@unbrained/pm-cli 2026.8.22 → 2026.8.23

package/dist/core/config/nested-settings.js

@@ -24,7 +24,7 @@
  */
 /** Search/provider/vector-store leaves. Order is the display order in `pm config list` and in error hints. */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="be95f220-5f66-5e8c-8447-996696d02e43")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="4e50d57b-4502-5ce5-a6dd-0bdc8eba5af4")}catch(e){}}();
 export const NESTED_SETTING_DESCRIPTORS = [
     {
         key: "search_provider",
@@ -207,6 +207,12 @@ export const NESTED_SETTING_DESCRIPTORS = [
         non_empty: true,
         summary: "Default author recorded on mutations when --author is not supplied.",
     },
+    {
+        key: "agent_identity_probes_enabled",
+        path: "agent_identity.probes_enabled",
+        kind: "boolean",
+        summary: "Allow privacy-bounded local harness provenance probes; no network or subprocess access is permitted.",
+    },
     {
         key: "mutation_guard_require_attributed_author",
         path: "mutation_guard.require_attributed_author",
@@ -526,4 +532,4 @@ export function writeNestedSettingValue(settings, descriptor, value) {
     return true;
 }
 //# sourceMappingURL=nested-settings.js.map
-//# debugId=be95f220-5f66-5e8c-8447-996696d02e43
+//# debugId=4e50d57b-4502-5ce5-a6dd-0bdc8eba5af4

package/dist/core/config/positional-value.d.ts

@@ -41,7 +41,7 @@ export interface ConfigPositionalNotRoutable {
 /** Restricts config positional result values accepted by command, SDK, and storage contracts. */
 export type ConfigPositionalResult = ConfigPositionalRouted | ConfigPositionalNotRoutable;
 /** Canonical snake-case config keys accepted by the config command and positional router. */
-export type ConfigKey = "definition_of_done" | "item_format" | "history_missing_stream_policy" | "sprint_release_format_policy" | "parent_reference_policy" | "metadata_validation_profile" | "metadata_required_fields" | "lifecycle_stale_blocker_reason_patterns" | "lifecycle_closure_like_blocked_reason_patterns" | "lifecycle_closure_like_resolution_patterns" | "lifecycle_closure_like_actual_result_patterns" | "governance_preset" | "governance_ownership_enforcement" | "governance_create_mode_default" | "governance_close_validation_default" | "governance_require_close_reason" | "governance_create_default_type" | "governance_workflow_enforcement" | "governance_parent_reference_policy" | "governance_metadata_validation_profile" | "governance_force_required_for_stale_lock" | "test_result_tracking" | "telemetry_tracking" | "context";
+export type ConfigKey = "definition_of_done" | "item_format" | "history_missing_stream_policy" | "sprint_release_format_policy" | "parent_reference_policy" | "metadata_validation_profile" | "metadata_required_fields" | "lifecycle_stale_blocker_reason_patterns" | "lifecycle_closure_like_blocked_reason_patterns" | "lifecycle_closure_like_resolution_patterns" | "lifecycle_closure_like_actual_result_patterns" | "governance_preset" | "governance_ownership_enforcement" | "governance_create_mode_default" | "governance_close_validation_default" | "governance_require_close_reason" | "governance_create_default_type" | "governance_workflow_enforcement" | "governance_parent_reference_policy" | "governance_metadata_validation_profile" | "governance_force_required_for_stale_lock" | "test_result_tracking" | "untrusted_linked_test_execution" | "telemetry_tracking" | "agent_identity_vocabulary" | "context";
 /**
  * Resolve which typed flag a positional `pm config set <key> <value>` value should
  * populate, plus the normalized value.

package/dist/core/config/positional-value.js

@@ -10,7 +10,7 @@
  * good error messages.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="4f4f5f10-793d-5baa-8985-c0ec855b16c4")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="77fa2822-1681-59d5-8388-037cf13c45dd")}catch(e){}}();
 const FORMAT_KEYS = new Set(["item_format"]);
 const CRITERIA_KEYS = new Set([
     "definition_of_done",
@@ -36,13 +36,16 @@ const POLICY_KEYS = new Set([
     "governance_metadata_validation_profile",
     "governance_force_required_for_stale_lock",
     "test_result_tracking",
+    "untrusted_linked_test_execution",
     "telemetry_tracking",
+    "agent_identity_vocabulary",
 ]);
 /** Policy keys whose only valid values are enabled/disabled. For these we accept the intuitive synonyms off/on/true/false. Other policy keys pass through unchanged so their own validators report the precise allowed set. */
 const ENABLED_DISABLED_POLICY_KEYS = new Set([
     "governance_require_close_reason",
     "governance_force_required_for_stale_lock",
     "test_result_tracking",
+    "untrusted_linked_test_execution",
     "telemetry_tracking",
 ]);
 const ENABLED_DISABLED_SYNONYMS = {
@@ -104,4 +107,4 @@ export function resolveConfigPositionalValue(canonicalKeyOrAlias, value) {
     return { routable: true, flag: "policy", value: policyValue };
 }
 //# sourceMappingURL=positional-value.js.map
-//# debugId=4f4f5f10-793d-5baa-8985-c0ec855b16c4
+//# debugId=77fa2822-1681-59d5-8388-037cf13c45dd

package/dist/core/history/history.js

@@ -4,7 +4,7 @@
  * Implements append-only history and replay behavior for History.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="2fc7f675-3500-5abb-8d5c-9ca9caa803b6")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="f7cf18cb-0068-58ad-bd7f-759a5d91eb9f")}catch(e){}}();
 import jsonPatch from "fast-json-patch";
 import { ITEM_METADATA_KEY_ORDER } from "../shared/constants.js";
 import { runActiveServiceOverride } from "../extensions/index.js";
@@ -178,7 +178,7 @@ export function createHistoryEntry(params) {
     const patch = normalizeHistoryPatchOps(beforePatchCanonical, rawPatch);
     const agentIdentity = resolveHistoryAgentIdentity(params.author);
     const provenanceOutcomes = agentIdentity.harness
-        ? Object.fromEntries(Object.entries(diagnoseAgentIdentity().provenance_outcomes).filter(([, outcome]) => outcome.status === "failed"))
+        ? Object.fromEntries(Object.entries(diagnoseAgentIdentity().provenance_outcomes).filter(([, outcome]) => outcome.resolver !== undefined && outcome.status !== "resolved"))
         : undefined;
     const context = provenanceOutcomes === undefined || Object.keys(provenanceOutcomes).length === 0
         ? params.context
@@ -292,4 +292,4 @@ export const _testOnly = {
     isDefinedPointerPath,
 };
 //# sourceMappingURL=history.js.map
-//# debugId=2fc7f675-3500-5abb-8d5c-9ca9caa803b6
+//# debugId=f7cf18cb-0068-58ad-bd7f-759a5d91eb9f

package/dist/core/item/item-format.js

@@ -4,7 +4,7 @@
  * Defines item parsing, formatting, and lifecycle helpers for Item Format.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="5eac19ec-235e-5e6f-8ae7-4725f99c9d7f")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="65a90a42-eecb-57d3-9f78-3a5f1bc3abd3")}catch(e){}}();
 import { encode as encodeToon } from "@toon-format/toon";
 import { isDeepStrictEqual } from "node:util";
 import { CONFIDENCE_TEXT_VALUES, ISSUE_SEVERITY_VALUES, PLAN_STEP_STATUS_VALUES, RECURRENCE_FREQUENCY_VALUES, RECURRENCE_WEEKDAY_VALUES, STATUS_VALUES, weekdayOrderIndex, } from "../../types/index.js";
@@ -24,6 +24,19 @@ const LINKED_TEST_PM_CONTEXT_MODE_VALUES = new Set([
     "tracker",
     "auto",
 ]);
+const LINKED_TEST_WORKSPACE_CONTEXT_MODE_VALUES = new Set([
+    "source",
+    "isolated",
+    "snapshot",
+]);
+const LINKED_TEST_TRUST_REASON_VALUES = new Set([
+    "legacy",
+    "local_mutation",
+    "local_source_ref",
+    "acknowledged",
+    "invalid_provenance",
+    "foreign_source_ref",
+]);
 const ITEM_TEST_RUN_STATUS_VALUES = new Set([
     "passed",
     "failed",
@@ -602,6 +615,12 @@ function normalizeTestRunMeasurements(value) {
     return deduplicated.length > 0 ? deduplicated : undefined;
 }
 /** Normalize and bound command/context provenance retained for a test run. */
+function normalizeTestRunEnum(value, allowedValues) {
+    return typeof value === "string" && allowedValues.has(value)
+        ? value
+        : undefined;
+}
+/** Normalize and bound command/context provenance retained for a test run. */
 function normalizeTestRunExecutions(values) {
     if (!Array.isArray(values))
         return undefined;
@@ -612,16 +631,10 @@ function normalizeTestRunExecutions(values) {
         .slice(0, 32)
         .map((execution) => ({
         command: execution.command.trim(),
-        requested_pm_context_mode: execution.requested_pm_context_mode === "schema" ||
-            execution.requested_pm_context_mode === "tracker" ||
-            execution.requested_pm_context_mode === "auto"
-            ? execution.requested_pm_context_mode
-            : undefined,
-        pm_context_mode: execution.pm_context_mode === "schema" ||
-            execution.pm_context_mode === "tracker" ||
-            execution.pm_context_mode === "auto"
-            ? execution.pm_context_mode
-            : undefined,
+        requested_pm_context_mode: normalizeTestRunEnum(execution.requested_pm_context_mode, LINKED_TEST_PM_CONTEXT_MODE_VALUES),
+        pm_context_mode: normalizeTestRunEnum(execution.pm_context_mode, LINKED_TEST_PM_CONTEXT_MODE_VALUES),
+        workspace_context_mode: normalizeTestRunEnum(execution.workspace_context_mode, LINKED_TEST_WORKSPACE_CONTEXT_MODE_VALUES),
+        trust_reason: normalizeTestRunEnum(execution.trust_reason, LINKED_TEST_TRUST_REASON_VALUES),
     }));
     return executions.length > 0 ? executions : undefined;
 }
@@ -708,6 +721,45 @@ function normalizeLinkedTestContextMode(value) {
     }
     return normalized;
 }
+function normalizeLinkedTestWorkspaceContextMode(value) {
+    const normalized = value?.trim().toLowerCase();
+    if (!normalized ||
+        !LINKED_TEST_WORKSPACE_CONTEXT_MODE_VALUES.has(normalized)) {
+        return undefined;
+    }
+    return normalized;
+}
+function normalizeLinkedTestProvenance(value, invalid) {
+    if (invalid === true) {
+        return { provenance_invalid: true };
+    }
+    if (value === undefined) {
+        return {};
+    }
+    if (!isPlainObjectRecord(value)) {
+        return { provenance_invalid: true };
+    }
+    const author = trimStringOrUndefined(value.author);
+    const createdAt = trimStringOrUndefined(value.created_at);
+    const sourceKind = value.source_kind;
+    if (!author ||
+        !createdAt ||
+        !isTimestampLiteral(createdAt) ||
+        (sourceKind !== "local_mutation" && sourceKind !== "merge_union")) {
+        // Preserve malformed provenance as an explicit runtime sentinel. Dropping
+        // it would make a tampered entry indistinguishable from a trusted legacy
+        // command in the clone-local trust resolver.
+        return { provenance_invalid: true };
+    }
+    return {
+        provenance: {
+            author,
+            created_at: createdAt,
+            source_kind: sourceKind,
+            source_ref: trimStringOrUndefined(value.source_ref),
+        },
+    };
+}
 function normalizeLinkedTest(value) {
     const test = {
         command: value.command?.trim() || undefined,
@@ -719,6 +771,8 @@ function normalizeLinkedTest(value) {
             ? value.timeout_seconds
             : undefined,
         pm_context_mode: normalizeLinkedTestContextMode(value.pm_context_mode),
+        workspace_context_mode: normalizeLinkedTestWorkspaceContextMode(value.workspace_context_mode),
+        ...normalizeLinkedTestProvenance(value.provenance, value.provenance_invalid),
         env_set: normalizeStringRecord(value.env_set),
         env_clear: normalizeTrimmedStringList(value.env_clear),
         shared_host_safe: value.shared_host_safe === true ? true : undefined,
@@ -1418,4 +1472,4 @@ export const _testOnlyItemFormat = {
     sortTests,
 };
 //# sourceMappingURL=item-format.js.map
-//# debugId=5eac19ec-235e-5e6f-8ae7-4725f99c9d7f
+//# debugId=65a90a42-eecb-57d3-9f78-3a5f1bc3abd3

package/dist/core/reproducibility/context.d.ts

@@ -7,8 +7,12 @@ export interface ReproducibleExecutionSettings {
     /** Milliseconds advanced after each clock read. */
     tickMs: number;
 }
+/** Runs async operations against one shared deterministic sequence. */
+export type ReproducibleExecutionRunner = <T>(operation: () => Promise<T>) => Promise<T>;
 /** Validate and normalize deterministic execution settings before work starts. */
 export declare function validateReproducibleExecutionSettings(settings: ReproducibleExecutionSettings): ReproducibleExecutionSettings;
+/** Create a runner whose serial operations share deterministic clock and entropy state. */
+export declare function createReproducibleExecutionRunner(settings: ReproducibleExecutionSettings): ReproducibleExecutionRunner;
 /** Run an isolated async operation with deterministic clock and entropy state. */
 export declare function runWithReproducibleExecution<T>(settings: ReproducibleExecutionSettings, operation: () => Promise<T>): Promise<T>;
 /** Return the next deterministic clock value, or undefined outside a recipe. */

package/dist/core/reproducibility/context.js

@@ -2,10 +2,11 @@
  * @module core/reproducibility/context
  *
  * Provides opt-in deterministic time and identifier entropy for reproducible
- * workspace executions. The default CLI path never installs this context.
+ * workspace executions. SDK recipes and supported process adapters install
+ * this context explicitly; default execution remains nondeterministic.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="cc84ae55-6dc4-57d4-b7de-c43ae1fb4603")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="aacc48ae-e9b2-5c8e-945f-89d05aff48e8")}catch(e){}}();
 import crypto from "node:crypto";
 import { AsyncLocalStorage } from "node:async_hooks";
 const executionStorage = new AsyncLocalStorage();
@@ -19,7 +20,7 @@ export function validateReproducibleExecutionSettings(settings) {
     if (!Number.isSafeInteger(settings.tickMs) || settings.tickMs < 0) {
         throw new Error("Reproducible workspace tickMs must be a non-negative integer");
     }
-    if (settings.seed.length === 0) {
+    if (settings.seed.trim().length === 0) {
         throw new Error("Reproducible workspace seed must not be empty");
     }
     return {
@@ -27,14 +28,19 @@ export function validateReproducibleExecutionSettings(settings) {
         clock: new Date(clockMs).toISOString(),
     };
 }
-/** Run an isolated async operation with deterministic clock and entropy state. */
-export async function runWithReproducibleExecution(settings, operation) {
+/** Create a runner whose serial operations share deterministic clock and entropy state. */
+export function createReproducibleExecutionRunner(settings) {
     const normalized = validateReproducibleExecutionSettings(settings);
-    return executionStorage.run({
+    const state = {
         ...normalized,
         clockReads: 0,
         tokenReads: 0,
-    }, operation);
+    };
+    return (operation) => executionStorage.run(state, operation);
+}
+/** Run an isolated async operation with deterministic clock and entropy state. */
+export async function runWithReproducibleExecution(settings, operation) {
+    return createReproducibleExecutionRunner(settings)(operation);
 }
 /** Return the next deterministic clock value, or undefined outside a recipe. */
 export function nextReproducibleTimestamp() {
@@ -74,4 +80,4 @@ export function nextReproducibleToken(length) {
     return token;
 }
 //# sourceMappingURL=context.js.map
-//# debugId=cc84ae55-6dc4-57d4-b7de-c43ae1fb4603
+//# debugId=aacc48ae-e9b2-5c8e-945f-89d05aff48e8

package/dist/core/shared/author.d.ts

@@ -6,7 +6,7 @@ export type AgentModelSource = "override" | "environment" | "mcp_client" | "argv
 /** Stable built-in provenance dimensions understood by the default runtime. */
 export declare const AGENT_PROVENANCE_DIMENSIONS: readonly ["model", "effort", "role", "topic", "version"];
 /** Built-in, bounded local resolver names accepted by harness descriptors. */
-export type AgentProvenanceResolver = "ai_agent_version" | "claude_session_file";
+export type AgentProvenanceResolver = "ai_agent_version" | "claude_session_file" | "codex_session_file";
 /** One bounded provenance value and the signal class that supplied it. */
 export interface AgentProvenanceObservation {
     /** Bounded descriptive value retained in local history. */
@@ -74,6 +74,49 @@ export interface HarnessSignalDescriptor {
     /** Literal, case-insensitive MCP client-name markers. */
     client_names?: readonly string[];
 }
+/** Versioned package-replaceable provenance contract for one agent harness. */
+export interface AgentProvenanceAdapter {
+    /** Public adapter contract revision. */
+    contract_version: 1;
+    /** Adapter implementation revision supplied by pm or a package. */
+    adapter_version: string;
+    /** Explicit replacement precedence; built-ins use zero. */
+    priority: number;
+    /** Stable lowercase harness namespace. */
+    harness: string;
+    /** Executable detection and provenance descriptor. */
+    descriptor: HarnessSignalDescriptor;
+    /** Provenance dimensions intentionally covered by the adapter. */
+    supported_dimensions: readonly string[];
+    /** Privacy classes the adapter may inspect. */
+    native_sources: readonly ("environment" | "argv" | "mcp_client" | "session_file")[];
+    /** Hard bounds shared by runtime probes and package review. */
+    probe_policy: {
+        max_bytes: number;
+        max_lines: number;
+        network_access: false;
+        subprocess_access: false;
+    };
+    /** Stable normalization vocabulary declarations. */
+    normalization: {
+        model_family: "v1";
+        effort: "v1";
+        preserve_raw: true;
+    };
+    /** Confidence of a value read directly from the declared sources. */
+    confidence: "high" | "medium" | "low";
+    /** Bounded reasons for intentionally uncovered dimensions. */
+    waivers?: Readonly<Record<string, string>>;
+}
+/** One raw and normalized adapter value with its stable vocabulary revision. */
+export interface NormalizedAgentProvenanceAdapterValue {
+    /** Bounded value retained exactly as observed. */
+    raw: string;
+    /** Stable cross-harness family or vocabulary value. */
+    normalized: string;
+    /** Normalization vocabulary revision. */
+    vocabulary: "v1";
+}
 /** Public, privacy-safe agent observation shared by CLI, SDK, and MCP hosts. */
 export interface DetectedAgentIdentity {
     /** Normalized harness namespace when automatic detection succeeded. */
@@ -128,6 +171,8 @@ export interface HarnessDetectionSignals {
 }
 /** Built-in agent descriptors evaluated before package and workspace additions. */
 export declare const BUILTIN_HARNESS_SIGNAL_DESCRIPTORS: readonly HarnessSignalDescriptor[];
+/** Built-in versioned adapters for supported interactive agent harnesses. */
+export declare const BUILTIN_AGENT_PROVENANCE_ADAPTERS: readonly AgentProvenanceAdapter[];
 /**
  * Register package-provided harness signals until the returned disposer runs.
  *
@@ -136,6 +181,15 @@ export declare const BUILTIN_HARNESS_SIGNAL_DESCRIPTORS: readonly HarnessSignalD
  * repeated extension activation remains idempotent.
  */
 export declare function registerHarnessSignalDescriptors(descriptors: readonly HarnessSignalDescriptor[]): () => void;
+/** Return the effective built-in or explicitly higher-priority package adapters. */
+export declare function listAgentProvenanceAdapters(): readonly AgentProvenanceAdapter[];
+/**
+ * Register package adapters until disposal. Replacing a built-in requires an
+ * explicitly greater priority; equal-priority ambiguity fails closed.
+ */
+export declare function registerAgentProvenanceAdapters(adapters: readonly AgentProvenanceAdapter[]): () => void;
+/** Normalize model-family or effort vocabulary while retaining the raw value. */
+export declare function normalizeAgentProvenanceAdapterValue(dimension: "model" | "effort", value: string): NormalizedAgentProvenanceAdapterValue;
 /** Run one invocation with host-provided detection signals available downstream. */
 export declare function runWithHarnessDetectionSignals<T>(signals: HarnessDetectionSignals, callback: () => T): T;
 /** Run one invocation with workspace-provided descriptors available downstream. */