@unbrained/pm-cli 2026.8.8 → 2026.8.9

package/dist/core/diagnostics/remediation.js

@@ -19,7 +19,7 @@
  */
 /** Registry of every non-extension `pm health` / `pm validate` warning code and its remediation. Extension findings keep their richer, contextual `details.triage.remediation` produced by the extension health triage and are intentionally excluded here (see pm-0hnu: "all non-extension checks"). */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="6a350683-275b-5d4d-ae02-45798b115f89")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="8daf3070-facb-5775-a813-fb695ac9e3ce")}catch(e){}}();
 export const REMEDIATION_REGISTRY = Object.freeze([
     // --- pm health: directories ---
     {
@@ -188,6 +188,16 @@ export const REMEDIATION_REGISTRY = Object.freeze([
         command: "git rm --cached -r -- <tracked-runtime-directories>",
         summary: "Clone-local tracker runtime artifacts are committed. Run the exact tracked_runtime_cache.remediation_command from the integrity check, commit the index-only removals, and keep the managed .gitignore fence.",
     },
+    {
+        code: "merge_decisions_unreviewed",
+        command: "pm merge reconcile --dry-run",
+        summary: "Review the pending merge receipts, re-apply any intended discarded values, then run pm merge reconcile; lossy receipts require explicit --force acceptance.",
+    },
+    {
+        code: "validate_merge_decisions_unreviewed",
+        command: "pm merge reconcile --dry-run",
+        summary: "Review the pending merge receipts before reconciliation; history-repair alone does not settle them, and lossy receipts require explicit --force acceptance.",
+    },
     // --- pm health: history_drift ---
     // `pm health` rewrites these commands to `pm history-repair --all` in the
     // per-check remediation_map when more than one stream is drifted.
@@ -459,4 +469,4 @@ export function buildRemediationCommands(warnings) {
     return Object.values(buildRemediationMap(warnings));
 }
 //# sourceMappingURL=remediation.js.map
-//# debugId=6a350683-275b-5d4d-ae02-45798b115f89
+//# debugId=8daf3070-facb-5775-a813-fb695ac9e3ce

package/dist/core/history/history.js

@@ -4,7 +4,7 @@
  * Implements append-only history and replay behavior for History.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="5228a53a-603c-5c9f-870b-8ea8e0c5d27a")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="ce2dace3-7c86-5edf-8bda-083a0b3e7f2b")}catch(e){}}();
 import jsonPatch from "fast-json-patch";
 import { ITEM_METADATA_KEY_ORDER } from "../shared/constants.js";
 import { runActiveServiceOverride } from "../extensions/index.js";
@@ -13,7 +13,7 @@ import { canonicalDocument } from "../item/item-format.js";
 import { toItemRecord } from "../item/item-record.js";
 import { orderObject, sha256Hex, stableStringify, } from "../shared/serialization.js";
 import { nowIso } from "../shared/time.js";
-import { resolveHistoryAgentIdentity, resolveHistoryAuthorSource, } from "../shared/author.js";
+import { diagnoseAgentIdentity, resolveHistoryAgentIdentity, resolveHistoryAuthorSource, } from "../shared/author.js";
 import { removeHistoryEventIndexForHistoryPath, updateHistoryEventIndexAfterAppend, } from "./event-index.js";
 import { invalidateHistoryDriftCacheForPath } from "./drift-cache.js";
 const EMPTY_LEGACY_HASH_DOCUMENT = {
@@ -128,6 +128,15 @@ export function createHistoryEntry(params) {
     const rawPatch = jsonPatch.compare(beforePatchCanonical, afterPatchCanonical);
     const patch = normalizeHistoryPatchOps(beforePatchCanonical, rawPatch);
     const agentIdentity = resolveHistoryAgentIdentity(params.author);
+    const provenanceOutcomes = agentIdentity.harness
+        ? Object.fromEntries(Object.entries(diagnoseAgentIdentity().provenance_outcomes).filter(([, outcome]) => outcome.status === "failed"))
+        : undefined;
+    const context = provenanceOutcomes === undefined || Object.keys(provenanceOutcomes).length === 0
+        ? params.context
+        : {
+            ...params.context,
+            agent_provenance_outcomes: provenanceOutcomes,
+        };
     return {
         ts: params.nowIso,
         author: params.author,
@@ -151,7 +160,7 @@ export function createHistoryEntry(params) {
         before_hash: sha256Hex(stableStringify(beforeHashCanonical)),
         after_hash: sha256Hex(stableStringify(afterHashCanonical)),
         message: params.message === undefined ? undefined : params.message,
-        ...(params.context === undefined ? {} : { context: params.context }),
+        ...(context === undefined ? {} : { context }),
     };
 }
 function isRecord(value) {
@@ -233,4 +242,4 @@ export const _testOnly = {
     isDefinedPointerPath,
 };
 //# sourceMappingURL=history.js.map
-//# debugId=5228a53a-603c-5c9f-870b-8ea8e0c5d27a
+//# debugId=ce2dace3-7c86-5edf-8bda-083a0b3e7f2b

package/dist/core/item/actionability.d.ts

@@ -1,7 +1,13 @@
 import type { RuntimeStatusRegistry } from "../schema/runtime-schema.js";
 import type { ItemMetadata, ItemStatus } from "../../types/index.js";
+/** Built-in ordering kinds that must remain reachable by blocker resolution. */
+export declare const ACTIONABILITY_ORDERING_KINDS: readonly string[];
 /** Collects the blocker item ids declared by an item: the legacy scalar `blocked_by` field plus every `blocked_by` dependency edge. Ids are trimmed, de-duplicated, and returned in stable lexicographic order. This is the single source of truth for "what must close before this item can proceed", shared by `pm next` readiness classification and the close-time auto-unblock sweep. */
 export declare function collectBlockedByIds(item: Pick<ItemMetadata, "blocked_by" | "dependencies">): string[];
+/** Build every forward and reverse blocker set in one corpus pass. */
+export declare function indexBlockedByIds(corpus: readonly ItemMetadata[]): Map<string, string[]>;
+/** Collect blockers from both an item's forward declarations and corpus-level reverse `blocks` edges. */
+export declare function collectBlockedByIdsFromCorpus(item: ItemMetadata, corpus: readonly ItemMetadata[]): string[];
 /** A blocker reference resolved against the corpus and annotated with its state. */
 export interface ResolvedBlocker {
     /** Stable identifier used to reference this record across commands and storage. */
@@ -13,7 +19,7 @@ export interface ResolvedBlocker {
     /** True when the blocker no longer gates work because the referenced item is terminal. */
     resolved: boolean;
 }
-/** Resolves an item's declared blockers against a corpus index, annotating each with the blocker's title/status and whether it still gates work. Unknown ids remain unresolved: silently treating a typo as satisfied would dispatch work whose prerequisite was never completed. Terminal referenced items alone are resolved. */
+/** Resolves an item's blockers against a corpus index with reverse `blocks` support. */
 export declare function resolveItemBlockers(item: Pick<ItemMetadata, "blocked_by" | "dependencies">, itemsById: Map<string, ItemMetadata>, statusRegistry: RuntimeStatusRegistry): ResolvedBlocker[];
 /**
  * Collects the normalized (trimmed, lowercased) ids of every corpus item that is

package/dist/core/item/actionability.js

@@ -10,10 +10,17 @@
  * `blocked_by` resolution a single source of truth.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="bf429f76-9722-5e34-a5f0-6ced8d1ed667")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="de8a82e1-0b02-5d5a-9086-686529a1ccab")}catch(e){}}();
 import { isTerminalStatus, normalizeStatusForRegistry } from "./status.js";
 /** Dependency kind that marks "this item is blocked by the referenced item". */
 const BLOCKED_BY_DEPENDENCY_KIND = "blocked_by";
+/** Reverse dependency kind that marks "this item blocks the referenced item". */
+const BLOCKS_DEPENDENCY_KIND = "blocks";
+/** Built-in ordering kinds that must remain reachable by blocker resolution. */
+export const ACTIONABILITY_ORDERING_KINDS = Object.freeze([
+    BLOCKED_BY_DEPENDENCY_KIND,
+    BLOCKS_DEPENDENCY_KIND,
+]);
 /** Retired placeholder that explicitly means an item has no active blocker. */
 const NO_ACTIVE_BLOCKER_SENTINEL = "no-active-blocker";
 /**
@@ -28,23 +35,66 @@ function normalizeItemId(id) {
 /** Collects the blocker item ids declared by an item: the legacy scalar `blocked_by` field plus every `blocked_by` dependency edge. Ids are trimmed, de-duplicated, and returned in stable lexicographic order. This is the single source of truth for "what must close before this item can proceed", shared by `pm next` readiness classification and the close-time auto-unblock sweep. */
 export function collectBlockedByIds(item) {
     const ids = new Set();
-    const scalar = typeof item.blocked_by === "string" ? item.blocked_by.trim() : "";
-    if (scalar.length > 0 && scalar.toLowerCase() !== NO_ACTIVE_BLOCKER_SENTINEL) {
+    const scalar = typeof item.blocked_by === "string" ? normalizeItemId(item.blocked_by) : "";
+    if (scalar.length > 0 && scalar !== NO_ACTIVE_BLOCKER_SENTINEL) {
         ids.add(scalar);
     }
     for (const dependency of item.dependencies ?? []) {
+        const dependencyId = typeof dependency.id === "string" ? normalizeItemId(dependency.id) : "";
         if (dependency.kind === BLOCKED_BY_DEPENDENCY_KIND &&
-            typeof dependency.id === "string" &&
-            dependency.id.trim().length > 0 &&
-            dependency.id.trim().toLowerCase() !== NO_ACTIVE_BLOCKER_SENTINEL) {
-            ids.add(dependency.id.trim());
+            dependencyId.length > 0 &&
+            dependencyId !== NO_ACTIVE_BLOCKER_SENTINEL) {
+            ids.add(dependencyId);
         }
     }
     return [...ids].sort((left, right) => left.localeCompare(right));
 }
+/** Build every forward and reverse blocker set in one corpus pass. */
+export function indexBlockedByIds(corpus) {
+    const idsByItem = new Map();
+    for (const item of corpus) {
+        const itemId = normalizeItemId(item.id);
+        if (itemId.length === 0)
+            continue;
+        idsByItem.set(itemId, new Set(collectBlockedByIds(item)));
+    }
+    for (const candidate of corpus) {
+        const candidateId = normalizeItemId(candidate.id);
+        if (candidateId.length === 0)
+            continue;
+        for (const dependency of candidate.dependencies ?? []) {
+            const targetId = dependency.kind === BLOCKS_DEPENDENCY_KIND &&
+                typeof dependency.id === "string"
+                ? normalizeItemId(dependency.id)
+                : "";
+            if (targetId.length === 0 || targetId === NO_ACTIVE_BLOCKER_SENTINEL) {
+                continue;
+            }
+            const blockerIds = idsByItem.get(targetId) ?? new Set();
+            blockerIds.add(candidateId);
+            idsByItem.set(targetId, blockerIds);
+        }
+    }
+    return new Map([...idsByItem].map(([itemId, blockerIds]) => [
+        itemId,
+        [...blockerIds].sort((left, right) => left.localeCompare(right)),
+    ]));
+}
+/** Collect blockers from both an item's forward declarations and corpus-level reverse `blocks` edges. */
+export function collectBlockedByIdsFromCorpus(item, corpus) {
+    const itemId = normalizeItemId(item.id);
+    return itemId.length > 0
+        ? (indexBlockedByIds(corpus).get(itemId) ?? collectBlockedByIds(item))
+        : collectBlockedByIds(item);
+}
 /** Resolves an item's declared blockers against a corpus index, annotating each with the blocker's title/status and whether it still gates work. Unknown ids remain unresolved: silently treating a typo as satisfied would dispatch work whose prerequisite was never completed. Terminal referenced items alone are resolved. */
-export function resolveItemBlockers(item, itemsById, statusRegistry) {
-    return collectBlockedByIds(item).map((id) => {
+function resolveItemBlockersWithIndex(item, itemsById, statusRegistry, blockerIdsByItem) {
+    const itemWithId = item;
+    const blockerIds = typeof itemWithId.id === "string"
+        ? (blockerIdsByItem?.get(normalizeItemId(itemWithId.id)) ??
+            collectBlockedByIdsFromCorpus(itemWithId, [...itemsById.values()]))
+        : collectBlockedByIds(item);
+    return blockerIds.map((id) => {
         const blocker = itemsById.get(normalizeItemId(id));
         if (!blocker) {
             return { id, title: null, status: null, resolved: false };
@@ -57,6 +107,10 @@ export function resolveItemBlockers(item, itemsById, statusRegistry) {
         };
     });
 }
+/** Resolves an item's blockers against a corpus index with reverse `blocks` support. */
+export function resolveItemBlockers(item, itemsById, statusRegistry) {
+    return resolveItemBlockersWithIndex(item, itemsById, statusRegistry);
+}
 /**
  * Collects the normalized (trimmed, lowercased) ids of every corpus item that is
  * blocked under the single shared edge-aware definition: a non-terminal item
@@ -70,6 +124,7 @@ export function resolveItemBlockers(item, itemsById, statusRegistry) {
  */
 export function collectDependencyBlockedIds(corpus, statusRegistry) {
     const itemsById = new Map(corpus.map((item) => [normalizeItemId(item.id), item]));
+    const blockerIdsByItem = indexBlockedByIds(corpus);
     // Same candidate gate as computeActionabilityReport: active statuses plus
     // lifecycle-blocked statuses, so the two surfaces classify identically.
     const candidateStatuses = new Set([
@@ -83,7 +138,7 @@ export function collectDependencyBlockedIds(corpus, statusRegistry) {
             continue;
         const lifecycleBlocked = statusRegistry.blocked_statuses.has(normalizedStatus);
         if (lifecycleBlocked ||
-            resolveItemBlockers(item, itemsById, statusRegistry).some((blocker) => !blocker.resolved)) {
+            resolveItemBlockersWithIndex(item, itemsById, statusRegistry, blockerIdsByItem).some((blocker) => !blocker.resolved)) {
             blocked.add(normalizeItemId(item.id));
         }
     }
@@ -122,6 +177,7 @@ function indexCorpus(corpus) {
     const itemsById = new Map();
     const childrenByParent = new Map();
     const blockedByReverse = new Map();
+    const blockerIdsByItem = indexBlockedByIds(corpus);
     for (const item of corpus) {
         // Index keys are normalized (lowercased) for case-insensitive resolution;
         // stored values keep the item's original-case id for display.
@@ -133,14 +189,14 @@ function indexCorpus(corpus) {
             siblings.push(item);
             childrenByParent.set(parentKey, siblings);
         }
-        for (const blockerId of collectBlockedByIds(item)) {
+        for (const blockerId of blockerIdsByItem.get(normalizeItemId(item.id))) {
             const blockerKey = normalizeItemId(blockerId);
             const dependents = blockedByReverse.get(blockerKey) ?? [];
             dependents.push(item.id);
             blockedByReverse.set(blockerKey, dependents);
         }
     }
-    return { itemsById, childrenByParent, blockedByReverse };
+    return { itemsById, childrenByParent, blockedByReverse, blockerIdsByItem };
 }
 /**
  * Partitions a candidate set into ready vs blocked leaf work using the corpus to
@@ -154,7 +210,7 @@ function indexCorpus(corpus) {
  * the candidate order so the caller can apply its own ranking.
  */
 export function computeActionabilityReport(candidates, corpus, statusRegistry) {
-    const { itemsById, childrenByParent, blockedByReverse } = indexCorpus(corpus);
+    const { itemsById, childrenByParent, blockedByReverse, blockerIdsByItem } = indexCorpus(corpus);
     const activeStatuses = new Set([
         ...resolveActiveStatusSet(statusRegistry),
         ...statusRegistry.blocked_statuses,
@@ -176,7 +232,7 @@ export function computeActionabilityReport(candidates, corpus, statusRegistry) {
             containerCount += 1;
             continue;
         }
-        const openBlockers = resolveItemBlockers(item, itemsById, statusRegistry).filter((blocker) => !blocker.resolved);
+        const openBlockers = resolveItemBlockersWithIndex(item, itemsById, statusRegistry, blockerIdsByItem).filter((blocker) => !blocker.resolved);
         const unblocks = (blockedByReverse.get(normalizeItemId(item.id)) ?? [])
             .filter((dependentId) => nonTerminalIds.has(normalizeItemId(dependentId)))
             .sort((left, right) => left.localeCompare(right));
@@ -201,4 +257,4 @@ export function computeActionabilityReport(candidates, corpus, statusRegistry) {
     };
 }
 //# sourceMappingURL=actionability.js.map
-//# debugId=bf429f76-9722-5e34-a5f0-6ced8d1ed667
+//# debugId=de8a82e1-0b02-5d5a-9086-686529a1ccab

package/dist/core/shared/author.d.ts

@@ -19,6 +19,19 @@ export interface AgentProvenanceObservation {
  * selected harness declared the dimension but exposed no value this run.
  */
 export type AgentProvenance = Readonly<Record<string, AgentProvenanceObservation | null>>;
+/** Bounded reason explaining why one declared provenance dimension was absent. */
+export type AgentProvenanceAbsenceReason = "harness_unavailable" | "resolver_failed" | "resolver_not_configured" | "probes_disabled" | "invalid_value";
+/** Machine-readable resolution outcome for one provenance dimension. */
+export interface AgentProvenanceOutcome {
+    /** Whether the dimension resolved without retaining private source material. */
+    status: "resolved" | "unavailable" | "failed";
+    /** Stable bounded reason for absent or rejected values. */
+    reason?: AgentProvenanceAbsenceReason;
+    /** Resolver name when a bounded local resolver was attempted. */
+    resolver?: AgentProvenanceResolver;
+    /** Stable inference contract version used by downstream analytics. */
+    rule_version: "v1";
+}
 /** Privacy-bounded MCP client metadata that can participate in agent detection. */
 export interface AgentClientInfo {
     /** Client or harness name reported during protocol initialization. */
@@ -72,6 +85,11 @@ export interface DetectedAgentIdentity {
     /** Stable declared episode identity when the session supplied one. */
     episode?: AgentEpisodeIdentity;
 }
+/** Agent identity plus explicit outcomes for every built-in provenance dimension. */
+export interface DiagnosedAgentIdentity extends DetectedAgentIdentity {
+    /** Resolution outcomes that distinguish absence from resolver failure. */
+    provenance_outcomes: Readonly<Record<string, AgentProvenanceOutcome>>;
+}
 /** Public, privacy-safe identity resolution result shared by CLI and SDK hosts. */
 export interface ResolvedAuthorIdentity extends DetectedAgentIdentity {
     /** Stable author value written to mutation history. */
@@ -126,6 +144,13 @@ export declare function runWithWorkspaceHarnessSignalDescriptors<T>(descriptors:
  * traversal, or network requests.
  */
 export declare function detectAgentIdentity(signals?: HarnessDetectionSignals): DetectedAgentIdentity;
+/**
+ * Diagnose provenance without exposing environment values, paths, or probe data.
+ *
+ * This additive SDK contract keeps legacy `detectAgentIdentity` projections
+ * stable while giving health checks and history writers explicit absence states.
+ */
+export declare function diagnoseAgentIdentity(signals?: HarnessDetectionSignals): DiagnosedAgentIdentity;
 /** Reads the invocation-wide author override through the canonical environment seam. */
 export declare function readAuthorEnvironment(): string | undefined;
 /** Updates or clears the invocation-wide author override through the canonical environment seam. */

package/dist/core/shared/author.js

@@ -4,7 +4,7 @@
  * Provides shared primitives and utilities for Author.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="0139d8ef-d286-571f-89f8-7de2f8422f22")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="a89b5501-1909-5ea8-b34b-8ca9b4bc5dd5")}catch(e){}}();
 import { AsyncLocalStorage } from "node:async_hooks";
 import { createHash } from "node:crypto";
 import fs from "node:fs";
@@ -31,13 +31,12 @@ export const BUILTIN_HARNESS_SIGNAL_DESCRIPTORS = [
         session_environment_keys: ["CLAUDE_CODE_SESSION_ID"],
         provenance_environment_keys: {
             effort: ["CLAUDE_EFFORT"],
-            role: ["CLAUDE_CODE_CHILD_SESSION"],
         },
         provenance_resolvers: {
             model: "claude_session_file",
             version: "claude_session_file",
         },
-        provenance_unavailable_dimensions: ["topic"],
+        provenance_unavailable_dimensions: ["role", "topic"],
         argv_markers: ["claude", "claude-code"],
         client_names: ["claude", "claude-code", "claude code"],
     },
@@ -192,6 +191,28 @@ function firstEnvironmentValue(env, keys) {
     return undefined;
 }
 function provenanceFromArgv(argv, dimension) {
+    const flaggedValue = provenanceFlagValue(argv, dimension);
+    if (flaggedValue !== undefined)
+        return flaggedValue;
+    if (dimension === "topic") {
+        return argv
+            .slice(0, 16)
+            .map((token) => token.trim())
+            .find((token) => /^pm-[a-z0-9][a-z0-9-]{2,63}$/u.test(token));
+    }
+    if (dimension === "role") {
+        const command = argv
+            .slice(0, 8)
+            .map((token) => token.trim().toLowerCase())
+            .find((token) => ["claim", "create", "update", "close", "release", "review"].includes(token));
+        if (command === "review")
+            return "reviewer";
+        if (command)
+            return "implementer";
+    }
+    return undefined;
+}
+function provenanceFlagValue(argv, dimension) {
     const acceptedFlags = dimension === "model"
         ? ["--model", "--agent-model"]
         : [`--agent-${dimension}`];
@@ -208,6 +229,21 @@ function provenanceFromArgv(argv, dimension) {
     }
     return undefined;
 }
+const AGENT_ROLE_VALUES = new Set([
+    "implementation",
+    "implementer",
+    "investigator",
+    "orchestrator",
+    "planner",
+    "release-operator",
+    "reviewer",
+]);
+function normalizeProvenanceValue(dimension, value) {
+    if (dimension !== "role" || value === undefined)
+        return value;
+    const normalized = value.trim().toLowerCase().replaceAll(/[_\s]+/gu, "-");
+    return AGENT_ROLE_VALUES.has(normalized) ? normalized : undefined;
+}
 function boundedProvenanceValue(provenance, dimension) {
     return nonBlank(provenance?.[dimension])?.slice(0, 256);
 }
@@ -307,7 +343,7 @@ function resolveAgentProvenanceObservation(dimension, signals, env, descriptor,
     let overrideValue;
     let argvValue;
     if (hostResolvedDimensions.has(dimension)) {
-        overrideValue = nonBlank(env[overrideKey])?.slice(0, 256);
+        overrideValue = normalizeProvenanceValue(dimension, nonBlank(env[overrideKey])?.slice(0, 256));
         argvValue = provenanceFromArgv(signals.argv ?? [], dimension);
     }
     const environmentKeysByDimension = {
@@ -321,10 +357,10 @@ function resolveAgentProvenanceObservation(dimension, signals, env, descriptor,
     const values = [
         overrideValue,
         boundedProvenanceValue(sessionContext?.provenance, dimension),
-        firstEnvironmentValue(env, environmentKeysByDimension[dimension]),
-        boundedProvenanceValue(clientProvenance, dimension),
-        boundedProvenanceValue(signals.provenance, dimension),
-        argvValue,
+        normalizeProvenanceValue(dimension, firstEnvironmentValue(env, environmentKeysByDimension[dimension])),
+        normalizeProvenanceValue(dimension, boundedProvenanceValue(clientProvenance, dimension)),
+        normalizeProvenanceValue(dimension, boundedProvenanceValue(signals.provenance, dimension)),
+        normalizeProvenanceValue(dimension, argvValue),
         resolveProvenanceProbe(dimension, signals, env, descriptor),
     ];
     const sources = [
@@ -469,6 +505,75 @@ export function detectAgentIdentity(signals) {
     ];
     return Object.fromEntries(entries.filter((entry) => entry[1] !== undefined));
 }
+function resolveProvenanceOutcome(dimension, identity, descriptor, env, probesEnabled, invalidValue) {
+    const resolver = descriptor?.provenance_resolvers[dimension];
+    if (identity.provenance?.[dimension]) {
+        return {
+            status: "resolved",
+            ...(resolver ? { resolver } : {}),
+            rule_version: "v1",
+        };
+    }
+    if (invalidValue) {
+        return {
+            status: "unavailable",
+            reason: "invalid_value",
+            rule_version: "v1",
+        };
+    }
+    if (resolver) {
+        const resolverHasInput = resolver === "ai_agent_version"
+            ? nonBlank(env.AI_AGENT) !== undefined
+            : nonBlank(env.CLAUDE_CODE_SESSION_ID) !== undefined;
+        const status = resolverHasInput && probesEnabled ? "failed" : "unavailable";
+        const reason = !resolverHasInput
+            ? "harness_unavailable"
+            : probesEnabled
+                ? "resolver_failed"
+                : "probes_disabled";
+        return { status, reason, resolver, rule_version: "v1" };
+    }
+    return {
+        status: "unavailable",
+        reason: descriptor?.provenance_unavailable_dimensions.includes(dimension)
+            ? "harness_unavailable"
+            : "resolver_not_configured",
+        rule_version: "v1",
+    };
+}
+/**
+ * Diagnose provenance without exposing environment values, paths, or probe data.
+ *
+ * This additive SDK contract keeps legacy `detectAgentIdentity` projections
+ * stable while giving health checks and history writers explicit absence states.
+ */
+export function diagnoseAgentIdentity(signals) {
+    const effectiveSignals = effectiveHarnessDetectionSignals(signals);
+    const identity = detectAgentIdentity(effectiveSignals);
+    const descriptor = currentHarnessSignalDescriptors(effectiveSignals.descriptors).find((candidate) => candidate.harness === identity.harness);
+    const env = effectiveSignals.env ?? {};
+    const probesEnabled = effectiveSignals.probes_enabled !== false &&
+        workspaceHarnessSignalsStorage.getStore()?.probesEnabled !== false &&
+        !["0", "false", "off"].includes(nonBlank(env.PM_AGENT_PROBES)?.toLowerCase() ?? "");
+    const sessionContext = resolveAgentSessionContextFromSignals(effectiveSignals, env);
+    const invalidRoleValue = [
+        env.PM_AGENT_ROLE,
+        sessionContext.provenance?.role,
+        firstEnvironmentValue(env, descriptor?.provenance_environment_keys.role),
+        effectiveSignals.client_info?.provenance?.role,
+        effectiveSignals.provenance?.role,
+        provenanceFlagValue(effectiveSignals.argv ?? [], "role"),
+    ].some((candidate) => {
+        const value = nonBlank(candidate)?.slice(0, 256);
+        return (value !== undefined &&
+            normalizeProvenanceValue("role", value) === undefined);
+    });
+    const outcomes = Object.fromEntries(AGENT_PROVENANCE_DIMENSIONS.map((dimension) => [
+        dimension,
+        resolveProvenanceOutcome(dimension, identity, descriptor, env, probesEnabled, dimension === "role" && invalidRoleValue),
+    ]));
+    return { ...identity, provenance_outcomes: outcomes };
+}
 /** Reads the invocation-wide author override through the canonical environment seam. */
 export function readAuthorEnvironment() {
     return process.env.PM_AUTHOR;
@@ -575,4 +680,4 @@ export function resolveAuthor(candidate, fallback) {
     return identity.author;
 }
 //# sourceMappingURL=author.js.map
-//# debugId=0139d8ef-d286-571f-89f8-7de2f8422f22
+//# debugId=a89b5501-1909-5ea8-b34b-8ca9b4bc5dd5

package/dist/sdk/actionability.d.ts

@@ -7,4 +7,4 @@
  * blocker or ready-work classifications without storage or rendering side
  * effects.
  */
-export { collectBlockedByIds, collectDependencyBlockedIds, computeActionabilityReport, resolveItemBlockers, type ActionabilityReport, type ActionableEntry, type ResolvedBlocker, } from "../core/item/actionability.js";
+export { ACTIONABILITY_ORDERING_KINDS, collectBlockedByIds, collectBlockedByIdsFromCorpus, collectDependencyBlockedIds, computeActionabilityReport, indexBlockedByIds, resolveItemBlockers, type ActionabilityReport, type ActionableEntry, type ResolvedBlocker, } from "../core/item/actionability.js";

package/dist/sdk/actionability.js

@@ -8,7 +8,7 @@
  * effects.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="9184e723-8269-5e45-8c6a-52fd02da60e6")}catch(e){}}();
-export { collectBlockedByIds, collectDependencyBlockedIds, computeActionabilityReport, resolveItemBlockers, } from "../core/item/actionability.js";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="cc271a73-9767-54bb-a142-d4d4569e3c6a")}catch(e){}}();
+export { ACTIONABILITY_ORDERING_KINDS, collectBlockedByIds, collectBlockedByIdsFromCorpus, collectDependencyBlockedIds, computeActionabilityReport, indexBlockedByIds, resolveItemBlockers, } from "../core/item/actionability.js";
 //# sourceMappingURL=actionability.js.map
-//# debugId=9184e723-8269-5e45-8c6a-52fd02da60e6
+//# debugId=cc271a73-9767-54bb-a142-d4d4569e3c6a

package/dist/sdk/cli-contracts/runtime-contracts.d.ts

@@ -114,6 +114,14 @@ export interface ContractsResult {
         types: string[];
         fields_by_command: Record<string, string[]>;
     };
+    /** Canonical relationship ontology and accepted compatibility aliases. */
+    relationship_kind_contracts?: Array<{
+        canonical: string;
+        aliases: string[];
+        inverse?: string;
+        ordering: boolean;
+        hierarchy: boolean;
+    }>;
     /** Value that configures or reports extension contracts for this contract. */
     extension_contracts?: {
         capabilities: string[];

package/dist/sdk/cli-contracts/runtime-contracts.js

@@ -4,7 +4,7 @@
  * Implements the pm contracts command surface and its agent-facing runtime behavior.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="adf76b7b-fc29-5b35-b33a-5ae008cbc8e7")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="fc28e3a8-c827-5ccc-918a-12d6bf1a1592")}catch(e){}}();
 import { EXIT_CODE, SETTINGS_DEFAULTS, PmCliError, activateExtensions, getActiveExtensionRegistrations, loadExtensions, pathExists, commandOptionFlagLabel, resolveCommandOptionPolicyState, resolveItemTypeRegistry, resolveRuntimeFieldRegistry, resolveRuntimeStatusRegistry, getSettingsPath, resolvePmRoot, readSettings, } from "../runtime-primitives.js";
 import { buildMcpToolContracts, } from "../../mcp/tool-definitions.js";
 import { ACTIVITY_COMMANDER_STRING_OPTION_CONTRACTS, ACTIVITY_FLAG_CONTRACTS, AGGREGATE_FLAG_CONTRACTS, APPEND_FLAG_CONTRACTS, CALENDAR_COMMANDER_STRING_OPTION_CONTRACTS, CALENDAR_FLAG_CONTRACTS, CLAIM_FLAG_CONTRACTS, CLOSE_TASK_FLAG_CONTRACTS, COMMENTS_FLAG_CONTRACTS, CLOSE_FLAG_CONTRACTS, CLOSE_MANY_FLAG_CONTRACTS, COMPLETION_FLAG_CONTRACTS, CONFIG_FLAG_CONTRACTS, CONTRACTS_FLAG_CONTRACTS, CONTEXT_COMMANDER_STRING_OPTION_CONTRACTS, CONTEXT_FLAG_CONTRACTS, CREATE_COMMANDER_REPEATABLE_OPTION_CONTRACTS, CREATE_COMMANDER_STRING_OPTION_CONTRACTS, CREATE_FLAG_CONTRACTS, DELETE_FLAG_CONTRACTS, DEPS_FLAG_CONTRACTS, GRAPH_FLAG_CONTRACTS, DOCS_FLAG_CONTRACTS, EXTENSION_ACTIVATE_FLAG_CONTRACTS, EXTENSION_ADOPT_ALL_FLAG_CONTRACTS, EXTENSION_ADOPT_FLAG_CONTRACTS, EXTENSION_CATALOG_FLAG_CONTRACTS, EXTENSION_DEACTIVATE_FLAG_CONTRACTS, EXTENSION_DESCRIBE_FLAG_CONTRACTS, EXTENSION_DOCTOR_FLAG_CONTRACTS, EXTENSION_EXPLORE_FLAG_CONTRACTS, EXTENSION_FLAG_CONTRACTS, EXTENSION_INIT_FLAG_CONTRACTS, EXTENSION_INSTALL_FLAG_CONTRACTS, EXTENSION_MANAGE_FLAG_CONTRACTS, EXTENSION_MIGRATE_FLAG_CONTRACTS, EXTENSION_RELOAD_FLAG_CONTRACTS, EXTENSION_UNINSTALL_FLAG_CONTRACTS, FILES_FLAG_CONTRACTS, GC_FLAG_CONTRACTS, GET_FLAG_CONTRACTS, GUIDE_FLAG_CONTRACTS, GLOBAL_FLAG_CONTRACTS, HEALTH_FLAG_CONTRACTS, HISTORY_FLAG_CONTRACTS, HISTORY_COMPACT_FLAG_CONTRACTS, HISTORY_REDACT_FLAG_CONTRACTS, HISTORY_REPAIR_FLAG_CONTRACTS, HISTORY_AUTHOR_ACKNOWLEDGE_FLAG_CONTRACTS, INSTALL_FLAG_CONTRACTS, INIT_FLAG_CONTRACTS, ITEM_COMPLETE_FLAG_CONTRACTS, ITEM_MUTATE_FLAG_CONTRACTS, LEARNINGS_FLAG_CONTRACTS, LIST_COMMANDER_STRING_OPTION_CONTRACTS, LIST_FILTER_FLAG_CONTRACTS, MERGE_FLAG_CONTRACTS, NOTES_FLAG_CONTRACTS, PACKAGE_FLAG_CONTRACTS, PACKAGE_INIT_FLAG_CONTRACTS, PM_EXTENSION_CAPABILITY_CONTRACTS, PM_EXTENSION_POLICY_MODE_CONTRACTS, PM_EXTENSION_POLICY_SURFACE_CONTRACTS, PM_EXTENSION_SANDBOX_PROFILE_CONTRACTS, PM_EXTENSION_SERVICE_NAME_CONTRACTS, PM_EXTENSION_TRUST_MODE_CONTRACTS, PM_OUTPUT_DEGRADATION_STEPS, PLAN_FLAG_CONTRACTS, PM_CORE_COMMAND_NAMES, PM_TOOL_ACTIONS, PM_TOOL_PARAMETERS_SCHEMA, REINDEX_FLAG_CONTRACTS, RELEASE_FLAG_CONTRACTS, RESTORE_FLAG_CONTRACTS, SCHEMA_FLAG_CONTRACTS, PROFILE_FLAG_CONTRACTS, SEARCH_COMMANDER_STRING_OPTION_CONTRACTS, EVAL_FLAG_CONTRACTS, WORKSPACE_FLAG_CONTRACTS, NEXT_FLAG_CONTRACTS, SEARCH_FLAG_CONTRACTS, STATS_FLAG_CONTRACTS, DUPLICATES_FLAG_CONTRACTS, START_TASK_FLAG_CONTRACTS, PAUSE_TASK_FLAG_CONTRACTS, TELEMETRY_FLAG_CONTRACTS, TEST_ALL_FLAG_CONTRACTS, TEST_FLAG_CONTRACTS, TEST_RUNS_FLAG_CONTRACTS, UPDATE_COMMANDER_REPEATABLE_OPTION_CONTRACTS, UPDATE_COMMANDER_STRING_OPTION_CONTRACTS, UPDATE_FLAG_CONTRACTS, UPDATE_MANY_FLAG_CONTRACTS, UPGRADE_FLAG_CONTRACTS, VALIDATE_FLAG_CONTRACTS, compactFlagAliasContracts, resolvePmCommandOutputBudget, } from "../cli-contracts.js";
@@ -17,6 +17,7 @@ import { resolvePmCommandVisibilityTier, } from "../agent-capability-contracts.j
 import { PM_ERROR_CODE_CATALOG } from "../generated-error-code-catalog.js";
 import { resolvePmCommandOutputEnvelope, } from "../output-contracts.js";
 import { PM_COMMAND_EXIT_OUTCOME_CONTRACTS, resolvePmCommandExitContract, } from "./command-exit-contracts.js";
+import { BUILTIN_RELATIONSHIP_KINDS } from "../relationship-kinds/contract.js";
 const AGENT_BOOTSTRAP_FLAGS = new Map([
     [
         "claim",
@@ -1718,6 +1719,20 @@ function attachRuntimeContractsResult(result, runtime) {
         close_validation_modes: [...GOVERNANCE_CLOSE_VALIDATION_DEFAULT_VALUES],
         workflow_enforcement_modes: [...GOVERNANCE_WORKFLOW_ENFORCEMENT_VALUES],
     };
+    result.relationship_kind_contracts = [
+        ...BUILTIN_RELATIONSHIP_KINDS,
+        ...(runtime.runtimeProbe.registrations?.relationship_kinds ?? []).flatMap((registration) => registration.definitions),
+    ]
+        .sort((left, right) => left.kind.localeCompare(right.kind))
+        .map((definition) => ({
+        canonical: definition.kind,
+        aliases: [...(definition.aliases ?? [])],
+        ...(definition.inverse === undefined
+            ? {}
+            : { inverse: definition.inverse }),
+        ordering: definition.ordering,
+        hierarchy: definition.hierarchy,
+    }));
 }
 function attachSchemaContractsResult(result, selection, schemaContext, extensionCommandContracts) {
     if (selection.flagsOnly || selection.availabilityOnly) {
@@ -1854,4 +1869,4 @@ export const _testOnlyContractsCommand = {
     toRuntimeShortFlagToken,
 };
 //# sourceMappingURL=runtime-contracts.js.map
-//# debugId=adf76b7b-fc29-5b35-b33a-5ae008cbc8e7
+//# debugId=fc28e3a8-c827-5ccc-918a-12d6bf1a1592

package/dist/sdk/core-governance.d.ts

@@ -4,6 +4,6 @@
  * Defines the shared agent-provenance and CLI-completeness governance surface
  * exposed by both the focused core entrypoint and the complete SDK barrel.
  */
-export { AGENT_PROVENANCE_DIMENSIONS, BUILTIN_HARNESS_SIGNAL_DESCRIPTORS, detectAgentIdentity, detectHarnessIdentity, readAuthorEnvironment, registerHarnessSignalDescriptors, resolveAuthorIdentity, runWithHarnessDetectionSignals, runWithWorkspaceHarnessSignalDescriptors, writeAuthorEnvironment, type AgentClientInfo, type AgentModelSource, type AgentProvenance, type AgentProvenanceObservation, type AuthorSource, type DetectedAgentIdentity, type HarnessDetectionSignals, type HarnessSignalDescriptor, type ResolvedAuthorIdentity, } from "../core/shared/author.js";
+export { AGENT_PROVENANCE_DIMENSIONS, BUILTIN_HARNESS_SIGNAL_DESCRIPTORS, diagnoseAgentIdentity, detectAgentIdentity, detectHarnessIdentity, readAuthorEnvironment, registerHarnessSignalDescriptors, resolveAuthorIdentity, runWithHarnessDetectionSignals, runWithWorkspaceHarnessSignalDescriptors, writeAuthorEnvironment, type AgentClientInfo, type AgentModelSource, type AgentProvenance, type AgentProvenanceAbsenceReason, type AgentProvenanceObservation, type AgentProvenanceOutcome, type AuthorSource, type DetectedAgentIdentity, type DiagnosedAgentIdentity, type HarnessDetectionSignals, type HarnessSignalDescriptor, type ResolvedAuthorIdentity, } from "../core/shared/author.js";
 export { analyzeAgentProvenanceDescriptorCoverage, groupHistoryByEpisode, resolveHistoryEpisodeGroupIdentity, summarizeAgentProvenance, summarizeAgentModelProvenance, type AgentEpisodeGroup, type AgentModelProvenanceCoverage, type AgentProvenanceDimensionCoverage, type AgentProvenanceDescriptorCoverage, } from "./provenance.js";
 export { analyzeSdkCliParameterCompleteness, type SdkCliActionParameterCoverage, type SdkCliCompletenessContractSource, type SdkCliParameterCoverageEntry, type SdkCliParameterDisposition, } from "./cli-contracts.js";

package/dist/sdk/core-governance.js

@@ -5,9 +5,9 @@
  * exposed by both the focused core entrypoint and the complete SDK barrel.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="80b8e2af-4dcf-59e8-bfbf-38124db887bf")}catch(e){}}();
-export { AGENT_PROVENANCE_DIMENSIONS, BUILTIN_HARNESS_SIGNAL_DESCRIPTORS, detectAgentIdentity, detectHarnessIdentity, readAuthorEnvironment, registerHarnessSignalDescriptors, resolveAuthorIdentity, runWithHarnessDetectionSignals, runWithWorkspaceHarnessSignalDescriptors, writeAuthorEnvironment, } from "../core/shared/author.js";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="7442357d-52b9-5461-9ac4-3acd898334da")}catch(e){}}();
+export { AGENT_PROVENANCE_DIMENSIONS, BUILTIN_HARNESS_SIGNAL_DESCRIPTORS, diagnoseAgentIdentity, detectAgentIdentity, detectHarnessIdentity, readAuthorEnvironment, registerHarnessSignalDescriptors, resolveAuthorIdentity, runWithHarnessDetectionSignals, runWithWorkspaceHarnessSignalDescriptors, writeAuthorEnvironment, } from "../core/shared/author.js";
 export { analyzeAgentProvenanceDescriptorCoverage, groupHistoryByEpisode, resolveHistoryEpisodeGroupIdentity, summarizeAgentProvenance, summarizeAgentModelProvenance, } from "./provenance.js";
 export { analyzeSdkCliParameterCompleteness, } from "./cli-contracts.js";
 //# sourceMappingURL=core-governance.js.map
-//# debugId=80b8e2af-4dcf-59e8-bfbf-38124db887bf
+//# debugId=7442357d-52b9-5461-9ac4-3acd898334da

package/dist/sdk/dependencies.d.ts

@@ -109,6 +109,8 @@ export interface DepsResult {
     edge_count: number;
     /** Counting convention used by edge_count. */
     edge_basis: "deduplicated_directed";
+    /** Stored legacy relationship aliases grouped by spelling across the workspace. */
+    legacy_alias_counts?: Record<string, number>;
     /**
      * Number of missing entries represented by this result.
      *