@unbrained/pm-cli 2026.8.24 → 2026.8.25

package/dist/core/diagnostics/remediation.js

@@ -19,7 +19,7 @@
  */
 /** Registry of every non-extension `pm health` / `pm validate` warning code and its remediation. Extension findings keep their richer, contextual `details.triage.remediation` produced by the extension health triage and are intentionally excluded here (see pm-0hnu: "all non-extension checks"). */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="bc9e5edf-c275-5172-8900-fafee9b4a2db")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="c088607b-1be3-54c8-a38b-79c188924102")}catch(e){}}();
 export const REMEDIATION_REGISTRY = Object.freeze([
     // --- pm health: directories ---
     {
@@ -193,6 +193,16 @@ export const REMEDIATION_REGISTRY = Object.freeze([
         command: "pm merge reconcile --dry-run",
         summary: "Review the pending merge receipts, re-apply any intended discarded values, then run pm merge reconcile; lossy receipts require explicit --force acceptance.",
     },
+    {
+        code: "merge_receipts_pending",
+        command: "pm merge reconcile --dry-run",
+        summary: "A lossless merge receipt is still pending; preview and run pm merge reconcile so a green health gate certifies receipt settlement, not only intact data.",
+    },
+    {
+        code: "merge_receipt_evidence_invalid",
+        command: "pm health --check-only --full",
+        summary: "One or more receipt files failed bounded-file, schema, or identity validation; use the full health count to inspect the clone-local and durable receipt directories, then repair or remove only confirmed invalid evidence.",
+    },
     {
         code: "validate_merge_decisions_unreviewed",
         command: "pm merge reconcile --dry-run",
@@ -221,6 +231,11 @@ export const REMEDIATION_REGISTRY = Object.freeze([
         command: "pm history-repair <id>",
         summary: "The item's history chain is broken; re-anchor the chain (pm history-repair --all repairs every drifted stream in one pass).",
     },
+    {
+        code: "history_drift_merge_receipt",
+        command: "pm merge reconcile --dry-run",
+        summary: "Canonical path, changed-field, and merged-value hash evidence attributes this drift to a pending receipt; preview reconciliation instead of repairing history directly.",
+    },
     // --- pm health: storage (history compaction policy) ---
     {
         code: "history_stream_over_compact_threshold",
@@ -474,4 +489,4 @@ export function buildRemediationCommands(warnings) {
     return Object.values(buildRemediationMap(warnings));
 }
 //# sourceMappingURL=remediation.js.map
-//# debugId=bc9e5edf-c275-5172-8900-fafee9b4a2db
+//# debugId=c088607b-1be3-54c8-a38b-79c188924102

package/dist/sdk/cli-contracts/runtime-contracts.d.ts

@@ -126,6 +126,16 @@ export interface ContractsResult {
         degradation_ladder: string[];
         allows_unbounded_opt_out: boolean;
     };
+    /** Exact per-command projection vocabularies and the scope of the compatibility union. */
+    output_projection_contracts?: {
+        global_ladder_field: "output_policy.degradation_ladder";
+        global_ladder_scope: "union_not_per_command";
+        discovery: "pm contracts --command <command> --summary";
+        commands?: Array<{
+            command: string;
+            modes: string[];
+        }>;
+    };
     /** Value that configures or reports runtime schema for this contract. */
     runtime_schema?: {
         statuses: string[];

package/dist/sdk/cli-contracts/runtime-contracts.js

@@ -4,7 +4,7 @@
  * Implements the pm contracts command surface and its agent-facing runtime behavior.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="e8f1efca-4e83-570f-8c33-96f0405035b0")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="428a19d2-be42-548a-a328-aa0e476b8a71")}catch(e){}}();
 import { EXIT_CODE, SETTINGS_DEFAULTS, PmCliError, activateExtensions, getActiveExtensionRegistrations, loadExtensions, pathExists, commandOptionFlagLabel, resolveCommandOptionPolicyState, resolveItemTypeRegistry, resolveRuntimeFieldRegistry, resolveRuntimeStatusRegistry, getSettingsPath, resolvePmRoot, readSettings, } from "../runtime-primitives.js";
 import { buildMcpToolContracts, } from "../../mcp/tool-definitions.js";
 import { ACTIVITY_COMMANDER_STRING_OPTION_CONTRACTS, ACTIVITY_FLAG_CONTRACTS, AGGREGATE_FLAG_CONTRACTS, ASSURANCE_FLAG_CONTRACTS, APPEND_FLAG_CONTRACTS, CALENDAR_COMMANDER_STRING_OPTION_CONTRACTS, CALENDAR_FLAG_CONTRACTS, CLAIM_FLAG_CONTRACTS, CLOSE_TASK_FLAG_CONTRACTS, COMMENTS_FLAG_CONTRACTS, CLOSE_FLAG_CONTRACTS, CLOSE_MANY_FLAG_CONTRACTS, COMPLETION_FLAG_CONTRACTS, CONFIG_FLAG_CONTRACTS, CONTRACTS_FLAG_CONTRACTS, COPY_FLAG_CONTRACTS, CONTEXT_COMMANDER_STRING_OPTION_CONTRACTS, CONTEXT_FLAG_CONTRACTS, CREATE_COMMANDER_REPEATABLE_OPTION_CONTRACTS, CREATE_COMMANDER_STRING_OPTION_CONTRACTS, CREATE_FLAG_CONTRACTS, DELETE_FLAG_CONTRACTS, DEPS_FLAG_CONTRACTS, GRAPH_FLAG_CONTRACTS, DOCS_FLAG_CONTRACTS, EXTENSION_ACTIVATE_FLAG_CONTRACTS, EXTENSION_ADOPT_ALL_FLAG_CONTRACTS, EXTENSION_ADOPT_FLAG_CONTRACTS, EXTENSION_CATALOG_FLAG_CONTRACTS, EXTENSION_DEACTIVATE_FLAG_CONTRACTS, EXTENSION_DESCRIBE_FLAG_CONTRACTS, EXTENSION_DOCTOR_FLAG_CONTRACTS, EXTENSION_EXPLORE_FLAG_CONTRACTS, EXTENSION_FLAG_CONTRACTS, EXTENSION_INIT_FLAG_CONTRACTS, EXTENSION_INSTALL_FLAG_CONTRACTS, EXTENSION_MANAGE_FLAG_CONTRACTS, EXTENSION_MIGRATE_FLAG_CONTRACTS, EXTENSION_RELOAD_FLAG_CONTRACTS, EXTENSION_UNINSTALL_FLAG_CONTRACTS, FILES_FLAG_CONTRACTS, FOCUS_FLAG_CONTRACTS, GC_FLAG_CONTRACTS, GET_FLAG_CONTRACTS, GUIDE_FLAG_CONTRACTS, GLOBAL_FLAG_CONTRACTS, HEALTH_FLAG_CONTRACTS, HISTORY_FLAG_CONTRACTS, HISTORY_COMPACT_FLAG_CONTRACTS, HISTORY_REDACT_FLAG_CONTRACTS, HISTORY_REPAIR_FLAG_CONTRACTS, HISTORY_AUTHOR_ACKNOWLEDGE_FLAG_CONTRACTS, INSTALL_FLAG_CONTRACTS, INIT_FLAG_CONTRACTS, ITEM_COMPLETE_FLAG_CONTRACTS, ITEM_MUTATE_FLAG_CONTRACTS, ITEM_REOPEN_FLAG_CONTRACTS, LEARNINGS_FLAG_CONTRACTS, LIST_COMMANDER_STRING_OPTION_CONTRACTS, LIST_FILTER_FLAG_CONTRACTS, MERGE_FLAG_CONTRACTS, NOTES_FLAG_CONTRACTS, PACKAGE_FLAG_CONTRACTS, PACKAGE_INIT_FLAG_CONTRACTS, PM_EXTENSION_CAPABILITY_CONTRACTS, PM_EXTENSION_POLICY_MODE_CONTRACTS, PM_EXTENSION_POLICY_SURFACE_CONTRACTS, PM_EXTENSION_SANDBOX_PROFILE_CONTRACTS, PM_EXTENSION_SERVICE_NAME_CONTRACTS, PM_EXTENSION_TRUST_MODE_CONTRACTS, PM_OUTPUT_DEGRADATION_STEPS, PLAN_FLAG_CONTRACTS, PM_CORE_COMMAND_NAMES, PM_DEPRECATED_TOOL_ACTIONS, PM_TOOL_ACTIONS, PM_TOOL_PARAMETERS_SCHEMA, REINDEX_FLAG_CONTRACTS, RELEASE_FLAG_CONTRACTS, RESTORE_FLAG_CONTRACTS, SCHEMA_FLAG_CONTRACTS, PROFILE_FLAG_CONTRACTS, SEARCH_COMMANDER_STRING_OPTION_CONTRACTS, EVAL_FLAG_CONTRACTS, WORKSPACE_FLAG_CONTRACTS, NEXT_FLAG_CONTRACTS, SEARCH_FLAG_CONTRACTS, STATS_FLAG_CONTRACTS, DUPLICATES_FLAG_CONTRACTS, START_TASK_FLAG_CONTRACTS, PAUSE_TASK_FLAG_CONTRACTS, TELEMETRY_FLAG_CONTRACTS, TEST_ALL_FLAG_CONTRACTS, TEST_FLAG_CONTRACTS, TEST_RUNS_FLAG_CONTRACTS, UPDATE_COMMANDER_REPEATABLE_OPTION_CONTRACTS, UPDATE_COMMANDER_STRING_OPTION_CONTRACTS, UPDATE_FLAG_CONTRACTS, UPDATE_MANY_FLAG_CONTRACTS, UPGRADE_FLAG_CONTRACTS, VALIDATE_FLAG_CONTRACTS, compactFlagAliasContracts, PM_COMMAND_ALIAS_CONTRACTS, PM_DIAGNOSTIC_OUTPUT_BUDGET_CONTRACTS, resolvePmCommandOutputBudget, } from "../cli-contracts.js";
@@ -12,7 +12,7 @@ import { PM_POSITIONAL_ACTION_FLAG_CONTRACTS } from "./flag-contracts.js";
 import { GOVERNANCE_CLOSE_VALIDATION_DEFAULT_VALUES, GOVERNANCE_CREATE_MODE_DEFAULT_VALUES, GOVERNANCE_OWNERSHIP_ENFORCEMENT_VALUES, GOVERNANCE_WORKFLOW_ENFORCEMENT_VALUES, } from "../../types.js";
 import { BRIEF_LIST_FIELDS, DEFAULT_COMPACT_LIST_FIELDS, LIST_COMMAND_DEFAULT_PROJECTIONS, } from "../query/list.js";
 import { getActiveContextIntentContracts, } from "../context-intent-contracts.js";
-import { PM_READ_OUTPUT_SURFACE_CONTRACTS, } from "../read-output-contracts.js";
+import { readOutputIncludeModeOptions, resolveReadOutputSurface, PM_READ_OUTPUT_SURFACE_CONTRACTS, } from "../read-output-contracts.js";
 import { enrichCliFlagInvocationContracts, } from "../flag-invocation-contracts.js";
 import { resolvePmCommandVisibilityTier, } from "../agent-capability-contracts.js";
 import { PM_ERROR_CODE_CATALOG } from "../generated-error-code-catalog.js";
@@ -1954,6 +1954,22 @@ function attachAgentCommandContractsResult(result, outputCommands, extensionComm
         degradation_ladder: [...PM_OUTPUT_DEGRADATION_STEPS],
         allows_unbounded_opt_out: true,
     };
+    result.output_projection_contracts = {
+        global_ladder_field: "output_policy.degradation_ladder",
+        global_ladder_scope: "union_not_per_command",
+        discovery: "pm contracts --command <command> --summary",
+        ...(options.includeProjectionModeMatrix
+            ? {
+                commands: [...new Set(outputCommands.map(normalizeCommandPath))]
+                    .filter((command) => resolveReadOutputSurface(command) !== undefined)
+                    .sort((left, right) => left.localeCompare(right))
+                    .map((command) => ({
+                    command,
+                    modes: [...readOutputIncludeModeOptions(command).keys()],
+                })),
+            }
+            : {}),
+    };
     result.grammar_contracts = {
         nouns: PM_CLI_GRAMMAR_CONTRACT.nouns,
         shared_verbs: PM_CLI_GRAMMAR_CONTRACT.shared_verbs,
@@ -1989,6 +2005,7 @@ export async function runContracts(options, global) {
             includeFormatBudgets: includeCommandDetails,
             includeIntentProvenance: includeCommandDetails,
             includePositionalSignatures: includeCommandDetails,
+            includeProjectionModeMatrix: includeCommandDetails,
         });
     }
     if (selection.summary) {
@@ -2065,4 +2082,4 @@ export const _testOnlyContractsCommand = {
     toRuntimeShortFlagToken,
 };
 //# sourceMappingURL=runtime-contracts.js.map
-//# debugId=e8f1efca-4e83-570f-8c33-96f0405035b0
+//# debugId=428a19d2-be42-548a-a328-aa0e476b8a71

package/dist/sdk/generated/generated-error-code-catalog-part-1.js

@@ -1,6 +1,6 @@
 /** Generated partition 1 of the exhaustive error-code catalog. */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="030027d7-2703-56ea-9235-64bc602a25c3")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="d68e7da2-7390-5632-a3d1-375f622d5c87")}catch(e){}}();
 export const PM_ERROR_CODE_CATALOG_PART_1 = [
     {
         code: "acceptance_criteria_mutation_conflict",
@@ -1163,6 +1163,18 @@ export const PM_ERROR_CODE_CATALOG_PART_1 = [
         canonical_code: "history_drift_hash_mismatch",
         aliases: ["validate_history_drift_hash_mismatches"],
     },
+    {
+        code: "history_drift_merge_receipt",
+        meaning: "History drift merge receipt condition.",
+        stability: "provisional",
+        exit_code: 1,
+        class: "generic_failure",
+        recovery: "Inspect the structured error guidance and retry the suggested command.",
+        sources: ["core/diagnostics/remediation.ts"],
+        emitting_commands: ["*"],
+        canonical_code: "history_drift_merge_receipt",
+        aliases: [],
+    },
     {
         code: "history_drift_missing_stream",
         meaning: "History drift missing stream condition.",
@@ -2002,53 +2014,65 @@ export const PM_ERROR_CODE_CATALOG_PART_1 = [
         aliases: [],
     },
     {
-        code: "merge_reconcile_discards_require_acceptance",
-        meaning: "Merge reconcile discards require acceptance condition.",
+        code: "merge_receipt_evidence_invalid",
+        meaning: "Merge receipt evidence invalid condition.",
         stability: "provisional",
         exit_code: 4,
         class: "conflict",
         recovery: "Inspect the structured error guidance and retry the suggested command.",
-        sources: ["sdk/merge/reconcile.ts"],
+        sources: ["core/diagnostics/remediation.ts", "sdk/merge/reconcile.ts"],
         emitting_commands: ["*"],
-        canonical_code: "merge_reconcile_discards_require_acceptance",
+        canonical_code: "merge_receipt_evidence_invalid",
         aliases: [],
     },
     {
-        code: "merge_root_not_found",
-        meaning: "Merge root not found condition.",
-        stability: "stable",
-        exit_code: 3,
-        class: "not_found",
+        code: "merge_receipts_pending",
+        meaning: "Merge receipts pending condition.",
+        stability: "provisional",
+        exit_code: 1,
+        class: "generic_failure",
         recovery: "Inspect the structured error guidance and retry the suggested command.",
-        sources: ["sdk/merge/install.ts"],
+        sources: ["core/diagnostics/remediation.ts"],
         emitting_commands: ["*"],
-        canonical_code: "merge_root_not_found",
+        canonical_code: "merge_receipts_pending",
         aliases: [],
     },
     {
-        code: "missing_allowed_values",
-        meaning: "Missing allowed values condition.",
+        code: "merge_reconcile_discards_require_acceptance",
+        meaning: "Merge reconcile discards require acceptance condition.",
         stability: "provisional",
-        exit_code: 1,
-        class: "generic_failure",
+        exit_code: 4,
+        class: "conflict",
         recovery: "Inspect the structured error guidance and retry the suggested command.",
-        sources: ["sdk/agent/refusal-closure.ts"],
+        sources: ["sdk/merge/reconcile.ts"],
         emitting_commands: ["*"],
-        canonical_code: "missing_allowed_values",
+        canonical_code: "merge_reconcile_discards_require_acceptance",
         aliases: [],
     },
     {
-        code: "missing_budget",
-        meaning: "Missing budget condition.",
+        code: "merge_reconcile_receipt_evidence_untrusted",
+        meaning: "Merge reconcile receipt evidence untrusted condition.",
         stability: "provisional",
-        exit_code: 1,
-        class: "generic_failure",
+        exit_code: 4,
+        class: "conflict",
         recovery: "Inspect the structured error guidance and retry the suggested command.",
-        sources: ["sdk/cli-contracts/flag-lexicon-contracts.ts"],
+        sources: ["sdk/history-repair.ts"],
         emitting_commands: ["*"],
-        canonical_code: "missing_budget",
+        canonical_code: "merge_reconcile_receipt_evidence_untrusted",
+        aliases: [],
+    },
+    {
+        code: "merge_root_not_found",
+        meaning: "Merge root not found condition.",
+        stability: "stable",
+        exit_code: 3,
+        class: "not_found",
+        recovery: "Inspect the structured error guidance and retry the suggested command.",
+        sources: ["sdk/merge/install.ts"],
+        emitting_commands: ["*"],
+        canonical_code: "merge_root_not_found",
         aliases: [],
     },
 ];
 //# sourceMappingURL=generated-error-code-catalog-part-1.js.map
-//# debugId=030027d7-2703-56ea-9235-64bc602a25c3
+//# debugId=d68e7da2-7390-5632-a3d1-375f622d5c87

package/dist/sdk/generated/generated-error-code-catalog-part-2.js

@@ -1,7 +1,31 @@
 /** Generated partition 2 of the exhaustive error-code catalog. */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="8724f8ed-1236-5779-9e97-dc4b35866839")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="23e8e07d-84f2-54b6-98ad-2e33d996f09d")}catch(e){}}();
 export const PM_ERROR_CODE_CATALOG_PART_2 = [
+    {
+        code: "missing_allowed_values",
+        meaning: "Missing allowed values condition.",
+        stability: "provisional",
+        exit_code: 1,
+        class: "generic_failure",
+        recovery: "Inspect the structured error guidance and retry the suggested command.",
+        sources: ["sdk/agent/refusal-closure.ts"],
+        emitting_commands: ["*"],
+        canonical_code: "missing_allowed_values",
+        aliases: [],
+    },
+    {
+        code: "missing_budget",
+        meaning: "Missing budget condition.",
+        stability: "provisional",
+        exit_code: 1,
+        class: "generic_failure",
+        recovery: "Inspect the structured error guidance and retry the suggested command.",
+        sources: ["sdk/cli-contracts/flag-lexicon-contracts.ts"],
+        emitting_commands: ["*"],
+        canonical_code: "missing_budget",
+        aliases: [],
+    },
     {
         code: "missing_cli_flag",
         meaning: "Missing cli flag condition.",
@@ -2075,4 +2099,4 @@ export const PM_ERROR_CODE_CATALOG_PART_2 = [
     },
 ];
 //# sourceMappingURL=generated-error-code-catalog-part-2.js.map
-//# debugId=8724f8ed-1236-5779-9e97-dc4b35866839
+//# debugId=23e8e07d-84f2-54b6-98ad-2e33d996f09d

package/dist/sdk/governance/health.js

@@ -4,7 +4,7 @@
  * Implements the pm health command surface and its agent-facing runtime behavior.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="f7b3ff92-1fc7-55e9-aa76-af956714998f")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="5887be76-3d1d-56fb-9cae-cf972f0b73f8")}catch(e){}}();
 import fs from "node:fs/promises";
 import path from "node:path";
 import { assertInitializedTracker } from "../environment/tracker-preflight.js";
@@ -45,7 +45,8 @@ import { buildCapabilityContractMetadata, buildRegistrationCollisionRemediation,
 import { scanStaleInProgressItems, } from "./stale-work.js";
 import { scanTrackedRuntimeCache } from "./tracked-runtime-cache.js";
 import { auditMergeDriverConfiguration, findGitWorkspaceRoot, } from "../merge/install.js";
-import { listMergeReceipts, partitionMergeReceipts, } from "../merge/receipts.js";
+import { inspectMergeReceiptEvidence, partitionMergeReceipts, } from "../merge/receipts.js";
+import { runHistoryRepair } from "../history-repair.js";
 import { resolveWorkspaceRelationshipKindRegistry } from "../graph/assembly.js";
 import { analyzeHierarchyIntegrity, } from "../graph/hierarchy-integrity.js";
 const PM_TELEMETRY_SOURCE_CONTEXT_SET = new Set(PM_TELEMETRY_SOURCE_CONTEXT_VALUES);
@@ -333,6 +334,11 @@ function buildHierarchyIntegrityWarnings(analysis) {
             : `integrity_hierarchy_divergence:${finding.child_id}`),
     ];
 }
+function buildMergeReceiptEvidenceWarnings(invalidEvidenceCount) {
+    return invalidEvidenceCount === 0
+        ? []
+        : [`merge_receipt_evidence_invalid:${invalidEvidenceCount}`];
+}
 async function buildIntegrityCheck(pmRoot, typeToFolder, schema, requireMergeDrivers, items) {
     const itemScan = await scanItemIntegrity(pmRoot, typeToFolder, schema);
     const historyScan = await scanHistoryIntegrity(pmRoot);
@@ -344,12 +350,11 @@ async function buildIntegrityCheck(pmRoot, typeToFolder, schema, requireMergeDri
     const mergeDriverAudit = gitWorkspaceRoot === null
         ? null
         : await auditMergeDriverConfiguration(gitWorkspaceRoot);
-    const pendingMergeReceipts = gitWorkspaceRoot === null
-        ? []
-        : await listMergeReceipts(gitWorkspaceRoot, {
-            includeLossless: true,
-            pmRoot,
-        });
+    const mergeReceiptEvidence = await inspectMergeReceiptEvidence(gitWorkspaceRoot ?? pmRoot, {
+        includeLossless: true,
+        pmRoot,
+    });
+    const pendingMergeReceipts = mergeReceiptEvidence.receipts;
     const { pendingDecisions: pendingMergeDecisions, lossless: losslessMergeReceipts, } = partitionMergeReceipts(pendingMergeReceipts);
     const mergeDriverInstallationMissing = mergeDriverAudit?.status === "missing" &&
         mergeDriverAudit.missing_keys.length === 5 &&
@@ -379,6 +384,10 @@ async function buildIntegrityCheck(pmRoot, typeToFolder, schema, requireMergeDri
         ...(pendingMergeDecisions.length > 0
             ? [`merge_decisions_unreviewed:${pendingMergeDecisions.length}`]
             : []),
+        ...(losslessMergeReceipts.length > 0
+            ? [`merge_receipts_pending:${losslessMergeReceipts.length}`]
+            : []),
+        ...buildMergeReceiptEvidenceWarnings(mergeReceiptEvidence.invalid_evidence_count),
     ];
     const normalizedWarnings = [...new Set(warnings)].sort((left, right) => left.localeCompare(right));
     const actionableWarnings = normalizedWarnings.filter((warning) => !warning.startsWith("integrity_legacy_hierarchy_"));
@@ -409,6 +418,7 @@ async function buildIntegrityCheck(pmRoot, typeToFolder, schema, requireMergeDri
                             mergeDriverAudit.drifted_keys.length,
                     pending_merge_decisions: pendingMergeDecisions.length,
                     lossless_merge_receipts: losslessMergeReceipts.length,
+                    invalid_merge_receipt_evidence: mergeReceiptEvidence.invalid_evidence_count,
                 },
                 item_unreadable: itemScan.unreadable,
                 item_conflict_markers: itemScan.conflictMarkers,
@@ -443,6 +453,8 @@ async function buildIntegrityCheck(pmRoot, typeToFolder, schema, requireMergeDri
             },
         },
         warnings: normalizedWarnings,
+        gitWorkspaceRoot,
+        pendingMergeReceipts,
     };
 }
 /* c8 ignore start -- activate export shape variants are exercised through integration load tests */
@@ -949,6 +961,7 @@ const HEALTH_DETAIL_SUMMARIZERS = {
         checked_items: details.checked_items,
         counts: details.counts,
         drifted_items: summarizeStringList(details.drifted_items, limit),
+        merge_receipt_attributed_items: summarizeStringList(details.merge_receipt_attributed_items, limit),
         missing_streams: summarizeStringList(details.missing_streams, limit),
         unreadable_streams: summarizeStringList(details.unreadable_streams, limit),
         hash_mismatches: summarizeStringList(details.hash_mismatches, limit),
@@ -1922,7 +1935,9 @@ function buildHealthFindings(params) {
 function rewriteBulkHealthRemediation(params) {
     if (params.check.name === "history_drift" && params.historyDriftedCount > 1) {
         for (const code of Object.keys(params.remediationMap)) {
-            params.remediationMap[code] = "pm history-repair --all";
+            if (code !== "history_drift_merge_receipt") {
+                params.remediationMap[code] = "pm history-repair --all";
+            }
         }
     }
     if (params.check.name === "storage" && params.overThresholdCount > 1) {
@@ -1945,6 +1960,67 @@ function attachHealthRemediationMaps(params) {
         }
     }
 }
+async function correlateMergeReceiptHistoryDriftItems(params) {
+    if (params.gitWorkspaceRoot === null ||
+        params.pendingMergeReceipts.length === 0) {
+        return [];
+    }
+    const details = params.historyDriftCheck.check.details;
+    const hashMismatches = Array.isArray(details.hash_mismatches)
+        ? details.hash_mismatches.filter((entry) => typeof entry === "string")
+        : [];
+    const unsafeStreamIds = new Set([
+        details.missing_streams,
+        details.unreadable_streams,
+        details.chain_mismatches,
+    ].flatMap((value) => (Array.isArray(value) ? value : [])));
+    const cloneLocalReceiptsByItem = new Map();
+    for (const receipt of params.pendingMergeReceipts) {
+        if (receipt.evidence_source !== "clone_local")
+            continue;
+        const receipts = cloneLocalReceiptsByItem.get(receipt.item_id) ?? [];
+        receipts.push(receipt);
+        cloneLocalReceiptsByItem.set(receipt.item_id, receipts);
+    }
+    const attributed = [];
+    for (const id of hashMismatches) {
+        if (unsafeStreamIds.has(id))
+            continue;
+        const receipts = cloneLocalReceiptsByItem.get(id);
+        if (!receipts || receipts.length === 0)
+            continue;
+        try {
+            const repair = await runHistoryRepair(id, {
+                dryRun: true,
+                mergeReceiptProof: {
+                    gitWorkspaceRoot: params.gitWorkspaceRoot,
+                    receipts,
+                },
+            }, params.global);
+            if (repair.merge_receipt_proof?.trusted)
+                attributed.push(id);
+        }
+        catch {
+            // Fail closed: generic history-repair guidance remains authoritative.
+        }
+    }
+    return [...new Set(attributed)].sort((left, right) => left.localeCompare(right));
+}
+function applyMergeReceiptHistoryDriftAttribution(historyDriftCheck, attributedItems) {
+    const attributed = new Set(attributedItems);
+    historyDriftCheck.warnings = [
+        ...historyDriftCheck.warnings.filter((warning) => {
+            if (!warning.startsWith("history_drift_hash_mismatch:"))
+                return true;
+            return !attributed.has(warning.slice(warning.indexOf(":") + 1));
+        }),
+        ...attributedItems.map((id) => `history_drift_merge_receipt:${id}`),
+    ].sort((left, right) => left.localeCompare(right));
+    historyDriftCheck.check.details = {
+        ...historyDriftCheck.check.details,
+        merge_receipt_attributed_items: attributedItems,
+    };
+}
 function projectHealthResult(result, options, summaryMode) {
     const warningCount = result.warning_count ?? result.warnings.length;
     const boundedResult = {
@@ -2030,11 +2106,22 @@ export async function runHealth(global, options = {}) {
     const provenanceWarnings = provenanceResolverHealth.warnings;
     const locksCheck = await buildLocksCheck(pmRoot);
     const integrityCheck = skipPolicy.skipIntegrity
-        ? buildSkippedHealthCheck("integrity")
+        ? {
+            ...buildSkippedHealthCheck("integrity"),
+            gitWorkspaceRoot: null,
+            pendingMergeReceipts: [],
+        }
         : await buildIntegrityCheck(pmRoot, typeRegistry.type_to_folder, settings.schema, options.requireMergeDrivers === true, items);
     const historyDriftCheck = skipPolicy.skipDrift
         ? buildSkippedHealthCheck("history_drift")
         : await buildHistoryDriftCheck(pmRoot, itemsWithBody);
+    const mergeReceiptAttributedHistoryDriftItems = await correlateMergeReceiptHistoryDriftItems({
+        gitWorkspaceRoot: integrityCheck.gitWorkspaceRoot,
+        pendingMergeReceipts: integrityCheck.pendingMergeReceipts,
+        historyDriftCheck,
+        global,
+    });
+    applyMergeReceiptHistoryDriftAttribution(historyDriftCheck, mergeReceiptAttributedHistoryDriftItems);
     const vectorizationCheck = skipPolicy.skipVectors
         ? buildSkippedHealthCheck("vectorization")
         : await buildVectorizationCheck(pmRoot, settings, itemsWithBody, refreshPolicy, options.verboseStaleItems === true);
@@ -2142,4 +2229,4 @@ export const _testOnlyHealthCommand = {
     warningCode,
 };
 //# sourceMappingURL=health.js.map
-//# debugId=f7b3ff92-1fc7-55e9-aa76-af956714998f
+//# debugId=5887be76-3d1d-56fb-9cae-cf972f0b73f8

package/dist/sdk/governance/validate.js

@@ -4,7 +4,7 @@
  * Implements the pm validate command surface and its agent-facing runtime behavior.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="aca69fd7-c47a-5424-b58f-f305f690edd9")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="3d7d6f15-7587-5c22-8deb-373bfd063d2b")}catch(e){}}();
 import { assertInitializedTracker } from "../environment/tracker-preflight.js";
 import fs from "node:fs/promises";
 import { realpathSync } from "node:fs";
@@ -34,7 +34,7 @@ import { buildMissingLinkedPathRows, summarizeMissingLinkedPathRows, } from "../
 import { assertProjectionModeChoice, } from "../output-projection.js";
 import { collectDanglingDependencyReferences } from "../graph/assembly.js";
 import { auditMergeAttributeFence, auditMergeDriverConfiguration, findGitWorkspaceRoot, resolveProjectMergeTypeFolders, } from "../merge/install.js";
-import { listMergeReceipts, partitionMergeReceipts, } from "../merge/receipts.js";
+import { inspectMergeReceiptEvidence, partitionMergeReceipts, } from "../merge/receipts.js";
 import { scanStorageIntegrity } from "./storage-integrity.js";
 import { scanTrackedRuntimeCache } from "./tracked-runtime-cache.js";
 import { scanHistoryAuthorAttribution } from "../author-attribution.js";
@@ -1991,6 +1991,11 @@ export const _testOnlyValidateCommand = {
     summarizeDuplicateIssueCodes,
     toMeaningfulString,
 };
+function appendInvalidMergeReceiptEvidenceWarning(warnings, invalidEvidenceCount) {
+    if (invalidEvidenceCount > 0) {
+        warnings.push(`merge_receipt_evidence_invalid:${invalidEvidenceCount}`);
+    }
+}
 /** Build the post-merge storage-integrity check (GH-603/GH-607/GH-609/GH-611): provably corrupted storage — unreadable item documents, on-disk-vs-parsed census mismatches, history conflict markers, resurrected deletes, and unparseable config/schema files — fails validate as an error instead of hiding behind ok:true. The `history_repair_reconciliations` count is informational: it surfaces post-repair divergence without permanently failing repaired workspaces. */
 async function buildStorageIntegrityCheck(pmRoot, items, typeToFolder, settings) {
     const scan = await scanStorageIntegrity(pmRoot, new Set(items.map((item) => item.id)), typeToFolder, {
@@ -2032,16 +2037,16 @@ async function buildStorageIntegrityCheck(pmRoot, items, typeToFolder, settings)
     if (mergeDriverAudit !== null && mergeDriverAudit.status !== "ok") {
         warnings.push(`validate_merge_driver_configuration:${mergeDriverAudit.missing_keys.length + mergeDriverAudit.drifted_keys.length}`);
     }
-    const pendingMergeReceipts = gitWorkspaceRoot === null
-        ? []
-        : await listMergeReceipts(gitWorkspaceRoot, {
-            includeLossless: true,
-            pmRoot,
-        });
+    const mergeReceiptEvidence = await inspectMergeReceiptEvidence(gitWorkspaceRoot ?? pmRoot, {
+        includeLossless: true,
+        pmRoot,
+    });
+    const pendingMergeReceipts = mergeReceiptEvidence.receipts;
     const { pendingDecisions: pendingMergeDecisions, lossless: losslessMergeReceipts, } = partitionMergeReceipts(pendingMergeReceipts);
     if (pendingMergeDecisions.length > 0) {
         warnings.push(`validate_merge_decisions_unreviewed:${pendingMergeDecisions.length}`);
     }
+    appendInvalidMergeReceiptEvidenceWarning(warnings, mergeReceiptEvidence.invalid_evidence_count);
     const status = errorCount > 0 ? "error" : warnings.length > 0 ? "warn" : "ok";
     return {
         check: {
@@ -2060,6 +2065,7 @@ async function buildStorageIntegrityCheck(pmRoot, items, typeToFolder, settings)
                     ...new Set(pendingMergeDecisions.map((receipt) => receipt.item_id)),
                 ].sort((left, right) => left.localeCompare(right)),
                 lossless_merge_receipt_count: losslessMergeReceipts.length,
+                invalid_merge_receipt_evidence_count: mergeReceiptEvidence.invalid_evidence_count,
                 lossless_merge_receipt_items: [
                     ...new Set(losslessMergeReceipts.map((receipt) => receipt.item_id)),
                 ].sort((left, right) => left.localeCompare(right)),
@@ -2280,4 +2286,4 @@ export async function runValidate(options, global, services = {}) {
 }
 /* c8 ignore stop */
 //# sourceMappingURL=validate.js.map
-//# debugId=aca69fd7-c47a-5424-b58f-f305f690edd9
+//# debugId=3d7d6f15-7587-5c22-8deb-373bfd063d2b

package/dist/sdk/history-repair.d.ts

@@ -1,6 +1,7 @@
 import { type ReplayDocument } from "../core/history/replay.js";
 import type { GlobalOptions } from "../core/shared/command-types.js";
 import type { HistoryEntry } from "../types/index.js";
+import { type MergeDecisionReceipt } from "./merge/receipts.js";
 import { type ProvenanceNormalizationReceipt } from "./governance/provenance-health.js";
 /** Documents the history repair command options payload exchanged by command, SDK, and package integrations. */
 export interface HistoryRepairCommandOptions {
@@ -22,6 +23,16 @@ export interface HistoryRepairCommandOptions {
     forceAuditEntry?: boolean;
     /** Remove bounded-domain-invalid provenance observations and record an aggregate privacy-safe audit receipt. */
     normalizeProvenance?: boolean;
+    /** Internal receipt evidence revalidated against the exact item snapshot used by this repair. */
+    mergeReceiptProof?: {
+        gitWorkspaceRoot: string | null;
+        receipts: MergeDecisionReceipt[];
+    };
+    /** Internal per-item receipt proof index used by bounded bulk reconciliation. */
+    mergeReceiptProofById?: Record<string, {
+        gitWorkspaceRoot: string | null;
+        receipts: MergeDecisionReceipt[];
+    }>;
 }
 /** Documents the history repair result payload exchanged by command, SDK, and package integrations. */
 export interface HistoryRepairResult {
@@ -60,11 +71,22 @@ export interface HistoryRepairResult {
     };
     /** Present when reconciling the chain with the on-disk item discards the replayed effect of earlier history events (GH-603): names the reverted fields and the authors whose mutations the reconciliation overwrites, so cross-author data loss after a lossy merge is loud instead of silent. */
     reconciliation?: HistoryRepairReconciliationReport;
+    /** Present when merge reconciliation supplied receipt evidence for this item. */
+    merge_receipt_proof?: MergeReceiptProofResult;
     /** Value that configures or reports warnings for this contract. */
     warnings: string[];
     /** ISO 8601 timestamp recording when generated occurred. */
     generated_at: string;
 }
+/** Fail-closed proof that clone-local driver receipts exactly cover the current reconciliation fields and values. */
+export interface MergeReceiptProofResult {
+    /** Whether exact receipt identity, path, field, and value-hash evidence proves the snapshot. */
+    trusted: boolean;
+    /** Stable explanation for the trust decision. */
+    reason: "trusted_clone_local_driver_evidence" | "git_workspace_unavailable" | "item_path_unavailable" | "no_item_receipts" | "no_receipt_set_proves_snapshot";
+    /** Exact receipt identities accepted as proof; empty when proof is refused. */
+    receipt_ids: string[];
+}
 /** Documents one history event attributed to fields changed by reconciliation. */
 export interface HistoryRepairDiscardedEvent {
     /** 1-based index of the event in the (re-anchored) history stream. */
@@ -121,6 +143,8 @@ export interface HistoryRepairAllStreamResult {
     reconciled_with_item?: boolean;
     /** Cross-author data-loss detail when reconciliation overwrites replayed mutations. */
     reconciliation?: HistoryRepairReconciliationReport;
+    /** Exact receipt proof used to authorize this stream, when supplied. */
+    merge_receipt_proof?: MergeReceiptProofResult;
     /** Stream-specific repair warnings retained by the bulk workflow. */
     warnings?: string[];
     /** Value that configures or reports error for this contract. */