@unbrained/pm-cli 2026.8.21 → 2026.8.23

package/dist/core/config/nested-settings.js

@@ -24,7 +24,7 @@
  */
 /** Search/provider/vector-store leaves. Order is the display order in `pm config list` and in error hints. */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="be95f220-5f66-5e8c-8447-996696d02e43")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="4e50d57b-4502-5ce5-a6dd-0bdc8eba5af4")}catch(e){}}();
 export const NESTED_SETTING_DESCRIPTORS = [
     {
         key: "search_provider",
@@ -207,6 +207,12 @@ export const NESTED_SETTING_DESCRIPTORS = [
         non_empty: true,
         summary: "Default author recorded on mutations when --author is not supplied.",
     },
+    {
+        key: "agent_identity_probes_enabled",
+        path: "agent_identity.probes_enabled",
+        kind: "boolean",
+        summary: "Allow privacy-bounded local harness provenance probes; no network or subprocess access is permitted.",
+    },
     {
         key: "mutation_guard_require_attributed_author",
         path: "mutation_guard.require_attributed_author",
@@ -526,4 +532,4 @@ export function writeNestedSettingValue(settings, descriptor, value) {
     return true;
 }
 //# sourceMappingURL=nested-settings.js.map
-//# debugId=be95f220-5f66-5e8c-8447-996696d02e43
+//# debugId=4e50d57b-4502-5ce5-a6dd-0bdc8eba5af4

package/dist/core/config/positional-value.d.ts

@@ -41,7 +41,7 @@ export interface ConfigPositionalNotRoutable {
 /** Restricts config positional result values accepted by command, SDK, and storage contracts. */
 export type ConfigPositionalResult = ConfigPositionalRouted | ConfigPositionalNotRoutable;
 /** Canonical snake-case config keys accepted by the config command and positional router. */
-export type ConfigKey = "definition_of_done" | "item_format" | "history_missing_stream_policy" | "sprint_release_format_policy" | "parent_reference_policy" | "metadata_validation_profile" | "metadata_required_fields" | "lifecycle_stale_blocker_reason_patterns" | "lifecycle_closure_like_blocked_reason_patterns" | "lifecycle_closure_like_resolution_patterns" | "lifecycle_closure_like_actual_result_patterns" | "governance_preset" | "governance_ownership_enforcement" | "governance_create_mode_default" | "governance_close_validation_default" | "governance_require_close_reason" | "governance_create_default_type" | "governance_workflow_enforcement" | "governance_parent_reference_policy" | "governance_metadata_validation_profile" | "governance_force_required_for_stale_lock" | "test_result_tracking" | "telemetry_tracking" | "context";
+export type ConfigKey = "definition_of_done" | "item_format" | "history_missing_stream_policy" | "sprint_release_format_policy" | "parent_reference_policy" | "metadata_validation_profile" | "metadata_required_fields" | "lifecycle_stale_blocker_reason_patterns" | "lifecycle_closure_like_blocked_reason_patterns" | "lifecycle_closure_like_resolution_patterns" | "lifecycle_closure_like_actual_result_patterns" | "governance_preset" | "governance_ownership_enforcement" | "governance_create_mode_default" | "governance_close_validation_default" | "governance_require_close_reason" | "governance_create_default_type" | "governance_workflow_enforcement" | "governance_parent_reference_policy" | "governance_metadata_validation_profile" | "governance_force_required_for_stale_lock" | "test_result_tracking" | "untrusted_linked_test_execution" | "telemetry_tracking" | "agent_identity_vocabulary" | "context";
 /**
  * Resolve which typed flag a positional `pm config set <key> <value>` value should
  * populate, plus the normalized value.

package/dist/core/config/positional-value.js

@@ -10,7 +10,7 @@
  * good error messages.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="4f4f5f10-793d-5baa-8985-c0ec855b16c4")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="77fa2822-1681-59d5-8388-037cf13c45dd")}catch(e){}}();
 const FORMAT_KEYS = new Set(["item_format"]);
 const CRITERIA_KEYS = new Set([
     "definition_of_done",
@@ -36,13 +36,16 @@ const POLICY_KEYS = new Set([
     "governance_metadata_validation_profile",
     "governance_force_required_for_stale_lock",
     "test_result_tracking",
+    "untrusted_linked_test_execution",
     "telemetry_tracking",
+    "agent_identity_vocabulary",
 ]);
 /** Policy keys whose only valid values are enabled/disabled. For these we accept the intuitive synonyms off/on/true/false. Other policy keys pass through unchanged so their own validators report the precise allowed set. */
 const ENABLED_DISABLED_POLICY_KEYS = new Set([
     "governance_require_close_reason",
     "governance_force_required_for_stale_lock",
     "test_result_tracking",
+    "untrusted_linked_test_execution",
     "telemetry_tracking",
 ]);
 const ENABLED_DISABLED_SYNONYMS = {
@@ -104,4 +107,4 @@ export function resolveConfigPositionalValue(canonicalKeyOrAlias, value) {
     return { routable: true, flag: "policy", value: policyValue };
 }
 //# sourceMappingURL=positional-value.js.map
-//# debugId=4f4f5f10-793d-5baa-8985-c0ec855b16c4
+//# debugId=77fa2822-1681-59d5-8388-037cf13c45dd

package/dist/core/extensions/extension-hook-runtime.js

@@ -4,7 +4,7 @@
  * Implements extension runtime contracts and governance for Extension Hook Runtime.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="ac377139-8ce2-58ad-8005-0ac907a9baed")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="d1dd5d4f-5f08-5e52-b109-d066f92ae3b3")}catch(e){}}();
 import { cloneCommandOptionsSnapshot, cloneContextSnapshot, cloneGlobalOptionsSnapshot, normalizeCommandName, } from "./extension-runtime-helpers.js";
 import { stableValueEquals } from "../shared/serialization.js";
 import { EXIT_CODE } from "../shared/constants.js";
@@ -480,6 +480,20 @@ function isLegacyOutputPayloadEcho(result, context, serviceContext) {
         result !== null &&
         stableValueEquals(result, serviceContext.payload));
 }
+function resolveMatchedServiceDecision(matched, decision, warnings) {
+    if (!decision.handled) {
+        return undefined;
+    }
+    if (matched.passThrough === true) {
+        warnings.push(`extension_service_pass_through_contract_violated:${matched.layer}:${matched.name}:${matched.service}`);
+        return undefined;
+    }
+    return {
+        handled: true,
+        result: decision.result,
+        warnings,
+    };
+}
 /** Implements run service override sync for the public runtime surface of this module. */
 export function runServiceOverrideSync(services, context) {
     const matches = matchingServiceOverrides(services, context.service);
@@ -499,15 +513,9 @@ export function runServiceOverrideSync(services, context) {
                 warnings.push(`extension_output_format_payload_echo_deprecated:${matched.layer}:${matched.name}`);
                 continue;
             }
-            const decision = resolveServiceOverrideValue(result, context);
-            if (!decision.handled) {
-                continue;
-            }
-            return {
-                handled: true,
-                result: decision.result,
-                warnings,
-            };
+            const resolved = resolveMatchedServiceDecision(matched, resolveServiceOverrideValue(result, context), warnings);
+            if (resolved)
+                return resolved;
         }
         catch {
             warnings.push(`extension_service_override_failed:${matched.layer}:${matched.name}:${matched.service}`);
@@ -534,15 +542,9 @@ export async function runServiceOverride(services, context) {
                 warnings.push(`extension_output_format_payload_echo_deprecated:${matched.layer}:${matched.name}`);
                 continue;
             }
-            const decision = resolveServiceOverrideValue(result, context);
-            if (!decision.handled) {
-                continue;
-            }
-            return {
-                handled: true,
-                result: decision.result,
-                warnings,
-            };
+            const resolved = resolveMatchedServiceDecision(matched, resolveServiceOverrideValue(result, context), warnings);
+            if (resolved)
+                return resolved;
         }
         catch {
             warnings.push(`extension_service_override_failed:${matched.layer}:${matched.name}:${matched.service}`);
@@ -695,4 +697,4 @@ export function runRendererOverride(renderers, context) {
     }
 }
 //# sourceMappingURL=extension-hook-runtime.js.map
-//# debugId=ac377139-8ce2-58ad-8005-0ac907a9baed
+//# debugId=d1dd5d4f-5f08-5e52-b109-d066f92ae3b3

package/dist/core/extensions/extension-types.d.ts

@@ -483,6 +483,11 @@ export type ServiceOverrideDecision = {
 };
 /** Restricts service override values accepted by command, SDK, and storage contracts. */
 export type ServiceOverride = (context: ServiceOverrideContext) => unknown | ServiceOverrideDecision;
+/** Host-enforced ownership metadata for a service override. */
+export interface ServiceOverrideOwnership {
+    /** Declare that the callback may only decline. Any handled result is ignored and diagnosed by the host. */
+    passThrough?: boolean;
+}
 /** Documents the registered extension hook payload exchanged by command, SDK, and package integrations. */
 export interface RegisteredExtensionHook<THook> {
     /** Value that configures or reports layer for this contract. */
@@ -1187,6 +1192,8 @@ export interface RegisteredExtensionServiceOverride {
     service: ExtensionServiceName;
     /** Value that configures or reports run for this contract. */
     run: ServiceOverride;
+    /** Whether the host forbids this callback from handling the service payload. */
+    passThrough?: boolean;
 }
 /** Documents the registered extension renderer override payload exchanged by command, SDK, and package integrations. */
 export interface RegisteredExtensionRendererOverride {
@@ -1464,7 +1471,7 @@ export interface ExtensionApi {
     /** Value that configures or reports register preflight for this contract. */
     registerPreflight(override: PreflightOverride | ScopedPreflightOverrideDefinition): void;
     /** Value that configures or reports register service for this contract. */
-    registerService(service: ExtensionServiceName, override: ServiceOverride): void;
+    registerService(service: ExtensionServiceName, override: ServiceOverride, ownership?: ServiceOverrideOwnership): void;
     /** Value that configures or reports register flags for this contract. */
     registerFlags(targetCommand: string, flags: FlagDefinition[]): void;
     /** Value that configures or reports register item fields for this contract. */

package/dist/core/extensions/extension-types.js

@@ -1,6 +1,6 @@
 /** Public contract for known extension capabilities, shared by SDK and presentation-layer consumers. */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="a54549aa-2f6c-5092-a3eb-5b36ee698ea4")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="87454a57-b62e-560a-b66f-3c15d4a95cc2")}catch(e){}}();
 export const KNOWN_EXTENSION_CAPABILITIES = [
     "commands",
     "renderers",
@@ -100,4 +100,4 @@ export function createDefaultExtensionGovernancePolicy() {
     };
 }
 //# sourceMappingURL=extension-types.js.map
-//# debugId=a54549aa-2f6c-5092-a3eb-5b36ee698ea4
+//# debugId=87454a57-b62e-560a-b66f-3c15d4a95cc2

package/dist/core/extensions/loader.js

@@ -4,7 +4,7 @@
  * Implements extension runtime contracts and governance for Loader.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="cccce7c1-dd08-5c9f-a74e-e639536b9a6a")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="10311c96-5cba-5021-a8c5-82abd6eeb6f5")}catch(e){}}();
 import fs from "node:fs/promises";
 import path from "node:path";
 import { pathToFileURL } from "node:url";
@@ -19,6 +19,7 @@ import { KNOWN_ITEM_FIELD_TYPES, normalizeItemFieldType, suggestKnownItemFieldTy
 import { snapshotExtensionModuleGraph } from "./module-graph-snapshot.js";
 import { captureExtensionActivationRollback } from "./activation-transaction.js";
 import { collectPreflightCollisionWarnings, normalizePreflightOverride, } from "./preflight-ownership.js";
+import { normalizeServiceOverrideOwnership } from "./service-ownership.js";
 import { assertCommandDefinitionMetadataStrings } from "./command-visibility-tier.js";
 import { buildImportExportContext, resolveImportExportArtifactOutput, } from "./exporter-output-contract.js";
 import { asRegistrationRecord, assertOptionalBooleanField, assertOptionalFlagDefaultField, assertOptionalStringArrayField, assertOptionalStringField, normalizeOptionalStringArrayField, } from "./registration-validation.js";
@@ -1569,7 +1570,7 @@ class ExtensionApiRegistrar {
             ...normalized,
         });
     }
-    registerService(service, override) {
+    registerService(service, override, ownership = {}) {
         assertExtensionCapability(this.#loadedExtension, "services", "registerService");
         const normalizedService = String(service).trim().toLowerCase();
         if (!isExtensionServiceName(normalizedService)) {
@@ -1584,6 +1585,9 @@ class ExtensionApiRegistrar {
             name: this.#loadedExtension.name,
             service: normalizedService,
             run: override,
+            ...(normalizeServiceOverrideOwnership(ownership)
+                ? { passThrough: true }
+                : {}),
         });
     }
     registerRenderer(format, renderer, ownership = {}) {
@@ -2216,4 +2220,4 @@ export const _testOnlyLoader = {
     },
 };
 //# sourceMappingURL=loader.js.map
-//# debugId=cccce7c1-dd08-5c9f-a74e-e639536b9a6a
+//# debugId=10311c96-5cba-5021-a8c5-82abd6eeb6f5

package/dist/core/extensions/service-ownership.d.ts

@@ -0,0 +1,8 @@
+/**
+ * @module core/extensions/service-ownership
+ *
+ * Validates host-enforced ownership metadata for extension service overrides.
+ */
+import type { ServiceOverrideOwnership } from "./extension-types.js";
+/** Validate one service ownership declaration and return its normalized pass-through flag. */
+export declare function normalizeServiceOverrideOwnership(ownership: ServiceOverrideOwnership): boolean;

package/dist/core/extensions/service-ownership.js

@@ -0,0 +1,20 @@
+/** Validate one service ownership declaration and return its normalized pass-through flag. */
+
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="a30142c8-b04d-5878-8497-c902ff299e94")}catch(e){}}();
+export function normalizeServiceOverrideOwnership(ownership) {
+    if (ownership === null ||
+        typeof ownership !== "object" ||
+        Array.isArray(ownership)) {
+        throw new TypeError("registerService ownership must be an object");
+    }
+    if (Reflect.ownKeys(ownership).some((key) => key !== "passThrough")) {
+        throw new TypeError("registerService ownership supports only passThrough");
+    }
+    if (ownership.passThrough !== undefined &&
+        typeof ownership.passThrough !== "boolean") {
+        throw new TypeError("registerService ownership.passThrough must be a boolean when provided");
+    }
+    return ownership.passThrough === true;
+}
+//# sourceMappingURL=service-ownership.js.map
+//# debugId=a30142c8-b04d-5878-8497-c902ff299e94

package/dist/core/history/history.js

@@ -4,7 +4,7 @@
  * Implements append-only history and replay behavior for History.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="2fc7f675-3500-5abb-8d5c-9ca9caa803b6")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="f7cf18cb-0068-58ad-bd7f-759a5d91eb9f")}catch(e){}}();
 import jsonPatch from "fast-json-patch";
 import { ITEM_METADATA_KEY_ORDER } from "../shared/constants.js";
 import { runActiveServiceOverride } from "../extensions/index.js";
@@ -178,7 +178,7 @@ export function createHistoryEntry(params) {
     const patch = normalizeHistoryPatchOps(beforePatchCanonical, rawPatch);
     const agentIdentity = resolveHistoryAgentIdentity(params.author);
     const provenanceOutcomes = agentIdentity.harness
-        ? Object.fromEntries(Object.entries(diagnoseAgentIdentity().provenance_outcomes).filter(([, outcome]) => outcome.status === "failed"))
+        ? Object.fromEntries(Object.entries(diagnoseAgentIdentity().provenance_outcomes).filter(([, outcome]) => outcome.resolver !== undefined && outcome.status !== "resolved"))
         : undefined;
     const context = provenanceOutcomes === undefined || Object.keys(provenanceOutcomes).length === 0
         ? params.context
@@ -292,4 +292,4 @@ export const _testOnly = {
     isDefinedPointerPath,
 };
 //# sourceMappingURL=history.js.map
-//# debugId=2fc7f675-3500-5abb-8d5c-9ca9caa803b6
+//# debugId=f7cf18cb-0068-58ad-bd7f-759a5d91eb9f

package/dist/core/item/id.js

@@ -4,7 +4,7 @@
  * Defines item parsing, formatting, and lifecycle helpers for Id.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="50a277b9-d530-5aa0-8bd0-8eb0d36911e5")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="6b3f1585-ab12-57ca-80eb-d3cebc384c52")}catch(e){}}();
 import crypto from "node:crypto";
 import path from "node:path";
 import { TYPE_TO_FOLDER } from "../shared/constants.js";
@@ -12,10 +12,25 @@ import { pathExists } from "../fs/fs-utils.js";
 import { nextReproducibleToken } from "../reproducibility/context.js";
 /** Implements normalize prefix for the public runtime surface of this module. */
 export function normalizePrefix(input) {
-    const normalized = (input ?? "").trim().toLowerCase();
-    if (!normalized)
+    const normalized = [];
+    let separatorPending = false;
+    for (const character of (input ?? "").toLowerCase()) {
+        const codePoint = character.charCodeAt(0);
+        const isAsciiDigit = codePoint >= 48 && codePoint <= 57;
+        const isAsciiLetter = codePoint >= 97 && codePoint <= 122;
+        if (!isAsciiDigit && !isAsciiLetter) {
+            separatorPending = normalized.length > 0;
+            continue;
+        }
+        if (separatorPending) {
+            normalized.push("-");
+            separatorPending = false;
+        }
+        normalized.push(character);
+    }
+    if (normalized.length === 0)
         return "pm-";
-    return normalized.endsWith("-") ? normalized : `${normalized}-`;
+    return `${normalized.join("")}-`;
 }
 /** Implements normalize raw item id for the public runtime surface of this module. */
 export function normalizeRawItemId(input) {
@@ -91,4 +106,4 @@ export async function generateItemId(pmRoot, prefix, options = {}) {
     throw new Error(`Unable to generate unique id after ${attempts} attempts`);
 }
 //# sourceMappingURL=id.js.map
-//# debugId=50a277b9-d530-5aa0-8bd0-8eb0d36911e5
+//# debugId=6b3f1585-ab12-57ca-80eb-d3cebc384c52

package/dist/core/item/item-format.js

@@ -4,7 +4,7 @@
  * Defines item parsing, formatting, and lifecycle helpers for Item Format.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="eaf0e260-a864-57cf-b23b-aac4f9151d8e")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="65a90a42-eecb-57d3-9f78-3a5f1bc3abd3")}catch(e){}}();
 import { encode as encodeToon } from "@toon-format/toon";
 import { isDeepStrictEqual } from "node:util";
 import { CONFIDENCE_TEXT_VALUES, ISSUE_SEVERITY_VALUES, PLAN_STEP_STATUS_VALUES, RECURRENCE_FREQUENCY_VALUES, RECURRENCE_WEEKDAY_VALUES, STATUS_VALUES, weekdayOrderIndex, } from "../../types/index.js";
@@ -24,6 +24,19 @@ const LINKED_TEST_PM_CONTEXT_MODE_VALUES = new Set([
     "tracker",
     "auto",
 ]);
+const LINKED_TEST_WORKSPACE_CONTEXT_MODE_VALUES = new Set([
+    "source",
+    "isolated",
+    "snapshot",
+]);
+const LINKED_TEST_TRUST_REASON_VALUES = new Set([
+    "legacy",
+    "local_mutation",
+    "local_source_ref",
+    "acknowledged",
+    "invalid_provenance",
+    "foreign_source_ref",
+]);
 const ITEM_TEST_RUN_STATUS_VALUES = new Set([
     "passed",
     "failed",
@@ -601,6 +614,30 @@ function normalizeTestRunMeasurements(value) {
         .slice(0, 32);
     return deduplicated.length > 0 ? deduplicated : undefined;
 }
+/** Normalize and bound command/context provenance retained for a test run. */
+function normalizeTestRunEnum(value, allowedValues) {
+    return typeof value === "string" && allowedValues.has(value)
+        ? value
+        : undefined;
+}
+/** Normalize and bound command/context provenance retained for a test run. */
+function normalizeTestRunExecutions(values) {
+    if (!Array.isArray(values))
+        return undefined;
+    const executions = values
+        .filter((execution) => execution &&
+        typeof execution.command === "string" &&
+        execution.command.trim().length > 0)
+        .slice(0, 32)
+        .map((execution) => ({
+        command: execution.command.trim(),
+        requested_pm_context_mode: normalizeTestRunEnum(execution.requested_pm_context_mode, LINKED_TEST_PM_CONTEXT_MODE_VALUES),
+        pm_context_mode: normalizeTestRunEnum(execution.pm_context_mode, LINKED_TEST_PM_CONTEXT_MODE_VALUES),
+        workspace_context_mode: normalizeTestRunEnum(execution.workspace_context_mode, LINKED_TEST_WORKSPACE_CONTEXT_MODE_VALUES),
+        trust_reason: normalizeTestRunEnum(execution.trust_reason, LINKED_TEST_TRUST_REASON_VALUES),
+    }));
+    return executions.length > 0 ? executions : undefined;
+}
 function normalizeTestRunSummary(value) {
     const runId = typeof value.run_id === "string" ? value.run_id.trim() : "";
     const kind = value.kind === "test" || value.kind === "test-all" ? value.kind : "test";
@@ -623,6 +660,7 @@ function normalizeTestRunSummary(value) {
         linked_tests: normalizeNonNegativeInteger(value.linked_tests),
         fail_on_skipped_triggered: value.fail_on_skipped_triggered === true ? true : undefined,
         measurements: normalizeTestRunMeasurements(value.measurements),
+        executions: normalizeTestRunExecutions(value.executions),
     };
     deleteUndefinedFields(summary);
     return summary;
@@ -683,6 +721,45 @@ function normalizeLinkedTestContextMode(value) {
     }
     return normalized;
 }
+function normalizeLinkedTestWorkspaceContextMode(value) {
+    const normalized = value?.trim().toLowerCase();
+    if (!normalized ||
+        !LINKED_TEST_WORKSPACE_CONTEXT_MODE_VALUES.has(normalized)) {
+        return undefined;
+    }
+    return normalized;
+}
+function normalizeLinkedTestProvenance(value, invalid) {
+    if (invalid === true) {
+        return { provenance_invalid: true };
+    }
+    if (value === undefined) {
+        return {};
+    }
+    if (!isPlainObjectRecord(value)) {
+        return { provenance_invalid: true };
+    }
+    const author = trimStringOrUndefined(value.author);
+    const createdAt = trimStringOrUndefined(value.created_at);
+    const sourceKind = value.source_kind;
+    if (!author ||
+        !createdAt ||
+        !isTimestampLiteral(createdAt) ||
+        (sourceKind !== "local_mutation" && sourceKind !== "merge_union")) {
+        // Preserve malformed provenance as an explicit runtime sentinel. Dropping
+        // it would make a tampered entry indistinguishable from a trusted legacy
+        // command in the clone-local trust resolver.
+        return { provenance_invalid: true };
+    }
+    return {
+        provenance: {
+            author,
+            created_at: createdAt,
+            source_kind: sourceKind,
+            source_ref: trimStringOrUndefined(value.source_ref),
+        },
+    };
+}
 function normalizeLinkedTest(value) {
     const test = {
         command: value.command?.trim() || undefined,
@@ -694,6 +771,8 @@ function normalizeLinkedTest(value) {
             ? value.timeout_seconds
             : undefined,
         pm_context_mode: normalizeLinkedTestContextMode(value.pm_context_mode),
+        workspace_context_mode: normalizeLinkedTestWorkspaceContextMode(value.workspace_context_mode),
+        ...normalizeLinkedTestProvenance(value.provenance, value.provenance_invalid),
         env_set: normalizeStringRecord(value.env_set),
         env_clear: normalizeTrimmedStringList(value.env_clear),
         shared_host_safe: value.shared_host_safe === true ? true : undefined,
@@ -1393,4 +1472,4 @@ export const _testOnlyItemFormat = {
     sortTests,
 };
 //# sourceMappingURL=item-format.js.map
-//# debugId=eaf0e260-a864-57cf-b23b-aac4f9151d8e
+//# debugId=65a90a42-eecb-57d3-9f78-3a5f1bc3abd3

package/dist/core/reproducibility/context.d.ts

@@ -7,8 +7,12 @@ export interface ReproducibleExecutionSettings {
     /** Milliseconds advanced after each clock read. */
     tickMs: number;
 }
+/** Runs async operations against one shared deterministic sequence. */
+export type ReproducibleExecutionRunner = <T>(operation: () => Promise<T>) => Promise<T>;
 /** Validate and normalize deterministic execution settings before work starts. */
 export declare function validateReproducibleExecutionSettings(settings: ReproducibleExecutionSettings): ReproducibleExecutionSettings;
+/** Create a runner whose serial operations share deterministic clock and entropy state. */
+export declare function createReproducibleExecutionRunner(settings: ReproducibleExecutionSettings): ReproducibleExecutionRunner;
 /** Run an isolated async operation with deterministic clock and entropy state. */
 export declare function runWithReproducibleExecution<T>(settings: ReproducibleExecutionSettings, operation: () => Promise<T>): Promise<T>;
 /** Return the next deterministic clock value, or undefined outside a recipe. */

package/dist/core/reproducibility/context.js

@@ -2,10 +2,11 @@
  * @module core/reproducibility/context
  *
  * Provides opt-in deterministic time and identifier entropy for reproducible
- * workspace executions. The default CLI path never installs this context.
+ * workspace executions. SDK recipes and supported process adapters install
+ * this context explicitly; default execution remains nondeterministic.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="cc84ae55-6dc4-57d4-b7de-c43ae1fb4603")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="aacc48ae-e9b2-5c8e-945f-89d05aff48e8")}catch(e){}}();
 import crypto from "node:crypto";
 import { AsyncLocalStorage } from "node:async_hooks";
 const executionStorage = new AsyncLocalStorage();
@@ -19,7 +20,7 @@ export function validateReproducibleExecutionSettings(settings) {
     if (!Number.isSafeInteger(settings.tickMs) || settings.tickMs < 0) {
         throw new Error("Reproducible workspace tickMs must be a non-negative integer");
     }
-    if (settings.seed.length === 0) {
+    if (settings.seed.trim().length === 0) {
         throw new Error("Reproducible workspace seed must not be empty");
     }
     return {
@@ -27,14 +28,19 @@ export function validateReproducibleExecutionSettings(settings) {
         clock: new Date(clockMs).toISOString(),
     };
 }
-/** Run an isolated async operation with deterministic clock and entropy state. */
-export async function runWithReproducibleExecution(settings, operation) {
+/** Create a runner whose serial operations share deterministic clock and entropy state. */
+export function createReproducibleExecutionRunner(settings) {
     const normalized = validateReproducibleExecutionSettings(settings);
-    return executionStorage.run({
+    const state = {
         ...normalized,
         clockReads: 0,
         tokenReads: 0,
-    }, operation);
+    };
+    return (operation) => executionStorage.run(state, operation);
+}
+/** Run an isolated async operation with deterministic clock and entropy state. */
+export async function runWithReproducibleExecution(settings, operation) {
+    return createReproducibleExecutionRunner(settings)(operation);
 }
 /** Return the next deterministic clock value, or undefined outside a recipe. */
 export function nextReproducibleTimestamp() {
@@ -74,4 +80,4 @@ export function nextReproducibleToken(length) {
     return token;
 }
 //# sourceMappingURL=context.js.map
-//# debugId=cc84ae55-6dc4-57d4-b7de-c43ae1fb4603
+//# debugId=aacc48ae-e9b2-5c8e-945f-89d05aff48e8

package/dist/core/shared/author.d.ts

@@ -6,7 +6,7 @@ export type AgentModelSource = "override" | "environment" | "mcp_client" | "argv
 /** Stable built-in provenance dimensions understood by the default runtime. */
 export declare const AGENT_PROVENANCE_DIMENSIONS: readonly ["model", "effort", "role", "topic", "version"];
 /** Built-in, bounded local resolver names accepted by harness descriptors. */
-export type AgentProvenanceResolver = "ai_agent_version" | "claude_session_file";
+export type AgentProvenanceResolver = "ai_agent_version" | "claude_session_file" | "codex_session_file";
 /** One bounded provenance value and the signal class that supplied it. */
 export interface AgentProvenanceObservation {
     /** Bounded descriptive value retained in local history. */
@@ -74,6 +74,49 @@ export interface HarnessSignalDescriptor {
     /** Literal, case-insensitive MCP client-name markers. */
     client_names?: readonly string[];
 }
+/** Versioned package-replaceable provenance contract for one agent harness. */
+export interface AgentProvenanceAdapter {
+    /** Public adapter contract revision. */
+    contract_version: 1;
+    /** Adapter implementation revision supplied by pm or a package. */
+    adapter_version: string;
+    /** Explicit replacement precedence; built-ins use zero. */
+    priority: number;
+    /** Stable lowercase harness namespace. */
+    harness: string;
+    /** Executable detection and provenance descriptor. */
+    descriptor: HarnessSignalDescriptor;
+    /** Provenance dimensions intentionally covered by the adapter. */
+    supported_dimensions: readonly string[];
+    /** Privacy classes the adapter may inspect. */
+    native_sources: readonly ("environment" | "argv" | "mcp_client" | "session_file")[];
+    /** Hard bounds shared by runtime probes and package review. */
+    probe_policy: {
+        max_bytes: number;
+        max_lines: number;
+        network_access: false;
+        subprocess_access: false;
+    };
+    /** Stable normalization vocabulary declarations. */
+    normalization: {
+        model_family: "v1";
+        effort: "v1";
+        preserve_raw: true;
+    };
+    /** Confidence of a value read directly from the declared sources. */
+    confidence: "high" | "medium" | "low";
+    /** Bounded reasons for intentionally uncovered dimensions. */
+    waivers?: Readonly<Record<string, string>>;
+}
+/** One raw and normalized adapter value with its stable vocabulary revision. */
+export interface NormalizedAgentProvenanceAdapterValue {
+    /** Bounded value retained exactly as observed. */
+    raw: string;
+    /** Stable cross-harness family or vocabulary value. */
+    normalized: string;
+    /** Normalization vocabulary revision. */
+    vocabulary: "v1";
+}
 /** Public, privacy-safe agent observation shared by CLI, SDK, and MCP hosts. */
 export interface DetectedAgentIdentity {
     /** Normalized harness namespace when automatic detection succeeded. */
@@ -128,6 +171,8 @@ export interface HarnessDetectionSignals {
 }
 /** Built-in agent descriptors evaluated before package and workspace additions. */
 export declare const BUILTIN_HARNESS_SIGNAL_DESCRIPTORS: readonly HarnessSignalDescriptor[];
+/** Built-in versioned adapters for supported interactive agent harnesses. */
+export declare const BUILTIN_AGENT_PROVENANCE_ADAPTERS: readonly AgentProvenanceAdapter[];
 /**
  * Register package-provided harness signals until the returned disposer runs.
  *
@@ -136,6 +181,15 @@ export declare const BUILTIN_HARNESS_SIGNAL_DESCRIPTORS: readonly HarnessSignalD
  * repeated extension activation remains idempotent.
  */
 export declare function registerHarnessSignalDescriptors(descriptors: readonly HarnessSignalDescriptor[]): () => void;
+/** Return the effective built-in or explicitly higher-priority package adapters. */
+export declare function listAgentProvenanceAdapters(): readonly AgentProvenanceAdapter[];
+/**
+ * Register package adapters until disposal. Replacing a built-in requires an
+ * explicitly greater priority; equal-priority ambiguity fails closed.
+ */
+export declare function registerAgentProvenanceAdapters(adapters: readonly AgentProvenanceAdapter[]): () => void;
+/** Normalize model-family or effort vocabulary while retaining the raw value. */
+export declare function normalizeAgentProvenanceAdapterValue(dimension: "model" | "effort", value: string): NormalizedAgentProvenanceAdapterValue;
 /** Run one invocation with host-provided detection signals available downstream. */
 export declare function runWithHarnessDetectionSignals<T>(signals: HarnessDetectionSignals, callback: () => T): T;
 /** Run one invocation with workspace-provided descriptors available downstream. */