@unbrained/pm-cli 2026.8.14 → 2026.8.15

package/dist/core/history/replay.js

@@ -4,7 +4,7 @@
  * Implements append-only history and replay behavior for Replay.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="a1283470-00c7-5e91-8676-e1c1a667537f")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="0c37a722-fda7-523e-991c-f8abfb7a1495")}catch(e){}}();
 import jsonPatch from "fast-json-patch";
 import { ITEM_METADATA_KEY_ORDER } from "../shared/constants.js";
 import { canonicalDocument } from "../item/item-format.js";
@@ -219,8 +219,35 @@ export function lenientApplyReplayPatch(current, patch) {
     };
     return { document, convertedReplaceToAdd, skippedOps };
 }
+/**
+ * Resolve the hash epoch a repair must retain.
+ *
+ * A valid stream is authoritative even when legacy entries omit the version
+ * field. For a broken stream, one consistent explicit epoch remains
+ * authoritative; fully implicit legacy streams stay on epoch 1. Only an
+ * irreconcilably mixed stream falls forward to the current epoch.
+ */
+export function resolveHistoryRepairItemHashVersion(entries) {
+    const verified = verifyHistoryChainWithVersion(entries);
+    if (verified.ok && verified.item_hash_version !== undefined) {
+        return verified.item_hash_version;
+    }
+    const explicitVersions = [
+        ...new Set(entries
+            .map((entry) => entry.item_hash_version)
+            .filter((version) => version !== undefined &&
+            SUPPORTED_HISTORY_ITEM_HASH_VERSIONS.includes(version))),
+    ];
+    if (explicitVersions.length === 1) {
+        return explicitVersions[0];
+    }
+    if (explicitVersions.length === 0) {
+        return 1;
+    }
+    return CURRENT_HISTORY_ITEM_HASH_VERSION;
+}
 /** Re-anchor a drifted history chain: replay every entry from empty, recompute the before/after hashes, and only rewrite a patch when the original op set no longer strictly applies (legacy drift). Clean entries keep their patch verbatim so the on-disk diff stays minimal. The returned chain verifies via verifyHistoryChain. */
-export function reanchorHistoryEntries(entries) {
+export function reanchorHistoryEntries(entries, itemHashVersion = resolveHistoryRepairItemHashVersion(entries)) {
     const unsupportedIndex = entries.findIndex((entry) => entry.item_hash_version !== undefined &&
         !SUPPORTED_HISTORY_ITEM_HASH_VERSIONS.includes(entry.item_hash_version));
     if (unsupportedIndex >= 0) {
@@ -233,9 +260,11 @@ export function reanchorHistoryEntries(entries) {
     let entriesPatchRepaired = 0;
     let convertedReplaceToAdd = 0;
     let skippedOps = 0;
+    const explicitItemHashVersion = itemHashVersion !== 1 ||
+        entries.some((entry) => entry.item_hash_version !== undefined);
     for (let index = 0; index < entries.length; index += 1) {
         const entry = entries[index];
-        const beforeHash = replayHash(replay, CURRENT_HISTORY_ITEM_HASH_VERSION);
+        const beforeHash = replayHash(replay, itemHashVersion);
         const strict = tryApplyReplayPatch(replay, entry.patch);
         let next;
         let outPatch;
@@ -257,18 +286,24 @@ export function reanchorHistoryEntries(entries) {
             skippedOps += entrySkipped;
             entriesPatchRepaired += 1;
         }
-        const afterHash = replayHash(next, CURRENT_HISTORY_ITEM_HASH_VERSION);
+        const afterHash = replayHash(next, itemHashVersion);
         const rehashed = beforeHash !== entry.before_hash || afterHash !== entry.after_hash;
         if (rehashed) {
             entriesRehashed += 1;
         }
-        rewritten.push({
+        const rewrittenEntry = {
             ...entry,
             patch: outPatch,
             before_hash: beforeHash,
             after_hash: afterHash,
-            item_hash_version: CURRENT_HISTORY_ITEM_HASH_VERSION,
-        });
+        };
+        if (explicitItemHashVersion) {
+            rewrittenEntry.item_hash_version = itemHashVersion;
+        }
+        else {
+            delete rewrittenEntry.item_hash_version;
+        }
+        rewritten.push(rewrittenEntry);
         details.push({
             index: index + 1,
             rehashed,
@@ -286,6 +321,8 @@ export function reanchorHistoryEntries(entries) {
         convertedReplaceToAdd,
         skippedOps,
         details,
+        itemHashVersion,
+        explicitItemHashVersion,
     };
 }
 /** Implements history entries to raw for the public runtime surface of this module. */
@@ -296,4 +333,4 @@ export function historyEntriesToRaw(entries) {
     return `${entries.map((entry) => JSON.stringify(entry)).join("\n")}\n`;
 }
 //# sourceMappingURL=replay.js.map
-//# debugId=a1283470-00c7-5e91-8676-e1c1a667537f
+//# debugId=0c37a722-fda7-523e-991c-f8abfb7a1495

package/dist/core/output/output.d.ts

@@ -24,6 +24,8 @@ export interface OutputOptions {
     outputFormat?: "toon" | "json";
     /** Caller-carried cross-call budget and served-item state. */
     outputSession?: string;
+    /** Opaque budget-compaction continuation cursor. */
+    outputCursor?: string;
     /** Include machine-readable row location and row-encoding metadata. */
     outputRowContract?: boolean;
     /** Fallback output format used when callers do not provide an override. */

package/dist/core/output/output.js

@@ -4,7 +4,7 @@
  * Formats compact human and machine output for Output.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="88eb8f29-72a2-536f-8fc9-394ed3e0e0fb")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="bccd5918-1a51-5258-8d66-1960c51523cf")}catch(e){}}();
 import { getActiveCommandContext, runActiveCommandOverride, runActiveRendererOverride, runActiveServiceOverrideSync, setActiveCommandResult, } from "../extensions/index.js";
 import { EXIT_CODE } from "../shared/constants.js";
 import { isHostOutputSuppressed } from "./output-control.js";
@@ -366,6 +366,7 @@ function formatEffectiveOutput(effectiveResult, nativeOutput, options) {
             ["outputBudget", options.outputBudget],
             ["outputFormat", options.outputFormat],
             ["outputSession", options.outputSession],
+            ["outputCursor", options.outputCursor],
             ["outputRowContract", options.outputRowContract],
         ].filter((entry) => entry[1] !== undefined)),
     };
@@ -464,4 +465,4 @@ export const outputTestOnly = {
     renderToonValue,
 };
 //# sourceMappingURL=output.js.map
-//# debugId=88eb8f29-72a2-536f-8fc9-394ed3e0e0fb
+//# debugId=bccd5918-1a51-5258-8d66-1960c51523cf

package/dist/core/shared/command-types.d.ts

@@ -29,6 +29,8 @@ export interface GlobalOptions {
     outputFormat?: "toon" | "json";
     /** Caller-carried cross-call budget and served-item state. */
     outputSession?: string;
+    /** Opaque budget-compaction continuation cursor. */
+    outputCursor?: string;
     /** Include the machine-readable row selector and TOON encoding contract. */
     outputRowContract?: boolean;
     /** Filesystem path used for path resolution. */

package/dist/core/shared/command-types.js

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="044af354-3047-5fd4-ae65-458a259dedca")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="525dce5a-3824-5c45-aa61-bd8b132bd973")}catch(e){}}();
 export {};
 //# sourceMappingURL=command-types.js.map
-//# debugId=044af354-3047-5fd4-ae65-458a259dedca
+//# debugId=525dce5a-3824-5c45-aa61-bd8b132bd973

package/dist/core/shared/errors.d.ts

@@ -32,6 +32,8 @@ export interface PmCliErrorRecoveryPayload {
     candidate_commands_total?: number;
     /** Whether additional accepting command paths were omitted from this payload. */
     candidate_commands_truncated?: boolean;
+    /** Declared lexicon membership of an option rejected by the attempted path. */
+    option_scope?: "declared_on_path" | "declared_elsewhere" | "declared_nowhere";
     /** Value that configures or reports suggested retry for this contract. */
     suggested_retry?: string;
     /** Elapsed time in milliseconds for retry after. */
@@ -53,6 +55,16 @@ export interface PmCliErrorContext {
     reason?: string;
     /** Metadata field responsible for a validation failure, when known. */
     field?: string;
+    /** Assurance gate whose evaluation was refused, when known. */
+    gate_id?: string;
+    /** Assurance assertion whose evaluation was refused, when known. */
+    assertion_id?: string;
+    /** Assurance measurement whose source could not resolve, when known. */
+    measurement_id?: string;
+    /** Assurance measurement source kind involved in a refusal, when known. */
+    source_kind?: string;
+    /** Validate or health check selected by an assurance source, when known. */
+    check?: string;
     /** Serialization format involved in a parse failure. */
     format?: string;
     /** Item format version involved in a compatibility failure. */

package/dist/core/shared/errors.js

@@ -1,6 +1,6 @@
 /** Implements the exported pm cli error runtime abstraction for core/shared/errors.ts. */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="62fb0ba7-643f-5b33-870b-df875559610a")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="d1a7b5e2-0915-5f00-8b5a-38af814e1ea1")}catch(e){}}();
 export class PmCliError extends Error {
     /** Value that configures or reports exit code for this contract. */
     exitCode;
@@ -18,4 +18,4 @@ export class PmCliError extends Error {
     }
 }
 //# sourceMappingURL=errors.js.map
-//# debugId=62fb0ba7-643f-5b33-870b-df875559610a
+//# debugId=d1a7b5e2-0915-5f00-8b5a-38af814e1ea1

package/dist/mcp/tool-definitions.js

@@ -4,7 +4,7 @@
  * Defines the Tool Definitions module for pm CLI source.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="cde81c26-97fa-5236-b807-e944ba4af321")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="d440a41a-ae54-55fd-b939-5404a1edcdd7")}catch(e){}}();
 import { GRAPH_SUBCOMMAND_VALUES, PM_TOOL_ACTIONS, } from "../sdk/cli-contracts/enum-contracts.js";
 import { buildPmActionToolInputSchema } from "../sdk/cli-contracts/tool-schema.js";
 import { RUNTIME_STATUS_ROLE_VALUES } from "../types.js";
@@ -20,9 +20,8 @@ const READ_OUTPUT_TOOL_PROPERTIES = {
         description: "Universal read row ceiling, or unbounded to disable the shared ceiling.",
     },
     outputBudget: {
-        type: "integer",
-        minimum: 1,
-        description: "Universal estimated-token ceiling for a read result.",
+        anyOf: [{ type: "integer", minimum: 1 }, { const: "unbounded" }],
+        description: "Universal estimated-token ceiling, or unbounded to return the complete read result.",
     },
     outputFormat: {
         type: "string",
@@ -32,6 +31,11 @@ const READ_OUTPUT_TOOL_PROPERTIES = {
     outputSession: {
         ...CANONICAL_OUTPUT_SESSION_TOOL_PROPERTY,
     },
+    outputCursor: {
+        type: "string",
+        minLength: 1,
+        description: "Opaque continuation cursor returned after budget compaction of a declared row collection.",
+    },
 };
 /** MCP transport parameters layered over every canonical action schema. */
 export const TOOL_SCHEMA_BASE = {
@@ -739,4 +743,4 @@ export function buildMcpToolContracts() {
     }).sort((left, right) => left.name.localeCompare(right.name));
 }
 //# sourceMappingURL=tool-definitions.js.map
-//# debugId=cde81c26-97fa-5236-b807-e944ba4af321
+//# debugId=d440a41a-ae54-55fd-b939-5404a1edcdd7

package/dist/sdk/agent/refusal-reachability.d.ts

@@ -36,5 +36,66 @@ export interface PmRefusalReachabilityReport {
     /** Stable, sorted conformance findings. */
     findings: PmRefusalReachabilityFinding[];
 }
+/** Recovery-reference kinds emitted by structured refusal envelopes. */
+export declare const PM_RECOVERY_REFERENCE_KINDS: readonly ["suggested_retry", "candidate_command", "example", "next_step"];
+/** Recovery-reference kind emitted by a refusal. */
+export type PmRecoveryReferenceKind = (typeof PM_RECOVERY_REFERENCE_KINDS)[number];
+/** One derived promise that another invocation or command path is reachable. */
+export interface PmRecoveryReferenceObligation {
+    /** Stable reference identifier derived from its emitting envelope. */
+    id: string;
+    /** Refusal probe that emitted the reference. */
+    probe_id: string;
+    /** Typed recovery vocabulary rather than prose inference. */
+    kind: PmRecoveryReferenceKind;
+    /** Exact emitted command or recovery text. */
+    value: string;
+}
+/** Result of executing or resolving one derived recovery obligation. */
+export interface PmRecoveryReferenceObservation {
+    /** Stable obligation identifier. */
+    id: string;
+    /** Whether the promised recovery or command path was reachable. */
+    reachable: boolean;
+    /** How the promise was discharged. */
+    proof: "executed" | "declared_command_path" | "linked_execution";
+}
+/** Coverage totals for one emitted recovery-reference kind. */
+export interface PmRecoveryReferenceKindCoverage {
+    /** Typed reference kind. */
+    kind: PmRecoveryReferenceKind;
+    /** Derived obligations of this kind. */
+    declared: number;
+    /** Obligations with one observation. */
+    observed: number;
+    /** Obligations proven reachable. */
+    passed: number;
+}
+/** One recovery-reference coverage failure. */
+export interface PmRecoveryReferenceFinding {
+    /** Stable finding kind for assurance and CI. */
+    kind: "duplicate_obligation" | "duplicate_observation" | "missing_observation" | "unreachable_reference" | "undeclared_observation";
+    /** Obligation or observation identifier. */
+    reference_id: string;
+    /** Human-readable mismatch summary. */
+    detail: string;
+}
+/** Complete cross-kind recovery-reference coverage receipt. */
+export interface PmRecoveryReferenceReport {
+    /** Whether every derived reference was uniquely proven reachable. */
+    ok: boolean;
+    /** Total references derived from real refusal envelopes. */
+    declared_reference_count: number;
+    /** Total reference observations supplied. */
+    observed_reference_count: number;
+    /** Reachable fraction across the declared obligation set. */
+    pass_fraction: number;
+    /** Stable coverage buckets, including zero-population kinds. */
+    coverage_by_kind: PmRecoveryReferenceKindCoverage[];
+    /** Stable, sorted conformance findings. */
+    findings: PmRecoveryReferenceFinding[];
+}
 /** Compare declared refusal states with real-entrypoint observations. */
 export declare function verifyPmRefusalReachability(catalog: readonly PmErrorCodeContract[], observations: readonly PmRefusalProbeObservation[]): PmRefusalReachabilityReport;
+/** Verify executable and declared-path proof for emitted recovery references. */
+export declare function verifyPmRecoveryReferences(obligations: readonly PmRecoveryReferenceObligation[], observations: readonly PmRecoveryReferenceObservation[]): PmRecoveryReferenceReport;

package/dist/sdk/agent/refusal-reachability.js

@@ -1,6 +1,13 @@
-/** Compare declared refusal states with real-entrypoint observations. */
+/** Recovery-reference kinds emitted by structured refusal envelopes. */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="55318c8e-1fbd-5abd-b18f-f0cc1f81dd5c")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="631031be-883f-5a1d-bcb6-498208cf7922")}catch(e){}}();
+export const PM_RECOVERY_REFERENCE_KINDS = [
+    "suggested_retry",
+    "candidate_command",
+    "example",
+    "next_step",
+];
+/** Compare declared refusal states with real-entrypoint observations. */
 export function verifyPmRefusalReachability(catalog, observations) {
     const declarations = catalog.flatMap((contract) => (contract.owned_states ?? []).map((state) => ({ contract, state })));
     const findings = [];
@@ -68,5 +75,86 @@ export function verifyPmRefusalReachability(catalog, observations) {
         findings,
     };
 }
+/** Verify executable and declared-path proof for emitted recovery references. */
+export function verifyPmRecoveryReferences(obligations, observations) {
+    const findings = [];
+    const declaredIds = new Set();
+    const duplicateIds = new Set();
+    for (const obligation of obligations) {
+        if (declaredIds.has(obligation.id)) {
+            duplicateIds.add(obligation.id);
+            findings.push({
+                kind: "duplicate_obligation",
+                reference_id: obligation.id,
+                detail: `Recovery obligation ${obligation.id} was declared more than once.`,
+            });
+            continue;
+        }
+        declaredIds.add(obligation.id);
+    }
+    const observationsById = new Map();
+    for (const observation of observations) {
+        if (observationsById.has(observation.id)) {
+            findings.push({
+                kind: "duplicate_observation",
+                reference_id: observation.id,
+                detail: `Recovery reference ${observation.id} was observed more than once.`,
+            });
+            continue;
+        }
+        observationsById.set(observation.id, observation);
+        if (!declaredIds.has(observation.id)) {
+            findings.push({
+                kind: "undeclared_observation",
+                reference_id: observation.id,
+                detail: `Recovery observation ${observation.id} has no emitted obligation.`,
+            });
+        }
+    }
+    for (const obligation of obligations) {
+        if (duplicateIds.has(obligation.id))
+            continue;
+        const observation = observationsById.get(obligation.id);
+        if (!observation) {
+            findings.push({
+                kind: "missing_observation",
+                reference_id: obligation.id,
+                detail: `No reachability proof was recorded for ${obligation.kind} ${obligation.value}.`,
+            });
+        }
+        else if (!observation.reachable) {
+            findings.push({
+                kind: "unreachable_reference",
+                reference_id: obligation.id,
+                detail: `Recovery reference ${obligation.value} did not reach its promised target.`,
+            });
+        }
+    }
+    const coverageByKind = PM_RECOVERY_REFERENCE_KINDS.map((kind) => {
+        const kindObligations = obligations.filter((obligation) => obligation.kind === kind);
+        const kindObservations = kindObligations
+            .filter((obligation) => !duplicateIds.has(obligation.id))
+            .map((obligation) => observationsById.get(obligation.id))
+            .filter((observation) => observation !== undefined);
+        return {
+            kind,
+            declared: kindObligations.length,
+            observed: kindObservations.length,
+            passed: kindObservations.filter(({ reachable }) => reachable).length,
+        };
+    });
+    findings.sort((left, right) => left.reference_id !== right.reference_id
+        ? left.reference_id.localeCompare(right.reference_id)
+        : left.kind.localeCompare(right.kind));
+    const passed = coverageByKind.reduce((total, coverage) => total + coverage.passed, 0);
+    return {
+        ok: findings.length === 0,
+        declared_reference_count: obligations.length,
+        observed_reference_count: observations.length,
+        pass_fraction: declaredIds.size === 0 ? 1 : passed / declaredIds.size,
+        coverage_by_kind: coverageByKind,
+        findings,
+    };
+}
 //# sourceMappingURL=refusal-reachability.js.map
-//# debugId=55318c8e-1fbd-5abd-b18f-f0cc1f81dd5c
+//# debugId=631031be-883f-5a1d-bcb6-498208cf7922

package/dist/sdk/cli-bootstrap.d.ts

@@ -31,6 +31,8 @@ export interface BootstrapGlobalOptions {
     outputFormat?: "toon" | "json";
     /** Caller-carried cross-call budget and served-item state. */
     outputSession?: string;
+    /** Opaque budget-compaction continuation cursor. */
+    outputCursor?: string;
     /** Whether machine-readable row discovery metadata is requested. */
     outputRowContract?: boolean;
     /** Invocation-wide mutation author override. */

package/dist/sdk/cli-bootstrap.js

@@ -4,7 +4,7 @@
  * Provides public bootstrap argument normalization for embedded CLI hosts.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="7b3209a8-8580-542c-9e80-21d04df3f61f")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="eccdb2d2-da6f-555b-ba1b-8339f9b64f1a")}catch(e){}}();
 import { EXECUTABLE_COMMAND_ALIASES, resolveSubcommandFlagContractsForCommand, } from "./cli-contracts.js";
 export { EXECUTABLE_COMMAND_ALIASES };
 import { levenshteinDistanceWithinLimit } from "../core/shared/levenshtein.js";
@@ -20,6 +20,7 @@ const GLOBAL_VALUE_CONSUMING_FLAGS = new Set([
     "--output-budget",
     "--output-format",
     "--output-session",
+    "--output-cursor",
 ]);
 const OUTPUT_VALUE_FLAGS = new Set([
     "--output-include",
@@ -27,6 +28,7 @@ const OUTPUT_VALUE_FLAGS = new Set([
     "--output-budget",
     "--output-format",
     "--output-session",
+    "--output-cursor",
 ]);
 /** Whether a global value-consuming flag uses its inline `--flag=value` form. */
 const isInlineGlobalValueToken = (token) => {
@@ -117,6 +119,9 @@ export function parseBootstrapGlobalOptions(argv) {
         ...(state.outputValues.get("--output-session") === undefined
             ? {}
             : { outputSession: state.outputValues.get("--output-session") }),
+        ...(state.outputValues.get("--output-cursor") === undefined
+            ? {}
+            : { outputCursor: state.outputValues.get("--output-cursor") }),
         ...(state.author === ""
             ? { authorMissingValue: true }
             : state.author !== undefined
@@ -890,4 +895,4 @@ export const _testOnly = {
     resolveCanonicalFlag,
 };
 //# sourceMappingURL=cli-bootstrap.js.map
-//# debugId=7b3209a8-8580-542c-9e80-21d04df3f61f
+//# debugId=eccdb2d2-da6f-555b-ba1b-8339f9b64f1a

package/dist/sdk/cli-contracts/completeness.js

@@ -7,7 +7,7 @@
  * a hand-picked test list.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="cf238c71-1626-5e48-9207-7acf22c0d680")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="8b227cb2-a30d-5384-b9c2-558603181c67")}catch(e){}}();
 import { PM_TOOL_ACTIONS } from "./enum-contracts.js";
 import { resolveSubcommandFlagContractsForCommand, } from "./flag-contracts.js";
 import { pmToolActionParameterKeys } from "./tool-schema.js";
@@ -23,6 +23,7 @@ const CLI_TRANSPORT_FLAGS = new Set([
     "--output-budget",
     "--output-format",
     "--output-session",
+    "--output-cursor",
     "--output-row-contract",
     "--no-changed-fields",
     "--no-extensions",
@@ -383,4 +384,4 @@ export function analyzeSdkCliParameterCompleteness(source = {}) {
     });
 }
 //# sourceMappingURL=completeness.js.map
-//# debugId=cf238c71-1626-5e48-9207-7acf22c0d680
+//# debugId=8b227cb2-a30d-5384-b9c2-558603181c67

package/dist/sdk/cli-contracts/flag-contracts.js

@@ -7,7 +7,7 @@
  * flag surface stays single-sourced across the CLI, SDK, and MCP boundaries.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="a5a2c81f-8870-5111-b13c-74c362098d54")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="512c41c1-624f-517c-abc3-4448b49cd9e6")}catch(e){}}();
 import { normalizeUniqueStringList } from "./string-lists.js";
 import { RESERVED_EXTENSION_HOST_FLAGS } from "../../core/extensions/reserved-host-flags.js";
 function normalizeFlagAliasKey(flag) {
@@ -342,6 +342,7 @@ export const HISTORY_REPAIR_FLAG_CONTRACTS = [
     { flag: "--id", value_name: "item-id" },
     { flag: "--all" },
     { flag: "--dry-run" },
+    { flag: "--normalize-provenance" },
     { flag: "--author" },
     { flag: "--message" },
     { flag: "--force" },
@@ -1817,4 +1818,4 @@ export function toCompletionFlagString(flagContracts, includeGlobal = true) {
     return normalizeUniqueStringList(all).join(" ");
 }
 //# sourceMappingURL=flag-contracts.js.map
-//# debugId=a5a2c81f-8870-5111-b13c-74c362098d54
+//# debugId=512c41c1-624f-517c-abc3-4448b49cd9e6

package/dist/sdk/cli-contracts/registration-helpers.js

@@ -4,7 +4,7 @@
  * Provides CLI runtime support for Registration Helpers.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="daefefd1-3b0b-513d-8b8c-ab17f90b995a")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="8d60b13c-c58a-506f-adc9-2414dd69edef")}catch(e){}}();
 import { Option } from "commander";
 import { pathExists, refreshSearchArtifactsForMutation, shouldRunSearchRefreshInForeground, EXIT_CODE, PmCliError, printError, printResult, writeStdout, getSettingsPath, resolvePmRoot, readSettings, runActiveServiceOverride, setActiveCommandResult, } from "../runtime-primitives.js";
 import { ACTIVITY_COMMANDER_STRING_OPTION_CONTRACTS, CONTEXT_COMMANDER_STRING_OPTION_CONTRACTS, CREATE_COMMANDER_REPEATABLE_OPTION_CONTRACTS, CREATE_COMMANDER_STRING_OPTION_CONTRACTS, LIST_COMMANDER_STRING_OPTION_CONTRACTS, NEXT_COMMANDER_STRING_OPTION_CONTRACTS, SEARCH_COMMANDER_STRING_OPTION_CONTRACTS, UPDATE_COMMANDER_REPEATABLE_OPTION_CONTRACTS, UPDATE_COMMANDER_STRING_OPTION_CONTRACTS, readFirstValueFromCommanderOptions, readFirstStringFromCommanderOptions, readStringArrayFromCommanderOptions, } from "../cli-contracts.js";
@@ -112,6 +112,7 @@ export function getGlobalOptions(command) {
         outputLimit: readStringCommandOption(opts, "outputLimit"),
         outputBudget: readStringCommandOption(opts, "outputBudget"),
         outputSession: readStringCommandOption(opts, "outputSession"),
+        outputCursor: readStringCommandOption(opts, "outputCursor"),
         ...(opts.outputRowContract === true ? { outputRowContract: true } : {}),
         ...(opts.outputFormat === "toon" || opts.outputFormat === "json"
             ? { outputFormat: opts.outputFormat }
@@ -984,4 +985,4 @@ export const _testOnly = {
     collectMutationItemIds,
 };
 //# sourceMappingURL=registration-helpers.js.map
-//# debugId=daefefd1-3b0b-513d-8b8c-ab17f90b995a
+//# debugId=8d60b13c-c58a-506f-adc9-2414dd69edef

package/dist/sdk/cli-contracts/runtime-contracts.d.ts

@@ -148,6 +148,11 @@ export interface ContractsResult {
         close_validation_modes: string[];
         workflow_enforcement_modes: string[];
     };
+    /** Authoritative assurance declaration vocabularies for SDK and host validation. */
+    assurance_contracts?: {
+        measurement_source_kinds: readonly string[];
+        gate_triggers: readonly string[];
+    };
     /** Value that configures or reports mcp tools for this contract. */
     mcp_tools?: McpToolContract[];
     /** Built-in intent-scoped read projections available to CLI, SDK, MCP, and package consumers. */

package/dist/sdk/cli-contracts/runtime-contracts.js

@@ -4,7 +4,7 @@
  * Implements the pm contracts command surface and its agent-facing runtime behavior.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="c0995490-5838-5c91-af77-9ce387e41a1f")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="8cdd82c3-979e-5f7f-bc72-592c7e55f11c")}catch(e){}}();
 import { EXIT_CODE, SETTINGS_DEFAULTS, PmCliError, activateExtensions, getActiveExtensionRegistrations, loadExtensions, pathExists, commandOptionFlagLabel, resolveCommandOptionPolicyState, resolveItemTypeRegistry, resolveRuntimeFieldRegistry, resolveRuntimeStatusRegistry, getSettingsPath, resolvePmRoot, readSettings, } from "../runtime-primitives.js";
 import { buildMcpToolContracts, } from "../../mcp/tool-definitions.js";
 import { ACTIVITY_COMMANDER_STRING_OPTION_CONTRACTS, ACTIVITY_FLAG_CONTRACTS, AGGREGATE_FLAG_CONTRACTS, ASSURANCE_FLAG_CONTRACTS, APPEND_FLAG_CONTRACTS, CALENDAR_COMMANDER_STRING_OPTION_CONTRACTS, CALENDAR_FLAG_CONTRACTS, CLAIM_FLAG_CONTRACTS, CLOSE_TASK_FLAG_CONTRACTS, COMMENTS_FLAG_CONTRACTS, CLOSE_FLAG_CONTRACTS, CLOSE_MANY_FLAG_CONTRACTS, COMPLETION_FLAG_CONTRACTS, CONFIG_FLAG_CONTRACTS, CONTRACTS_FLAG_CONTRACTS, COPY_FLAG_CONTRACTS, CONTEXT_COMMANDER_STRING_OPTION_CONTRACTS, CONTEXT_FLAG_CONTRACTS, CREATE_COMMANDER_REPEATABLE_OPTION_CONTRACTS, CREATE_COMMANDER_STRING_OPTION_CONTRACTS, CREATE_FLAG_CONTRACTS, DELETE_FLAG_CONTRACTS, DEPS_FLAG_CONTRACTS, GRAPH_FLAG_CONTRACTS, DOCS_FLAG_CONTRACTS, EXTENSION_ACTIVATE_FLAG_CONTRACTS, EXTENSION_ADOPT_ALL_FLAG_CONTRACTS, EXTENSION_ADOPT_FLAG_CONTRACTS, EXTENSION_CATALOG_FLAG_CONTRACTS, EXTENSION_DEACTIVATE_FLAG_CONTRACTS, EXTENSION_DESCRIBE_FLAG_CONTRACTS, EXTENSION_DOCTOR_FLAG_CONTRACTS, EXTENSION_EXPLORE_FLAG_CONTRACTS, EXTENSION_FLAG_CONTRACTS, EXTENSION_INIT_FLAG_CONTRACTS, EXTENSION_INSTALL_FLAG_CONTRACTS, EXTENSION_MANAGE_FLAG_CONTRACTS, EXTENSION_MIGRATE_FLAG_CONTRACTS, EXTENSION_RELOAD_FLAG_CONTRACTS, EXTENSION_UNINSTALL_FLAG_CONTRACTS, FILES_FLAG_CONTRACTS, FOCUS_FLAG_CONTRACTS, GC_FLAG_CONTRACTS, GET_FLAG_CONTRACTS, GUIDE_FLAG_CONTRACTS, GLOBAL_FLAG_CONTRACTS, HEALTH_FLAG_CONTRACTS, HISTORY_FLAG_CONTRACTS, HISTORY_COMPACT_FLAG_CONTRACTS, HISTORY_REDACT_FLAG_CONTRACTS, HISTORY_REPAIR_FLAG_CONTRACTS, HISTORY_AUTHOR_ACKNOWLEDGE_FLAG_CONTRACTS, INSTALL_FLAG_CONTRACTS, INIT_FLAG_CONTRACTS, ITEM_COMPLETE_FLAG_CONTRACTS, ITEM_MUTATE_FLAG_CONTRACTS, LEARNINGS_FLAG_CONTRACTS, LIST_COMMANDER_STRING_OPTION_CONTRACTS, LIST_FILTER_FLAG_CONTRACTS, MERGE_FLAG_CONTRACTS, NOTES_FLAG_CONTRACTS, PACKAGE_FLAG_CONTRACTS, PACKAGE_INIT_FLAG_CONTRACTS, PM_EXTENSION_CAPABILITY_CONTRACTS, PM_EXTENSION_POLICY_MODE_CONTRACTS, PM_EXTENSION_POLICY_SURFACE_CONTRACTS, PM_EXTENSION_SANDBOX_PROFILE_CONTRACTS, PM_EXTENSION_SERVICE_NAME_CONTRACTS, PM_EXTENSION_TRUST_MODE_CONTRACTS, PM_OUTPUT_DEGRADATION_STEPS, PLAN_FLAG_CONTRACTS, PM_CORE_COMMAND_NAMES, PM_TOOL_ACTIONS, PM_TOOL_PARAMETERS_SCHEMA, REINDEX_FLAG_CONTRACTS, RELEASE_FLAG_CONTRACTS, RESTORE_FLAG_CONTRACTS, SCHEMA_FLAG_CONTRACTS, PROFILE_FLAG_CONTRACTS, SEARCH_COMMANDER_STRING_OPTION_CONTRACTS, EVAL_FLAG_CONTRACTS, WORKSPACE_FLAG_CONTRACTS, NEXT_FLAG_CONTRACTS, SEARCH_FLAG_CONTRACTS, STATS_FLAG_CONTRACTS, DUPLICATES_FLAG_CONTRACTS, START_TASK_FLAG_CONTRACTS, PAUSE_TASK_FLAG_CONTRACTS, TELEMETRY_FLAG_CONTRACTS, TEST_ALL_FLAG_CONTRACTS, TEST_FLAG_CONTRACTS, TEST_RUNS_FLAG_CONTRACTS, UPDATE_COMMANDER_REPEATABLE_OPTION_CONTRACTS, UPDATE_COMMANDER_STRING_OPTION_CONTRACTS, UPDATE_FLAG_CONTRACTS, UPDATE_MANY_FLAG_CONTRACTS, UPGRADE_FLAG_CONTRACTS, VALIDATE_FLAG_CONTRACTS, compactFlagAliasContracts, resolvePmCommandOutputBudget, } from "../cli-contracts.js";
@@ -18,6 +18,7 @@ import { PM_ERROR_CODE_CATALOG } from "../generated-error-code-catalog.js";
 import { resolvePmCommandOutputEnvelope, } from "../output-contracts.js";
 import { PM_COMMAND_EXIT_OUTCOME_CONTRACTS, resolvePmCommandExitContract, } from "./command-exit-contracts.js";
 import { BUILTIN_RELATIONSHIP_KINDS } from "../relationship-kinds/contract.js";
+import { ASSURANCE_GATE_TRIGGERS, ASSURANCE_MEASUREMENT_SOURCE_KINDS, } from "../governance/assurance.js";
 const AGENT_BOOTSTRAP_FLAGS = new Map([
     [
         "claim",
@@ -1328,7 +1329,8 @@ function resolveContractsSelection(options) {
         fullOutput,
         omitUnfilteredSchema: unfilteredDefaultBriefMode,
         omitUnfilteredCommandFlags: unfilteredDefaultBriefMode,
-        omitUnfilteredCommanderAliases: unfilteredDefaultBriefMode,
+        omitUnfilteredCommanderAliases: unfilteredDefaultBriefMode ||
+            (selectedCommand !== undefined && !fullOutput),
     };
 }
 function assertSingleContractsProjection(selection) {
@@ -1781,20 +1783,26 @@ function createContractsResult(selection, schemaContext, actionContext, outputCo
             : {}),
     };
 }
-function attachRuntimeContractsResult(result, runtime) {
+function attachRuntimeContractsResult(result, runtime, selection) {
+    const selectedCommand = selection.selectedCommand;
     result.runtime_schema = {
         statuses: runtime.statusRegistry.definitions.map((definition) => definition.id),
         open_status: runtime.statusRegistry.open_status,
         close_status: runtime.statusRegistry.close_status,
         canceled_status: runtime.statusRegistry.canceled_status,
         types: [...runtime.typeRegistry.types],
-        fields_by_command: Object.fromEntries([...runtime.runtimeFieldRegistry.command_to_fields.entries()].map(([command, definitions]) => [
+        fields_by_command: Object.fromEntries([...runtime.runtimeFieldRegistry.command_to_fields.entries()]
+            .filter(([command]) => selectedCommand === undefined || command === selectedCommand)
+            .map(([command, definitions]) => [
             command,
             [
                 ...new Set(definitions.map((definition) => `--${definition.cli_flag}`)),
             ].sort((left, right) => left.localeCompare(right)),
         ])),
     };
+    if (selectedCommand !== undefined && !selection.fullOutput) {
+        return;
+    }
     result.extension_contracts = {
         capabilities: [...PM_EXTENSION_CAPABILITY_CONTRACTS],
         services: [...PM_EXTENSION_SERVICE_NAME_CONTRACTS],
@@ -1877,7 +1885,9 @@ function attachCommanderAliasContractsResult(result, selection) {
         result.commander_aliases = buildCommanderAliasSurface();
         return;
     }
-    result.commander_aliases_omitted_reason = "unfiltered_default_brief";
+    result.commander_aliases_omitted_reason = selection.selectedCommand
+        ? "command_scoped"
+        : "unfiltered_default_brief";
 }
 /** Attach the compact agent-facing command semantics shared by summary and full projections. */
 function attachAgentCommandContractsResult(result, outputCommands, extensionCommandContracts) {
@@ -1908,11 +1918,17 @@ export async function runContracts(options, global) {
     }
     const commandAliases = buildCommandAliasSurface(commands);
     if (!(selection.flagsOnly && !selection.fullOutput)) {
-        attachRuntimeContractsResult(result, runtime);
+        attachRuntimeContractsResult(result, runtime, selection);
     }
     attachSchemaContractsResult(result, selection, schemaContext, extensionCommandContracts);
     attachFlagContractsResult(result, selection, runtime, outputCommands, commandAliases);
     attachCommanderAliasContractsResult(result, selection);
+    if (selection.selectedCommand === "assurance" || selection.fullOutput) {
+        result.assurance_contracts = {
+            measurement_source_kinds: [...ASSURANCE_MEASUREMENT_SOURCE_KINDS],
+            gate_triggers: [...ASSURANCE_GATE_TRIGGERS],
+        };
+    }
     // pm-4os2: snapshot the static MCP tool surface in the full projection so
     // `pnpm contracts:check` (CI static gate) fails on unintended inputSchema
     // drift in src/mcp/tool-definitions.ts.
@@ -1967,4 +1983,4 @@ export const _testOnlyContractsCommand = {
     toRuntimeShortFlagToken,
 };
 //# sourceMappingURL=runtime-contracts.js.map
-//# debugId=c0995490-5838-5c91-af77-9ce387e41a1f
+//# debugId=8cdd82c3-979e-5f7f-bc72-592c7e55f11c