@unbrained/pm-cli 2026.9.5 → 2026.9.6

package/dist/sdk/environment/host-environment-errors.js

@@ -1,142 +1,9 @@
 /**
  * @module sdk/host-environment-errors
- *
- * Classifies host filesystem/resource failures at SDK boundaries without
- * leaking local paths or swallowing genuine implementation defects.
+ * Public SDK compatibility surface for path-redacted host filesystem refusals.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="1c74b5a9-67b8-597c-98de-a4487691081f")}catch(e){}}();
-import { constants as osConstants } from "node:os";
-import { EXIT_CODE } from "../../core/shared/constants.js";
-import { PmCliError } from "../../core/shared/errors.js";
-const HOST_ENVIRONMENT_FAULTS = new Map([
-    [
-        "EACCES",
-        {
-            summary: "was denied filesystem permission",
-            recovery: "Grant the required filesystem access, then retry.",
-            category: "permission",
-        },
-    ],
-    [
-        "EDQUOT",
-        {
-            summary: "exceeded the filesystem quota",
-            recovery: "Raise or reclaim the filesystem quota, then retry.",
-            category: "capacity",
-        },
-    ],
-    [
-        "EMFILE",
-        {
-            summary: "exhausted the process file-descriptor limit",
-            recovery: "Close unused file handles or raise the process limit, then retry.",
-            category: "resource",
-        },
-    ],
-    [
-        "ENFILE",
-        {
-            summary: "exhausted the host file-descriptor limit",
-            recovery: "Free host file descriptors or raise the host limit, then retry.",
-            category: "resource",
-        },
-    ],
-    [
-        "ENOMEM",
-        {
-            summary: "ran out of available memory",
-            recovery: "Free memory or reduce concurrent work, then retry.",
-            category: "resource",
-        },
-    ],
-    [
-        "ENOSPC",
-        {
-            summary: "ran out of storage space",
-            recovery: "Free storage on the filesystem holding the project, then retry.",
-            category: "capacity",
-        },
-    ],
-    [
-        "EPERM",
-        {
-            summary: "was denied by the host permission policy",
-            recovery: "Grant the required filesystem permission, then retry.",
-            category: "permission",
-        },
-    ],
-    [
-        "EROFS",
-        {
-            summary: "targeted a read-only filesystem",
-            recovery: "Use a writable project filesystem or remount it read-write, then retry.",
-            category: "permission",
-        },
-    ],
-]);
-const OPERATION_PATTERN = /^[a-z][a-z0-9_]{0,63}$/u;
-const HOST_ENVIRONMENT_ERRNO_NAMES = new Map([
-    [osConstants.errno.EACCES, "EACCES"],
-    [osConstants.errno.EDQUOT, "EDQUOT"],
-    [osConstants.errno.EMFILE, "EMFILE"],
-    [osConstants.errno.ENFILE, "ENFILE"],
-    [osConstants.errno.ENOMEM, "ENOMEM"],
-    [osConstants.errno.ENOSPC, "ENOSPC"],
-    [osConstants.errno.EPERM, "EPERM"],
-    [osConstants.errno.EROFS, "EROFS"],
-].filter(([errno]) => Number.isInteger(errno)));
-const HOST_ENVIRONMENT_FAULT_CODES = {
-    capacity: { code: "host_environment_capacity_fault" },
-    permission: { code: "host_environment_permission_fault" },
-    resource: { code: "host_environment_resource_fault" },
-};
-/** Return a declared host errno only when it represents recoverable environment state. */
-export function classifyHostEnvironmentFault(error) {
-    if (typeof error !== "object" || error === null) {
-        return null;
-    }
-    const errorRecord = error;
-    if (typeof errorRecord.code === "string" &&
-        HOST_ENVIRONMENT_FAULTS.has(errorRecord.code)) {
-        return errorRecord.code;
-    }
-    if (typeof errorRecord.errno !== "number" ||
-        !Number.isInteger(errorRecord.errno)) {
-        return null;
-    }
-    return HOST_ENVIRONMENT_ERRNO_NAMES.get(Math.abs(errorRecord.errno)) ?? null;
-}
-/** Translate one known host fault into a stable path-redacted SDK refusal. */
-export function translateHostEnvironmentFault(error, operation, options = {}) {
-    const errno = classifyHostEnvironmentFault(error);
-    if (errno === null)
-        return null;
-    if (!OPERATION_PATTERN.test(operation)) {
-        throw new PmCliError("Host environment operation labels must be bounded identifiers.", EXIT_CODE.USAGE, { code: "host_environment_operation_invalid", field: "operation" });
-    }
-    const fault = HOST_ENVIRONMENT_FAULTS.get(errno);
-    return new PmCliError(`Host filesystem operation ${operation} ${fault.summary}.`, EXIT_CODE.GENERIC_FAILURE, {
-        code: options.codes?.[fault.category] ??
-            HOST_ENVIRONMENT_FAULT_CODES[fault.category].code,
-        reason: errno,
-        required: fault.recovery,
-        why: options.why ??
-            "The operating system refused a required project filesystem operation.",
-        nextSteps: [fault.recovery, ...(options.nextSteps ?? [])],
-        ...(options.suggestedRetry
-            ? { recovery: { suggested_retry: options.suggestedRetry } }
-            : {}),
-    });
-}
-/** Run one SDK filesystem stage and translate only declared host faults. */
-export async function withHostEnvironmentBoundary(operation, run, options = {}) {
-    try {
-        return await run();
-    }
-    catch (error) {
-        throw translateHostEnvironmentFault(error, operation, options) ?? error;
-    }
-}
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="8a0d8f6e-f4ff-5a0c-9205-d28e03df72b9")}catch(e){}}();
+export { classifyHostEnvironmentFault, translateHostEnvironmentFault, withHostEnvironmentBoundary, } from "../../core/fs/host-environment-errors.js";
 //# sourceMappingURL=host-environment-errors.js.map
-//# debugId=1c74b5a9-67b8-597c-98de-a4487691081f
+//# debugId=8a0d8f6e-f4ff-5a0c-9205-d28e03df72b9

package/dist/sdk/extension/install-runtime.js

@@ -4,7 +4,8 @@
  * Provides cross-platform extension copy safety and owner-bound install locks.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="263602a2-c000-5df7-80d2-6f095985496f")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="b100fde9-412b-587b-85ac-532117e2253f")}catch(e){}}();
+import { withHostEnvironmentBoundary } from "../../core/fs/host-environment-errors.js";
 import { randomUUID } from "node:crypto";
 import fs from "node:fs/promises";
 import os from "node:os";
@@ -88,7 +89,7 @@ export const resolveCanonicalExtensionInstallDestination = async (destinationDir
     return path.join(canonicalDestinationParent, path.basename(resolvedDestination));
 };
 /** Copy an extension without recursively copying a destination nested below its source. */
-export const copyExtensionDirectoryWithoutSelfNesting = async (sourceDirectory, destinationDirectory, copyDirectory, temporaryDirectory = os.tmpdir()) => {
+export const copyExtensionDirectoryWithoutSelfNesting = async (sourceDirectory, destinationDirectory, copyDirectory, temporaryDirectory = os.tmpdir()) => withHostEnvironmentBoundary("extension_install_copy", async () => {
     const resolvedSource = path.resolve(sourceDirectory);
     const canonicalSource = await fs
         .realpath(resolvedSource)
@@ -148,13 +149,15 @@ export const copyExtensionDirectoryWithoutSelfNesting = async (sourceDirectory,
     finally {
         await fs.rm(stagingRoot, { recursive: true, force: true });
     }
-};
+});
 /** Copy one extension directory with bounded transient-race retries. */
 export const copyExtensionDirectoryForInstall = async (sourceDirectory, destinationDirectory, copyDirectory = fs.cp) => {
     for (let attempt = 1; attempt <= EXTENSION_INSTALL_COPY_ATTEMPTS; attempt += 1) {
         try {
-            await fs.rm(destinationDirectory, { recursive: true, force: true });
-            await copyExtensionDirectoryWithoutSelfNesting(sourceDirectory, destinationDirectory, copyDirectory);
+            await withHostEnvironmentBoundary("extension_install_copy", async () => {
+                await fs.rm(destinationDirectory, { recursive: true, force: true });
+                await copyExtensionDirectoryWithoutSelfNesting(sourceDirectory, destinationDirectory, copyDirectory);
+            });
             return;
         }
         catch (error) {
@@ -308,4 +311,4 @@ export const withExtensionInstallLock = async (settingsRoot, destinationDirector
     }
 };
 //# sourceMappingURL=install-runtime.js.map
-//# debugId=263602a2-c000-5df7-80d2-6f095985496f
+//# debugId=b100fde9-412b-587b-85ac-532117e2253f

package/dist/sdk/extension/install-snapshot.js

@@ -4,7 +4,8 @@
  * Captures and restores extension files and metadata around install persistence.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="98b47a2f-d48a-5c90-8b88-3f33bdd1c826")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="58ec3f16-267a-5a31-abd2-df46bb82b716")}catch(e){}}();
+import { withHostEnvironmentBoundary } from "../../core/fs/host-environment-errors.js";
 import fs from "node:fs/promises";
 import path from "node:path";
 import { getSettingsPath } from "../../core/store/paths.js";
@@ -17,7 +18,7 @@ export const readOptionalMetadataFile = async (filePath) => fs.readFile(filePath
     throw error;
 });
 /** Capture extension files and metadata before applying an install mutation. */
-export const captureExtensionInstallSnapshot = async (selectedRoot, settingsRoot, destinationDirectory, destinationExists, backupDirectory) => {
+export const captureExtensionInstallSnapshot = async (selectedRoot, settingsRoot, destinationDirectory, destinationExists, backupDirectory) => withHostEnvironmentBoundary("extension_install_backup", async () => {
     const managedStatePath = resolveManagedExtensionStatePath(selectedRoot);
     const settingsPath = getSettingsPath(settingsRoot);
     const [managedStateContents, settingsContents] = await Promise.all([
@@ -39,9 +40,9 @@ export const captureExtensionInstallSnapshot = async (selectedRoot, settingsRoot
         settingsPath,
         settingsContents,
     };
-};
+});
 /** Restore directory and metadata snapshots after a partially persisted install. */
-export const restoreExtensionInstallSnapshot = async (snapshot) => {
+export const restoreExtensionInstallSnapshot = async (snapshot) => withHostEnvironmentBoundary("extension_install_rollback", async () => {
     await fs.rm(snapshot.destinationDirectory, { recursive: true, force: true });
     if (snapshot.destinationExists) {
         await fs.cp(snapshot.backupDirectory, snapshot.destinationDirectory, {
@@ -61,6 +62,6 @@ export const restoreExtensionInstallSnapshot = async (snapshot) => {
             await fs.writeFile(filePath, contents);
         }
     }
-};
+});
 //# sourceMappingURL=install-snapshot.js.map
-//# debugId=98b47a2f-d48a-5c90-8b88-3f33bdd1c826
+//# debugId=58ec3f16-267a-5a31-abd2-df46bb82b716

package/dist/sdk/generated/generated-error-code-catalog-part-1.js

@@ -1,6 +1,6 @@
 /** Generated partition 1 of the exhaustive error-code catalog. */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="2d5b7e84-f6a6-5c48-a72b-a929ab2186f7")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="35c194c8-a164-5c90-9baa-9f2fc25c9bfb")}catch(e){}}();
 export const PM_ERROR_CODE_CATALOG_PART_1 = [
     {
         code: "acceptance_criteria_mutation_conflict",
@@ -690,8 +690,8 @@ export const PM_ERROR_CODE_CATALOG_PART_1 = [
         exit_code: 4,
         class: "conflict",
         recovery: "Inspect the structured error guidance and retry the suggested command.",
-        sources: ["sdk/similarity.ts"],
-        emitting_commands: ["*"],
+        sources: ["sdk/query/duplicate-candidates.ts"],
+        emitting_commands: ["duplicate-candidates"],
         canonical_code: "duplicate_sweep_cost_limit",
         aliases: [],
     },
@@ -1374,7 +1374,7 @@ export const PM_ERROR_CODE_CATALOG_PART_1 = [
         exit_code: 1,
         class: "generic_failure",
         recovery: "Inspect the structured error guidance and retry the suggested command.",
-        sources: ["sdk/environment/host-environment-errors.ts"],
+        sources: ["core/fs/host-environment-errors.ts"],
         emitting_commands: ["*"],
         canonical_code: "host_environment_capacity_fault",
         aliases: [],
@@ -1386,7 +1386,7 @@ export const PM_ERROR_CODE_CATALOG_PART_1 = [
         exit_code: 2,
         class: "usage",
         recovery: "Inspect the structured error guidance and retry the suggested command.",
-        sources: ["sdk/environment/host-environment-errors.ts"],
+        sources: ["core/fs/host-environment-errors.ts"],
         emitting_commands: ["*"],
         canonical_code: "host_environment_operation_invalid",
         aliases: [],
@@ -1398,7 +1398,7 @@ export const PM_ERROR_CODE_CATALOG_PART_1 = [
         exit_code: 1,
         class: "generic_failure",
         recovery: "Inspect the structured error guidance and retry the suggested command.",
-        sources: ["sdk/environment/host-environment-errors.ts"],
+        sources: ["core/fs/host-environment-errors.ts"],
         emitting_commands: ["*"],
         canonical_code: "host_environment_permission_fault",
         aliases: [],
@@ -1410,7 +1410,7 @@ export const PM_ERROR_CODE_CATALOG_PART_1 = [
         exit_code: 1,
         class: "generic_failure",
         recovery: "Inspect the structured error guidance and retry the suggested command.",
-        sources: ["sdk/environment/host-environment-errors.ts"],
+        sources: ["core/fs/host-environment-errors.ts"],
         emitting_commands: ["*"],
         canonical_code: "host_environment_resource_fault",
         aliases: [],
@@ -2222,4 +2222,4 @@ export const PM_ERROR_CODE_CATALOG_PART_1 = [
     },
 ];
 //# sourceMappingURL=generated-error-code-catalog-part-1.js.map
-//# debugId=2d5b7e84-f6a6-5c48-a72b-a929ab2186f7
+//# debugId=35c194c8-a164-5c90-9baa-9f2fc25c9bfb

package/dist/sdk/governance/assurance-action.d.ts

@@ -3,8 +3,9 @@ import { type AssuranceBundleMutationReceipt, type AssuranceDeclaration, type As
 import { type AssuranceDerivedProposal, type AssurancePreset, type AssurancePresetId } from "./assurance-presets.js";
 import { type CreateAssuranceWorkspaceContextOptions } from "./assurance-runtime.js";
 import { type DefectChangeRiskReport } from "./defect-recurrence.js";
+import { type DefectRecurrenceCoverageReport } from "./defect-recurrence-coverage.js";
 /** Assurance registry and evaluation verbs shared by every transport. */
-export declare const ASSURANCE_ACTIONS: readonly ["list", "show", "put", "remove", "run", "verdicts", "presets", "apply", "derive", "promote", "risk"];
+export declare const ASSURANCE_ACTIONS: readonly ["list", "show", "put", "remove", "run", "verdicts", "presets", "apply", "derive", "promote", "risk", "lineages"];
 /** Assurance declaration kinds shared by every transport. */
 export declare const ASSURANCE_DECLARATION_KINDS: readonly ["measurement", "assertion", "gate"];
 /** Assurance action verb. */
@@ -52,7 +53,7 @@ export interface AssuranceActionRuntimeOptions {
     workspace?: Omit<CreateAssuranceWorkspaceContextOptions, "tree_id" | "trigger">;
 }
 /** Result union returned by transport-neutral assurance execution. */
-export type AssuranceActionResult = AssuranceDeclaration | AssuranceMutationReceipt | AssuranceGateVerdict | AssuranceBundleMutationReceipt | AssurancePreset | DefectChangeRiskReport | {
+export type AssuranceActionResult = AssuranceDeclaration | AssuranceMutationReceipt | AssuranceGateVerdict | AssuranceBundleMutationReceipt | AssurancePreset | DefectChangeRiskReport | DefectRecurrenceCoverageReport | {
     items: AssuranceDerivedProposal[];
     count: number;
     applied?: AssuranceBundleMutationReceipt;

package/dist/sdk/governance/assurance-action.js

@@ -4,7 +4,7 @@
  * Normalizes the assurance action vocabulary once for CLI, SDK, and MCP hosts.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="f66a964d-1352-5523-ab91-5177d0d93ce8")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="811330eb-207d-5e27-9786-72c1fba7d4c9")}catch(e){}}();
 import { createHash } from "node:crypto";
 import { EXIT_CODE } from "../../core/shared/constants.js";
 import { PmCliError } from "../../core/shared/errors.js";
@@ -18,6 +18,8 @@ import { resolvePmRoot } from "../runtime-primitives.js";
 import { parseRuntimeInteger, readRuntimeString } from "../runtime-input.js";
 import { analyzeDefectChangeRisk, buildDefectRecurrenceIndex, parseDefectChangeRiskRequest, } from "./defect-recurrence.js";
 import { defectRecurrenceItemSignals } from "./defect-recurrence-signals.js";
+import { readDefectRecurrenceRecord } from "./defect-recurrence-graph.js";
+import { analyzeDefectRecurrenceCoverage, parseDefectRecurrenceCoverageRequest, } from "./defect-recurrence-coverage.js";
 import { createUnknownSubcommandError } from "../agent/subcommand-recovery.js";
 let riskIndexCache;
 /** Assurance registry and evaluation verbs shared by every transport. */
@@ -33,6 +35,7 @@ export const ASSURANCE_ACTIONS = [
     "derive",
     "promote",
     "risk",
+    "lineages",
 ];
 /** Assurance declaration kinds shared by every transport. */
 export const ASSURANCE_DECLARATION_KINDS = [
@@ -245,9 +248,9 @@ function throwRiskUsageError(error) {
         : "assurance risk request is invalid", EXIT_CODE.USAGE);
 }
 /** Parse JSON or object risk definitions without wrapping workspace failures. */
-function parseRiskActionRequest(input) {
+function parseRecurrenceActionRequest(input) {
     if (input.limit !== undefined) {
-        throw new PmCliError("assurance risk does not accept --limit; set limit inside the risk definition", EXIT_CODE.USAGE);
+        throw new PmCliError(`assurance ${input.action} does not accept --limit; set limit inside the definition`, EXIT_CODE.USAGE);
     }
     let definition = input.definition;
     if (typeof definition === "string") {
@@ -255,11 +258,13 @@ function parseRiskActionRequest(input) {
             definition = JSON.parse(definition);
         }
         catch (error) {
-            throw new PmCliError("assurance risk definition must be valid JSON", EXIT_CODE.USAGE, { reason: error instanceof Error ? error.message : "invalid_json" });
+            throw new PmCliError(`assurance ${input.action} definition must be valid JSON`, EXIT_CODE.USAGE, { reason: error instanceof Error ? error.message : "invalid_json" });
         }
     }
     try {
-        return parseDefectChangeRiskRequest(definition);
+        return input.action === "lineages"
+            ? parseDefectRecurrenceCoverageRequest(definition)
+            : parseDefectChangeRiskRequest(definition);
     }
     catch (error) {
         return throwRiskUsageError(error);
@@ -285,7 +290,10 @@ function buildCachedRiskIndex(pmRoot, request, items) {
     const itemFingerprints = new Map(items.map((item) => [
         item.id,
         createHash("sha256")
-            .update(stableStringify(defectRecurrenceItemSignals(item)))
+            .update(stableStringify([
+            defectRecurrenceItemSignals(item),
+            readDefectRecurrenceRecord(item),
+        ]))
             .digest("hex"),
     ]));
     const reusable = cached?.policy_serialized === policySerialized ? cached : undefined;
@@ -304,13 +312,17 @@ function buildCachedRiskIndex(pmRoot, request, items) {
     return index;
 }
 /** Evaluate one serialized change-risk request against authoritative PM metadata. */
-async function runRiskAction(input, pmRoot) {
-    const request = parseRiskActionRequest(input);
+async function runRecurrenceAction(input, pmRoot) {
+    const request = parseRecurrenceActionRequest(input);
     const context = await createAssuranceWorkspaceContext(pmRoot, {
+        strict_read: true,
         include_history: false,
         resolve_tree: false,
     });
     try {
+        if (!("change" in request)) {
+            return analyzeDefectRecurrenceCoverage(request.policy, context.items, request);
+        }
         return analyzeDefectChangeRisk(buildCachedRiskIndex(pmRoot, request, context.items), request.change, { cursor: request.cursor, limit: request.limit });
     }
     catch (error) {
@@ -333,8 +345,8 @@ export async function runAssuranceAction(input, global = {}, runtime = {}) {
     if (action === "run") {
         return runGateAction(input, pmRoot, runtime);
     }
-    if (action === "risk") {
-        return runRiskAction(input, pmRoot);
+    if (["risk", "lineages"].includes(action)) {
+        return runRecurrenceAction(input, pmRoot);
     }
     const kind = parseKind(input.kind);
     if (action === "list")
@@ -397,4 +409,4 @@ export function runAssuranceDispatch(args, options, global) {
     }, global);
 }
 //# sourceMappingURL=assurance-action.js.map
-//# debugId=f66a964d-1352-5523-ab91-5177d0d93ce8
+//# debugId=811330eb-207d-5e27-9786-72c1fba7d4c9

package/dist/sdk/governance/assurance-runtime.d.ts

@@ -3,6 +3,8 @@ import type { AssuranceEvaluationContext, AssuranceExternalMeasurementResult, As
 export type AssuranceProviderResolver = (source: AssuranceProviderSource) => Promise<AssuranceExternalMeasurementResult>;
 /** Workspace binding options. */
 export interface CreateAssuranceWorkspaceContextOptions {
+    /** Refuse incomplete item or directory reads through the public strict-list contract. */
+    strict_read?: boolean;
     /** Explicit tree identity; otherwise the current Git commit is used. */
     tree_id?: string;
     /** Load immutable item history for history-backed measurements. */

package/dist/sdk/governance/assurance-runtime.js

@@ -5,12 +5,13 @@
  * and verdict semantics in the host-neutral assurance module.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="f9c26dab-b2fb-5ca0-b575-682b4b0bb830")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="cdf52e5c-86cf-5540-bc08-bfc274a1fdf9")}catch(e){}}();
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 import { runGraph } from "../graph/run.js";
 import { runHealth } from "./health.js";
 import { runValidate } from "./validate.js";
+import { runList } from "../query/list.js";
 import { AssuranceSourceResolutionError } from "./assurance-mutation-error.js";
 import { getActiveExtensionRegistrations, resolvePortableWorkspaceContext, } from "../../core/extensions/index.js";
 import { resolveRegisteredAssuranceMeasurementProvider } from "../../core/extensions/runtime-registrations.js";
@@ -161,7 +162,9 @@ export async function createAssuranceWorkspaceContext(pmRoot, options = {}) {
     const settings = await readSettings(pmRoot);
     const typeRegistry = resolveItemTypeRegistry(settings);
     const statusRegistry = resolveRuntimeStatusRegistry(settings.schema);
-    const metadata = await listAllItemMetadata(pmRoot, settings.item_format, typeRegistry.type_to_folder, undefined, settings.schema);
+    const metadata = options.strict_read === true
+        ? (await runList(undefined, { status: "all", full: true, noTruncate: true, strictRead: true }, { path: pmRoot })).items
+        : await listAllItemMetadata(pmRoot, settings.item_format, typeRegistry.type_to_folder, undefined, settings.schema);
     const items = metadata.map((item) => ({
         ...item,
         id: item.id,
@@ -233,4 +236,4 @@ export async function createAssuranceWorkspaceContext(pmRoot, options = {}) {
     };
 }
 //# sourceMappingURL=assurance-runtime.js.map
-//# debugId=f9c26dab-b2fb-5ca0-b575-682b4b0bb830
+//# debugId=cdf52e5c-86cf-5540-bc08-bfc274a1fdf9

package/dist/sdk/governance/defect-recurrence-coverage.d.ts

@@ -0,0 +1,93 @@
+import type { AssuranceItemRecord } from "./assurance.js";
+import { type DefectEscapeClass, type DefectRecurrencePolicy } from "./defect-recurrence.js";
+/** Bounded recurrence-evidence selection shared by SDK and transport hosts. */
+export interface DefectRecurrenceCoverageOptions {
+    /** Maximum item rows returned, from 1 through 100; defaults to 25. */
+    limit?: number;
+    /** Continuation tied to the policy, complete recurrence evidence, and filter. */
+    cursor?: string;
+    /** Return only unregistered or missing items; totals always describe the full graph. */
+    uncoveredOnly?: boolean;
+}
+/** Serialized request for the shared assurance lineages action. */
+export interface DefectRecurrenceCoverageRequest extends DefectRecurrenceCoverageOptions {
+    /** Project- or package-owned versioned family policy. */
+    policy: DefectRecurrencePolicy;
+}
+/** Validate lineage-policy and paging input at the untrusted transport boundary. */
+export declare function parseDefectRecurrenceCoverageRequest(value: unknown): DefectRecurrenceCoverageRequest;
+/** One registered, unregistered, or missing member of a recorded recurrence lineage. */
+export interface DefectRecurrenceCoverageRow {
+    /** Recorded item id or missing local reference. */
+    item_id: string;
+    /** Current component identity, derived from its lexically first item id. */
+    lineage_id: string;
+    /** Full component size, independent of the returned page. */
+    lineage_item_count: number;
+    /** Explicitly registered families covering this component. */
+    family_ids: string[];
+    /** Whether the local item exists in the supplied authoritative corpus. */
+    present: boolean;
+    /** Stable named finding when registration or the target record is absent. */
+    finding?: "unregistered_recurrence_item" | "missing_recurrence_item";
+}
+/** Complete population counts and bounded recurrence-policy evidence. */
+export interface DefectRecurrenceCoverageReport {
+    /** False if any recorded recurrence member is unregistered or missing. */
+    ok: boolean;
+    /** Identity of policy, recurrence evidence, and selected filter. */
+    fingerprint: string;
+    /** Current page; every row remains connected to its complete lineage. */
+    items: DefectRecurrenceCoverageRow[];
+    /** Selected row count before pagination. */
+    total: number;
+    /** Whether another page remains. */
+    has_more: boolean;
+    /** Cursor for the next page when has_more is true. */
+    next_cursor?: string;
+    /** Independent denominator including covered, uncovered, and absent local references. */
+    population: {
+        /** Explicit statement that the denominator is not the family registry. */
+        scope: "all_recorded_recurrence_items";
+        /** Unique participating local ids, including missing references. */
+        item_count: number;
+        /** Connected recurrence components. */
+        lineage_count: number;
+        /** Unique directed local recurrence edges. */
+        edge_count: number;
+        /** Existing members with an explicitly seeded registered family. */
+        covered_item_count: number;
+        /** Existing or missing members without a seeded registered family. */
+        uncovered_item_count: number;
+        /** Referenced ids missing from the authoritative item corpus. */
+        missing_item_count: number;
+        /** Members with an explicit recognized escape classification. */
+        classified_item_count: number;
+        /** Members without a recognized classification; never counted as non-escapes. */
+        unclassified_item_count: number;
+        /** Recorded classification counts over the entire population. */
+        class_counts: Record<DefectEscapeClass, number>;
+        /** Production-defect fraction only when every participant is classified; null otherwise. */
+        escape_rate: number | null;
+        /** Known production defects divided by the entire population, explicitly a lower bound. */
+        escape_rate_lower_bound: number | null;
+    };
+    /** Budgets on the policy's families cannot certify uncovered or unclassified members. */
+    budget_scope: "registered_families_only";
+    /** Declared performance accounting; connectivity never uses a depth cutoff. */
+    cost: {
+        /** Input item records inspected. */
+        items_scanned: number;
+        /** Recurrence edges traversed. */
+        edges_scanned: number;
+        /** Maximum emitted item rows. */
+        row_limit: number;
+    };
+    /** Stable machine selector. */
+    row_contract: {
+        row_keys: ["items"];
+        jq_selector: ".items[]";
+    };
+}
+/** Evaluate all local recurs_from lineages before applying any result-row limit. */
+export declare function analyzeDefectRecurrenceCoverage(policy: DefectRecurrencePolicy, items: readonly AssuranceItemRecord[], options?: DefectRecurrenceCoverageOptions): DefectRecurrenceCoverageReport;