner = await readStaleCleanupGateOwner(gatePath);
     if (owner !== null &&
@@ -446,4 +447,4 @@ export async function acquireLock(pmRoot, id, ttlSeconds, owner, force = false,
     }
 }
 //# sourceMappingURL=lock.js.map
-//# debugId=c638b65d-148a-5b42-8f24-d6fa9d5ac7d3
+//# debugId=a9ad8a9f-de6e-5bce-8685-844f1129d5fb

package/dist/core/output/output.js

@@ -4,7 +4,7 @@
  * Formats compact human and machine output for Output.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="5aaf8b90-5b95-5102-9ea4-b877c696d593")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="88eb8f29-72a2-536f-8fc9-394ed3e0e0fb")}catch(e){}}();
 import { getActiveCommandContext, runActiveCommandOverride, runActiveRendererOverride, runActiveServiceOverrideSync, setActiveCommandResult, } from "../extensions/index.js";
 import { EXIT_CODE } from "../shared/constants.js";
 import { isHostOutputSuppressed } from "./output-control.js";
@@ -371,7 +371,15 @@ function formatEffectiveOutput(effectiveResult, nativeOutput, options) {
     };
     const format = resolveReadOutputEncoding(command ?? "", commandOptions) ??
         resolveOutputFormat(options);
-    const effectiveOptions = { ...options, command, commandOptions };
+    const resolvedCommandOptions = {
+        ...commandOptions,
+        resolvedOutputFormat: format,
+    };
+    const effectiveOptions = {
+        ...options,
+        command,
+        commandOptions: resolvedCommandOptions,
+    };
     const service = resolveOutputService(effectiveResult, nativeOutput, effectiveOptions, format);
     if (service.rendered !== null)
         return service.rendered;
@@ -379,7 +387,7 @@ function formatEffectiveOutput(effectiveResult, nativeOutput, options) {
     const projectedOutputResult = command === "test"
         ? projectLinkedTestEvidence(outputResult, options.lean === true)
         : outputResult;
-    const intentOutputResult = attachReadOutputContracts(command, commandOptions, projectedOutputResult);
+    const intentOutputResult = attachReadOutputContracts(command, resolvedCommandOptions, projectedOutputResult);
     const renderResolvedOutput = (value) => {
         if (format === "toon") {
             const markdownDefault = renderDefaultMarkdownResult(value);
@@ -456,4 +464,4 @@ export const outputTestOnly = {
     renderToonValue,
 };
 //# sourceMappingURL=output.js.map
-//# debugId=5aaf8b90-5b95-5102-9ea4-b877c696d593
+//# debugId=88eb8f29-72a2-536f-8fc9-394ed3e0e0fb

package/dist/core/search/vector-stores.js

@@ -1,10 +1,10 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="7bac9506-dcad-5e52-848b-3e2631d4936c")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="98c8d03c-bdde-5ac4-b80d-395d885f7442")}catch(e){}}();
 import { mkdir, readFile, stat, unlink } from "node:fs/promises";
 import { basename, dirname, isAbsolute, join, resolve } from "node:path";
 import { executeSearchJsonRequest, normalizeSearchHttpTimeoutMs, resolveSearchHttpFetcher, } from "./http-client.js";
 import { isFiniteNumberArray, toErrorMessage, toNonEmptyString, trimTrailingSlashes, } from "../shared/primitives.js";
-import { writeFileAtomic } from "../fs/fs-utils.js";
+import { isFileMissingError, writeFileAtomic } from "../fs/fs-utils.js";
 const DEFAULT_COLLECTION = "pm_items";
 const COLLECTION_SANITIZE_PATTERN = /[^a-zA-Z0-9_-]/g;
 const MAX_COLLECTION_NAME_LENGTH = 128;
@@ -200,11 +200,6 @@ function getLanceDbLocalTableKey(storePath, table) {
 function getLanceDbSnapshotPath(storePath, table) {
     return join(resolve(storePath), LANCE_DB_LOCAL_SNAPSHOT_DIR, `${table}.json`);
 }
-function isNodeErrorWithCode(error, code) {
-    return (typeof error === "object" &&
-        error !== null &&
-        error.code === code);
-}
 function normalizeSnapshotRecord(entry, index, snapshotPath) {
     const id = toNonEmptyString(entry.id);
     if (!id) {
@@ -261,7 +256,7 @@ async function readLanceDbSnapshotStats(snapshotPath) {
         return { mtimeMs: stats.mtimeMs, size: stats.size };
     }
     catch (error) {
-        if (!isNodeErrorWithCode(error, "ENOENT")) {
+        if (!isFileMissingError(error)) {
             throw error;
         }
         return null;
@@ -306,7 +301,7 @@ async function loadLanceDbLocalTable(storePath, table) {
         loaded = parseLanceDbSnapshot(snapshotPath, table, raw);
     }
     catch (error) {
-        if (!isNodeErrorWithCode(error, "ENOENT")) {
+        if (!isFileMissingError(error)) {
             throw error;
         }
     }
@@ -331,7 +326,7 @@ async function removeSnapshotFile(snapshotPath) {
         await unlink(snapshotPath);
     }
     catch (error) {
-        if (!isNodeErrorWithCode(error, "ENOENT")) {
+        if (!isFileMissingError(error)) {
             throw new Error(`LanceDB local snapshot delete failed at '${snapshotPath}': ${toErrorMessage(error)}`);
         }
     }
@@ -667,4 +662,4 @@ export async function executeVectorReset(store, knownIds = [], options = {}, vec
     return await executeVectorDelete(store, idsToDelete, options);
 }
 //# sourceMappingURL=vector-stores.js.map
-//# debugId=7bac9506-dcad-5e52-848b-3e2631d4936c
+//# debugId=98c8d03c-bdde-5ac4-b80d-395d885f7442

package/dist/core/store/item-metadata-cache.js

@@ -4,7 +4,7 @@
  * Reads and writes tracker storage with format-aware helpers for the item metadata cache.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="58d1ab81-16b6-5c93-ade4-ba189ea48c9b")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="8b8c705a-8d80-576f-8642-f6f686cdbed9")}catch(e){}}();
 import fs from "node:fs/promises";
 import path from "node:path";
 import { createHash, randomUUID } from "node:crypto";
@@ -12,7 +12,7 @@ import { getActiveExtensionRegistrations, hasActiveOnReadHooks, runActiveOnReadH
 import { collectRegisteredItemFieldNames } from "../extensions/item-fields.js";
 import { parseItemDocument } from "../item/item-format.js";
 import { evictOldestMemoEntries } from "../shared/memo.js";
-import { writeFileAtomic } from "../fs/fs-utils.js";
+import { isFileMissingError, writeFileAtomic } from "../fs/fs-utils.js";
 import { acquireLock } from "../lock/lock.js";
 import { ITEM_FILE_EXTENSIONS, getItemFormatFromPath } from "./paths.js";
 import { rebuildItemMetadataQueryIndex, removeItemMetadataQueryIndex, updateItemMetadataQueryIndex, } from "./item-metadata-query-index.js";
@@ -442,7 +442,7 @@ async function readItemDirectoryFiles(pmRoot, folder, warnings) {
         if (typeof error === "object" &&
             error !== null &&
             "code" in error &&
-            error.code !== "ENOENT") {
+            !isFileMissingError(error)) {
             appendWarning(warnings, `item_list_directory_read_failed:${folder}`);
         }
         return { folder, dirPath, files: [] };
@@ -1114,4 +1114,4 @@ export async function listAllDocumentsCachedLight(pmRoot, preferredFormat, typeT
     }));
 }
 //# sourceMappingURL=item-metadata-cache.js.map
-//# debugId=58d1ab81-16b6-5c93-ade4-ba189ea48c9b
+//# debugId=8b8c705a-8d80-576f-8642-f6f686cdbed9

package/dist/core/telemetry/runtime.d.ts

@@ -171,6 +171,10 @@ declare function sanitizeValue(value: unknown, keyHint?: string, captureLevel?:
 declare function sanitizeCommandArgs(args: string[], captureLevel?: Exclude<TelemetryCaptureLevel, "minimal">): string[];
 declare function normalizeCaptureLevel(value: string | undefined): TelemetryCaptureLevel;
 declare function parseBooleanTrueLike(value: string | undefined): boolean;
+/** Resolve the background event and OTLP request timeout within the flush-lock safety envelope. */
+declare function resolveTelemetryHttpTimeoutMs(): number;
+/** POST a JSON payload with one total timeout that covers DNS, connection, TLS, and response completion. */
+declare function postTelemetryJson(endpoint: string, headers: Record<string, string>, body: string): Promise<number>;
 declare function normalizePmVersion(value: string | undefined): string;
 declare function normalizeTelemetryErrorCode(value: string | undefined): string | undefined;
 declare function normalizeTelemetryExitCode(exitCode: number | undefined, ok: boolean): number;
@@ -335,11 +339,13 @@ export declare const _testOnly: {
     looksLikeEmailToken: typeof looksLikeEmailToken;
     otelSpansQueuePath: typeof otelSpansQueuePath;
     parseBooleanTrueLike: typeof parseBooleanTrueLike;
+    postTelemetryJson: typeof postTelemetryJson;
     parsePendingOtelSpanLines: typeof parsePendingOtelSpanLines;
     prunePendingOtelSpans: typeof prunePendingOtelSpans;
     reconcilePendingOtelSpansAfterFlush: typeof reconcilePendingOtelSpansAfterFlush;
     retentionCutoffMs: typeof retentionCutoffMs;
     resolveOtelTracesEndpoint: typeof resolveOtelTracesEndpoint;
+    resolveTelemetryHttpTimeoutMs: typeof resolveTelemetryHttpTimeoutMs;
     rewritePendingOtelSpans: typeof rewritePendingOtelSpans;
     normalizeForHash: typeof normalizeForHash;
     normalizeCaptureLevel: typeof normalizeCaptureLevel;

package/dist/core/telemetry/runtime.js

@@ -4,15 +4,17 @@
  * Captures consent-aware telemetry and observability events for Runtime.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="fea9d81b-3deb-51f4-9ec3-76396ae1307d")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="26ea62d9-874d-5826-9822-83c5523b673b")}catch(e){}}();
 import crypto from "node:crypto";
 import { spawn } from "node:child_process";
 import { mkdirSync, rmSync, statSync } from "node:fs";
 import { mkdir, readdir, rm, stat } from "node:fs/promises";
+import { request as httpRequest } from "node:http";
+import { request as httpsRequest } from "node:https";
 import os from "node:os";
 import path from "node:path";
 import { resolvePmPackageRootFromModule } from "../packages/root.js";
-import { appendLineAtomic, readFileIfExists, writeFileAtomic, } from "../fs/fs-utils.js";
+import { isFileMissingError, appendLineAtomic, readFileIfExists, writeFileAtomic, } from "../fs/fs-utils.js";
 import { resolveTelemetryErrorCategory, } from "../shared/constants.js";
 import { nowIso } from "../shared/time.js";
 import { detectAgentIdentity, readAuthorEnvironment, } from "../shared/author.js";
@@ -22,11 +24,10 @@ import { deriveTelemetryCommandResolution, deriveTelemetryCommandTaxonomy, infer
 const TELEMETRY_QUEUE_RELATIVE_PATH = path.join("runtime", "telemetry", "events.jsonl");
 const TELEMETRY_STATE_RELATIVE_PATH = path.join("runtime", "telemetry", "state.json");
 const TELEMETRY_OTEL_SPANS_RELATIVE_PATH = path.join("runtime", "telemetry", "otel-spans.jsonl");
-// Kept small so a worst-case batch against a blackholed collector
-// (TELEMETRY_OTEL_SPANS_FLUSH_BATCH_SIZE * TELEMETRY_HTTP_TIMEOUT_MS plus the
-// preceding event flush) stays well under TELEMETRY_FLUSH_LOCK_STALE_MS (60s).
-// Otherwise a later command could treat the still-held flush lock as stale and
-// start a second concurrent worker.
+// OTLP requests run concurrently, while event and OTLP phases run sequentially.
+// The maximum configurable HTTP timeout therefore keeps two worst-case network
+// phases below TELEMETRY_FLUSH_LOCK_STALE_MS (60s), preventing a later command
+// from treating a live worker's lock as stale and starting a second worker.
 const TELEMETRY_OTEL_SPANS_FLUSH_BATCH_SIZE = 8;
 const TELEMETRY_OTEL_SPANS_MAX_PENDING = 500;
 /** Public contract for telemetry schema version, shared by SDK and presentation-layer consumers. */
@@ -35,7 +36,9 @@ const TELEMETRY_CLIENT_SCHEMA_VERSION = 1;
 const TELEMETRY_FLUSH_BATCH_SIZE = 100;
 const TELEMETRY_MAX_RETRY_DELAY_MS = 3_600_000;
 const TELEMETRY_RETRY_BASE_DELAY_MS = 30_000;
-const TELEMETRY_HTTP_TIMEOUT_MS = 5_000;
+const TELEMETRY_HTTP_TIMEOUT_DEFAULT_MS = 20_000;
+const TELEMETRY_HTTP_TIMEOUT_MIN_MS = 1_000;
+const TELEMETRY_HTTP_TIMEOUT_MAX_MS = 25_000;
 const MILLISECONDS_PER_DAY = 86_400_000;
 const TELEMETRY_MAX_EVENT_BYTES = 65_536;
 const TELEMETRY_SANITIZE_MAX_DEPTH = 6;
@@ -58,6 +61,8 @@ const PM_TELEMETRY_OTEL_DISABLED_VALUES = new Set(["1", "true", "yes", "on"]);
 const PM_TELEMETRY_INLINE_FLUSH_ENV = "PM_TELEMETRY_INLINE_FLUSH";
 const PM_TELEMETRY_FLUSH_CHILD_ENV = "PM_TELEMETRY_FLUSH_CHILD";
 const PM_TELEMETRY_SOURCE_CONTEXT_ENV = "PM_TELEMETRY_SOURCE_CONTEXT";
+const PM_TELEMETRY_HTTP_TIMEOUT_MS_ENV = "PM_TELEMETRY_HTTP_TIMEOUT_MS";
+const NATIVE_FETCH = globalThis.fetch;
 /** Supported values accepted by the pm telemetry source context contract. */
 export const PM_TELEMETRY_SOURCE_CONTEXT_VALUES = [
     "user",
@@ -390,6 +395,80 @@ function normalizeCaptureLevel(value) {
 function parseBooleanTrueLike(value) {
     return BOOLEAN_TRUE_VALUES.has((value ?? "").trim().toLowerCase());
 }
+/** Resolve the background event and OTLP request timeout within the flush-lock safety envelope. */
+function resolveTelemetryHttpTimeoutMs() {
+    const rawConfigured = process.env[PM_TELEMETRY_HTTP_TIMEOUT_MS_ENV]?.trim();
+    if (!rawConfigured) {
+        return TELEMETRY_HTTP_TIMEOUT_DEFAULT_MS;
+    }
+    const configured = Number(rawConfigured);
+    if (!Number.isFinite(configured)) {
+        return TELEMETRY_HTTP_TIMEOUT_DEFAULT_MS;
+    }
+    return Math.min(TELEMETRY_HTTP_TIMEOUT_MAX_MS, Math.max(TELEMETRY_HTTP_TIMEOUT_MIN_MS, Math.trunc(configured)));
+}
+/** POST a JSON payload with one total timeout that covers DNS, connection, TLS, and response completion. */
+async function postTelemetryJson(endpoint, headers, body) {
+    const url = new URL(endpoint);
+    // A replaced global fetch is an intentional runtime adapter used by the
+    // repository's deterministic tests and by embedders that instrument network
+    // traffic. Production retains the native HTTP transport below so Node's
+    // independent built-in-fetch connect timeout cannot preempt our bound.
+    if (globalThis.fetch !== NATIVE_FETCH) {
+        const controller = new AbortController();
+        let timeout;
+        const deadline = new Promise((_resolve, reject) => {
+            timeout = setTimeout(() => {
+                controller.abort();
+                reject(new Error("telemetry_http_timeout"));
+            }, resolveTelemetryHttpTimeoutMs());
+        });
+        try {
+            const response = await Promise.race([
+                globalThis.fetch(endpoint, {
+                    method: "POST",
+                    headers,
+                    body,
+                    signal: controller.signal,
+                }),
+                deadline,
+            ]);
+            return response.status;
+        }
+        finally {
+            clearTimeout(timeout);
+        }
+    }
+    const request = url.protocol === "https:"
+        ? httpsRequest
+        : url.protocol === "http:"
+            ? httpRequest
+            : undefined;
+    if (!request) {
+        throw new Error(`telemetry_http_protocol_unsupported_${url.protocol}`);
+    }
+    return new Promise((resolve, reject) => {
+        const timeoutMs = resolveTelemetryHttpTimeoutMs();
+        const requestOptions = {
+            method: "POST",
+            headers: {
+                ...headers,
+                "content-length": Buffer.byteLength(body),
+            },
+            signal: AbortSignal.timeout(timeoutMs),
+            autoSelectFamilyAttemptTimeout: Math.min(5_000, timeoutMs),
+        };
+        const clientRequest = request(url, requestOptions, (response) => {
+            response.once("error", reject);
+            // Client responses always carry an HTTP status code; Node's shared
+            // IncomingMessage type is also used for server requests where it is absent.
+            response.once("end", () => resolve(response.statusCode));
+            response.resume();
+        });
+        clientRequest.once("error", reject);
+        clientRequest.end(body);
+    });
+}
 function normalizePmVersion(value) {
     const trimmed = typeof value === "string" ? value.trim() : "";
     return trimmed.length > 0 ? trimmed : "0.0.0";
@@ -1214,14 +1293,9 @@ async function flushPendingOtelSpans(globalPmRoot, retentionDays) {
     // and safe under Node's single-threaded event loop.
     await Promise.all(due.map(async (span) => {
         try {
-            const response = await fetch(span.endpoint, {
-                method: "POST",
-                headers: { "content-type": "application/json" },
-                body: JSON.stringify(span.payload),
-                signal: AbortSignal.timeout(TELEMETRY_HTTP_TIMEOUT_MS),
-            });
-            if (!response.ok) {
-                throw new Error(`local_otel_export_http_${response.status}`);
+            const status = await postTelemetryJson(span.endpoint, { "content-type": "application/json" }, JSON.stringify(span.payload));
+            if (status < 200 || status >= 300) {
+                throw new Error(`local_otel_export_http_${status}`);
             }
             succeededIds.add(span.id);
             succeededCount += 1;
@@ -1398,17 +1472,12 @@ async function flushQueue(globalPmRoot, endpoint, retentionDays) {
         requestHeaders["x-pm-telemetry-key"] = ingestKey;
     }
     try {
-        const response = await fetch(normalizedEndpoint, {
-            method: "POST",
-            headers: requestHeaders,
-            body: JSON.stringify({
-                schema_version: TELEMETRY_SCHEMA_VERSION,
-                events: dueEntries.map((entry) => entry.event),
-            }),
-            signal: AbortSignal.timeout(TELEMETRY_HTTP_TIMEOUT_MS),
-        });
-        if (!response.ok) {
-            throw new Error(`telemetry_flush_http_${response.status}`);
+        const status = await postTelemetryJson(normalizedEndpoint, requestHeaders, JSON.stringify({
+            schema_version: TELEMETRY_SCHEMA_VERSION,
+            events: dueEntries.map((entry) => entry.event),
+        }));
+        if (status < 200 || status >= 300) {
+            throw new Error(`telemetry_flush_http_${status}`);
         }
     }
     catch (error) {
@@ -1519,7 +1588,7 @@ function createDirectoryLock(lockPath) {
         if (code === "EEXIST") {
             return false;
         }
-        if (code !== "ENOENT") {
+        if (!isFileMissingError(error)) {
             return false;
         }
     }
@@ -1547,7 +1616,7 @@ function acquireTelemetryFlushSpawnGate(globalPmRoot) {
         removeDirectoryLockBestEffort(lockPath);
     }
     catch (error) {
-        if (errorCode(error) !== "ENOENT") {
+        if (!isFileMissingError(error)) {
             return false;
         }
     }
@@ -1586,11 +1655,13 @@ export const _testOnly = {
     looksLikeEmailToken,
     otelSpansQueuePath,
     parseBooleanTrueLike,
+    postTelemetryJson,
     parsePendingOtelSpanLines,
     prunePendingOtelSpans,
     reconcilePendingOtelSpansAfterFlush,
     retentionCutoffMs,
     resolveOtelTracesEndpoint,
+    resolveTelemetryHttpTimeoutMs,
     rewritePendingOtelSpans,
     normalizeForHash,
     normalizeCaptureLevel,
@@ -1915,4 +1986,4 @@ export async function emitTelemetryErrorEvent(context) {
     }
 }
 //# sourceMappingURL=runtime.js.map
-//# debugId=fea9d81b-3deb-51f4-9ec3-76396ae1307d
+//# debugId=26ea62d9-874d-5826-9822-83c5523b673b

package/dist/sdk/agent/command-recovery.d.ts

@@ -1,3 +1,5 @@
+/** Resolve a recovery command without interpreting global option values as command tokens. */
+export declare function resolveRecoveryCommandName(invocationArgv: string[] | undefined): string | undefined;
 /** Resolve the truthful placeholder for a missing flag from its contract. */
 export declare function resolveMissingOptionPlaceholder(commandName: string, missingLabel: string): string | null | undefined;
 /** Preserve an attempted argv vector and insert each missing option before `--`. */

package/dist/sdk/agent/command-recovery.js

@@ -6,13 +6,21 @@
  * supplied arguments are preserved byte-for-token.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="ab87f46c-c9b4-51d1-a712-fbce7c79fca9")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="4973a995-60f0-5990-9927-371dc6716063")}catch(e){}}();
 import { renderPmCommand } from "../command-line.js";
 import { resolveSubcommandFlagContractsForCommand } from "../cli-contracts.js";
+import { parseBootstrapCommandName } from "../cli-bootstrap.js";
 function normalizeMissingFlag(label) {
     const match = label.trim().match(/--[a-z0-9][a-z0-9_-]*/i);
     return match?.[0]?.replaceAll("_", "-").toLowerCase();
 }
+/** Resolve a recovery command without interpreting global option values as command tokens. */
+export function resolveRecoveryCommandName(invocationArgv) {
+    if (!Array.isArray(invocationArgv) || invocationArgv.length === 0) {
+        return undefined;
+    }
+    return parseBootstrapCommandName(invocationArgv);
+}
 /** Resolve the truthful placeholder for a missing flag from its contract. */
 export function resolveMissingOptionPlaceholder(commandName, missingLabel) {
     const flag = normalizeMissingFlag(missingLabel);
@@ -49,4 +57,4 @@ export function renderMissingOptionRetry(invocationArgv, commandName, missingLab
         : renderPmCommand(retry);
 }
 //# sourceMappingURL=command-recovery.js.map
-//# debugId=ab87f46c-c9b4-51d1-a712-fbce7c79fca9
+//# debugId=4973a995-60f0-5990-9927-371dc6716063

package/dist/sdk/annotations.js

@@ -4,9 +4,9 @@
  * Implements the pm annotation command command surface and its agent-facing runtime behavior.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="13cf8bd9-0aee-5838-a6eb-de9f87ddfac7")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="0af9967c-ca72-563a-9518-2e68da0c0fe0")}catch(e){}}();
 import { readFile } from "node:fs/promises";
-import { pathExists } from "../core/fs/fs-utils.js";
+import { isFileAbsentError, pathExists } from "../core/fs/fs-utils.js";
 import { getActiveExtensionRegistrations } from "../core/extensions/index.js";
 import { resolveItemTypeRegistry } from "../core/item/type-registry.js";
 import { createStdinTokenResolver, parseCsvKv } from "../core/item/parse.js";
@@ -114,7 +114,7 @@ async function resolveAnnotationTextSource(options, noun) {
         return { value: await readFile(filePath, "utf8"), emptyFlag: "--file" };
     }
     catch (error) {
-        if (isErrnoError(error) && error.code === "ENOENT") {
+        if (isErrnoError(error) && isFileAbsentError(error)) {
             throw new PmCliError(`--file path not found: ${filePath}`, EXIT_CODE.USAGE);
         }
         const detail = error instanceof Error ? error.message : String(error);
@@ -399,4 +399,4 @@ function renderAnnotationResult(id, collectionKey, allEntries, limit, includeMet
     };
 }
 //# sourceMappingURL=annotations.js.map
-//# debugId=13cf8bd9-0aee-5838-a6eb-de9f87ddfac7
+//# debugId=0af9967c-ca72-563a-9518-2e68da0c0fe0

package/dist/sdk/cli-contracts/completeness.js

@@ -7,7 +7,7 @@
  * a hand-picked test list.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="13847453-3016-5855-a816-2cadc2ca4870")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="cf238c71-1626-5e48-9207-7acf22c0d680")}catch(e){}}();
 import { PM_TOOL_ACTIONS } from "./enum-contracts.js";
 import { resolveSubcommandFlagContractsForCommand, } from "./flag-contracts.js";
 import { pmToolActionParameterKeys } from "./tool-schema.js";
@@ -80,6 +80,7 @@ const ACTION_POSITIONAL_PARAMETERS = {
     assurance: {
         id: "<id>",
         kind: "<kind>",
+        preset: "[kind]|[id]",
         subcommand: "<action>",
     },
     event: { title: "<title>" },
@@ -95,7 +96,12 @@ const ACTION_POSITIONAL_PARAMETERS = {
     },
 };
 const ACTION_FLAG_PARAMETER_OVERRIDES = {
-    assurance: { "--tree": "treeId" },
+    assurance: {
+        "--tree": "treeId",
+        "--owner": "owner",
+        "--apply": "apply",
+        "--enforcement": "enforcement",
+    },
     init: {
         "--id-prefix": "idPrefix",
         "--no-merge-fence": "mergeFence",
@@ -377,4 +383,4 @@ export function analyzeSdkCliParameterCompleteness(source = {}) {
     });
 }
 //# sourceMappingURL=completeness.js.map
-//# debugId=13847453-3016-5855-a816-2cadc2ca4870
+//# debugId=cf238c71-1626-5e48-9207-7acf22c0d680

package/dist/sdk/cli-contracts/enum-contracts.d.ts

@@ -19,7 +19,7 @@ export declare const PM_EXTENSION_SANDBOX_PROFILE_CONTRACTS: readonly ["none", "
 /** Restricts pm extension sandbox profile contract values accepted by command, SDK, and storage contracts. */
 export type PmExtensionSandboxProfileContract = (typeof PM_EXTENSION_SANDBOX_PROFILE_CONTRACTS)[number];
 /** Public contract for pm extension policy surface contracts, shared by SDK and presentation-layer consumers. */
-export declare const PM_EXTENSION_POLICY_SURFACE_CONTRACTS: readonly ["commands.override", "commands.handler", "hooks.beforecommand", "hooks.beforemutation", "hooks.aftercommand", "hooks.onwrite", "hooks.onread", "hooks.onindex", "schema.flags", "schema.itemfields", "schema.itemtypes", "schema.relationshipkinds", "schema.migrations", "schema.profiles", "parser.override", "preflight.override", "services.override", "renderers.override", "importers.importer", "importers.exporter", "search.provider", "search.vectorstore"];
+export declare const PM_EXTENSION_POLICY_SURFACE_CONTRACTS: readonly ["commands.override", "commands.handler", "hooks.beforecommand", "hooks.beforemutation", "hooks.aftercommand", "hooks.onwrite", "hooks.onread", "hooks.onindex", "schema.flags", "schema.itemfields", "schema.itemtypes", "schema.relationshipkinds", "schema.migrations", "schema.profiles", "parser.override", "preflight.override", "services.override", "renderers.override", "importers.importer", "importers.exporter", "search.provider", "search.vectorstore", "services.assuranceprovider"];
 /** Restricts pm extension policy surface contract values accepted by command, SDK, and storage contracts. */
 export type PmExtensionPolicySurfaceContract = (typeof PM_EXTENSION_POLICY_SURFACE_CONTRACTS)[number];
 /** Public contract for pm core command names, shared by SDK and presentation-layer consumers. */

package/dist/sdk/cli-contracts/flag-contracts.js

@@ -7,7 +7,7 @@
  * flag surface stays single-sourced across the CLI, SDK, and MCP boundaries.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="40309a44-7d45-5333-9003-6fc740e827c8")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="a5a2c81f-8870-5111-b13c-74c362098d54")}catch(e){}}();
 import { normalizeUniqueStringList } from "./string-lists.js";
 import { RESERVED_EXTENSION_HOST_FLAGS } from "../../core/extensions/reserved-host-flags.js";
 function normalizeFlagAliasKey(flag) {
@@ -392,7 +392,7 @@ export const SCHEMA_FLAG_CONTRACTS = [
     // add-type --infer flags (title-prefix type inference).
     { flag: "--infer" },
     { flag: "--min-count" },
-    { flag: "--apply" },
+    { flag: "--apply", value_type: "boolean" },
     // Lossless schema evolution flags.
     { flag: "--to" },
     { flag: "--migration-id", aliases: ["--migration_id"] },
@@ -1018,6 +1018,9 @@ export const ASSURANCE_FLAG_CONTRACTS = [
     { flag: "--dry-run" },
     { flag: "--author", value_name: "value" },
     { flag: "--message", value_name: "value" },
+    { flag: "--owner", value_name: "item-id" },
+    { flag: "--apply", value_type: "boolean" },
+    { flag: "--enforcement", value_name: "level" },
 ];
 const ITEM_OWNERSHIP_AND_ISSUE_FLAG_CONTRACTS = [
     { flag: "--assignee" },
@@ -1814,4 +1817,4 @@ export function toCompletionFlagString(flagContracts, includeGlobal = true) {
     return normalizeUniqueStringList(all).join(" ");
 }
 //# sourceMappingURL=flag-contracts.js.map
-//# debugId=40309a44-7d45-5333-9003-6fc740e827c8
+//# debugId=a5a2c81f-8870-5111-b13c-74c362098d54

package/dist/sdk/cli-contracts/runtime-contracts.d.ts

@@ -231,8 +231,13 @@ interface CommandSummarySurface {
     command: string;
     aliases?: string[];
     intent: string;
+    intent_source: "command" | "description" | "generated";
     flags?: string[];
     default_max_estimated_tokens: number;
+    default_max_estimated_tokens_by_format: {
+        toon: number;
+        json: number;
+    };
 }
 declare function packageOwnedActionForCommand(command: string): string;
 declare function resolveActionCommandPath(action: PmToolAction): string | null;
@@ -275,7 +280,7 @@ declare function toRuntimeShortFlagToken(token: string): string | null;
 declare function buildRuntimeFieldFlagContracts(fieldRegistry: RuntimeFieldRegistry): Map<string, CliFlagContract[]>;
 declare function attachCreateRequiredOptionContracts(schema: Record<string, unknown>, metadata: Record<string, unknown>): Record<string, unknown>;
 declare function readContractsSettings(pmRoot: string, readSettingsFn?: typeof readSettings): Promise<Awaited<ReturnType<typeof readSettings>>>;
-declare function buildCommandSummarySurface(commands: readonly string[]): CommandSummarySurface[];
+declare function buildCommandSummarySurface(commands: readonly string[], extensionContracts?: readonly ExtensionCommandContract[]): CommandSummarySurface[];
 declare function buildCommandOutputContracts(commands: readonly string[]): NonNullable<ContractsResult["command_output_contracts"]>;
 declare function buildCommandExitContractGroups(commands: readonly string[]): NonNullable<ContractsResult["command_exit_contracts"]>["command_sets"];
 /** Implements run contracts for the public runtime surface of this module. */