@unbrained/pm-cli 2026.8.27 → 2026.8.28

package/dist/cli-bundle/sdk-governance.js

@@ -1,2 +1,2 @@
-import{A as ne,Ab as $e,B as de,Bb as Be,C as oe,Cb as Ce,D as ae,Db as De,E as ue,Eb as Ne,F as se,Fb as Oe,G as fe,Ga as he,Gb as Ue,Ha as we,Hb as Pe,Ia as ge,Ib as je,Jb as Fe,Kb as qe,Lb as _,Mb as He,Nb as l,Sa as ke,Ta as Ae,Ua as Ee,aa as pe,ba as ce,c as N,ca as _e,d as O,da as le,e as U,ea as ve,f as P,fa as xe,g as j,ga as me,h as F,ha as be,i as q,ia as ye,j as z,k as J,l as W,m as Z,n as G,o as H,p as V,q as Y,r as K,s as X,t as L,u as Q,v as M,w as ee,wb as Re,x as ie,xb as Se,y as te,yb as Te,z as re,zb as Ie}from"./focused-chunks/chunk-4BR5UU52.js";import"./focused-chunks/chunk-Y3JJXRVK.js";import"./focused-chunks/chunk-EKX37ZHA.js";import"./focused-chunks/chunk-AQ5IYEZZ.js";import"./focused-chunks/chunk-FC2AXLB5.js";import{Aa as k,Ba as A,Ca as E,Ea as R,Fa as S,Ga as T,Ha as I,Ia as $,Ja as B,Ka as C,La as D,Va as ze,Wa as Je,Xa as We,Ya as Ze,Za as Ge,xa as h,ya as w,za as g}from"./focused-chunks/chunk-YVVZ3LQ6.js";import"./focused-chunks/chunk-HVQ22RC4.js";import"./focused-chunks/chunk-YHWHX6YY.js";import{$ as c}from"./focused-chunks/chunk-XDPYBQCF.js";import"./focused-chunks/chunk-AD6ULRAF.js";import"./focused-chunks/chunk-6GCRSLPG.js";import"./focused-chunks/chunk-Z2USIBR2.js";(function(){try{var e=typeof window<"u"?window:typeof global<"u"?global:typeof globalThis<"u"?globalThis:typeof self<"u"?self:{},i=new e.Error().stack;i&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[i]="3edb1f4f-d26e-51a8-b62a-caffdd3ac44b")}catch{}})();var v=["captured_redacted","captured_verbatim"],x=[{label:"home directory",pattern:/(?:\/home\/|\/Users\/)[^/\s"']+/u},{label:"GitHub token",pattern:/\b(?:gh[oprsu]_[A-Za-z0-9_]{20,})\b/u},{label:"npm token",pattern:/\bnpm_[A-Za-z0-9]{20,}\b/u},{label:"private key",pattern:/-----BEGIN (?:RSA |EC |OPENSSH )?PRIVATE KEY-----/u}];function n(e){return typeof e=="string"&&e.trim().length>0}function m(e,i){if(typeof i!="object"||i===null||Array.isArray(i))return[{boundary_id:e.id,kind:"invalid_fixture",detail:`${e.fixture_path} must contain a JSON object.`}];let t=i,r=[];t.boundary_id!==e.id&&r.push({boundary_id:e.id,kind:"fixture_boundary_mismatch",detail:`${e.fixture_path} names ${String(t.boundary_id)} instead of ${e.id}.`}),(t.version!==1||!v.includes(t.capture_source)||!n(t.capture_provenance)||!Array.isArray(t.redactions)||!t.redactions.every(n)||!("input"in t)||!("observed"in t))&&r.push({boundary_id:e.id,kind:"invalid_fixture",detail:`${e.fixture_path} lacks captured provenance, redaction metadata, input, or observed output.`});let o=JSON.stringify(i);for(let s of x)s.pattern.test(o)&&r.push({boundary_id:e.id,kind:"unsafe_fixture",detail:`${e.fixture_path} contains a possible ${s.label}.`});return r}function b(e,i){let t=Date.parse(e.waiver_expires_at),r=n(e.waiver_reason)&&n(e.waiver_owner)&&e.waiver_expires_at.endsWith("Z")&&c(e.waiver_expires_at)&&Number.isFinite(t);return{captured:0,waived:r&&t>=i?1:0,findings:r?t<i?[{boundary_id:e.id,kind:"expired_waiver",detail:`Boundary ${e.id} waiver expired at ${e.waiver_expires_at}.`}]:[]:[{boundary_id:e.id,kind:"invalid_waiver",detail:`Boundary ${e.id} waiver requires reason, owner, and an RFC 3339 UTC expiry.`}]}}function y(e,i,t){if(!n(e.id)||!n(e.producer)||!n(e.consumer)||!n(e.format))return{captured:0,waived:0,findings:[{boundary_id:n(e.id)?e.id:"unknown",kind:"invalid_boundary",detail:"Each boundary requires non-empty id, producer, consumer, and format."}]};if("fixture_path"in e){let r=i[e.fixture_path],o=n(e.fixture_path)&&e.fixture_path in i?m(e,r):[{boundary_id:e.id,kind:"missing_fixture",detail:`Boundary ${e.id} fixture ${String(e.fixture_path)} is missing.`}];return{captured:o.length===0?1:0,waived:0,findings:o}}return b(e,t)}function Ye(e,i,t=new Date){let r=[];if(e.version!==1||!n(e.inventory_scope)||!Array.isArray(e.boundaries))return{ok:!1,boundary_count:0,captured_count:0,waived_count:0,findings:[{boundary_id:"registry",kind:"invalid_registry",detail:"Boundary registry requires version 1, inventory_scope, and boundaries."}]};let o=new Set,s=0,p=0;for(let d of e.boundaries){if(typeof d!="object"||d===null||Array.isArray(d)){r.push({boundary_id:"unknown",kind:"invalid_boundary",detail:"Each boundary must be a JSON object."});continue}let a=d,u=n(a.id)?a.id:void 0;if(u!==void 0&&o.has(u)){r.push({boundary_id:u,kind:"duplicate_boundary",detail:`Boundary ${u} is inventoried more than once.`});continue}u!==void 0&&o.add(u);let f=y(a,i,t.getTime());s+=f.captured,p+=f.waived,r.push(...f.findings)}return r.sort((d,a)=>d.boundary_id!==a.boundary_id?d.boundary_id.localeCompare(a.boundary_id):d.kind.localeCompare(a.kind)),{ok:r.length===0,boundary_count:e.boundaries.length,captured_count:s,waived_count:p,findings:r}}(function(){try{var e=typeof window<"u"?window:typeof global<"u"?global:typeof globalThis<"u"?globalThis:typeof self<"u"?self:{},i=new e.Error().stack;i&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[i]="c2063b82-58b6-54c9-baff-ca252cadf463")}catch{}})();export{Pe as ASSURANCE_ACTIONS,je as ASSURANCE_DECLARATION_KINDS,F as ASSURANCE_DOCUMENT_VERSION,q as ASSURANCE_GATE_TRIGGERS,z as ASSURANCE_MEASUREMENT_SOURCE_KINDS,ne as ASSURANCE_PRESET_IDS,O as AssuranceEvaluationRefusalError,N as AssuranceMutationRefusalError,U as AssuranceSourceResolutionError,v as BOUNDARY_FIXTURE_CAPTURE_SOURCES,$e as DEFECT_ESCAPE_CLASSES,Be as DEFECT_GATE_EVIDENCE_DISPOSITIONS,pe as HISTORY_AUTHOR_ATTRIBUTION_BASELINE,h as PM_MUTATION_ACTION_CONTRACTS,Ae as _testOnlyHealthCommand,Je as _testOnlySimilarity,Se as _testOnlyValidateCommand,ue as acceptAssuranceProposals,ye as acknowledgeUnknownAuthorHistoryEvents,be as acknowledgeUnknownAuthorHistoryEventsFromTransport,De as analyzeDefectChangeRisk,oe as applyAssurancePreset,J as assuranceAssertionUpdateIsLoosening,Ce as buildDefectRecurrenceIndex,ce as classifyHistoryAuthorEvent,de as createAssurancePreset,Ie as createAssuranceWorkspaceContext,V as createEmptyAssuranceDocument,ae as deriveAssuranceProposals,K as evaluateAssuranceAssertion,X as evaluateAssuranceGate,Ye as evaluateBoundaryFixtures,Ne as evaluateDefectGateEvidence,Y as evaluateMeasurement,g as evaluateMutationGuard,Ge as evaluateSimilarityGovernance,Ze as findDuplicateClusters,We as findSimilarItems,Q as getAssuranceDeclaration,E as getMutationActionContract,_e as inspectHistoryAuthorStream,C as inspectStaleInProgressItems,k as isMutationAction,R as jaccardSimilarity,L as listAssuranceDeclarations,re as listAssuranceVerdicts,we as listInvalidProvenanceHistoryStreamIds,A as listMutationActions,j as normalizeAssuranceEvaluation,P as normalizeAssuranceMutation,he as normalizeInvalidHistoryProvenance,S as normalizeSimilarityText,Ue as parseDefectChangeRiskRequest,Oe as parseDefectRecurrencePolicy,me as parseUnknownAuthorHistoryEventCoordinates,ve as planUnknownAuthorHistoryAcknowledgment,I as prepareSimilarityText,Re as projectValidateCounts,se as promoteAssuranceAssertion,M as putAssuranceDeclaration,ee as putAssuranceDeclarationBundle,te as recordAssuranceVerdict,ie as removeAssuranceDeclaration,xe as resolveUnknownAuthorAcknowledgmentSelector,Fe as runAssuranceAction,qe as runAssuranceDispatch,He as runGc,ke as runHealth,l as runReindex,_ as runUpgrade,Te as runValidate,fe as scanExtensionHostVersions,le as scanHistoryAuthorAttribution,w as scanMutationSecrets,ge as scanProvenanceResolverHealth,D as scanStaleInProgressItems,Ee as scanStorageIntegrity,$ as scoreItemSimilarity,B as scorePreparedItemSimilarity,ze as similarityAdvisoryWarnings,T as tokenizeSimilarityText,Z as validateAssertionDefinition,H as validateAssuranceDocument,G as validateGateDefinition,W as validateMeasurementDefinition};
+import{A as ne,Ab as $e,B as de,Bb as Be,C as oe,Cb as Ce,D as ae,Db as De,E as ue,Eb as Ne,F as se,Fb as Oe,G as fe,Ga as he,Gb as Ue,Ha as we,Hb as Pe,Ia as ge,Ib as je,Jb as Fe,Kb as qe,Lb as _,Mb as He,Nb as l,Sa as ke,Ta as Ae,Ua as Ee,aa as pe,ba as ce,c as N,ca as _e,d as O,da as le,e as U,ea as ve,f as P,fa as xe,g as j,ga as me,h as F,ha as be,i as q,ia as ye,j as z,k as J,l as W,m as Z,n as G,o as H,p as V,q as Y,r as K,s as X,t as L,u as Q,v as M,w as ee,wb as Re,x as ie,xb as Se,y as te,yb as Te,z as re,zb as Ie}from"./focused-chunks/chunk-4ZDRZYYJ.js";import"./focused-chunks/chunk-Y3JJXRVK.js";import"./focused-chunks/chunk-THEPQMLX.js";import"./focused-chunks/chunk-LYFWQMVC.js";import"./focused-chunks/chunk-FC2AXLB5.js";import{Aa as k,Ba as A,Ca as E,Ea as R,Fa as S,Ga as T,Ha as I,Ia as $,Ja as B,Ka as C,La as D,Va as ze,Wa as Je,Xa as We,Ya as Ze,Za as Ge,xa as h,ya as w,za as g}from"./focused-chunks/chunk-YVVZ3LQ6.js";import"./focused-chunks/chunk-HVQ22RC4.js";import"./focused-chunks/chunk-LLNTHF5X.js";import{$ as c}from"./focused-chunks/chunk-XDPYBQCF.js";import"./focused-chunks/chunk-AD6ULRAF.js";import"./focused-chunks/chunk-6GCRSLPG.js";import"./focused-chunks/chunk-Z2USIBR2.js";(function(){try{var e=typeof window<"u"?window:typeof global<"u"?global:typeof globalThis<"u"?globalThis:typeof self<"u"?self:{},i=new e.Error().stack;i&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[i]="3edb1f4f-d26e-51a8-b62a-caffdd3ac44b")}catch{}})();var v=["captured_redacted","captured_verbatim"],x=[{label:"home directory",pattern:/(?:\/home\/|\/Users\/)[^/\s"']+/u},{label:"GitHub token",pattern:/\b(?:gh[oprsu]_[A-Za-z0-9_]{20,})\b/u},{label:"npm token",pattern:/\bnpm_[A-Za-z0-9]{20,}\b/u},{label:"private key",pattern:/-----BEGIN (?:RSA |EC |OPENSSH )?PRIVATE KEY-----/u}];function n(e){return typeof e=="string"&&e.trim().length>0}function m(e,i){if(typeof i!="object"||i===null||Array.isArray(i))return[{boundary_id:e.id,kind:"invalid_fixture",detail:`${e.fixture_path} must contain a JSON object.`}];let t=i,r=[];t.boundary_id!==e.id&&r.push({boundary_id:e.id,kind:"fixture_boundary_mismatch",detail:`${e.fixture_path} names ${String(t.boundary_id)} instead of ${e.id}.`}),(t.version!==1||!v.includes(t.capture_source)||!n(t.capture_provenance)||!Array.isArray(t.redactions)||!t.redactions.every(n)||!("input"in t)||!("observed"in t))&&r.push({boundary_id:e.id,kind:"invalid_fixture",detail:`${e.fixture_path} lacks captured provenance, redaction metadata, input, or observed output.`});let o=JSON.stringify(i);for(let s of x)s.pattern.test(o)&&r.push({boundary_id:e.id,kind:"unsafe_fixture",detail:`${e.fixture_path} contains a possible ${s.label}.`});return r}function b(e,i){let t=Date.parse(e.waiver_expires_at),r=n(e.waiver_reason)&&n(e.waiver_owner)&&e.waiver_expires_at.endsWith("Z")&&c(e.waiver_expires_at)&&Number.isFinite(t);return{captured:0,waived:r&&t>=i?1:0,findings:r?t<i?[{boundary_id:e.id,kind:"expired_waiver",detail:`Boundary ${e.id} waiver expired at ${e.waiver_expires_at}.`}]:[]:[{boundary_id:e.id,kind:"invalid_waiver",detail:`Boundary ${e.id} waiver requires reason, owner, and an RFC 3339 UTC expiry.`}]}}function y(e,i,t){if(!n(e.id)||!n(e.producer)||!n(e.consumer)||!n(e.format))return{captured:0,waived:0,findings:[{boundary_id:n(e.id)?e.id:"unknown",kind:"invalid_boundary",detail:"Each boundary requires non-empty id, producer, consumer, and format."}]};if("fixture_path"in e){let r=i[e.fixture_path],o=n(e.fixture_path)&&e.fixture_path in i?m(e,r):[{boundary_id:e.id,kind:"missing_fixture",detail:`Boundary ${e.id} fixture ${String(e.fixture_path)} is missing.`}];return{captured:o.length===0?1:0,waived:0,findings:o}}return b(e,t)}function Ye(e,i,t=new Date){let r=[];if(e.version!==1||!n(e.inventory_scope)||!Array.isArray(e.boundaries))return{ok:!1,boundary_count:0,captured_count:0,waived_count:0,findings:[{boundary_id:"registry",kind:"invalid_registry",detail:"Boundary registry requires version 1, inventory_scope, and boundaries."}]};let o=new Set,s=0,p=0;for(let d of e.boundaries){if(typeof d!="object"||d===null||Array.isArray(d)){r.push({boundary_id:"unknown",kind:"invalid_boundary",detail:"Each boundary must be a JSON object."});continue}let a=d,u=n(a.id)?a.id:void 0;if(u!==void 0&&o.has(u)){r.push({boundary_id:u,kind:"duplicate_boundary",detail:`Boundary ${u} is inventoried more than once.`});continue}u!==void 0&&o.add(u);let f=y(a,i,t.getTime());s+=f.captured,p+=f.waived,r.push(...f.findings)}return r.sort((d,a)=>d.boundary_id!==a.boundary_id?d.boundary_id.localeCompare(a.boundary_id):d.kind.localeCompare(a.kind)),{ok:r.length===0,boundary_count:e.boundaries.length,captured_count:s,waived_count:p,findings:r}}(function(){try{var e=typeof window<"u"?window:typeof global<"u"?global:typeof globalThis<"u"?globalThis:typeof self<"u"?self:{},i=new e.Error().stack;i&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[i]="c2063b82-58b6-54c9-baff-ca252cadf463")}catch{}})();export{Pe as ASSURANCE_ACTIONS,je as ASSURANCE_DECLARATION_KINDS,F as ASSURANCE_DOCUMENT_VERSION,q as ASSURANCE_GATE_TRIGGERS,z as ASSURANCE_MEASUREMENT_SOURCE_KINDS,ne as ASSURANCE_PRESET_IDS,O as AssuranceEvaluationRefusalError,N as AssuranceMutationRefusalError,U as AssuranceSourceResolutionError,v as BOUNDARY_FIXTURE_CAPTURE_SOURCES,$e as DEFECT_ESCAPE_CLASSES,Be as DEFECT_GATE_EVIDENCE_DISPOSITIONS,pe as HISTORY_AUTHOR_ATTRIBUTION_BASELINE,h as PM_MUTATION_ACTION_CONTRACTS,Ae as _testOnlyHealthCommand,Je as _testOnlySimilarity,Se as _testOnlyValidateCommand,ue as acceptAssuranceProposals,ye as acknowledgeUnknownAuthorHistoryEvents,be as acknowledgeUnknownAuthorHistoryEventsFromTransport,De as analyzeDefectChangeRisk,oe as applyAssurancePreset,J as assuranceAssertionUpdateIsLoosening,Ce as buildDefectRecurrenceIndex,ce as classifyHistoryAuthorEvent,de as createAssurancePreset,Ie as createAssuranceWorkspaceContext,V as createEmptyAssuranceDocument,ae as deriveAssuranceProposals,K as evaluateAssuranceAssertion,X as evaluateAssuranceGate,Ye as evaluateBoundaryFixtures,Ne as evaluateDefectGateEvidence,Y as evaluateMeasurement,g as evaluateMutationGuard,Ge as evaluateSimilarityGovernance,Ze as findDuplicateClusters,We as findSimilarItems,Q as getAssuranceDeclaration,E as getMutationActionContract,_e as inspectHistoryAuthorStream,C as inspectStaleInProgressItems,k as isMutationAction,R as jaccardSimilarity,L as listAssuranceDeclarations,re as listAssuranceVerdicts,we as listInvalidProvenanceHistoryStreamIds,A as listMutationActions,j as normalizeAssuranceEvaluation,P as normalizeAssuranceMutation,he as normalizeInvalidHistoryProvenance,S as normalizeSimilarityText,Ue as parseDefectChangeRiskRequest,Oe as parseDefectRecurrencePolicy,me as parseUnknownAuthorHistoryEventCoordinates,ve as planUnknownAuthorHistoryAcknowledgment,I as prepareSimilarityText,Re as projectValidateCounts,se as promoteAssuranceAssertion,M as putAssuranceDeclaration,ee as putAssuranceDeclarationBundle,te as recordAssuranceVerdict,ie as removeAssuranceDeclaration,xe as resolveUnknownAuthorAcknowledgmentSelector,Fe as runAssuranceAction,qe as runAssuranceDispatch,He as runGc,ke as runHealth,l as runReindex,_ as runUpgrade,Te as runValidate,fe as scanExtensionHostVersions,le as scanHistoryAuthorAttribution,w as scanMutationSecrets,ge as scanProvenanceResolverHealth,D as scanStaleInProgressItems,Ee as scanStorageIntegrity,$ as scoreItemSimilarity,B as scorePreparedItemSimilarity,ze as similarityAdvisoryWarnings,T as tokenizeSimilarityText,Z as validateAssertionDefinition,H as validateAssuranceDocument,G as validateGateDefinition,W as validateMeasurementDefinition};
 //# sourceMappingURL=sdk-governance.js.map