@unbrained/pm-cli 2026.8.22 → 2026.8.24

package/dist/core/config/nested-settings.js

@@ -24,7 +24,7 @@
  */
 /** Search/provider/vector-store leaves. Order is the display order in `pm config list` and in error hints. */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="be95f220-5f66-5e8c-8447-996696d02e43")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="4e50d57b-4502-5ce5-a6dd-0bdc8eba5af4")}catch(e){}}();
 export const NESTED_SETTING_DESCRIPTORS = [
     {
         key: "search_provider",
@@ -207,6 +207,12 @@ export const NESTED_SETTING_DESCRIPTORS = [
         non_empty: true,
         summary: "Default author recorded on mutations when --author is not supplied.",
     },
+    {
+        key: "agent_identity_probes_enabled",
+        path: "agent_identity.probes_enabled",
+        kind: "boolean",
+        summary: "Allow privacy-bounded local harness provenance probes; no network or subprocess access is permitted.",
+    },
     {
         key: "mutation_guard_require_attributed_author",
         path: "mutation_guard.require_attributed_author",
@@ -526,4 +532,4 @@ export function writeNestedSettingValue(settings, descriptor, value) {
     return true;
 }
 //# sourceMappingURL=nested-settings.js.map
-//# debugId=be95f220-5f66-5e8c-8447-996696d02e43
+//# debugId=4e50d57b-4502-5ce5-a6dd-0bdc8eba5af4

package/dist/core/config/positional-value.d.ts

@@ -41,7 +41,7 @@ export interface ConfigPositionalNotRoutable {
 /** Restricts config positional result values accepted by command, SDK, and storage contracts. */
 export type ConfigPositionalResult = ConfigPositionalRouted | ConfigPositionalNotRoutable;
 /** Canonical snake-case config keys accepted by the config command and positional router. */
-export type ConfigKey = "definition_of_done" | "item_format" | "history_missing_stream_policy" | "sprint_release_format_policy" | "parent_reference_policy" | "metadata_validation_profile" | "metadata_required_fields" | "lifecycle_stale_blocker_reason_patterns" | "lifecycle_closure_like_blocked_reason_patterns" | "lifecycle_closure_like_resolution_patterns" | "lifecycle_closure_like_actual_result_patterns" | "governance_preset" | "governance_ownership_enforcement" | "governance_create_mode_default" | "governance_close_validation_default" | "governance_require_close_reason" | "governance_create_default_type" | "governance_workflow_enforcement" | "governance_parent_reference_policy" | "governance_metadata_validation_profile" | "governance_force_required_for_stale_lock" | "test_result_tracking" | "telemetry_tracking" | "context";
+export type ConfigKey = "definition_of_done" | "item_format" | "history_missing_stream_policy" | "sprint_release_format_policy" | "parent_reference_policy" | "metadata_validation_profile" | "metadata_required_fields" | "lifecycle_stale_blocker_reason_patterns" | "lifecycle_closure_like_blocked_reason_patterns" | "lifecycle_closure_like_resolution_patterns" | "lifecycle_closure_like_actual_result_patterns" | "governance_preset" | "governance_ownership_enforcement" | "governance_create_mode_default" | "governance_close_validation_default" | "governance_require_close_reason" | "governance_create_default_type" | "governance_workflow_enforcement" | "governance_parent_reference_policy" | "governance_metadata_validation_profile" | "governance_force_required_for_stale_lock" | "test_result_tracking" | "untrusted_linked_test_execution" | "telemetry_tracking" | "agent_identity_vocabulary" | "context";
 /**
  * Resolve which typed flag a positional `pm config set <key> <value>` value should
  * populate, plus the normalized value.

package/dist/core/config/positional-value.js

@@ -10,7 +10,7 @@
  * good error messages.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="4f4f5f10-793d-5baa-8985-c0ec855b16c4")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="77fa2822-1681-59d5-8388-037cf13c45dd")}catch(e){}}();
 const FORMAT_KEYS = new Set(["item_format"]);
 const CRITERIA_KEYS = new Set([
     "definition_of_done",
@@ -36,13 +36,16 @@ const POLICY_KEYS = new Set([
     "governance_metadata_validation_profile",
     "governance_force_required_for_stale_lock",
     "test_result_tracking",
+    "untrusted_linked_test_execution",
     "telemetry_tracking",
+    "agent_identity_vocabulary",
 ]);
 /** Policy keys whose only valid values are enabled/disabled. For these we accept the intuitive synonyms off/on/true/false. Other policy keys pass through unchanged so their own validators report the precise allowed set. */
 const ENABLED_DISABLED_POLICY_KEYS = new Set([
     "governance_require_close_reason",
     "governance_force_required_for_stale_lock",
     "test_result_tracking",
+    "untrusted_linked_test_execution",
     "telemetry_tracking",
 ]);
 const ENABLED_DISABLED_SYNONYMS = {
@@ -104,4 +107,4 @@ export function resolveConfigPositionalValue(canonicalKeyOrAlias, value) {
     return { routable: true, flag: "policy", value: policyValue };
 }
 //# sourceMappingURL=positional-value.js.map
-//# debugId=4f4f5f10-793d-5baa-8985-c0ec855b16c4
+//# debugId=77fa2822-1681-59d5-8388-037cf13c45dd

package/dist/core/extensions/command-metadata-contract.d.ts

@@ -0,0 +1,10 @@
+/**
+ * @module core/extensions/command-metadata-contract
+ *
+ * Owns the closed metadata domains shared by extension registration, runtime
+ * validation, SDK contracts, and workspace projections.
+ */
+/** Canonical capability-family values accepted for every command surface. */
+export declare const EXTENSION_COMMAND_CAPABILITY_FAMILIES: readonly ["workspace", "intake", "context", "lifecycle", "evidence", "graph", "quality", "automation", "extensions", "internal"];
+/** Capability family an extension command contributes to agent routing. */
+export type ExtensionCommandCapabilityFamily = (typeof EXTENSION_COMMAND_CAPABILITY_FAMILIES)[number];

package/dist/core/extensions/command-metadata-contract.js

@@ -0,0 +1,23 @@
+/**
+ * @module core/extensions/command-metadata-contract
+ *
+ * Owns the closed metadata domains shared by extension registration, runtime
+ * validation, SDK contracts, and workspace projections.
+ */
+/** Canonical capability-family values accepted for every command surface. */
+
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="b799a368-2a8a-5031-8d14-f6b9dc4a3978")}catch(e){}}();
+export const EXTENSION_COMMAND_CAPABILITY_FAMILIES = Object.freeze([
+    "workspace",
+    "intake",
+    "context",
+    "lifecycle",
+    "evidence",
+    "graph",
+    "quality",
+    "automation",
+    "extensions",
+    "internal",
+]);
+//# sourceMappingURL=command-metadata-contract.js.map
+//# debugId=b799a368-2a8a-5031-8d14-f6b9dc4a3978

package/dist/core/extensions/command-visibility-tier.js

@@ -1,9 +1,18 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="45d00ef3-870c-5f3f-89c1-6abd54c518fe")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="764d9a7d-90a2-578f-ab5d-bd0c039596df")}catch(e){}}();
 import { assertOptionalStringField } from "./registration-validation.js";
+import { EXTENSION_COMMAND_CAPABILITY_FAMILIES } from "./command-metadata-contract.js";
+const COMMAND_CAPABILITY_FAMILIES = new Set(EXTENSION_COMMAND_CAPABILITY_FAMILIES);
+function assertCommandCapabilityFamily(family) {
+    if (family !== undefined &&
+        !COMMAND_CAPABILITY_FAMILIES.has(String(family))) {
+        throw new Error(`registerCommand definition.family must be one of: ${EXTENSION_COMMAND_CAPABILITY_FAMILIES.join(", ")}`);
+    }
+}
 /** Validate optional command metadata strings and the closed visibility tier. */
 export function assertCommandDefinitionMetadataStrings(definition) {
     assertOptionalStringField("registerCommand definition.action", definition.action);
+    assertOptionalStringField("registerCommand definition.family", definition.family);
     assertOptionalStringField("registerCommand definition.description", definition.description);
     assertOptionalStringField("registerCommand definition.intent", definition.intent);
     assertOptionalStringField("registerCommand definition.tier", definition.tier);
@@ -15,6 +24,7 @@ export function assertCommandDefinitionMetadataStrings(definition) {
         tier !== "internal") {
         throw new Error("registerCommand definition.tier must be core, standard, full, or internal");
     }
+    assertCommandCapabilityFamily(definition.family);
 }
 //# sourceMappingURL=command-visibility-tier.js.map
-//# debugId=45d00ef3-870c-5f3f-89c1-6abd54c518fe
+//# debugId=764d9a7d-90a2-578f-ab5d-bd0c039596df

package/dist/core/extensions/extension-types.d.ts

@@ -13,6 +13,8 @@ import type { GetItemAtResult } from "../../sdk/history-read.js";
 import type { RelationshipEvent, RelationshipEventInput, RelationshipEventStore } from "../../sdk/relationship-history.js";
 import type { CommitWorkspaceTransactionOptions, WorkspaceTransactionCommitResult } from "../../sdk/workspace-transaction.js";
 import type { KnownItemFieldType } from "./item-field-types.js";
+import type { ExtensionCommandCapabilityFamily } from "./command-metadata-contract.js";
+export type { ExtensionCommandCapabilityFamily } from "./command-metadata-contract.js";
 /** Public contract for known extension capabilities, shared by SDK and presentation-layer consumers. */
 export declare const KNOWN_EXTENSION_CAPABILITIES: readonly ["commands", "renderers", "hooks", "schema", "importers", "search", "parser", "preflight", "services"];
 /** Restricts extension capability values accepted by command, SDK, and storage contracts. */
@@ -691,6 +693,8 @@ export interface CommandDefinition {
     flags?: FlagDefinition[];
     /** Minimum agent surface tier that should advertise this command. */
     tier?: "core" | "standard" | "full" | "internal";
+    /** Capability family used by generated agent routing surfaces. */
+    family?: ExtensionCommandCapabilityFamily;
 }
 /**
  * Optional command-definition metadata for first-class importer/exporter
@@ -1272,6 +1276,8 @@ export interface RegisteredExtensionCommandDefinition {
     arguments: ExtensionCommandArgumentDefinition[];
     /** Minimum agent surface tier that should advertise this command. */
     tier?: "core" | "standard" | "full" | "internal";
+    /** Capability family used by generated agent routing surfaces. */
+    family?: ExtensionCommandCapabilityFamily;
 }
 /** Documents the registered extension schema field definitions payload exchanged by command, SDK, and package integrations. */
 export interface RegisteredExtensionSchemaFieldDefinitions {

package/dist/core/extensions/extension-types.js

@@ -1,6 +1,6 @@
 /** Public contract for known extension capabilities, shared by SDK and presentation-layer consumers. */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="87454a57-b62e-560a-b66f-3c15d4a95cc2")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="ef5c8553-c206-5bb5-913a-85afb936f6d7")}catch(e){}}();
 export const KNOWN_EXTENSION_CAPABILITIES = [
     "commands",
     "renderers",
@@ -100,4 +100,4 @@ export function createDefaultExtensionGovernancePolicy() {
     };
 }
 //# sourceMappingURL=extension-types.js.map
-//# debugId=87454a57-b62e-560a-b66f-3c15d4a95cc2
+//# debugId=ef5c8553-c206-5bb5-913a-85afb936f6d7

package/dist/core/extensions/loader.js

@@ -4,7 +4,7 @@
  * Implements extension runtime contracts and governance for Loader.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="10311c96-5cba-5021-a8c5-82abd6eeb6f5")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="e4e1b7c2-6551-5e56-b26a-30062aed5b97")}catch(e){}}();
 import fs from "node:fs/promises";
 import path from "node:path";
 import { pathToFileURL } from "node:url";
@@ -1505,7 +1505,8 @@ class ExtensionApiRegistrar {
                 examples,
                 failure_hints: failureHints,
                 arguments: argumentsDefinition,
-                tier: definition.tier,
+                tier: definition.tier ?? "standard",
+                family: definition.family ?? "extensions",
             };
             if (description) {
                 registration.description = description;
@@ -2220,4 +2221,4 @@ export const _testOnlyLoader = {
     },
 };
 //# sourceMappingURL=loader.js.map
-//# debugId=10311c96-5cba-5021-a8c5-82abd6eeb6f5
+//# debugId=e4e1b7c2-6551-5e56-b26a-30062aed5b97

package/dist/core/history/history.js

@@ -4,7 +4,7 @@
  * Implements append-only history and replay behavior for History.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="2fc7f675-3500-5abb-8d5c-9ca9caa803b6")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="f7cf18cb-0068-58ad-bd7f-759a5d91eb9f")}catch(e){}}();
 import jsonPatch from "fast-json-patch";
 import { ITEM_METADATA_KEY_ORDER } from "../shared/constants.js";
 import { runActiveServiceOverride } from "../extensions/index.js";
@@ -178,7 +178,7 @@ export function createHistoryEntry(params) {
     const patch = normalizeHistoryPatchOps(beforePatchCanonical, rawPatch);
     const agentIdentity = resolveHistoryAgentIdentity(params.author);
     const provenanceOutcomes = agentIdentity.harness
-        ? Object.fromEntries(Object.entries(diagnoseAgentIdentity().provenance_outcomes).filter(([, outcome]) => outcome.status === "failed"))
+        ? Object.fromEntries(Object.entries(diagnoseAgentIdentity().provenance_outcomes).filter(([, outcome]) => outcome.resolver !== undefined && outcome.status !== "resolved"))
         : undefined;
     const context = provenanceOutcomes === undefined || Object.keys(provenanceOutcomes).length === 0
         ? params.context
@@ -292,4 +292,4 @@ export const _testOnly = {
     isDefinedPointerPath,
 };
 //# sourceMappingURL=history.js.map
-//# debugId=2fc7f675-3500-5abb-8d5c-9ca9caa803b6
+//# debugId=f7cf18cb-0068-58ad-bd7f-759a5d91eb9f

package/dist/core/io/body-file.js

@@ -4,10 +4,11 @@
  * Reads command body content from files, stdin, and inline arguments.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="7426082f-94a6-5b4e-9748-d3faab2fe1d4")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="a97ee152-4d20-54f1-add9-fdb991ab6b33")}catch(e){}}();
 import { readFile } from "node:fs/promises";
 import { EXIT_CODE } from "../shared/constants.js";
 import { PmCliError } from "../shared/errors.js";
+import { createStdinTokenResolver } from "../item/parse.js";
 const defaultBodyFileReader = (path) => readFile(path, "utf8");
 /** Implements resolve body file content for the public runtime surface of this module. */
 export async function resolveBodyFileContent(bodyFile, inlineBody, readFileImpl = defaultBodyFileReader) {
@@ -31,6 +32,9 @@ export async function resolveBodyFileContent(bodyFile, inlineBody, readFileImpl
             why: "An empty --body-file value has no file to read the body from.",
         });
     }
+    if (path === "-") {
+        return (await createStdinTokenResolver().resolveValue("-", "--body-file"));
+    }
     try {
         return await readFileImpl(path);
     }
@@ -49,10 +53,11 @@ export async function resolveBodyFileContent(bodyFile, inlineBody, readFileImpl
             why: `The body content is loaded from the file at the supplied path, so an unreadable path cannot produce a body${errno ? ` (underlying error: ${errno})` : ""}.`,
             nextSteps: [
                 `Verify the path: ls -l "${path}"`,
+                "Or pipe the body with --body-file -.",
                 "Or pass the body inline with --body <text>.",
             ],
         });
     }
 }
 //# sourceMappingURL=body-file.js.map
-//# debugId=7426082f-94a6-5b4e-9748-d3faab2fe1d4
+//# debugId=a97ee152-4d20-54f1-add9-fdb991ab6b33

package/dist/core/io/bulk-ids-input.d.ts

@@ -0,0 +1,24 @@
+/** File reader injected by tests or host runtimes that virtualize argv files. */
+export type BulkIdsFileReader = (path: string) => Promise<string>;
+/** Stdin reader injected by tests or hosts that do not use process stdin. */
+export type BulkIdsStdinReader = (optionName: string) => Promise<string>;
+/** Dependencies used to resolve CLI-only external ID sources. */
+export interface BulkIdsInputReaders {
+    /** Read a UTF-8 `@path` payload. */
+    readFile?: BulkIdsFileReader;
+    /** Read the complete stdin payload for `-`. */
+    readStdin?: BulkIdsStdinReader;
+}
+/** Transport-native bulk ID shapes accepted by SDK and MCP adapters. */
+export type BulkIdsValue = string | number | readonly (string | number)[] | undefined;
+/** Parse comma- or line-delimited item IDs with stable first-seen deduplication. */
+export declare function parseBulkIdsText(raw: string): string[];
+/** Normalize SDK/MCP scalar-or-array ID input into the list query's CSV form. */
+export declare function normalizeBulkIdsValue(value: BulkIdsValue): string | undefined;
+/**
+ * Resolve one CLI `--ids` value. `-` reads newline/comma-delimited stdin and
+ * `@path` reads the same grammar from a UTF-8 file; ordinary argv text accepts
+ * the grammar inline. The return value is canonical CSV for existing list
+ * filtering and unmatched-id accounting.
+ */
+export declare function resolveCliBulkIdsInput(value: string | undefined, optionName?: string, readers?: BulkIdsInputReaders): Promise<string | undefined>;

package/dist/core/io/bulk-ids-input.js

@@ -0,0 +1,113 @@
+/**
+ * @module core/io/bulk-ids-input
+ *
+ * Normalizes bulk item-id selectors supplied inline, through stdin, or from an
+ * argv-referenced file. Presentation layers can share the parser while MCP and
+ * embedded SDK callers keep passing transport-native arrays.
+ */
+
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="411f4336-eb02-5167-9dce-ea99822a8a14")}catch(e){}}();
+import { readFile } from "node:fs/promises";
+import { createStdinTokenResolver } from "../item/parse.js";
+import { EXIT_CODE } from "../shared/constants.js";
+import { PmCliError } from "../shared/errors.js";
+const defaultFileReader = (path) => readFile(path, "utf8");
+const defaultStdinReader = async (optionName) => (await createStdinTokenResolver().resolveValue("-", optionName));
+/** Parse comma- or line-delimited item IDs with stable first-seen deduplication. */
+export function parseBulkIdsText(raw) {
+    return [
+        ...new Set(raw
+            .split(/[,\r\n]+/)
+            .map((entry) => entry.trim())
+            .filter((entry) => entry.length > 0)),
+    ];
+}
+function normalizeBulkIdsArray(value) {
+    const entries = [];
+    for (const entry of value) {
+        if (typeof entry === "string") {
+            entries.push(entry);
+        }
+        else if (typeof entry === "number" && Number.isFinite(entry)) {
+            entries.push(String(entry));
+        }
+        else {
+            return "";
+        }
+    }
+    const ids = parseBulkIdsText(entries.join("\n"));
+    return ids.length > 0 ? ids.join(",") : "";
+}
+/** Normalize SDK/MCP scalar-or-array ID input into the list query's CSV form. */
+export function normalizeBulkIdsValue(value) {
+    if (value === undefined) {
+        return undefined;
+    }
+    if (typeof value === "number") {
+        // Preserve an explicitly supplied but invalid numeric selector as blank so
+        // the bulk lifecycle's fail-closed empty-ID guard rejects it. Returning
+        // undefined here would erase the allowlist and could broaden a mutation to
+        // every item matched by the remaining filters.
+        return Number.isFinite(value) ? String(value) : "";
+    }
+    if (Array.isArray(value)) {
+        return normalizeBulkIdsArray(value);
+    }
+    if (typeof value !== "string") {
+        return "";
+    }
+    const ids = parseBulkIdsText(value);
+    return ids.length > 0 ? ids.join(",") : "";
+}
+/**
+ * Resolve one CLI `--ids` value. `-` reads newline/comma-delimited stdin and
+ * `@path` reads the same grammar from a UTF-8 file; ordinary argv text accepts
+ * the grammar inline. The return value is canonical CSV for existing list
+ * filtering and unmatched-id accounting.
+ */
+export async function resolveCliBulkIdsInput(value, optionName = "--ids", readers = {}) {
+    if (value === undefined) {
+        return undefined;
+    }
+    const trimmed = value.trim();
+    let raw = value;
+    try {
+        if (trimmed === "-") {
+            raw = await (readers.readStdin ?? defaultStdinReader)(optionName);
+        }
+        else if (trimmed.startsWith("@")) {
+            const path = trimmed.slice(1).trim();
+            if (path.length === 0) {
+                throw new PmCliError(`${optionName} @path requires a non-empty file path.`, EXIT_CODE.USAGE, {
+                    code: "bulk_ids_input_missing_path",
+                    required: `Pass ${optionName} @<path>, ${optionName} -, or inline IDs.`,
+                });
+            }
+            raw = await (readers.readFile ?? defaultFileReader)(path);
+        }
+    }
+    catch (error) {
+        if (error instanceof PmCliError) {
+            throw error;
+        }
+        const detail = error instanceof Error ? error.message : String(error);
+        throw new PmCliError(`${optionName} could not read ${trimmed === "-" ? "stdin" : `"${trimmed.slice(1).trim()}"`}: ${detail}`, EXIT_CODE.NOT_FOUND, {
+            code: "bulk_ids_input_unreadable",
+            required: `Provide readable newline/comma-delimited IDs via ${optionName} -, ${optionName} @<path>, or inline argv text.`,
+            nextSteps: [
+                `Retry with inline IDs: ${optionName} pm-a1b2,pm-c3d4`,
+                `Or pipe IDs: pm list --id-only | pm update-many ${optionName} - --dry-run`,
+            ],
+        });
+    }
+    const normalized = normalizeBulkIdsValue(raw);
+    if (normalized !== "") {
+        return normalized;
+    }
+    throw new PmCliError(`${optionName} requires at least one non-empty item ID.`, EXIT_CODE.USAGE, {
+        code: "bulk_ids_input_empty",
+        required: `Provide one or more comma- or newline-delimited IDs through argv, stdin, or @path.`,
+    });
+}
+//# sourceMappingURL=bulk-ids-input.js.map
+//# debugId=411f4336-eb02-5167-9dce-ea99822a8a14

package/dist/core/item/item-format.js

@@ -4,7 +4,7 @@
  * Defines item parsing, formatting, and lifecycle helpers for Item Format.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="5eac19ec-235e-5e6f-8ae7-4725f99c9d7f")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="65a90a42-eecb-57d3-9f78-3a5f1bc3abd3")}catch(e){}}();
 import { encode as encodeToon } from "@toon-format/toon";
 import { isDeepStrictEqual } from "node:util";
 import { CONFIDENCE_TEXT_VALUES, ISSUE_SEVERITY_VALUES, PLAN_STEP_STATUS_VALUES, RECURRENCE_FREQUENCY_VALUES, RECURRENCE_WEEKDAY_VALUES, STATUS_VALUES, weekdayOrderIndex, } from "../../types/index.js";
@@ -24,6 +24,19 @@ const LINKED_TEST_PM_CONTEXT_MODE_VALUES = new Set([
     "tracker",
     "auto",
 ]);
+const LINKED_TEST_WORKSPACE_CONTEXT_MODE_VALUES = new Set([
+    "source",
+    "isolated",
+    "snapshot",
+]);
+const LINKED_TEST_TRUST_REASON_VALUES = new Set([
+    "legacy",
+    "local_mutation",
+    "local_source_ref",
+    "acknowledged",
+    "invalid_provenance",
+    "foreign_source_ref",
+]);
 const ITEM_TEST_RUN_STATUS_VALUES = new Set([
     "passed",
     "failed",
@@ -602,6 +615,12 @@ function normalizeTestRunMeasurements(value) {
     return deduplicated.length > 0 ? deduplicated : undefined;
 }
 /** Normalize and bound command/context provenance retained for a test run. */
+function normalizeTestRunEnum(value, allowedValues) {
+    return typeof value === "string" && allowedValues.has(value)
+        ? value
+        : undefined;
+}
+/** Normalize and bound command/context provenance retained for a test run. */
 function normalizeTestRunExecutions(values) {
     if (!Array.isArray(values))
         return undefined;
@@ -612,16 +631,10 @@ function normalizeTestRunExecutions(values) {
         .slice(0, 32)
         .map((execution) => ({
         command: execution.command.trim(),
-        requested_pm_context_mode: execution.requested_pm_context_mode === "schema" ||
-            execution.requested_pm_context_mode === "tracker" ||
-            execution.requested_pm_context_mode === "auto"
-            ? execution.requested_pm_context_mode
-            : undefined,
-        pm_context_mode: execution.pm_context_mode === "schema" ||
-            execution.pm_context_mode === "tracker" ||
-            execution.pm_context_mode === "auto"
-            ? execution.pm_context_mode
-            : undefined,
+        requested_pm_context_mode: normalizeTestRunEnum(execution.requested_pm_context_mode, LINKED_TEST_PM_CONTEXT_MODE_VALUES),
+        pm_context_mode: normalizeTestRunEnum(execution.pm_context_mode, LINKED_TEST_PM_CONTEXT_MODE_VALUES),
+        workspace_context_mode: normalizeTestRunEnum(execution.workspace_context_mode, LINKED_TEST_WORKSPACE_CONTEXT_MODE_VALUES),
+        trust_reason: normalizeTestRunEnum(execution.trust_reason, LINKED_TEST_TRUST_REASON_VALUES),
     }));
     return executions.length > 0 ? executions : undefined;
 }
@@ -708,6 +721,45 @@ function normalizeLinkedTestContextMode(value) {
     }
     return normalized;
 }
+function normalizeLinkedTestWorkspaceContextMode(value) {
+    const normalized = value?.trim().toLowerCase();
+    if (!normalized ||
+        !LINKED_TEST_WORKSPACE_CONTEXT_MODE_VALUES.has(normalized)) {
+        return undefined;
+    }
+    return normalized;
+}
+function normalizeLinkedTestProvenance(value, invalid) {
+    if (invalid === true) {
+        return { provenance_invalid: true };
+    }
+    if (value === undefined) {
+        return {};
+    }
+    if (!isPlainObjectRecord(value)) {
+        return { provenance_invalid: true };
+    }
+    const author = trimStringOrUndefined(value.author);
+    const createdAt = trimStringOrUndefined(value.created_at);
+    const sourceKind = value.source_kind;
+    if (!author ||
+        !createdAt ||
+        !isTimestampLiteral(createdAt) ||
+        (sourceKind !== "local_mutation" && sourceKind !== "merge_union")) {
+        // Preserve malformed provenance as an explicit runtime sentinel. Dropping
+        // it would make a tampered entry indistinguishable from a trusted legacy
+        // command in the clone-local trust resolver.
+        return { provenance_invalid: true };
+    }
+    return {
+        provenance: {
+            author,
+            created_at: createdAt,
+            source_kind: sourceKind,
+            source_ref: trimStringOrUndefined(value.source_ref),
+        },
+    };
+}
 function normalizeLinkedTest(value) {
     const test = {
         command: value.command?.trim() || undefined,
@@ -719,6 +771,8 @@ function normalizeLinkedTest(value) {
             ? value.timeout_seconds
             : undefined,
         pm_context_mode: normalizeLinkedTestContextMode(value.pm_context_mode),
+        workspace_context_mode: normalizeLinkedTestWorkspaceContextMode(value.workspace_context_mode),
+        ...normalizeLinkedTestProvenance(value.provenance, value.provenance_invalid),
         env_set: normalizeStringRecord(value.env_set),
         env_clear: normalizeTrimmedStringList(value.env_clear),
         shared_host_safe: value.shared_host_safe === true ? true : undefined,
@@ -1418,4 +1472,4 @@ export const _testOnlyItemFormat = {
     sortTests,
 };
 //# sourceMappingURL=item-format.js.map
-//# debugId=5eac19ec-235e-5e6f-8ae7-4725f99c9d7f
+//# debugId=65a90a42-eecb-57d3-9f78-3a5f1bc3abd3

package/dist/core/item/parse.d.ts

@@ -53,10 +53,30 @@ export declare function assertNoUnknownCsvKeys(kv: Record<string, string>, optio
 /** Documents the stdin token resolver payload exchanged by command, SDK, and package integrations. */
 export interface StdinTokenResolver {
     /** Value that configures or reports resolve value for this contract. */
-    resolveValue(value: string | undefined, optionName: string): Promise<string | undefined>;
+    resolveValue(value: string | undefined, optionName: string, resolveToken?: boolean): Promise<string | undefined>;
     /** Value that configures or reports resolve list for this contract. */
-    resolveList(values: string[] | undefined, optionName: string): Promise<string[] | undefined>;
+    resolveList(values: string[] | undefined, optionName: string, resolveToken?: boolean): Promise<string[] | undefined>;
 }
+/** Mark transport-decoded options whose dash values are data, not stdin tokens. */
+export declare function preserveMutationStdinTokenLiterals<T extends object>(options: T): T;
+/** Mark selected mutation fields whose dash values are literal transport data. */
+export declare function preserveMutationStdinTokenFields<T extends object>(options: T, fields: readonly PropertyKey[]): T;
+/** Copy the complete mutation stdin-token policy across an option clone. */
+export declare function transferMutationStdinTokenPolicy<T extends object>(source: object, target: T): T;
+/** Add a source mutation stdin-token policy without weakening the target. */
+export declare function overlayMutationStdinTokenPolicy<T extends object>(source: object, target: T): T;
+/** Report whether lifecycle input should interpret dash values as stdin tokens. */
+export declare function shouldResolveMutationStdinTokens(options: object): boolean;
+/** Report whether one mutation field should interpret dash as a stdin token. */
+export declare function shouldResolveMutationStdinTokenField(options: object, field: PropertyKey): boolean;
+/** Refuse competing stdin-token fields before any resolver starts reading. */
+export declare function assertSingleStdinTokenConsumer(candidates: readonly {
+    value: string | readonly string[] | undefined;
+    optionName: string;
+    resolveToken?: boolean;
+}[]): void;
+/** Resolve a typed mutation option bag only after its complete stdin plan is conflict-free. */
+export declare function resolveMutationStdinTokenFields<T extends object>(options: T, scalarFields: readonly (readonly [keyof T & string, string])[], listFields: readonly (readonly [keyof T & string, string])[]): Promise<T>;
 /** Implements create stdin token resolver for the public runtime surface of this module. */
 export declare function createStdinTokenResolver(): StdinTokenResolver;
 /** Implements parse optional number for the public runtime surface of this module. */