@unbrained/pm-cli 2026.9.7 → 2026.9.8

package/dist/sdk/governance/assurance.js

@@ -1,1183 +1,5 @@
-/**
- * @module sdk/assurance
- *
- * Declares, persists, evaluates, and audits project assurance contracts. The
- * module deliberately owns semantics while hosts inject workspace data and
- * external measurement adapters, keeping CLI, MCP, CI, and embedded callers on
- * one deterministic SDK path.
- */
-
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="d4c380ce-031e-5b2d-aaa8-658bb4aa3087")}catch(e){}}();
-import { createHash } from "node:crypto";
-import path from "node:path";
-import { EXIT_CODE } from "../../core/shared/constants.js";
-import { PmCliError } from "../../core/shared/errors.js";
-import { appendWorkspaceAuditEvent, mutateWorkspaceJsonWithHistory, readFileIfExists, readHistoryEntries, readSettings, resolveAuthor, stableStringify, WORKSPACE_HISTORY_ID, getWorkspaceHistoryPath, } from "../runtime-primitives.js";
-import { resolveCanonicalRelationshipKind } from "../relationships.js";
-import { MAX_ASSURANCE_VERDICT_LIMIT } from "./assurance-limits.js";
-import { AssuranceEvaluationRefusalError, AssuranceMutationRefusalError, AssuranceSourceResolutionError, } from "./assurance-mutation-error.js";
-/** Current serialized assurance registry format. */
-export const ASSURANCE_DOCUMENT_VERSION = 1;
-/** Supported lifecycle points that can evaluate a gate. */
-export const ASSURANCE_GATE_TRIGGERS = [
-    "pre-commit",
-    "pre-push",
-    "pre-merge",
-    "ci",
-    "pre-release",
-    "post-release",
-    "scheduled",
-    "on-claim",
-    "on-close",
-];
-/** Supported discriminants for built-in, delegated, and derived measurements. */
-export const ASSURANCE_MEASUREMENT_SOURCE_KINDS = [
-    "items",
-    "dependency_kind",
-    "prose_edge_gap",
-    "graph",
-    "validate",
-    "health",
-    "history",
-    "links",
-    "provider",
-    "derived",
-];
-const POLARITY_KEYS = [
-    "ceiling",
-    "floor",
-    "equals",
-    "zero",
-    "monotone_nondecreasing",
-    "monotone_nonincreasing",
-    "subset_of",
-];
-const ID_PATTERN = /^[a-z0-9]+(?:[._-][a-z0-9]+)*$/;
-const LOCK_TTL_SECONDS = 30;
-const LOCK_WAIT_MS = 5_000;
-const EVALUATION_CONCURRENCY = 4;
-const DEFAULT_VERDICT_LIMIT = 50;
-function requireStableId(value, field) {
-    if (!ID_PATTERN.test(value)) {
-        throw new AssuranceMutationRefusalError(`${field} must be a stable lowercase id`);
-    }
-}
-function requireFiniteNonNegative(value, field) {
-    if (!Number.isFinite(value) || value < 0) {
-        throw new AssuranceMutationRefusalError(`${field} must be a finite non-negative number`);
-    }
-}
-function boundFor(assertion) {
-    const present = POLARITY_KEYS.filter((key) => assertion[key] !== undefined);
-    if (present.length !== 1) {
-        throw new AssuranceMutationRefusalError(`assertion ${assertion.id} must declare exactly one polarity`);
-    }
-    const polarity = present[0];
-    const raw = assertion[polarity];
-    return {
-        polarity,
-        value: polarity === "zero" ? 0 : raw,
-    };
-}
-function valuesEqual(left, right) {
-    return stableStringify(left) === stableStringify(right);
-}
-function compareBound(observed, bound) {
-    if (bound.polarity === "equals")
-        return valuesEqual(observed, bound.value);
-    if (bound.polarity === "subset_of") {
-        if (!Array.isArray(observed) || !Array.isArray(bound.value))
-            return false;
-        const allowed = bound.value;
-        return observed.every((entry) => allowed.includes(entry));
-    }
-    if (typeof observed !== "number") {
-        return false;
-    }
-    const numericBound = bound.value;
-    if (bound.polarity === "ceiling" ||
-        bound.polarity === "monotone_nonincreasing") {
-        return observed <= numericBound;
-    }
-    if (bound.polarity === "floor" ||
-        bound.polarity === "monotone_nondecreasing") {
-        return observed >= numericBound;
-    }
-    return observed === 0;
-}
-function proveNegativeControl(assertion) {
-    const bound = boundFor(assertion);
-    const cases = assertion.negative_control.cases;
-    return (cases.some((entry) => entry.expected === "pass") &&
-        cases.some((entry) => entry.expected === "fail") &&
-        cases.every((entry) => compareBound(entry.observed, bound) === (entry.expected === "pass")));
-}
-function boundUpdateIsLoosening(beforeBound, afterBound) {
-    if (beforeBound.polarity !== afterBound.polarity)
-        return true;
-    if (typeof beforeBound.value === "number" &&
-        typeof afterBound.value === "number") {
-        return beforeBound.polarity === "ceiling" ||
-            beforeBound.polarity === "monotone_nonincreasing"
-            ? afterBound.value > beforeBound.value
-            : beforeBound.polarity === "floor" ||
-                beforeBound.polarity === "monotone_nondecreasing"
-                ? afterBound.value < beforeBound.value
-                : afterBound.value !== beforeBound.value;
-    }
-    if (beforeBound.polarity === "subset_of") {
-        const beforeValues = beforeBound.value;
-        const afterValues = afterBound.value;
-        return (!Array.isArray(beforeValues) ||
-            !Array.isArray(afterValues) ||
-            afterValues.some((entry) => !beforeValues.includes(entry)));
-    }
-    return !valuesEqual(beforeBound.value, afterBound.value);
-}
-/** Return true when an assertion update weakens scope, bound, lifetime, or enforcement. */
-export function assuranceAssertionUpdateIsLoosening(before, after) {
-    if (before.measurement_id !== after.measurement_id ||
-        before.owner_item_id !== after.owner_item_id ||
-        stableStringify(before.scope) !== stableStringify(after.scope)) {
-        return true;
-    }
-    const enforcementRank = {
-        observe: 0,
-        warn: 1,
-        block: 2,
-    };
-    const lifetimeLoosened = (before.lifetime ?? "hold") === "hold" &&
-        (after.lifetime ?? "hold") === "retire";
-    return (boundUpdateIsLoosening(boundFor(before), boundFor(after)) ||
-        enforcementRank[after.enforcement] < enforcementRank[before.enforcement] ||
-        lifetimeLoosened);
-}
-/** Validate the field predicate contract of an item-backed measurement source. */
-function validateItemsMeasurementSource(source) {
-    if (source.state !== undefined &&
-        !(source.state === "present" || source.state === "missing")) {
-        throw new AssuranceMutationRefusalError("items source state must be present or missing");
-    }
-    const hasEquals = Object.hasOwn(source, "equals");
-    const hasState = source.state !== undefined;
-    const predicateCount = Number(hasEquals) + Number(hasState);
-    if (source.field !== undefined && predicateCount !== 1) {
-        throw new AssuranceMutationRefusalError("items source with field requires exactly one of equals or state");
-    }
-    if (source.field === undefined && predicateCount !== 0) {
-        throw new AssuranceMutationRefusalError("items source equals/state requires field");
-    }
-}
-/** Validate relationship-provenance predicates on a dependency-kind measurement. */
-function validateDependencyKindMeasurementSource(source) {
-    if (typeof source.dependency_kind !== "string" ||
-        source.dependency_kind.trim().length === 0) {
-        throw new AssuranceMutationRefusalError("dependency_kind source requires dependency_kind");
-    }
-    const provenancePredicateCount = [
-        source.source_kind,
-        source.source_kind_prefix,
-        source.source_kind_state,
-    ].filter((value) => value !== undefined).length;
-    if (provenancePredicateCount > 1) {
-        throw new AssuranceMutationRefusalError("dependency_kind source accepts at most one source_kind predicate");
-    }
-    if ((source.source_kind !== undefined &&
-        source.source_kind.trim().length === 0) ||
-        (source.source_kind_prefix !== undefined &&
-            source.source_kind_prefix.trim().length === 0)) {
-        throw new AssuranceMutationRefusalError("dependency_kind source provenance values must not be empty");
-    }
-    if (source.source_kind_state !== undefined &&
-        source.source_kind_state !== "present" &&
-        source.source_kind_state !== "missing") {
-        throw new AssuranceMutationRefusalError("dependency_kind source source_kind_state must be present or missing");
-    }
-}
-/** Validate bounded, reasoned prose-parity exemptions. */
-function validateProseEdgeGapSource(source) {
-    if (source.sample_limit !== undefined &&
-        (!Number.isInteger(source.sample_limit) || source.sample_limit < 1)) {
-        throw new AssuranceMutationRefusalError("prose_edge_gap sample_limit must be a positive integer");
-    }
-    for (const exemption of source.exemptions ?? []) {
-        if (typeof exemption.holder_id !== "string" ||
-            exemption.holder_id.trim().length === 0 ||
-            typeof exemption.reason !== "string" ||
-            exemption.reason.trim().length === 0) {
-            throw new AssuranceMutationRefusalError("prose_edge_gap exemptions require holder_id and reason");
-        }
-        if ((exemption.target_id !== undefined &&
-            exemption.target_id.trim().length === 0) ||
-            (exemption.text_contains !== undefined &&
-                exemption.text_contains.trim().length === 0)) {
-            throw new AssuranceMutationRefusalError("prose_edge_gap exemption selectors must not be empty");
-        }
-    }
-}
-/** Validate and return one measurement declaration. */
-export function validateMeasurementDefinition(definition) {
-    requireStableId(definition.id, "measurement.id");
-    if (definition.max_cost !== undefined) {
-        requireFiniteNonNegative(definition.max_cost, "measurement.max_cost");
-    }
-    const candidateSource = definition.source;
-    if (Object.prototype.toString.call(candidateSource) !== "[object Object]") {
-        throw new AssuranceMutationRefusalError(`measurement.source.kind must be one of ${ASSURANCE_MEASUREMENT_SOURCE_KINDS.join(", ")}`);
-    }
-    const sourceKind = Reflect.get(candidateSource, "kind");
-    if (!ASSURANCE_MEASUREMENT_SOURCE_KINDS.includes(sourceKind)) {
-        throw new AssuranceMutationRefusalError(`measurement.source.kind must be one of ${ASSURANCE_MEASUREMENT_SOURCE_KINDS.join(", ")}`);
-    }
-    const source = candidateSource;
-    if (source.kind === "items") {
-        validateItemsMeasurementSource(source);
-    }
-    if (source.kind === "dependency_kind")
-        validateDependencyKindMeasurementSource(source);
-    if (source.kind === "prose_edge_gap")
-        validateProseEdgeGapSource(source);
-    if ((source.kind === "graph" ||
-        source.kind === "validate" ||
-        source.kind === "health") &&
-        (typeof source.field !== "string" || source.field.trim().length === 0)) {
-        throw new AssuranceMutationRefusalError(`${source.kind} source requires field`);
-    }
-    if (source.kind === "provider") {
-        requireStableId(source.provider, "provider source provider");
-        requireStableId(source.key, "provider source key");
-    }
-    return definition;
-}
-/** Validate and return one assertion declaration. */
-export function validateAssertionDefinition(definition) {
-    requireStableId(definition.id, "assertion.id");
-    requireStableId(definition.measurement_id, "assertion.measurement_id");
-    if (typeof definition.owner_item_id !== "string" ||
-        definition.owner_item_id.trim().length === 0) {
-        throw new AssuranceMutationRefusalError("assertion.owner_item_id is required");
-    }
-    const bound = boundFor(definition);
-    if (typeof bound.value === "number" && !Number.isFinite(bound.value)) {
-        throw new AssuranceMutationRefusalError(`assertion.${bound.polarity} must be a finite number`);
-    }
-    if (definition.lifetime === "retire" &&
-        (typeof definition.retire_reason !== "string" ||
-            definition.retire_reason.trim().length === 0)) {
-        throw new AssuranceMutationRefusalError("retired assertion requires retire_reason");
-    }
-    if (definition.scope.kind === "filter") {
-        requireStableId(definition.scope.measurement_id, "assertion.scope.measurement_id");
-    }
-    const cases = definition.negative_control?.cases;
-    if (!Array.isArray(cases) ||
-        !cases.some((entry) => entry.expected === "pass") ||
-        !cases.some((entry) => entry.expected === "fail")) {
-        throw new AssuranceMutationRefusalError("assertion negative control requires pass and fail cases");
-    }
-    if (!proveNegativeControl(definition)) {
-        throw new AssuranceMutationRefusalError(`assertion ${definition.id} negative control does not prove its bound`);
-    }
-    return definition;
-}
-function validateGateProviderPolicy(policy) {
-    if (!Array.isArray(policy.allowed_providers)) {
-        throw new AssuranceMutationRefusalError("gate provider_policy.allowed_providers must be an array");
-    }
-    for (const provider of policy.allowed_providers) {
-        requireStableId(provider, "gate.provider_policy.allowed_provider");
-    }
-    if (typeof policy.triggers !== "object" ||
-        policy.triggers === null ||
-        Array.isArray(policy.triggers)) {
-        throw new AssuranceMutationRefusalError("gate provider_policy.triggers must be an object");
-    }
-    for (const [trigger, rule] of Object.entries(policy.triggers)) {
-        if (!ASSURANCE_GATE_TRIGGERS.includes(trigger)) {
-            throw new AssuranceMutationRefusalError(`gate provider policy has unknown trigger ${trigger}`);
-        }
-        if (typeof rule !== "object" ||
-            rule === null ||
-            !["low", "medium", "high"].includes(rule.max_cost_class) ||
-            typeof rule.allow_network !== "boolean") {
-            throw new AssuranceMutationRefusalError(`gate provider policy trigger ${trigger} is invalid`);
-        }
-    }
-}
-/** Validate and return one gate declaration. */
-export function validateGateDefinition(definition) {
-    requireStableId(definition.id, "gate.id");
-    if (!Array.isArray(definition.assertion_ids)) {
-        throw new AssuranceMutationRefusalError("gate.assertion_ids is required and must be an array");
-    }
-    if (definition.assertion_ids.length === 0) {
-        throw new AssuranceMutationRefusalError("gate requires at least one assertion");
-    }
-    for (const id of definition.assertion_ids)
-        requireStableId(id, "gate.assertion_id");
-    if (!Array.isArray(definition.triggers)) {
-        throw new AssuranceMutationRefusalError(`gate.triggers is required and must be an array of ${ASSURANCE_GATE_TRIGGERS.join(", ")}`);
-    }
-    if (definition.triggers.length === 0) {
-        throw new AssuranceMutationRefusalError("gate requires at least one trigger");
-    }
-    for (const trigger of definition.triggers) {
-        if (!ASSURANCE_GATE_TRIGGERS.includes(trigger)) {
-            throw new AssuranceMutationRefusalError(`gate trigger must be one of ${ASSURANCE_GATE_TRIGGERS.join(", ")}`);
-        }
-    }
-    if (definition.provider_policy) {
-        validateGateProviderPolicy(definition.provider_policy);
-    }
-    return definition;
-}
-/** Validate registry references, uniqueness, and declaration-local contracts. */
-export function validateAssuranceDocument(document) {
-    if (document.version !== ASSURANCE_DOCUMENT_VERSION) {
-        throw new AssuranceMutationRefusalError(`unsupported assurance document version ${String(document.version)}`);
-    }
-    const ids = new Set();
-    for (const definition of document.measurements) {
-        validateMeasurementDefinition(definition);
-        if (ids.has(`measurement:${definition.id}`)) {
-            throw new AssuranceMutationRefusalError(`duplicate measurement ${definition.id}`);
-        }
-        ids.add(`measurement:${definition.id}`);
-    }
-    for (const definition of document.assertions) {
-        validateAssertionDefinition(definition);
-        if (ids.has(`assertion:${definition.id}`)) {
-            throw new AssuranceMutationRefusalError(`duplicate assertion ${definition.id}`);
-        }
-        ids.add(`assertion:${definition.id}`);
-    }
-    for (const definition of document.gates) {
-        validateGateDefinition(definition);
-        const missing = definition.assertion_ids.filter((id) => !document.assertions.some((assertionDefinition) => assertionDefinition.id === id));
-        if (missing.length > 0) {
-            throw new AssuranceMutationRefusalError(`gate ${definition.id} references missing assertions: ${missing.join(", ")}`);
-        }
-        if (ids.has(`gate:${definition.id}`)) {
-            throw new AssuranceMutationRefusalError(`duplicate gate ${definition.id}`);
-        }
-        ids.add(`gate:${definition.id}`);
-    }
-    const measurementIds = new Set(document.measurements.map((entry) => entry.id));
-    for (const [measurementId, consumers] of collectMeasurementReferences(document)) {
-        if (!measurementIds.has(measurementId)) {
-            throw new AssuranceMutationRefusalError(`${consumers.join(", ")} references missing measurement ${measurementId}`);
-        }
-    }
-    return document;
-}
-function collectExpressionMeasurementReferences(expression, references) {
-    if ("measurement" in expression) {
-        references.push(expression.measurement);
-        return;
-    }
-    if ("operator" in expression) {
-        for (const operand of expression.operands) {
-            collectExpressionMeasurementReferences(operand, references);
-        }
-    }
-}
-function collectMeasurementReferences(document) {
-    const references = new Map();
-    const add = (measurementId, consumer) => {
-        const consumers = references.get(measurementId) ?? [];
-        consumers.push(consumer);
-        references.set(measurementId, consumers);
-    };
-    for (const assertionDefinition of document.assertions) {
-        add(assertionDefinition.measurement_id, `assertion ${assertionDefinition.id}`);
-        if (assertionDefinition.scope.kind === "filter") {
-            add(assertionDefinition.scope.measurement_id, `assertion ${assertionDefinition.id} scope`);
-        }
-    }
-    for (const measurementDefinition of document.measurements) {
-        if (measurementDefinition.source.kind !== "derived")
-            continue;
-        const derivedReferences = [];
-        collectExpressionMeasurementReferences(measurementDefinition.source.expression, derivedReferences);
-        for (const measurementId of derivedReferences) {
-            add(measurementId, `derived measurement ${measurementDefinition.id}`);
-        }
-    }
-    return references;
-}
-function collectGateProviderIds(gate, document) {
-    const pending = gate.assertion_ids.flatMap((assertionId) => {
-        const assertion = document.assertions.find((entry) => entry.id === assertionId);
-        return [
-            assertion.measurement_id,
-            ...(assertion.scope.kind === "filter"
-                ? [assertion.scope.measurement_id]
-                : []),
-        ];
-    });
-    const visited = new Set();
-    const providers = new Set();
-    while (pending.length > 0) {
-        const measurementId = pending.pop();
-        if (visited.has(measurementId))
-            continue;
-        visited.add(measurementId);
-        const measurement = document.measurements.find((entry) => entry.id === measurementId);
-        if (measurement.source.kind === "provider") {
-            providers.add(measurement.source.provider);
-        }
-        else if (measurement.source.kind === "derived") {
-            collectExpressionMeasurementReferences(measurement.source.expression, pending);
-        }
-    }
-    return providers;
-}
-/** Create an empty, valid assurance registry. */
-export function createEmptyAssuranceDocument() {
-    return {
-        version: ASSURANCE_DOCUMENT_VERSION,
-        measurements: [],
-        assertions: [],
-        gates: [],
-    };
-}
-function itemsSourceResult(source, context) {
-    const matches = context.items.filter((item) => (source.statuses === undefined ||
-        source.statuses.includes(item.status)) &&
-        (source.types === undefined || source.types.includes(item.type)) &&
-        (source.tags === undefined ||
-            source.tags.every((tag) => item.tags?.includes(tag))) &&
-        (source.field === undefined ||
-            (() => {
-                const value = item[source.field];
-                if (source.state !== undefined) {
-                    const missing = value === undefined ||
-                        value === null ||
-                        value === "" ||
-                        (Array.isArray(value) && value.length === 0);
-                    return source.state === "missing" ? missing : !missing;
-                }
-                return valuesEqual(value, source.equals);
-            })()));
-    return {
-        value: matches.length,
-        population_size: context.items.length,
-        cost: context.items.length,
-        contributors: matches.map((item) => item.id),
-    };
-}
-/** Match one normalized dependency provenance against an optional partition. */
-function dependencyProvenanceMatches(source, sourceKind) {
-    if (source.source_kind !== undefined) {
-        return (sourceKind?.toLowerCase() === source.source_kind.trim().toLowerCase());
-    }
-    if (source.source_kind_prefix !== undefined) {
-        return (sourceKind
-            ?.toLowerCase()
-            .startsWith(source.source_kind_prefix.trim().toLowerCase()) === true);
-    }
-    if (source.source_kind_state === "present") {
-        return sourceKind !== undefined && sourceKind.length > 0;
-    }
-    if (source.source_kind_state === "missing") {
-        return sourceKind === undefined || sourceKind.length === 0;
-    }
-    return true;
-}
-function dependencyKindSourceResult(source, context) {
-    const contributors = [];
-    const requestedKind = resolveCanonicalRelationshipKind(source.dependency_kind) ??
-        source.dependency_kind.trim().toLowerCase();
-    for (const item of context.items) {
-        for (const dependency of item.dependencies ?? []) {
-            const dependencyKind = resolveCanonicalRelationshipKind(dependency.kind) ??
-                dependency.kind.trim().toLowerCase();
-            const sourceKind = dependency.source_kind?.trim();
-            if (dependencyKind === requestedKind &&
-                dependencyProvenanceMatches(source, sourceKind))
-                contributors.push(`${item.id}->${dependency.id}${sourceKind ? `@${sourceKind}` : ""}`);
-        }
-    }
-    return {
-        value: contributors.length,
-        population_size: context.items.length,
-        cost: context.items.length,
-        contributors,
-    };
-}
-/** Return every text segment whose item identifiers form the prose graph. */
-function assuranceItemProseSegments(item) {
-    const segments = [item.description, item.body]
-        .filter((value) => typeof value === "string")
-        .map((value) => value.trim())
-        .filter(Boolean);
-    for (const key of ["comments", "notes", "learnings"]) {
-        const entries = item[key];
-        if (!Array.isArray(entries))
-            continue;
-        for (const entry of entries) {
-            if (typeof entry === "string")
-                segments.push(entry);
-            else if (typeof entry === "object" && entry !== null) {
-                const text = Reflect.get(entry, "text");
-                if (typeof text === "string")
-                    segments.push(text);
-            }
-        }
-    }
-    return segments;
-}
-/** Return whether a reviewed exemption applies to one prose reference. */
-function proseReferenceIsExempt(exemptions, holderId, targetId, segment) {
-    return exemptions.some((exemption) => exemption.holder_id.trim().toLowerCase() === holderId.toLowerCase() &&
-        (exemption.target_id === undefined ||
-            exemption.target_id.trim().toLowerCase() === targetId.toLowerCase()) &&
-        (exemption.text_contains === undefined ||
-            segment
-                .toLowerCase()
-                .includes(exemption.text_contains.trim().toLowerCase())));
-}
-/** Return the direction-independent identity of a prose or structured item pair. */
-function prosePairKey(left, right) {
-    return [left.toLowerCase(), right.toLowerCase()].sort().join("\u0000");
-}
-/** Collect canonical ids, typed links, and raw prose mentions in one item pass. */
-function collectProseEdgeCensusInputs(items) {
-    const canonicalIds = new Map();
-    const linkedPairs = new Set();
-    const proseMentions = [];
-    const mentionPattern = /\b[a-z][a-z0-9]*-[a-z0-9]+\b/giu;
-    let mentionCount = 0;
-    for (const item of items) {
-        canonicalIds.set(item.id.toLowerCase(), item.id);
-        for (const dependency of item.dependencies ?? [])
-            linkedPairs.add(prosePairKey(item.id, dependency.id));
-        for (const scalar of [item.parent, item.blocked_by])
-            if (typeof scalar === "string")
-                linkedPairs.add(prosePairKey(item.id, scalar));
-        for (const segment of assuranceItemProseSegments(item)) {
-            const mentionedIds = [...segment.matchAll(mentionPattern)].map((match) => match[0]);
-            mentionCount += mentionedIds.length;
-            proseMentions.push({
-                holder_id: item.id,
-                segment,
-                mentioned_ids: mentionedIds,
-            });
-        }
-    }
-    return {
-        canonical_ids: canonicalIds,
-        linked_pairs: linkedPairs,
-        prose_mentions: proseMentions,
-        mention_count: mentionCount,
-    };
-}
-/** Count distinct prose-named item pairs that have no typed edge in either direction. */
-function proseEdgeGapSourceResult(source, context) {
-    const census = collectProseEdgeCensusInputs(context.items);
-    const gaps = new Map();
-    for (const proseMention of census.prose_mentions) {
-        const mentions = proseMention.mentioned_ids
-            .map((id) => census.canonical_ids.get(id.toLowerCase()))
-            .filter((id) => id !== undefined && id !== proseMention.holder_id);
-        const distinctMentions = [...new Set(mentions)];
-        for (const targetId of distinctMentions) {
-            const key = prosePairKey(proseMention.holder_id, targetId);
-            if (census.linked_pairs.has(key) ||
-                proseReferenceIsExempt(source.exemptions ?? [], proseMention.holder_id, targetId, proseMention.segment))
-                continue;
-            const explicit = distinctMentions.some((candidate) => candidate !== targetId);
-            if (gaps.get(key)?.explicit === true && !explicit)
-                continue;
-            gaps.set(key, {
-                contributor: `${proseMention.holder_id}->${targetId}|subject=${explicit ? "explicit" : "implicit"}`,
-                explicit,
-            });
-        }
-    }
-    const gapRows = [...gaps.values()];
-    const contributors = gapRows.map((entry) => entry.contributor).sort();
-    return {
-        value: contributors.length,
-        population_size: census.canonical_ids.size,
-        cost: context.items.length + census.linked_pairs.size + census.mention_count,
-        contributors: contributors.slice(0, source.sample_limit ?? 25),
-        partitions: {
-            explicit_subject: gapRows.filter((entry) => entry.explicit).length,
-            implicit_subject: gapRows.filter((entry) => !entry.explicit).length,
-        },
-    };
-}
-function historySourceResult(source, context) {
-    const matches = context.history.filter((entry) => (source.op === undefined || entry.op === source.op) &&
-        (source.author === undefined || entry.author === source.author) &&
-        (source.harness === undefined ||
-            entry.agent_harness === source.harness) &&
-        (source.model === undefined || entry.agent_model === source.model));
-    return {
-        value: matches.length,
-        population_size: context.history.length,
-        cost: context.history.length,
-    };
-}
-function linksSourceResult(source, context) {
-    const matches = context.items.filter((item) => {
-        const links = item[source.link];
-        const present = Array.isArray(links) && links.length > 0;
-        return source.state === "present" ? present : !present;
-    });
-    return {
-        value: matches.length,
-        population_size: context.items.length,
-        cost: context.items.length,
-        contributors: matches.map((item) => item.id),
-    };
-}
-function sourceResult(definition, context) {
-    const source = definition.source;
-    if (source.kind === "items")
-        return itemsSourceResult(source, context);
-    if (source.kind === "dependency_kind") {
-        return dependencyKindSourceResult(source, context);
-    }
-    if (source.kind === "prose_edge_gap")
-        return proseEdgeGapSourceResult(source, context);
-    if (source.kind === "history")
-        return historySourceResult(source, context);
-    if (source.kind === "links")
-        return linksSourceResult(source, context);
-    return null;
-}
-function sumCosts(costs, durationMs) {
-    return costs.reduce((total, cost) => ({
-        units: total.units + cost.units,
-        items_scanned: total.items_scanned + cost.items_scanned,
-        history_entries: total.history_entries + cost.history_entries,
-        provider_calls: total.provider_calls + cost.provider_calls,
-        duration_ms: durationMs,
-    }), {
-        units: 0,
-        items_scanned: 0,
-        history_entries: 0,
-        provider_calls: 0,
-        duration_ms: durationMs,
-    });
-}
-function arithmeticValue(operator, values) {
-    if (values.length === 0)
-        throw new TypeError(`derived ${operator} requires operands`);
-    if (operator === "add")
-        return values.reduce((sum, value) => sum + value, 0);
-    if (operator === "subtract")
-        return values.slice(1).reduce((result, value) => result - value, values[0]);
-    if (operator === "multiply")
-        return values.reduce((result, value) => result * value, 1);
-    if (operator === "divide") {
-        if (values.slice(1).includes(0))
-            throw new TypeError("derived divide cannot divide by zero");
-        return values.slice(1).reduce((result, value) => result / value, values[0]);
-    }
-    return operator === "min" ? Math.min(...values) : Math.max(...values);
-}
-async function mapWithConcurrency(values, limit, transform) {
-    const results = new Array(values.length);
-    let nextIndex = 0;
-    const workers = Array.from({ length: Math.min(limit, values.length) }, async () => {
-        while (nextIndex < values.length) {
-            const index = nextIndex;
-            nextIndex += 1;
-            results[index] = await transform(values[index], index);
-        }
-    });
-    await Promise.all(workers);
-    return results;
-}
-async function evaluateExpression(expression, context, definitions, stack, state) {
-    if ("literal" in expression)
-        return {
-            value: expression.literal,
-            costs: [],
-            population_size: 0,
-            contributors: [],
-        };
-    if ("measurement" in expression) {
-        const definition = definitions.find((entry) => entry.id === expression.measurement);
-        if (!definition)
-            throw new TypeError(`derived measurement references missing ${expression.measurement}`);
-        const result = await evaluateMeasurementCached(definition, context, definitions, stack, state);
-        if (typeof result.value !== "number")
-            throw new TypeError(`derived measurement ${definition.id} is not numeric`);
-        const costs = state.charged.has(definition.id) ? [] : [result.cost];
-        state.charged.add(definition.id);
-        return {
-            value: result.value,
-            costs,
-            population_size: result.population_size,
-            contributors: result.contributors,
-        };
-    }
-    const operands = await mapWithConcurrency(expression.operands, EVALUATION_CONCURRENCY, (operand) => evaluateExpression(operand, context, definitions, stack, state));
-    return {
-        value: arithmeticValue(expression.operator, operands.map((entry) => entry.value)),
-        costs: operands.flatMap((entry) => entry.costs),
-        population_size: Math.max(0, ...operands.map((entry) => entry.population_size)),
-        contributors: [...new Set(operands.flatMap((entry) => entry.contributors))],
-    };
-}
-async function evaluateMeasurementInternal(definition, context, definitions, stack, state) {
-    validateMeasurementDefinition(definition);
-    const startedAt = Date.now();
-    let result;
-    let nestedCosts = [];
-    let providerCalls = 0;
-    if (definition.source.kind === "derived") {
-        const derived = await evaluateExpression(definition.source.expression, context, definitions, [...stack, definition.id], state);
-        result = {
-            value: derived.value,
-            population_size: derived.population_size,
-            cost: 0,
-            contributors: derived.contributors,
-        };
-        nestedCosts = derived.costs;
-    }
-    else {
-        const builtin = sourceResult(definition, context);
-        if (builtin !== null) {
-            result = builtin;
-        }
-        else {
-            result = await context.external(definition.source);
-            providerCalls = 1;
-        }
-    }
-    const ownCost = {
-        units: result.cost,
-        items_scanned: definition.source.kind === "items" ||
-            definition.source.kind === "dependency_kind" ||
-            definition.source.kind === "prose_edge_gap" ||
-            definition.source.kind === "links"
-            ? context.items.length
-            : 0,
-        history_entries: definition.source.kind === "history" ? context.history.length : 0,
-        provider_calls: providerCalls,
-        duration_ms: Date.now() - startedAt,
-    };
-    const cost = sumCosts([...nestedCosts, ownCost], Date.now() - startedAt);
-    if (definition.max_cost !== undefined && cost.units > definition.max_cost) {
-        throw new AssuranceEvaluationRefusalError(`measurement ${definition.id} exceeded cost ceiling ${definition.max_cost} with ${cost.units}`);
-    }
-    return {
-        id: definition.id,
-        definition_fingerprint: `sha256:${createHash("sha256")
-            .update(stableStringify(definition))
-            .digest("hex")}`,
-        value: result.value,
-        population_size: result.population_size,
-        cost,
-        contributors: result.contributors ?? [],
-        ...(result.partitions ? { partitions: result.partitions } : {}),
-    };
-}
-function evaluateMeasurementCached(definition, context, definitions, stack, state) {
-    if (stack.includes(definition.id)) {
-        throw new TypeError(`derived measurement cycle: ${[...stack, definition.id].join(" -> ")}`);
-    }
-    const cached = state.cache.get(definition.id);
-    if (cached)
-        return cached;
-    const evaluation = evaluateMeasurementInternal(definition, context, definitions, stack, state).catch((error) => {
-        if (error instanceof AssuranceSourceResolutionError &&
-            error.measurement_id === undefined) {
-            const sourceContext = {
-                measurement_id: definition.id,
-                source_kind: error.source_kind,
-                field: error.field,
-                ...(error.check ? { check: error.check } : {}),
-            };
-            const sourceError = new AssuranceSourceResolutionError(error.message, sourceContext);
-            sourceError.cause = error;
-            throw sourceError;
-        }
-        throw error;
-    });
-    state.cache.set(definition.id, evaluation);
-    return evaluation;
-}
-/** Evaluate one measurement with cycle detection and a complete cost receipt. */
-export async function evaluateMeasurement(definition, context, definitions = [definition]) {
-    return evaluateMeasurementCached(definition, context, definitions, [], {
-        cache: new Map(),
-        charged: new Set(),
-    });
-}
-function assertionDistance(observed, bound) {
-    if (typeof observed !== "number" || typeof bound.value !== "number")
-        return null;
-    if (bound.polarity === "ceiling" ||
-        bound.polarity === "monotone_nonincreasing")
-        return bound.value - observed;
-    if (bound.polarity === "floor" || bound.polarity === "monotone_nondecreasing")
-        return observed - bound.value;
-    return observed - bound.value;
-}
-/** Evaluate one assertion against a precomputed measurement receipt. */
-export function evaluateAssuranceAssertion(definition, measurement, options = {}) {
-    validateAssertionDefinition(definition);
-    const bound = boundFor(definition);
-    const retired = definition.lifetime === "retire" && options.owner_terminal === true;
-    return {
-        assertion_id: definition.id,
-        measurement_id: definition.measurement_id,
-        measurement_definition_fingerprint: measurement.definition_fingerprint,
-        scope: definition.scope,
-        population_size: measurement.population_size,
-        observed: measurement.value,
-        bound,
-        distance: assertionDistance(measurement.value, bound),
-        verdict: retired
-            ? "retired"
-            : compareBound(measurement.value, bound)
-                ? "pass"
-                : "fail",
-        enforcement: definition.enforcement,
-        negative_control_proven: proveNegativeControl(definition),
-        cost: measurement.cost,
-        contributors: measurement.contributors,
-        ...(measurement.partitions ? { partitions: measurement.partitions } : {}),
-    };
-}
-function enforceGateProviderPolicy(gate, document, context, trigger) {
-    const providerIds = collectGateProviderIds(gate, document);
-    if (providerIds.size === 0)
-        return;
-    const policy = gate.provider_policy;
-    const triggerPolicy = policy?.triggers[trigger];
-    if (!policy || !triggerPolicy) {
-        throw new AssuranceEvaluationRefusalError(`assurance gate ${gate.id} refuses provider execution at trigger ${trigger} without an explicit provider policy`);
-    }
-    const allowedProviders = new Set(policy.allowed_providers);
-    const costRank = {
-        low: 0,
-        medium: 1,
-        high: 2,
-    };
-    for (const providerId of providerIds) {
-        if (!allowedProviders.has(providerId)) {
-            throw new AssuranceEvaluationRefusalError(`assurance gate ${gate.id} refuses provider ${providerId}`);
-        }
-        const capability = context.provider_capabilities?.[providerId];
-        if (!capability) {
-            throw new AssuranceEvaluationRefusalError(`assurance provider ${providerId} has no declared capabilities`);
-        }
-        if (costRank[capability.cost_class] > costRank[triggerPolicy.max_cost_class]) {
-            throw new AssuranceEvaluationRefusalError(`assurance gate ${gate.id} refuses ${capability.cost_class}-cost provider ${providerId} at trigger ${trigger}`);
-        }
-        if (capability.network && !triggerPolicy.allow_network) {
-            throw new AssuranceEvaluationRefusalError(`assurance gate ${gate.id} refuses network provider ${providerId} at trigger ${trigger}`);
-        }
-    }
-}
-async function evaluateGateMeasurement(gateId, assertionId, definition, context, definitions) {
-    try {
-        return await evaluateMeasurement(definition, context, definitions);
-    }
-    catch (error) {
-        if (error instanceof AssuranceSourceResolutionError) {
-            const checkLocation = error.check ? ` check ${error.check}` : "";
-            const measurementId = error.measurement_id ?? definition.id;
-            const refusal = new AssuranceEvaluationRefusalError(`assurance gate ${gateId} assertion ${assertionId} measurement ${measurementId} source ${error.source_kind}${checkLocation} field ${error.field} could not resolve: ${error.message}`, {
-                gate_id: gateId,
-                assertion_id: assertionId,
-                measurement_id: measurementId,
-                source_kind: error.source_kind,
-                field: error.field,
-                ...(error.check ? { check: error.check } : {}),
-            });
-            refusal.cause = error;
-            throw refusal;
-        }
-        throw error;
-    }
-}
-/** Evaluate a named gate into one presentation-independent verdict document. */
-export async function evaluateAssuranceGate(gateId, document, context, options) {
-    validateAssuranceDocument(document);
-    const gateDefinition = document.gates.find((entry) => entry.id === gateId);
-    if (!gateDefinition)
-        throw new AssuranceEvaluationRefusalError(`assurance gate ${gateId} not found`);
-    if (!gateDefinition.triggers.includes(options.trigger)) {
-        throw new AssuranceEvaluationRefusalError(`assurance gate ${gateId} does not declare trigger ${options.trigger}`);
-    }
-    enforceGateProviderPolicy(gateDefinition, document, context, options.trigger);
-    const assertions = await mapWithConcurrency(gateDefinition.assertion_ids, EVALUATION_CONCURRENCY, async (id) => {
-        const assertionDefinition = document.assertions.find((entry) => entry.id === id);
-        const measurementDefinition = document.measurements.find((entry) => entry.id === assertionDefinition.measurement_id);
-        let scopedContext = context;
-        if (assertionDefinition.scope.kind === "active") {
-            const terminalStatuses = new Set(context.terminal_statuses ?? ["closed", "canceled"]);
-            scopedContext = {
-                ...context,
-                items: context.items.filter((item) => !terminalStatuses.has(item.status)),
-            };
-        }
-        else if (assertionDefinition.scope.kind === "filter") {
-            const scopeMeasurementId = assertionDefinition.scope.measurement_id;
-            const scopeDefinition = document.measurements.find((entry) => entry.id === scopeMeasurementId);
-            const scope = await evaluateGateMeasurement(gateDefinition.id, assertionDefinition.id, scopeDefinition, context, document.measurements);
-            const contributorIds = new Set(scope.contributors);
-            scopedContext = {
-                ...context,
-                items: context.items.filter((item) => contributorIds.has(item.id)),
-            };
-        }
-        const owner = context.items.find((item) => item.id === assertionDefinition.owner_item_id);
-        const ownerTerminal = owner !== undefined &&
-            new Set(context.terminal_statuses ?? ["closed", "canceled"]).has(owner.status);
-        return evaluateAssuranceAssertion(assertionDefinition, await evaluateGateMeasurement(gateDefinition.id, assertionDefinition.id, measurementDefinition, scopedContext, document.measurements), { owner_terminal: ownerTerminal });
-    });
-    const blocking = assertions.some((entry) => entry.verdict === "fail" && entry.enforcement === "block");
-    const warning = assertions.some((entry) => entry.verdict === "fail" && entry.enforcement === "warn");
-    return {
-        gate_id: gateDefinition.id,
-        tree_id: context.tree_id,
-        trigger: options.trigger,
-        dry_run: options.dry_run === true,
-        evaluated_at: new Date().toISOString(),
-        verdict: blocking ? "block" : warning ? "warn" : "pass",
-        exit_code: blocking ? 1 : 0,
-        assertions,
-        assertions_total: assertions.length,
-        row_contract: {
-            row_keys: ["assertions"],
-            jq_selector: ".assertions[]",
-        },
-        cost: sumCosts(assertions.map((entry) => entry.cost), Math.max(0, ...assertions.map((entry) => entry.cost.duration_ms))),
-    };
-}
-function assurancePath(pmRoot) {
-    return path.join(pmRoot, "assurance.json");
-}
-async function readDocument(pmRoot) {
-    const raw = await readFileIfExists(assurancePath(pmRoot));
-    if (raw === null)
-        return createEmptyAssuranceDocument();
-    return parseAssuranceDocument(raw);
-}
-function parseAssuranceDocument(raw) {
-    try {
-        return validateAssuranceDocument(JSON.parse(raw));
-    }
-    catch (error) {
-        throw new PmCliError("The assurance registry is invalid. Repair or restore .agents/pm/assurance.json and retry.", EXIT_CODE.GENERIC_FAILURE, {
-            code: "assurance_registry_invalid",
-            reason: String(error),
-            nextSteps: [
-                "Restore a valid assurance.json from version control or repair its declaration references.",
-                "Run pm assurance list measurement after the repair.",
-            ],
-        });
-    }
-}
-function collectionFor(document, kind) {
-    if (kind === "measurement")
-        return document.measurements;
-    if (kind === "assertion")
-        return document.assertions;
-    return document.gates;
-}
-function validateForKind(kind, definition) {
-    if (kind === "measurement")
-        validateMeasurementDefinition(definition);
-    else if (kind === "assertion")
-        validateAssertionDefinition(definition);
-    else
-        validateGateDefinition(definition);
-}
-/** Read all declarations of one kind with a stable row selector receipt. */
-export async function listAssuranceDeclarations(pmRoot, kind) {
-    const items = structuredClone(collectionFor(await readDocument(pmRoot), kind));
-    return {
-        items,
-        count: items.length,
-        row_contract: { row_keys: ["items"], jq_selector: ".items[]" },
-    };
-}
-/** Read one named declaration or fail loudly. */
-export async function getAssuranceDeclaration(pmRoot, kind, id) {
-    const found = collectionFor(await readDocument(pmRoot), kind).find((entry) => entry.id === id);
-    if (!found)
-        throw new TypeError(`assurance ${kind} ${id} not found`);
-    return structuredClone(found);
-}
-/** Create or update one declaration through audited singleton persistence. */
-export async function putAssuranceDeclaration(pmRoot, kind, definition, options = {}) {
-    validateForKind(kind, definition);
-    const settings = await readSettings(pmRoot);
-    const author = resolveAuthor(options.author, settings.author_default);
-    const mutation = await mutateWorkspaceJsonWithHistory({
-        pmRoot,
-        filePath: assurancePath(pmRoot),
-        op: `assurance:${kind}:put`,
-        author,
-        message: options.message,
-        lockTtlSeconds: LOCK_TTL_SECONDS,
-        lockWaitMs: LOCK_WAIT_MS,
-        mutate: (beforeRaw) => {
-            const document = beforeRaw === null
-                ? createEmptyAssuranceDocument()
-                : parseAssuranceDocument(beforeRaw);
-            const collection = collectionFor(document, kind);
-            const index = collection.findIndex((entry) => entry.id === definition.id);
-            const action = index < 0 ? "created" : "updated";
-            if (kind === "assertion" &&
-                index >= 0 &&
-                assuranceAssertionUpdateIsLoosening(collection[index], definition)) {
-                const decision = definition
-                    .authorization_decision;
-                if (!decision ||
-                    !options.authorized_decision_ids?.includes(decision)) {
-                    throw new AssuranceMutationRefusalError(`loosening assertion ${definition.id} requires a verified authorization_decision`);
-                }
-            }
-            if (index < 0)
-                collection.push(structuredClone(definition));
-            else
-                collection[index] = structuredClone(definition);
-            validateAssuranceDocument(document);
-            return {
-                raw: `${JSON.stringify(document, null, 2)}\n`,
-                result: { changed: true, action, kind, id: definition.id },
-            };
-        },
-    });
-    return { ...mutation.result, changed: mutation.changed };
-}
-/** Apply a declaration bundle atomically, idempotently, and without replacing divergent ids. */
-export async function putAssuranceDeclarationBundle(pmRoot, bundle, options = {}) {
-    const candidate = createEmptyAssuranceDocument();
-    candidate.measurements = structuredClone(bundle.measurements);
-    candidate.assertions = structuredClone(bundle.assertions);
-    candidate.gates = structuredClone(bundle.gates);
-    validateAssuranceDocument(candidate);
-    const settings = await readSettings(pmRoot);
-    const author = resolveAuthor(options.author, settings.author_default);
-    const mutation = await mutateWorkspaceJsonWithHistory({
-        pmRoot,
-        filePath: assurancePath(pmRoot),
-        op: "assurance:bundle:apply",
-        author,
-        message: options.message,
-        lockTtlSeconds: LOCK_TTL_SECONDS,
-        lockWaitMs: LOCK_WAIT_MS,
-        mutate: (beforeRaw) => {
-            const document = beforeRaw === null
-                ? createEmptyAssuranceDocument()
-                : parseAssuranceDocument(beforeRaw);
-            const createdIds = [];
-            const unchangedIds = [];
-            const apply = (target, additions, kind) => {
-                for (const definition of additions) {
-                    const existing = target.find((entry) => entry.id === definition.id);
-                    if (!existing) {
-                        target.push(structuredClone(definition));
-                        createdIds.push(`${kind}:${definition.id}`);
-                        continue;
-                    }
-                    if (stableStringify(existing) !== stableStringify(definition)) {
-                        throw new AssuranceMutationRefusalError(`assurance bundle refuses to replace divergent ${kind} ${definition.id}`);
-                    }
-                    unchangedIds.push(`${kind}:${definition.id}`);
-                }
-            };
-            apply(document.measurements, candidate.measurements, "measurement");
-            apply(document.assertions, candidate.assertions, "assertion");
-            apply(document.gates, candidate.gates, "gate");
-            validateAssuranceDocument(document);
-            return {
-                raw: `${JSON.stringify(document, null, 2)}\n`,
-                result: {
-                    changed: createdIds.length > 0,
-                    created_ids: createdIds,
-                    unchanged_ids: unchangedIds,
-                },
-            };
-        },
-    });
-    return { ...mutation.result, changed: mutation.changed };
-}
-/** Remove an unreferenced declaration through audited singleton persistence. */
-export async function removeAssuranceDeclaration(pmRoot, kind, id, options = {}) {
-    const settings = await readSettings(pmRoot);
-    const author = resolveAuthor(options.author, settings.author_default);
-    const mutation = await mutateWorkspaceJsonWithHistory({
-        pmRoot,
-        filePath: assurancePath(pmRoot),
-        op: `assurance:${kind}:remove`,
-        author,
-        message: options.message,
-        lockTtlSeconds: LOCK_TTL_SECONDS,
-        lockWaitMs: LOCK_WAIT_MS,
-        mutate: (beforeRaw) => {
-            const document = beforeRaw === null
-                ? createEmptyAssuranceDocument()
-                : parseAssuranceDocument(beforeRaw);
-            if (kind === "measurement") {
-                const consumers = collectMeasurementReferences(document).get(id);
-                if (consumers && consumers.length > 0) {
-                    throw new AssuranceMutationRefusalError(`assurance measurement ${id} is referenced by ${consumers.join(", ")}`);
-                }
-            }
-            if (kind === "assertion" &&
-                document.gates.some((entry) => entry.assertion_ids.includes(id))) {
-                throw new AssuranceMutationRefusalError(`assurance assertion ${id} is referenced by gate`);
-            }
-            const collection = collectionFor(document, kind);
-            const index = collection.findIndex((entry) => entry.id === id);
-            if (index < 0) {
-                throw new AssuranceMutationRefusalError(`assurance ${kind} ${id} not found`);
-            }
-            collection.splice(index, 1);
-            validateAssuranceDocument(document);
-            return {
-                raw: `${JSON.stringify(document, null, 2)}\n`,
-                result: { changed: true, action: "removed", kind, id },
-            };
-        },
-    });
-    return { ...mutation.result, changed: mutation.changed };
-}
-/** Append one immutable gate verdict without changing registry state. */
-export async function recordAssuranceVerdict(pmRoot, verdict, options = {}) {
-    if (verdict.dry_run)
-        throw new TypeError("dry-run assurance verdicts are not persisted");
-    const settings = await readSettings(pmRoot);
-    await appendWorkspaceAuditEvent({
-        pmRoot,
-        op: "assurance:gate:verdict",
-        author: resolveAuthor(options.author, settings.author_default),
-        context: { assurance_verdict: verdict },
-        message: options.message ??
-            `Assurance gate ${verdict.gate_id} returned ${verdict.verdict}`,
-        lockTtlSeconds: LOCK_TTL_SECONDS,
-        lockWaitMs: LOCK_WAIT_MS,
-    });
-}
-/** Query durable assurance verdicts from the verified workspace stream. */
-export async function listAssuranceVerdicts(pmRoot, options = {}) {
-    const limit = options.limit ?? DEFAULT_VERDICT_LIMIT;
-    if (!Number.isInteger(limit) ||
-        limit < 1 ||
-        limit > MAX_ASSURANCE_VERDICT_LIMIT) {
-        throw new TypeError(`assurance verdict limit must be an integer from 1 through ${MAX_ASSURANCE_VERDICT_LIMIT}`);
-    }
-    const entries = await readHistoryEntries(getWorkspaceHistoryPath(pmRoot), WORKSPACE_HISTORY_ID);
-    return entries
-        .reverse()
-        .filter((entry) => entry.op === "assurance:gate:verdict")
-        .map((entry) => entry.context?.assurance_verdict)
-        .filter((value) => typeof value === "object" && value !== null && "gate_id" in value)
-        .filter((verdict) => options.gate_id === undefined || verdict.gate_id === options.gate_id)
-        .slice(0, limit);
-}
+!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="00ad9b34-4feb-5812-8755-801869cce3ad")}catch(e2){}})();import{createHash}from"node:crypto";import path from"node:path";import{EXIT_CODE}from"../../core/shared/constants.js";import{PmCliError}from"../../core/shared/errors.js";import{appendWorkspaceAuditEvent,mutateWorkspaceJsonWithHistory,readFileIfExists,readHistoryEntries,readSettings,resolveAuthor,stableStringify,WORKSPACE_HISTORY_ID,getWorkspaceHistoryPath}from"../runtime-primitives.js";import{resolveCanonicalRelationshipKind}from"../relationships.js";import{MAX_ASSURANCE_VERDICT_LIMIT}from"./assurance-limits.js";import{AssuranceEvaluationRefusalError,AssuranceMutationRefusalError,AssuranceSourceResolutionError}from"./assurance-mutation-error.js";const ASSURANCE_DOCUMENT_VERSION=1;const ASSURANCE_GATE_TRIGGERS=["pre-commit","pre-push","pre-merge","ci","pre-release","post-release","scheduled","on-claim","on-close"];const ASSURANCE_MEASUREMENT_SOURCE_KINDS=["items","dependency_kind","prose_edge_gap","graph","validate","health","history","links","provider","derived"];const POLARITY_KEYS=["ceiling","floor","equals","zero","monotone_nondecreasing","monotone_nonincreasing","subset_of"];const ID_PATTERN=/^[a-z0-9]+(?:[._-][a-z0-9]+)*$/;const LOCK_TTL_SECONDS=30;const LOCK_WAIT_MS=5e3;const EVALUATION_CONCURRENCY=4;const DEFAULT_VERDICT_LIMIT=50;function requireStableId(value,field){if(!ID_PATTERN.test(value)){throw new AssuranceMutationRefusalError(`${field} must be a stable lowercase id`)}}function requireFiniteNonNegative(value,field){if(!Number.isFinite(value)||value<0){throw new AssuranceMutationRefusalError(`${field} must be a finite non-negative number`)}}function boundFor(assertion){const present=POLARITY_KEYS.filter(key=>assertion[key]!==void 0);if(present.length!==1){throw new AssuranceMutationRefusalError(`assertion ${assertion.id} must declare exactly one polarity`)}const polarity=present[0];const raw=assertion[polarity];return{polarity,value:polarity==="zero"?0:raw}}function valuesEqual(left,right){return stableStringify(left)===stableStringify(right)}function compareBound(observed,bound){if(bound.polarity==="equals")return valuesEqual(observed,bound.value);if(bound.polarity==="subset_of"){if(!Array.isArray(observed)||!Array.isArray(bound.value))return false;const allowed=bound.value;return observed.every(entry=>allowed.includes(entry))}if(typeof observed!=="number"){return false}const numericBound=bound.value;if(bound.polarity==="ceiling"||bound.polarity==="monotone_nonincreasing"){return observed<=numericBound}if(bound.polarity==="floor"||bound.polarity==="monotone_nondecreasing"){return observed>=numericBound}return observed===0}function proveNegativeControl(assertion){const bound=boundFor(assertion);const cases=assertion.negative_control.cases;return cases.some(entry=>entry.expected==="pass")&&cases.some(entry=>entry.expected==="fail")&&cases.every(entry=>compareBound(entry.observed,bound)===(entry.expected==="pass"))}function boundUpdateIsLoosening(beforeBound,afterBound){if(beforeBound.polarity!==afterBound.polarity)return true;if(typeof beforeBound.value==="number"&&typeof afterBound.value==="number"){return beforeBound.polarity==="ceiling"||beforeBound.polarity==="monotone_nonincreasing"?afterBound.value>beforeBound.value:beforeBound.polarity==="floor"||beforeBound.polarity==="monotone_nondecreasing"?afterBound.value<beforeBound.value:afterBound.value!==beforeBound.value}if(beforeBound.polarity==="subset_of"){const beforeValues=beforeBound.value;const afterValues=afterBound.value;return!Array.isArray(beforeValues)||!Array.isArray(afterValues)||afterValues.some(entry=>!beforeValues.includes(entry))}return!valuesEqual(beforeBound.value,afterBound.value)}function assuranceAssertionUpdateIsLoosening(before,after){if(before.measurement_id!==after.measurement_id||before.owner_item_id!==after.owner_item_id||stableStringify(before.scope)!==stableStringify(after.scope)){return true}const enforcementRank={observe:0,warn:1,block:2};const lifetimeLoosened=(before.lifetime??"hold")==="hold"&&(after.lifetime??"hold")==="retire";return boundUpdateIsLoosening(boundFor(before),boundFor(after))||enforcementRank[after.enforcement]<enforcementRank[before.enforcement]||lifetimeLoosened}function validateItemsMeasurementSource(source){if(source.state!==void 0&&!(source.state==="present"||source.state==="missing")){throw new AssuranceMutationRefusalError("items source state must be present or missing")}const hasEquals=Object.hasOwn(source,"equals");const hasState=source.state!==void 0;const predicateCount=Number(hasEquals)+Number(hasState);if(source.field!==void 0&&predicateCount!==1){throw new AssuranceMutationRefusalError("items source with field requires exactly one of equals or state")}if(source.field===void 0&&predicateCount!==0){throw new AssuranceMutationRefusalError("items source equals/state requires field")}}function validateDependencyKindMeasurementSource(source){if(typeof source.dependency_kind!=="string"||source.dependency_kind.trim().length===0){throw new AssuranceMutationRefusalError("dependency_kind source requires dependency_kind")}const provenancePredicateCount=[source.source_kind,source.source_kind_prefix,source.source_kind_state].filter(value=>value!==void 0).length;if(provenancePredicateCount>1){throw new AssuranceMutationRefusalError("dependency_kind source accepts at most one source_kind predicate")}if(source.source_kind!==void 0&&source.source_kind.trim().length===0||source.source_kind_prefix!==void 0&&source.source_kind_prefix.trim().length===0){throw new AssuranceMutationRefusalError("dependency_kind source provenance values must not be empty")}if(source.source_kind_state!==void 0&&source.source_kind_state!=="present"&&source.source_kind_state!=="missing"){throw new AssuranceMutationRefusalError("dependency_kind source source_kind_state must be present or missing")}}function validateProseEdgeGapSource(source){if(source.sample_limit!==void 0&&(!Number.isInteger(source.sample_limit)||source.sample_limit<1)){throw new AssuranceMutationRefusalError("prose_edge_gap sample_limit must be a positive integer")}for(const exemption of source.exemptions??[]){if(typeof exemption.holder_id!=="string"||exemption.holder_id.trim().length===0||typeof exemption.reason!=="string"||exemption.reason.trim().length===0){throw new AssuranceMutationRefusalError("prose_edge_gap exemptions require holder_id and reason")}if(exemption.target_id!==void 0&&exemption.target_id.trim().length===0||exemption.text_contains!==void 0&&exemption.text_contains.trim().length===0){throw new AssuranceMutationRefusalError("prose_edge_gap exemption selectors must not be empty")}}}function validateMeasurementDefinition(definition){requireStableId(definition.id,"measurement.id");if(definition.max_cost!==void 0){requireFiniteNonNegative(definition.max_cost,"measurement.max_cost")}const candidateSource=definition.source;if(Object.prototype.toString.call(candidateSource)!=="[object Object]"){throw new AssuranceMutationRefusalError(`measurement.source.kind must be one of ${ASSURANCE_MEASUREMENT_SOURCE_KINDS.join(", ")}`)}const sourceKind=Reflect.get(candidateSource,"kind");if(!ASSURANCE_MEASUREMENT_SOURCE_KINDS.includes(sourceKind)){throw new AssuranceMutationRefusalError(`measurement.source.kind must be one of ${ASSURANCE_MEASUREMENT_SOURCE_KINDS.join(", ")}`)}const source=candidateSource;if(source.kind==="items"){validateItemsMeasurementSource(source)}if(source.kind==="dependency_kind")validateDependencyKindMeasurementSource(source);if(source.kind==="prose_edge_gap")validateProseEdgeGapSource(source);if((source.kind==="graph"||source.kind==="validate"||source.kind==="health")&&(typeof source.field!=="string"||source.field.trim().length===0)){throw new AssuranceMutationRefusalError(`${source.kind} source requires field`)}if(source.kind==="provider"){requireStableId(source.provider,"provider source provider");requireStableId(source.key,"provider source key")}return definition}function validateAssertionDefinition(definition){requireStableId(definition.id,"assertion.id");requireStableId(definition.measurement_id,"assertion.measurement_id");if(typeof definition.owner_item_id!=="string"||definition.owner_item_id.trim().length===0){throw new AssuranceMutationRefusalError("assertion.owner_item_id is required")}const bound=boundFor(definition);if(typeof bound.value==="number"&&!Number.isFinite(bound.value)){throw new AssuranceMutationRefusalError(`assertion.${bound.polarity} must be a finite number`)}if(definition.lifetime==="retire"&&(typeof definition.retire_reason!=="string"||definition.retire_reason.trim().length===0)){throw new AssuranceMutationRefusalError("retired assertion requires retire_reason")}if(definition.scope.kind==="filter"){requireStableId(definition.scope.measurement_id,"assertion.scope.measurement_id")}const cases=definition.negative_control?.cases;if(!Array.isArray(cases)||!cases.some(entry=>entry.expected==="pass")||!cases.some(entry=>entry.expected==="fail")){throw new AssuranceMutationRefusalError("assertion negative control requires pass and fail cases")}if(!proveNegativeControl(definition)){throw new AssuranceMutationRefusalError(`assertion ${definition.id} negative control does not prove its bound`)}return definition}function validateGateProviderPolicy(policy){if(!Array.isArray(policy.allowed_providers)){throw new AssuranceMutationRefusalError("gate provider_policy.allowed_providers must be an array")}for(const provider of policy.allowed_providers){requireStableId(provider,"gate.provider_policy.allowed_provider")}if(typeof policy.triggers!=="object"||policy.triggers===null||Array.isArray(policy.triggers)){throw new AssuranceMutationRefusalError("gate provider_policy.triggers must be an object")}for(const[trigger,rule]of Object.entries(policy.triggers)){if(!ASSURANCE_GATE_TRIGGERS.includes(trigger)){throw new AssuranceMutationRefusalError(`gate provider policy has unknown trigger ${trigger}`)}if(typeof rule!=="object"||rule===null||!["low","medium","high"].includes(rule.max_cost_class)||typeof rule.allow_network!=="boolean"){throw new AssuranceMutationRefusalError(`gate provider policy trigger ${trigger} is invalid`)}}}function validateGateDefinition(definition){requireStableId(definition.id,"gate.id");if(!Array.isArray(definition.assertion_ids)){throw new AssuranceMutationRefusalError("gate.assertion_ids is required and must be an array")}if(definition.assertion_ids.length===0){throw new AssuranceMutationRefusalError("gate requires at least one assertion")}for(const id of definition.assertion_ids)requireStableId(id,"gate.assertion_id");if(!Array.isArray(definition.triggers)){throw new AssuranceMutationRefusalError(`gate.triggers is required and must be an array of ${ASSURANCE_GATE_TRIGGERS.join(", ")}`)}if(definition.triggers.length===0){throw new AssuranceMutationRefusalError("gate requires at least one trigger")}for(const trigger of definition.triggers){if(!ASSURANCE_GATE_TRIGGERS.includes(trigger)){throw new AssuranceMutationRefusalError(`gate trigger must be one of ${ASSURANCE_GATE_TRIGGERS.join(", ")}`)}}if(definition.provider_policy){validateGateProviderPolicy(definition.provider_policy)}return definition}function validateAssuranceDocument(document){if(document.version!==ASSURANCE_DOCUMENT_VERSION){throw new AssuranceMutationRefusalError(`unsupported assurance document version ${String(document.version)}`)}const ids=new Set;for(const definition of document.measurements){validateMeasurementDefinition(definition);if(ids.has(`measurement:${definition.id}`)){throw new AssuranceMutationRefusalError(`duplicate measurement ${definition.id}`)}ids.add(`measurement:${definition.id}`)}for(const definition of document.assertions){validateAssertionDefinition(definition);if(ids.has(`assertion:${definition.id}`)){throw new AssuranceMutationRefusalError(`duplicate assertion ${definition.id}`)}ids.add(`assertion:${definition.id}`)}for(const definition of document.gates){validateGateDefinition(definition);const missing=definition.assertion_ids.filter(id=>!document.assertions.some(assertionDefinition=>assertionDefinition.id===id));if(missing.length>0){throw new AssuranceMutationRefusalError(`gate ${definition.id} references missing assertions: ${missing.join(", ")}`)}if(ids.has(`gate:${definition.id}`)){throw new AssuranceMutationRefusalError(`duplicate gate ${definition.id}`)}ids.add(`gate:${definition.id}`)}const measurementIds=new Set(document.measurements.map(entry=>entry.id));for(const[measurementId,consumers]of collectMeasurementReferences(document)){if(!measurementIds.has(measurementId)){throw new AssuranceMutationRefusalError(`${consumers.join(", ")} references missing measurement ${measurementId}`)}}return document}function collectExpressionMeasurementReferences(expression,references){if("measurement"in expression){references.push(expression.measurement);return}if("operator"in expression){for(const operand of expression.operands){collectExpressionMeasurementReferences(operand,references)}}}function collectMeasurementReferences(document){const references=new Map;const add=(measurementId,consumer)=>{const consumers=references.get(measurementId)??[];consumers.push(consumer);references.set(measurementId,consumers)};for(const assertionDefinition of document.assertions){add(assertionDefinition.measurement_id,`assertion ${assertionDefinition.id}`);if(assertionDefinition.scope.kind==="filter"){add(assertionDefinition.scope.measurement_id,`assertion ${assertionDefinition.id} scope`)}}for(const measurementDefinition of document.measurements){if(measurementDefinition.source.kind!=="derived")continue;const derivedReferences=[];collectExpressionMeasurementReferences(measurementDefinition.source.expression,derivedReferences);for(const measurementId of derivedReferences){add(measurementId,`derived measurement ${measurementDefinition.id}`)}}return references}function collectGateProviderIds(gate,document){const pending=gate.assertion_ids.flatMap(assertionId=>{const assertion=document.assertions.find(entry=>entry.id===assertionId);return[assertion.measurement_id,...assertion.scope.kind==="filter"?[assertion.scope.measurement_id]:[]]});const visited=new Set;const providers=new Set;while(pending.length>0){const measurementId=pending.pop();if(visited.has(measurementId))continue;visited.add(measurementId);const measurement=document.measurements.find(entry=>entry.id===measurementId);if(measurement.source.kind==="provider"){providers.add(measurement.source.provider)}else if(measurement.source.kind==="derived"){collectExpressionMeasurementReferences(measurement.source.expression,pending)}}return providers}function createEmptyAssuranceDocument(){return{version:ASSURANCE_DOCUMENT_VERSION,measurements:[],assertions:[],gates:[]}}function itemsSourceResult(source,context){const matches=context.items.filter(item=>(source.statuses===void 0||source.statuses.includes(item.status))&&(source.types===void 0||source.types.includes(item.type))&&(source.tags===void 0||source.tags.every(tag=>item.tags?.includes(tag)))&&(source.field===void 0||(()=>{const value=item[source.field];if(source.state!==void 0){const missing=value===void 0||value===null||value===""||Array.isArray(value)&&value.length===0;return source.state==="missing"?missing:!missing}return valuesEqual(value,source.equals)})()));return{value:matches.length,population_size:context.items.length,cost:context.items.length,contributors:matches.map(item=>item.id)}}function dependencyProvenanceMatches(source,sourceKind){if(source.source_kind!==void 0){return sourceKind?.toLowerCase()===source.source_kind.trim().toLowerCase()}if(source.source_kind_prefix!==void 0){return sourceKind?.toLowerCase().startsWith(source.source_kind_prefix.trim().toLowerCase())===true}if(source.source_kind_state==="present"){return sourceKind!==void 0&&sourceKind.length>0}if(source.source_kind_state==="missing"){return sourceKind===void 0||sourceKind.length===0}return true}function dependencyKindSourceResult(source,context){const contributors=[];const requestedKind=resolveCanonicalRelationshipKind(source.dependency_kind)??source.dependency_kind.trim().toLowerCase();for(const item of context.items){for(const dependency of item.dependencies??[]){const dependencyKind=resolveCanonicalRelationshipKind(dependency.kind)??dependency.kind.trim().toLowerCase();const sourceKind=dependency.source_kind?.trim();if(dependencyKind===requestedKind&&dependencyProvenanceMatches(source,sourceKind))contributors.push(`${item.id}->${dependency.id}${sourceKind?`@${sourceKind}`:""}`)}}return{value:contributors.length,population_size:context.items.length,cost:context.items.length,contributors}}function assuranceItemProseSegments(item){const segments=[item.description,item.body].filter(value=>typeof value==="string").map(value=>value.trim()).filter(Boolean);for(const key of["comments","notes","learnings"]){const entries=item[key];if(!Array.isArray(entries))continue;for(const entry of entries){if(typeof entry==="string")segments.push(entry);else if(typeof entry==="object"&&entry!==null){const text=Reflect.get(entry,"text");if(typeof text==="string")segments.push(text)}}}return segments}function proseReferenceIsExempt(exemptions,holderId,targetId,segment){return exemptions.some(exemption=>exemption.holder_id.trim().toLowerCase()===holderId.toLowerCase()&&(exemption.target_id===void 0||exemption.target_id.trim().toLowerCase()===targetId.toLowerCase())&&(exemption.text_contains===void 0||segment.toLowerCase().includes(exemption.text_contains.trim().toLowerCase())))}function prosePairKey(left,right){return[left.toLowerCase(),right.toLowerCase()].sort().join("\0")}function collectProseEdgeCensusInputs(items){const canonicalIds=new Map;const linkedPairs=new Set;const proseMentions=[];const mentionPattern=/\b[a-z][a-z0-9]*-[a-z0-9]+\b/giu;let mentionCount=0;for(const item of items){canonicalIds.set(item.id.toLowerCase(),item.id);for(const dependency of item.dependencies??[])linkedPairs.add(prosePairKey(item.id,dependency.id));for(const scalar of[item.parent,item.blocked_by])if(typeof scalar==="string")linkedPairs.add(prosePairKey(item.id,scalar));for(const segment of assuranceItemProseSegments(item)){const mentionedIds=[...segment.matchAll(mentionPattern)].map(match=>match[0]);mentionCount+=mentionedIds.length;proseMentions.push({holder_id:item.id,segment,mentioned_ids:mentionedIds})}}return{canonical_ids:canonicalIds,linked_pairs:linkedPairs,prose_mentions:proseMentions,mention_count:mentionCount}}function proseEdgeGapSourceResult(source,context){const census=collectProseEdgeCensusInputs(context.items);const gaps=new Map;for(const proseMention of census.prose_mentions){const mentions=proseMention.mentioned_ids.map(id=>census.canonical_ids.get(id.toLowerCase())).filter(id=>id!==void 0&&id!==proseMention.holder_id);const distinctMentions=[...new Set(mentions)];for(const targetId of distinctMentions){const key=prosePairKey(proseMention.holder_id,targetId);if(census.linked_pairs.has(key)||proseReferenceIsExempt(source.exemptions??[],proseMention.holder_id,targetId,proseMention.segment))continue;const explicit=distinctMentions.some(candidate=>candidate!==targetId);if(gaps.get(key)?.explicit===true&&!explicit)continue;gaps.set(key,{contributor:`${proseMention.holder_id}->${targetId}|subject=${explicit?"explicit":"implicit"}`,explicit})}}const gapRows=[...gaps.values()];const contributors=gapRows.map(entry=>entry.contributor).sort();return{value:contributors.length,population_size:census.canonical_ids.size,cost:context.items.length+census.linked_pairs.size+census.mention_count,contributors:contributors.slice(0,source.sample_limit??25),partitions:{explicit_subject:gapRows.filter(entry=>entry.explicit).length,implicit_subject:gapRows.filter(entry=>!entry.explicit).length}}}function historySourceResult(source,context){const matches=context.history.filter(entry=>(source.op===void 0||entry.op===source.op)&&(source.author===void 0||entry.author===source.author)&&(source.harness===void 0||entry.agent_harness===source.harness)&&(source.model===void 0||entry.agent_model===source.model));return{value:matches.length,population_size:context.history.length,cost:context.history.length}}function linksSourceResult(source,context){const matches=context.items.filter(item=>{const links=item[source.link];const present=Array.isArray(links)&&links.length>0;return source.state==="present"?present:!present});return{value:matches.length,population_size:context.items.length,cost:context.items.length,contributors:matches.map(item=>item.id)}}function sourceResult(definition,context){const source=definition.source;if(source.kind==="items")return itemsSourceResult(source,context);if(source.kind==="dependency_kind"){return dependencyKindSourceResult(source,context)}if(source.kind==="prose_edge_gap")return proseEdgeGapSourceResult(source,context);if(source.kind==="history")return historySourceResult(source,context);if(source.kind==="links")return linksSourceResult(source,context);return null}function sumCosts(costs,durationMs){return costs.reduce((total,cost)=>({units:total.units+cost.units,items_scanned:total.items_scanned+cost.items_scanned,history_entries:total.history_entries+cost.history_entries,provider_calls:total.provider_calls+cost.provider_calls,duration_ms:durationMs}),{units:0,items_scanned:0,history_entries:0,provider_calls:0,duration_ms:durationMs})}function arithmeticValue(operator,values){if(values.length===0)throw new TypeError(`derived ${operator} requires operands`);if(operator==="add")return values.reduce((sum,value)=>sum+value,0);if(operator==="subtract")return values.slice(1).reduce((result,value)=>result-value,values[0]);if(operator==="multiply")return values.reduce((result,value)=>result*value,1);if(operator==="divide"){if(values.slice(1).includes(0))throw new TypeError("derived divide cannot divide by zero");return values.slice(1).reduce((result,value)=>result/value,values[0])}return operator==="min"?Math.min(...values):Math.max(...values)}async function mapWithConcurrency(values,limit,transform){const results=new Array(values.length);let nextIndex=0;const workers=Array.from({length:Math.min(limit,values.length)},async()=>{while(nextIndex<values.length){const index=nextIndex;nextIndex+=1;results[index]=await transform(values[index],index)}});await Promise.all(workers);return results}async function evaluateExpression(expression,context,definitions,stack,state){if("literal"in expression)return{value:expression.literal,costs:[],population_size:0,contributors:[]};if("measurement"in expression){const definition=definitions.find(entry=>entry.id===expression.measurement);if(!definition)throw new TypeError(`derived measurement references missing ${expression.measurement}`);const result=await evaluateMeasurementCached(definition,context,definitions,stack,state);if(typeof result.value!=="number")throw new TypeError(`derived measurement ${definition.id} is not numeric`);const costs=state.charged.has(definition.id)?[]:[result.cost];state.charged.add(definition.id);return{value:result.value,costs,population_size:result.population_size,contributors:result.contributors}}const operands=await mapWithConcurrency(expression.operands,EVALUATION_CONCURRENCY,operand=>evaluateExpression(operand,context,definitions,stack,state));return{value:arithmeticValue(expression.operator,operands.map(entry=>entry.value)),costs:operands.flatMap(entry=>entry.costs),population_size:Math.max(0,...operands.map(entry=>entry.population_size)),contributors:[...new Set(operands.flatMap(entry=>entry.contributors))]}}async function evaluateMeasurementInternal(definition,context,definitions,stack,state){validateMeasurementDefinition(definition);const startedAt=Date.now();let result;let nestedCosts=[];let providerCalls=0;if(definition.source.kind==="derived"){const derived=await evaluateExpression(definition.source.expression,context,definitions,[...stack,definition.id],state);result={value:derived.value,population_size:derived.population_size,cost:0,contributors:derived.contributors};nestedCosts=derived.costs}else{const builtin=sourceResult(definition,context);if(builtin!==null){result=builtin}else{result=await context.external(definition.source);providerCalls=1}}const ownCost={units:result.cost,items_scanned:definition.source.kind==="items"||definition.source.kind==="dependency_kind"||definition.source.kind==="prose_edge_gap"||definition.source.kind==="links"?context.items.length:0,history_entries:definition.source.kind==="history"?context.history.length:0,provider_calls:providerCalls,duration_ms:Date.now()-startedAt};const cost=sumCosts([...nestedCosts,ownCost],Date.now()-startedAt);if(definition.max_cost!==void 0&&cost.units>definition.max_cost){throw new AssuranceEvaluationRefusalError(`measurement ${definition.id} exceeded cost ceiling ${definition.max_cost} with ${cost.units}`)}return{id:definition.id,definition_fingerprint:`sha256:${createHash("sha256").update(stableStringify(definition)).digest("hex")}`,value:result.value,population_size:result.population_size,cost,contributors:result.contributors??[],...result.partitions?{partitions:result.partitions}:{}}}function evaluateMeasurementCached(definition,context,definitions,stack,state){if(stack.includes(definition.id)){throw new TypeError(`derived measurement cycle: ${[...stack,definition.id].join(" -> ")}`)}const cached=state.cache.get(definition.id);if(cached)return cached;const evaluation=evaluateMeasurementInternal(definition,context,definitions,stack,state).catch(error=>{if(error instanceof AssuranceSourceResolutionError&&error.measurement_id===void 0){const sourceContext={measurement_id:definition.id,source_kind:error.source_kind,field:error.field,...error.check?{check:error.check}:{}};const sourceError=new AssuranceSourceResolutionError(error.message,sourceContext);sourceError.cause=error;throw sourceError}throw error});state.cache.set(definition.id,evaluation);return evaluation}async function evaluateMeasurement(definition,context,definitions=[definition]){return evaluateMeasurementCached(definition,context,definitions,[],{cache:new Map,charged:new Set})}function assertionDistance(observed,bound){if(typeof observed!=="number"||typeof bound.value!=="number")return null;if(bound.polarity==="ceiling"||bound.polarity==="monotone_nonincreasing")return bound.value-observed;if(bound.polarity==="floor"||bound.polarity==="monotone_nondecreasing")return observed-bound.value;return observed-bound.value}function evaluateAssuranceAssertion(definition,measurement,options={}){validateAssertionDefinition(definition);const bound=boundFor(definition);const retired=definition.lifetime==="retire"&&options.owner_terminal===true;return{assertion_id:definition.id,measurement_id:definition.measurement_id,measurement_definition_fingerprint:measurement.definition_fingerprint,scope:definition.scope,population_size:measurement.population_size,observed:measurement.value,bound,distance:assertionDistance(measurement.value,bound),verdict:retired?"retired":compareBound(measurement.value,bound)?"pass":"fail",enforcement:definition.enforcement,negative_control_proven:proveNegativeControl(definition),cost:measurement.cost,contributors:measurement.contributors,...measurement.partitions?{partitions:measurement.partitions}:{}}}function enforceGateProviderPolicy(gate,document,context,trigger){const providerIds=collectGateProviderIds(gate,document);if(providerIds.size===0)return;const policy=gate.provider_policy;const triggerPolicy=policy?.triggers[trigger];if(!policy||!triggerPolicy){throw new AssuranceEvaluationRefusalError(`assurance gate ${gate.id} refuses provider execution at trigger ${trigger} without an explicit provider policy`)}const allowedProviders=new Set(policy.allowed_providers);const costRank={low:0,medium:1,high:2};for(const providerId of providerIds){if(!allowedProviders.has(providerId)){throw new AssuranceEvaluationRefusalError(`assurance gate ${gate.id} refuses provider ${providerId}`)}const capability=context.provider_capabilities?.[providerId];if(!capability){throw new AssuranceEvaluationRefusalError(`assurance provider ${providerId} has no declared capabilities`)}if(costRank[capability.cost_class]>costRank[triggerPolicy.max_cost_class]){throw new AssuranceEvaluationRefusalError(`assurance gate ${gate.id} refuses ${capability.cost_class}-cost provider ${providerId} at trigger ${trigger}`)}if(capability.network&&!triggerPolicy.allow_network){throw new AssuranceEvaluationRefusalError(`assurance gate ${gate.id} refuses network provider ${providerId} at trigger ${trigger}`)}}}async function evaluateGateMeasurement(gateId,assertionId,definition,context,definitions){try{return await evaluateMeasurement(definition,context,definitions)}catch(error){if(error instanceof AssuranceSourceResolutionError){const checkLocation=error.check?` check ${error.check}`:"";const measurementId=error.measurement_id??definition.id;const refusal=new AssuranceEvaluationRefusalError(`assurance gate ${gateId} assertion ${assertionId} measurement ${measurementId} source ${error.source_kind}${checkLocation} field ${error.field} could not resolve: ${error.message}`,{gate_id:gateId,assertion_id:assertionId,measurement_id:measurementId,source_kind:error.source_kind,field:error.field,...error.check?{check:error.check}:{}});refusal.cause=error;throw refusal}throw error}}async function evaluateAssuranceGate(gateId,document,context,options){validateAssuranceDocument(document);const gateDefinition=document.gates.find(entry=>entry.id===gateId);if(!gateDefinition)throw new AssuranceEvaluationRefusalError(`assurance gate ${gateId} not found`);if(!gateDefinition.triggers.includes(options.trigger)){throw new AssuranceEvaluationRefusalError(`assurance gate ${gateId} does not declare trigger ${options.trigger}`)}enforceGateProviderPolicy(gateDefinition,document,context,options.trigger);const assertions=await mapWithConcurrency(gateDefinition.assertion_ids,EVALUATION_CONCURRENCY,async id=>{const assertionDefinition=document.assertions.find(entry=>entry.id===id);const measurementDefinition=document.measurements.find(entry=>entry.id===assertionDefinition.measurement_id);let scopedContext=context;if(assertionDefinition.scope.kind==="active"){const terminalStatuses=new Set(context.terminal_statuses??["closed","canceled"]);scopedContext={...context,items:context.items.filter(item=>!terminalStatuses.has(item.status))}}else if(assertionDefinition.scope.kind==="filter"){const scopeMeasurementId=assertionDefinition.scope.measurement_id;const scopeDefinition=document.measurements.find(entry=>entry.id===scopeMeasurementId);const scope=await evaluateGateMeasurement(gateDefinition.id,assertionDefinition.id,scopeDefinition,context,document.measurements);const contributorIds=new Set(scope.contributors);scopedContext={...context,items:context.items.filter(item=>contributorIds.has(item.id))}}const owner=context.items.find(item=>item.id===assertionDefinition.owner_item_id);const ownerTerminal=owner!==void 0&&new Set(context.terminal_statuses??["closed","canceled"]).has(owner.status);return evaluateAssuranceAssertion(assertionDefinition,await evaluateGateMeasurement(gateDefinition.id,assertionDefinition.id,measurementDefinition,scopedContext,document.measurements),{owner_terminal:ownerTerminal})});const blocking=assertions.some(entry=>entry.verdict==="fail"&&entry.enforcement==="block");const warning=assertions.some(entry=>entry.verdict==="fail"&&entry.enforcement==="warn");return{gate_id:gateDefinition.id,tree_id:context.tree_id,trigger:options.trigger,dry_run:options.dry_run===true,evaluated_at:new Date().toISOString(),verdict:blocking?"block":warning?"warn":"pass",exit_code:blocking?1:0,assertions,assertions_total:assertions.length,row_contract:{row_keys:["assertions"],jq_selector:".assertions[]"},cost:sumCosts(assertions.map(entry=>entry.cost),Math.max(0,...assertions.map(entry=>entry.cost.duration_ms)))}}function assurancePath(pmRoot){return path.join(pmRoot,"assurance.json")}async function readDocument(pmRoot){const raw=await readFileIfExists(assurancePath(pmRoot));if(raw===null)return createEmptyAssuranceDocument();return parseAssuranceDocument(raw)}function parseAssuranceDocument(raw){try{return validateAssuranceDocument(JSON.parse(raw))}catch(error){throw new PmCliError("The assurance registry is invalid. Repair or restore .agents/pm/assurance.json and retry.",EXIT_CODE.GENERIC_FAILURE,{code:"assurance_registry_invalid",reason:String(error),nextSteps:["Restore a valid assurance.json from version control or repair its declaration references.","Run pm assurance list measurement after the repair."]})}}function collectionFor(document,kind){if(kind==="measurement")return document.measurements;if(kind==="assertion")return document.assertions;return document.gates}function validateForKind(kind,definition){if(kind==="measurement")validateMeasurementDefinition(definition);else if(kind==="assertion")validateAssertionDefinition(definition);else validateGateDefinition(definition)}async function listAssuranceDeclarations(pmRoot,kind){const items=structuredClone(collectionFor(await readDocument(pmRoot),kind));return{items,count:items.length,row_contract:{row_keys:["items"],jq_selector:".items[]"}}}async function getAssuranceDeclaration(pmRoot,kind,id){const found=collectionFor(await readDocument(pmRoot),kind).find(entry=>entry.id===id);if(!found)throw new TypeError(`assurance ${kind} ${id} not found`);return structuredClone(found)}async function putAssuranceDeclaration(pmRoot,kind,definition,options={}){validateForKind(kind,definition);const settings=await readSettings(pmRoot);const author=resolveAuthor(options.author,settings.author_default);const mutation=await mutateWorkspaceJsonWithHistory({pmRoot,filePath:assurancePath(pmRoot),op:`assurance:${kind}:put`,author,message:options.message,lockTtlSeconds:LOCK_TTL_SECONDS,lockWaitMs:LOCK_WAIT_MS,mutate:beforeRaw=>{const document=beforeRaw===null?createEmptyAssuranceDocument():parseAssuranceDocument(beforeRaw);const collection=collectionFor(document,kind);const index=collection.findIndex(entry=>entry.id===definition.id);const action=index<0?"created":"updated";if(kind==="assertion"&&index>=0&&assuranceAssertionUpdateIsLoosening(collection[index],definition)){const decision=definition.authorization_decision;if(!decision||!options.authorized_decision_ids?.includes(decision)){throw new AssuranceMutationRefusalError(`loosening assertion ${definition.id} requires a verified authorization_decision`)}}if(index<0)collection.push(structuredClone(definition));else collection[index]=structuredClone(definition);validateAssuranceDocument(document);return{raw:`${JSON.stringify(document,null,2)}
+`,result:{changed:true,action,kind,id:definition.id}}}});return{...mutation.result,changed:mutation.changed}}async function putAssuranceDeclarationBundle(pmRoot,bundle,options={}){const candidate=createEmptyAssuranceDocument();candidate.measurements=structuredClone(bundle.measurements);candidate.assertions=structuredClone(bundle.assertions);candidate.gates=structuredClone(bundle.gates);validateAssuranceDocument(candidate);const settings=await readSettings(pmRoot);const author=resolveAuthor(options.author,settings.author_default);const mutation=await mutateWorkspaceJsonWithHistory({pmRoot,filePath:assurancePath(pmRoot),op:"assurance:bundle:apply",author,message:options.message,lockTtlSeconds:LOCK_TTL_SECONDS,lockWaitMs:LOCK_WAIT_MS,mutate:beforeRaw=>{const document=beforeRaw===null?createEmptyAssuranceDocument():parseAssuranceDocument(beforeRaw);const createdIds=[];const unchangedIds=[];const apply=(target,additions,kind)=>{for(const definition of additions){const existing=target.find(entry=>entry.id===definition.id);if(!existing){target.push(structuredClone(definition));createdIds.push(`${kind}:${definition.id}`);continue}if(stableStringify(existing)!==stableStringify(definition)){throw new AssuranceMutationRefusalError(`assurance bundle refuses to replace divergent ${kind} ${definition.id}`)}unchangedIds.push(`${kind}:${definition.id}`)}};apply(document.measurements,candidate.measurements,"measurement");apply(document.assertions,candidate.assertions,"assertion");apply(document.gates,candidate.gates,"gate");validateAssuranceDocument(document);return{raw:`${JSON.stringify(document,null,2)}
+`,result:{changed:createdIds.length>0,created_ids:createdIds,unchanged_ids:unchangedIds}}}});return{...mutation.result,changed:mutation.changed}}async function removeAssuranceDeclaration(pmRoot,kind,id,options={}){const settings=await readSettings(pmRoot);const author=resolveAuthor(options.author,settings.author_default);const mutation=await mutateWorkspaceJsonWithHistory({pmRoot,filePath:assurancePath(pmRoot),op:`assurance:${kind}:remove`,author,message:options.message,lockTtlSeconds:LOCK_TTL_SECONDS,lockWaitMs:LOCK_WAIT_MS,mutate:beforeRaw=>{const document=beforeRaw===null?createEmptyAssuranceDocument():parseAssuranceDocument(beforeRaw);if(kind==="measurement"){const consumers=collectMeasurementReferences(document).get(id);if(consumers&&consumers.length>0){throw new AssuranceMutationRefusalError(`assurance measurement ${id} is referenced by ${consumers.join(", ")}`)}}if(kind==="assertion"&&document.gates.some(entry=>entry.assertion_ids.includes(id))){throw new AssuranceMutationRefusalError(`assurance assertion ${id} is referenced by gate`)}const collection=collectionFor(document,kind);const index=collection.findIndex(entry=>entry.id===id);if(index<0){throw new AssuranceMutationRefusalError(`assurance ${kind} ${id} not found`)}collection.splice(index,1);validateAssuranceDocument(document);return{raw:`${JSON.stringify(document,null,2)}
+`,result:{changed:true,action:"removed",kind,id}}}});return{...mutation.result,changed:mutation.changed}}async function recordAssuranceVerdict(pmRoot,verdict,options={}){if(verdict.dry_run)throw new TypeError("dry-run assurance verdicts are not persisted");const settings=await readSettings(pmRoot);await appendWorkspaceAuditEvent({pmRoot,op:"assurance:gate:verdict",author:resolveAuthor(options.author,settings.author_default),context:{assurance_verdict:verdict},message:options.message??`Assurance gate ${verdict.gate_id} returned ${verdict.verdict}`,lockTtlSeconds:LOCK_TTL_SECONDS,lockWaitMs:LOCK_WAIT_MS})}async function listAssuranceVerdicts(pmRoot,options={}){const limit=options.limit??DEFAULT_VERDICT_LIMIT;if(!Number.isInteger(limit)||limit<1||limit>MAX_ASSURANCE_VERDICT_LIMIT){throw new TypeError(`assurance verdict limit must be an integer from 1 through ${MAX_ASSURANCE_VERDICT_LIMIT}`)}const entries=await readHistoryEntries(getWorkspaceHistoryPath(pmRoot),WORKSPACE_HISTORY_ID);return entries.reverse().filter(entry=>entry.op==="assurance:gate:verdict").map(entry=>entry.context?.assurance_verdict).filter(value=>typeof value==="object"&&value!==null&&"gate_id"in value).filter(verdict=>options.gate_id===void 0||verdict.gate_id===options.gate_id).slice(0,limit)}export{ASSURANCE_DOCUMENT_VERSION,ASSURANCE_GATE_TRIGGERS,ASSURANCE_MEASUREMENT_SOURCE_KINDS,assuranceAssertionUpdateIsLoosening,createEmptyAssuranceDocument,evaluateAssuranceAssertion,evaluateAssuranceGate,evaluateMeasurement,getAssuranceDeclaration,listAssuranceDeclarations,listAssuranceVerdicts,putAssuranceDeclaration,putAssuranceDeclarationBundle,recordAssuranceVerdict,removeAssuranceDeclaration,validateAssertionDefinition,validateAssuranceDocument,validateGateDefinition,validateMeasurementDefinition};
 //# sourceMappingURL=assurance.js.map
-//# debugId=d4c380ce-031e-5b2d-aaa8-658bb4aa3087