@unbrained/pm-cli 2026.9.5 → 2026.9.6

package/dist/sdk/cli-contracts/flag-contracts.js

@@ -7,7 +7,7 @@
  * flag surface stays single-sourced across the CLI, SDK, and MCP boundaries.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="c6dc8dad-a285-57b8-b2f4-68004903bb8d")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="573d318a-5ebe-5547-8be7-16026a077c84")}catch(e){}}();
 import { normalizeUniqueStringList } from "./string-lists.js";
 import { RESERVED_EXTENSION_HOST_FLAGS } from "../../core/extensions/reserved-host-flags.js";
 import { PM_POSITIONAL_ACTION_CONTRACTS, } from "./grammar-contracts.js";
@@ -67,15 +67,16 @@ export function compactFlagAliasContracts(flagContracts) {
 /** Public contract for subcommand global flag contracts, shared by SDK and presentation-layer consumers. */
 export const SUBCOMMAND_GLOBAL_FLAG_CONTRACTS = RESERVED_EXTENSION_HOST_FLAGS.map((definition) => ({
     flag: definition.flag,
+    reservation_scope: "inherited",
     ...(definition.aliases ? { aliases: [...definition.aliases] } : {}),
     ...(definition.value_name ? { value_name: definition.value_name } : {}),
 }));
 /** Public contract for global flag contracts, shared by SDK and presentation-layer consumers. */
 export const GLOBAL_FLAG_CONTRACTS = [
     ...SUBCOMMAND_GLOBAL_FLAG_CONTRACTS,
-    { flag: "--version", value_type: "boolean" },
-    { flag: "--all", value_type: "boolean", description: "Expand root help to every command." },
-    { flag: "--explain", value_type: "boolean", description: "Expand root help with command guidance." },
+    { flag: "--version", value_type: "boolean", reservation_scope: "root_only" },
+    { flag: "--all", value_type: "boolean", reservation_scope: "root_only", description: "Expand root help to every command." },
+    { flag: "--explain", value_type: "boolean", reservation_scope: "root_only", description: "Expand root help with command guidance." },
 ];
 /** Governance-missing (GH-236) + content-field presence/absence (GH-242) selection-filter flags shared verbatim by the `list` and `search` flag tables. Module-private on purpose — spread into both tables at the same position so the published contract order is unchanged. */
 const GOVERNANCE_AND_CONTENT_FILTER_FLAG_CONTRACTS = [
@@ -984,6 +985,7 @@ export const STATS_FLAG_CONTRACTS = [
 ];
 /** Public contract for duplicate-cluster discovery flags. */
 export const DUPLICATES_FLAG_CONTRACTS = [
+    { flag: "--exhaustive", value_type: "boolean" },
     { flag: "--status", repeatable: true, list: true },
     { flag: "--since" },
     { flag: "--threshold" },
@@ -1943,4 +1945,4 @@ export function toCompletionFlagString(flagContracts, includeGlobal = true) {
     return normalizeUniqueStringList(all).join(" ");
 }
 //# sourceMappingURL=flag-contracts.js.map
-//# debugId=c6dc8dad-a285-57b8-b2f4-68004903bb8d
+//# debugId=573d318a-5ebe-5547-8be7-16026a077c84

package/dist/sdk/cli-contracts/flag-lexicon-contracts.js

@@ -5,7 +5,7 @@
  * per-command growth budgets.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="14b6d270-bdc4-54cf-9c66-da4cb2b0843b")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="3fdfd4c8-a7ef-5469-acf5-bc2577fd141a")}catch(e){}}();
 import { hasSubcommandFlagContractsForCommand, resolveSubcommandFlagContractsForCommand, } from "./flag-contracts.js";
 import { PM_COMMAND_CAPABILITY_CONTRACTS, } from "../agent-capability-contracts.js";
 import { enrichCliFlagInvocationContracts } from "../flag-invocation-contracts.js";
@@ -129,7 +129,8 @@ const PM_COMMAND_FLAG_BUDGET_MAXIMUMS = Object.freeze({
     get: 30,
     graph: 34,
     search: 78,
-    duplicates: 24,
+    // pm-pshhry: one explicit exhaustive-reference mode, with no spare flag allowance.
+    duplicates: 25,
     eval: 25,
     next: 38,
     history: 35,
@@ -344,4 +345,4 @@ export function renderPmFlagLexiconMarkdown() {
     ].join("\n");
 }
 //# sourceMappingURL=flag-lexicon-contracts.js.map
-//# debugId=14b6d270-bdc4-54cf-9c66-da4cb2b0843b
+//# debugId=3fdfd4c8-a7ef-5469-acf5-bc2577fd141a

package/dist/sdk/cli-contracts/grammar-contracts.js

@@ -7,7 +7,7 @@
  * cannot silently bypass the architecture decision.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="4efc5934-7d1b-517b-8b5e-eb2fe14379f2")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="986f1257-822a-5b27-b2e5-a1daae96be71")}catch(e){}}();
 import { resolvePmCommandAlias, } from "./command-aliases.js";
 /** Canonical top-level domains an agent must retain to route pm operations. */
 export const PM_CLI_GRAMMAR_NOUNS = [
@@ -314,6 +314,15 @@ export const PM_POSITIONAL_ACTION_CONTRACTS = [
         description: "Analyze bounded defect-recurrence risk for a proposed change.",
         example: 'pm assurance risk --definition \'{"change":{"files":[]}}\'',
     },
+    {
+        command: "assurance lineages",
+        parent: "assurance",
+        action: "lineages",
+        slots: [],
+        accepted_flags: ["--definition"],
+        description: "Measure all recorded recurrence lineages with bounded evidence rows.",
+        example: 'pm assurance lineages --definition \'{"policy":{"version":1,"evidence_epoch":"2026-01-01T00:00:00.000Z","families":[]}}\'',
+    },
     {
         command: "workspace position",
         parent: "workspace",
@@ -975,4 +984,4 @@ export function verifyPmCliGrammar(commands, aliases = [], destinations = PM_COM
     };
 }
 //# sourceMappingURL=grammar-contracts.js.map
-//# debugId=4efc5934-7d1b-517b-8b5e-eb2fe14379f2
+//# debugId=986f1257-822a-5b27-b2e5-a1daae96be71

package/dist/sdk/cli-contracts/runtime-contracts.js

@@ -4,7 +4,7 @@
  * Implements the pm contracts command surface and its agent-facing runtime behavior.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="1506e8bc-3350-5ef5-a40a-44509eb59317")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="188569e7-c809-5f28-a714-d531f57be1d9")}catch(e){}}();
 import { EXIT_CODE, SETTINGS_DEFAULTS, PmCliError, activateExtensions, getActiveExtensionRegistrations, loadExtensions, pathExists, commandOptionFlagLabel, resolveCommandOptionPolicyState, resolveItemTypeRegistry, resolveRuntimeFieldRegistry, resolveRuntimeStatusRegistry, getSettingsPath, resolvePmRoot, readSettings, } from "../runtime-primitives.js";
 import { buildMcpToolContracts, } from "../../mcp/tool-definitions.js";
 import { ACTIVITY_COMMANDER_STRING_OPTION_CONTRACTS, ACTIVITY_FLAG_CONTRACTS, AGGREGATE_FLAG_CONTRACTS, ASSURANCE_FLAG_CONTRACTS, APPEND_FLAG_CONTRACTS, CALENDAR_COMMANDER_STRING_OPTION_CONTRACTS, CALENDAR_FLAG_CONTRACTS, CLAIM_FLAG_CONTRACTS, CLOSE_TASK_FLAG_CONTRACTS, COMMENTS_FLAG_CONTRACTS, CLOSE_FLAG_CONTRACTS, CLOSE_MANY_FLAG_CONTRACTS, COMPLETION_FLAG_CONTRACTS, CONFIG_FLAG_CONTRACTS, CONTRACTS_FLAG_CONTRACTS, COPY_FLAG_CONTRACTS, CONTEXT_COMMANDER_STRING_OPTION_CONTRACTS, CONTEXT_FLAG_CONTRACTS, CREATE_COMMANDER_REPEATABLE_OPTION_CONTRACTS, CREATE_COMMANDER_STRING_OPTION_CONTRACTS, CREATE_FLAG_CONTRACTS, DELETE_FLAG_CONTRACTS, DEPS_FLAG_CONTRACTS, GRAPH_FLAG_CONTRACTS, DOCS_FLAG_CONTRACTS, EXTENSION_ACTIVATE_FLAG_CONTRACTS, EXTENSION_ADOPT_ALL_FLAG_CONTRACTS, EXTENSION_ADOPT_FLAG_CONTRACTS, EXTENSION_CATALOG_FLAG_CONTRACTS, EXTENSION_DEACTIVATE_FLAG_CONTRACTS, EXTENSION_DESCRIBE_FLAG_CONTRACTS, EXTENSION_DOCTOR_FLAG_CONTRACTS, EXTENSION_EXPLORE_FLAG_CONTRACTS, EXTENSION_FLAG_CONTRACTS, EXTENSION_INIT_FLAG_CONTRACTS, EXTENSION_INSTALL_FLAG_CONTRACTS, EXTENSION_MANAGE_FLAG_CONTRACTS, EXTENSION_MIGRATE_FLAG_CONTRACTS, EXTENSION_RELOAD_FLAG_CONTRACTS, EXTENSION_UNINSTALL_FLAG_CONTRACTS, FILES_FLAG_CONTRACTS, FOCUS_FLAG_CONTRACTS, GC_FLAG_CONTRACTS, GET_FLAG_CONTRACTS, GUIDE_FLAG_CONTRACTS, GLOBAL_FLAG_CONTRACTS, HEALTH_FLAG_CONTRACTS, HISTORY_FLAG_CONTRACTS, HISTORY_COMPACT_FLAG_CONTRACTS, HISTORY_REDACT_FLAG_CONTRACTS, HISTORY_REPAIR_FLAG_CONTRACTS, HISTORY_AUTHOR_ACKNOWLEDGE_FLAG_CONTRACTS, INSTALL_FLAG_CONTRACTS, INIT_FLAG_CONTRACTS, ITEM_COMPLETE_FLAG_CONTRACTS, ITEM_MUTATE_FLAG_CONTRACTS, ITEM_REOPEN_FLAG_CONTRACTS, LEARNINGS_FLAG_CONTRACTS, LIST_COMMANDER_STRING_OPTION_CONTRACTS, LIST_FILTER_FLAG_CONTRACTS, MERGE_FLAG_CONTRACTS, NOTES_FLAG_CONTRACTS, PACKAGE_FLAG_CONTRACTS, PACKAGE_INIT_FLAG_CONTRACTS, PM_EXTENSION_CAPABILITY_CONTRACTS, PM_EXTENSION_POLICY_MODE_CONTRACTS, PM_EXTENSION_POLICY_SURFACE_CONTRACTS, PM_EXTENSION_SANDBOX_PROFILE_CONTRACTS, PM_EXTENSION_SERVICE_NAME_CONTRACTS, PM_EXTENSION_TRUST_MODE_CONTRACTS, PM_OUTPUT_DEGRADATION_STEPS, PLAN_FLAG_CONTRACTS, PM_CORE_COMMAND_NAMES, PM_DEPRECATED_TOOL_ACTIONS, PM_TOOL_ACTIONS, PM_TOOL_PARAMETERS_SCHEMA, REINDEX_FLAG_CONTRACTS, RELEASE_FLAG_CONTRACTS, RESTORE_FLAG_CONTRACTS, SCHEMA_FLAG_CONTRACTS, PROFILE_FLAG_CONTRACTS, SEARCH_COMMANDER_STRING_OPTION_CONTRACTS, EVAL_FLAG_CONTRACTS, WORKSPACE_FLAG_CONTRACTS, NEXT_FLAG_CONTRACTS, SEARCH_FLAG_CONTRACTS, STATS_FLAG_CONTRACTS, DUPLICATES_FLAG_CONTRACTS, START_TASK_FLAG_CONTRACTS, PAUSE_TASK_FLAG_CONTRACTS, TELEMETRY_FLAG_CONTRACTS, TEST_ALL_FLAG_CONTRACTS, TEST_FLAG_CONTRACTS, TEST_RUNS_FLAG_CONTRACTS, UPDATE_COMMANDER_REPEATABLE_OPTION_CONTRACTS, UPDATE_COMMANDER_STRING_OPTION_CONTRACTS, UPDATE_FLAG_CONTRACTS, UPDATE_MANY_FLAG_CONTRACTS, UPGRADE_FLAG_CONTRACTS, VALIDATE_FLAG_CONTRACTS, compactFlagAliasContracts, PM_COMMAND_ALIAS_CONTRACTS, PM_DIAGNOSTIC_OUTPUT_BUDGET_CONTRACTS, resolvePmCommandOutputBudget, } from "../cli-contracts.js";
@@ -228,6 +228,9 @@ const COMMAND_INTENTS = new Map([
     ["aggregate", "Group counts."],
     ["append", "Append body."],
     ["assurance", "Evaluate assurance."],
+    ["assurance derive", "Derive checks from evidence."],
+    ["assurance risk", "Select checks for changes."],
+    ["assurance lineages", "Measure recurrence coverage."],
     ["beads", "Manage Beads interoperability."],
     ["cal", "Manage calendar integration."],
     ["calendar", "Manage calendar integration."],
@@ -2085,4 +2088,4 @@ export const _testOnlyContractsCommand = {
     toRuntimeShortFlagToken,
 };
 //# sourceMappingURL=runtime-contracts.js.map
-//# debugId=1506e8bc-3350-5ef5-a40a-44509eb59317
+//# debugId=188569e7-c809-5f28-a714-d531f57be1d9

package/dist/sdk/cli-contracts/schemas/assurance-definition.d.ts

@@ -1,11 +1,260 @@
-/**
- * @module sdk/cli-contracts/schemas/assurance-definition
- *
- * Defines the strict JSON Schema accepted by assurance definition mutations.
- */
 /** JSON Schema for measurement, assertion, and gate assurance definitions. */
 export declare const ASSURANCE_DEFINITION_SCHEMA: {
     oneOf: ({
+        type: string;
+        additionalProperties: boolean;
+        required: string[];
+        properties: {
+            limit: {
+                type: string;
+                minimum: number;
+                maximum: number;
+            };
+            cursor: {
+                type: string;
+                minLength: number;
+            };
+            change: {
+                additionalProperties: boolean;
+                type: string;
+                properties: {
+                    [k: string]: {
+                        type: string;
+                        items: {
+                            type: string;
+                        };
+                    };
+                };
+            };
+            policy: {
+                type: string;
+                required: string[];
+                properties: {
+                    version: {
+                        const: number;
+                    };
+                    evidence_epoch: {
+                        type: string;
+                        format: string;
+                    };
+                    families: {
+                        type: string;
+                        items: {
+                            type: string;
+                            required: string[];
+                            properties: {
+                                id: {
+                                    type: string;
+                                    pattern: string;
+                                };
+                                version: {
+                                    type: string;
+                                    minimum: number;
+                                };
+                                title: {
+                                    type: string;
+                                    pattern: string;
+                                };
+                                owner_item_id: {
+                                    type: string;
+                                    pattern: string;
+                                };
+                                escape_class: {
+                                    enum: readonly ["production_defect", "nightly_regression", "scanner_finding", "review_caught_late"];
+                                };
+                                triggers: {
+                                    type: string;
+                                    properties: {
+                                        file_patterns: {
+                                            type: string;
+                                            items: {
+                                                type: string;
+                                                maxLength: number;
+                                            };
+                                        };
+                                    };
+                                };
+                                checks: {
+                                    type: string;
+                                    required: string[];
+                                    properties: {
+                                        local: {
+                                            type: string;
+                                            minItems: number;
+                                            items: {
+                                                type: string;
+                                                pattern: string;
+                                            };
+                                        };
+                                        hosted: {
+                                            type: string;
+                                            minItems: number;
+                                            items: {
+                                                type: string;
+                                                pattern: string;
+                                            };
+                                        };
+                                    };
+                                };
+                                negative_control: {
+                                    minProperties: number;
+                                    type: string;
+                                    properties: {
+                                        [k: string]: {
+                                            type: string;
+                                            items: {
+                                                type: string;
+                                            };
+                                        };
+                                    };
+                                };
+                                historical_item_ids: {
+                                    type: string;
+                                    minItems: number;
+                                    items: {
+                                        type: string;
+                                        pattern: string;
+                                    };
+                                };
+                                budget: {
+                                    type: string;
+                                    required: string[];
+                                    properties: {
+                                        [k: string]: {
+                                            type: string;
+                                            minimum: number;
+                                            maximum: number;
+                                        };
+                                    };
+                                };
+                            };
+                        };
+                    };
+                };
+                additionalProperties: boolean;
+            };
+        } | {
+            limit: {
+                type: string;
+                minimum: number;
+                maximum: number;
+            };
+            cursor: {
+                type: string;
+                minLength: number;
+            };
+            uncoveredOnly: {
+                type: string;
+            };
+            policy: {
+                type: string;
+                required: string[];
+                properties: {
+                    version: {
+                        const: number;
+                    };
+                    evidence_epoch: {
+                        type: string;
+                        format: string;
+                    };
+                    families: {
+                        type: string;
+                        items: {
+                            type: string;
+                            required: string[];
+                            properties: {
+                                id: {
+                                    type: string;
+                                    pattern: string;
+                                };
+                                version: {
+                                    type: string;
+                                    minimum: number;
+                                };
+                                title: {
+                                    type: string;
+                                    pattern: string;
+                                };
+                                owner_item_id: {
+                                    type: string;
+                                    pattern: string;
+                                };
+                                escape_class: {
+                                    enum: readonly ["production_defect", "nightly_regression", "scanner_finding", "review_caught_late"];
+                                };
+                                triggers: {
+                                    type: string;
+                                    properties: {
+                                        file_patterns: {
+                                            type: string;
+                                            items: {
+                                                type: string;
+                                                maxLength: number;
+                                            };
+                                        };
+                                    };
+                                };
+                                checks: {
+                                    type: string;
+                                    required: string[];
+                                    properties: {
+                                        local: {
+                                            type: string;
+                                            minItems: number;
+                                            items: {
+                                                type: string;
+                                                pattern: string;
+                                            };
+                                        };
+                                        hosted: {
+                                            type: string;
+                                            minItems: number;
+                                            items: {
+                                                type: string;
+                                                pattern: string;
+                                            };
+                                        };
+                                    };
+                                };
+                                negative_control: {
+                                    minProperties: number;
+                                    type: string;
+                                    properties: {
+                                        [k: string]: {
+                                            type: string;
+                                            items: {
+                                                type: string;
+                                            };
+                                        };
+                                    };
+                                };
+                                historical_item_ids: {
+                                    type: string;
+                                    minItems: number;
+                                    items: {
+                                        type: string;
+                                        pattern: string;
+                                    };
+                                };
+                                budget: {
+                                    type: string;
+                                    required: string[];
+                                    properties: {
+                                        [k: string]: {
+                                            type: string;
+                                            minimum: number;
+                                            maximum: number;
+                                        };
+                                    };
+                                };
+                            };
+                        };
+                    };
+                };
+                additionalProperties: boolean;
+            };
+        };
+    } | {
         type: string;
         additionalProperties: boolean;
         required: string[];

package/dist/sdk/cli-contracts/schemas/assurance-definition.js

@@ -4,7 +4,42 @@
  * Defines the strict JSON Schema accepted by assurance definition mutations.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="19a97f60-3b6e-5653-a652-02aebaf5afdd")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="550e4e06-9e07-59e1-bb47-8233f84885c4")}catch(e){}}();
+import { DEFECT_ESCAPE_CLASSES } from "../../governance/defect-recurrence.js";
+const DEFECT_NONEMPTY_STRING_SCHEMA = { type: "string", pattern: "\\S" };
+const DEFECT_NONEMPTY_STRINGS_SCHEMA = { type: "array", minItems: 1, items: DEFECT_NONEMPTY_STRING_SCHEMA };
+const DEFECT_CHANGE_INPUT_SCHEMA = {
+    type: "object",
+    properties: Object.fromEntries(["files", "package_names", "item_ids", "tags", "error_codes"].map((key) => [key, { type: "array", items: { type: "string" } }])),
+};
+const DEFECT_FAMILY_SCHEMA = {
+    type: "object",
+    required: ["id", "version", "title", "owner_item_id", "escape_class", "triggers", "checks", "negative_control", "historical_item_ids", "budget"],
+    properties: {
+        id: DEFECT_NONEMPTY_STRING_SCHEMA,
+        version: { type: "integer", minimum: 1 },
+        title: DEFECT_NONEMPTY_STRING_SCHEMA,
+        owner_item_id: DEFECT_NONEMPTY_STRING_SCHEMA,
+        escape_class: { enum: DEFECT_ESCAPE_CLASSES },
+        triggers: {
+            type: "object",
+            properties: {
+                ...Object.fromEntries(["package_names", "item_ids", "tags", "error_codes"].map((key) => [key, { type: "array", items: { type: "string" } }])),
+                file_patterns: { type: "array", items: { type: "string", maxLength: 256 } },
+            },
+        },
+        checks: {
+            type: "object", required: ["local", "hosted"],
+            properties: { local: DEFECT_NONEMPTY_STRINGS_SCHEMA, hosted: DEFECT_NONEMPTY_STRINGS_SCHEMA },
+        },
+        negative_control: { ...DEFECT_CHANGE_INPUT_SCHEMA, minProperties: 1 },
+        historical_item_ids: DEFECT_NONEMPTY_STRINGS_SCHEMA,
+        budget: {
+            type: "object", required: ["max_escape_rate", "max_false_positive_rate"],
+            properties: Object.fromEntries(["max_escape_rate", "max_false_positive_rate"].map((key) => [key, { type: "number", minimum: 0, maximum: 1 }])),
+        },
+    },
+};
 const ASSURANCE_VALUE_SCHEMA = {
     oneOf: [{ type: "number" }, { type: "array", items: { type: "string" } }],
 };
@@ -19,6 +54,21 @@ Reflect.set(ITEMS_FIELD_CONDITIONAL_SCHEMA, "then", {
 /** JSON Schema for measurement, assertion, and gate assurance definitions. */
 export const ASSURANCE_DEFINITION_SCHEMA = {
     oneOf: [
+        ...[true, false].map((isRisk) => ({
+            type: "object",
+            additionalProperties: false,
+            required: isRisk ? ["policy", "change"] : ["policy"],
+            properties: {
+                policy: { type: "object", required: ["version", "evidence_epoch", "families"], properties: {
+                        version: { const: 1 },
+                        evidence_epoch: { type: "string", format: "date-time" },
+                        families: { type: "array", items: DEFECT_FAMILY_SCHEMA },
+                    }, additionalProperties: false },
+                ...(isRisk ? { change: { ...DEFECT_CHANGE_INPUT_SCHEMA, additionalProperties: false } } : { uncoveredOnly: { type: "boolean" } }),
+                limit: { type: "integer", minimum: 1, maximum: 100 },
+                cursor: { type: "string", minLength: 1 },
+            },
+        })),
         {
             type: "object",
             additionalProperties: false,
@@ -272,4 +322,4 @@ export const ASSURANCE_DEFINITION_SCHEMA = {
     ],
 };
 //# sourceMappingURL=assurance-definition.js.map
-//# debugId=19a97f60-3b6e-5653-a652-02aebaf5afdd
+//# debugId=550e4e06-9e07-59e1-bb47-8233f84885c4

package/dist/sdk/cli-contracts/tool-parameter-tables.js

@@ -4,7 +4,7 @@
  * Defines SDK command-contract metadata for Tool Parameter Tables.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="4bc19ba8-8c92-5cde-ae59-fe7d73ef9208")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="7f278171-3479-5ce6-a925-da6393463200")}catch(e){}}();
 import { PLAN_HARNESS_VALUES, PLAN_MODE_VALUES, PLAN_STEP_LINK_KIND_VALUES, PLAN_STEP_STATUS_VALUES, } from "../../types/index.js";
 import { PM_READ_OUTPUT_SESSION_MAX_SEEN_ITEM_IDS } from "../read-output-session.js";
 import { ASSURANCE_DEFINITION_SCHEMA } from "./schemas/assurance-definition.js";
@@ -192,6 +192,7 @@ export const PM_TOOL_PARAMETER_PROPERTIES = {
     status: { type: "string" },
     since: { type: "string", format: "date-time" },
     cursorMode: { type: "string", enum: ["batch", "row"] },
+    exhaustive: { type: "boolean" },
     threshold: { type: "number", minimum: 0, maximum: 1 },
     filterStatus: { type: "string" },
     filterType: { type: "string" },
@@ -677,6 +678,7 @@ export const PM_TOOL_ACTION_SCOPED_PARAMETER_PROPERTIES = {
                 "derive",
                 "promote",
                 "risk",
+                "lineages",
             ],
         },
         preset: {
@@ -1190,6 +1192,9 @@ export const PM_TOOL_PARAMETER_METADATA = {
         description: "Inclusive ISO 8601 creation timestamp lower bound for duplicate discovery.",
         examples: ["2026-01-01T00:00:00.000Z"],
     },
+    exhaustive: {
+        description: "Compare every duplicate pair within the disclosed safety bound; default prefix filtering preserves exact recall.",
+    },
     threshold: {
         description: "Minimum duplicate similarity score from zero through one.",
         examples: [0.85],
@@ -1683,10 +1688,10 @@ export const PM_TOOL_PARAMETER_METADATA = {
         description: "For validate action, include full diagnostic ID lists instead of compact summaries.",
     },
     strictExit: {
-        description: "Return non-zero exit when health/validate/extension-doctor warnings are present.",
+        description: "Apply the selected capability's strict exit policy; health also requires merge drivers.",
     },
     failOnWarn: {
-        description: "Alias for strictExit in health/validate/extension-doctor action payloads.",
+        description: "Alias for strictExit in health, validation, history, and managed doctor actions.",
     },
     fixHints: {
         description: "For validate action, add a machine-executable fix_hints[] of pm commands to each failing check's details.",
@@ -1965,10 +1970,17 @@ export const PM_TOOL_PARAMETER_METADATA = {
  * because its single `name` property must cover every action at once.
  */
 export const PM_TOOL_ACTION_SCOPED_PARAMETER_METADATA = {
+    "health": { strictExit: { description: "Return non-zero for a failing health verdict; also require merge drivers." } },
+    "validate": { strictExit: { description: "Return non-zero when validation reports warnings." } },
+    "extension-doctor": { strictExit: { description: "Return non-zero when extension diagnostics report warnings or a non-ok summary." } },
+    "package-doctor": { strictExit: { description: "Return non-zero when package diagnostics report warnings or a non-ok summary." } },
+    "history": { strictExit: { description: "Return non-zero for history verification failures when verify is enabled." } },
+    extension: { strictExit: { description: "For doctor operations, return non-zero on warnings or a non-ok diagnostic summary." } },
+    package: { strictExit: { description: "For doctor operations, return non-zero on warnings or a non-ok diagnostic summary." } },
     assurance: {
         subcommand: {
-            description: "Assurance operation: list, show, put, remove, run, verdicts, presets, apply, derive, promote, or risk.",
-            examples: ["list", "run", "derive", "promote", "risk"],
+            description: "Assurance operation: list, show, put, remove, run, verdicts, presets, apply, derive, promote, risk, or lineages.",
+            examples: ["list", "run", "risk", "lineages"],
         },
         kind: {
             description: "Assurance declaration kind for registry operations: measurement, assertion, or gate.",
@@ -2153,4 +2165,4 @@ export const PM_TOOL_ACTION_SCOPED_PARAMETER_METADATA = {
     },
 };
 //# sourceMappingURL=tool-parameter-tables.js.map
-//# debugId=4bc19ba8-8c92-5cde-ae59-fe7d73ef9208
+//# debugId=7f278171-3479-5ce6-a925-da6393463200

package/dist/sdk/cli-contracts/tool-schema.d.ts

@@ -91,14 +91,14 @@ export interface PmActionToolInputSchemaOptions {
  */
 export declare function buildPmActionToolInputSchema(action: PmToolAction, options?: PmActionToolInputSchemaOptions): Record<string, unknown>;
 /** Canonical version of the action-scoped strict MCP tool-parameters schema (`PM_TOOL_PARAMETERS_SCHEMA`). Exported as the single source of truth so the MCP server, the `pm contracts` command, SDK consumers, and contract tests bind to one version constant. Bump the patch/minor for additive, backward-compatible schema changes; bump the MAJOR for breaking changes — the major also drives the `$id` `tool-parameters-v{major}` slug, so the two never drift. */
-export declare const PM_TOOL_PARAMETERS_SCHEMA_VERSION: "4.12.0";
+export declare const PM_TOOL_PARAMETERS_SCHEMA_VERSION: "4.14.0";
 /**
  * Major component of {@link PM_TOOL_PARAMETERS_SCHEMA_VERSION}, used to build the
  * schema `$id` slug so a breaking version bump renames the document in lockstep.
  */
 export declare const PM_TOOL_PARAMETERS_SCHEMA_MAJOR: string;
 /** Version of the provider-compatible flat tool-parameters schema (`PM_PROVIDER_TOOL_PARAMETERS_SCHEMA`). Tracked separately from the strict schema because the flat projection evolves independently. */
-export declare const PM_PROVIDER_TOOL_PARAMETERS_SCHEMA_VERSION: "1.6.0";
+export declare const PM_PROVIDER_TOOL_PARAMETERS_SCHEMA_VERSION: "1.7.0";
 /** Public contract for pm tool parameters schema, shared by SDK and presentation-layer consumers. */
 export declare const PM_TOOL_PARAMETERS_SCHEMA: Record<string, unknown>;
 declare function toProviderCompatibleParameterDefinition(key: string, definition: unknown): Record<string, unknown>;

package/dist/sdk/cli-contracts/tool-schema.js

@@ -7,7 +7,7 @@
  * consumers from a single source of truth.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="e60db75b-b2b0-5455-93a8-b0cb71a21979")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="e72f4ab4-5bf7-53fb-a3a3-174c4064f6a4")}catch(e){}}();
 import { normalizeUniqueStringList } from "./string-lists.js";
 import { PM_TOOL_ACTIONS } from "./enum-contracts.js";
 import { TOOL_CREATE_OPTION_CONTRACTS, TOOL_SHARED_CREATE_UPDATE_OPTION_CONTRACTS, TOOL_UPDATE_OPTION_CONTRACTS, TOOL_UPDATE_MANY_FILTER_OPTION_CONTRACTS, TOOL_CONTEXT_OPTION_CONTRACTS, TOOL_ACTIVITY_OPTION_CONTRACTS, TOOL_LIST_FILTER_OPTION_CONTRACTS, TOOL_AGGREGATE_OPTION_CONTRACTS, TOOL_SEARCH_FILTER_OPTION_CONTRACTS, TOOL_CLOSE_MANY_FILTER_OPTION_CONTRACTS, } from "./tool-option-contracts.js";
@@ -1123,7 +1123,7 @@ const PM_TOOL_ACTION_SCHEMA_CONTRACTS = {
         ],
     },
     duplicates: {
-        optional: ["status", "since", "threshold", "limit"],
+        optional: ["status", "since", "threshold", "limit", "exhaustive"],
     },
     health: {
         optional: [
@@ -1208,12 +1208,24 @@ const PM_TOOL_ACTION_SCHEMA_CONTRACTS = {
                 required: ["preset", "owner"],
             },
             { property: "subcommand", value: "derive", required: ["owner"] },
+            { property: "subcommand", value: "risk", required: ["definition"] },
+            { property: "subcommand", value: "lineages", required: ["definition"] },
             {
                 property: "subcommand",
                 value: "promote",
                 required: ["id", "enforcement"],
             },
         ],
+        mutuallyExclusiveWhen: [
+            [
+                { property: "subcommand", schema: { const: "risk" } },
+                { property: "definition", schema: { not: { required: ["policy", "change"] } } },
+            ],
+            [
+                { property: "subcommand", schema: { const: "lineages" } },
+                { property: "definition", schema: { anyOf: [{ required: ["change"] }, { not: { required: ["policy"] } }] } },
+            ],
+        ],
     },
     gc: { optional: ["dryRun", "gcScope"] },
     contracts: {
@@ -1568,14 +1580,14 @@ function createLazyContractSchema(build) {
     });
 }
 /** Canonical version of the action-scoped strict MCP tool-parameters schema (`PM_TOOL_PARAMETERS_SCHEMA`). Exported as the single source of truth so the MCP server, the `pm contracts` command, SDK consumers, and contract tests bind to one version constant. Bump the patch/minor for additive, backward-compatible schema changes; bump the MAJOR for breaking changes — the major also drives the `$id` `tool-parameters-v{major}` slug, so the two never drift. */
-export const PM_TOOL_PARAMETERS_SCHEMA_VERSION = "4.12.0";
+export const PM_TOOL_PARAMETERS_SCHEMA_VERSION = "4.14.0";
 /**
  * Major component of {@link PM_TOOL_PARAMETERS_SCHEMA_VERSION}, used to build the
  * schema `$id` slug so a breaking version bump renames the document in lockstep.
  */
 export const PM_TOOL_PARAMETERS_SCHEMA_MAJOR = PM_TOOL_PARAMETERS_SCHEMA_VERSION.split(".")[0];
 /** Version of the provider-compatible flat tool-parameters schema (`PM_PROVIDER_TOOL_PARAMETERS_SCHEMA`). Tracked separately from the strict schema because the flat projection evolves independently. */
-export const PM_PROVIDER_TOOL_PARAMETERS_SCHEMA_VERSION = "1.6.0";
+export const PM_PROVIDER_TOOL_PARAMETERS_SCHEMA_VERSION = "1.7.0";
 /** Public contract for pm tool parameters schema, shared by SDK and presentation-layer consumers. */
 export const PM_TOOL_PARAMETERS_SCHEMA = createLazyContractSchema(() => ({
     $schema: "https://json-schema.org/draft/2020-12/schema",
@@ -1650,4 +1662,4 @@ export const _testOnlyCliContracts = {
     withFlagAliasMetadata,
 };
 //# sourceMappingURL=tool-schema.js.map
-//# debugId=e60db75b-b2b0-5455-93a8-b0cb71a21979
+//# debugId=e72f4ab4-5bf7-53fb-a3a3-174c4064f6a4