@unbrained/pm-cli 2026.8.8 → 2026.8.9

package/dist/sdk/dependencies.js

@@ -4,7 +4,7 @@
  * Implements the pm deps command surface and its agent-facing runtime behavior.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="a3535267-c69a-5a44-bdf9-02925e02aaeb")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="ee0547d9-ae0f-5762-8bff-e25f0a3cd4d5")}catch(e){}}();
 import { getActiveExtensionRegistrations } from "../core/extensions/index.js";
 import { pathExists } from "../core/fs/fs-utils.js";
 import { resolveItemTypeRegistry } from "../core/item/type-registry.js";
@@ -637,7 +637,7 @@ function buildTreeOrGraphDepsResult(id, format, options, index, maxDepth, collap
         budget.reasons.add("token_budget");
     }
 }
-function attachDepsProjection(result, summaryOnly) {
+function attachDepsProjection(result, summaryOnly, legacyAliasCounts = {}) {
     const group = {
         name: result.format === "tree"
             ? "dependency_tree"
@@ -648,6 +648,7 @@ function attachDepsProjection(result, summaryOnly) {
     };
     return {
         ...result,
+        legacy_alias_counts: legacyAliasCounts,
         projection: {
             mode: summaryOnly ? "summary" : "full",
             declared_field_groups: [group],
@@ -705,16 +706,16 @@ export async function runDeps(id, options, global) {
             rootEvidence,
             summaryOnly,
             outputFormat: global.json === true ? "json" : "toon",
-        }), summaryOnly);
+        }), summaryOnly, lookup.assembly.legacyAliasCounts);
     }
     if (summaryOnly) {
         return attachDepsProjection({
             id,
             format,
             ...countDependencyGraph(id, index, maxDepth),
-        }, true);
+        }, true, Object.fromEntries(Object.entries(assembleWorkspaceRelationshipGraph(items, (status) => isTerminalStatus(status, statusRegistry)).legacyAliasCounts)));
     }
-    return attachDepsProjection(buildTreeOrGraphDepsResult(id, format, options, index, maxDepth, collapse, global.json === true ? "json" : "toon"), false);
+    return attachDepsProjection(buildTreeOrGraphDepsResult(id, format, options, index, maxDepth, collapse, global.json === true ? "json" : "toon"), false, Object.fromEntries(Object.entries(assembleWorkspaceRelationshipGraph(items, (status) => isTerminalStatus(status, statusRegistry)).legacyAliasCounts)));
 }
 //# sourceMappingURL=dependencies.js.map
-//# debugId=a3535267-c69a-5a44-bdf9-02925e02aaeb
+//# debugId=ee0547d9-ae0f-5762-8bff-e25f0a3cd4d5

package/dist/sdk/extension/bundled-catalog.js

@@ -4,7 +4,7 @@
  * Implements extension package-management support for Bundled Catalog.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="27a2b542-853e-52e1-ad80-11bab01b07a2")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="259656b0-09b7-52c5-8f54-52ac29eec607")}catch(e){}}();
 import fs from "node:fs/promises";
 import path from "node:path";
 import { collectPackageExtensionDirectories, PM_PACKAGE_RESOURCE_KINDS, readPmPackageManifest, } from "../../core/packages/manifest.js";
@@ -187,7 +187,7 @@ function buildBundledCatalogLinks(manifest) {
     };
 }
 /** Build one bundled-package catalog entry from its manifest, marking it `installed` when the managed state for `scope` already records the package by built-in alias or resolved location, and projecting the metadata-only resource kinds (everything except installable `extensions`) that the package ships. */
-function buildBundledCatalogPackageEntry(manifest, bundledEntry, scope, installedBuiltinAliases, installedLocations) {
+function buildBundledCatalogPackageEntry(manifest, bundledEntry, aliases, scope, installedBuiltinAliases, installedLocations) {
     const installScopeFlag = scope === "global" ? "--global" : "--project";
     const metadataOnlyResources = Object.fromEntries(PM_PACKAGE_RESOURCE_KINDS.filter((resourceKind) => resourceKind !== "extensions")
         .map((resourceKind) => [
@@ -197,9 +197,10 @@ function buildBundledCatalogPackageEntry(manifest, bundledEntry, scope, installe
         .filter(([, entries]) => Array.isArray(entries) && entries.length > 0));
     return {
         alias: bundledEntry.alias,
+        aliases,
         bundled: true,
         available: true,
-        installed: installedBuiltinAliases.has(bundledEntry.alias) ||
+        installed: aliases.some((alias) => installedBuiltinAliases.has(alias)) ||
             installedLocations.has(path.resolve(bundledEntry.package_root)),
         install_target: bundledEntry.alias,
         install_command: `pm install ${bundledEntry.alias} ${installScopeFlag}`,
@@ -240,9 +241,20 @@ export async function buildBundledPackageCatalog(scope, global, options = {}) {
         .filter((value) => typeof value === "string" && value.trim().length > 0)
         .map((value) => value.trim().toLowerCase()));
     const packages = [];
-    for (const bundledEntry of await collectBundledPackageEntries()) {
+    const bundledEntriesByRoot = new Map();
+    for (const entry of await collectBundledPackageEntries()) {
+        const packageRoot = path.resolve(entry.package_root);
+        const groupedEntries = bundledEntriesByRoot.get(packageRoot) ?? [];
+        groupedEntries.push(entry);
+        bundledEntriesByRoot.set(packageRoot, groupedEntries);
+    }
+    for (const bundledEntries of bundledEntriesByRoot.values()) {
+        const bundledEntry = bundledEntries[0];
+        const aliases = bundledEntries
+            .map((entry) => entry.alias)
+            .sort((left, right) => left.localeCompare(right));
         const manifest = await readPmPackageManifest(bundledEntry.package_root);
-        packages.push(buildBundledCatalogPackageEntry(manifest, bundledEntry, scope, installedBuiltinAliases, installedLocations));
+        packages.push(buildBundledCatalogPackageEntry(manifest, bundledEntry, aliases, scope, installedBuiltinAliases, installedLocations));
     }
     const fields = parsePackageCatalogFields(options.fields);
     const outputPackages = fields
@@ -258,6 +270,7 @@ export async function buildBundledPackageCatalog(scope, global, options = {}) {
 }
 const PACKAGE_CATALOG_FIELD_KEYS = new Set([
     "alias",
+    "aliases",
     "bundled",
     "available",
     "installed",
@@ -317,4 +330,4 @@ export const _testOnlyBundledCatalog = {
     projectPackageCatalogEntry,
 };
 //# sourceMappingURL=bundled-catalog.js.map
-//# debugId=27a2b542-853e-52e1-ad80-11bab01b07a2
+//# debugId=259656b0-09b7-52c5-8f54-52ac29eec607

package/dist/sdk/generated-error-code-catalog.js

@@ -4,7 +4,7 @@
  * Generated by scripts/generate-error-code-catalog.mjs. Do not edit manually.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="8a086b83-e46b-5694-be66-9114b0d87e12")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="bcb7a0a9-268f-5cf8-aefc-766b67e92168")}catch(e){}}();
 import { definePmErrorCodeCatalog } from "./error-code-catalog.js";
 /** Exhaustive catalog generated from literal error guidance declarations. */
 export const PM_ERROR_CODE_CATALOG = definePmErrorCodeCatalog([
@@ -1469,6 +1469,18 @@ export const PM_ERROR_CODE_CATALOG = definePmErrorCodeCatalog([
         canonical_code: "merge_conflict_markers_detected",
         aliases: ["history_merge_conflict_markers_detected"],
     },
+    {
+        code: "merge_decisions_unreviewed",
+        meaning: "Merge decisions unreviewed condition.",
+        stability: "provisional",
+        exit_code: 1,
+        class: "generic_failure",
+        recovery: "Inspect the structured error guidance and retry the suggested command.",
+        sources: ["core/diagnostics/remediation.ts"],
+        emitting_commands: ["*"],
+        canonical_code: "merge_decisions_unreviewed",
+        aliases: [],
+    },
     {
         code: "merge_git_config_unwritable",
         meaning: "Merge git config unwritable condition.",
@@ -1481,6 +1493,18 @@ export const PM_ERROR_CODE_CATALOG = definePmErrorCodeCatalog([
         canonical_code: "merge_git_config_unwritable",
         aliases: [],
     },
+    {
+        code: "merge_reconcile_discards_require_acceptance",
+        meaning: "Merge reconcile discards require acceptance condition.",
+        stability: "provisional",
+        exit_code: 4,
+        class: "conflict",
+        recovery: "Inspect the structured error guidance and retry the suggested command.",
+        sources: ["sdk/merge/reconcile.ts"],
+        emitting_commands: ["*"],
+        canonical_code: "merge_reconcile_discards_require_acceptance",
+        aliases: [],
+    },
     {
         code: "merge_root_not_found",
         meaning: "Merge root not found condition.",
@@ -2587,6 +2611,18 @@ export const PM_ERROR_CODE_CATALOG = definePmErrorCodeCatalog([
         canonical_code: "validate_lifecycle_stale_blockers",
         aliases: [],
     },
+    {
+        code: "validate_merge_decisions_unreviewed",
+        meaning: "Validate merge decisions unreviewed condition.",
+        stability: "provisional",
+        exit_code: 1,
+        class: "generic_failure",
+        recovery: "Inspect the structured error guidance and retry the suggested command.",
+        sources: ["core/diagnostics/remediation.ts"],
+        emitting_commands: ["*"],
+        canonical_code: "validate_merge_decisions_unreviewed",
+        aliases: [],
+    },
     {
         code: "validate_merge_fence_drift",
         meaning: "Validate merge fence drift condition.",
@@ -3021,4 +3057,4 @@ export const PM_ERROR_CODE_CATALOG = definePmErrorCodeCatalog([
     },
 ]);
 //# sourceMappingURL=generated-error-code-catalog.js.map
-//# debugId=8a086b83-e46b-5694-be66-9114b0d87e12
+//# debugId=bcb7a0a9-268f-5cf8-aefc-766b67e92168

package/dist/sdk/governance/health.js

@@ -4,7 +4,7 @@
  * Implements the pm health command surface and its agent-facing runtime behavior.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="4efa3db2-6be7-5650-b1c7-d80e125694aa")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="97e1ed14-cd36-5910-b829-4619af6080e1")}catch(e){}}();
 import fs from "node:fs/promises";
 import path from "node:path";
 import { resolveItemTypeRegistry } from "../../core/item/type-registry.js";
@@ -35,12 +35,13 @@ import { readSettingsWithMetadata } from "../../core/store/settings.js";
 import { buildRemediationMap } from "../../core/diagnostics/remediation.js";
 import { scanHistoryAuthorAttribution, } from "../author-attribution.js";
 import { readManagedExtensionState } from "../extension.js";
+import { scanProvenanceResolverHealth } from "./provenance-health.js";
 import { applyStoredExtensionMigrationState } from "../extension/migrations.js";
 import { buildCapabilityContractMetadata, buildRegistrationCollisionRemediation, collectUnknownCapabilityGuidance, } from "../extension/doctor.js";
 import { scanStaleInProgressItems, } from "./stale-work.js";
 import { scanTrackedRuntimeCache } from "./tracked-runtime-cache.js";
 import { auditMergeDriverConfiguration, findGitWorkspaceRoot, } from "../merge/install.js";
-import { listMergeReceipts } from "../merge/receipts.js";
+import { listMergeReceipts, partitionMergeReceipts, } from "../merge/receipts.js";
 const PM_TELEMETRY_SOURCE_CONTEXT_SET = new Set(PM_TELEMETRY_SOURCE_CONTEXT_VALUES);
 const STALE_VECTORIZATION_SUMMARY_LIMIT = 25;
 const BRIEF_HEALTH_DETAIL_LIMIT = 8;
@@ -58,6 +59,7 @@ function isAdvisoryHealthWarning(warning, requireMergeDrivers = false) {
     return (warning.startsWith("telemetry_") ||
         warning.startsWith("history_stream_over_compact_threshold:") ||
         warning.startsWith("stale_in_progress_items:") ||
+        warning.startsWith("provenance_resolver_zero_success:") ||
         (!requireMergeDrivers &&
             warning.startsWith("merge_driver_configuration_missing:")));
 }
@@ -318,7 +320,10 @@ async function buildIntegrityCheck(pmRoot, typeToFolder, schema, requireMergeDri
     const mergeDriverAudit = gitWorkspaceRoot === null
         ? null
         : await auditMergeDriverConfiguration(gitWorkspaceRoot);
-    const pendingMergeReceipts = gitWorkspaceRoot === null ? [] : await listMergeReceipts(gitWorkspaceRoot);
+    const pendingMergeReceipts = gitWorkspaceRoot === null
+        ? []
+        : await listMergeReceipts(gitWorkspaceRoot, { includeLossless: true });
+    const { pendingDecisions: pendingMergeDecisions, lossless: losslessMergeReceipts, } = partitionMergeReceipts(pendingMergeReceipts);
     const mergeDriverInstallationMissing = mergeDriverAudit?.status === "missing" &&
         mergeDriverAudit.missing_keys.length === 5 &&
         mergeDriverAudit.drifted_keys.length === 0;
@@ -343,8 +348,8 @@ async function buildIntegrityCheck(pmRoot, typeToFolder, schema, requireMergeDri
                 `merge_driver_configuration_${mergeDriverInstallationMissing ? "missing" : "drift"}:${mergeDriverAudit.missing_keys.length + mergeDriverAudit.drifted_keys.length}`,
             ]
             : []),
-        ...(pendingMergeReceipts.length > 0
-            ? [`merge_decisions_unreviewed:${pendingMergeReceipts.length}`]
+        ...(pendingMergeDecisions.length > 0
+            ? [`merge_decisions_unreviewed:${pendingMergeDecisions.length}`]
             : []),
     ];
     const normalizedWarnings = [...new Set(warnings)].sort((left, right) => left.localeCompare(right));
@@ -369,7 +374,8 @@ async function buildIntegrityCheck(pmRoot, typeToFolder, schema, requireMergeDri
                         ? 0
                         : mergeDriverAudit.missing_keys.length +
                             mergeDriverAudit.drifted_keys.length,
-                    pending_merge_decisions: pendingMergeReceipts.length,
+                    pending_merge_decisions: pendingMergeDecisions.length,
+                    lossless_merge_receipts: losslessMergeReceipts.length,
                 },
                 item_unreadable: itemScan.unreadable,
                 item_conflict_markers: itemScan.conflictMarkers,
@@ -392,7 +398,10 @@ async function buildIntegrityCheck(pmRoot, typeToFolder, schema, requireMergeDri
                         required: requireMergeDrivers,
                     },
                 pending_merge_decision_items: [
-                    ...new Set(pendingMergeReceipts.map((receipt) => receipt.item_id)),
+                    ...new Set(pendingMergeDecisions.map((receipt) => receipt.item_id)),
+                ].sort((left, right) => left.localeCompare(right)),
+                lossless_merge_receipt_items: [
+                    ...new Set(losslessMergeReceipts.map((receipt) => receipt.item_id)),
                 ].sort((left, right) => left.localeCompare(right)),
             },
         },
@@ -1693,7 +1702,7 @@ const resolveUnknownAuthorEventCount = (authorAttribution) => authorAttribution.
 /** Preserve actionable-author semantics for current and legacy scan payloads. */
 const resolveActionableUnknownAuthorEventCount = (authorAttribution) => authorAttribution.actionable_unknown_event_count ??
     resolveUnknownAuthorEventCount(authorAttribution);
-function buildStorageHealthCheck(items, settings, historySummary, authorAttribution, staleInProgress) {
+function buildStorageHealthCheck(items, settings, historySummary, authorAttribution, staleInProgress, provenanceResolverOutcomes) {
     const unknownAuthorEventCount = resolveUnknownAuthorEventCount(authorAttribution);
     const actionableUnknownAuthorEventCount = resolveActionableUnknownAuthorEventCount(authorAttribution);
     const hasAuthorEvents = unknownAuthorEventCount > 0;
@@ -1726,6 +1735,9 @@ function buildStorageHealthCheck(items, settings, historySummary, authorAttribut
             ...(hasStaleInProgressItems
                 ? { stale_in_progress: staleInProgress }
                 : {}),
+            ...(provenanceResolverOutcomes.length > 0
+                ? { provenance_resolver_outcomes: provenanceResolverOutcomes }
+                : {}),
             ...(historySummary.max_entries !== null
                 ? {
                     compact_policy: {
@@ -1756,6 +1768,7 @@ function collectHealthWarnings(params) {
         ...params.historySummary.warnings,
         ...params.authorAttributionWarnings,
         ...params.staleInProgressWarnings,
+        ...params.provenanceWarnings,
         ...params.locksCheck.warnings,
         ...params.integrityCheck.warnings,
         ...params.historyDriftCheck.warnings,
@@ -1779,6 +1792,7 @@ function buildHealthRemediationSources(params) {
             ...params.historySummary.over_threshold.map((id) => `history_stream_over_compact_threshold:${id}`),
             ...params.authorAttributionWarnings,
             ...params.staleInProgressWarnings,
+            ...params.provenanceWarnings,
         ],
         locks: params.locksCheck.warnings,
         integrity: params.integrityCheck.warnings,
@@ -1865,6 +1879,9 @@ export async function runHealth(global, options = {}) {
         in_progress_status: settings.schema.workflow.in_progress_status,
         threshold_hours: settings.mutation_guard.stale_in_progress_hours,
     }));
+    const provenanceResolverHealth = await scanProvenanceResolverHealth(pmRoot);
+    const provenanceResolverOutcomes = provenanceResolverHealth.outcomes;
+    const provenanceWarnings = provenanceResolverHealth.warnings;
     const locksCheck = await buildLocksCheck(pmRoot);
     const integrityCheck = skipPolicy.skipIntegrity
         ? buildSkippedHealthCheck("integrity")
@@ -1881,7 +1898,7 @@ export async function runHealth(global, options = {}) {
         buildSettingsValuesHealthCheck(settingWarnings),
         telemetryCheck.check,
         extensionCheck.check,
-        buildStorageHealthCheck(items, settings, historySummary, authorAttribution, staleInProgress.scan),
+        buildStorageHealthCheck(items, settings, historySummary, authorAttribution, staleInProgress.scan, provenanceResolverOutcomes),
         locksCheck.check,
         integrityCheck.check,
         historyDriftCheck.check,
@@ -1898,6 +1915,7 @@ export async function runHealth(global, options = {}) {
         historySummary,
         authorAttributionWarnings,
         staleInProgressWarnings: staleInProgress.warnings,
+        provenanceWarnings,
         locksCheck,
         integrityCheck,
         historyDriftCheck,
@@ -1914,6 +1932,7 @@ export async function runHealth(global, options = {}) {
             historySummary,
             authorAttributionWarnings,
             staleInProgressWarnings: staleInProgress.warnings,
+            provenanceWarnings,
             locksCheck,
             integrityCheck,
             historyDriftCheck,
@@ -1964,4 +1983,4 @@ export const _testOnlyHealthCommand = {
     warningCode,
 };
 //# sourceMappingURL=health.js.map
-//# debugId=4efa3db2-6be7-5650-b1c7-d80e125694aa
+//# debugId=97e1ed14-cd36-5910-b829-4619af6080e1

package/dist/sdk/governance/provenance-health.d.ts

@@ -0,0 +1,26 @@
+/** Aggregated resolver attempts for one harness provenance dimension. */
+export interface ProvenanceResolverHealthOutcome {
+    /** Detected harness namespace. */
+    harness: string;
+    /** Provenance dimension resolved by the bounded resolver. */
+    dimension: string;
+    /** Built-in resolver name. */
+    resolver: string;
+    /** Events on which the resolver was actually attempted. */
+    attempts: number;
+    /** Attempted events that produced a bounded value. */
+    successes: number;
+}
+/** Bounded provenance health result suitable for `pm health` adapters. */
+export interface ProvenanceResolverHealthScan {
+    /** Stable resolver outcome aggregates. */
+    outcomes: ProvenanceResolverHealthOutcome[];
+    /** Advisory warnings for attempted resolvers with no success. */
+    warnings: string[];
+    /** Number of nonblank history events inspected. */
+    events_read: number;
+    /** Whether an event or byte ceiling omitted history input. */
+    truncated: boolean;
+}
+/** Scan immutable history without failing over malformed streams owned by integrity checks. */
+export declare function scanProvenanceResolverHealth(pmRoot: string, eventLimit?: number): Promise<ProvenanceResolverHealthScan>;

package/dist/sdk/governance/provenance-health.js

@@ -0,0 +1,139 @@
+/**
+ * @module sdk/governance/provenance-health
+ *
+ * Reads bounded, privacy-safe provenance resolver outcomes for health checks.
+ */
+
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="68d4d540-a878-57f1-b2ae-00b111f94b43")}catch(e){}}();
+import fs from "node:fs/promises";
+import path from "node:path";
+const DEFAULT_PROVENANCE_HISTORY_BYTE_LIMIT = 8_388_608;
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+async function listHistoryFiles(pmRoot) {
+    try {
+        return (await fs.readdir(path.join(pmRoot, "history")))
+            .filter((file) => file.endsWith(".jsonl"))
+            .sort();
+    }
+    catch {
+        return [];
+    }
+}
+async function readHistoryFile(pmRoot, file, byteLimit) {
+    let handle;
+    try {
+        handle = await fs.open(path.join(pmRoot, "history", file), "r");
+        const size = (await handle.stat()).size;
+        const length = Math.min(size, Math.max(0, byteLimit));
+        const buffer = Buffer.alloc(length);
+        const { bytesRead } = await handle.read(buffer, 0, length, 0);
+        const decoded = buffer.subarray(0, bytesRead).toString("utf8");
+        const complete = bytesRead >= size;
+        const finalNewline = decoded.lastIndexOf("\n");
+        let content = decoded;
+        if (!complete) {
+            content = finalNewline === -1 ? "" : decoded.slice(0, finalNewline + 1);
+        }
+        return {
+            content,
+            bytesRead,
+            complete,
+        };
+    }
+    catch {
+        return null;
+    }
+    finally {
+        await handle?.close();
+    }
+}
+function parseHistoryEntry(line) {
+    try {
+        const value = JSON.parse(line);
+        return isRecord(value) ? value : null;
+    }
+    catch {
+        return null;
+    }
+}
+function collectResolverOutcomes(entry, aggregates) {
+    if (!isRecord(entry.context))
+        return;
+    const outcomes = entry.context.agent_provenance_outcomes;
+    if (!isRecord(outcomes) || typeof entry.agent_harness !== "string")
+        return;
+    for (const [dimension, rawOutcome] of Object.entries(outcomes)) {
+        if (!isRecord(rawOutcome) || typeof rawOutcome.resolver !== "string") {
+            continue;
+        }
+        if (rawOutcome.status !== "resolved" && rawOutcome.status !== "failed") {
+            continue;
+        }
+        const key = `${entry.agent_harness}\0${dimension}\0${rawOutcome.resolver}`;
+        const aggregate = aggregates.get(key) ?? {
+            harness: entry.agent_harness,
+            dimension,
+            resolver: rawOutcome.resolver,
+            attempts: 0,
+            successes: 0,
+        };
+        aggregate.attempts += 1;
+        if (rawOutcome.status === "resolved")
+            aggregate.successes += 1;
+        aggregates.set(key, aggregate);
+    }
+}
+function collectHistoryContent(content, aggregates, eventLimit, initialEventsRead) {
+    let eventsRead = initialEventsRead;
+    for (const line of content.split("\n")) {
+        if (line.trim().length === 0)
+            continue;
+        if (eventsRead >= eventLimit)
+            return { eventsRead, truncated: true };
+        eventsRead += 1;
+        const entry = parseHistoryEntry(line);
+        if (entry)
+            collectResolverOutcomes(entry, aggregates);
+    }
+    return { eventsRead, truncated: false };
+}
+/** Scan immutable history without failing over malformed streams owned by integrity checks. */
+export async function scanProvenanceResolverHealth(pmRoot, eventLimit = 10_000) {
+    const aggregates = new Map();
+    let eventsRead = 0;
+    let bytesRead = 0;
+    let truncated = false;
+    for (const file of await listHistoryFiles(pmRoot)) {
+        const history = await readHistoryFile(pmRoot, file, Math.max(0, DEFAULT_PROVENANCE_HISTORY_BYTE_LIMIT - bytesRead));
+        if (history === null)
+            continue;
+        bytesRead += history.bytesRead;
+        const collected = collectHistoryContent(history.content, aggregates, eventLimit, eventsRead);
+        eventsRead = collected.eventsRead;
+        if (collected.truncated) {
+            truncated = true;
+            break;
+        }
+        if (!history.complete) {
+            truncated = true;
+            break;
+        }
+    }
+    const outcomes = [...aggregates.values()].sort((left, right) => left.harness.localeCompare(right.harness) ||
+        left.dimension.localeCompare(right.dimension) ||
+        left.resolver.localeCompare(right.resolver));
+    return {
+        outcomes,
+        warnings: truncated
+            ? []
+            : outcomes
+                .filter((outcome) => outcome.attempts > 0 && outcome.successes === 0)
+                .map((outcome) => `provenance_resolver_zero_success:${outcome.harness}:${outcome.dimension}:${outcome.resolver}:${String(outcome.attempts)}`),
+        events_read: eventsRead,
+        truncated,
+    };
+}
+//# sourceMappingURL=provenance-health.js.map
+//# debugId=68d4d540-a878-57f1-b2ae-00b111f94b43

package/dist/sdk/governance/validate.js

@@ -4,7 +4,7 @@
  * Implements the pm validate command surface and its agent-facing runtime behavior.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="f8048210-9e9f-585b-b0df-a34eca521cc3")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="f4fe9337-9b1c-590f-9071-d685559bb7b9")}catch(e){}}();
 import fs from "node:fs/promises";
 import { realpathSync } from "node:fs";
 import { execFile } from "node:child_process";
@@ -35,7 +35,7 @@ import { buildMissingLinkedPathRows, summarizeMissingLinkedPathRows, } from "../
 import { assertProjectionModeChoice, } from "../output-projection.js";
 import { collectDanglingDependencyReferences } from "../graph/assembly.js";
 import { auditMergeAttributeFence, auditMergeDriverConfiguration, findGitWorkspaceRoot, resolveProjectMergeTypeFolders, } from "../merge/install.js";
-import { listMergeReceipts } from "../merge/receipts.js";
+import { listMergeReceipts, partitionMergeReceipts, } from "../merge/receipts.js";
 import { scanStorageIntegrity } from "./storage-integrity.js";
 import { scanTrackedRuntimeCache } from "./tracked-runtime-cache.js";
 import { scanHistoryAuthorAttribution } from "../author-attribution.js";
@@ -2100,9 +2100,10 @@ async function buildStorageIntegrityCheck(pmRoot, items, typeToFolder, settings)
     }
     const pendingMergeReceipts = gitWorkspaceRoot === null
         ? []
-        : await listMergeReceipts(gitWorkspaceRoot);
-    if (pendingMergeReceipts.length > 0) {
-        warnings.push(`validate_merge_decisions_unreviewed:${pendingMergeReceipts.length}`);
+        : await listMergeReceipts(gitWorkspaceRoot, { includeLossless: true });
+    const { pendingDecisions: pendingMergeDecisions, lossless: losslessMergeReceipts, } = partitionMergeReceipts(pendingMergeReceipts);
+    if (pendingMergeDecisions.length > 0) {
+        warnings.push(`validate_merge_decisions_unreviewed:${pendingMergeDecisions.length}`);
     }
     return {
         check: {
@@ -2115,9 +2116,13 @@ async function buildStorageIntegrityCheck(pmRoot, items, typeToFolder, settings)
                 ...scan,
                 merge_fence: fenceAudit,
                 merge_driver_configuration: mergeDriverAudit,
-                pending_merge_decision_count: pendingMergeReceipts.length,
+                pending_merge_decision_count: pendingMergeDecisions.length,
                 pending_merge_decision_items: [
-                    ...new Set(pendingMergeReceipts.map((receipt) => receipt.item_id)),
+                    ...new Set(pendingMergeDecisions.map((receipt) => receipt.item_id)),
+                ].sort((left, right) => left.localeCompare(right)),
+                lossless_merge_receipt_count: losslessMergeReceipts.length,
+                lossless_merge_receipt_items: [
+                    ...new Set(losslessMergeReceipts.map((receipt) => receipt.item_id)),
                 ].sort((left, right) => left.localeCompare(right)),
                 tracked_runtime_cache: {
                     tracker_relative_root: trackedRuntimeCache.tracker_relative_root,
@@ -2332,4 +2337,4 @@ export async function runValidate(options, global, services = {}) {
 }
 /* c8 ignore stop */
 //# sourceMappingURL=validate.js.map
-//# debugId=f8048210-9e9f-585b-b0df-a34eca521cc3
+//# debugId=f4fe9337-9b1c-590f-9071-d685559bb7b9

package/dist/sdk/governance.d.ts

@@ -12,4 +12,5 @@ export { runUpgrade, type UpgradeCliResult, type UpgradeCommandOptions, type Upg
 export * from "./governance/validate.js";
 export * from "./author-attribution.js";
 export * from "./mutation-guard.js";
+export * from "./governance/provenance-health.js";
 export * from "./similarity.js";

package/dist/sdk/governance.js

@@ -4,7 +4,7 @@
  * Provides validation, health, integrity, and mutation-policy primitives.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="708c1c46-ce32-56ff-812f-71f825ad7ec4")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="8e8c2de1-7bff-57c6-8e71-9c27e9e76eaa")}catch(e){}}();
 export * from "./governance/gc.js";
 export * from "./governance/health.js";
 export { runReindex, } from "./governance/reindex.js";
@@ -14,6 +14,7 @@ export { runUpgrade, } from "./governance/upgrade.js";
 export * from "./governance/validate.js";
 export * from "./author-attribution.js";
 export * from "./mutation-guard.js";
+export * from "./governance/provenance-health.js";
 export * from "./similarity.js";
 //# sourceMappingURL=governance.js.map
-//# debugId=708c1c46-ce32-56ff-812f-71f825ad7ec4
+//# debugId=8e8c2de1-7bff-57c6-8e71-9c27e9e76eaa

package/dist/sdk/graph/assembly.d.ts

@@ -127,7 +127,11 @@ export interface WorkspaceRelationshipAssembly {
     dangling: DanglingDependencyReferenceSummary;
     /** Raw same-identity duplicated dependency rows found before graph dedup. */
     duplicateRows: DuplicateDependencyRow[];
+    /** Raw legacy alias rows grouped by accepted spelling before graph canonicalization. */
+    legacyAliasCounts: Record<string, number>;
 }
+/** Count raw dependency rows that use a registered compatibility alias instead of its canonical kind. */
+export declare function collectLegacyDependencyAliasCounts(items: readonly DependencyReferenceHolder[], registry?: RelationshipKindRegistry): Record<string, number>;
 /**
  * Build the shared workspace relationship graph including missing placeholder
  * nodes. One assembly serves every bounded query in an invocation — dependency

package/dist/sdk/graph/assembly.js

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="8368a519-4c09-540e-b0fb-f74cfdc1d7b2")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="62ec8e0e-658e-5a32-b458-439d5ffd1229")}catch(e){}}();
 import { getActiveExtensionRegistrations } from "../../core/extensions/index.js";
 import { RelationshipGraph, createRelationshipKindRegistry, } from "../relationships.js";
 import { isExternalDependencySourceKind } from "../dependency-provenance.js";
@@ -191,6 +191,25 @@ export function collectExternalDependencyTargetIds(items) {
     }
     return [...targets.values()].sort((left, right) => left.localeCompare(right));
 }
+/** Count raw dependency rows that use a registered compatibility alias instead of its canonical kind. */
+export function collectLegacyDependencyAliasCounts(items, registry = resolveWorkspaceRelationshipKindRegistry()) {
+    const counts = {};
+    for (const item of items) {
+        for (const dependency of item.dependencies ?? []) {
+            if (typeof dependency !== "object" || dependency === null)
+                continue;
+            const rawKind = dependency.kind;
+            if (typeof rawKind !== "string")
+                continue;
+            const normalized = rawKind.trim().toLowerCase().replaceAll("-", "_");
+            const definition = registry.resolve(rawKind);
+            if (definition && normalized !== definition.kind) {
+                counts[normalized] = (counts[normalized] ?? 0) + 1;
+            }
+        }
+    }
+    return Object.fromEntries(Object.entries(counts).sort(([left], [right]) => left.localeCompare(right)));
+}
 /**
  * Build the shared workspace relationship graph including missing placeholder
  * nodes. One assembly serves every bounded query in an invocation — dependency
@@ -277,7 +296,8 @@ export function assembleWorkspaceRelationshipGraph(items, isTerminal, registry)
         missingIdSet: new Set(missingIds.map((id) => id.toLowerCase())),
         dangling,
         duplicateRows: collectDuplicateDependencyRows(safeItems, isTerminal),
+        legacyAliasCounts: collectLegacyDependencyAliasCounts(safeItems, relationshipRegistry),
     };
 }
 //# sourceMappingURL=assembly.js.map
-//# debugId=8368a519-4c09-540e-b0fb-f74cfdc1d7b2
+//# debugId=62ec8e0e-658e-5a32-b458-439d5ffd1229

package/dist/sdk/graph/run.d.ts

@@ -194,6 +194,8 @@ export interface GraphAuditResult {
     affected_subjects_by_code: Record<string, number>;
     /** Structural coverage metrics computed during the audit. */
     profile: RelationshipAuditReport["profile"];
+    /** Stored legacy relationship aliases grouped by spelling; canonical graph counts remain in profile. */
+    legacy_alias_counts?: Record<string, number>;
     /** Ordered findings with bounded evidence samples; absent with summary. */
     findings?: RelationshipAuditReport["findings"];
     /** Signed change since the persisted census baseline; absent when no baseline exists. */