@unbrained/pm-cli 2026.9.6 → 2026.9.8

package/dist/sdk/governance/assurance-presets.js

@@ -1,136 +1,2 @@
-/**
- * @module sdk/governance/assurance-presets
- *
- * Supplies readable assurance starter bundles and observation-derived proposals
- * without introducing privileged evaluation semantics.
- */
-
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="05c29627-6763-5aee-8579-71e563a98780")}catch(e){}}();
-import { evaluateMeasurement, putAssuranceDeclaration, putAssuranceDeclarationBundle, } from "./assurance.js";
-/** Built-in project shapes that can acquire a quality contract in one command. */
-export const ASSURANCE_PRESET_IDS = [
-    "software-delivery",
-    "research",
-    "agent-evaluation",
-    "operations",
-];
-function assertion(id, measurementId, ownerItemId, ceiling, enforcement) {
-    return {
-        id,
-        measurement_id: measurementId,
-        owner_item_id: ownerItemId,
-        scope: { kind: "active" },
-        ceiling,
-        lifetime: "hold",
-        enforcement,
-        negative_control: {
-            cases: [
-                { observed: ceiling, expected: "pass" },
-                { observed: ceiling + 1, expected: "fail" },
-            ],
-        },
-    };
-}
-function evidencePreset(id, title, description, ownerItemId, links) {
-    const prefix = `preset-${id}`;
-    const measurements = links.map((link) => ({
-        id: `${prefix}-missing-${link}`,
-        description: `Active items missing ${link} evidence.`,
-        source: { kind: "links", link, state: "missing" },
-    }));
-    const assertions = measurements.map((measurement) => assertion(`${measurement.id}-zero`, measurement.id, ownerItemId, 0, "warn"));
-    return {
-        id,
-        title,
-        description,
-        declarations: {
-            measurements,
-            assertions,
-            gates: [
-                {
-                    id: `${prefix}-readiness`,
-                    description,
-                    assertion_ids: assertions.map((entry) => entry.id),
-                    triggers: ["ci", "scheduled"],
-                },
-            ],
-        },
-    };
-}
-/** Materialize one built-in preset as ordinary declarations owned by a pm item. */
-export function createAssurancePreset(id, ownerItemId) {
-    if (id === "software-delivery") {
-        return evidencePreset(id, "Software delivery", "Warn when active delivery work lacks executable tests or documentation.", ownerItemId, ["tests", "docs"]);
-    }
-    if (id === "research") {
-        return evidencePreset(id, "Research", "Warn when active research work lacks reproducibility files or documentation.", ownerItemId, ["files", "docs"]);
-    }
-    if (id === "agent-evaluation") {
-        return evidencePreset(id, "Agent evaluation", "Warn when active evaluation work lacks executable scenarios or recorded artifacts.", ownerItemId, ["tests", "files"]);
-    }
-    return evidencePreset(id, "Operations", "Warn when active operational work lacks runbook documentation or repair evidence.", ownerItemId, ["docs", "files"]);
-}
-/** Apply one preset atomically; a second identical application is idempotent. */
-export function applyAssurancePreset(pmRoot, id, ownerItemId, options = {}) {
-    return putAssuranceDeclarationBundle(pmRoot, createAssurancePreset(id, ownerItemId).declarations, options);
-}
-/** Propose active-scope evidence ceilings from the record without persisting them. */
-export async function deriveAssuranceProposals(context, ownerItemId) {
-    const terminalStatuses = new Set(context.terminal_statuses ?? ["closed", "canceled"]);
-    const activeContext = {
-        ...context,
-        items: context.items.filter((item) => !terminalStatuses.has(item.status)),
-    };
-    const proposals = await Promise.all(["files", "tests", "docs"].map(async (link) => {
-        const measurement = {
-            id: `derived-active-missing-${link}`,
-            description: `Observed active items missing ${link} evidence.`,
-            source: { kind: "links", link, state: "missing" },
-        };
-        const measured = await evaluateMeasurement(measurement, activeContext);
-        const observed = measured.value;
-        const derivedAssertion = assertion(`${measurement.id}-ceiling`, measurement.id, ownerItemId, observed, "observe");
-        const id = `active-missing-${link}`;
-        return {
-            id,
-            population_size: activeContext.items.length,
-            scope: { kind: "active" },
-            observed,
-            declarations: {
-                measurements: [measurement],
-                assertions: [derivedAssertion],
-                gates: [
-                    {
-                        id: `derived-${id}`,
-                        description: `Observe the accepted ${link} evidence baseline.`,
-                        assertion_ids: [derivedAssertion.id],
-                        triggers: ["ci", "scheduled"],
-                    },
-                ],
-            },
-        };
-    }));
-    return proposals;
-}
-/** Accept all derived proposals in one audited registry transaction. */
-export function acceptAssuranceProposals(pmRoot, proposals, options = {}) {
-    return putAssuranceDeclarationBundle(pmRoot, {
-        measurements: proposals.flatMap((proposal) => proposal.declarations.measurements),
-        assertions: proposals.flatMap((proposal) => proposal.declarations.assertions),
-        gates: proposals.flatMap((proposal) => proposal.declarations.gates),
-    }, options);
-}
-/** Promote one assertion by exactly one enforcement level and audit the transition. */
-export async function promoteAssuranceAssertion(pmRoot, definition, enforcement, options = {}) {
-    const expected = definition.enforcement === "observe" ? "warn" : "block";
-    if (definition.enforcement === "block" || enforcement !== expected) {
-        throw new TypeError(`assurance assertion ${definition.id} promotion must be ${definition.enforcement} -> ${expected}`);
-    }
-    return putAssuranceDeclaration(pmRoot, "assertion", { ...definition, enforcement }, {
-        ...options,
-        message: options.message ??
-            `Promote assurance assertion ${definition.id} from ${definition.enforcement} to ${enforcement}`,
-    });
-}
+!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="7470da18-4b85-5090-8ede-7de708b1f4ff")}catch(e2){}})();import{evaluateMeasurement,putAssuranceDeclaration,putAssuranceDeclarationBundle}from"./assurance.js";const ASSURANCE_PRESET_IDS=["software-delivery","research","agent-evaluation","operations"];function assertion(id,measurementId,ownerItemId,ceiling,enforcement){return{id,measurement_id:measurementId,owner_item_id:ownerItemId,scope:{kind:"active"},ceiling,lifetime:"hold",enforcement,negative_control:{cases:[{observed:ceiling,expected:"pass"},{observed:ceiling+1,expected:"fail"}]}}}function evidencePreset(id,title,description,ownerItemId,links){const prefix=`preset-${id}`;const measurements=links.map(link=>({id:`${prefix}-missing-${link}`,description:`Active items missing ${link} evidence.`,source:{kind:"links",link,state:"missing"}}));const assertions=measurements.map(measurement=>assertion(`${measurement.id}-zero`,measurement.id,ownerItemId,0,"warn"));return{id,title,description,declarations:{measurements,assertions,gates:[{id:`${prefix}-readiness`,description,assertion_ids:assertions.map(entry=>entry.id),triggers:["ci","scheduled"]}]}}}function createAssurancePreset(id,ownerItemId){if(id==="software-delivery"){return evidencePreset(id,"Software delivery","Warn when active delivery work lacks executable tests or documentation.",ownerItemId,["tests","docs"])}if(id==="research"){return evidencePreset(id,"Research","Warn when active research work lacks reproducibility files or documentation.",ownerItemId,["files","docs"])}if(id==="agent-evaluation"){return evidencePreset(id,"Agent evaluation","Warn when active evaluation work lacks executable scenarios or recorded artifacts.",ownerItemId,["tests","files"])}return evidencePreset(id,"Operations","Warn when active operational work lacks runbook documentation or repair evidence.",ownerItemId,["docs","files"])}function applyAssurancePreset(pmRoot,id,ownerItemId,options={}){return putAssuranceDeclarationBundle(pmRoot,createAssurancePreset(id,ownerItemId).declarations,options)}async function deriveAssuranceProposals(context,ownerItemId){const terminalStatuses=new Set(context.terminal_statuses??["closed","canceled"]);const activeContext={...context,items:context.items.filter(item=>!terminalStatuses.has(item.status))};const proposals=await Promise.all(["files","tests","docs"].map(async link=>{const measurement={id:`derived-active-missing-${link}`,description:`Observed active items missing ${link} evidence.`,source:{kind:"links",link,state:"missing"}};const measured=await evaluateMeasurement(measurement,activeContext);const observed=measured.value;const derivedAssertion=assertion(`${measurement.id}-ceiling`,measurement.id,ownerItemId,observed,"observe");const id=`active-missing-${link}`;return{id,population_size:activeContext.items.length,scope:{kind:"active"},observed,declarations:{measurements:[measurement],assertions:[derivedAssertion],gates:[{id:`derived-${id}`,description:`Observe the accepted ${link} evidence baseline.`,assertion_ids:[derivedAssertion.id],triggers:["ci","scheduled"]}]}}}));return proposals}function acceptAssuranceProposals(pmRoot,proposals,options={}){return putAssuranceDeclarationBundle(pmRoot,{measurements:proposals.flatMap(proposal=>proposal.declarations.measurements),assertions:proposals.flatMap(proposal=>proposal.declarations.assertions),gates:proposals.flatMap(proposal=>proposal.declarations.gates)},options)}async function promoteAssuranceAssertion(pmRoot,definition,enforcement,options={}){const expected=definition.enforcement==="observe"?"warn":"block";if(definition.enforcement==="block"||enforcement!==expected){throw new TypeError(`assurance assertion ${definition.id} promotion must be ${definition.enforcement} -> ${expected}`)}return putAssuranceDeclaration(pmRoot,"assertion",{...definition,enforcement},{...options,message:options.message??`Promote assurance assertion ${definition.id} from ${definition.enforcement} to ${enforcement}`})}export{ASSURANCE_PRESET_IDS,acceptAssuranceProposals,applyAssurancePreset,createAssurancePreset,deriveAssuranceProposals,promoteAssuranceAssertion};
 //# sourceMappingURL=assurance-presets.js.map
-//# debugId=05c29627-6763-5aee-8579-71e563a98780

package/dist/sdk/governance/assurance-runtime.js

@@ -1,239 +1,2 @@
-/**
- * @module sdk/assurance-runtime
- *
- * Binds assurance evaluation to a real pm workspace while leaving declaration
- * and verdict semantics in the host-neutral assurance module.
- */
-
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="cdf52e5c-86cf-5540-bc08-bfc274a1fdf9")}catch(e){}}();
-import { execFile } from "node:child_process";
-import { promisify } from "node:util";
-import { runGraph } from "../graph/run.js";
-import { runHealth } from "./health.js";
-import { runValidate } from "./validate.js";
-import { runList } from "../query/list.js";
-import { AssuranceSourceResolutionError } from "./assurance-mutation-error.js";
-import { getActiveExtensionRegistrations, resolvePortableWorkspaceContext, } from "../../core/extensions/index.js";
-import { resolveRegisteredAssuranceMeasurementProvider } from "../../core/extensions/runtime-registrations.js";
-import { stableStringify } from "../../core/shared/serialization.js";
-import { getHistoryPath, listAllItemMetadata, readHistoryEntries, readSettings, resolveItemTypeRegistry, resolveRuntimeStatusRegistry, } from "../runtime-primitives.js";
-const execFileAsync = promisify(execFile);
-const HISTORY_READ_CONCURRENCY = 16;
-const DEFAULT_PROVIDER_TIMEOUT_MS = 30_000;
-function assertProviderResult(provider, key, result) {
-    const keyDefinition = provider.keys[key];
-    const valueMatches = keyDefinition.value_type === "number"
-        ? typeof result.value === "number" && Number.isFinite(result.value)
-        : Array.isArray(result.value) &&
-            result.value.every((entry) => typeof entry === "string");
-    if (!valueMatches) {
-        throw new TypeError(`assurance provider ${provider.id} key ${key} returned the wrong value type`);
-    }
-    if (!Number.isInteger(result.population_size) ||
-        result.population_size < 0 ||
-        !Number.isFinite(result.cost) ||
-        result.cost < 0) {
-        throw new TypeError(`assurance provider ${provider.id} returned an invalid population or cost`);
-    }
-    return result;
-}
-function validateProviderParameters(provider, source) {
-    const keyDefinition = provider.keys[source.key];
-    if (!keyDefinition) {
-        throw new TypeError(`assurance provider ${provider.id} does not declare key ${source.key}`);
-    }
-    const parameters = source.parameters ?? {};
-    const schema = keyDefinition.parameters ?? {};
-    for (const required of Object.entries(schema)
-        .filter(([, definition]) => definition.required === true)
-        .map(([name]) => name)) {
-        if (!Object.hasOwn(parameters, required)) {
-            throw new TypeError(`assurance provider ${provider.id} key ${source.key} requires parameter ${required}`);
-        }
-    }
-    for (const [name, value] of Object.entries(parameters)) {
-        const definition = schema[name];
-        if (!definition) {
-            throw new TypeError(`assurance provider ${provider.id} key ${source.key} does not declare parameter ${name}`);
-        }
-        if (value === null || typeof value !== definition.type) {
-            throw new TypeError(`assurance provider ${provider.id} parameter ${name} must be ${definition.type}`);
-        }
-    }
-    return { ...parameters };
-}
-async function runRegisteredProvider(provider, source, pmRoot, trigger) {
-    const parameters = validateProviderParameters(provider, source);
-    const providerPromise = Promise.resolve().then(() => provider.resolve({
-        provider: provider.id,
-        key: source.key,
-        parameters,
-        trigger,
-        pm_root: pmRoot,
-        ...resolvePortableWorkspaceContext(pmRoot),
-    }));
-    providerPromise.catch(() => { });
-    let timeoutHandle;
-    try {
-        const result = await Promise.race([
-            providerPromise,
-            new Promise((_, reject) => {
-                timeoutHandle = setTimeout(() => reject(new TypeError(`assurance provider ${provider.id} timed out`)), provider.timeout_ms ?? DEFAULT_PROVIDER_TIMEOUT_MS);
-                timeoutHandle.unref?.();
-            }),
-        ]);
-        return assertProviderResult(provider, source.key, result);
-    }
-    finally {
-        clearTimeout(timeoutHandle);
-    }
-}
-function valueAtPath(input, field, sourceKind, check) {
-    let current = input;
-    for (const segment of field.split(".")) {
-        if (typeof current !== "object" ||
-            current === null ||
-            Array.isArray(current)) {
-            throw new AssuranceSourceResolutionError(`assurance field ${field} is not present`, { source_kind: sourceKind, field, ...(check ? { check } : {}) });
-        }
-        current = current[segment];
-    }
-    if (typeof current === "number" && Number.isFinite(current))
-        return current;
-    if (Array.isArray(current) &&
-        current.every((entry) => typeof entry === "string")) {
-        return current;
-    }
-    throw new AssuranceSourceResolutionError(`assurance field ${field} must resolve to a finite number or string array`, { source_kind: sourceKind, field, ...(check ? { check } : {}) });
-}
-function checkValue(result, checkName, field, sourceKind) {
-    const check = result.checks.find((entry) => entry.name === checkName);
-    if (!check)
-        throw new AssuranceSourceResolutionError(`assurance check ${checkName} is not present`, { source_kind: sourceKind, field, check: checkName });
-    const value = field === "status" || field === "ok"
-        ? check.ok
-            ? 0
-            : 1
-        : valueAtPath(check.details, field, sourceKind, checkName);
-    return { value, population_size: 1, cost: result.checks.length };
-}
-async function resolveTreeId(pmRoot, explicit) {
-    if (explicit?.trim())
-        return explicit.trim();
-    try {
-        const { stdout } = await execFileAsync("git", ["rev-parse", "HEAD^{commit}"], {
-            cwd: pmRoot,
-            encoding: "utf8",
-            timeout: 5_000,
-            windowsHide: true,
-        });
-        return stdout.trim();
-    }
-    catch {
-        return "working-copy";
-    }
-}
-async function readWorkspaceHistory(pmRoot, items) {
-    const streams = new Array(items.length);
-    let nextIndex = 0;
-    const workers = Array.from({ length: Math.min(HISTORY_READ_CONCURRENCY, items.length) }, async () => {
-        while (nextIndex < items.length) {
-            const index = nextIndex;
-            nextIndex += 1;
-            const item = items[index];
-            const entries = await readHistoryEntries(getHistoryPath(pmRoot, item.id), item.id);
-            streams[index] = entries.map((entry) => ({
-                op: entry.op,
-                author: entry.author,
-                agent_harness: entry.agent_harness,
-                agent_model: entry.agent_model,
-            }));
-        }
-    });
-    await Promise.all(workers);
-    return streams.flat();
-}
-/**
- * Build an assurance context from authoritative workspace data and public SDK
- * operations. Graph, validate, and health selectors run through their existing
- * SDK implementations, so presentation surfaces cannot acquire divergent rules.
- */
-export async function createAssuranceWorkspaceContext(pmRoot, options = {}) {
-    const settings = await readSettings(pmRoot);
-    const typeRegistry = resolveItemTypeRegistry(settings);
-    const statusRegistry = resolveRuntimeStatusRegistry(settings.schema);
-    const metadata = options.strict_read === true
-        ? (await runList(undefined, { status: "all", full: true, noTruncate: true, strictRead: true }, { path: pmRoot })).items
-        : await listAllItemMetadata(pmRoot, settings.item_format, typeRegistry.type_to_folder, undefined, settings.schema);
-    const items = metadata.map((item) => ({
-        ...item,
-        id: item.id,
-        status: item.status,
-        type: item.type,
-    }));
-    const global = { path: pmRoot };
-    const activeRegistrations = getActiveExtensionRegistrations();
-    const registeredProviderCapabilities = Object.fromEntries((activeRegistrations?.assurance_providers ?? []).map((registration) => [
-        registration.definition.id,
-        {
-            cost_class: registration.runtime_definition.cost_class,
-            network: registration.runtime_definition.network,
-        },
-    ]));
-    const graphRuns = new Map();
-    let validateRun;
-    let healthRun;
-    return {
-        tree_id: options.resolve_tree === false
-            ? (options.tree_id ?? "working-copy")
-            : await resolveTreeId(pmRoot, options.tree_id),
-        items,
-        history: options.include_history === false
-            ? []
-            : await readWorkspaceHistory(pmRoot, items),
-        terminal_statuses: [...statusRegistry.terminal_statuses],
-        provider_capabilities: {
-            ...registeredProviderCapabilities,
-            ...options.provider_capabilities,
-        },
-        external: async (source) => {
-            if (source.kind === "graph") {
-                const key = stableStringify({
-                    operation: source.operation,
-                    parameters: source.parameters ?? {},
-                });
-                let pending = graphRuns.get(key);
-                if (pending === undefined) {
-                    pending = runGraph(source.operation, undefined, undefined, { ...source.parameters, full: true }, global);
-                    graphRuns.set(key, pending);
-                }
-                const result = await pending;
-                return {
-                    value: valueAtPath(result, source.field, source.kind),
-                    population_size: items.length,
-                    cost: items.length,
-                };
-            }
-            if (source.kind === "validate") {
-                validateRun ??= runValidate({ counts: true }, global);
-                const result = await validateRun;
-                return checkValue(result, source.check, source.field, source.kind);
-            }
-            if (source.kind === "health") {
-                healthRun ??= runHealth(global, { checkOnly: true, full: true });
-                const result = await healthRun;
-                return checkValue(result, source.check, source.field, source.kind);
-            }
-            const hostProvider = options.providers?.[source.provider];
-            if (hostProvider)
-                return hostProvider(source);
-            const registeredProvider = resolveRegisteredAssuranceMeasurementProvider(activeRegistrations, source.provider);
-            if (!registeredProvider) {
-                throw new TypeError(`assurance provider ${source.provider} is not registered`);
-            }
-            return runRegisteredProvider(registeredProvider.runtime_definition, source, pmRoot, options.trigger ?? "sdk");
-        },
-    };
-}
+!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="894154aa-88b8-5a3b-a03c-e3ef8a85f1c0")}catch(e2){}})();import{execFile}from"node:child_process";import{promisify}from"node:util";import{runGraph}from"../graph/run.js";import{runHealth}from"./health.js";import{runValidate}from"./validate.js";import{runList}from"../query/list.js";import{AssuranceSourceResolutionError}from"./assurance-mutation-error.js";import{getActiveExtensionRegistrations,resolvePortableWorkspaceContext}from"../../core/extensions/index.js";import{resolveRegisteredAssuranceMeasurementProvider}from"../../core/extensions/runtime-registrations.js";import{stableStringify}from"../../core/shared/serialization.js";import{getHistoryPath,listAllItemMetadata,readHistoryEntries,readSettings,resolveItemTypeRegistry,resolveRuntimeStatusRegistry}from"../runtime-primitives.js";const execFileAsync=promisify(execFile);const HISTORY_READ_CONCURRENCY=16;const DEFAULT_PROVIDER_TIMEOUT_MS=3e4;function assertProviderResult(provider,key,result){const keyDefinition=provider.keys[key];const valueMatches=keyDefinition.value_type==="number"?typeof result.value==="number"&&Number.isFinite(result.value):Array.isArray(result.value)&&result.value.every(entry=>typeof entry==="string");if(!valueMatches){throw new TypeError(`assurance provider ${provider.id} key ${key} returned the wrong value type`)}if(!Number.isInteger(result.population_size)||result.population_size<0||!Number.isFinite(result.cost)||result.cost<0){throw new TypeError(`assurance provider ${provider.id} returned an invalid population or cost`)}return result}function validateProviderParameters(provider,source){const keyDefinition=provider.keys[source.key];if(!keyDefinition){throw new TypeError(`assurance provider ${provider.id} does not declare key ${source.key}`)}const parameters=source.parameters??{};const schema=keyDefinition.parameters??{};for(const required of Object.entries(schema).filter(([,definition])=>definition.required===true).map(([name])=>name)){if(!Object.hasOwn(parameters,required)){throw new TypeError(`assurance provider ${provider.id} key ${source.key} requires parameter ${required}`)}}for(const[name,value]of Object.entries(parameters)){const definition=schema[name];if(!definition){throw new TypeError(`assurance provider ${provider.id} key ${source.key} does not declare parameter ${name}`)}if(value===null||typeof value!==definition.type){throw new TypeError(`assurance provider ${provider.id} parameter ${name} must be ${definition.type}`)}}return{...parameters}}async function runRegisteredProvider(provider,source,pmRoot,trigger){const parameters=validateProviderParameters(provider,source);const providerPromise=Promise.resolve().then(()=>provider.resolve({provider:provider.id,key:source.key,parameters,trigger,pm_root:pmRoot,...resolvePortableWorkspaceContext(pmRoot)}));providerPromise.catch(()=>{});let timeoutHandle;try{const result=await Promise.race([providerPromise,new Promise((_,reject)=>{timeoutHandle=setTimeout(()=>reject(new TypeError(`assurance provider ${provider.id} timed out`)),provider.timeout_ms??DEFAULT_PROVIDER_TIMEOUT_MS);timeoutHandle.unref?.()})]);return assertProviderResult(provider,source.key,result)}finally{clearTimeout(timeoutHandle)}}function valueAtPath(input,field,sourceKind,check){let current=input;for(const segment of field.split(".")){if(typeof current!=="object"||current===null||Array.isArray(current)){throw new AssuranceSourceResolutionError(`assurance field ${field} is not present`,{source_kind:sourceKind,field,...check?{check}:{}})}current=current[segment]}if(typeof current==="number"&&Number.isFinite(current))return current;if(Array.isArray(current)&&current.every(entry=>typeof entry==="string")){return current}throw new AssuranceSourceResolutionError(`assurance field ${field} must resolve to a finite number or string array`,{source_kind:sourceKind,field,...check?{check}:{}})}function checkValue(result,checkName,field,sourceKind){const check=result.checks.find(entry=>entry.name===checkName);if(!check)throw new AssuranceSourceResolutionError(`assurance check ${checkName} is not present`,{source_kind:sourceKind,field,check:checkName});const value=field==="status"||field==="ok"?check.ok?0:1:valueAtPath(check.details,field,sourceKind,checkName);return{value,population_size:1,cost:result.checks.length}}async function resolveTreeId(pmRoot,explicit){if(explicit?.trim())return explicit.trim();try{const{stdout}=await execFileAsync("git",["rev-parse","HEAD^{commit}"],{cwd:pmRoot,encoding:"utf8",timeout:5e3,windowsHide:true});return stdout.trim()}catch{return"working-copy"}}async function readWorkspaceHistory(pmRoot,items){const streams=new Array(items.length);let nextIndex=0;const workers=Array.from({length:Math.min(HISTORY_READ_CONCURRENCY,items.length)},async()=>{while(nextIndex<items.length){const index=nextIndex;nextIndex+=1;const item=items[index];const entries=await readHistoryEntries(getHistoryPath(pmRoot,item.id),item.id);streams[index]=entries.map(entry=>({op:entry.op,author:entry.author,agent_harness:entry.agent_harness,agent_model:entry.agent_model}))}});await Promise.all(workers);return streams.flat()}async function createAssuranceWorkspaceContext(pmRoot,options={}){const settings=await readSettings(pmRoot);const typeRegistry=resolveItemTypeRegistry(settings);const statusRegistry=resolveRuntimeStatusRegistry(settings.schema);const metadata=options.strict_read===true?(await runList(void 0,{status:"all",full:true,noTruncate:true,strictRead:true},{path:pmRoot})).items:await listAllItemMetadata(pmRoot,settings.item_format,typeRegistry.type_to_folder,void 0,settings.schema);const items=metadata.map(item=>({...item,id:item.id,status:item.status,type:item.type}));const global2={path:pmRoot};const activeRegistrations=getActiveExtensionRegistrations();const registeredProviderCapabilities=Object.fromEntries((activeRegistrations?.assurance_providers??[]).map(registration=>[registration.definition.id,{cost_class:registration.runtime_definition.cost_class,network:registration.runtime_definition.network}]));const graphRuns=new Map;let validateRun;let healthRun;return{tree_id:options.resolve_tree===false?options.tree_id??"working-copy":await resolveTreeId(pmRoot,options.tree_id),items,history:options.include_history===false?[]:await readWorkspaceHistory(pmRoot,items),terminal_statuses:[...statusRegistry.terminal_statuses],provider_capabilities:{...registeredProviderCapabilities,...options.provider_capabilities},external:async source=>{if(source.kind==="graph"){const key=stableStringify({operation:source.operation,parameters:source.parameters??{}});let pending=graphRuns.get(key);if(pending===void 0){pending=runGraph(source.operation,void 0,void 0,{...source.parameters,full:true},global2);graphRuns.set(key,pending)}const result=await pending;return{value:valueAtPath(result,source.field,source.kind),population_size:items.length,cost:items.length}}if(source.kind==="validate"){validateRun??=runValidate({counts:true},global2);const result=await validateRun;return checkValue(result,source.check,source.field,source.kind)}if(source.kind==="health"){healthRun??=runHealth(global2,{checkOnly:true,full:true});const result=await healthRun;return checkValue(result,source.check,source.field,source.kind)}const hostProvider=options.providers?.[source.provider];if(hostProvider)return hostProvider(source);const registeredProvider=resolveRegisteredAssuranceMeasurementProvider(activeRegistrations,source.provider);if(!registeredProvider){throw new TypeError(`assurance provider ${source.provider} is not registered`)}return runRegisteredProvider(registeredProvider.runtime_definition,source,pmRoot,options.trigger??"sdk")}}}export{createAssuranceWorkspaceContext};
 //# sourceMappingURL=assurance-runtime.js.map
-//# debugId=cdf52e5c-86cf-5540-bc08-bfc274a1fdf9