@unbrained/pm-cli 2026.9.6 → 2026.9.8

package/dist/sdk/history-repair.js

@@ -1,658 +1,2 @@
-/**
- * @module sdk/history-repair
- *
- * Implements the pm history repair command surface and its agent-facing runtime behavior.
- */
-
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="9f91f2ee-cebe-592c-92ee-717301fa96ca")}catch(e){}}();
-import { assertInitializedTracker } from "./environment/tracker-preflight.js";
-import { salvageHistoryTail } from "./history/salvage.js";
-import { realpath } from "node:fs/promises";
-import path from "node:path";
-import jsonPatch from "fast-json-patch";
-import { patchPathToChangedField } from "../core/history/history-diff.js";
-import { pathExists, readFileIfExists } from "../core/fs/fs-utils.js";
-import { executeHistoryRewrite, writeHistoryRawWithRollback, } from "../core/history/history-rewrite.js";
-import { historyEntriesToRaw, normalizeReplayPatchOps, reanchorHistoryEntries, replayHashVerificationCandidates, resolveHistoryRepairItemHashVersion, toReplayDocument, verifyHistoryChain, verifyHistoryChainWithVersion, } from "../core/history/replay.js";
-import { sealHistoryRecord, } from "../core/history/history.js";
-import { classifyHistoryEvent } from "../core/history/event-classification.js";
-import { scanHistoryDrift } from "../core/history/drift-scan.js";
-import { invalidateHistoryDriftCache } from "../core/history/drift-cache.js";
-import { readHistoryEntries } from "../core/history/read.js";
-import { resolveItemTypeRegistry } from "../core/item/type-registry.js";
-import { EXIT_CODE } from "../core/shared/constants.js";
-import { PmCliError } from "../core/shared/errors.js";
-import { sha256Hex, stableStringify } from "../core/shared/serialization.js";
-import { resolveAuthor } from "../core/shared/author.js";
-import { nowIso } from "../core/shared/time.js";
-import { getActiveExtensionRegistrations, runActiveOnWriteHooks, } from "../core/extensions/index.js";
-import { listAllItemMetadataWithBody, readLocatedItem, } from "../core/store/item-store.js";
-import { resolvePmRoot } from "../core/store/paths.js";
-import { readSettings } from "../core/store/settings.js";
-import { resolveHistorySubject } from "./history-redact.js";
-import { isOriginalGitStateRestored } from "./merge/receipt-operation.js";
-import { inspectMergeReceiptEvidence, summarizeMergeReceipt, } from "./merge/receipts.js";
-import { encodeItemScalarDecisionValue, hashItemScalarDecisionValue, } from "./merge/three-way.js";
-import { listInvalidProvenanceHistoryStreamIds, normalizeInvalidHistoryProvenance, } from "./governance/provenance-health.js";
-function replayFieldValue(document, field) {
-    return field === "body"
-        ? document.body
-        : document.metadata[field];
-}
-/**
- * Report whether the replayed value survives inside the reconciled value.
- *
- * Arrays use multiset containment so append-only unions and deterministic
- * reordering remain lossless, while removals and scalar replacements stay loud.
- */
-function isReplayValuePreserved(replayed, reconciled) {
-    if (replayed === undefined || Object.is(replayed, reconciled)) {
-        return true;
-    }
-    if (Array.isArray(replayed)) {
-        if (!Array.isArray(reconciled)) {
-            return false;
-        }
-        const matched = new Set();
-        return replayed.every((expected) => {
-            const index = reconciled.findIndex((candidate, candidateIndex) => !matched.has(candidateIndex) &&
-                isReplayValuePreserved(expected, candidate));
-            if (index < 0) {
-                return false;
-            }
-            matched.add(index);
-            return true;
-        });
-    }
-    if (replayed === null ||
-        reconciled === null ||
-        typeof replayed !== "object" ||
-        typeof reconciled !== "object" ||
-        Array.isArray(reconciled)) {
-        return false;
-    }
-    const reconciledRecord = reconciled;
-    return Object.entries(replayed).every(([key, value]) => Object.hasOwn(reconciledRecord, key) &&
-        isReplayValuePreserved(value, reconciledRecord[key]));
-}
-/** Attribute reconciled fields to the newest history event that wrote each one. */
-function collectReconciliationEvents(entries, fields) {
-    const remaining = new Set(fields);
-    const events = [];
-    for (let index = entries.length - 1; index >= 0 && remaining.size > 0; index -= 1) {
-        const entry = entries[index];
-        const entryFields = new Set();
-        for (const op of normalizeReplayPatchOps(entry.patch)) {
-            entryFields.add(patchPathToChangedField(op.path));
-            if (op.from) {
-                entryFields.add(patchPathToChangedField(op.from));
-            }
-        }
-        const overlap = [...remaining].filter((field) => entryFields.has(field));
-        if (overlap.length === 0) {
-            continue;
-        }
-        for (const field of overlap) {
-            remaining.delete(field);
-        }
-        events.push({
-            index: index + 1,
-            ts: entry.ts,
-            author: entry.author,
-            op: entry.op,
-            fields: overlap.sort((left, right) => left.localeCompare(right)),
-        });
-    }
-    return events.reverse();
-}
-/** Compute which chain-vs-item differences preserve replayed context and which genuinely discard it. */
-export function analyzeReconciliationDiscard(entries, finalReplay, currentItemReplay) {
-    const reconcilePatch = jsonPatch.compare(finalReplay, currentItemReplay);
-    if (reconcilePatch.length === 0) {
-        return undefined;
-    }
-    const reconciledFields = new Set();
-    for (const op of reconcilePatch) {
-        reconciledFields.add(patchPathToChangedField(op.path));
-    }
-    const preservedFields = new Set([...reconciledFields].filter((field) => isReplayValuePreserved(replayFieldValue(finalReplay, field), replayFieldValue(currentItemReplay, field))));
-    const revertedFields = new Set([...reconciledFields].filter((field) => !preservedFields.has(field)));
-    const discardedEvents = collectReconciliationEvents(entries, revertedFields);
-    const preservedEvents = collectReconciliationEvents(entries, preservedFields);
-    const sortedReconciledFields = [...reconciledFields].sort((left, right) => left.localeCompare(right));
-    const sortedRevertedFields = [...revertedFields].sort((left, right) => left.localeCompare(right));
-    const sortedPreservedFields = [...preservedFields].sort((left, right) => left.localeCompare(right));
-    const discardedAuthors = [
-        ...new Set(discardedEvents.map((event) => event.author)),
-    ].sort((left, right) => left.localeCompare(right));
-    const preservedAuthors = [
-        ...new Set(preservedEvents.map((event) => event.author)),
-    ].sort((left, right) => left.localeCompare(right));
-    return {
-        reconciled_field_count: reconciledFields.size,
-        reconciled_fields: sortedReconciledFields,
-        reverted_field_count: revertedFields.size,
-        reverted_fields: sortedRevertedFields,
-        discarded_events: discardedEvents,
-        discarded_authors: discardedAuthors,
-        preserved_field_count: preservedFields.size,
-        preserved_fields: sortedPreservedFields,
-        preserved_events: preservedEvents,
-        preserved_authors: preservedAuthors,
-        recovery_hint: discardedEvents.length > 0
-            ? "Reconciliation keeps the on-disk item and overwrites these replayed mutations. To recover one, inspect it with pm history <id> --diff --field <field>, then re-apply the lost value with pm update."
-            : null,
-    };
-}
-async function canonicalRealPath(value) {
-    try {
-        return await realpath(value);
-    }
-    catch {
-        return null;
-    }
-}
-async function verifyReceiptAgainstSnapshot(params) {
-    const receiptPath = await canonicalRealPath(path.resolve(params.gitWorkspaceRoot, params.receipt.item_path));
-    if (receiptPath !== params.currentPath)
-        return null;
-    const declaredFields = [
-        ...new Set([
-            ...params.receipt.fields_from_theirs,
-            ...params.receipt.union_fields,
-            ...params.receipt.decisions.map((decision) => decision.field),
-        ]),
-    ].sort();
-    const hashes = params.receipt.merged_field_hashes;
-    if (!hashes || declaredFields.length === 0)
-        return null;
-    const hashFields = Object.keys(hashes).sort();
-    if (declaredFields.length !== hashFields.length ||
-        declaredFields.some((field, index) => field !== hashFields[index])) {
-        return null;
-    }
-    const currentMetadata = params.currentItemReplay.metadata;
-    const valuesMatch = declaredFields.every((field) => {
-        const value = field === "body" ? params.currentItemReplay.body : currentMetadata[field];
-        return [
-            hashItemScalarDecisionValue(value),
-            sha256Hex(stableStringify(encodeItemScalarDecisionValue(value))),
-        ].includes(hashes[field]);
-    });
-    return valuesMatch ? { receipt: params.receipt, declaredFields } : null;
-}
-async function verifyMergeReceiptProof(params) {
-    if (params.proof.gitWorkspaceRoot === null) {
-        return {
-            trusted: false,
-            reason: "git_workspace_unavailable",
-            receipt_ids: [],
-        };
-    }
-    if (params.itemPath === null || params.currentItemReplay === null) {
-        return {
-            trusted: false,
-            reason: "item_path_unavailable",
-            receipt_ids: [],
-        };
-    }
-    const itemReceipts = params.proof.receipts.filter((receipt) => receipt.item_id === params.id);
-    if (itemReceipts.length === 0) {
-        return { trusted: false, reason: "no_item_receipts", receipt_ids: [] };
-    }
-    const currentPath = await realpath(params.itemPath);
-    const trustedReceipts = [];
-    for (const receipt of itemReceipts) {
-        const trusted = await verifyReceiptAgainstSnapshot({
-            receipt,
-            gitWorkspaceRoot: params.proof.gitWorkspaceRoot,
-            currentPath,
-            currentItemReplay: params.currentItemReplay,
-        });
-        if (trusted)
-            trustedReceipts.push(trusted);
-    }
-    const trustedFields = new Set(trustedReceipts.flatMap(({ declaredFields }) => declaredFields));
-    const reconciliationFields = params.reconciliation?.reconciled_fields;
-    if (trustedReceipts.length > 0 &&
-        (reconciliationFields === undefined ||
-            (reconciliationFields.length > 0 &&
-                reconciliationFields.every((field) => trustedFields.has(field))))) {
-        return {
-            trusted: true,
-            reason: "trusted_merge_driver_hash_evidence",
-            receipt_ids: trustedReceipts.map(({ receipt }) => receipt.id),
-        };
-    }
-    return {
-        trusted: false,
-        reason: "no_receipt_set_proves_snapshot",
-        receipt_ids: [],
-    };
-}
-/** Refuse a restored-origin audit when its exact item snapshot or clean history has changed. */
-async function assertHistoryRepairAbandonmentProof(proof, context, chainOk, reanchor) {
-    if (proof === undefined)
-        return;
-    const { receipt, gitWorkspaceRoot } = proof;
-    const canonicalPath = context.currentItemPath === null ? null
-        : path.relative(gitWorkspaceRoot, context.currentItemPath).split(path.sep).join("/");
-    if (!chainOk || reanchor.entriesRehashed !== 0 || reanchor.entriesPatchRepaired !== 0 || context.matchedChainBefore !== true ||
-        context.currentItemRawBeforeLock === null || canonicalPath !== receipt.item_path ||
-        receipt.operation === undefined ||
-        !await isOriginalGitStateRestored(gitWorkspaceRoot, receipt.item_path, receipt.operation, context.currentItemRawBeforeLock)) {
-        throw new PmCliError("Restored-origin receipt evidence no longer proves the exact clean item snapshot.", EXIT_CODE.CONFLICT, {
-            code: "merge_reconcile_receipt_evidence_untrusted",
-            recovery: { suggested_retry: "pm merge reconcile --dry-run" },
-        });
-    }
-}
-/** Resolve and verify receipt candidates against loaded item evidence, refusing untrusted preview and apply requests alike. */
-async function resolveHistoryRepairMergeEvidence(params) {
-    const requestedReceiptIds = new Set(params.options.mergeReceiptProof?.receipts
-        .filter((receipt) => receipt.item_id === params.subjectId)
-        .map((receipt) => receipt.id) ?? []);
-    const authoritativeReceiptEvidence = params.options.mergeReceiptProof
-        ? await inspectMergeReceiptEvidence(params.options.mergeReceiptProof.gitWorkspaceRoot ?? process.cwd(), {
-            includeReconciled: true,
-            includeLossless: true,
-            pmRoot: params.pmRoot,
-        })
-        : undefined;
-    const subjectMergeReceipts = authoritativeReceiptEvidence?.receipts.filter((receipt) => receipt.item_id === params.subjectId &&
-        requestedReceiptIds.has(receipt.id)) ?? [];
-    const mergeReceiptProof = params.options.mergeReceiptProof
-        ? await verifyMergeReceiptProof({
-            proof: {
-                ...params.options.mergeReceiptProof,
-                receipts: subjectMergeReceipts,
-            },
-            id: params.subjectId,
-            itemPath: params.itemReplayContext.currentItemPath,
-            currentItemReplay: params.itemReplayContext.currentItemReplay,
-            reconciliation: params.reconciliation,
-        })
-        : undefined;
-    if (mergeReceiptProof &&
-        !mergeReceiptProof.trusted &&
-        params.options.force !== true) {
-        throw new PmCliError(`Merge receipt evidence for ${params.subjectId} does not prove the exact item snapshot (${mergeReceiptProof.reason}).`, EXIT_CODE.CONFLICT, {
-            code: "merge_reconcile_receipt_evidence_untrusted",
-            required: "Use authoritative clone-local or durable receipt evidence whose canonical path, declared fields, and merged-value hashes match the current item, or review the mismatch and rerun with --force.",
-            recovery: { suggested_retry: "pm merge reconcile --dry-run" },
-        });
-    }
-    const provenMergeReceipts = mergeReceiptProof?.trusted
-        ? subjectMergeReceipts.filter((receipt) => mergeReceiptProof.receipt_ids.includes(receipt.id))
-        : [];
-    return {
-        mergeReceiptProof,
-        effectiveAuditContext: provenMergeReceipts.length > 0 && params.options.force !== true
-            ? {
-                ...params.options.auditContext,
-                merge: {
-                    receipts: provenMergeReceipts.map(summarizeMergeReceipt),
-                },
-            }
-            : params.options.auditContext,
-    };
-}
-async function loadHistoryRepairItemReplay(subject, settings, historyEntries, itemHashVersion) {
-    const currentItemPath = subject.located?.itemPath ?? null;
-    const loadedItem = subject.located
-        ? await readLocatedItem(subject.located, { schema: settings.schema })
-        : null;
-    if (!loadedItem) {
-        return {
-            currentItemReplay: null,
-            currentItemPath,
-            matchedChainBefore: null,
-            currentItemRawBeforeLock: null,
-            loadedItem: null,
-        };
-    }
-    const currentItemReplay = toReplayDocument(loadedItem.document);
-    const lastOriginalAfterHash = historyEntries[historyEntries.length - 1].after_hash;
-    return {
-        currentItemReplay,
-        currentItemPath,
-        matchedChainBefore: replayHashVerificationCandidates(currentItemReplay, itemHashVersion).includes(lastOriginalAfterHash),
-        currentItemRawBeforeLock: loadedItem.raw,
-        loadedItem,
-    };
-}
-function buildHistoryRepairMessage(params) {
-    if (typeof params.message === "string" && params.message.trim().length > 0) {
-        return params.message;
-    }
-    /* v8 ignore start -- message suffix/plural variants are deterministic formatting fallbacks around the covered repair outcomes */
-    return `history-repair re-anchored ${params.entriesRehashed} entr${params.entriesRehashed === 1 ? "y" : "ies"}${params.entriesPatchRepaired > 0 ? `, repaired ${params.entriesPatchRepaired} patch(es)` : ""}${params.reconcileNeeded ? ", reconciled chain with on-disk item" : ""}.`;
-    /* v8 ignore stop */
-}
-function buildHistoryRepairEntries(params) {
-    const rewrittenEntries = [...params.reanchorEntries];
-    if (!params.changed) {
-        return { rewrittenEntries, auditEntryAdded: false };
-    }
-    const afterReplay = params.reconcileNeeded && params.currentItemReplay
-        ? params.currentItemReplay
-        : params.finalReplay;
-    const beforeHashes = replayHashVerificationCandidates(params.finalReplay, params.itemHashVersion);
-    const previousAfterHash = params.reanchorEntries[params.reanchorEntries.length - 1].after_hash;
-    const semanticIndex = beforeHashes.indexOf(previousAfterHash);
-    const afterHashes = replayHashVerificationCandidates(afterReplay, params.itemHashVersion);
-    const auditEntry = {
-        ts: nowIso(),
-        author: params.author,
-        op: params.auditOperation,
-        patch: params.reconcileNeeded && params.currentItemReplay
-            ? jsonPatch.compare(params.finalReplay, params.currentItemReplay)
-            : [],
-        before_hash: beforeHashes[semanticIndex],
-        after_hash: afterHashes[semanticIndex],
-        message: params.message,
-        ...(params.explicitItemHashVersion
-            ? { item_hash_version: params.itemHashVersion }
-            : {}),
-        ...(params.auditContext === undefined
-            ? {}
-            : { context: params.auditContext }),
-    };
-    rewrittenEntries.push(sealHistoryRecord({
-        ...auditEntry,
-        event_class: classifyHistoryEvent(auditEntry),
-    }));
-    return { rewrittenEntries, auditEntryAdded: true };
-}
-function collectHistoryRepairWarnings(changed, skippedOps, reconciliation) {
-    const warnings = [];
-    if (!changed) {
-        warnings.push("history_repair_no_changes");
-    }
-    if (skippedOps > 0) {
-        warnings.push(`history_repair_skipped_unresolvable_ops:${skippedOps}`);
-    }
-    if (reconciliation && reconciliation.discarded_events.length > 0) {
-        warnings.push(`history_repair_reconcile_discards_events:${reconciliation.discarded_events.length}`, `history_repair_discarded_authors:${reconciliation.discarded_authors.join(",")}`);
-    }
-    return warnings;
-}
-/** Revalidate item/history bytes and restored-origin Git proof under the rewrite lock before persisting. */
-async function applyHistoryRepairRewrite(params) {
-    return executeHistoryRewrite({
-        pmRoot: params.pmRoot,
-        subject: params.subject,
-        settings: params.settings,
-        typeRegistry: params.typeRegistry,
-        historyRawBeforeLock: params.historyRawBeforeLock,
-        currentItemRawBeforeLock: params.itemReplayContext.currentItemRawBeforeLock,
-        operation: "history-repair",
-        author: params.author,
-        force: params.force,
-        itemDocument: params.itemReplayContext.loadedItem?.document ?? null,
-        applyRewrite: async ({ historyRawUnderLock }) => {
-            await assertHistoryRepairAbandonmentProof(params.mergeAbandonmentProof, params.itemReplayContext, params.chainOk, params.reanchor);
-            await writeHistoryRawWithRollback({
-                historyPath: params.historyPath,
-                nextHistoryRaw: historyEntriesToRaw(params.rewrittenEntries),
-                historyRawUnderLock,
-            });
-        },
-        applyPostRewrite: async () => runActiveOnWriteHooks({
-            path: params.historyPath,
-            scope: "project",
-            op: "history_repair:history",
-        }),
-    });
-}
-/** Implements run history repair for the public runtime surface of this module. */
-export async function runHistoryRepair(id, options, global) {
-    const pmRoot = resolvePmRoot(process.cwd(), global.path);
-    await assertInitializedTracker(pmRoot);
-    const settings = await readSettings(pmRoot);
-    const typeRegistry = resolveItemTypeRegistry(settings, getActiveExtensionRegistrations());
-    const subject = await resolveHistorySubject(pmRoot, id, settings, typeRegistry.type_to_folder);
-    if (options.salvageTail === true) {
-        return salvageHistoryTail({ pmRoot, subject, settings, typeRegistry, options, author: resolveAuthor(options.author, settings.author_default) });
-    }
-    return repairHistorySubject({ pmRoot, subject, settings, typeRegistry, options });
-}
-/** Preserve explicit audit requests while reusing exact restored-origin dispositions in verified history. */
-function shouldAppendForcedHistoryAudit(options, historyEntries) {
-    // Receipt persistence can fail after the audited history transaction commits.
-    // Only an identical disposition satisfies a retry; unrelated audits do not.
-    const alreadyRecorded = options.mergeAbandonmentProof !== undefined &&
-        options.auditContext !== undefined &&
-        historyEntries.some((entry) => entry.op === "merge_reconcile" &&
-            stableStringify(entry.context) === stableStringify(options.auditContext));
-    return options.forceAuditEntry === true && !alreadyRecorded;
-}
-/** Reanchor or reconcile one resolved subject, separately from byte-preserving salvage. */
-async function repairHistorySubject(params) {
-    const { pmRoot, subject, settings, typeRegistry, options } = params;
-    if (!(await pathExists(subject.historyPath))) {
-        throw new PmCliError(`No history stream exists for ${subject.id}.`, EXIT_CODE.NOT_FOUND);
-    }
-    const historyRawBeforeLock = await readFileIfExists(subject.historyPath);
-    const historyEntries = await readHistoryEntries(subject.historyPath, subject.id);
-    if (historyEntries.length === 0) {
-        throw new PmCliError(`No history entries exist for ${subject.id}; nothing to repair.`, EXIT_CODE.USAGE);
-    }
-    const chainBefore = verifyHistoryChain(historyEntries);
-    const chainVersionBefore = verifyHistoryChainWithVersion(historyEntries);
-    const provenanceNormalization = options.normalizeProvenance
-        ? normalizeInvalidHistoryProvenance(historyEntries)
-        : {
-            entries: historyEntries,
-            receipt: {
-                changed: false,
-                events_changed: 0,
-                observations_removed: 0,
-                invalid_values: [],
-            },
-        };
-    const itemHashVersion = resolveHistoryRepairItemHashVersion(provenanceNormalization.entries);
-    const explicitVersionsBefore = new Set(provenanceNormalization.entries
-        .map((entry) => entry.item_hash_version)
-        .filter((version) => version !== undefined));
-    const reanchor = reanchorHistoryEntries(provenanceNormalization.entries, itemHashVersion);
-    const itemReplayContext = await loadHistoryRepairItemReplay(subject, settings, historyEntries, itemHashVersion);
-    await assertHistoryRepairAbandonmentProof(options.mergeAbandonmentProof, itemReplayContext, chainBefore.ok, reanchor);
-    const finalReplay = reanchor.finalDocument;
-    const finalReplayHashes = replayHashVerificationCandidates(finalReplay, itemHashVersion);
-    let reconcileNeeded = false;
-    if (itemReplayContext.currentItemReplay !== null) {
-        const currentItemReplayHashes = replayHashVerificationCandidates(itemReplayContext.currentItemReplay, itemHashVersion);
-        reconcileNeeded = !finalReplayHashes.some((hash, hashIndex) => hash === currentItemReplayHashes[hashIndex]);
-    }
-    // GH-603: reconciling toward the on-disk item can silently overwrite the
-    // replayed effect of other authors' events (classic after a lossy merge).
-    // Surface exactly what is being discarded before any write happens.
-    const reconciliation = reconcileNeeded && itemReplayContext.currentItemReplay
-        ? analyzeReconciliationDiscard(reanchor.entries, finalReplay, itemReplayContext.currentItemReplay)
-        : undefined;
-    const { mergeReceiptProof, effectiveAuditContext } = await resolveHistoryRepairMergeEvidence({
-        options,
-        pmRoot,
-        subjectId: subject.id,
-        itemReplayContext,
-        reconciliation,
-    });
-    const changed = [
-        reanchor.entriesRehashed > 0,
-        reanchor.entriesPatchRepaired > 0,
-        reconcileNeeded,
-        shouldAppendForcedHistoryAudit(options, historyEntries),
-        provenanceNormalization.receipt.changed,
-    ].some(Boolean);
-    const author = resolveAuthor(options.author, settings.author_default);
-    const dryRun = Boolean(options.dryRun);
-    const repairMessage = buildHistoryRepairMessage({
-        message: options.message,
-        entriesRehashed: reanchor.entriesRehashed,
-        entriesPatchRepaired: reanchor.entriesPatchRepaired,
-        reconcileNeeded,
-    });
-    const { rewrittenEntries, auditEntryAdded } = buildHistoryRepairEntries({
-        reanchorEntries: reanchor.entries,
-        changed,
-        reconcileNeeded,
-        currentItemReplay: itemReplayContext.currentItemReplay,
-        finalReplay,
-        author,
-        message: repairMessage,
-        auditOperation: options.auditOperation ?? "history_repair",
-        auditContext: provenanceNormalization.receipt.changed
-            ? {
-                ...effectiveAuditContext,
-                provenance_normalization: provenanceNormalization.receipt,
-            }
-            : effectiveAuditContext,
-        itemHashVersion,
-        explicitItemHashVersion: reanchor.explicitItemHashVersion,
-    });
-    const historyVerify = verifyHistoryChain(rewrittenEntries);
-    if (!historyVerify.ok) {
-        throw new PmCliError(`history-repair produced an invalid rewritten chain (${historyVerify.errors.join(", ")}).`, EXIT_CODE.GENERIC_FAILURE);
-    }
-    const warnings = collectHistoryRepairWarnings(changed, reanchor.skippedOps, reconciliation);
-    if (changed && !dryRun) {
-        warnings.push(...(await applyHistoryRepairRewrite({
-            pmRoot,
-            subject,
-            settings,
-            typeRegistry,
-            historyRawBeforeLock,
-            itemReplayContext,
-            mergeAbandonmentProof: options.mergeAbandonmentProof,
-            chainOk: chainBefore.ok,
-            reanchor,
-            author,
-            force: options.force,
-            historyPath: subject.historyPath,
-            rewrittenEntries,
-        })));
-    }
-    return {
-        id: subject.id,
-        dry_run: dryRun,
-        changed,
-        history: {
-            path: subject.historyPath,
-            entries_scanned: historyEntries.length,
-            chain_drift_before: !chainBefore.ok,
-            entries_rehashed: reanchor.entriesRehashed,
-            entries_patch_repaired: reanchor.entriesPatchRepaired,
-            converted_replace_to_add: reanchor.convertedReplaceToAdd,
-            skipped_ops: reanchor.skippedOps,
-            reconciled_with_item: reconcileNeeded,
-            audit_entry_added: auditEntryAdded,
-            verify_ok: historyVerify.ok,
-            verify_errors: historyVerify.errors,
-            item_hash_version_before: chainVersionBefore.item_hash_version ?? null,
-            item_hash_version_after: itemHashVersion,
-            version_disposition: explicitVersionsBefore.size > 1
-                ? "selected_for_ambiguous_stream"
-                : "preserved",
-        },
-        item: {
-            exists: itemReplayContext.currentItemPath !== null,
-            path: itemReplayContext.currentItemPath,
-            matched_chain_before: itemReplayContext.matchedChainBefore,
-        },
-        provenance_normalization: {
-            requested: options.normalizeProvenance === true,
-            ...provenanceNormalization.receipt,
-        },
-        ...(reconciliation ? { reconciliation } : {}),
-        ...(mergeReceiptProof ? { merge_receipt_proof: mergeReceiptProof } : {}),
-        warnings: [...new Set(warnings)].sort((left, right) => left.localeCompare(right)),
-        generated_at: nowIso(),
-    };
-}
-/** Enforce the `pm history-repair` target contract shared by the CLI and MCP surfaces: exactly one of an item `<id>` or `--all` must be provided. */
-export function assertHistoryRepairTarget(id, all) {
-    if (all && id !== undefined) {
-        throw new PmCliError("history-repair: <id> and --all are mutually exclusive; pass an item id to repair one stream or --all to repair every drifted stream.", EXIT_CODE.USAGE);
-    }
-    if (!all && id === undefined) {
-        throw new PmCliError("history-repair: provide an item <id> or pass --all to repair every drifted stream.", EXIT_CODE.USAGE);
-    }
-}
-/** Bulk drift repair: scan every item's history stream with the same drift scan `pm health` uses, then run the audited single-stream repair (ownership check, lock, no-drift verification, audit marker) for each drifted stream. One failing stream never aborts the rest; failures are collected per row and the caller decides the exit code from `totals.failed`. */
-export async function runHistoryRepairAll(options, global) {
-    if (options.salvageTail === true) {
-        throw new PmCliError("Tail salvage requires one explicit item ID; --all is not supported.", EXIT_CODE.USAGE);
-    }
-    const pmRoot = resolvePmRoot(process.cwd(), global.path);
-    await assertInitializedTracker(pmRoot);
-    const settings = await readSettings(pmRoot);
-    const typeRegistry = resolveItemTypeRegistry(settings, getActiveExtensionRegistrations());
-    const itemReadWarnings = [];
-    const items = await listAllItemMetadataWithBody(pmRoot, settings.item_format, typeRegistry.type_to_folder, itemReadWarnings, settings.schema, { forceSourceScan: true });
-    const drift = await scanHistoryDrift(pmRoot, items);
-    const invalidProvenanceIds = options.normalizeProvenance
-        ? await listInvalidProvenanceHistoryStreamIds(pmRoot)
-        : [];
-    const targetedIds = [
-        ...new Set([...drift.driftedItems, ...invalidProvenanceIds]),
-    ].sort((left, right) => left.localeCompare(right));
-    const streams = [];
-    const repairWarnings = [];
-    const totals = { repaired: 0, skipped_clean: 0, failed: 0 };
-    for (const driftedId of targetedIds) {
-        try {
-            const result = await runHistoryRepair(driftedId, {
-                ...options,
-                auditContext: options.auditContextById?.[driftedId],
-                auditContextById: undefined,
-                mergeReceiptProof: options.mergeReceiptProofById?.[driftedId] ??
-                    options.mergeReceiptProof,
-                mergeReceiptProofById: undefined,
-            }, global);
-            /* c8 ignore next -- mixed repaired/clean outcomes depend on live drift composition. */
-            const outcome = result.changed ? "repaired" : "skipped_clean";
-            totals[outcome] += 1;
-            repairWarnings.push(...result.warnings.map((warning) => `${driftedId}:${warning}`));
-            streams.push({
-                id: driftedId,
-                outcome,
-                entries_rehashed: result.history.entries_rehashed,
-                entries_patch_repaired: result.history.entries_patch_repaired,
-                reconciled_with_item: result.history.reconciled_with_item,
-                ...(result.reconciliation
-                    ? { reconciliation: result.reconciliation }
-                    : {}),
-                ...(result.merge_receipt_proof
-                    ? { merge_receipt_proof: result.merge_receipt_proof }
-                    : {}),
-                warnings: result.warnings,
-            });
-        }
-        catch (error) {
-            totals.failed += 1;
-            streams.push({
-                id: driftedId,
-                outcome: "failed",
-                /* c8 ignore next -- non-Error throws are normalized in defensive fallback. */
-                error: error instanceof Error ? error.message : String(error),
-            });
-        }
-    }
-    if (!options.dryRun) {
-        await invalidateHistoryDriftCache(pmRoot);
-    }
-    return {
-        all: true,
-        dry_run: Boolean(options.dryRun),
-        scanned_streams: items.length,
-        drifted_streams: drift.driftedItems.length,
-        provenance_invalid_streams: invalidProvenanceIds.length,
-        streams,
-        totals,
-        warnings: [...new Set([...itemReadWarnings, ...repairWarnings])].sort((left, right) => left.localeCompare(right)),
-        generated_at: nowIso(),
-    };
-}
+!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="fc12fe93-9e80-5501-a4ee-3b93eb8b0585")}catch(e2){}})();import{salvageHistoryTail}from"./history/salvage.js";import{realpath}from"node:fs/promises";import path from"node:path";import jsonPatch from"fast-json-patch";import{patchPathToChangedField}from"../core/history/history-diff.js";import{normalizeReplayPatchOps,reanchorHistoryEntries,replayHashVerificationCandidates,resolveHistoryRepairItemHashVersion,toReplayDocument,verifyHistoryChainWithVersion}from"../core/history/replay.js";import{sealHistoryRecord}from"../core/history/history.js";import{classifyHistoryEvent}from"../core/history/event-classification.js";import{scanHistoryDrift}from"../core/history/drift-scan.js";import{invalidateHistoryDriftCache}from"../core/history/drift-cache.js";import{EXIT_CODE}from"../core/shared/constants.js";import{PmCliError}from"../core/shared/errors.js";import{sha256Hex,stableStringify}from"../core/shared/serialization.js";import{resolveAuthor}from"../core/shared/author.js";import{nowIso}from"../core/shared/time.js";import{listAllItemMetadataWithBody}from"../core/store/item-store.js";import{resolveHistoryWorkspace,resolveHistorySubject}from"./history/subject.js";import{runHistoryMaintenance}from"./history/maintenance.js";import{isOriginalGitStateRestored}from"./merge/receipt-operation.js";import{inspectMergeReceiptEvidence,summarizeMergeReceipt}from"./merge/receipts.js";import{encodeItemScalarDecisionValue,hashItemScalarDecisionValue}from"./merge/three-way.js";import{listInvalidProvenanceHistoryStreamIds,normalizeInvalidHistoryProvenance}from"./governance/provenance-health.js";function replayFieldValue(document,field){return field==="body"?document.body:document.metadata[field]}function isReplayValuePreserved(replayed,reconciled){if(replayed===void 0||Object.is(replayed,reconciled)){return true}if(Array.isArray(replayed)){if(!Array.isArray(reconciled)){return false}const matched=new Set;return replayed.every(expected=>{const index=reconciled.findIndex((candidate,candidateIndex)=>!matched.has(candidateIndex)&&isReplayValuePreserved(expected,candidate));if(index<0){return false}matched.add(index);return true})}if(replayed===null||reconciled===null||typeof replayed!=="object"||typeof reconciled!=="object"||Array.isArray(reconciled)){return false}const reconciledRecord=reconciled;return Object.entries(replayed).every(([key,value])=>Object.hasOwn(reconciledRecord,key)&&isReplayValuePreserved(value,reconciledRecord[key]))}function collectReconciliationEvents(entries,fields){const remaining=new Set(fields);const events=[];for(let index=entries.length-1;index>=0&&remaining.size>0;index-=1){const entry=entries[index];const entryFields=new Set;for(const op of normalizeReplayPatchOps(entry.patch)){entryFields.add(patchPathToChangedField(op.path));if(op.from){entryFields.add(patchPathToChangedField(op.from))}}const overlap=[...remaining].filter(field=>entryFields.has(field));if(overlap.length===0){continue}for(const field of overlap){remaining.delete(field)}events.push({index:index+1,ts:entry.ts,author:entry.author,op:entry.op,fields:overlap.sort((left,right)=>left.localeCompare(right))})}return events.reverse()}function analyzeReconciliationDiscard(entries,finalReplay,currentItemReplay){const reconcilePatch=jsonPatch.compare(finalReplay,currentItemReplay);if(reconcilePatch.length===0){return void 0}const reconciledFields=new Set;for(const op of reconcilePatch){reconciledFields.add(patchPathToChangedField(op.path))}const preservedFields=new Set([...reconciledFields].filter(field=>isReplayValuePreserved(replayFieldValue(finalReplay,field),replayFieldValue(currentItemReplay,field))));const revertedFields=new Set([...reconciledFields].filter(field=>!preservedFields.has(field)));const discardedEvents=collectReconciliationEvents(entries,revertedFields);const preservedEvents=collectReconciliationEvents(entries,preservedFields);const sortedReconciledFields=[...reconciledFields].sort((left,right)=>left.localeCompare(right));const sortedRevertedFields=[...revertedFields].sort((left,right)=>left.localeCompare(right));const sortedPreservedFields=[...preservedFields].sort((left,right)=>left.localeCompare(right));const discardedAuthors=[...new Set(discardedEvents.map(event=>event.author))].sort((left,right)=>left.localeCompare(right));const preservedAuthors=[...new Set(preservedEvents.map(event=>event.author))].sort((left,right)=>left.localeCompare(right));return{reconciled_field_count:reconciledFields.size,reconciled_fields:sortedReconciledFields,reverted_field_count:revertedFields.size,reverted_fields:sortedRevertedFields,discarded_events:discardedEvents,discarded_authors:discardedAuthors,preserved_field_count:preservedFields.size,preserved_fields:sortedPreservedFields,preserved_events:preservedEvents,preserved_authors:preservedAuthors,recovery_hint:discardedEvents.length>0?"Reconciliation keeps the on-disk item and overwrites these replayed mutations. To recover one, inspect it with pm history <id> --diff --field <field>, then re-apply the lost value with pm update.":null}}async function canonicalRealPath(value){try{return await realpath(value)}catch{return null}}async function verifyReceiptAgainstSnapshot(params){const receiptPath=await canonicalRealPath(path.resolve(params.gitWorkspaceRoot,params.receipt.item_path));if(receiptPath!==params.currentPath)return null;const declaredFields=[...new Set([...params.receipt.fields_from_theirs,...params.receipt.union_fields,...params.receipt.decisions.map(decision=>decision.field)])].sort();const hashes=params.receipt.merged_field_hashes;if(!hashes||declaredFields.length===0)return null;const hashFields=Object.keys(hashes).sort();if(declaredFields.length!==hashFields.length||declaredFields.some((field,index)=>field!==hashFields[index])){return null}const currentMetadata=params.currentItemReplay.metadata;const valuesMatch=declaredFields.every(field=>{const value=field==="body"?params.currentItemReplay.body:currentMetadata[field];return[hashItemScalarDecisionValue(value),sha256Hex(stableStringify(encodeItemScalarDecisionValue(value)))].includes(hashes[field])});return valuesMatch?{receipt:params.receipt,declaredFields}:null}async function verifyMergeReceiptProof(params){if(params.proof.gitWorkspaceRoot===null){return{trusted:false,reason:"git_workspace_unavailable",receipt_ids:[]}}if(params.itemPath===null||params.currentItemReplay===null){return{trusted:false,reason:"item_path_unavailable",receipt_ids:[]}}const itemReceipts=params.proof.receipts.filter(receipt=>receipt.item_id===params.id);if(itemReceipts.length===0){return{trusted:false,reason:"no_item_receipts",receipt_ids:[]}}const currentPath=await realpath(params.itemPath);const trustedReceipts=[];for(const receipt of itemReceipts){const trusted=await verifyReceiptAgainstSnapshot({receipt,gitWorkspaceRoot:params.proof.gitWorkspaceRoot,currentPath,currentItemReplay:params.currentItemReplay});if(trusted)trustedReceipts.push(trusted)}const trustedFields=new Set(trustedReceipts.flatMap(({declaredFields})=>declaredFields));const reconciliationFields=params.reconciliation?.reconciled_fields;if(trustedReceipts.length>0&&(reconciliationFields===void 0||reconciliationFields.length>0&&reconciliationFields.every(field=>trustedFields.has(field)))){return{trusted:true,reason:"trusted_merge_driver_hash_evidence",receipt_ids:trustedReceipts.map(({receipt})=>receipt.id)}}return{trusted:false,reason:"no_receipt_set_proves_snapshot",receipt_ids:[]}}async function assertHistoryRepairAbandonmentProof(proof,context,chainOk,reanchor){if(proof===void 0)return;const{receipt,gitWorkspaceRoot}=proof;const canonicalPath=context.currentItemPath===null?null:path.relative(gitWorkspaceRoot,context.currentItemPath).split(path.sep).join("/");if(!chainOk||reanchor.entriesRehashed!==0||reanchor.entriesPatchRepaired!==0||context.matchedChainBefore!==true||context.currentItemRawBeforeLock===null||canonicalPath!==receipt.item_path||receipt.operation===void 0||!await isOriginalGitStateRestored(gitWorkspaceRoot,receipt.item_path,receipt.operation,context.currentItemRawBeforeLock)){throw new PmCliError("Restored-origin receipt evidence no longer proves the exact clean item snapshot.",EXIT_CODE.CONFLICT,{code:"merge_reconcile_receipt_evidence_untrusted",recovery:{suggested_retry:"pm merge reconcile --dry-run"}})}}async function resolveHistoryRepairMergeEvidence(params){const requestedReceiptIds=new Set(params.options.mergeReceiptProof?.receipts.filter(receipt=>receipt.item_id===params.subjectId).map(receipt=>receipt.id)??[]);const authoritativeReceiptEvidence=params.options.mergeReceiptProof?await inspectMergeReceiptEvidence(params.options.mergeReceiptProof.gitWorkspaceRoot??process.cwd(),{includeReconciled:true,includeLossless:true,pmRoot:params.pmRoot}):void 0;const subjectMergeReceipts=authoritativeReceiptEvidence?.receipts.filter(receipt=>receipt.item_id===params.subjectId&&requestedReceiptIds.has(receipt.id))??[];const mergeReceiptProof=params.options.mergeReceiptProof?await verifyMergeReceiptProof({proof:{...params.options.mergeReceiptProof,receipts:subjectMergeReceipts},id:params.subjectId,itemPath:params.itemReplayContext.currentItemPath,currentItemReplay:params.itemReplayContext.currentItemReplay,reconciliation:params.reconciliation}):void 0;if(mergeReceiptProof&&!mergeReceiptProof.trusted&&params.options.force!==true){throw new PmCliError(`Merge receipt evidence for ${params.subjectId} does not prove the exact item snapshot (${mergeReceiptProof.reason}).`,EXIT_CODE.CONFLICT,{code:"merge_reconcile_receipt_evidence_untrusted",required:"Use authoritative clone-local or durable receipt evidence whose canonical path, declared fields, and merged-value hashes match the current item, or review the mismatch and rerun with --force.",recovery:{suggested_retry:"pm merge reconcile --dry-run"}})}const provenMergeReceipts=mergeReceiptProof?.trusted?subjectMergeReceipts.filter(receipt=>mergeReceiptProof.receipt_ids.includes(receipt.id)):[];return{mergeReceiptProof,effectiveAuditContext:provenMergeReceipts.length>0&&params.options.force!==true?{...params.options.auditContext,merge:{receipts:provenMergeReceipts.map(summarizeMergeReceipt)}}:params.options.auditContext}}function describeHistoryRepairItemReplay(subject,snapshot,itemHashVersion){const currentItemPath=subject.located?.itemPath??null;const loadedItem=snapshot.loadedItem;const historyEntries=snapshot.entries;if(!loadedItem){return{currentItemReplay:null,currentItemPath,matchedChainBefore:null,currentItemRawBeforeLock:null,loadedItem:null}}const currentItemReplay=toReplayDocument(loadedItem.document);const lastOriginalAfterHash=historyEntries[historyEntries.length-1].after_hash;return{currentItemReplay,currentItemPath,matchedChainBefore:replayHashVerificationCandidates(currentItemReplay,itemHashVersion).includes(lastOriginalAfterHash),currentItemRawBeforeLock:loadedItem.raw,loadedItem}}function buildHistoryRepairMessage(params){if(typeof params.message==="string"&&params.message.trim().length>0){return params.message}return`history-repair re-anchored ${params.entriesRehashed} entr${params.entriesRehashed===1?"y":"ies"}${params.entriesPatchRepaired>0?`, repaired ${params.entriesPatchRepaired} patch(es)`:""}${params.reconcileNeeded?", reconciled chain with on-disk item":""}.`}function buildHistoryRepairEntries(params){const rewrittenEntries=[...params.reanchorEntries];if(!params.changed){return{rewrittenEntries,auditEntryAdded:false}}const afterReplay=params.reconcileNeeded&&params.currentItemReplay?params.currentItemReplay:params.finalReplay;const beforeHashes=replayHashVerificationCandidates(params.finalReplay,params.itemHashVersion);const previousAfterHash=params.reanchorEntries[params.reanchorEntries.length-1].after_hash;const semanticIndex=beforeHashes.indexOf(previousAfterHash);const afterHashes=replayHashVerificationCandidates(afterReplay,params.itemHashVersion);const auditEntry={ts:nowIso(),author:params.author,op:params.auditOperation,patch:params.reconcileNeeded&&params.currentItemReplay?jsonPatch.compare(params.finalReplay,params.currentItemReplay):[],before_hash:beforeHashes[semanticIndex],after_hash:afterHashes[semanticIndex],message:params.message,...params.explicitItemHashVersion?{item_hash_version:params.itemHashVersion}:{},...params.auditContext===void 0?{}:{context:params.auditContext}};rewrittenEntries.push(sealHistoryRecord({...auditEntry,event_class:classifyHistoryEvent(auditEntry)}));return{rewrittenEntries,auditEntryAdded:true}}function collectHistoryRepairWarnings(changed,skippedOps,reconciliation){const warnings=[];if(!changed){warnings.push("history_repair_no_changes")}if(skippedOps>0){warnings.push(`history_repair_skipped_unresolvable_ops:${skippedOps}`)}if(reconciliation&&reconciliation.discarded_events.length>0){warnings.push(`history_repair_reconcile_discards_events:${reconciliation.discarded_events.length}`,`history_repair_discarded_authors:${reconciliation.discarded_authors.join(",")}`)}return warnings}async function runHistoryRepair(id,options,global2){const{pmRoot,settings,typeRegistry}=await resolveHistoryWorkspace(global2.path);const subject=await resolveHistorySubject(pmRoot,id,settings,typeRegistry.type_to_folder);if(options.salvageTail===true){return salvageHistoryTail({pmRoot,subject,settings,typeRegistry,options,author:resolveAuthor(options.author,settings.author_default)})}return runHistoryMaintenance({pmRoot,subject,settings,typeRegistry,operation:"history-repair",options,transform:snapshot=>buildHistoryRepairPlan({pmRoot,subject,options},snapshot)})}function shouldAppendForcedHistoryAudit(options,historyEntries){const alreadyRecorded=options.mergeAbandonmentProof!==void 0&&options.auditContext!==void 0&&historyEntries.some(entry=>entry.op==="merge_reconcile"&&stableStringify(entry.context)===stableStringify(options.auditContext));return options.forceAuditEntry===true&&!alreadyRecorded}async function buildHistoryRepairPlan(params,snapshot){const{pmRoot,subject,options}=params;const historyEntries=snapshot.entries;const chainBefore=snapshot.verification;const chainVersionBefore=verifyHistoryChainWithVersion(historyEntries);const provenanceNormalization=options.normalizeProvenance?normalizeInvalidHistoryProvenance(historyEntries):{entries:historyEntries,receipt:{changed:false,events_changed:0,observations_removed:0,invalid_values:[]}};const itemHashVersion=resolveHistoryRepairItemHashVersion(provenanceNormalization.entries);const explicitVersionsBefore=new Set(provenanceNormalization.entries.map(entry=>entry.item_hash_version).filter(version=>version!==void 0));const reanchor=reanchorHistoryEntries(provenanceNormalization.entries,itemHashVersion);const itemReplayContext=describeHistoryRepairItemReplay(subject,snapshot,itemHashVersion);await assertHistoryRepairAbandonmentProof(options.mergeAbandonmentProof,itemReplayContext,chainBefore.ok,reanchor);const finalReplay=reanchor.finalDocument;const finalReplayHashes=replayHashVerificationCandidates(finalReplay,itemHashVersion);let reconcileNeeded=false;if(itemReplayContext.currentItemReplay!==null){const currentItemReplayHashes=replayHashVerificationCandidates(itemReplayContext.currentItemReplay,itemHashVersion);reconcileNeeded=!finalReplayHashes.some((hash,hashIndex)=>hash===currentItemReplayHashes[hashIndex])}const reconciliation=reconcileNeeded&&itemReplayContext.currentItemReplay?analyzeReconciliationDiscard(reanchor.entries,finalReplay,itemReplayContext.currentItemReplay):void 0;const{mergeReceiptProof,effectiveAuditContext}=await resolveHistoryRepairMergeEvidence({options,pmRoot,subjectId:subject.id,itemReplayContext,reconciliation});const changed=[reanchor.entriesRehashed>0,reanchor.entriesPatchRepaired>0,reconcileNeeded,shouldAppendForcedHistoryAudit(options,historyEntries),provenanceNormalization.receipt.changed].some(Boolean);const author=snapshot.author;const dryRun=Boolean(options.dryRun);const repairMessage=buildHistoryRepairMessage({message:options.message,entriesRehashed:reanchor.entriesRehashed,entriesPatchRepaired:reanchor.entriesPatchRepaired,reconcileNeeded});const{rewrittenEntries,auditEntryAdded}=buildHistoryRepairEntries({reanchorEntries:reanchor.entries,changed,reconcileNeeded,currentItemReplay:itemReplayContext.currentItemReplay,finalReplay,author,message:repairMessage,auditOperation:options.auditOperation??"history_repair",auditContext:provenanceNormalization.receipt.changed?{...effectiveAuditContext,provenance_normalization:provenanceNormalization.receipt}:effectiveAuditContext,itemHashVersion,explicitItemHashVersion:reanchor.explicitItemHashVersion});const warnings=collectHistoryRepairWarnings(changed,reanchor.skippedOps,reconciliation);return{changed,rewrittenEntries,beforeWrite:async()=>assertHistoryRepairAbandonmentProof(options.mergeAbandonmentProof,itemReplayContext,chainBefore.ok,reanchor),report:({verification:historyVerify,warnings:writeWarnings})=>({id:subject.id,dry_run:dryRun,changed,history:{path:subject.historyPath,entries_scanned:historyEntries.length,chain_drift_before:!chainBefore.ok,entries_rehashed:reanchor.entriesRehashed,entries_patch_repaired:reanchor.entriesPatchRepaired,converted_replace_to_add:reanchor.convertedReplaceToAdd,skipped_ops:reanchor.skippedOps,reconciled_with_item:reconcileNeeded,audit_entry_added:auditEntryAdded,verify_ok:historyVerify.ok,verify_errors:historyVerify.errors,item_hash_version_before:chainVersionBefore.item_hash_version??null,item_hash_version_after:itemHashVersion,version_disposition:explicitVersionsBefore.size>1?"selected_for_ambiguous_stream":"preserved"},item:{exists:itemReplayContext.currentItemPath!==null,path:itemReplayContext.currentItemPath,matched_chain_before:itemReplayContext.matchedChainBefore},provenance_normalization:{requested:options.normalizeProvenance===true,...provenanceNormalization.receipt},...reconciliation?{reconciliation}:{},...mergeReceiptProof?{merge_receipt_proof:mergeReceiptProof}:{},warnings:[...new Set([...warnings,...writeWarnings])].sort((left,right)=>left.localeCompare(right)),generated_at:nowIso()})}}function assertHistoryRepairTarget(id,all){if(all&&id!==void 0){throw new PmCliError("history-repair: <id> and --all are mutually exclusive; pass an item id to repair one stream or --all to repair every drifted stream.",EXIT_CODE.USAGE)}if(!all&&id===void 0){throw new PmCliError("history-repair: provide an item <id> or pass --all to repair every drifted stream.",EXIT_CODE.USAGE)}}async function runHistoryRepairAll(options,global2){if(options.salvageTail===true){throw new PmCliError("Tail salvage requires one explicit item ID; --all is not supported.",EXIT_CODE.USAGE)}const{pmRoot,settings,typeRegistry}=await resolveHistoryWorkspace(global2.path);const itemReadWarnings=[];const items=await listAllItemMetadataWithBody(pmRoot,settings.item_format,typeRegistry.type_to_folder,itemReadWarnings,settings.schema,{forceSourceScan:true});const drift=await scanHistoryDrift(pmRoot,items);const invalidProvenanceIds=options.normalizeProvenance?await listInvalidProvenanceHistoryStreamIds(pmRoot):[];const targetedIds=[...new Set([...drift.driftedItems,...invalidProvenanceIds])].sort((left,right)=>left.localeCompare(right));const streams=[];const repairWarnings=[];const totals={repaired:0,skipped_clean:0,failed:0};for(const driftedId of targetedIds){try{const result=await runHistoryRepair(driftedId,{...options,auditContext:options.auditContextById?.[driftedId],auditContextById:void 0,mergeReceiptProof:options.mergeReceiptProofById?.[driftedId]??options.mergeReceiptProof,mergeReceiptProofById:void 0},global2);const outcome=result.changed?"repaired":"skipped_clean";totals[outcome]+=1;repairWarnings.push(...result.warnings.map(warning=>`${driftedId}:${warning}`));streams.push({id:driftedId,outcome,entries_rehashed:result.history.entries_rehashed,entries_patch_repaired:result.history.entries_patch_repaired,reconciled_with_item:result.history.reconciled_with_item,...result.reconciliation?{reconciliation:result.reconciliation}:{},...result.merge_receipt_proof?{merge_receipt_proof:result.merge_receipt_proof}:{},warnings:result.warnings})}catch(error){totals.failed+=1;streams.push({id:driftedId,outcome:"failed",error:error instanceof Error?error.message:String(error)})}}if(!options.dryRun){await invalidateHistoryDriftCache(pmRoot)}return{all:true,dry_run:Boolean(options.dryRun),scanned_streams:items.length,drifted_streams:drift.driftedItems.length,provenance_invalid_streams:invalidProvenanceIds.length,streams,totals,warnings:[...new Set([...itemReadWarnings,...repairWarnings])].sort((left,right)=>left.localeCompare(right)),generated_at:nowIso()}}export{analyzeReconciliationDiscard,assertHistoryRepairTarget,runHistoryRepair,runHistoryRepairAll};
 //# sourceMappingURL=history-repair.js.map
-//# debugId=9f91f2ee-cebe-592c-92ee-717301fa96ca