@unbrained/pm-cli 2026.8.24 → 2026.8.25

package/sdk/public-surface.json

@@ -1,6 +1,6 @@
 {
   "aggregate_completeness": {
-    "covered_symbols": 1793,
+    "covered_symbols": 1796,
     "excluded": [
       {
         "name": "_testOnlyCliContracts",
@@ -8,7 +8,7 @@
       }
     ],
     "missing": [],
-    "required_symbols": 1794
+    "required_symbols": 1797
   },
   "breaking_acknowledgements": [
     {
@@ -1181,6 +1181,81 @@
       ],
       "package_version": "2026.8.23",
       "reason": "Align history-compaction SDK ID inputs with bulk transport contracts and fail closed on invalid explicit selectors"
+    },
+    {
+      "changes": [
+        "signature ./sdk:ContractsResult",
+        "signature ./sdk:PmReadOutputSurfaceContract",
+        "signature ./sdk/contracts:PmReadOutputSurfaceContract",
+        "signature ./sdk/core:PmReadOutputSurfaceContract",
+        "signature ./sdk/runtime:ContractsResult",
+        "signature ./sdk/runtime:PmReadOutputSurfaceContract"
+      ],
+      "package_version": "2026.8.24",
+      "reason": "Additive optional runtime metadata and public helpers; no accepted input, export, or behavior was removed"
+    },
+    {
+      "changes": [
+        "signature ./sdk:PmReadOutputContinuationFingerprintPolicy",
+        "signature ./sdk/contracts:PmReadOutputContinuationFingerprintPolicy"
+      ],
+      "package_version": "2026.8.24",
+      "reason": "Pre-release continuation policy correction binds nonvolatile checks and dynamic telemetry row identity; no accepted input, export, or runtime command was removed"
+    },
+    {
+      "changes": [
+        "signature ./sdk:PmReadOutputContinuationFingerprintPolicy",
+        "signature ./sdk/contracts:PmReadOutputContinuationFingerprintPolicy"
+      ],
+      "package_version": "2026.8.24",
+      "reason": "Replace unreleased broad telemetry-detail exclusion with fail-closed field-scoped continuation policy v3 after security review"
+    },
+    {
+      "changes": [
+        "signature ./sdk:MergeDecisionReceipt",
+        "signature ./sdk/merge:MergeDecisionReceipt"
+      ],
+      "package_version": "2026.8.24",
+      "reason": "Add optional merged-field hash proofs to the unreleased receipt-attribution contract so health fails closed on stale or forged evidence."
+    },
+    {
+      "changes": [
+        "signature ./sdk:HistoryRepairCommandOptions",
+        "signature ./sdk:HistoryRepairResult",
+        "signature ./sdk:MergeDecisionReceipt",
+        "signature ./sdk/merge:MergeDecisionReceipt"
+      ],
+      "package_version": "2026.8.24",
+      "reason": "Add fail-closed clone-local receipt proof metadata and apply-boundary validation to the unreleased merge-reconciliation contract."
+    },
+    {
+      "changes": [
+        "signature ./sdk:HistoryRepairAllStreamResult"
+      ],
+      "package_version": "2026.8.24",
+      "reason": "Expose receipt-scoped merge reconciliation proof in history repair stream contracts"
+    },
+    {
+      "changes": [
+        "signature ./sdk:HistoryRepairCommandOptions"
+      ],
+      "package_version": "2026.8.24",
+      "reason": "Expose bounded per-item receipt proof indexing and receipt-scoped reconciliation results"
+    },
+    {
+      "changes": [
+        "signature ./sdk:MergeReceiptProofResult"
+      ],
+      "package_version": "2026.8.24",
+      "reason": "Expose exact receipt-id sets for bounded multi-receipt reconciliation proof"
+    },
+    {
+      "changes": [
+        "signature ./sdk:markMergeReceiptReconciled",
+        "signature ./sdk/merge:markMergeReceiptReconciled"
+      ],
+      "package_version": "2026.8.24",
+      "reason": "Add strict requireExisting settlement mode while preserving default idempotency"
     }
   ],
   "entrypoints": {
@@ -4131,7 +4206,7 @@
           "classification": "advanced_export",
           "kind": "interface",
           "name": "ContractsResult",
-          "signature": "export interface ContractsResult { schema_version: string | null; schema_id: string | null; selected: { action: string | null; command: string | null; summary: boolean; schema_only: boolean; flags_only: boolean; availability_only: boolean; runtime_only: boolean; command_scoped: boolean; }; actions?: string[]; action_availability?: ContractsActionAvailability[]; commands: string[]; schema?: Record<string, unknown>; schema_omitted_reason?: string; command_flags_omitted_reason?: string; commander_aliases_omitted_reason?: string; command_flags?: CommandFlagSurface[]; list_projections?: ListCommandProjectionSurface[]; command_aliases?: CommandAliasSurface[]; grammar_contracts?: { nouns: readonly string[]; shared_verbs: readonly string[]; scope_before_verb: boolean; visible_top_level_ceiling: number; ceiling_raise_requires_pm_item: boolean; positional_shape_budget: number; positional_shape_count: number; positional_action_count: number; positional_action_parents: readonly string[]; positional_signatures?: readonly PmCommandPositionalContract[]; destinations?: readonly PmCommandDestinationContract[]; }; commander_aliases?: Record<string, CommanderOptionAliasContract[]>; extension_commands?: ExtensionCommandContract[]; command_summaries?: CommandSummarySurface[]; output_policy?: { token_estimate: \"ceil(utf8_bytes / 4)\"; degradation_ladder: string[]; allows_unbounded_opt_out: boolean; }; runtime_schema?: { statuses: string[]; open_status: string; close_status: string; canceled_status: string; types: string[]; fields_by_command: Record<string, string[]>; }; relationship_kind_contracts?: Array<{ canonical: string; aliases: string[]; inverse?: string; ordering: boolean; hierarchy: boolean; }>; extension_contracts?: { capabilities: string[]; services: string[]; policy_modes: string[]; policy_mode_scope: \"extensions.policy.mode\"; policy_surfaces: string[]; trust_modes: string[]; trust_mode_scope: \"extensions.policy.trust_mode\"; sandbox_profiles: string[]; manifest_versions: number[]; compatibility: { current: string; previous: string[]; breaking_strategy: string; }; }; governance_contracts?: { ownership_enforcement_modes: string[]; create_modes: string[]; close_validation_modes: string[]; workflow_enforcement_modes: string[]; }; assurance_contracts?: { measurement_source_kinds: readonly string[]; gate_triggers: readonly string[]; }; mcp_tools?: McpToolContract[]; context_intents?: readonly PmContextIntentContract[]; read_output_dimensions?: readonly PmReadOutputSurfaceContract[]; error_codes?: readonly PmErrorCodeContract[]; command_output_contracts?: Array<{ budget: PmCommandOutputBudgetContract; envelope: PmCommandOutputEnvelopeContract; }>; diagnostic_output_contracts?: readonly PmDiagnosticOutputBudgetContract[]; command_exit_contracts?: { vocabulary: readonly PmCommandExitOutcomeContract[]; command_sets: Array<{ commands: string[]; exit_codes: PmCommandExitContract[\"exit_codes\"]; }>; }; }"
+          "signature": "export interface ContractsResult { schema_version: string | null; schema_id: string | null; selected: { action: string | null; command: string | null; summary: boolean; schema_only: boolean; flags_only: boolean; availability_only: boolean; runtime_only: boolean; command_scoped: boolean; }; actions?: string[]; action_availability?: ContractsActionAvailability[]; commands: string[]; schema?: Record<string, unknown>; schema_omitted_reason?: string; command_flags_omitted_reason?: string; commander_aliases_omitted_reason?: string; command_flags?: CommandFlagSurface[]; list_projections?: ListCommandProjectionSurface[]; command_aliases?: CommandAliasSurface[]; grammar_contracts?: { nouns: readonly string[]; shared_verbs: readonly string[]; scope_before_verb: boolean; visible_top_level_ceiling: number; ceiling_raise_requires_pm_item: boolean; positional_shape_budget: number; positional_shape_count: number; positional_action_count: number; positional_action_parents: readonly string[]; positional_signatures?: readonly PmCommandPositionalContract[]; destinations?: readonly PmCommandDestinationContract[]; }; commander_aliases?: Record<string, CommanderOptionAliasContract[]>; extension_commands?: ExtensionCommandContract[]; command_summaries?: CommandSummarySurface[]; output_policy?: { token_estimate: \"ceil(utf8_bytes / 4)\"; degradation_ladder: string[]; allows_unbounded_opt_out: boolean; }; output_projection_contracts?: { global_ladder_field: \"output_policy.degradation_ladder\"; global_ladder_scope: \"union_not_per_command\"; discovery: \"pm contracts --command <command> --summary\"; commands?: Array<{ command: string; modes: string[]; }>; }; runtime_schema?: { statuses: string[]; open_status: string; close_status: string; canceled_status: string; types: string[]; fields_by_command: Record<string, string[]>; }; relationship_kind_contracts?: Array<{ canonical: string; aliases: string[]; inverse?: string; ordering: boolean; hierarchy: boolean; }>; extension_contracts?: { capabilities: string[]; services: string[]; policy_modes: string[]; policy_mode_scope: \"extensions.policy.mode\"; policy_surfaces: string[]; trust_modes: string[]; trust_mode_scope: \"extensions.policy.trust_mode\"; sandbox_profiles: string[]; manifest_versions: number[]; compatibility: { current: string; previous: string[]; breaking_strategy: string; }; }; governance_contracts?: { ownership_enforcement_modes: string[]; create_modes: string[]; close_validation_modes: string[]; workflow_enforcement_modes: string[]; }; assurance_contracts?: { measurement_source_kinds: readonly string[]; gate_triggers: readonly string[]; }; mcp_tools?: McpToolContract[]; context_intents?: readonly PmContextIntentContract[]; read_output_dimensions?: readonly PmReadOutputSurfaceContract[]; error_codes?: readonly PmErrorCodeContract[]; command_output_contracts?: Array<{ budget: PmCommandOutputBudgetContract; envelope: PmCommandOutputEnvelopeContract; }>; diagnostic_output_contracts?: readonly PmDiagnosticOutputBudgetContract[]; command_exit_contracts?: { vocabulary: readonly PmCommandExitOutcomeContract[]; command_sets: Array<{ commands: string[]; exit_codes: PmCommandExitContract[\"exit_codes\"]; }>; }; }"
         },
         {
           "classification": "supported",
@@ -7347,13 +7422,13 @@
           "classification": "advanced_export",
           "kind": "interface",
           "name": "HistoryRepairAllStreamResult",
-          "signature": "export interface HistoryRepairAllStreamResult { id: string; outcome: \"repaired\" | \"skipped_clean\" | \"failed\"; entries_rehashed?: number; entries_patch_repaired?: number; reconciled_with_item?: boolean; reconciliation?: HistoryRepairReconciliationReport; warnings?: string[]; error?: string; }"
+          "signature": "export interface HistoryRepairAllStreamResult { id: string; outcome: \"repaired\" | \"skipped_clean\" | \"failed\"; entries_rehashed?: number; entries_patch_repaired?: number; reconciled_with_item?: boolean; reconciliation?: HistoryRepairReconciliationReport; merge_receipt_proof?: MergeReceiptProofResult; warnings?: string[]; error?: string; }"
         },
         {
           "classification": "advanced_export",
           "kind": "interface",
           "name": "HistoryRepairCommandOptions",
-          "signature": "export interface HistoryRepairCommandOptions { dryRun?: boolean; author?: string; message?: string; force?: boolean; auditOperation?: string; auditContext?: Record<string, unknown>; auditContextById?: Record<string, Record<string, unknown>>; forceAuditEntry?: boolean; normalizeProvenance?: boolean; }"
+          "signature": "export interface HistoryRepairCommandOptions { dryRun?: boolean; author?: string; message?: string; force?: boolean; auditOperation?: string; auditContext?: Record<string, unknown>; auditContextById?: Record<string, Record<string, unknown>>; forceAuditEntry?: boolean; normalizeProvenance?: boolean; mergeReceiptProof?: { gitWorkspaceRoot: string | null; receipts: MergeDecisionReceipt[]; }; mergeReceiptProofById?: Record<string, { gitWorkspaceRoot: string | null; receipts: MergeDecisionReceipt[]; }>; }"
         },
         {
           "classification": "advanced_export",
@@ -7371,7 +7446,7 @@
           "classification": "advanced_export",
           "kind": "interface",
           "name": "HistoryRepairResult",
-          "signature": "export interface HistoryRepairResult { id: string; dry_run: boolean; changed: boolean; history: { path: string; entries_scanned: number; chain_drift_before: boolean; entries_rehashed: number; entries_patch_repaired: number; converted_replace_to_add: number; skipped_ops: number; reconciled_with_item: boolean; audit_entry_added: boolean; verify_ok: boolean; verify_errors: string[]; item_hash_version_before: number | null; item_hash_version_after: number; version_disposition: \"preserved\" | \"selected_for_ambiguous_stream\"; }; item: { exists: boolean; path: string | null; matched_chain_before: boolean | null; }; provenance_normalization: ProvenanceNormalizationReceipt & { requested: boolean; }; reconciliation?: HistoryRepairReconciliationReport; warnings: string[]; generated_at: string; }"
+          "signature": "export interface HistoryRepairResult { id: string; dry_run: boolean; changed: boolean; history: { path: string; entries_scanned: number; chain_drift_before: boolean; entries_rehashed: number; entries_patch_repaired: number; converted_replace_to_add: number; skipped_ops: number; reconciled_with_item: boolean; audit_entry_added: boolean; verify_ok: boolean; verify_errors: string[]; item_hash_version_before: number | null; item_hash_version_after: number; version_disposition: \"preserved\" | \"selected_for_ambiguous_stream\"; }; item: { exists: boolean; path: string | null; matched_chain_before: boolean | null; }; provenance_normalization: ProvenanceNormalizationReceipt & { requested: boolean; }; reconciliation?: HistoryRepairReconciliationReport; merge_receipt_proof?: MergeReceiptProofResult; warnings: string[]; generated_at: string; }"
         },
         {
           "classification": "supported",
@@ -8535,7 +8610,7 @@
           "classification": "supported",
           "kind": "function",
           "name": "markMergeReceiptReconciled",
-          "signature": "(cwd: string, receipt: MergeDecisionReceipt) => Promise<void> | calls: (cwd: string, receipt: MergeDecisionReceipt) => Promise<void>"
+          "signature": "(cwd: string, receipt: MergeDecisionReceipt, options?: { requireExisting?: boolean; }) => Promise<void> | calls: (cwd: string, receipt: MergeDecisionReceipt, options?: { requireExisting?: boolean; }) => Promise<void>"
         },
         {
           "classification": "advanced_export",
@@ -8607,7 +8682,7 @@
           "classification": "supported",
           "kind": "interface",
           "name": "MergeDecisionReceipt",
-          "signature": "export interface MergeDecisionReceipt { version: 1; id: string; item_path: string; item_id: string; requested_preference?: MergePreferredSide; preferred?: MergePreferredSide; conflict_resolution: \"preferred_side\" | \"stable_value_order\"; fields_from_theirs: string[]; union_fields: string[]; decisions: ItemMergeConflictDecision[]; state: \"pending\" | \"reconciled\"; created_at: string; reconciled_at?: string; value_availability?: \"clone_local\" | \"hash_only\"; }"
+          "signature": "export interface MergeDecisionReceipt { version: 1; id: string; item_path: string; item_id: string; requested_preference?: MergePreferredSide; preferred?: MergePreferredSide; conflict_resolution: \"preferred_side\" | \"stable_value_order\"; fields_from_theirs: string[]; union_fields: string[]; merged_field_hashes?: Record<string, string>; decisions: ItemMergeConflictDecision[]; state: \"pending\" | \"reconciled\"; created_at: string; reconciled_at?: string; value_availability?: \"clone_local\" | \"hash_only\"; evidence_source?: \"clone_local\" | \"durable\"; }"
         },
         {
           "classification": "supported",
@@ -8705,6 +8780,12 @@
           "name": "MergePreferredSide",
           "signature": "export type MergePreferredSide = \"ours\" | \"theirs\";"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "MergeReceiptProofResult",
+          "signature": "export interface MergeReceiptProofResult { trusted: boolean; reason: \"trusted_clone_local_driver_evidence\" | \"git_workspace_unavailable\" | \"item_path_unavailable\" | \"no_item_receipts\" | \"no_receipt_set_proves_snapshot\"; receipt_ids: string[]; }"
+        },
         {
           "classification": "supported",
           "kind": "interface",
@@ -10199,6 +10280,12 @@
           "name": "PM_READ_OUTPUT_COMPOSITION_OPTION_FLAGS",
           "signature": "readonly [\"--output-session\", \"--output-cursor\", \"--output-row-contract\"]"
         },
+        {
+          "classification": "contract_data",
+          "kind": "value",
+          "name": "PM_READ_OUTPUT_CONTINUATION_FINGERPRINT_POLICIES",
+          "signature": "Readonly<Partial<Record<\"activity\" | \"aggregate\" | \"assurance\" | \"comments-audit\" | \"comments\" | \"context\" | \"contracts\" | \"deps\" | \"docs\" | \"duplicates\" | \"events\" | \"files\" | \"get\" | \"graph\" | \"health\" | \"history\" | \"list\" | \"next\" | \"notes\" | \"package-catalog\" | \"package-manage\" | \"search\" | \"stats\" | \"validate\", PmReadOutputContinuationFingerprintPolicy>>>"
+        },
         {
           "classification": "supported",
           "kind": "value",
@@ -11021,6 +11108,12 @@
           "name": "PmReadOutputContinuation",
           "signature": "export interface PmReadOutputContinuation { path: string; cursor: string; retained_rows: number; remaining_rows: number; total_rows: number; }"
         },
+        {
+          "classification": "contract_data",
+          "kind": "interface",
+          "name": "PmReadOutputContinuationFingerprintPolicy",
+          "signature": "export interface PmReadOutputContinuationFingerprintPolicy { version: 3; paths: readonly string[]; ignored_detail_field_names_by_row: Readonly<Record<string, readonly string[]>>; guarantee: \"nonvolatile_snapshot_and_stable_configuration\"; }"
+        },
         {
           "classification": "supported",
           "kind": "interface",
@@ -11121,7 +11214,7 @@
           "classification": "supported",
           "kind": "interface",
           "name": "PmReadOutputSurfaceContract",
-          "signature": "export interface PmReadOutputSurfaceContract { command: PmReadOutputSurface; dimensions: Record<PmReadOutputDimension, PmReadOutputDimensionContract>; precedence: readonly [ \"canonical\", \"legacy\", \"intent\", \"default\" ]; budget_retention_policy: \"ordered_prefix\" | \"verdict_priority\"; }"
+          "signature": "export interface PmReadOutputSurfaceContract { command: PmReadOutputSurface; dimensions: Record<PmReadOutputDimension, PmReadOutputDimensionContract>; precedence: readonly [ \"canonical\", \"legacy\", \"intent\", \"default\" ]; budget_retention_policy: \"ordered_prefix\" | \"verdict_priority\"; projection_modes?: readonly string[]; }"
         },
         {
           "classification": "contract_data",
@@ -12035,6 +12128,12 @@
           "name": "readOutputBudgetCollections",
           "signature": "(result: Record<string, unknown>) => PmReadOutputRowCollection[] | calls: (result: Record<string, unknown>) => PmReadOutputRowCollection[]"
         },
+        {
+          "classification": "contract_data",
+          "kind": "function",
+          "name": "readOutputCollectionFingerprint",
+          "signature": "(path: string, value: unknown[] | Record<string, unknown>, command?: PmReadOutputSurface) => string | calls: (path: string, value: unknown[] | Record<string, unknown>, command?: PmReadOutputSurface) => string"
+        },
         {
           "classification": "advanced_export",
           "kind": "function",
@@ -19787,6 +19886,12 @@
           "name": "PM_READ_OUTPUT_COMPOSITION_OPTION_FLAGS",
           "signature": "readonly [\"--output-session\", \"--output-cursor\", \"--output-row-contract\"]"
         },
+        {
+          "classification": "contract_data",
+          "kind": "value",
+          "name": "PM_READ_OUTPUT_CONTINUATION_FINGERPRINT_POLICIES",
+          "signature": "Readonly<Partial<Record<\"activity\" | \"aggregate\" | \"assurance\" | \"comments-audit\" | \"comments\" | \"context\" | \"contracts\" | \"deps\" | \"docs\" | \"duplicates\" | \"events\" | \"files\" | \"get\" | \"graph\" | \"health\" | \"history\" | \"list\" | \"next\" | \"notes\" | \"package-catalog\" | \"package-manage\" | \"search\" | \"stats\" | \"validate\", PmReadOutputContinuationFingerprintPolicy>>>"
+        },
         {
           "classification": "contract_data",
           "kind": "value",
@@ -20273,6 +20378,12 @@
           "name": "PmReadOutputContinuation",
           "signature": "export interface PmReadOutputContinuation { path: string; cursor: string; retained_rows: number; remaining_rows: number; total_rows: number; }"
         },
+        {
+          "classification": "contract_data",
+          "kind": "interface",
+          "name": "PmReadOutputContinuationFingerprintPolicy",
+          "signature": "export interface PmReadOutputContinuationFingerprintPolicy { version: 3; paths: readonly string[]; ignored_detail_field_names_by_row: Readonly<Record<string, readonly string[]>>; guarantee: \"nonvolatile_snapshot_and_stable_configuration\"; }"
+        },
         {
           "classification": "contract_data",
           "kind": "interface",
@@ -20361,7 +20472,7 @@
           "classification": "contract_data",
           "kind": "interface",
           "name": "PmReadOutputSurfaceContract",
-          "signature": "export interface PmReadOutputSurfaceContract { command: PmReadOutputSurface; dimensions: Record<PmReadOutputDimension, PmReadOutputDimensionContract>; precedence: readonly [ \"canonical\", \"legacy\", \"intent\", \"default\" ]; budget_retention_policy: \"ordered_prefix\" | \"verdict_priority\"; }"
+          "signature": "export interface PmReadOutputSurfaceContract { command: PmReadOutputSurface; dimensions: Record<PmReadOutputDimension, PmReadOutputDimensionContract>; precedence: readonly [ \"canonical\", \"legacy\", \"intent\", \"default\" ]; budget_retention_policy: \"ordered_prefix\" | \"verdict_priority\"; projection_modes?: readonly string[]; }"
         },
         {
           "classification": "contract_data",
@@ -20513,6 +20624,12 @@
           "name": "readFirstValueFromCommanderOptions",
           "signature": "(options: Record<string, unknown>, contract: CommanderOptionAliasContract) => unknown | calls: (options: Record<string, unknown>, contract: CommanderOptionAliasContract) => unknown"
         },
+        {
+          "classification": "contract_data",
+          "kind": "function",
+          "name": "readOutputCollectionFingerprint",
+          "signature": "(path: string, value: unknown[] | Record<string, unknown>, command?: PmReadOutputSurface) => string | calls: (path: string, value: unknown[] | Record<string, unknown>, command?: PmReadOutputSurface) => string"
+        },
         {
           "classification": "contract_data",
           "kind": "function",
@@ -21945,7 +22062,7 @@
           "classification": "supported",
           "kind": "interface",
           "name": "PmReadOutputSurfaceContract",
-          "signature": "export interface PmReadOutputSurfaceContract { command: PmReadOutputSurface; dimensions: Record<PmReadOutputDimension, PmReadOutputDimensionContract>; precedence: readonly [ \"canonical\", \"legacy\", \"intent\", \"default\" ]; budget_retention_policy: \"ordered_prefix\" | \"verdict_priority\"; }"
+          "signature": "export interface PmReadOutputSurfaceContract { command: PmReadOutputSurface; dimensions: Record<PmReadOutputDimension, PmReadOutputDimensionContract>; precedence: readonly [ \"canonical\", \"legacy\", \"intent\", \"default\" ]; budget_retention_policy: \"ordered_prefix\" | \"verdict_priority\"; projection_modes?: readonly string[]; }"
         },
         {
           "classification": "supported",
@@ -25131,7 +25248,7 @@
           "classification": "supported",
           "kind": "function",
           "name": "markMergeReceiptReconciled",
-          "signature": "(cwd: string, receipt: MergeDecisionReceipt) => Promise<void> | calls: (cwd: string, receipt: MergeDecisionReceipt) => Promise<void>"
+          "signature": "(cwd: string, receipt: MergeDecisionReceipt, options?: { requireExisting?: boolean; }) => Promise<void> | calls: (cwd: string, receipt: MergeDecisionReceipt, options?: { requireExisting?: boolean; }) => Promise<void>"
         },
         {
           "classification": "supported",
@@ -25143,7 +25260,7 @@
           "classification": "supported",
           "kind": "interface",
           "name": "MergeDecisionReceipt",
-          "signature": "export interface MergeDecisionReceipt { version: 1; id: string; item_path: string; item_id: string; requested_preference?: MergePreferredSide; preferred?: MergePreferredSide; conflict_resolution: \"preferred_side\" | \"stable_value_order\"; fields_from_theirs: string[]; union_fields: string[]; decisions: ItemMergeConflictDecision[]; state: \"pending\" | \"reconciled\"; created_at: string; reconciled_at?: string; value_availability?: \"clone_local\" | \"hash_only\"; }"
+          "signature": "export interface MergeDecisionReceipt { version: 1; id: string; item_path: string; item_id: string; requested_preference?: MergePreferredSide; preferred?: MergePreferredSide; conflict_resolution: \"preferred_side\" | \"stable_value_order\"; fields_from_theirs: string[]; union_fields: string[]; merged_field_hashes?: Record<string, string>; decisions: ItemMergeConflictDecision[]; state: \"pending\" | \"reconciled\"; created_at: string; reconciled_at?: string; value_availability?: \"clone_local\" | \"hash_only\"; evidence_source?: \"clone_local\" | \"durable\"; }"
         },
         {
           "classification": "supported",
@@ -27333,7 +27450,7 @@
           "classification": "advanced_export",
           "kind": "interface",
           "name": "ContractsResult",
-          "signature": "export interface ContractsResult { schema_version: string | null; schema_id: string | null; selected: { action: string | null; command: string | null; summary: boolean; schema_only: boolean; flags_only: boolean; availability_only: boolean; runtime_only: boolean; command_scoped: boolean; }; actions?: string[]; action_availability?: ContractsActionAvailability[]; commands: string[]; schema?: Record<string, unknown>; schema_omitted_reason?: string; command_flags_omitted_reason?: string; commander_aliases_omitted_reason?: string; command_flags?: CommandFlagSurface[]; list_projections?: ListCommandProjectionSurface[]; command_aliases?: CommandAliasSurface[]; grammar_contracts?: { nouns: readonly string[]; shared_verbs: readonly string[]; scope_before_verb: boolean; visible_top_level_ceiling: number; ceiling_raise_requires_pm_item: boolean; positional_shape_budget: number; positional_shape_count: number; positional_action_count: number; positional_action_parents: readonly string[]; positional_signatures?: readonly PmCommandPositionalContract[]; destinations?: readonly PmCommandDestinationContract[]; }; commander_aliases?: Record<string, CommanderOptionAliasContract[]>; extension_commands?: ExtensionCommandContract[]; command_summaries?: CommandSummarySurface[]; output_policy?: { token_estimate: \"ceil(utf8_bytes / 4)\"; degradation_ladder: string[]; allows_unbounded_opt_out: boolean; }; runtime_schema?: { statuses: string[]; open_status: string; close_status: string; canceled_status: string; types: string[]; fields_by_command: Record<string, string[]>; }; relationship_kind_contracts?: Array<{ canonical: string; aliases: string[]; inverse?: string; ordering: boolean; hierarchy: boolean; }>; extension_contracts?: { capabilities: string[]; services: string[]; policy_modes: string[]; policy_mode_scope: \"extensions.policy.mode\"; policy_surfaces: string[]; trust_modes: string[]; trust_mode_scope: \"extensions.policy.trust_mode\"; sandbox_profiles: string[]; manifest_versions: number[]; compatibility: { current: string; previous: string[]; breaking_strategy: string; }; }; governance_contracts?: { ownership_enforcement_modes: string[]; create_modes: string[]; close_validation_modes: string[]; workflow_enforcement_modes: string[]; }; assurance_contracts?: { measurement_source_kinds: readonly string[]; gate_triggers: readonly string[]; }; mcp_tools?: McpToolContract[]; context_intents?: readonly PmContextIntentContract[]; read_output_dimensions?: readonly PmReadOutputSurfaceContract[]; error_codes?: readonly PmErrorCodeContract[]; command_output_contracts?: Array<{ budget: PmCommandOutputBudgetContract; envelope: PmCommandOutputEnvelopeContract; }>; diagnostic_output_contracts?: readonly PmDiagnosticOutputBudgetContract[]; command_exit_contracts?: { vocabulary: readonly PmCommandExitOutcomeContract[]; command_sets: Array<{ commands: string[]; exit_codes: PmCommandExitContract[\"exit_codes\"]; }>; }; }"
+          "signature": "export interface ContractsResult { schema_version: string | null; schema_id: string | null; selected: { action: string | null; command: string | null; summary: boolean; schema_only: boolean; flags_only: boolean; availability_only: boolean; runtime_only: boolean; command_scoped: boolean; }; actions?: string[]; action_availability?: ContractsActionAvailability[]; commands: string[]; schema?: Record<string, unknown>; schema_omitted_reason?: string; command_flags_omitted_reason?: string; commander_aliases_omitted_reason?: string; command_flags?: CommandFlagSurface[]; list_projections?: ListCommandProjectionSurface[]; command_aliases?: CommandAliasSurface[]; grammar_contracts?: { nouns: readonly string[]; shared_verbs: readonly string[]; scope_before_verb: boolean; visible_top_level_ceiling: number; ceiling_raise_requires_pm_item: boolean; positional_shape_budget: number; positional_shape_count: number; positional_action_count: number; positional_action_parents: readonly string[]; positional_signatures?: readonly PmCommandPositionalContract[]; destinations?: readonly PmCommandDestinationContract[]; }; commander_aliases?: Record<string, CommanderOptionAliasContract[]>; extension_commands?: ExtensionCommandContract[]; command_summaries?: CommandSummarySurface[]; output_policy?: { token_estimate: \"ceil(utf8_bytes / 4)\"; degradation_ladder: string[]; allows_unbounded_opt_out: boolean; }; output_projection_contracts?: { global_ladder_field: \"output_policy.degradation_ladder\"; global_ladder_scope: \"union_not_per_command\"; discovery: \"pm contracts --command <command> --summary\"; commands?: Array<{ command: string; modes: string[]; }>; }; runtime_schema?: { statuses: string[]; open_status: string; close_status: string; canceled_status: string; types: string[]; fields_by_command: Record<string, string[]>; }; relationship_kind_contracts?: Array<{ canonical: string; aliases: string[]; inverse?: string; ordering: boolean; hierarchy: boolean; }>; extension_contracts?: { capabilities: string[]; services: string[]; policy_modes: string[]; policy_mode_scope: \"extensions.policy.mode\"; policy_surfaces: string[]; trust_modes: string[]; trust_mode_scope: \"extensions.policy.trust_mode\"; sandbox_profiles: string[]; manifest_versions: number[]; compatibility: { current: string; previous: string[]; breaking_strategy: string; }; }; governance_contracts?: { ownership_enforcement_modes: string[]; create_modes: string[]; close_validation_modes: string[]; workflow_enforcement_modes: string[]; }; assurance_contracts?: { measurement_source_kinds: readonly string[]; gate_triggers: readonly string[]; }; mcp_tools?: McpToolContract[]; context_intents?: readonly PmContextIntentContract[]; read_output_dimensions?: readonly PmReadOutputSurfaceContract[]; error_codes?: readonly PmErrorCodeContract[]; command_output_contracts?: Array<{ budget: PmCommandOutputBudgetContract; envelope: PmCommandOutputEnvelopeContract; }>; diagnostic_output_contracts?: readonly PmDiagnosticOutputBudgetContract[]; command_exit_contracts?: { vocabulary: readonly PmCommandExitOutcomeContract[]; command_sets: Array<{ commands: string[]; exit_codes: PmCommandExitContract[\"exit_codes\"]; }>; }; }"
         },
         {
           "classification": "supported",
@@ -28611,7 +28728,7 @@
           "classification": "supported",
           "kind": "interface",
           "name": "PmReadOutputSurfaceContract",
-          "signature": "export interface PmReadOutputSurfaceContract { command: PmReadOutputSurface; dimensions: Record<PmReadOutputDimension, PmReadOutputDimensionContract>; precedence: readonly [ \"canonical\", \"legacy\", \"intent\", \"default\" ]; budget_retention_policy: \"ordered_prefix\" | \"verdict_priority\"; }"
+          "signature": "export interface PmReadOutputSurfaceContract { command: PmReadOutputSurface; dimensions: Record<PmReadOutputDimension, PmReadOutputDimensionContract>; precedence: readonly [ \"canonical\", \"legacy\", \"intent\", \"default\" ]; budget_retention_policy: \"ordered_prefix\" | \"verdict_priority\"; projection_modes?: readonly string[]; }"
         },
         {
           "classification": "supported",
@@ -30502,6 +30619,7 @@
     "history_author_acknowledge_target_unreadable",
     "history_drift_chain_mismatch",
     "history_drift_hash_mismatch",
+    "history_drift_merge_receipt",
     "history_drift_missing_stream",
     "history_drift_unreadable_stream",
     "history_merge_conflict_markers_detected",
@@ -30571,7 +30689,10 @@
     "merge_conflict_markers_detected",
     "merge_decisions_unreviewed",
     "merge_git_config_unwritable",
+    "merge_receipt_evidence_invalid",
+    "merge_receipts_pending",
     "merge_reconcile_discards_require_acceptance",
+    "merge_reconcile_receipt_evidence_untrusted",
     "merge_root_not_found",
     "missing_allowed_values",
     "missing_budget",