@unbrained/pm-cli 2026.8.23 → 2026.8.25

package/dist/sdk/lifecycle/update-many.js

@@ -4,15 +4,15 @@
  * Implements the pm update many command surface and its agent-facing runtime behavior.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="7a157c2e-e9e6-5bce-b124-0a7d34e3c7dc")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="fada7a33-ad1d-54f1-ae03-c5f8e4568d75")}catch(e){}}();
 import { assertInitializedTracker } from "../environment/tracker-preflight.js";
-import { createCheckpointId, loadMutationCheckpoint, restoreCheckpointItems, writeMutationCheckpoint, toItemRecord, applyAcceptanceCriteriaMutations, applyTagRemovals, mergeAdditiveTags, parseOptionalNonNegativeInteger, parseTags, splitAcceptanceCriteria, resolvePriority, normalizeStatusInput, resolveItemTypeRegistry, resolveTypeName, collectRuntimeUpdateFieldValues, buildInvalidTypeError, resolveItemTypesFilePath, resolveRuntimeFieldRegistry, resolveRuntimeStatusRegistry, EXIT_CODE, PmCliError, toErrorMessage, stableValueEquals, nowIso, resolveIsoOrRelative, getActiveExtensionRegistrations, resolvePmRoot, readSettings, resolveAuthor, } from "../runtime-primitives.js";
+import { createCheckpointId, loadMutationCheckpoint, restoreCheckpointItems, writeMutationCheckpoint, toItemRecord, applyAcceptanceCriteriaMutations, applyTagRemovals, mergeAdditiveTags, parseOptionalNonNegativeInteger, parseTags, splitAcceptanceCriteria, resolvePriority, normalizeStatusInput, resolveItemTypeRegistry, resolveTypeName, collectRuntimeUpdateFieldValues, buildInvalidTypeError, resolveItemTypesFilePath, resolveRuntimeFieldRegistry, resolveRuntimeStatusRegistry, EXIT_CODE, PmCliError, toErrorMessage, stableValueEquals, nowIso, preserveMutationStdinTokenLiterals, resolveIsoOrRelative, getActiveExtensionRegistrations, resolvePmRoot, readSettings, resolveAuthor, } from "../runtime-primitives.js";
 import { assertDependencyTargetsResolvable } from "../dependency-flag-validation.js";
 import { parseStatusFilterCsv } from "../../core/item/status-filter.js";
 import { hasListFilters } from "../query/list-filter-shared.js";
 import { runList, } from "../query/list.js";
 import { runRestore } from "./restore.js";
-import { assertUpdateMutationOptionCombinations, parseDependencyAdditions, runUpdate, } from "./update.js";
+import { assertUpdateMutationOptionCombinations, parseDependencyAdditions, resolveUpdateTransportOptions, runUpdate, } from "./update.js";
 import { derivePmBulkMutationEffect, } from "../cli-contracts/command-exit-contracts.js";
 const UPDATE_MANY_CHECKPOINT_SCHEMA_VERSION = 1;
 const UPDATE_MANY_CHECKPOINT_SUBDIR = "update-many";
@@ -703,11 +703,12 @@ const applyUpdateManyRows = async (params) => {
             continue;
         }
         try {
-            const result = await runUpdate(item.id, {
+            const rowUpdateOptions = preserveMutationStdinTokenLiterals({
                 ...params.options.update,
                 message: updateMessage,
                 runtimeFieldCommands: ["update_many"],
-            }, params.global);
+            });
+            const result = await runUpdate(item.id, rowUpdateOptions, params.global);
             rows.push({
                 id: item.id,
                 status: "updated",
@@ -786,6 +787,12 @@ const applyUpdateManyPlan = async (params) => {
 export const runUpdateMany = async (options, global) => {
     const runtime = await loadUpdateManyRuntimeContext(global);
     const rollbackId = typeof options.rollback === "string" ? options.rollback : undefined;
+    if (rollbackId === undefined) {
+        options = {
+            ...options,
+            update: preserveMutationStdinTokenLiterals(await resolveUpdateTransportOptions(options.update)),
+        };
+    }
     const updateSummary = sanitizeUpdateOptionsForSummary(options.update);
     rejectBlankIdsFilter(options.list);
     if (rollbackId !== undefined) {
@@ -797,8 +804,8 @@ export const runUpdateMany = async (options, global) => {
             updateSummary,
         });
     }
-    if (!hasAnyUpdateMutationInput(options.update)) {
-        throw new PmCliError(`No update-many mutation flags provided. Add at least one mutation flag (for example: ${UPDATE_MANY_MUTATION_FLAG_GUIDANCE}).`, EXIT_CODE.USAGE);
+    if (!hasAnyUpdateMutationInput(options.update) && options.dryRun !== true) {
+        throw new PmCliError(`No update-many mutation flags provided. Add at least one mutation flag (for example: ${UPDATE_MANY_MUTATION_FLAG_GUIDANCE}), or pass --dry-run for a filter-only preview.`, EXIT_CODE.USAGE);
     }
     assertPlannedUpdateValuesValid(options.update, runtime.settings, runtime.statusRegistry, runtime.pmRoot);
     assertUpdateMutationOptionCombinations(options.update);
@@ -852,4 +859,4 @@ export const _testOnlyUpdateManyCommand = {
     toComparablePreviewValue,
 };
 //# sourceMappingURL=update-many.js.map
-//# debugId=7a157c2e-e9e6-5bce-b124-0a7d34e3c7dc
+//# debugId=fada7a33-ad1d-54f1-ae03-c5f8e4568d75

package/dist/sdk/lifecycle/update.d.ts

@@ -159,6 +159,8 @@ interface UpdateMutationContext {
     author: string;
     pmRoot: string;
 }
+/** Resolve update stdin tokens once while preserving transport-marked literals. */
+export declare function resolveUpdateTransportOptions(options: UpdateCommandOptions): Promise<UpdateCommandOptions>;
 /** Validate mutually exclusive and required update mutation option combinations. */
 export declare function assertUpdateMutationOptionCombinations(options: UpdateCommandOptions): void;
 type UpdateStatusMutationContext = Pick<UpdateMutationContext, "options" | "statusRegistry" | "clearItemMetadataKeys" | "nowIso">;

package/dist/sdk/lifecycle/update.js

@@ -4,9 +4,10 @@
  * Implements the pm update command surface and its agent-facing runtime behavior.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="c88f01be-6abe-5fa2-9792-3f54e61bb282")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="6865ca88-7ca1-52fd-86fb-2a3439abeafa")}catch(e){}}();
 import { assertInitializedTracker } from "../environment/tracker-preflight.js";
-import { COMMON_MUTATION_COMMAND_OPTION_KEYS, canonicalizeCommandOptionKey, commandOptionFlagLabel, resolveItemTypeRegistry, resolveCommandOptionPolicyState, resolveTypeDefinition, resolveTypeName, validateTypeOptions, normalizeItemId, toItemRecord, buildInvalidTypeError, assertParentReferenceIsNotSelf, normalizeParentReferenceValue, validateMissingParentReference, validateSprintOrReleaseValue, applyAcceptanceCriteriaMutations, applyTagRemovals, assertNoUnknownCsvKeys, createStdinTokenResolver, looksLikeGenericKeyValueEntry, mergeAdditiveTags, parseCsvKv, parseOptionalNonNegativeInteger, parseOptionalNumber, parseTags, splitAcceptanceCriteria, resolvePriority, normalizeStatusInput, isTerminalStatus, collectRuntimeUpdateFieldValues, resolveItemTypesFilePath, resolveRuntimeFieldRegistry, resolveRuntimeStatusRegistry, describeAllowedTransitions, evaluateTransition, resolveTypeWorkflows, EXIT_CODE, PmCliError, stableValueEquals, resolveIsoOrRelative, getActiveExtensionRegistrations, collectRegisteredItemFieldNames, applyRegisteredItemFieldDefaultsAndValidation, parseRegisteredItemFieldAssignments, buildItemNotFoundError, listAllItemMetadataLight, locateItem, readLocatedItem, resolvePmRoot, readSettings, resolveAuthor, } from "../runtime-primitives.js";
+import { resolveMutationStdinTokenFields } from "../../core/item/parse.js";
+import { COMMON_MUTATION_COMMAND_OPTION_KEYS, canonicalizeCommandOptionKey, commandOptionFlagLabel, resolveItemTypeRegistry, resolveCommandOptionPolicyState, resolveTypeDefinition, resolveTypeName, validateTypeOptions, normalizeItemId, toItemRecord, buildInvalidTypeError, assertParentReferenceIsNotSelf, normalizeParentReferenceValue, validateMissingParentReference, validateSprintOrReleaseValue, applyAcceptanceCriteriaMutations, applyTagRemovals, assertNoUnknownCsvKeys, looksLikeGenericKeyValueEntry, mergeAdditiveTags, parseCsvKv, parseOptionalNonNegativeInteger, parseOptionalNumber, parseTags, shouldResolveMutationStdinTokens, transferMutationStdinTokenPolicy, splitAcceptanceCriteria, resolvePriority, normalizeStatusInput, isTerminalStatus, collectRuntimeUpdateFieldValues, resolveItemTypesFilePath, resolveRuntimeFieldRegistry, resolveRuntimeStatusRegistry, describeAllowedTransitions, evaluateTransition, resolveTypeWorkflows, EXIT_CODE, PmCliError, stableValueEquals, resolveIsoOrRelative, getActiveExtensionRegistrations, collectRegisteredItemFieldNames, applyRegisteredItemFieldDefaultsAndValidation, parseRegisteredItemFieldAssignments, buildItemNotFoundError, listAllItemMetadataLight, locateItem, readLocatedItem, resolvePmRoot, readSettings, resolveAuthor, } from "../runtime-primitives.js";
 import { mutateItemWithHistoryContextResolver } from "../../core/store/item-store.js";
 import { runClose } from "./close.js";
 import { normalizeRiskInput, normalizeSeverityInput, parseConfidenceInput, parseRegressionInput, } from "./metadata-normalizers.js";
@@ -108,7 +109,7 @@ function normalizeLegacyNoneUpdateOptions(options) {
         normalized[optionKey] = undefined;
         /* c8 ignore stop */
     }
-    return applyLegacyNoneCollectionNormalizers(normalized, UPDATE_LEGACY_NONE_COLLECTION_NORMALIZERS);
+    return transferMutationStdinTokenPolicy(options, applyLegacyNoneCollectionNormalizers(normalized, UPDATE_LEGACY_NONE_COLLECTION_NORMALIZERS));
 }
 function parseUpdateUnsetTargets(raw, runtimeFieldRegistry, extensionFieldNames = []) {
     return parseCommandUnsetTargets({
@@ -858,23 +859,31 @@ function applyUpdateScalarMutations(definitions, options, context) {
     }
 }
 async function resolveStdinUpdateOptions(options) {
-    const stdinResolver = createStdinTokenResolver();
-    return normalizeLegacyNoneUpdateOptions({
-        ...options,
-        body: await stdinResolver.resolveValue(options.body, "--body"),
-        dep: await stdinResolver.resolveList(options.dep, "--dep"),
-        depRemove: await stdinResolver.resolveList(options.depRemove, "--dep-remove"),
-        comment: await stdinResolver.resolveList(options.comment, "--comment"),
-        note: await stdinResolver.resolveList(options.note, "--note"),
-        learning: await stdinResolver.resolveList(options.learning, "--learning"),
-        file: await stdinResolver.resolveList(options.file, "--file"),
-        test: await stdinResolver.resolveList(options.test, "--test"),
-        doc: await stdinResolver.resolveList(options.doc, "--doc"),
-        reminder: await stdinResolver.resolveList(options.reminder, "--reminder"),
-        event: await stdinResolver.resolveList(options.event, "--event"),
-        typeOption: await stdinResolver.resolveList(options.typeOption, "--type-option"),
-        field: await stdinResolver.resolveList(options.field, "--field"),
-    });
+    const scalarFields = [
+        ["body", "--body"],
+        ["description", "--description"],
+    ];
+    const listFields = [
+        ["dep", "--dep"],
+        ["depRemove", "--dep-remove"],
+        ["comment", "--comment"],
+        ["note", "--note"],
+        ["learning", "--learning"],
+        ["file", "--file"],
+        ["test", "--test"],
+        ["doc", "--doc"],
+        ["reminder", "--reminder"],
+        ["event", "--event"],
+        ["typeOption", "--type-option"],
+        ["field", "--field"],
+    ];
+    return normalizeLegacyNoneUpdateOptions(await resolveMutationStdinTokenFields(options, scalarFields, listFields));
+}
+/** Resolve update stdin tokens once while preserving transport-marked literals. */
+export async function resolveUpdateTransportOptions(options) {
+    return shouldResolveMutationStdinTokens(options)
+        ? await resolveStdinUpdateOptions(options)
+        : normalizeLegacyNoneUpdateOptions(options);
 }
 function buildClearCollectionDefinitions(options) {
     return [
@@ -1220,12 +1229,13 @@ async function routeCloseStatusUpdate(context) {
     const routeWarnings = [];
     let preChangedFields = [];
     if (otherFieldKeys.length > 0) {
-        const preUpdate = await runUpdate(context.id, {
+        const preUpdateOptions = transferMutationStdinTokenPolicy(context.options, {
             ...context.options,
             status: undefined,
             closeReason: undefined,
             message: undefined,
-        }, context.global);
+        });
+        const preUpdate = await runUpdate(context.id, preUpdateOptions, context.global);
         preChangedFields = preUpdate.changed_fields;
         routeWarnings.push(...preUpdate.warnings);
     }
@@ -1804,7 +1814,7 @@ function mutateUpdateDocument(document, context) {
 }
 /** Implements run update for the public runtime surface of this module. */
 async function runUpdateWithContext(id, options, global, execution = {}) {
-    options = await resolveStdinUpdateOptions(options);
+    options = await resolveUpdateTransportOptions(options);
     const pmRoot = resolvePmRoot(process.cwd(), global.path);
     await assertUpdateTrackerInitialized(pmRoot);
     const settings = await readSettings(pmRoot);
@@ -2111,4 +2121,4 @@ export const _testOnlyUpdateCommand = {
     resolveRuntimeUnsetDefinition: (token, registry) => resolveRuntimeUnsetFieldDefinition(token, "update", registry),
 };
 //# sourceMappingURL=update.js.map
-//# debugId=c88f01be-6abe-5fa2-9792-3f54e61bb282
+//# debugId=6865ca88-7ca1-52fd-86fb-2a3439abeafa

package/dist/sdk/merge/driver.js

@@ -9,14 +9,16 @@
  * merge never corrupts tracker storage the way raw conflict markers do.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="8d79e3a4-6104-5855-837f-69a041b87b27")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="2c8046a5-06aa-58f8-b347-e757086082d1")}catch(e){}}();
 import { readFile, writeFile } from "node:fs/promises";
 import path from "node:path";
 import { getActiveExtensionRegistrations } from "../../core/extensions/index.js";
 import { collectRegisteredItemFieldNames } from "../../core/extensions/item-fields.js";
 import { pathExists } from "../../core/fs/fs-utils.js";
+import { parseItemDocument } from "../../core/item/item-format.js";
 import { EXIT_CODE } from "../../core/shared/constants.js";
 import { PmCliError } from "../../core/shared/errors.js";
+import { sha256Hex, stableStringify } from "../../core/shared/serialization.js";
 import { nowIso } from "../../core/shared/time.js";
 import { getSettingsPath, resolvePmRoot } from "../../core/store/paths.js";
 import { readSettings } from "../../core/store/settings.js";
@@ -122,10 +124,12 @@ export async function runMergeDriver(options, global) {
     }
     else if (artifact === "item") {
         const settings = await loadOptionalSettings(global);
+        const itemFormat = itemFormatForPath(options.itemPath ?? outputPath, settings);
+        const extensionFieldNames = collectRegisteredItemFieldNames(getActiveExtensionRegistrations());
         const itemMerge = mergeItemDocuments(baseRaw, oursRaw, theirsRaw, {
-            format: itemFormatForPath(options.itemPath ?? outputPath, settings),
+            format: itemFormat,
             schema: settings?.schema,
-            extensionFieldNames: collectRegisteredItemFieldNames(getActiveExtensionRegistrations()),
+            extensionFieldNames,
             preferred,
             conflictResolution: "stable_value_order",
         });
@@ -137,6 +141,19 @@ export async function runMergeDriver(options, global) {
             conflict_resolution: "stable_value_order",
         };
         if (options.itemPath !== undefined) {
+            const mergedDocument = parseItemDocument(merged, {
+                format: itemFormat,
+                schema: settings?.schema,
+                extensionFieldNames,
+            });
+            const mergedMetadata = mergedDocument.metadata;
+            const receiptFields = [
+                ...new Set([
+                    ...itemMerge.fields_from_theirs,
+                    ...itemMerge.union_fields,
+                    ...itemMerge.conflict_decisions.map((decision) => decision.field),
+                ]),
+            ];
             receiptInput = {
                 cwd: process.cwd(),
                 itemPath: options.itemPath,
@@ -144,6 +161,10 @@ export async function runMergeDriver(options, global) {
                 conflictResolution: "stable_value_order",
                 fieldsFromTheirs: itemMerge.fields_from_theirs,
                 unionFields: itemMerge.union_fields,
+                mergedFieldHashes: Object.fromEntries(receiptFields.map((field) => [
+                    field,
+                    sha256Hex(stableStringify(field === "body" ? mergedDocument.body : mergedMetadata[field])),
+                ])),
                 decisions: itemMerge.conflict_decisions,
             };
         }
@@ -187,4 +208,4 @@ export async function runMergeDriver(options, global) {
     };
 }
 //# sourceMappingURL=driver.js.map
-//# debugId=8d79e3a4-6104-5855-837f-69a041b87b27
+//# debugId=2c8046a5-06aa-58f8-b347-e757086082d1

package/dist/sdk/merge/receipt-file-boundary.d.ts

@@ -0,0 +1,21 @@
+/**
+ * @module sdk/merge/receipt-file-boundary
+ *
+ * Reads untrusted receipt candidates through a bounded, no-follow file
+ * boundary whose race and short-read behavior can be exercised directly.
+ */
+import { type Stats } from "node:fs";
+import { type FileHandle } from "node:fs/promises";
+/** Minimal filesystem operations required by the receipt reader. */
+export interface ReceiptFileBoundary {
+    /** Inspect the path without following its final symbolic link. */
+    lstat(receiptPath: string): Promise<Stats>;
+    /** Open the candidate and return the handle used for verified reads. */
+    open(receiptPath: string, flags: number): Promise<FileHandle>;
+}
+/** Resolve the platform no-follow flag, falling back only where Node omits it. */
+export declare function resolveReceiptNoFollowFlag(constants: {
+    O_NOFOLLOW?: number;
+}): number;
+/** Read one regular file only when its opened identity remains bounded and stable. */
+export declare function readBoundedRegularFile(receiptPath: string, maximumBytes: number, boundary?: ReceiptFileBoundary): Promise<string | null>;

package/dist/sdk/merge/receipt-file-boundary.js

@@ -0,0 +1,47 @@
+/**
+ * @module sdk/merge/receipt-file-boundary
+ *
+ * Reads untrusted receipt candidates through a bounded, no-follow file
+ * boundary whose race and short-read behavior can be exercised directly.
+ */
+
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="6ece0e15-aff5-5e2d-b18a-16ffaa0fe2ea")}catch(e){}}();
+import { constants as fsConstants } from "node:fs";
+import { lstat, open } from "node:fs/promises";
+const NODE_RECEIPT_FILE_BOUNDARY = { lstat, open };
+/** Resolve the platform no-follow flag, falling back only where Node omits it. */
+export function resolveReceiptNoFollowFlag(constants) {
+    return constants.O_NOFOLLOW ?? 0;
+}
+/** Read one regular file only when its opened identity remains bounded and stable. */
+export async function readBoundedRegularFile(receiptPath, maximumBytes, boundary = NODE_RECEIPT_FILE_BOUNDARY) {
+    const pathStats = await boundary.lstat(receiptPath);
+    if (pathStats.isSymbolicLink() ||
+        !pathStats.isFile() ||
+        pathStats.size > maximumBytes) {
+        return null;
+    }
+    const handle = await boundary.open(receiptPath, fsConstants.O_RDONLY | resolveReceiptNoFollowFlag(fsConstants));
+    try {
+        const openedStats = await handle.stat();
+        if (!openedStats.isFile() || openedStats.size > maximumBytes)
+            return null;
+        const buffer = Buffer.alloc(openedStats.size);
+        let offset = 0;
+        while (offset < buffer.length) {
+            const { bytesRead } = await handle.read(buffer, offset, buffer.length - offset, offset);
+            if (bytesRead === 0)
+                break;
+            offset += bytesRead;
+        }
+        const finalStats = await handle.stat();
+        return finalStats.size === openedStats.size && offset === openedStats.size
+            ? buffer.toString("utf8", 0, offset)
+            : null;
+    }
+    finally {
+        await handle.close();
+    }
+}
+//# sourceMappingURL=receipt-file-boundary.js.map
+//# debugId=6ece0e15-aff5-5e2d-b18a-16ffaa0fe2ea

package/dist/sdk/merge/receipts.d.ts

@@ -19,6 +19,8 @@ export interface MergeDecisionReceipt {
     fields_from_theirs: string[];
     /** Collections combined from both branches. */
     union_fields: string[];
+    /** SHA-256 hashes of the merged values for every field represented by this receipt. Absent on legacy receipts, which cannot prove drift attribution. */
+    merged_field_hashes?: Record<string, string>;
     /** Full recoverable scalar decisions, retained only in the clone. */
     decisions: ItemMergeConflictDecision[];
     /** Whether a merge reconciliation history event consumed this receipt. */
@@ -29,6 +31,8 @@ export interface MergeDecisionReceipt {
     reconciled_at?: string;
     /** Whether decision values are recoverable locally or represented by hashes only. */
     value_availability?: "clone_local" | "hash_only";
+    /** Runtime-only provenance assigned by the reader; serialized values are ignored. */
+    evidence_source?: "clone_local" | "durable";
 }
 /** Privacy-safe receipt summary suitable for committed history context. */
 export interface MergeDecisionReceiptSummary {
@@ -66,6 +70,13 @@ export interface MergeReceiptReport {
     /** ISO timestamp for the report. */
     generated_at: string;
 }
+/** Internal integrity scan result used by health without exposing malformed receipt contents. */
+export interface MergeReceiptEvidenceScan {
+    /** Valid receipts that passed bounded-file, schema, and identity validation. */
+    receipts: MergeDecisionReceipt[];
+    /** Number of JSON receipt candidates that could not be validated safely. */
+    invalid_evidence_count: number;
+}
 /** Convert a raw receipt into privacy-safe history context. */
 export declare function summarizeMergeReceipt(receipt: MergeDecisionReceipt): MergeDecisionReceiptSummary;
 /** Persist one item-driver outcome in the clone-local Git directory. */
@@ -76,8 +87,18 @@ export declare function writeMergeReceipt(params: {
     conflictResolution?: "preferred_side" | "stable_value_order";
     fieldsFromTheirs: string[];
     unionFields: string[];
+    mergedFieldHashes?: Record<string, string>;
     decisions: ItemMergeConflictDecision[];
 }): Promise<MergeDecisionReceipt | null>;
+/** Inspect valid receipts and count invalid evidence without returning untrusted file contents. */
+export declare function inspectMergeReceiptEvidence(cwd: string, options?: {
+    /** Include receipts whose reconciliation state is already settled. */
+    includeReconciled?: boolean;
+    /** Include receipts that contain no discarded scalar values. */
+    includeLossless?: boolean;
+    /** Explicit tracker root used to locate durable receipt evidence. */
+    pmRoot?: string;
+}): Promise<MergeReceiptEvidenceScan>;
 /** Read clone-local receipts with explicit reconciled/lossless classification controls. */
 export declare function listMergeReceipts(cwd: string, options?: {
     includeReconciled?: boolean;
@@ -92,7 +113,9 @@ export declare function partitionMergeReceipts(receipts: MergeDecisionReceipt[])
     lossless: MergeDecisionReceipt[];
 };
 /** Mark a receipt as represented by a committed merge history event. */
-export declare function markMergeReceiptReconciled(cwd: string, receipt: MergeDecisionReceipt): Promise<void>;
+export declare function markMergeReceiptReconciled(cwd: string, receipt: MergeDecisionReceipt, options?: {
+    requireExisting?: boolean;
+}): Promise<void>;
 /** Report pending or historical clone-local merge decisions. */
 export declare function runMergeReceiptReport(options: {
     /** Include receipts already represented by merge history events. */