@unbrained/pm-cli 2026.8.28 → 2026.8.30

package/dist/sdk/generated/generated-error-code-catalog-part-1.js

@@ -1,6 +1,6 @@
 /** Generated partition 1 of the exhaustive error-code catalog. */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="95253070-db43-5ddd-8468-7d001bc6657b")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="0823f083-1719-5ec2-9f7e-43bd86a2a3a2")}catch(e){}}();
 export const PM_ERROR_CODE_CATALOG_PART_1 = [
     {
         code: "acceptance_criteria_mutation_conflict",
@@ -182,6 +182,18 @@ export const PM_ERROR_CODE_CATALOG_PART_1 = [
         canonical_code: "assurance_registry_invalid",
         aliases: [],
     },
+    {
+        code: "bare_comma_entry_ambiguous",
+        meaning: "Bare comma entry ambiguous condition.",
+        stability: "provisional",
+        exit_code: 2,
+        class: "usage",
+        recovery: "Inspect the structured error guidance and retry the suggested command.",
+        sources: ["core/item/parse.ts"],
+        emitting_commands: ["*"],
+        canonical_code: "bare_comma_entry_ambiguous",
+        aliases: [],
+    },
     {
         code: "body_file_conflicts_with_body",
         meaning: "Body file conflicts with body condition.",
@@ -1211,6 +1223,18 @@ export const PM_ERROR_CODE_CATALOG_PART_1 = [
         canonical_code: "history_drift_unreadable_stream",
         aliases: ["validate_history_drift_unreadable_streams"],
     },
+    {
+        code: "history_drift_version_skew",
+        meaning: "History drift version skew condition.",
+        stability: "stable",
+        exit_code: 1,
+        class: "generic_failure",
+        recovery: "Inspect the structured error guidance and retry the suggested command.",
+        sources: ["core/diagnostics/remediation.ts"],
+        emitting_commands: ["*"],
+        canonical_code: "history_drift_version_skew",
+        aliases: ["validate_history_drift_version_skews"],
+    },
     {
         code: "history_merge_conflict_markers_detected",
         meaning: "History merge conflict markers detected condition.",
@@ -2064,18 +2088,6 @@ export const PM_ERROR_CODE_CATALOG_PART_1 = [
         canonical_code: "merge_receipts_pending",
         aliases: [],
     },
-    {
-        code: "merge_reconcile_discards_require_acceptance",
-        meaning: "Merge reconcile discards require acceptance condition.",
-        stability: "provisional",
-        exit_code: 4,
-        class: "conflict",
-        recovery: "Inspect the structured error guidance and retry the suggested command.",
-        sources: ["sdk/merge/reconcile.ts"],
-        emitting_commands: ["*"],
-        canonical_code: "merge_reconcile_discards_require_acceptance",
-        aliases: [],
-    },
     {
         code: "merge_reconcile_receipt_evidence_untrusted",
         meaning: "Merge reconcile receipt evidence untrusted condition.",
@@ -2112,6 +2124,30 @@ export const PM_ERROR_CODE_CATALOG_PART_1 = [
         canonical_code: "missing_allowed_values",
         aliases: [],
     },
+    {
+        code: "missing_budget",
+        meaning: "Missing budget condition.",
+        stability: "provisional",
+        exit_code: 1,
+        class: "generic_failure",
+        recovery: "Inspect the structured error guidance and retry the suggested command.",
+        sources: ["sdk/cli-contracts/flag-lexicon-contracts.ts"],
+        emitting_commands: ["*"],
+        canonical_code: "missing_budget",
+        aliases: [],
+    },
+    {
+        code: "missing_cli_flag",
+        meaning: "Missing cli flag condition.",
+        stability: "provisional",
+        exit_code: 1,
+        class: "generic_failure",
+        recovery: "Inspect the structured error guidance and retry the suggested command.",
+        sources: ["sdk/cli-contracts/tool-option-contracts.ts"],
+        emitting_commands: ["*"],
+        canonical_code: "missing_cli_flag",
+        aliases: [],
+    },
 ];
 //# sourceMappingURL=generated-error-code-catalog-part-1.js.map
-//# debugId=95253070-db43-5ddd-8468-7d001bc6657b
+//# debugId=0823f083-1719-5ec2-9f7e-43bd86a2a3a2

package/dist/sdk/generated/generated-error-code-catalog-part-2.js

@@ -1,31 +1,7 @@
 /** Generated partition 2 of the exhaustive error-code catalog. */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="5d5ca5e6-4286-59d6-a669-29fbce3fa19f")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="015f826a-6490-56d1-8e26-131e5503d8f1")}catch(e){}}();
 export const PM_ERROR_CODE_CATALOG_PART_2 = [
-    {
-        code: "missing_budget",
-        meaning: "Missing budget condition.",
-        stability: "provisional",
-        exit_code: 1,
-        class: "generic_failure",
-        recovery: "Inspect the structured error guidance and retry the suggested command.",
-        sources: ["sdk/cli-contracts/flag-lexicon-contracts.ts"],
-        emitting_commands: ["*"],
-        canonical_code: "missing_budget",
-        aliases: [],
-    },
-    {
-        code: "missing_cli_flag",
-        meaning: "Missing cli flag condition.",
-        stability: "provisional",
-        exit_code: 1,
-        class: "generic_failure",
-        recovery: "Inspect the structured error guidance and retry the suggested command.",
-        sources: ["sdk/cli-contracts/tool-option-contracts.ts"],
-        emitting_commands: ["*"],
-        canonical_code: "missing_cli_flag",
-        aliases: [],
-    },
     {
         code: "missing_destination",
         meaning: "Missing destination condition.",
@@ -110,6 +86,18 @@ export const PM_ERROR_CODE_CATALOG_PART_2 = [
         canonical_code: "missing_parameter_alias",
         aliases: [],
     },
+    {
+        code: "missing_positive_execution_receipt",
+        meaning: "Missing positive execution receipt condition.",
+        stability: "provisional",
+        exit_code: 1,
+        class: "generic_failure",
+        recovery: "Inspect the structured error guidance and retry the suggested command.",
+        sources: ["sdk/test/execution.ts"],
+        emitting_commands: ["*"],
+        canonical_code: "missing_positive_execution_receipt",
+        aliases: [],
+    },
     {
         code: "missing_probe",
         meaning: "Missing probe condition.",
@@ -319,6 +307,18 @@ export const PM_ERROR_CODE_CATALOG_PART_2 = [
         canonical_code: "non_refusal_exit",
         aliases: [],
     },
+    {
+        code: "npm_pack_json_shape_unsupported",
+        meaning: "Npm pack json shape unsupported condition.",
+        stability: "provisional",
+        exit_code: 1,
+        class: "generic_failure",
+        recovery: "Inspect the structured error guidance and retry the suggested command.",
+        sources: ["sdk/extension/install-sources.ts"],
+        emitting_commands: ["*"],
+        canonical_code: "npm_pack_json_shape_unsupported",
+        aliases: [],
+    },
     {
         code: "npm_package_archive_missing",
         meaning: "Npm package archive missing condition.",
@@ -739,6 +739,30 @@ export const PM_ERROR_CODE_CATALOG_PART_2 = [
         canonical_code: "reopen_target_status_invalid",
         aliases: [],
     },
+    {
+        code: "reported_zero_passes",
+        meaning: "Reported zero passes condition.",
+        stability: "provisional",
+        exit_code: 1,
+        class: "generic_failure",
+        recovery: "Inspect the structured error guidance and retry the suggested command.",
+        sources: ["sdk/test/execution.ts"],
+        emitting_commands: ["*"],
+        canonical_code: "reported_zero_passes",
+        aliases: [],
+    },
+    {
+        code: "reported_zero_tests",
+        meaning: "Reported zero tests condition.",
+        stability: "provisional",
+        exit_code: 1,
+        class: "generic_failure",
+        recovery: "Inspect the structured error guidance and retry the suggested command.",
+        sources: ["sdk/test/execution.ts"],
+        emitting_commands: ["*"],
+        canonical_code: "reported_zero_tests",
+        aliases: [],
+    },
     {
         code: "reserved_item_field",
         meaning: "Reserved item field condition.",
@@ -1584,6 +1608,18 @@ export const PM_ERROR_CODE_CATALOG_PART_2 = [
         canonical_code: "history_drift_unreadable_stream",
         aliases: [],
     },
+    {
+        code: "validate_history_drift_version_skews",
+        meaning: "Validate history drift version skews condition.",
+        stability: "stable",
+        exit_code: 1,
+        class: "generic_failure",
+        recovery: "Inspect the structured error guidance and retry the suggested command.",
+        sources: ["core/diagnostics/remediation.ts"],
+        emitting_commands: ["*"],
+        canonical_code: "history_drift_version_skew",
+        aliases: [],
+    },
     {
         code: "validate_history_unknown_author_events",
         meaning: "Validate history unknown author events condition.",
@@ -2126,4 +2162,4 @@ export const PM_ERROR_CODE_CATALOG_PART_2 = [
     },
 ];
 //# sourceMappingURL=generated-error-code-catalog-part-2.js.map
-//# debugId=5d5ca5e6-4286-59d6-a669-29fbce3fa19f
+//# debugId=015f826a-6490-56d1-8e26-131e5503d8f1

package/dist/sdk/governance/health.js

@@ -4,7 +4,7 @@
  * Implements the pm health command surface and its agent-facing runtime behavior.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="652d1b49-f9d1-55a7-84b5-ff3cf57648ad")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="3c68e4be-fd09-560c-9654-f270e5d7ba73")}catch(e){}}();
 import fs from "node:fs/promises";
 import path from "node:path";
 import { assertInitializedTracker } from "../environment/tracker-preflight.js";
@@ -962,20 +962,36 @@ const HEALTH_DETAIL_SUMMARIZERS = {
             skipped: details.skipped,
         };
     },
-    history_drift: (details, limit) => ({
-        checked_items: details.checked_items,
-        counts: details.counts,
-        drifted_items: summarizeStringList(details.drifted_items, limit),
-        merge_receipt_attributed_items: summarizeStringList(details.merge_receipt_attributed_items, limit),
-        missing_streams: summarizeStringList(details.missing_streams, limit),
-        unreadable_streams: summarizeStringList(details.unreadable_streams, limit),
-        hash_mismatches: summarizeStringList(details.hash_mismatches, limit),
-        chain_mismatches: summarizeStringList(details.chain_mismatches, limit),
-        workspace_state_mismatches: summarizeStringList(details.workspace_state_mismatches, limit),
-        workspace_state_missing: summarizeStringList(details.workspace_state_missing, limit),
-        workspace_state_unreadable: summarizeStringList(details.workspace_state_unreadable, limit),
-        skipped: details.skipped,
-    }),
+    history_drift: (details, limit) => {
+        const cacheConfirmation = typeof details.cache_confirmation === "object" &&
+            details.cache_confirmation !== null
+            ? details.cache_confirmation
+            : undefined;
+        return {
+            checked_items: details.checked_items,
+            cache_hit_verification: details.cache_hit_verification,
+            cache_confirmation: cacheConfirmation === undefined
+                ? details.cache_confirmation
+                : {
+                    ...cacheConfirmation,
+                    candidate_items: summarizeStringList(cacheConfirmation.candidate_items, limit),
+                    confirmed_items: summarizeStringList(cacheConfirmation.confirmed_items, limit),
+                    resolved_false_positive_items: summarizeStringList(cacheConfirmation.resolved_false_positive_items, limit),
+                },
+            counts: details.counts,
+            drifted_items: summarizeStringList(details.drifted_items, limit),
+            merge_receipt_attributed_items: summarizeStringList(details.merge_receipt_attributed_items, limit),
+            missing_streams: summarizeStringList(details.missing_streams, limit),
+            unreadable_streams: summarizeStringList(details.unreadable_streams, limit),
+            hash_mismatches: summarizeStringList(details.hash_mismatches, limit),
+            chain_mismatches: summarizeStringList(details.chain_mismatches, limit),
+            version_skews: summarizeStringList(details.version_skews, limit),
+            workspace_state_mismatches: summarizeStringList(details.workspace_state_mismatches, limit),
+            workspace_state_missing: summarizeStringList(details.workspace_state_missing, limit),
+            workspace_state_unreadable: summarizeStringList(details.workspace_state_unreadable, limit),
+            skipped: details.skipped,
+        };
+    },
     vectorization: (details, limit) => ({
         semantic_runtime_available: details.semantic_runtime_available,
         compatibility_mode_auto_defaults: details.compatibility_mode_auto_defaults,
@@ -1412,14 +1428,41 @@ async function buildLocksCheck(pmRoot) {
         warnings,
     };
 }
-async function buildHistoryDriftCheck(pmRoot, items) {
+async function buildHistoryDriftCheck(params) {
     const cacheHitVerification = "metadata";
-    const { missingStreams, unreadableStreams, hashMismatches, chainMismatches, driftedItems, workspaceStateMismatches, workspaceStateMissing, workspaceStateUnreadable, } = await scanHistoryDrift(pmRoot, items, { cacheHitVerification });
+    let items = params.items;
+    let drift = await scanHistoryDrift(params.pmRoot, items, {
+        cacheHitVerification,
+    });
+    const cacheConfirmationCandidates = [
+        ...new Set([
+            ...drift.hashMismatches,
+            ...drift.chainMismatches,
+            ...drift.versionSkews,
+        ]),
+    ].sort((left, right) => left.localeCompare(right));
+    let confirmedItems = [];
+    let resolvedFalsePositiveItems = [];
+    if (cacheConfirmationCandidates.length > 0) {
+        items = await listAllItemMetadataWithBody(params.pmRoot, params.settings.item_format, params.typeRegistry.type_to_folder, params.itemReadWarnings, params.settings.schema, { forceSourceScan: true });
+        drift = await scanHistoryDrift(params.pmRoot, items);
+        confirmedItems = [
+            ...new Set([
+                ...drift.hashMismatches,
+                ...drift.chainMismatches,
+                ...drift.versionSkews,
+            ]),
+        ].sort((left, right) => left.localeCompare(right));
+        const confirmedSet = new Set(confirmedItems);
+        resolvedFalsePositiveItems = cacheConfirmationCandidates.filter((id) => !confirmedSet.has(id));
+    }
+    const { missingStreams, unreadableStreams, hashMismatches, chainMismatches, versionSkews, driftedItems, workspaceStateMismatches, workspaceStateMissing, workspaceStateUnreadable, } = drift;
     const warnings = [
         ...missingStreams.map((id) => `history_drift_missing_stream:${id}`),
         ...unreadableStreams.map((id) => `history_drift_unreadable_stream:${id}`),
         ...hashMismatches.map((id) => `history_drift_hash_mismatch:${id}`),
         ...chainMismatches.map((id) => `history_drift_chain_mismatch:${id}`),
+        ...versionSkews.map((id) => `history_drift_version_skew:${id}`),
         ...workspaceStateMismatches.map((documentPath) => `history_drift_workspace_state_mismatch:${documentPath}`),
         ...workspaceStateMissing.map((documentPath) => `history_drift_workspace_state_missing:${documentPath}`),
         ...workspaceStateUnreadable.map((documentPath) => `history_drift_workspace_state_unreadable:${documentPath}`),
@@ -1431,7 +1474,19 @@ async function buildHistoryDriftCheck(pmRoot, items) {
             ok: warnings.length === 0,
             details: {
                 checked_items: items.length,
-                cache_hit_verification: cacheHitVerification,
+                cache_hit_verification: cacheConfirmationCandidates.length > 0
+                    ? "metadata_then_content_hash"
+                    : cacheHitVerification,
+                cache_confirmation: {
+                    triggered: cacheConfirmationCandidates.length > 0,
+                    reason: cacheConfirmationCandidates.length > 0
+                        ? "cached_corruption_candidate"
+                        : null,
+                    candidate_items: cacheConfirmationCandidates,
+                    confirmed_items: confirmedItems,
+                    resolved_false_positive_items: resolvedFalsePositiveItems,
+                    authoritative_item_source: cacheConfirmationCandidates.length > 0,
+                },
                 drifted_items: driftedItems,
                 counts: {
                     drifted: driftedItems.length,
@@ -1439,6 +1494,7 @@ async function buildHistoryDriftCheck(pmRoot, items) {
                     unreadable_streams: unreadableStreams.length,
                     hash_mismatches: hashMismatches.length,
                     chain_mismatches: chainMismatches.length,
+                    version_skews: versionSkews.length,
                     workspace_state_mismatches: workspaceStateMismatches.length,
                     workspace_state_missing: workspaceStateMissing.length,
                     workspace_state_unreadable: workspaceStateUnreadable.length,
@@ -1447,6 +1503,7 @@ async function buildHistoryDriftCheck(pmRoot, items) {
                 unreadable_streams: unreadableStreams,
                 hash_mismatches: hashMismatches,
                 chain_mismatches: chainMismatches,
+                version_skews: versionSkews,
                 workspace_state_mismatches: workspaceStateMismatches,
                 workspace_state_missing: workspaceStateMissing,
                 workspace_state_unreadable: workspaceStateUnreadable,
@@ -1940,7 +1997,8 @@ function buildHealthFindings(params) {
 function rewriteBulkHealthRemediation(params) {
     if (params.check.name === "history_drift" && params.historyDriftedCount > 1) {
         for (const code of Object.keys(params.remediationMap)) {
-            if (code !== "history_drift_merge_receipt") {
+            if (code !== "history_drift_merge_receipt" &&
+                code !== "history_drift_version_skew") {
                 params.remediationMap[code] = "pm history-repair --all";
             }
         }
@@ -2086,7 +2144,6 @@ export async function runHealth(global, options = {}) {
         itemReadWarnings,
     });
     const itemsWithBody = items;
-    const normalizedItemReadWarnings = [...new Set(itemReadWarnings)];
     const historyPolicy = skipPolicy.skipDrift
         ? { warnings: [] }
         : await enforceHistoryStreamPolicyForItems({
@@ -2119,7 +2176,14 @@ export async function runHealth(global, options = {}) {
         : await buildIntegrityCheck(pmRoot, typeRegistry.type_to_folder, settings.schema, options.requireMergeDrivers === true, items);
     const historyDriftCheck = skipPolicy.skipDrift
         ? buildSkippedHealthCheck("history_drift")
-        : await buildHistoryDriftCheck(pmRoot, itemsWithBody);
+        : await buildHistoryDriftCheck({
+            pmRoot,
+            items: itemsWithBody,
+            settings,
+            typeRegistry,
+            itemReadWarnings,
+        });
+    const normalizedItemReadWarnings = [...new Set(itemReadWarnings)];
     const mergeReceiptAttributedHistoryDriftItems = await correlateMergeReceiptHistoryDriftItems({
         gitWorkspaceRoot: integrityCheck.gitWorkspaceRoot,
         pendingMergeReceipts: integrityCheck.pendingMergeReceipts,
@@ -2234,4 +2298,4 @@ export const _testOnlyHealthCommand = {
     warningCode,
 };
 //# sourceMappingURL=health.js.map
-//# debugId=652d1b49-f9d1-55a7-84b5-ff3cf57648ad
+//# debugId=3c68e4be-fd09-560c-9654-f270e5d7ba73

package/dist/sdk/governance/validate-history-drift.js

@@ -6,7 +6,7 @@
  * orchestration module.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="a1261d65-222c-5c6c-8634-a4413a91aba9")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="8bec3c39-b871-5c7c-907c-6da66274d9be")}catch(e){}}();
 import { scanHistoryDrift } from "../../core/history/drift-scan.js";
 const DEFAULT_DIAGNOSTIC_LIMIT = 5;
 /** Build the validation warning and bounded evidence projection for history drift. */
@@ -17,6 +17,7 @@ export async function buildValidateHistoryDriftCheck(pmRoot, items, verboseDiagn
         ["validate_history_drift_unreadable_streams", drift.unreadableStreams.length],
         ["validate_history_drift_hash_mismatches", drift.hashMismatches.length],
         ["validate_history_drift_chain_mismatches", drift.chainMismatches.length],
+        ["validate_history_drift_version_skews", drift.versionSkews.length],
         [
             "validate_history_drift_workspace_state_mismatches",
             drift.workspaceStateMismatches.length,
@@ -52,6 +53,7 @@ export async function buildValidateHistoryDriftCheck(pmRoot, items, verboseDiagn
                     unreadable_streams: drift.unreadableStreams.length,
                     hash_mismatches: drift.hashMismatches.length,
                     chain_mismatches: drift.chainMismatches.length,
+                    version_skews: drift.versionSkews.length,
                     workspace_state_mismatches: drift.workspaceStateMismatches.length,
                     workspace_state_missing: drift.workspaceStateMissing.length,
                     workspace_state_unreadable: drift.workspaceStateUnreadable.length,
@@ -59,10 +61,11 @@ export async function buildValidateHistoryDriftCheck(pmRoot, items, verboseDiagn
                 workspace_state_mismatches: drift.workspaceStateMismatches,
                 workspace_state_missing: drift.workspaceStateMissing,
                 workspace_state_unreadable: drift.workspaceStateUnreadable,
+                version_skews: drift.versionSkews.slice(0, diagnosticLimit),
             },
         },
         warnings,
     };
 }
 //# sourceMappingURL=validate-history-drift.js.map
-//# debugId=a1261d65-222c-5c6c-8634-a4413a91aba9
+//# debugId=8bec3c39-b871-5c7c-907c-6da66274d9be

package/dist/sdk/graph/assembly.js

@@ -1,7 +1,7 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="9a6974b3-63d7-5dc7-8329-0f15f0dc83ec")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="e04a91fa-4625-50fd-9bfd-c712126baf0d")}catch(e){}}();
 import { RelationshipGraph, } from "../relationships.js";
-import { isExternalDependencySourceKind } from "../dependency-provenance.js";
+import { isExternalDependencyReference, isExternalDependencySourceKind, } from "../dependency-provenance.js";
 import { analyzeHierarchyIntegrity, } from "./hierarchy-integrity.js";
 import { resolveWorkspaceRelationshipKindRegistry } from "./workspace-relationship-kind-registry.js";
 export { resolveWorkspaceRelationshipKindRegistry } from "./workspace-relationship-kind-registry.js";
@@ -22,6 +22,25 @@ export function normalizeDependencyGraphTarget(target) {
         ? undefined
         : normalized;
 }
+/** Return whether edge provenance assigns a normalized target to the external graph namespace. */
+function isExternalGraphReference(target, sourceKind, externalAllowed = true) {
+    const normalized = normalizeDependencyReferenceTarget(target);
+    return (externalAllowed &&
+        (isExternalDependencySourceKind(sourceKind) ||
+            (normalized !== undefined && isExternalDependencyReference(normalized))));
+}
+/** Build a namespace-aware reference identity: local ids are case-folded while external locators retain case. */
+function dependencyReferenceIdentityKey(target, sourceKind) {
+    return isExternalGraphReference(target, sourceKind)
+        ? `external\u0000${target}`
+        : `local\u0000${target.toLowerCase()}`;
+}
+/** Resolve one normalized edge target through the namespace selected by its provenance. */
+function resolveGraphReferenceTarget(target, sourceKind, canonicalIds, externalGraphIds) {
+    return isExternalGraphReference(target, sourceKind)
+        ? externalGraphIds.get(target)
+        : canonicalIds.get(target.toLowerCase());
+}
 /** Compare text case-insensitively with an exact-spelling deterministic tie-breaker. */
 function compareCaseFoldedText(left, right) {
     const normalizedLeft = left.toLowerCase();
@@ -45,7 +64,7 @@ function countDependencyRowIdentities(item) {
         const kind = typeof legacyDependency.kind === "string"
             ? legacyDependency.kind
             : "related";
-        const key = `${kind}\u0000${target.toLowerCase()}`;
+        const key = `${kind}\u0000${dependencyReferenceIdentityKey(target, legacyDependency.source_kind)}`;
         const existing = occurrences.get(key);
         if (existing)
             existing.count += 1;
@@ -94,7 +113,9 @@ function decodeOrderingStorageContradiction(item, blocker, dependency, isTermina
     if (typeof dependency !== "object" || dependency === null)
         return undefined;
     const target = normalizeDependencyReferenceTarget(dependency.id);
-    if (!target || target.toLowerCase() !== blocker.toLowerCase())
+    if (!target ||
+        dependencyReferenceIdentityKey(target, dependency.source_kind) !==
+            dependencyReferenceIdentityKey(blocker))
         return undefined;
     const definition = registry.resolve(typeof dependency.kind === "string" ? dependency.kind : "related");
     if (definition?.ordering !== true ||
@@ -151,9 +172,11 @@ export function collectDanglingDependencyReferences(items, isTerminal = (status)
     const safeItems = items.filter((item) => typeof item?.id === "string" && item.id.trim().length > 0);
     const knownIds = new Set(safeItems.map((item) => item.id.trim().toLowerCase()));
     const rows = new Map();
-    const addReference = (item, target, kind, source) => {
+    const addReference = (item, target, kind, source, externalAllowed) => {
         const normalized = normalizeDependencyReferenceTarget(target);
-        if (!normalized || knownIds.has(normalized.toLowerCase())) {
+        if (!normalized ||
+            knownIds.has(normalized.toLowerCase()) ||
+            isExternalGraphReference(normalized, undefined, externalAllowed)) {
             return;
         }
         const row = {
@@ -168,8 +191,8 @@ export function collectDanglingDependencyReferences(items, isTerminal = (status)
         rows.set(`${row.holder_id}::${row.target_id}::${row.kind}::${row.source}`, row);
     };
     for (const item of safeItems) {
-        addReference(item, item.parent, "parent", "parent");
-        addReference(item, item.blocked_by, "blocked_by", "blocked_by");
+        addReference(item, item.parent, "parent", "parent", false);
+        addReference(item, item.blocked_by, "blocked_by", "blocked_by", true);
         for (const dependency of item.dependencies ?? []) {
             // Public SDK callers may supply legacy or JSON-decoded payloads that do
             // not yet satisfy the current structured dependency contract.
@@ -182,7 +205,7 @@ export function collectDanglingDependencyReferences(items, isTerminal = (status)
             }
             addReference(item, legacyDependency.id, typeof legacyDependency.kind === "string"
                 ? legacyDependency.kind
-                : "related", "dependency");
+                : "related", "dependency", true);
         }
     }
     const sorted = [...rows.values()].sort((left, right) => left.holder_id.localeCompare(right.holder_id) ||
@@ -213,15 +236,21 @@ export function collectMissingDependencyTargetIds(dangling) {
 export function collectExternalDependencyTargetIds(items) {
     const targets = new Map();
     for (const item of items) {
+        const scalarBlocker = normalizeDependencyGraphTarget(item.blocked_by);
+        if (scalarBlocker &&
+            isExternalGraphReference(scalarBlocker) &&
+            !targets.has(scalarBlocker)) {
+            targets.set(scalarBlocker, scalarBlocker);
+        }
         for (const dependency of item.dependencies ?? []) {
             if (typeof dependency !== "object" ||
                 dependency === null ||
-                !isExternalDependencySourceKind(dependency.source_kind)) {
+                !isExternalGraphReference(dependency.id, dependency.source_kind)) {
                 continue;
             }
-            const id = normalizeDependencyReferenceTarget(dependency.id);
-            if (id && !targets.has(id.toLowerCase())) {
-                targets.set(id.toLowerCase(), id);
+            const id = normalizeDependencyGraphTarget(dependency.id);
+            if (id && !targets.has(id)) {
+                targets.set(id, id);
             }
         }
     }
@@ -230,7 +259,7 @@ export function collectExternalDependencyTargetIds(items) {
 const hierarchyIntegrityByAssembly = new WeakMap();
 /** Read the hierarchy analysis paired with an assembly created by this module. */
 export function getWorkspaceHierarchyIntegrity(assembly) {
-    return assembly.hierarchyIntegrity ?? hierarchyIntegrityByAssembly.get(assembly);
+    return (assembly.hierarchyIntegrity ?? hierarchyIntegrityByAssembly.get(assembly));
 }
 /** Count raw dependency rows that use a registered compatibility alias instead of its canonical kind. */
 export function collectLegacyDependencyAliasCounts(items, registry = resolveWorkspaceRelationshipKindRegistry()) {
@@ -274,7 +303,7 @@ export function assembleWorkspaceRelationshipGraph(items, isTerminal, registry)
         while (usedGraphIds.has(graphId.toLowerCase())) {
             graphId = `external:${graphId}`;
         }
-        externalGraphIds.set(id.toLowerCase(), graphId);
+        externalGraphIds.set(id, graphId);
         usedGraphIds.add(graphId.toLowerCase());
     }
     const graphItems = safeItems.map((item) => {
@@ -287,9 +316,7 @@ export function assembleWorkspaceRelationshipGraph(items, isTerminal, registry)
             const target = normalizeDependencyGraphTarget(dependency.id);
             if (!target)
                 return [];
-            const targetId = isExternalDependencySourceKind(dependency.source_kind)
-                ? externalGraphIds.get(target.toLowerCase())
-                : canonicalIds.get(target.toLowerCase());
+            const targetId = resolveGraphReferenceTarget(target, dependency.source_kind, canonicalIds, externalGraphIds);
             return [
                 {
                     id: targetId,
@@ -301,7 +328,9 @@ export function assembleWorkspaceRelationshipGraph(items, isTerminal, registry)
             id: item.id.trim(),
             ...(parent ? { parent: canonicalIds.get(parent.toLowerCase()) } : {}),
             ...(blocker
-                ? { blocked_by: canonicalIds.get(blocker.toLowerCase()) }
+                ? {
+                    blocked_by: resolveGraphReferenceTarget(blocker, undefined, canonicalIds, externalGraphIds),
+                }
                 : {}),
             dependencies,
         };
@@ -312,7 +341,7 @@ export function assembleWorkspaceRelationshipGraph(items, isTerminal, registry)
             ...graphItems,
             ...missingIds.map((id) => ({ id })),
             ...externalIds.map((id) => ({
-                id: externalGraphIds.get(id.toLowerCase()),
+                id: externalGraphIds.get(id),
             })),
         ], relationshipRegistry),
         details: [
@@ -330,7 +359,7 @@ export function assembleWorkspaceRelationshipGraph(items, isTerminal, registry)
                 status: "missing",
             })),
             ...externalIds.map((id) => ({
-                id: externalGraphIds.get(id.toLowerCase()),
+                id: externalGraphIds.get(id),
                 title: `[external] ${id}`,
                 status: "external",
             })),
@@ -346,4 +375,4 @@ export function assembleWorkspaceRelationshipGraph(items, isTerminal, registry)
     return assembly;
 }
 //# sourceMappingURL=assembly.js.map
-//# debugId=9a6974b3-63d7-5dc7-8329-0f15f0dc83ec
+//# debugId=e04a91fa-4625-50fd-9bfd-c712126baf0d

package/dist/sdk/history-repair.d.ts

@@ -83,7 +83,7 @@ export interface MergeReceiptProofResult {
     /** Whether exact receipt identity, path, field, and value-hash evidence proves the snapshot. */
     trusted: boolean;
     /** Stable explanation for the trust decision. */
-    reason: "trusted_clone_local_driver_evidence" | "git_workspace_unavailable" | "item_path_unavailable" | "no_item_receipts" | "no_receipt_set_proves_snapshot";
+    reason: "trusted_merge_driver_hash_evidence" | "git_workspace_unavailable" | "item_path_unavailable" | "no_item_receipts" | "no_receipt_set_proves_snapshot";
     /** Exact receipt identities accepted as proof; empty when proof is refused. */
     receipt_ids: string[];
 }