@unbrained/pm-cli 2026.8.12 → 2026.8.14

package/dist/sdk/compose.js

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="142a413a-35a6-5861-9063-0c196a176eaa")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="fb438c6a-1927-54c3-98dd-dd7423df6722")}catch(e){}}();
 import { normalizeKnownExtensionCapability, resolveLegacyExtensionCapabilityAlias, } from "../core/extensions/extension-capability-aliases.js";
 import { normalizeCommandName } from "../core/extensions/extension-runtime-helpers.js";
 import { RESERVED_ITEM_FIELD_NAMES } from "../core/extensions/item-fields.js";
@@ -100,6 +100,9 @@ function registerBlueprintRetrievalSurfaces(api, blueprint) {
     for (const adapter of blueprint.vectorStoreAdapters ?? []) {
         api.registerVectorStoreAdapter(adapter);
     }
+    for (const provider of blueprint.assuranceProviders ?? []) {
+        api.registerAssuranceMeasurementProvider(provider);
+    }
     for (const entry of blueprint.importers ?? []) {
         api.registerImporter(entry.name, entry.importer, entry.options);
     }
@@ -281,6 +284,7 @@ export function mergeExtensionBlueprints(...blueprints) {
     assign("profiles", mergeArraySurface(blueprints.map((blueprint) => blueprint.profiles)));
     assign("searchProviders", mergeArraySurface(blueprints.map((blueprint) => blueprint.searchProviders)));
     assign("vectorStoreAdapters", mergeArraySurface(blueprints.map((blueprint) => blueprint.vectorStoreAdapters)));
+    assign("assuranceProviders", mergeArraySurface(blueprints.map((blueprint) => blueprint.assuranceProviders)));
     assign("importers", mergeArraySurface(blueprints.map((blueprint) => blueprint.importers)));
     assign("exporters", mergeArraySurface(blueprints.map((blueprint) => blueprint.exporters)));
     assign("hooks", mergeHookSurfaces(blueprints.map((blueprint) => blueprint.hooks)));
@@ -357,6 +361,7 @@ const BLUEPRINT_FIELD_CAPABILITIES = [
     ["preflights", "preflight"],
     ["searchProviders", "search"],
     ["vectorStoreAdapters", "search"],
+    ["assuranceProviders", "services"],
     ["importers", "importers"],
     ["exporters", "importers"],
 ];
@@ -509,6 +514,13 @@ function collectBlueprintRendererOwnership(renderers) {
         .sort((left, right) => left.format.localeCompare(right.format));
     return ownership.length > 0 ? { renderer_ownership: ownership } : {};
 }
+function collectBlueprintAssuranceProviders(providers) {
+    if (!providers || providers.length === 0)
+        return {};
+    return {
+        assurance_providers: sortUnique(providers.map((provider) => provider.id)),
+    };
+}
 function collectBlueprintSurfaceSummary(blueprint, importers, exporters) {
     return {
         item_types: sortUnique((blueprint.itemTypes ?? []).map((type) => type.name)),
@@ -526,6 +538,7 @@ function collectBlueprintSurfaceSummary(blueprint, importers, exporters) {
         exporters: sortUnique(exporters.map((entry) => normalizeCommandName(entry.name))),
         search_providers: sortUnique((blueprint.searchProviders ?? []).map((provider) => provider.name)),
         vector_store_adapters: sortUnique((blueprint.vectorStoreAdapters ?? []).map((adapter) => adapter.name)),
+        ...collectBlueprintAssuranceProviders(blueprint.assuranceProviders),
         parser_overrides: sortUnique(Object.keys(blueprint.parsers ?? {}).map((command) => normalizeCommandName(command))),
         service_overrides: sortUnique(Object.keys(blueprint.services ?? {}).map((service) => String(service).trim().toLowerCase())),
         renderer_overrides: sortUnique(Object.keys(blueprint.renderers ?? {}).map((format) => String(format).trim().toLowerCase())),
@@ -612,6 +625,7 @@ const BLUEPRINT_LINTABLE_SURFACE_FIELDS = [
     "profiles",
     "searchProviders",
     "vectorStoreAdapters",
+    "assuranceProviders",
     "importers",
     "exporters",
 ];
@@ -1057,4 +1071,4 @@ export function preflightExtension(blueprint, options = {}) {
     };
 }
 //# sourceMappingURL=compose.js.map
-//# debugId=142a413a-35a6-5861-9063-0c196a176eaa
+//# debugId=fb438c6a-1927-54c3-98dd-dd7423df6722

package/dist/sdk/context-relevance.js

@@ -6,7 +6,7 @@
  * with core, extension, or project-specific feature stores.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="1f898377-b606-5bfd-932d-6ce5f2f9c717")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="7eefe5f0-364d-559a-b365-0e7d539ee19e")}catch(e){}}();
 import { runActiveServiceOverride } from "../core/extensions/index.js";
 import { normalizeStatusForRegistry, normalizeStatusInput, } from "../core/item/status.js";
 import { compareTimestampStrings, resolveIsoOrRelative } from "../core/shared/time.js";
@@ -364,8 +364,16 @@ export async function runContextEvaluationScenario(scenario, reader) {
         throw new TypeError("Context evaluation scenarios require non-empty id and rationale values");
     }
     const result = scenario.surface === "context"
-        ? await reader.context({ ...scenario.options, explainRanking: true })
-        : await reader.next({ ...scenario.options, explainRanking: true });
+        ? await reader.context({
+            ...scenario.options,
+            explainRanking: true,
+            outputBudget: "unbounded",
+        })
+        : await reader.next({
+            ...scenario.options,
+            explainRanking: true,
+            outputBudget: "unbounded",
+        });
     const { rankedIds, attribution } = rankingPayloadForScenario(result, scenario.surface);
     const packet = { ...result, ranking: undefined };
     const actualTokens = estimateJsonTokens(packet);
@@ -422,4 +430,4 @@ export async function runContextEvaluationCorpus(scenarios, reader, thresholds)
     return summarizeContextEvaluationReports(reports, thresholds);
 }
 //# sourceMappingURL=context-relevance.js.map
-//# debugId=1f898377-b606-5bfd-932d-6ce5f2f9c717
+//# debugId=7eefe5f0-364d-559a-b365-0e7d539ee19e

package/dist/sdk/context-signal-store.js

@@ -6,7 +6,8 @@
  * history, while stale, absent, or corrupt snapshots rebuild transparently.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="2a0f64cf-f6a4-5304-921d-c83b98d3a31f")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="3d0a558b-6a01-5bca-a2f7-21766be6d67c")}catch(e){}}();
+import { isFileAbsentError } from "../core/fs/fs-utils.js";
 import fs from "node:fs/promises";
 import path from "node:path";
 import { createHash, randomUUID } from "node:crypto";
@@ -187,7 +188,7 @@ export class JsonFileContextSignalStoreAdapter {
             return JSON.parse(await fs.readFile(this.filePath, "utf8"));
         }
         catch (error) {
-            if (isRecord(error) && error.code === "ENOENT") {
+            if (isRecord(error) && isFileAbsentError(error)) {
                 return null;
             }
             throw error;
@@ -310,4 +311,4 @@ export async function readWorkspaceContextSignals(items, options) {
     return store.readOrRebuild(items, { ...options, sourceCursor, source });
 }
 //# sourceMappingURL=context-signal-store.js.map
-//# debugId=2a0f64cf-f6a4-5304-921d-c83b98d3a31f
+//# debugId=3d0a558b-6a01-5bca-a2f7-21766be6d67c

package/dist/sdk/extension/install-runtime.js

@@ -4,12 +4,12 @@
  * Provides cross-platform extension copy safety and owner-bound install locks.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="9c598dc3-e766-595d-80f1-6d55e1667d6b")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="263602a2-c000-5df7-80d2-6f095985496f")}catch(e){}}();
 import { randomUUID } from "node:crypto";
 import fs from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
-import { pathExists } from "../../core/fs/fs-utils.js";
+import { isFileAbsentError, pathExists } from "../../core/fs/fs-utils.js";
 import { isPathWithinDirectory } from "../../core/fs/path-utils.js";
 import { EXIT_CODE } from "../../core/shared/constants.js";
 import { PmCliError } from "../../core/shared/errors.js";
@@ -173,7 +173,7 @@ const readExtensionInstallLockOwnerToken = async (lockPath) => {
         ownerContents = await fs.readFile(path.join(lockPath, "owner.json"), "utf8");
     }
     catch (error) {
-        if (!isErrnoCode(error, "ENOENT"))
+        if (!isFileAbsentError(error))
             throw error;
         return null;
     }
@@ -308,4 +308,4 @@ export const withExtensionInstallLock = async (settingsRoot, destinationDirector
     }
 };
 //# sourceMappingURL=install-runtime.js.map
-//# debugId=9c598dc3-e766-595d-80f1-6d55e1667d6b
+//# debugId=263602a2-c000-5df7-80d2-6f095985496f

package/dist/sdk/extension/managed-state.js

@@ -4,7 +4,8 @@
  * Implements extension package-management support for Managed State.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="5d60cd29-09fb-515c-acaa-b5a2b136d8ab")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="159d7bbd-1d2a-503d-b3ce-f32dcc6f6547")}catch(e){}}();
+import { isFileMissingError } from "../../core/fs/fs-utils.js";
 import fs from "node:fs/promises";
 import path from "node:path";
 import { EXIT_CODE } from "../../core/shared/constants.js";
@@ -204,7 +205,7 @@ export async function readManagedExtensionState(extensionsRoot) {
         if (typeof error === "object" &&
             error !== null &&
             "code" in error &&
-            error.code === "ENOENT") {
+            isFileMissingError(error)) {
             return {
                 path: statePath,
                 state: fallback,
@@ -249,4 +250,4 @@ export async function persistManagedContributionInventory(extensionsRoot, state,
     return updated;
 }
 //# sourceMappingURL=managed-state.js.map
-//# debugId=5d60cd29-09fb-515c-acaa-b5a2b136d8ab
+//# debugId=159d7bbd-1d2a-503d-b3ce-f32dcc6f6547

package/dist/sdk/extension-contracts.d.ts

@@ -19,7 +19,7 @@ export type ExtensionCapability = (typeof EXTENSION_CAPABILITIES)[number];
 /** Canonical extension governance policy modes. */
 export declare const EXTENSION_POLICY_MODES: readonly ["off", "warn", "enforce"];
 /** Canonical extension registration surfaces governed by policy. */
-export declare const EXTENSION_POLICY_SURFACES: readonly ["commands.override", "commands.handler", "hooks.beforecommand", "hooks.beforemutation", "hooks.aftercommand", "hooks.onwrite", "hooks.onread", "hooks.onindex", "schema.flags", "schema.itemfields", "schema.itemtypes", "schema.relationshipkinds", "schema.migrations", "schema.profiles", "parser.override", "preflight.override", "services.override", "renderers.override", "importers.importer", "importers.exporter", "search.provider", "search.vectorstore"];
+export declare const EXTENSION_POLICY_SURFACES: readonly ["commands.override", "commands.handler", "hooks.beforecommand", "hooks.beforemutation", "hooks.aftercommand", "hooks.onwrite", "hooks.onread", "hooks.onindex", "schema.flags", "schema.itemfields", "schema.itemtypes", "schema.relationshipkinds", "schema.migrations", "schema.profiles", "parser.override", "preflight.override", "services.override", "renderers.override", "importers.importer", "importers.exporter", "search.provider", "search.vectorstore", "services.assuranceprovider"];
 /** Canonical extension trust modes shared by authoring and runtime consumers. */
 export declare const EXTENSION_TRUST_MODES: readonly ["off", "warn", "enforce"];
 /** Canonical extension sandbox profiles shared by authoring and runtime consumers. */

package/dist/sdk/flag-invocation-contracts.js

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="3b72f4a5-9e0b-5f8e-8ee9-e45cd83d6f92")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="0e2d29be-ff70-5e69-9bba-bef5ecd05fa1")}catch(e){}}();
 const FLAG_DESCRIPTIONS = Object.freeze({
     "--body": "Set the item body.",
     "--body-file": "Read the item body from a file.",
@@ -71,7 +71,8 @@ function flagTakesValue(contract) {
         contract.value_type === "number" ||
         contract.list === true ||
         contract.repeatable === true;
-    const inferredBoolean = contract.flag === "--stdin" ||
+    const inferredBoolean = contract.value_type === "boolean" ||
+        contract.flag === "--stdin" ||
         contract.flag === "--stdin-json" ||
         BOOLEAN_FLAG_PREFIXES.some((prefix) => contract.flag.startsWith(prefix));
     return explicitlyValued || !inferredBoolean;
@@ -88,9 +89,7 @@ export function enrichCliFlagInvocationContract(command, contract) {
         description,
         takes_value: takesValue,
         value_required: takesValue,
-        ...(takesValue
-            ? { value_name: contract.value_name ?? "value" }
-            : {}),
+        ...(takesValue ? { value_name: contract.value_name ?? "value" } : {}),
         value_type: takesValue ? (contract.value_type ?? "string") : "boolean",
         required: contract.required === true,
         repeatable: contract.repeatable === true || contract.list === true,
@@ -107,4 +106,4 @@ export function enrichCliFlagInvocationContracts(command, contracts) {
     return contracts.map((contract) => enrichCliFlagInvocationContract(command, contract));
 }
 //# sourceMappingURL=flag-invocation-contracts.js.map
-//# debugId=3b72f4a5-9e0b-5f8e-8ee9-e45cd83d6f92
+//# debugId=0e2d29be-ff70-5e69-9bba-bef5ecd05fa1

package/dist/sdk/generated/generated-error-code-catalog-part-1.js

@@ -1,6 +1,6 @@
 /** Generated partition 1 of the exhaustive error-code catalog. */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="1822a3b2-8164-56f7-96e3-d4c657f95fa6")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="92b7b390-4d50-5210-8209-9ade302498c2")}catch(e){}}();
 export const PM_ERROR_CODE_CATALOG_PART_1 = [
     {
         code: "acceptance_criteria_mutation_conflict",
@@ -1460,6 +1460,18 @@ export const PM_ERROR_CODE_CATALOG_PART_1 = [
         canonical_code: "likely_duplicate",
         aliases: [],
     },
+    {
+        code: "linked_artifact_mutation_conflict",
+        meaning: "Linked artifact mutation conflict condition.",
+        stability: "provisional",
+        exit_code: 2,
+        class: "usage",
+        recovery: "Inspect the structured error guidance and retry the suggested command.",
+        sources: ["sdk/linked-artifacts.ts"],
+        emitting_commands: ["*"],
+        canonical_code: "linked_artifact_mutation_conflict",
+        aliases: [],
+    },
     {
         code: "linked_test_remove_no_match",
         meaning: "Linked test remove no match condition.",
@@ -1582,4 +1594,4 @@ export const PM_ERROR_CODE_CATALOG_PART_1 = [
     },
 ];
 //# sourceMappingURL=generated-error-code-catalog-part-1.js.map
-//# debugId=1822a3b2-8164-56f7-96e3-d4c657f95fa6
+//# debugId=92b7b390-4d50-5210-8209-9ade302498c2

package/dist/sdk/governance/assurance-action.d.ts

@@ -4,9 +4,10 @@
  * Normalizes the assurance action vocabulary once for CLI, SDK, and MCP hosts.
  */
 import type { GlobalOptions } from "../../core/shared/command-types.js";
-import { type AssuranceDeclaration, type AssuranceGateVerdict, type AssuranceMutationReceipt } from "./assurance.js";
+import { type AssuranceBundleMutationReceipt, type AssuranceDeclaration, type AssuranceGateVerdict, type AssuranceMutationReceipt } from "./assurance.js";
+import { type AssuranceDerivedProposal, type AssurancePreset, type AssurancePresetId } from "./assurance-presets.js";
 /** Assurance registry and evaluation verbs shared by every transport. */
-export declare const ASSURANCE_ACTIONS: readonly ["list", "show", "put", "remove", "run", "verdicts"];
+export declare const ASSURANCE_ACTIONS: readonly ["list", "show", "put", "remove", "run", "verdicts", "presets", "apply", "derive", "promote"];
 /** Assurance declaration kinds shared by every transport. */
 export declare const ASSURANCE_DECLARATION_KINDS: readonly ["measurement", "assertion", "gate"];
 /** Assurance action verb. */
@@ -39,9 +40,32 @@ export interface AssuranceActionInput {
     author?: string;
     /** Audited mutation rationale. */
     message?: string;
+    /** Built-in preset selected for preview or application. */
+    preset?: string;
+    /** pm item that owns preset or derived assertions. */
+    owner?: string;
+    /** Explicitly accept derived proposals. */
+    apply?: boolean;
+    /** Explicit next assertion enforcement level. */
+    enforcement?: string;
 }
 /** Result union returned by transport-neutral assurance execution. */
-export type AssuranceActionResult = AssuranceDeclaration | AssuranceMutationReceipt | AssuranceGateVerdict | {
+export type AssuranceActionResult = AssuranceDeclaration | AssuranceMutationReceipt | AssuranceGateVerdict | AssuranceBundleMutationReceipt | AssurancePreset | {
+    items: AssuranceDerivedProposal[];
+    count: number;
+    applied?: AssuranceBundleMutationReceipt;
+} | {
+    items: Array<{
+        id: AssurancePresetId;
+        title: string;
+        description: string;
+    }>;
+    count: number;
+    row_contract: {
+        row_keys: ["items"];
+        jq_selector: ".items[]";
+    };
+} | {
     id: string;
 } | {
     /** Registry declarations. */

package/dist/sdk/governance/assurance-action.js

@@ -1,10 +1,11 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="d7b8bd03-cd67-5f3f-9ac9-74808a03c2c7")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="36dfa230-06bd-5902-a0c9-94a7c34cda90")}catch(e){}}();
 import { EXIT_CODE } from "../../core/shared/constants.js";
 import { PmCliError } from "../../core/shared/errors.js";
 import { ASSURANCE_GATE_TRIGGERS, evaluateAssuranceGate, getAssuranceDeclaration, listAssuranceDeclarations, listAssuranceVerdicts, putAssuranceDeclaration, recordAssuranceVerdict, removeAssuranceDeclaration, } from "./assurance.js";
+import { ASSURANCE_PRESET_IDS, acceptAssuranceProposals, applyAssurancePreset, createAssurancePreset, deriveAssuranceProposals, promoteAssuranceAssertion, } from "./assurance-presets.js";
 import { MAX_ASSURANCE_VERDICT_LIMIT } from "./assurance-limits.js";
-import { normalizeAssuranceMutation } from "./assurance-mutation-error.js";
+import { normalizeAssuranceEvaluation, normalizeAssuranceMutation, } from "./assurance-mutation-error.js";
 import { createAssuranceWorkspaceContext } from "./assurance-runtime.js";
 import { resolvePmRoot } from "../runtime-primitives.js";
 import { parseRuntimeInteger, readRuntimeString } from "../runtime-input.js";
@@ -16,6 +17,10 @@ export const ASSURANCE_ACTIONS = [
     "remove",
     "run",
     "verdicts",
+    "presets",
+    "apply",
+    "derive",
+    "promote",
 ];
 /** Assurance declaration kinds shared by every transport. */
 export const ASSURANCE_DECLARATION_KINDS = [
@@ -36,6 +41,17 @@ function parseKind(value) {
     }
     throw new PmCliError(`Assurance declaration kind is required. Expected: ${ASSURANCE_DECLARATION_KINDS.join(", ")}`, EXIT_CODE.USAGE);
 }
+function parsePreset(value) {
+    if (value && ASSURANCE_PRESET_IDS.includes(value)) {
+        return value;
+    }
+    throw new PmCliError(`Assurance preset is required. Expected: ${ASSURANCE_PRESET_IDS.join(", ")}`, EXIT_CODE.USAGE);
+}
+function requireOwner(input) {
+    if (input.owner?.trim())
+        return input.owner.trim();
+    throw new PmCliError("assurance preset and derivation actions require --owner <pm-item-id>", EXIT_CODE.USAGE);
+}
 function parseDefinition(kind, value) {
     let parsed = value;
     if (typeof value === "string") {
@@ -110,38 +126,99 @@ async function runVerdictsAction(input, pmRoot) {
         row_contract: { row_keys: ["items"], jq_selector: ".items[]" },
     };
 }
+async function runAdoptionAction(action, input, pmRoot) {
+    if (action === "presets") {
+        if (input.preset ?? input.id) {
+            return createAssurancePreset(parsePreset(input.preset ?? input.id), requireOwner(input));
+        }
+        const items = ASSURANCE_PRESET_IDS.map((id) => {
+            const preset = createAssurancePreset(id, "pm-owner");
+            return { id, title: preset.title, description: preset.description };
+        });
+        return {
+            items,
+            count: items.length,
+            row_contract: { row_keys: ["items"], jq_selector: ".items[]" },
+        };
+    }
+    if (action === "apply") {
+        return normalizeAssuranceMutation(() => applyAssurancePreset(pmRoot, parsePreset(input.preset ?? input.id), requireOwner(input), { author: input.author, message: input.message }));
+    }
+    if (action === "derive") {
+        const proposals = await deriveAssuranceProposals(await createAssuranceWorkspaceContext(pmRoot, {
+            resolve_tree: false,
+            trigger: "derive",
+        }), requireOwner(input));
+        const applied = input.apply
+            ? await normalizeAssuranceMutation(() => acceptAssuranceProposals(pmRoot, proposals, {
+                author: input.author,
+                message: input.message ?? "Accept observation-derived assurance proposals",
+            }))
+            : undefined;
+        return {
+            items: proposals,
+            count: proposals.length,
+            ...(applied ? { applied } : {}),
+        };
+    }
+    if (!input.id) {
+        throw new PmCliError("assurance promote requires an assertion id", EXIT_CODE.USAGE);
+    }
+    if (input.enforcement !== "warn" && input.enforcement !== "block") {
+        throw new PmCliError("assurance promote requires --enforcement warn|block", EXIT_CODE.USAGE);
+    }
+    const definition = (await getAssuranceDeclaration(pmRoot, "assertion", input.id));
+    return normalizeAssuranceMutation(() => promoteAssuranceAssertion(pmRoot, definition, input.enforcement, {
+        author: input.author,
+        message: input.message,
+    }));
+}
+async function runGateAction(input, pmRoot) {
+    if (!input.id) {
+        throw new PmCliError("assurance run requires a gate id", EXIT_CODE.USAGE);
+    }
+    const gateId = input.id;
+    if (!input.trigger) {
+        throw new PmCliError("assurance run requires a trigger", EXIT_CODE.USAGE);
+    }
+    if (!ASSURANCE_GATE_TRIGGERS.includes(input.trigger)) {
+        throw new PmCliError(`Unknown assurance trigger ${input.trigger}. Expected: ${ASSURANCE_GATE_TRIGGERS.join(", ")}`, EXIT_CODE.USAGE);
+    }
+    const trigger = input.trigger;
+    const [document, workspaceContext] = await Promise.all([
+        readDocument(pmRoot),
+        createAssuranceWorkspaceContext(pmRoot, {
+            tree_id: input.tree,
+            trigger,
+        }),
+    ]);
+    const verdict = await normalizeAssuranceEvaluation(() => evaluateAssuranceGate(gateId, document, workspaceContext, {
+        trigger,
+        dry_run: input.dry_run === true,
+    }));
+    if (!verdict.dry_run) {
+        await recordAssuranceVerdict(pmRoot, verdict, {
+            author: input.author,
+            message: input.message,
+        });
+    }
+    return verdict;
+}
 /** Execute one assurance request through the public assurance SDK primitives. */
 export async function runAssuranceAction(input, global = {}) {
     const action = parseAction(input.action);
     const pmRoot = resolvePmRoot(process.cwd(), global.path);
+    if (action === "presets" ||
+        action === "apply" ||
+        action === "derive" ||
+        action === "promote") {
+        return runAdoptionAction(action, input, pmRoot);
+    }
     if (action === "verdicts") {
         return runVerdictsAction(input, pmRoot);
     }
     if (action === "run") {
-        if (!input.id) {
-            throw new PmCliError("assurance run requires a gate id", EXIT_CODE.USAGE);
-        }
-        if (!input.trigger) {
-            throw new PmCliError("assurance run requires a trigger", EXIT_CODE.USAGE);
-        }
-        if (!ASSURANCE_GATE_TRIGGERS.includes(input.trigger)) {
-            throw new PmCliError(`Unknown assurance trigger ${input.trigger}. Expected: ${ASSURANCE_GATE_TRIGGERS.join(", ")}`, EXIT_CODE.USAGE);
-        }
-        const [document, workspaceContext] = await Promise.all([
-            readDocument(pmRoot),
-            createAssuranceWorkspaceContext(pmRoot, { tree_id: input.tree }),
-        ]);
-        const verdict = await evaluateAssuranceGate(input.id, document, workspaceContext, {
-            trigger: input.trigger,
-            dry_run: input.dry_run === true,
-        });
-        if (!verdict.dry_run) {
-            await recordAssuranceVerdict(pmRoot, verdict, {
-                author: input.author,
-                message: input.message,
-            });
-        }
-        return verdict;
+        return runGateAction(input, pmRoot);
     }
     const kind = parseKind(input.kind);
     if (action === "list")
@@ -154,7 +231,10 @@ export async function runAssuranceAction(input, global = {}) {
         return getAssuranceDeclaration(pmRoot, kind, id);
     }
     if (action === "remove") {
-        const receipt = await normalizeAssuranceMutation(() => removeAssuranceDeclaration(pmRoot, kind, id, { author: input.author, message: input.message }));
+        const receipt = await normalizeAssuranceMutation(() => removeAssuranceDeclaration(pmRoot, kind, id, {
+            author: input.author,
+            message: input.message,
+        }));
         return projectMutationReceipt(receipt, input.idOnly);
     }
     const definition = parseDefinition(kind, input.definition);
@@ -194,7 +274,11 @@ export function runAssuranceDispatch(args, options, global) {
         idOnly: merged.idOnly === true,
         author: readRuntimeString(merged, "author"),
         message: readRuntimeString(merged, "message"),
+        preset: readRuntimeString(merged, "preset"),
+        owner: readRuntimeString(merged, "owner"),
+        apply: merged.apply === true,
+        enforcement: readRuntimeString(merged, "enforcement"),
     }, global);
 }
 //# sourceMappingURL=assurance-action.js.map
-//# debugId=d7b8bd03-cd67-5f3f-9ac9-74808a03c2c7
+//# debugId=36dfa230-06bd-5902-a0c9-94a7c34cda90

package/dist/sdk/governance/assurance-mutation-error.d.ts

@@ -3,5 +3,12 @@ export declare class AssuranceMutationRefusalError extends TypeError {
     /** Create one typed refusal while retaining TypeError compatibility for SDK callers. */
     constructor(message: string);
 }
+/** Expected gate-policy refusal caused by an incomplete or disallowed provider contract. */
+export declare class AssuranceEvaluationRefusalError extends TypeError {
+    /** Create one typed refusal while retaining TypeError compatibility for SDK callers. */
+    constructor(message: string);
+}
 /** Normalize only expected assurance mutation refusals for CLI and MCP hosts. */
 export declare function normalizeAssuranceMutation<T>(operation: () => Promise<T>): Promise<T>;
+/** Normalize only expected assurance evaluation-policy refusals for transport hosts. */
+export declare function normalizeAssuranceEvaluation<T>(operation: () => Promise<T>): Promise<T>;

package/dist/sdk/governance/assurance-mutation-error.js

@@ -5,7 +5,7 @@
  * faults before transport layers normalize them into stable usage errors.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="255eee6e-f6bb-5fd2-8a73-545e672d205d")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="93a32771-bf95-5df4-8019-b6be45a5051b")}catch(e){}}();
 import { EXIT_CODE } from "../../core/shared/constants.js";
 import { PmCliError } from "../../core/shared/errors.js";
 /** Expected declaration-validation or mutation-policy refusal. */
@@ -16,6 +16,14 @@ export class AssuranceMutationRefusalError extends TypeError {
         this.name = "AssuranceMutationRefusalError";
     }
 }
+/** Expected gate-policy refusal caused by an incomplete or disallowed provider contract. */
+export class AssuranceEvaluationRefusalError extends TypeError {
+    /** Create one typed refusal while retaining TypeError compatibility for SDK callers. */
+    constructor(message) {
+        super(message);
+        this.name = "AssuranceEvaluationRefusalError";
+    }
+}
 /** Normalize only expected assurance mutation refusals for CLI and MCP hosts. */
 export async function normalizeAssuranceMutation(operation) {
     try {
@@ -31,5 +39,20 @@ export async function normalizeAssuranceMutation(operation) {
         throw error;
     }
 }
+/** Normalize only expected assurance evaluation-policy refusals for transport hosts. */
+export async function normalizeAssuranceEvaluation(operation) {
+    try {
+        return await operation();
+    }
+    catch (error) {
+        if (error instanceof AssuranceEvaluationRefusalError) {
+            throw new PmCliError(error.message, EXIT_CODE.USAGE, {
+                code: "invalid_argument_value",
+                reason: "assurance_evaluation_refused",
+            });
+        }
+        throw error;
+    }
+}
 //# sourceMappingURL=assurance-mutation-error.js.map
-//# debugId=255eee6e-f6bb-5fd2-8a73-545e672d205d
+//# debugId=93a32771-bf95-5df4-8019-b6be45a5051b

package/dist/sdk/governance/assurance-presets.d.ts

@@ -0,0 +1,54 @@
+/**
+ * @module sdk/governance/assurance-presets
+ *
+ * Supplies readable assurance starter bundles and observation-derived proposals
+ * without introducing privileged evaluation semantics.
+ */
+import { putAssuranceDeclaration, type AssuranceAssertionDefinition, type AssuranceBundleMutationReceipt, type AssuranceDeclarationBundle, type AssuranceEnforcement, type AssuranceEvaluationContext, type AssuranceScope } from "./assurance.js";
+/** Built-in project shapes that can acquire a quality contract in one command. */
+export declare const ASSURANCE_PRESET_IDS: readonly ["software-delivery", "research", "agent-evaluation", "operations"];
+/** Stable built-in assurance preset id. */
+export type AssurancePresetId = (typeof ASSURANCE_PRESET_IDS)[number];
+/** Readable preset bundle before or after application. */
+export interface AssurancePreset {
+    /** Stable preset id. */
+    id: AssurancePresetId;
+    /** Human-readable project shape. */
+    title: string;
+    /** Why the initial contract is useful. */
+    description: string;
+    /** Ordinary declarations that become editable workspace data. */
+    declarations: AssuranceDeclarationBundle;
+}
+/** One observe-level candidate produced from authoritative workspace state. */
+export interface AssuranceDerivedProposal {
+    /** Stable proposal id. */
+    id: string;
+    /** Population used to calculate the proposed threshold. */
+    population_size: number;
+    /** Scope applied while measuring. */
+    scope: AssuranceScope;
+    /** Observed value proposed as the initial ceiling. */
+    observed: number;
+    /** Ordinary declarations created only after explicit acceptance. */
+    declarations: AssuranceDeclarationBundle;
+}
+/** Materialize one built-in preset as ordinary declarations owned by a pm item. */
+export declare function createAssurancePreset(id: AssurancePresetId, ownerItemId: string): AssurancePreset;
+/** Apply one preset atomically; a second identical application is idempotent. */
+export declare function applyAssurancePreset(pmRoot: string, id: AssurancePresetId, ownerItemId: string, options?: {
+    author?: string;
+    message?: string;
+}): Promise<AssuranceBundleMutationReceipt>;
+/** Propose active-scope evidence ceilings from the record without persisting them. */
+export declare function deriveAssuranceProposals(context: AssuranceEvaluationContext, ownerItemId: string): Promise<AssuranceDerivedProposal[]>;
+/** Accept all derived proposals in one audited registry transaction. */
+export declare function acceptAssuranceProposals(pmRoot: string, proposals: readonly AssuranceDerivedProposal[], options?: {
+    author?: string;
+    message?: string;
+}): Promise<AssuranceBundleMutationReceipt>;
+/** Promote one assertion by exactly one enforcement level and audit the transition. */
+export declare function promoteAssuranceAssertion(pmRoot: string, definition: AssuranceAssertionDefinition, enforcement: Exclude<AssuranceEnforcement, "observe">, options?: {
+    author?: string;
+    message?: string;
+}): Promise<Awaited<ReturnType<typeof putAssuranceDeclaration>>>;