@unbrained/pm-cli 2026.9.6 → 2026.9.8

package/dist/sdk/generated-error-code-catalog.js

@@ -1,17 +1,2 @@
-/**
- * @module sdk/generated-error-code-catalog
- *
- * Generated by scripts/generate-error-code-catalog.mjs. Do not edit manually.
- */
-
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="f617ee39-b463-5482-af64-8dc86fe28e71")}catch(e){}}();
-import { definePmErrorCodeCatalog } from "./error-code-catalog.js";
-import { PM_ERROR_CODE_CATALOG_PART_1 } from "./generated/generated-error-code-catalog-part-1.js";
-import { PM_ERROR_CODE_CATALOG_PART_2 } from "./generated/generated-error-code-catalog-part-2.js";
-/** Exhaustive catalog generated from literal error guidance declarations. */
-export const PM_ERROR_CODE_CATALOG = definePmErrorCodeCatalog([
-    ...PM_ERROR_CODE_CATALOG_PART_1,
-    ...PM_ERROR_CODE_CATALOG_PART_2,
-]);
+!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="70a7dc18-ab34-5e17-83eb-f5fac0b7fdd9")}catch(e2){}})();import{definePmErrorCodeCatalog}from"./error-code-catalog.js";import{PM_ERROR_CODE_CATALOG_PART_1}from"./generated/generated-error-code-catalog-part-1.js";import{PM_ERROR_CODE_CATALOG_PART_2}from"./generated/generated-error-code-catalog-part-2.js";const PM_ERROR_CODE_CATALOG=definePmErrorCodeCatalog([...PM_ERROR_CODE_CATALOG_PART_1,...PM_ERROR_CODE_CATALOG_PART_2]);export{PM_ERROR_CODE_CATALOG};
 //# sourceMappingURL=generated-error-code-catalog.js.map
-//# debugId=f617ee39-b463-5482-af64-8dc86fe28e71

package/dist/sdk/governance/assurance-action-contracts.js

@@ -1,5 +1,2 @@
-
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="443beddb-37c9-5244-a157-e07624e4a6d2")}catch(e){}}();
-export {};
+!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="50fef7d4-7bff-54df-9044-7771edb4337d")}catch(e2){}})();
 //# sourceMappingURL=assurance-action-contracts.js.map
-//# debugId=443beddb-37c9-5244-a157-e07624e4a6d2

package/dist/sdk/governance/assurance-action.js

@@ -1,412 +1,2 @@
-/**
- * @module sdk/assurance-action
- *
- * Normalizes the assurance action vocabulary once for CLI, SDK, and MCP hosts.
- */
-
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="811330eb-207d-5e27-9786-72c1fba7d4c9")}catch(e){}}();
-import { createHash } from "node:crypto";
-import { EXIT_CODE } from "../../core/shared/constants.js";
-import { PmCliError } from "../../core/shared/errors.js";
-import { stableStringify } from "../../core/shared/serialization.js";
-import { ASSURANCE_GATE_TRIGGERS, evaluateAssuranceGate, getAssuranceDeclaration, listAssuranceDeclarations, listAssuranceVerdicts, putAssuranceDeclaration, recordAssuranceVerdict, removeAssuranceDeclaration, } from "./assurance.js";
-import { ASSURANCE_PRESET_IDS, acceptAssuranceProposals, applyAssurancePreset, createAssurancePreset, deriveAssuranceProposals, promoteAssuranceAssertion, } from "./assurance-presets.js";
-import { MAX_ASSURANCE_VERDICT_LIMIT } from "./assurance-limits.js";
-import { normalizeAssuranceEvaluation, normalizeAssuranceMutation, } from "./assurance-mutation-error.js";
-import { createAssuranceWorkspaceContext, } from "./assurance-runtime.js";
-import { resolvePmRoot } from "../runtime-primitives.js";
-import { parseRuntimeInteger, readRuntimeString } from "../runtime-input.js";
-import { analyzeDefectChangeRisk, buildDefectRecurrenceIndex, parseDefectChangeRiskRequest, } from "./defect-recurrence.js";
-import { defectRecurrenceItemSignals } from "./defect-recurrence-signals.js";
-import { readDefectRecurrenceRecord } from "./defect-recurrence-graph.js";
-import { analyzeDefectRecurrenceCoverage, parseDefectRecurrenceCoverageRequest, } from "./defect-recurrence-coverage.js";
-import { createUnknownSubcommandError } from "../agent/subcommand-recovery.js";
-let riskIndexCache;
-/** Assurance registry and evaluation verbs shared by every transport. */
-export const ASSURANCE_ACTIONS = [
-    "list",
-    "show",
-    "put",
-    "remove",
-    "run",
-    "verdicts",
-    "presets",
-    "apply",
-    "derive",
-    "promote",
-    "risk",
-    "lineages",
-];
-/** Assurance declaration kinds shared by every transport. */
-export const ASSURANCE_DECLARATION_KINDS = [
-    "measurement",
-    "assertion",
-    "gate",
-];
-function parseAction(value) {
-    if (ASSURANCE_ACTIONS.includes(value)) {
-        return value;
-    }
-    throw createUnknownSubcommandError({
-        command_path: "assurance",
-        token: value,
-        allowed: ASSURANCE_ACTIONS,
-        display_name: "assurance action",
-    });
-}
-/** Throw the shared structured usage refusal for a missing assurance operand. */
-function missingAssuranceArgument(operand, detail, example) {
-    throw new PmCliError(detail, EXIT_CODE.USAGE, {
-        code: "missing_required_argument",
-        required: `Provide the missing assurance operand: ${operand}.`,
-        examples: [example],
-        recovery: { missing: [operand] },
-    });
-}
-function parseKind(value) {
-    if (!value) {
-        return missingAssuranceArgument("kind", `Assurance declaration kind is required. Expected: ${ASSURANCE_DECLARATION_KINDS.join(", ")}`, "pm assurance list measurement");
-    }
-    if (ASSURANCE_DECLARATION_KINDS.includes(value)) {
-        return value;
-    }
-    throw new PmCliError(`Assurance declaration kind is required. Expected: ${ASSURANCE_DECLARATION_KINDS.join(", ")}`, EXIT_CODE.USAGE);
-}
-function parsePreset(value) {
-    if (!value) {
-        return missingAssuranceArgument("preset", `Assurance preset is required. Expected: ${ASSURANCE_PRESET_IDS.join(", ")}`, "pm assurance apply software-delivery --owner <pm-item-id>");
-    }
-    if (ASSURANCE_PRESET_IDS.includes(value)) {
-        return value;
-    }
-    throw new PmCliError(`Assurance preset is required. Expected: ${ASSURANCE_PRESET_IDS.join(", ")}`, EXIT_CODE.USAGE);
-}
-function requireOwner(input) {
-    if (input.owner?.trim())
-        return input.owner.trim();
-    return missingAssuranceArgument("owner", "assurance preset and derivation actions require --owner <pm-item-id>", "pm assurance apply software-delivery --owner <pm-item-id>");
-}
-function parseDefinition(kind, value) {
-    let parsed = value;
-    if (typeof value === "string") {
-        if (!value.trim())
-            parsed = undefined;
-        else {
-            try {
-                parsed = JSON.parse(value);
-            }
-            catch (error) {
-                throw new PmCliError("assurance definition must be valid JSON", EXIT_CODE.USAGE, { reason: error instanceof Error ? error.message : "invalid_json" });
-            }
-        }
-    }
-    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
-        throw new PmCliError("assurance put requires a JSON object definition", EXIT_CODE.USAGE);
-    }
-    if (kind === "measurement")
-        return parsed;
-    if (kind === "assertion")
-        return parsed;
-    return parsed;
-}
-async function readDocument(pmRoot) {
-    const [measurements, assertions, gates] = await Promise.all([
-        listAssuranceDeclarations(pmRoot, "measurement"),
-        listAssuranceDeclarations(pmRoot, "assertion"),
-        listAssuranceDeclarations(pmRoot, "gate"),
-    ]);
-    return {
-        version: 1,
-        measurements: measurements.items,
-        assertions: assertions.items,
-        gates: gates.items,
-    };
-}
-/** Apply the common id-only projection without weakening the full audit receipt. */
-function projectMutationReceipt(receipt, idOnly) {
-    return idOnly === true ? { id: receipt.id } : receipt;
-}
-async function authorizedDecisionIds(pmRoot, definition) {
-    const decisionId = definition.authorization_decision;
-    if (!decisionId)
-        return [];
-    const context = await createAssuranceWorkspaceContext(pmRoot, {
-        include_history: false,
-        resolve_tree: false,
-    });
-    const decision = context.items.find((item) => item.id === decisionId);
-    const terminalStatuses = new Set(context.terminal_statuses);
-    if (!decision ||
-        decision.type.toLowerCase() !== "decision" ||
-        !terminalStatuses.has(decision.status)) {
-        throw new PmCliError(`Assurance authorization ${decisionId} must name a terminal Decision item`, EXIT_CODE.USAGE);
-    }
-    return [decision.id];
-}
-/** Validate and execute the bounded durable-verdict listing transport. */
-async function runVerdictsAction(input, pmRoot) {
-    const limit = parseRuntimeInteger(input.limit, "assurance verdict limit");
-    if (limit !== undefined &&
-        (limit < 1 || limit > MAX_ASSURANCE_VERDICT_LIMIT)) {
-        throw new PmCliError(`assurance verdict limit must be an integer from 1 through ${MAX_ASSURANCE_VERDICT_LIMIT}`, EXIT_CODE.USAGE);
-    }
-    const items = await listAssuranceVerdicts(pmRoot, {
-        gate_id: input.id ?? input.gate,
-        limit,
-    });
-    return {
-        items,
-        count: items.length,
-        row_contract: { row_keys: ["items"], jq_selector: ".items[]" },
-    };
-}
-async function runAdoptionAction(action, input, pmRoot) {
-    if (action === "presets") {
-        if (input.preset ?? input.id) {
-            return createAssurancePreset(parsePreset(input.preset ?? input.id), requireOwner(input));
-        }
-        const items = ASSURANCE_PRESET_IDS.map((id) => {
-            const preset = createAssurancePreset(id, "pm-owner");
-            return { id, title: preset.title, description: preset.description };
-        });
-        return {
-            items,
-            count: items.length,
-            row_contract: { row_keys: ["items"], jq_selector: ".items[]" },
-        };
-    }
-    if (action === "apply") {
-        return normalizeAssuranceMutation(() => applyAssurancePreset(pmRoot, parsePreset(input.preset ?? input.id), requireOwner(input), { author: input.author, message: input.message }));
-    }
-    if (action === "derive") {
-        const proposals = await deriveAssuranceProposals(await createAssuranceWorkspaceContext(pmRoot, {
-            resolve_tree: false,
-            trigger: "derive",
-        }), requireOwner(input));
-        const applied = input.apply
-            ? await normalizeAssuranceMutation(() => acceptAssuranceProposals(pmRoot, proposals, {
-                author: input.author,
-                message: input.message ?? "Accept observation-derived assurance proposals",
-            }))
-            : undefined;
-        return {
-            items: proposals,
-            count: proposals.length,
-            ...(applied ? { applied } : {}),
-        };
-    }
-    if (!input.id) {
-        return missingAssuranceArgument("assertion-id", "assurance promote requires an assertion id", "pm assurance promote <assertion-id> --enforcement warn");
-    }
-    if (input.enforcement !== "warn" && input.enforcement !== "block") {
-        throw new PmCliError("assurance promote requires --enforcement warn|block", EXIT_CODE.USAGE);
-    }
-    const definition = (await getAssuranceDeclaration(pmRoot, "assertion", input.id));
-    return normalizeAssuranceMutation(() => promoteAssuranceAssertion(pmRoot, definition, input.enforcement, {
-        author: input.author,
-        message: input.message,
-    }));
-}
-async function runGateAction(input, pmRoot, runtime) {
-    if (!input.id) {
-        return missingAssuranceArgument("gate-id", "assurance run requires a gate id", "pm assurance run <gate-id> --trigger ci --dry-run");
-    }
-    const gateId = input.id;
-    if (!input.trigger) {
-        throw new PmCliError("assurance run requires a trigger", EXIT_CODE.USAGE);
-    }
-    if (!ASSURANCE_GATE_TRIGGERS.includes(input.trigger)) {
-        throw new PmCliError(`Unknown assurance trigger ${input.trigger}. Expected: ${ASSURANCE_GATE_TRIGGERS.join(", ")}`, EXIT_CODE.USAGE);
-    }
-    const trigger = input.trigger;
-    const [document, workspaceContext] = await Promise.all([
-        readDocument(pmRoot),
-        createAssuranceWorkspaceContext(pmRoot, {
-            ...runtime.workspace,
-            tree_id: input.tree,
-            trigger,
-        }),
-    ]);
-    const verdict = await normalizeAssuranceEvaluation(() => evaluateAssuranceGate(gateId, document, workspaceContext, {
-        trigger,
-        dry_run: input.dry_run === true,
-    }));
-    if (!verdict.dry_run) {
-        await recordAssuranceVerdict(pmRoot, verdict, {
-            author: input.author,
-            message: input.message,
-        });
-    }
-    return verdict;
-}
-/** Normalize a request-validation failure into the shared usage-error contract. */
-function throwRiskUsageError(error) {
-    if (error instanceof PmCliError)
-        throw error;
-    throw new PmCliError(error instanceof Error
-        ? error.message
-        : "assurance risk request is invalid", EXIT_CODE.USAGE);
-}
-/** Parse JSON or object risk definitions without wrapping workspace failures. */
-function parseRecurrenceActionRequest(input) {
-    if (input.limit !== undefined) {
-        throw new PmCliError(`assurance ${input.action} does not accept --limit; set limit inside the definition`, EXIT_CODE.USAGE);
-    }
-    let definition = input.definition;
-    if (typeof definition === "string") {
-        try {
-            definition = JSON.parse(definition);
-        }
-        catch (error) {
-            throw new PmCliError(`assurance ${input.action} definition must be valid JSON`, EXIT_CODE.USAGE, { reason: error instanceof Error ? error.message : "invalid_json" });
-        }
-    }
-    try {
-        return input.action === "lineages"
-            ? parseDefectRecurrenceCoverageRequest(definition)
-            : parseDefectChangeRiskRequest(definition);
-    }
-    catch (error) {
-        return throwRiskUsageError(error);
-    }
-}
-/** Derive the exact sparse replacement and deletion set for a cached index. */
-function changedRiskItemIds(cached, current) {
-    const changed = new Set();
-    for (const [itemId, itemFingerprint] of current) {
-        if (cached.item_fingerprints.get(itemId) !== itemFingerprint)
-            changed.add(itemId);
-    }
-    for (const itemId of cached.item_fingerprints.keys()) {
-        if (!current.has(itemId))
-            changed.add(itemId);
-    }
-    return changed;
-}
-/** Build and retain a safely invalidated bounded process-local recurrence index. */
-function buildCachedRiskIndex(pmRoot, request, items) {
-    const policySerialized = stableStringify(request.policy);
-    const cached = riskIndexCache?.pm_root === pmRoot ? riskIndexCache : undefined;
-    const itemFingerprints = new Map(items.map((item) => [
-        item.id,
-        createHash("sha256")
-            .update(stableStringify([
-            defectRecurrenceItemSignals(item),
-            readDefectRecurrenceRecord(item),
-        ]))
-            .digest("hex"),
-    ]));
-    const reusable = cached?.policy_serialized === policySerialized ? cached : undefined;
-    const changed = reusable
-        ? changedRiskItemIds(reusable, itemFingerprints)
-        : new Set();
-    const index = buildDefectRecurrenceIndex(request.policy, reusable ? items.filter((item) => changed.has(item.id)) : items, reusable
-        ? { previous_index: reusable.index, changed_item_ids: [...changed] }
-        : {});
-    riskIndexCache = {
-        pm_root: pmRoot,
-        policy_serialized: policySerialized,
-        item_fingerprints: itemFingerprints,
-        index,
-    };
-    return index;
-}
-/** Evaluate one serialized change-risk request against authoritative PM metadata. */
-async function runRecurrenceAction(input, pmRoot) {
-    const request = parseRecurrenceActionRequest(input);
-    const context = await createAssuranceWorkspaceContext(pmRoot, {
-        strict_read: true,
-        include_history: false,
-        resolve_tree: false,
-    });
-    try {
-        if (!("change" in request)) {
-            return analyzeDefectRecurrenceCoverage(request.policy, context.items, request);
-        }
-        return analyzeDefectChangeRisk(buildCachedRiskIndex(pmRoot, request, context.items), request.change, { cursor: request.cursor, limit: request.limit });
-    }
-    catch (error) {
-        return throwRiskUsageError(error);
-    }
-}
-/** Execute one assurance request through the public assurance SDK primitives. */
-export async function runAssuranceAction(input, global = {}, runtime = {}) {
-    const action = parseAction(input.action);
-    const pmRoot = resolvePmRoot(process.cwd(), global.path);
-    if (action === "presets" ||
-        action === "apply" ||
-        action === "derive" ||
-        action === "promote") {
-        return runAdoptionAction(action, input, pmRoot);
-    }
-    if (action === "verdicts") {
-        return runVerdictsAction(input, pmRoot);
-    }
-    if (action === "run") {
-        return runGateAction(input, pmRoot, runtime);
-    }
-    if (["risk", "lineages"].includes(action)) {
-        return runRecurrenceAction(input, pmRoot);
-    }
-    const kind = parseKind(input.kind);
-    if (action === "list")
-        return listAssuranceDeclarations(pmRoot, kind);
-    if (!input.id) {
-        return missingAssuranceArgument("id", `assurance ${action} requires an id`, `pm assurance ${action} ${kind} <id>`);
-    }
-    const id = input.id;
-    if (action === "show") {
-        return getAssuranceDeclaration(pmRoot, kind, id);
-    }
-    if (action === "remove") {
-        const receipt = await normalizeAssuranceMutation(() => removeAssuranceDeclaration(pmRoot, kind, id, {
-            author: input.author,
-            message: input.message,
-        }));
-        return projectMutationReceipt(receipt, input.idOnly);
-    }
-    const definition = parseDefinition(kind, input.definition);
-    if (definition.id !== id) {
-        throw new PmCliError(`Assurance definition id ${definition.id} does not match requested id ${id}`, EXIT_CODE.USAGE);
-    }
-    const mutationOptions = {
-        author: input.author,
-        message: input.message,
-        ...(kind === "assertion"
-            ? {
-                authorized_decision_ids: await authorizedDecisionIds(pmRoot, definition),
-            }
-            : {}),
-    };
-    const receipt = await normalizeAssuranceMutation(() => putAssuranceDeclaration(pmRoot, kind, definition, mutationOptions));
-    return projectMutationReceipt(receipt, input.idOnly);
-}
-/** Normalize a generic SDK or MCP argument envelope into one assurance request. */
-export function runAssuranceDispatch(args, options, global) {
-    const merged = { ...args, ...options };
-    return runAssuranceAction({
-        action: readRuntimeString(merged, "subcommand") ??
-            readRuntimeString(merged, "assuranceAction") ??
-            readRuntimeString(merged, "operation") ??
-            "",
-        kind: readRuntimeString(merged, "kind"),
-        id: readRuntimeString(merged, "id"),
-        definition: merged.definition,
-        trigger: readRuntimeString(merged, "trigger"),
-        tree: readRuntimeString(merged, "treeId") ??
-            readRuntimeString(merged, "tree"),
-        gate: readRuntimeString(merged, "gate"),
-        limit: parseRuntimeInteger(merged.limit, "assurance verdict limit"),
-        dry_run: merged.dryRun === true || merged.dry_run === true,
-        fullChangedFields: merged.fullChangedFields === true,
-        idOnly: merged.idOnly === true,
-        author: readRuntimeString(merged, "author"),
-        message: readRuntimeString(merged, "message"),
-        preset: readRuntimeString(merged, "preset"),
-        owner: readRuntimeString(merged, "owner"),
-        apply: merged.apply === true,
-        enforcement: readRuntimeString(merged, "enforcement"),
-    }, global);
-}
+!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="77425e45-ae19-569b-b196-e024f9e2729f")}catch(e2){}})();import{createHash}from"node:crypto";import{EXIT_CODE}from"../../core/shared/constants.js";import{PmCliError}from"../../core/shared/errors.js";import{stableStringify}from"../../core/shared/serialization.js";import{ASSURANCE_GATE_TRIGGERS,evaluateAssuranceGate,getAssuranceDeclaration,listAssuranceDeclarations,listAssuranceVerdicts,putAssuranceDeclaration,recordAssuranceVerdict,removeAssuranceDeclaration}from"./assurance.js";import{ASSURANCE_PRESET_IDS,acceptAssuranceProposals,applyAssurancePreset,createAssurancePreset,deriveAssuranceProposals,promoteAssuranceAssertion}from"./assurance-presets.js";import{MAX_ASSURANCE_VERDICT_LIMIT}from"./assurance-limits.js";import{normalizeAssuranceEvaluation,normalizeAssuranceMutation}from"./assurance-mutation-error.js";import{createAssuranceWorkspaceContext}from"./assurance-runtime.js";import{resolvePmRoot}from"../runtime-primitives.js";import{parseRuntimeInteger,readRuntimeString}from"../runtime-input.js";import{analyzeDefectChangeRisk,buildDefectRecurrenceIndex,parseDefectChangeRiskRequest}from"./defect-recurrence.js";import{defectRecurrenceItemSignals}from"./defect-recurrence-signals.js";import{readDefectRecurrenceRecord}from"./defect-recurrence-graph.js";import{analyzeDefectRecurrenceCoverage,parseDefectRecurrenceCoverageRequest}from"./defect-recurrence-coverage.js";import{createUnknownSubcommandError}from"../agent/subcommand-recovery.js";let riskIndexCache;const ASSURANCE_ACTIONS=["list","show","put","remove","run","verdicts","presets","apply","derive","promote","risk","lineages"];const ASSURANCE_DECLARATION_KINDS=["measurement","assertion","gate"];function parseAction(value){if(ASSURANCE_ACTIONS.includes(value)){return value}throw createUnknownSubcommandError({command_path:"assurance",token:value,allowed:ASSURANCE_ACTIONS,display_name:"assurance action"})}function missingAssuranceArgument(operand,detail,example){throw new PmCliError(detail,EXIT_CODE.USAGE,{code:"missing_required_argument",required:`Provide the missing assurance operand: ${operand}.`,examples:[example],recovery:{missing:[operand]}})}function parseKind(value){if(!value){return missingAssuranceArgument("kind",`Assurance declaration kind is required. Expected: ${ASSURANCE_DECLARATION_KINDS.join(", ")}`,"pm assurance list measurement")}if(ASSURANCE_DECLARATION_KINDS.includes(value)){return value}throw new PmCliError(`Assurance declaration kind is required. Expected: ${ASSURANCE_DECLARATION_KINDS.join(", ")}`,EXIT_CODE.USAGE)}function parsePreset(value){if(!value){return missingAssuranceArgument("preset",`Assurance preset is required. Expected: ${ASSURANCE_PRESET_IDS.join(", ")}`,"pm assurance apply software-delivery --owner <pm-item-id>")}if(ASSURANCE_PRESET_IDS.includes(value)){return value}throw new PmCliError(`Assurance preset is required. Expected: ${ASSURANCE_PRESET_IDS.join(", ")}`,EXIT_CODE.USAGE)}function requireOwner(input){if(input.owner?.trim())return input.owner.trim();return missingAssuranceArgument("owner","assurance preset and derivation actions require --owner <pm-item-id>","pm assurance apply software-delivery --owner <pm-item-id>")}function parseDefinition(kind,value){let parsed=value;if(typeof value==="string"){if(!value.trim())parsed=void 0;else{try{parsed=JSON.parse(value)}catch(error){throw new PmCliError("assurance definition must be valid JSON",EXIT_CODE.USAGE,{reason:error instanceof Error?error.message:"invalid_json"})}}}if(typeof parsed!=="object"||parsed===null||Array.isArray(parsed)){throw new PmCliError("assurance put requires a JSON object definition",EXIT_CODE.USAGE)}if(kind==="measurement")return parsed;if(kind==="assertion")return parsed;return parsed}async function readDocument(pmRoot){const[measurements,assertions,gates]=await Promise.all([listAssuranceDeclarations(pmRoot,"measurement"),listAssuranceDeclarations(pmRoot,"assertion"),listAssuranceDeclarations(pmRoot,"gate")]);return{version:1,measurements:measurements.items,assertions:assertions.items,gates:gates.items}}function projectMutationReceipt(receipt,idOnly){return idOnly===true?{id:receipt.id}:receipt}async function authorizedDecisionIds(pmRoot,definition){const decisionId=definition.authorization_decision;if(!decisionId)return[];const context=await createAssuranceWorkspaceContext(pmRoot,{include_history:false,resolve_tree:false});const decision=context.items.find(item=>item.id===decisionId);const terminalStatuses=new Set(context.terminal_statuses);if(!decision||decision.type.toLowerCase()!=="decision"||!terminalStatuses.has(decision.status)){throw new PmCliError(`Assurance authorization ${decisionId} must name a terminal Decision item`,EXIT_CODE.USAGE)}return[decision.id]}async function runVerdictsAction(input,pmRoot){const limit=parseRuntimeInteger(input.limit,"assurance verdict limit");if(limit!==void 0&&(limit<1||limit>MAX_ASSURANCE_VERDICT_LIMIT)){throw new PmCliError(`assurance verdict limit must be an integer from 1 through ${MAX_ASSURANCE_VERDICT_LIMIT}`,EXIT_CODE.USAGE)}const items=await listAssuranceVerdicts(pmRoot,{gate_id:input.id??input.gate,limit});return{items,count:items.length,row_contract:{row_keys:["items"],jq_selector:".items[]"}}}async function runAdoptionAction(action,input,pmRoot){if(action==="presets"){if(input.preset??input.id){return createAssurancePreset(parsePreset(input.preset??input.id),requireOwner(input))}const items=ASSURANCE_PRESET_IDS.map(id=>{const preset=createAssurancePreset(id,"pm-owner");return{id,title:preset.title,description:preset.description}});return{items,count:items.length,row_contract:{row_keys:["items"],jq_selector:".items[]"}}}if(action==="apply"){return normalizeAssuranceMutation(()=>applyAssurancePreset(pmRoot,parsePreset(input.preset??input.id),requireOwner(input),{author:input.author,message:input.message}))}if(action==="derive"){const proposals=await deriveAssuranceProposals(await createAssuranceWorkspaceContext(pmRoot,{resolve_tree:false,trigger:"derive"}),requireOwner(input));const applied=input.apply?await normalizeAssuranceMutation(()=>acceptAssuranceProposals(pmRoot,proposals,{author:input.author,message:input.message??"Accept observation-derived assurance proposals"})):void 0;return{items:proposals,count:proposals.length,...applied?{applied}:{}}}if(!input.id){return missingAssuranceArgument("assertion-id","assurance promote requires an assertion id","pm assurance promote <assertion-id> --enforcement warn")}if(input.enforcement!=="warn"&&input.enforcement!=="block"){throw new PmCliError("assurance promote requires --enforcement warn|block",EXIT_CODE.USAGE)}const definition=await getAssuranceDeclaration(pmRoot,"assertion",input.id);return normalizeAssuranceMutation(()=>promoteAssuranceAssertion(pmRoot,definition,input.enforcement,{author:input.author,message:input.message}))}async function runGateAction(input,pmRoot,runtime){if(!input.id){return missingAssuranceArgument("gate-id","assurance run requires a gate id","pm assurance run <gate-id> --trigger ci --dry-run")}const gateId=input.id;if(!input.trigger){throw new PmCliError("assurance run requires a trigger",EXIT_CODE.USAGE)}if(!ASSURANCE_GATE_TRIGGERS.includes(input.trigger)){throw new PmCliError(`Unknown assurance trigger ${input.trigger}. Expected: ${ASSURANCE_GATE_TRIGGERS.join(", ")}`,EXIT_CODE.USAGE)}const trigger=input.trigger;const[document,workspaceContext]=await Promise.all([readDocument(pmRoot),createAssuranceWorkspaceContext(pmRoot,{...runtime.workspace,tree_id:input.tree,trigger})]);const verdict=await normalizeAssuranceEvaluation(()=>evaluateAssuranceGate(gateId,document,workspaceContext,{trigger,dry_run:input.dry_run===true}));if(!verdict.dry_run){await recordAssuranceVerdict(pmRoot,verdict,{author:input.author,message:input.message})}return verdict}function throwRiskUsageError(error){if(error instanceof PmCliError)throw error;throw new PmCliError(error instanceof Error?error.message:"assurance risk request is invalid",EXIT_CODE.USAGE)}function parseRecurrenceActionRequest(input){if(input.limit!==void 0){throw new PmCliError(`assurance ${input.action} does not accept --limit; set limit inside the definition`,EXIT_CODE.USAGE)}let definition=input.definition;if(typeof definition==="string"){try{definition=JSON.parse(definition)}catch(error){throw new PmCliError(`assurance ${input.action} definition must be valid JSON`,EXIT_CODE.USAGE,{reason:error instanceof Error?error.message:"invalid_json"})}}try{return input.action==="lineages"?parseDefectRecurrenceCoverageRequest(definition):parseDefectChangeRiskRequest(definition)}catch(error){return throwRiskUsageError(error)}}function changedRiskItemIds(cached,current){const changed=new Set;for(const[itemId,itemFingerprint]of current){if(cached.item_fingerprints.get(itemId)!==itemFingerprint)changed.add(itemId)}for(const itemId of cached.item_fingerprints.keys()){if(!current.has(itemId))changed.add(itemId)}return changed}function buildCachedRiskIndex(pmRoot,request,items){const policySerialized=stableStringify(request.policy);const cached=riskIndexCache?.pm_root===pmRoot?riskIndexCache:void 0;const itemFingerprints=new Map(items.map(item=>[item.id,createHash("sha256").update(stableStringify([defectRecurrenceItemSignals(item),readDefectRecurrenceRecord(item)])).digest("hex")]));const reusable=cached?.policy_serialized===policySerialized?cached:void 0;const changed=reusable?changedRiskItemIds(reusable,itemFingerprints):new Set;const index=buildDefectRecurrenceIndex(request.policy,reusable?items.filter(item=>changed.has(item.id)):items,reusable?{previous_index:reusable.index,changed_item_ids:[...changed]}:{});riskIndexCache={pm_root:pmRoot,policy_serialized:policySerialized,item_fingerprints:itemFingerprints,index};return index}async function runRecurrenceAction(input,pmRoot){const request=parseRecurrenceActionRequest(input);const context=await createAssuranceWorkspaceContext(pmRoot,{strict_read:true,include_history:false,resolve_tree:false});try{if(!("change"in request)){return analyzeDefectRecurrenceCoverage(request.policy,context.items,request)}return analyzeDefectChangeRisk(buildCachedRiskIndex(pmRoot,request,context.items),request.change,{cursor:request.cursor,limit:request.limit})}catch(error){return throwRiskUsageError(error)}}async function runAssuranceAction(input,global2={},runtime={}){const action=parseAction(input.action);const pmRoot=resolvePmRoot(process.cwd(),global2.path);if(action==="presets"||action==="apply"||action==="derive"||action==="promote"){return runAdoptionAction(action,input,pmRoot)}if(action==="verdicts"){return runVerdictsAction(input,pmRoot)}if(action==="run"){return runGateAction(input,pmRoot,runtime)}if(["risk","lineages"].includes(action)){return runRecurrenceAction(input,pmRoot)}const kind=parseKind(input.kind);if(action==="list")return listAssuranceDeclarations(pmRoot,kind);if(!input.id){return missingAssuranceArgument("id",`assurance ${action} requires an id`,`pm assurance ${action} ${kind} <id>`)}const id=input.id;if(action==="show"){return getAssuranceDeclaration(pmRoot,kind,id)}if(action==="remove"){const receipt2=await normalizeAssuranceMutation(()=>removeAssuranceDeclaration(pmRoot,kind,id,{author:input.author,message:input.message}));return projectMutationReceipt(receipt2,input.idOnly)}const definition=parseDefinition(kind,input.definition);if(definition.id!==id){throw new PmCliError(`Assurance definition id ${definition.id} does not match requested id ${id}`,EXIT_CODE.USAGE)}const mutationOptions={author:input.author,message:input.message,...kind==="assertion"?{authorized_decision_ids:await authorizedDecisionIds(pmRoot,definition)}:{}};const receipt=await normalizeAssuranceMutation(()=>putAssuranceDeclaration(pmRoot,kind,definition,mutationOptions));return projectMutationReceipt(receipt,input.idOnly)}function runAssuranceDispatch(args,options,global2){const merged={...args,...options};return runAssuranceAction({action:readRuntimeString(merged,"subcommand")??readRuntimeString(merged,"assuranceAction")??readRuntimeString(merged,"operation")??"",kind:readRuntimeString(merged,"kind"),id:readRuntimeString(merged,"id"),definition:merged.definition,trigger:readRuntimeString(merged,"trigger"),tree:readRuntimeString(merged,"treeId")??readRuntimeString(merged,"tree"),gate:readRuntimeString(merged,"gate"),limit:parseRuntimeInteger(merged.limit,"assurance verdict limit"),dry_run:merged.dryRun===true||merged.dry_run===true,fullChangedFields:merged.fullChangedFields===true,idOnly:merged.idOnly===true,author:readRuntimeString(merged,"author"),message:readRuntimeString(merged,"message"),preset:readRuntimeString(merged,"preset"),owner:readRuntimeString(merged,"owner"),apply:merged.apply===true,enforcement:readRuntimeString(merged,"enforcement")},global2)}export{ASSURANCE_ACTIONS,ASSURANCE_DECLARATION_KINDS,runAssuranceAction,runAssuranceDispatch};
 //# sourceMappingURL=assurance-action.js.map
-//# debugId=811330eb-207d-5e27-9786-72c1fba7d4c9

package/dist/sdk/governance/assurance-limits.js

@@ -1,11 +1,2 @@
-/**
- * @module sdk/governance/assurance-limits
- *
- * Shares bounded assurance transport limits without expanding the public SDK.
- */
-/** Largest verdict-history page accepted by SDK and transport boundaries. */
-
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="b911b43d-d14d-5e4f-a35e-5020b1a84542")}catch(e){}}();
-export const MAX_ASSURANCE_VERDICT_LIMIT = 1_000;
+!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="b00dcab2-22c6-55b7-b93d-f6f5413d4b04")}catch(e2){}})();const MAX_ASSURANCE_VERDICT_LIMIT=1e3;export{MAX_ASSURANCE_VERDICT_LIMIT};
 //# sourceMappingURL=assurance-limits.js.map
-//# debugId=b911b43d-d14d-5e4f-a35e-5020b1a84542

package/dist/sdk/governance/assurance-mutation-error.js

@@ -1,82 +1,2 @@
-/**
- * @module sdk/assurance-mutation-error
- *
- * Distinguishes expected assurance mutation refusals from unexpected runtime
- * faults before transport layers normalize them into stable usage errors.
- */
-
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="d2d5135a-8110-527e-8530-653b25b792a4")}catch(e){}}();
-import { EXIT_CODE } from "../../core/shared/constants.js";
-import { PmCliError } from "../../core/shared/errors.js";
-/** Expected declaration-validation or mutation-policy refusal. */
-export class AssuranceMutationRefusalError extends TypeError {
-    /** Create one typed refusal while retaining TypeError compatibility for SDK callers. */
-    constructor(message) {
-        super(message);
-        this.name = "AssuranceMutationRefusalError";
-    }
-}
-/** Expected gate-policy refusal caused by an incomplete or disallowed provider contract. */
-export class AssuranceEvaluationRefusalError extends TypeError {
-    /** Structured evaluation location retained across CLI, SDK, and MCP. */
-    context;
-    /** Create one typed refusal while retaining TypeError compatibility for SDK callers. */
-    constructor(message, context = {}) {
-        super(message);
-        this.name = "AssuranceEvaluationRefusalError";
-        this.context = context;
-    }
-}
-/** Expected failure to resolve one declared external measurement source. */
-export class AssuranceSourceResolutionError extends TypeError {
-    /** Measurement that owns the failed source, once evaluation identifies it. */
-    measurement_id;
-    /** Measurement source discriminant. */
-    source_kind;
-    /** Field selected from the source result. */
-    field;
-    /** Optional validate or health check selector. */
-    check;
-    /** Create one source-local refusal before gate context is attached. */
-    constructor(message, context) {
-        super(message);
-        this.name = "AssuranceSourceResolutionError";
-        this.measurement_id = context.measurement_id;
-        this.source_kind = context.source_kind;
-        this.field = context.field;
-        this.check = context.check;
-    }
-}
-/** Normalize only expected assurance mutation refusals for CLI and MCP hosts. */
-export async function normalizeAssuranceMutation(operation) {
-    try {
-        return await operation();
-    }
-    catch (error) {
-        if (error instanceof AssuranceMutationRefusalError) {
-            throw new PmCliError(error.message, EXIT_CODE.USAGE, {
-                code: "invalid_argument_value",
-                reason: "assurance_mutation_refused",
-            });
-        }
-        throw error;
-    }
-}
-/** Normalize only expected assurance evaluation-policy refusals for transport hosts. */
-export async function normalizeAssuranceEvaluation(operation) {
-    try {
-        return await operation();
-    }
-    catch (error) {
-        if (error instanceof AssuranceEvaluationRefusalError) {
-            throw new PmCliError(error.message, EXIT_CODE.USAGE, {
-                code: "invalid_argument_value",
-                reason: "assurance_evaluation_refused",
-                ...error.context,
-            });
-        }
-        throw error;
-    }
-}
+!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="00d2200c-d308-51a6-acc4-8da90afaf6d6")}catch(e2){}})();import{EXIT_CODE}from"../../core/shared/constants.js";import{PmCliError}from"../../core/shared/errors.js";class AssuranceMutationRefusalError extends TypeError{constructor(message){super(message);this.name="AssuranceMutationRefusalError"}}class AssuranceEvaluationRefusalError extends TypeError{context;constructor(message,context={}){super(message);this.name="AssuranceEvaluationRefusalError";this.context=context}}class AssuranceSourceResolutionError extends TypeError{measurement_id;source_kind;field;check;constructor(message,context){super(message);this.name="AssuranceSourceResolutionError";this.measurement_id=context.measurement_id;this.source_kind=context.source_kind;this.field=context.field;this.check=context.check}}async function normalizeAssuranceMutation(operation){try{return await operation()}catch(error){if(error instanceof AssuranceMutationRefusalError){throw new PmCliError(error.message,EXIT_CODE.USAGE,{code:"invalid_argument_value",reason:"assurance_mutation_refused"})}throw error}}async function normalizeAssuranceEvaluation(operation){try{return await operation()}catch(error){if(error instanceof AssuranceEvaluationRefusalError){throw new PmCliError(error.message,EXIT_CODE.USAGE,{code:"invalid_argument_value",reason:"assurance_evaluation_refused",...error.context})}throw error}}export{AssuranceEvaluationRefusalError,AssuranceMutationRefusalError,AssuranceSourceResolutionError,normalizeAssuranceEvaluation,normalizeAssuranceMutation};
 //# sourceMappingURL=assurance-mutation-error.js.map
-//# debugId=d2d5135a-8110-527e-8530-653b25b792a4