@unbrained/pm-cli 2026.8.9 → 2026.8.11

package/dist/sdk/lifecycle/update.js

@@ -4,14 +4,14 @@
  * Implements the pm update command surface and its agent-facing runtime behavior.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="233df258-47b7-571a-b445-9eab0c811702")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="244583b8-2ffd-5da4-a4d3-46396fb354c0")}catch(e){}}();
 import { pathExists, COMMON_MUTATION_COMMAND_OPTION_KEYS, canonicalizeCommandOptionKey, commandOptionFlagLabel, resolveItemTypeRegistry, resolveCommandOptionPolicyState, resolveTypeDefinition, resolveTypeName, validateTypeOptions, normalizeItemId, toItemRecord, buildInvalidTypeError, assertParentReferenceIsNotSelf, normalizeParentReferenceValue, validateMissingParentReference, validateSprintOrReleaseValue, applyAcceptanceCriteriaMutations, applyTagRemovals, assertNoUnknownCsvKeys, createStdinTokenResolver, looksLikeGenericKeyValueEntry, mergeAdditiveTags, parseCsvKv, parseOptionalNonNegativeInteger, parseOptionalNumber, parseTags, splitAcceptanceCriteria, resolvePriority, normalizeStatusInput, isTerminalStatus, collectRuntimeUpdateFieldValues, resolveItemTypesFilePath, resolveRuntimeFieldRegistry, resolveRuntimeStatusRegistry, describeAllowedTransitions, evaluateTransition, resolveTypeWorkflows, EXIT_CODE, PmCliError, stableValueEquals, resolveIsoOrRelative, getActiveExtensionRegistrations, collectRegisteredItemFieldNames, applyRegisteredItemFieldDefaultsAndValidation, parseRegisteredItemFieldAssignments, buildItemNotFoundError, listAllItemMetadataLight, locateItem, mutateItem, readLocatedItem, getSettingsPath, resolvePmRoot, readSettings, resolveAuthor, } from "../runtime-primitives.js";
 import { runClose } from "./close.js";
 import { normalizeRiskInput, normalizeSeverityInput, parseConfidenceInput, parseRegressionInput, } from "./metadata-normalizers.js";
 import { applyLegacyNoneCollectionNormalizers, createLegacyNoneCollectionNormalizers, assertNoLegacyNoneToken, assertNoLegacyNoneTokens, isLegacyNoneToken, } from "./legacy-none-tokens.js";
 import { ensureEnumValue as ensureEnum } from "./recurrence-parsers.js";
 import { parseEventEntries, parseReminderEntries, parseTypeOptionEntries, } from "./repeatable-metadata-parsers.js";
-import { assertDependencyEdgesAllowed, assertValidBareDependencyFlagValue, } from "../dependency-flag-validation.js";
+import { assertDependencyEdgesAllowed, assertDependencyTargetsResolvable, assertValidBareDependencyFlagValue, } from "../dependency-flag-validation.js";
 import { normalizeDependencySeedId, normalizeDependencySourceKind, } from "../dependency-provenance.js";
 import { resolveCanonicalRelationshipKind } from "../relationships.js";
 import { collectNewOrderingCycleWarnings } from "../graph/mutation-advisory.js";
@@ -392,7 +392,8 @@ function normalizeDependencyKindInput(raw) {
         ? (resolveCanonicalRelationshipKind(raw) ?? raw.trim())
         : raw;
 }
-function parseDependencyAdditions(raw, prefix, nowIso, fallbackAuthor) {
+/** Parse dependency additions into their canonical storage representation. */
+export function parseDependencyAdditions(raw, prefix, nowIso, fallbackAuthor) {
     if (!raw) {
         return { additions: [] };
     }
@@ -917,7 +918,20 @@ function validateLinkedArtifactReplacement(params) {
         throw new PmCliError(`${params.replaceFlag} cannot be combined with ${params.clearFlag}`, EXIT_CODE.USAGE);
     }
 }
-function validateReplaceOptions(options) {
+/** Validate mutually exclusive and required update mutation option combinations. */
+export function assertUpdateMutationOptionCombinations(options) {
+    const hasAdditiveAcceptanceCriteriaMutation = (options.addAc?.length ?? 0) > 0 || (options.removeAc?.length ?? 0) > 0;
+    if (options.acceptanceCriteria !== undefined &&
+        hasAdditiveAcceptanceCriteriaMutation) {
+        throw new PmCliError("Cannot combine --acceptance-criteria replacement with --add-ac or --remove-ac. Use --remove-ac and --add-ac together for an atomic one-entry repair.", EXIT_CODE.USAGE, {
+            code: "acceptance_criteria_mutation_conflict",
+            reason: "replacement_and_additive_mutation_combined",
+            nextSteps: [
+                "Use --acceptance-criteria alone to replace the complete list.",
+                "Use --remove-ac <old> --add-ac <new> to repair one criterion without replacing unrelated entries.",
+            ],
+        });
+    }
     if (options.replaceDeps === true &&
         (options.dep === undefined || options.dep.length === 0)) {
         throw new PmCliError("--replace-deps requires at least one --dep entry", EXIT_CODE.USAGE);
@@ -1444,7 +1458,7 @@ function applyTagsAndPlanningMutations(document, context, scalarMutationContext)
 // concurrent branch edits with disjoint additions merge instead of clobbering
 // the whole acceptance_criteria value (tag-API parity). Runs after the scalar
 // mutations so composition with a `--ac` replace uses the replaced base.
-function applyAcceptanceCriteriaAdditiveMutation(document, context, scalarMutationContext, warnings) {
+function applyAcceptanceCriteriaAdditiveMutation(document, context, scalarMutationContext) {
     const addValues = context.options.addAc;
     const removeValues = context.options.removeAc;
     if (!(Array.isArray(addValues) && addValues.length > 0) &&
@@ -1452,8 +1466,18 @@ function applyAcceptanceCriteriaAdditiveMutation(document, context, scalarMutati
         return;
     }
     const mutation = applyAcceptanceCriteriaMutations(splitAcceptanceCriteria(document.metadata.acceptance_criteria), addValues, removeValues);
-    for (const unmatched of mutation.unmatchedRemovals) {
-        warnings.push(`remove_ac_unmatched:${unmatched}`);
+    if (mutation.unmatchedRemovals.length > 0) {
+        throw new PmCliError(`Acceptance criteria removal did not match: ${mutation.unmatchedRemovals.join(", ")}`, EXIT_CODE.NOT_FOUND, {
+            code: "acceptance_criteria_remove_unmatched",
+            reason: "exact_match_not_found",
+            field: "acceptance_criteria",
+            unmatched: mutation.unmatchedRemovals,
+            why: "Lossless removal fails instead of silently applying the remaining mutations when an exact selector is wrong.",
+            nextSteps: [
+                "Read the current acceptance_criteria value and retry with the exact criterion text.",
+                "Use --acceptance-criteria alone only when replacing the complete list is intentional.",
+            ],
+        });
     }
     const nextValue = mutation.criteria.join("; ");
     if (document.metadata.acceptance_criteria === nextValue) {
@@ -1638,7 +1662,7 @@ function mutateUpdateDocument(document, context) {
     applyLogCollectionMutations(document, context, changedFields);
     applyEvidenceCollectionMutations(document, context, changedFields);
     applyTagsAndPlanningMutations(document, context, scalarMutationContext);
-    applyAcceptanceCriteriaAdditiveMutation(document, context, scalarMutationContext, warnings);
+    applyAcceptanceCriteriaAdditiveMutation(document, context, scalarMutationContext);
     applyOwnershipAndIssueMutations(document, context, scalarMutationContext, warnings);
     if (context.options.dep !== undefined ||
         context.options.depRemove !== undefined ||
@@ -1669,6 +1693,10 @@ function mutateUpdateDocument(document, context) {
     const actualChangedFields = [...new Set(changedFields)].filter((field) => field === "body"
         ? document.body !== beforeBody
         : !stableValueEquals(beforeMetadata[field], afterMetadata[field]));
+    if (context.options.acceptanceCriteria !== undefined &&
+        actualChangedFields.includes("acceptance_criteria")) {
+        warnings.push(`acceptance_criteria_replaced:${splitAcceptanceCriteria(beforeMetadata.acceptance_criteria).length}:${splitAcceptanceCriteria(afterMetadata.acceptance_criteria).length}`);
+    }
     return { changedFields: actualChangedFields, warnings };
 }
 /** Implements run update for the public runtime surface of this module. */
@@ -1701,7 +1729,7 @@ export async function runUpdate(id, options, global) {
     const unsetTargets = parseUpdateUnsetTargets(options.unset, runtimeFieldRegistry, extensionFieldNames);
     const clearOptionKeys = new Set(unsetTargets.optionKeys);
     const clearItemMetadataKeys = new Set(unsetTargets.metadataKeys);
-    validateReplaceOptions(options);
+    assertUpdateMutationOptionCombinations(options);
     applyClearCollectionDefinitions({
         definitions: buildClearCollectionDefinitions(options),
         options,
@@ -1715,6 +1743,14 @@ export async function runUpdate(id, options, global) {
     const nowValue = new Date();
     const nowIso = nowValue.toISOString();
     const dependencyUpdates = parseDependencyAdditions(options.dep, settings.id_prefix, nowIso, author);
+    const dependencyTargetWarnings = await assertDependencyTargetsResolvable({
+        pmRoot,
+        dependencies: dependencyUpdates.additions,
+        idPrefix: settings.id_prefix,
+        itemFormat: settings.item_format,
+        typeToFolder: typeRegistry.type_to_folder,
+        allowUnresolved: options.allowUnresolvedDeps,
+    });
     const dependencyRemovals = parseDependencyRemovals(options.depRemove, settings.id_prefix);
     const parsedCommentUpdates = parseLogSeed("--comment", options.comment, nowIso, author);
     const commentUpdates = options.ownershipMetadataBypass === true && parsedCommentUpdates.values
@@ -1837,6 +1873,7 @@ export async function runUpdate(id, options, global) {
         warnings: [
             ...workflowTransitionWarnings,
             ...parentReferenceWarnings,
+            ...dependencyTargetWarnings,
             ...orderingCycleWarnings,
             ...result.warnings,
         ],
@@ -1860,4 +1897,4 @@ export const _testOnlyUpdateCommand = {
     resolveRuntimeUnsetDefinition: (token, registry) => resolveRuntimeUnsetFieldDefinition(token, "update", registry),
 };
 //# sourceMappingURL=update.js.map
-//# debugId=233df258-47b7-571a-b445-9eab0c811702
+//# debugId=244583b8-2ffd-5da4-a4d3-46396fb354c0

package/dist/sdk/merge/index.d.ts

@@ -9,5 +9,5 @@
 export { ITEM_LATEST_TIMESTAMP_FIELDS, ITEM_UNION_COLLECTION_FIELDS, mergeHistoryStreams, mergeItemDocuments, mergeJsonDocuments, mergeRelationshipEventStreams, type HistoryMergeResult, type HistoryMergeStrategy, type ItemDocumentMergeResult, type JsonDocumentMergeResult, type ItemMergeConflictDecision, type MergePreferredSide, type RelationshipStreamMergeResult, } from "./three-way.js";
 export { listMergeReceipts, markMergeReceiptReconciled, runMergeReceiptReport, summarizeMergeReceipt, type MergeDecisionReceipt, type MergeDecisionReceiptSummary, type MergeReceiptReport, } from "./receipts.js";
 export { MERGE_DRIVER_ARTIFACT_VALUES, runMergeDriver, type MergeDriverArtifact, type MergeDriverOptions, type MergeDriverResult, } from "./driver.js";
-export { auditMergeAttributeFence, auditMergeDriverConfiguration, buildMergeAttributePatterns, findGitWorkspaceRoot, PM_GITATTRIBUTES_END, PM_GITATTRIBUTES_START, refreshMergeAttributeFenceIfInstalled, resolveMergeInstallContext, runMergeInstall, type MergeFenceAuditResult, type MergeDriverConfigurationAuditResult, type MergeFenceRefreshOutcome, type MergeInstallOptions, type MergeInstallContextResolution, type MergeInstallResult, } from "./install.js";
+export { auditMergeAttributeFence, auditMergeDriverConfiguration, buildMergeAttributePatterns, findGitWorkspaceRoot, PM_GITATTRIBUTES_END, PM_GITATTRIBUTES_START, PM_GITATTRIBUTES_V2_END, PM_GITATTRIBUTES_V2_START, refreshMergeAttributeFenceIfInstalled, resolveMergeInstallContext, runMergeInstall, type MergeFenceAuditResult, type MergeDriverConfigurationAuditResult, type MergeFenceRefreshOutcome, type MergeInstallOptions, type MergeInstallContextResolution, type MergeInstallResult, } from "./install.js";
 export { runMergeReconcile, type MergeReconcileOptions, type MergeReconcileResult, } from "./reconcile.js";

package/dist/sdk/merge/index.js

@@ -7,11 +7,11 @@
  * this module so packages and hosts can reuse the same merge behavior.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="a8072065-092c-564b-a84f-cf687f795a92")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="687855bf-7432-5691-a809-1f0406b5d8a8")}catch(e){}}();
 export { ITEM_LATEST_TIMESTAMP_FIELDS, ITEM_UNION_COLLECTION_FIELDS, mergeHistoryStreams, mergeItemDocuments, mergeJsonDocuments, mergeRelationshipEventStreams, } from "./three-way.js";
 export { listMergeReceipts, markMergeReceiptReconciled, runMergeReceiptReport, summarizeMergeReceipt, } from "./receipts.js";
 export { MERGE_DRIVER_ARTIFACT_VALUES, runMergeDriver, } from "./driver.js";
-export { auditMergeAttributeFence, auditMergeDriverConfiguration, buildMergeAttributePatterns, findGitWorkspaceRoot, PM_GITATTRIBUTES_END, PM_GITATTRIBUTES_START, refreshMergeAttributeFenceIfInstalled, resolveMergeInstallContext, runMergeInstall, } from "./install.js";
+export { auditMergeAttributeFence, auditMergeDriverConfiguration, buildMergeAttributePatterns, findGitWorkspaceRoot, PM_GITATTRIBUTES_END, PM_GITATTRIBUTES_START, PM_GITATTRIBUTES_V2_END, PM_GITATTRIBUTES_V2_START, refreshMergeAttributeFenceIfInstalled, resolveMergeInstallContext, runMergeInstall, } from "./install.js";
 export { runMergeReconcile, } from "./reconcile.js";
 //# sourceMappingURL=index.js.map
-//# debugId=a8072065-092c-564b-a84f-cf687f795a92
+//# debugId=687855bf-7432-5691-a809-1f0406b5d8a8

package/dist/sdk/merge/install.d.ts

@@ -5,6 +5,10 @@ import { resolveSourceContextWritePolicy } from "../environment/source-context.j
 export declare const PM_GITATTRIBUTES_START = "# pm-cli:merge-drivers:start";
 /** Closing marker for the pm-owned merge-driver `.gitattributes` block. */
 export declare const PM_GITATTRIBUTES_END = "# pm-cli:merge-drivers:end";
+/** Opening marker for the versioned fence that older releases leave untouched. */
+export declare const PM_GITATTRIBUTES_V2_START = "# pm-cli:merge-drivers:v2:start";
+/** Closing marker for the versioned fence that older releases leave untouched. */
+export declare const PM_GITATTRIBUTES_V2_END = "# pm-cli:merge-drivers:v2:end";
 /** Documents the merge install options payload exchanged by command, SDK, and package integrations. */
 export interface MergeInstallOptions {
     /** Preview the `.gitattributes` and `git config` changes without writing anything. */

package/dist/sdk/merge/install.js

@@ -8,7 +8,7 @@
  * mutations refresh the fenced block automatically once it is installed.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="cb6dc38e-b317-5739-83ff-cf459b8bb31e")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="94d2a7a8-ce00-5689-b2f6-3d4813234b55")}catch(e){}}();
 import { readFile, realpath, writeFile } from "node:fs/promises";
 import { execFile } from "node:child_process";
 import path from "node:path";
@@ -30,6 +30,10 @@ const execFileAsync = promisify(execFile);
 export const PM_GITATTRIBUTES_START = "# pm-cli:merge-drivers:start";
 /** Closing marker for the pm-owned merge-driver `.gitattributes` block. */
 export const PM_GITATTRIBUTES_END = "# pm-cli:merge-drivers:end";
+/** Opening marker for the versioned fence that older releases leave untouched. */
+export const PM_GITATTRIBUTES_V2_START = "# pm-cli:merge-drivers:v2:start";
+/** Closing marker for the versioned fence that older releases leave untouched. */
+export const PM_GITATTRIBUTES_V2_END = "# pm-cli:merge-drivers:v2:end";
 const MERGE_FENCE_LOCK_ID = "merge-fence";
 /**
  * Quote one argument for the shell used by Git merge-driver configuration.
@@ -235,6 +239,13 @@ export function buildMergeAttributePatterns(trackerRelativeRoot, typeFolders) {
     patterns.push(`${quoteGitAttributePattern(`${prefix}extensions/.managed-extensions.json`)} merge=pm-json`);
     return patterns;
 }
+function removeManagedBlock(content, startMarker, endMarker) {
+    const start = content.indexOf(startMarker);
+    const end = content.indexOf(endMarker);
+    return start >= 0 && end > start
+        ? `${content.slice(0, start)}${content.slice(end + endMarker.length)}`
+        : content.replace(startMarker, "").replace(endMarker, "");
+}
 async function reconcileGitattributesBlock(workspaceRoot, patterns, dryRun) {
     const gitattributesPath = path.join(workspaceRoot, ".gitattributes");
     let current = "";
@@ -247,17 +258,11 @@ async function reconcileGitattributesBlock(workspaceRoot, patterns, dryRun) {
         }
     }
     const block = [
-        PM_GITATTRIBUTES_START,
+        PM_GITATTRIBUTES_V2_START,
         ...patterns,
-        PM_GITATTRIBUTES_END,
+        PM_GITATTRIBUTES_V2_END,
     ].join("\n");
-    const start = current.indexOf(PM_GITATTRIBUTES_START);
-    const end = current.indexOf(PM_GITATTRIBUTES_END);
-    const withoutManagedBlock = start >= 0 && end > start
-        ? `${current.slice(0, start)}${current.slice(end + PM_GITATTRIBUTES_END.length)}`
-        : current
-            .replace(PM_GITATTRIBUTES_START, "")
-            .replace(PM_GITATTRIBUTES_END, "");
+    const withoutManagedBlock = removeManagedBlock(removeManagedBlock(current, PM_GITATTRIBUTES_V2_START, PM_GITATTRIBUTES_V2_END), PM_GITATTRIBUTES_START, PM_GITATTRIBUTES_END);
     const prefix = withoutManagedBlock.trimEnd();
     const next = `${prefix.length > 0 ? `${prefix}\n\n` : ""}${block}\n`;
     if (next === current) {
@@ -290,7 +295,8 @@ export async function auditMergeAttributeFence(pmRoot, typeFolders) {
         const candidate = path.join(directory, ".gitattributes");
         try {
             const raw = await readFile(candidate, "utf8");
-            if (raw.includes(PM_GITATTRIBUTES_START)) {
+            if (raw.includes(PM_GITATTRIBUTES_V2_START) ||
+                raw.includes(PM_GITATTRIBUTES_START)) {
                 fenceDirectory = directory;
                 fenceContent = raw;
                 break;
@@ -314,11 +320,16 @@ export async function auditMergeAttributeFence(pmRoot, typeFolders) {
         };
     }
     const fencePath = path.join(fenceDirectory, ".gitattributes");
-    const start = fenceContent.indexOf(PM_GITATTRIBUTES_START);
-    const end = fenceContent.indexOf(PM_GITATTRIBUTES_END);
+    const usesV2 = fenceContent.includes(PM_GITATTRIBUTES_V2_START);
+    const startMarker = usesV2
+        ? PM_GITATTRIBUTES_V2_START
+        : PM_GITATTRIBUTES_START;
+    const endMarker = usesV2 ? PM_GITATTRIBUTES_V2_END : PM_GITATTRIBUTES_END;
+    const start = fenceContent.indexOf(startMarker);
+    const end = fenceContent.indexOf(endMarker);
     const committed = end > start
         ? fenceContent
-            .slice(start + PM_GITATTRIBUTES_START.length, end)
+            .slice(start + startMarker.length, end)
             .split("\n")
             .map((line) => line.trim())
             .filter((line) => line.length > 0)
@@ -408,7 +419,8 @@ export async function refreshMergeAttributeFenceIfInstalled(pmRoot) {
             }
             throw error;
         }
-        if (!current.includes(PM_GITATTRIBUTES_START)) {
+        if (!current.includes(PM_GITATTRIBUTES_V2_START) &&
+            !current.includes(PM_GITATTRIBUTES_START)) {
             return { status: "not_installed", path: gitattributesPath };
         }
         // Re-read after acquiring the dedicated fence lock so every concurrent
@@ -548,4 +560,4 @@ export async function installMergeFence(options) {
     };
 }
 //# sourceMappingURL=install.js.map
-//# debugId=cb6dc38e-b317-5739-83ff-cf459b8bb31e
+//# debugId=94d2a7a8-ce00-5689-b2f6-3d4813234b55

package/dist/sdk/merge/receipts.d.ts

@@ -25,6 +25,8 @@ export interface MergeDecisionReceipt {
     created_at: string;
     /** Reconciliation timestamp, when consumed. */
     reconciled_at?: string;
+    /** Whether decision values are recoverable locally or represented by hashes only. */
+    value_availability?: "clone_local" | "hash_only";
 }
 /** Privacy-safe receipt summary suitable for committed history context. */
 export interface MergeDecisionReceiptSummary {
@@ -78,6 +80,7 @@ export declare function writeMergeReceipt(params: {
 export declare function listMergeReceipts(cwd: string, options?: {
     includeReconciled?: boolean;
     includeLossless?: boolean;
+    pmRoot?: string;
 }): Promise<MergeDecisionReceipt[]>;
 /** Split merge provenance into receipts with discarded values and receipts whose composition was lossless. */
 export declare function partitionMergeReceipts(receipts: MergeDecisionReceipt[]): {

package/dist/sdk/merge/receipts.js

@@ -7,7 +7,7 @@
  * value for the coordinator that performed the merge.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="3ccde5c2-f743-52ac-a3fd-9590f720e1b3")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="59863597-bf57-5d96-9cba-983443e5b209")}catch(e){}}();
 import { execFile } from "node:child_process";
 import { randomUUID } from "node:crypto";
 import { readdir, readFile } from "node:fs/promises";
@@ -31,6 +31,21 @@ async function resolveReceiptDirectory(cwd) {
         return null;
     }
 }
+async function resolveTrackerRootFromItemPath(cwd, itemPath) {
+    let directory = path.dirname(path.resolve(cwd, itemPath));
+    for (let depth = 0; depth < 12; depth += 1) {
+        if (await pathExists(path.join(directory, "settings.json")))
+            return directory;
+        const parent = path.dirname(directory);
+        if (parent === directory)
+            break;
+        directory = parent;
+    }
+    return null;
+}
+function durableReceiptDirectory(pmRoot) {
+    return path.join(pmRoot, "merge-receipts");
+}
 function receiptFileName(id) {
     return `${id}.json`;
 }
@@ -47,11 +62,25 @@ export function summarizeMergeReceipt(receipt) {
         conflict_resolution: receipt.conflict_resolution,
         decisions: receipt.decisions.map((decision) => ({
             field: decision.field,
-            retained_hash: sha256Hex(stableStringify(decision.retained)),
-            discarded_hash: sha256Hex(stableStringify(decision.discarded)),
+            retained_hash: isPrehashedValue(decision.retained) ??
+                sha256Hex(stableStringify(decision.retained)),
+            discarded_hash: isPrehashedValue(decision.discarded) ??
+                sha256Hex(stableStringify(decision.discarded)),
         })),
     };
 }
+function isPrehashedValue(value) {
+    if (typeof value !== "object" ||
+        value === null ||
+        Array.isArray(value) ||
+        !("pm_value_hash" in value)) {
+        return undefined;
+    }
+    const hash = value.pm_value_hash;
+    return typeof hash === "string" && /^[a-f0-9]{64}$/u.test(hash)
+        ? hash
+        : undefined;
+}
 /** Persist one item-driver outcome in the clone-local Git directory. */
 export async function writeMergeReceipt(params) {
     const directory = await resolveReceiptDirectory(params.cwd);
@@ -77,18 +106,34 @@ export async function writeMergeReceipt(params) {
         decisions: structuredClone(params.decisions),
         state: "pending",
         created_at: nowIso(),
+        value_availability: "clone_local",
     };
     await ensureDir(directory);
     await writeFileAtomic(path.join(directory, receiptFileName(receipt.id)), `${JSON.stringify(receipt, null, 2)}\n`);
+    const trackerRoot = await resolveTrackerRootFromItemPath(params.cwd, receipt.item_path);
+    if (trackerRoot !== null) {
+        const durableDirectory = durableReceiptDirectory(trackerRoot);
+        const summary = summarizeMergeReceipt(receipt);
+        const durableReceipt = {
+            ...receipt,
+            decisions: summary.decisions.map((decision) => ({
+                field: decision.field,
+                base: null,
+                ours: null,
+                theirs: null,
+                retained: { pm_value_hash: decision.retained_hash },
+                discarded: { pm_value_hash: decision.discarded_hash },
+            })),
+            value_availability: "hash_only",
+        };
+        await ensureDir(durableDirectory);
+        await writeFileAtomic(path.join(durableDirectory, receiptFileName(receipt.id)), `${JSON.stringify(durableReceipt, null, 2)}\n`);
+    }
     return receipt;
 }
-/** Read clone-local receipts with explicit reconciled/lossless classification controls. */
-export async function listMergeReceipts(cwd, options = {}) {
-    const directory = await resolveReceiptDirectory(cwd);
-    if (directory === null || !(await pathExists(directory))) {
+async function readReceiptsFromDirectory(directory, options) {
+    if (!(await pathExists(directory)))
         return [];
-    }
-    const receipts = [];
     let names;
     try {
         names = await readdir(directory);
@@ -96,10 +141,10 @@ export async function listMergeReceipts(cwd, options = {}) {
     catch {
         return [];
     }
+    const receipts = [];
     for (const name of names.sort((left, right) => left.localeCompare(right))) {
-        if (!name.endsWith(".json")) {
+        if (!name.endsWith(".json"))
             continue;
-        }
         try {
             const parsed = JSON.parse(await readFile(path.join(directory, name), "utf8"));
             const normalizedReceipt = {
@@ -109,17 +154,28 @@ export async function listMergeReceipts(cwd, options = {}) {
             if (normalizedReceipt.version === 1 &&
                 (options.includeReconciled || normalizedReceipt.state === "pending") &&
                 (options.includeLossless !== false ||
-                    (Array.isArray(normalizedReceipt.decisions) &&
-                        normalizedReceipt.decisions.length > 0))) {
+                    normalizedReceipt.decisions.length > 0)) {
                 receipts.push(normalizedReceipt);
             }
         }
         catch {
-            // A damaged clone-local receipt is reported by merge report through the
-            // omitted count once a future schema version adds richer diagnostics.
+            // Malformed evidence remains an integrity concern for a future schema.
         }
     }
-    return receipts.sort((left, right) => left.created_at.localeCompare(right.created_at));
+    return receipts;
+}
+/** Read clone-local receipts with explicit reconciled/lossless classification controls. */
+export async function listMergeReceipts(cwd, options = {}) {
+    const directory = await resolveReceiptDirectory(cwd);
+    const local = directory === null
+        ? []
+        : await readReceiptsFromDirectory(directory, options);
+    const trackerRoot = options.pmRoot ?? path.join(cwd, ".agents", "pm");
+    const durable = await readReceiptsFromDirectory(durableReceiptDirectory(trackerRoot), options);
+    const receipts = new Map(durable.map((receipt) => [receipt.id, receipt]));
+    for (const receipt of local)
+        receipts.set(receipt.id, receipt);
+    return [...receipts.values()].sort((left, right) => left.created_at.localeCompare(right.created_at));
 }
 /** Split merge provenance into receipts with discarded values and receipts whose composition was lossless. */
 export function partitionMergeReceipts(receipts) {
@@ -139,6 +195,14 @@ export async function markMergeReceiptReconciled(cwd, receipt) {
         return;
     }
     await writeFileAtomic(path.join(directory, receiptFileName(receipt.id)), `${JSON.stringify({ ...receipt, state: "reconciled", reconciled_at: nowIso() }, null, 2)}\n`);
+    const trackerRoot = await resolveTrackerRootFromItemPath(cwd, receipt.item_path);
+    if (trackerRoot !== null) {
+        const durablePath = path.join(durableReceiptDirectory(trackerRoot), receiptFileName(receipt.id));
+        if (await pathExists(durablePath)) {
+            const durable = JSON.parse(await readFile(durablePath, "utf8"));
+            await writeFileAtomic(durablePath, `${JSON.stringify({ ...durable, state: "reconciled", reconciled_at: nowIso() }, null, 2)}\n`);
+        }
+    }
 }
 /** Report pending or historical clone-local merge decisions. */
 export async function runMergeReceiptReport(options) {
@@ -154,4 +218,4 @@ export async function runMergeReceiptReport(options) {
     };
 }
 //# sourceMappingURL=receipts.js.map
-//# debugId=3ccde5c2-f743-52ac-a3fd-9590f720e1b3
+//# debugId=59863597-bf57-5d96-9cba-983443e5b209

package/dist/sdk/output-projection.js

@@ -4,7 +4,7 @@
  * Declares machine-readable field-group omissions for bounded command results.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="4a108e0e-0dfc-55c4-9f14-7395cfbac456")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="630b48a7-aa38-529c-a272-14b7c748101c")}catch(e){}}();
 import { EXIT_CODE } from "../core/shared/constants.js";
 import { PmCliError } from "../core/shared/errors.js";
 /** Universal selector for results carrying a {@link ReadRowContract}. */
@@ -283,11 +283,31 @@ function resolveContextReceipt(result) {
 function resolveGetReceipt(result) {
     if (!isRecord(result.item))
         return undefined;
-    const groups = ["children", "claim_state", "linked"].map((name) => ({
+    const item = result.item;
+    const itemGroups = [
+        "comments",
+        "notes",
+        "learnings",
+        "files",
+        "tests",
+        "docs",
+        "reminders",
+        "events",
+    ];
+    const resultGroups = [
+        "body",
+        "children",
+        "claim_state",
+        "linked",
+        "schedule",
+    ];
+    const groups = ["body", ...itemGroups, ...resultGroups.slice(1)].map((name) => ({
         name,
         restore_with: `--fields ${name}`,
     }));
-    return createOutputOmissionReceipt(groups, new Set(groups.flatMap(({ name }) => (result[name] === undefined ? [] : [name]))));
+    return createOutputOmissionReceipt(groups, new Set(groups.flatMap(({ name }) => !Object.hasOwn(itemGroups.includes(name) ? item : result, name)
+        ? []
+        : [name])));
 }
 function resolveListOrSearchReceipt(result) {
     if (!isRecord(result.projection))
@@ -358,4 +378,4 @@ export function attachOutputOmissionReceipt(command, result) {
         : { ...disclosedResult, omission_receipt: receipt };
 }
 //# sourceMappingURL=output-projection.js.map
-//# debugId=4a108e0e-0dfc-55c4-9f14-7395cfbac456
+//# debugId=630b48a7-aa38-529c-a272-14b7c748101c

package/dist/sdk/provenance.d.ts

@@ -5,6 +5,7 @@
  */
 import type { HistoryEntry } from "../types.js";
 import { type HarnessSignalDescriptor } from "../core/shared/author.js";
+import type { AgentModelSource } from "../core/shared/author.js";
 /** One declared provenance dimension and the built-in harnesses that can supply it. */
 export interface AgentProvenanceDescriptorCoverage {
     /** Stable provenance dimension name. */
@@ -36,6 +37,34 @@ export interface AgentProvenanceDimensionCoverage extends AgentModelProvenanceCo
     /** Stable provenance dimension being summarized. */
     dimension: string;
 }
+/** Semantic attribution coverage for one harness and role/topic dimension. */
+export interface AgentSemanticAttributionCoverage {
+    /** Stable detected harness namespace. */
+    harness: string;
+    /** Semantic dimension being measured. */
+    dimension: "role" | "topic";
+    /** History events attributed to the harness. */
+    entries: number;
+    /** Events carrying a non-empty semantic observation. */
+    observed: number;
+    /** Observed events grouped by precedence source. */
+    by_source: Partial<Record<AgentModelSource, number>>;
+    /** Observed fraction across all harness events. */
+    coverage: number;
+}
+/** Result of applying a corpus-facing semantic coverage threshold. */
+export interface AgentSemanticAttributionCoverageGate {
+    /** Whether every sampled harness/dimension row met the threshold. */
+    passed: boolean;
+    /** Required observed fraction. */
+    minimum_coverage: number;
+    /** Required event count before a row participates. */
+    minimum_entries: number;
+    /** Deterministically ordered coverage rows. */
+    rows: AgentSemanticAttributionCoverage[];
+    /** Harness/dimension keys that failed the threshold. */
+    failures: string[];
+}
 /** One declared or inferred episode group with deterministically nested children. */
 export interface AgentEpisodeGroup {
     /** Stable declared or inferred group key. */
@@ -68,6 +97,15 @@ export declare function summarizeAgentModelProvenance(entries: readonly Pick<His
  * every requested provenance dimension without consulting mutable state.
  */
 export declare function summarizeAgentProvenance(entries: readonly Pick<HistoryEntry, "agent_harness" | "agent_model" | "agent_provenance">[], dimensions?: readonly string[], minimumExplicitSample?: number): AgentProvenanceDimensionCoverage[];
+/**
+ * Measure role/topic availability by harness and precedence source, then apply
+ * an explicit ratchet. Empty or synthetic corpora therefore remain useful
+ * negative controls instead of silently passing a production coverage gate.
+ */
+export declare function evaluateSemanticAttributionCoverage(entries: readonly Pick<HistoryEntry, "agent_harness" | "agent_provenance">[], options?: {
+    minimumCoverage?: number;
+    minimumEntries?: number;
+}): AgentSemanticAttributionCoverageGate;
 /**
  * Group immutable history by declared episode keys. Legacy entries fall back
  * to their privacy-safe agent instance, or to a deterministic author cohort.