@unbrained/pm-cli 2026.9.7 → 2026.9.9

package/dist/sdk/merge/install.js

@@ -1,563 +1,5 @@
-/**
- * @module sdk/merge/install
- *
- * Installs the tracker's git merge configuration into a repository: a fenced
- * `.gitattributes` block mapping every mergeable tracker artifact class to a
- * pm merge driver, plus the local `git config` driver definitions that make
- * those attributes effective. Idempotent and re-runnable; schema type
- * mutations refresh the fenced block automatically once it is installed.
- */
+!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="0200a3f7-93f5-5aaf-a6e8-2239e5b2ec3a")}catch(e2){}})();import{assertInitializedTracker}from"../environment/tracker-preflight.js";import{isFileMissingError}from"../../core/fs/fs-utils.js";import{readFile,realpath,writeFile}from"node:fs/promises";import{execFile}from"node:child_process";import path from"node:path";import{promisify}from"node:util";import{pathExists}from"../../core/fs/fs-utils.js";import{resolveItemTypeRegistry}from"../../core/item/type-registry.js";import{acquireLock}from"../../core/lock/lock.js";import{resolvePmPackageRootFromModule}from"../../core/packages/root.js";import{EXIT_CODE}from"../../core/shared/constants.js";import{PmCliError}from"../../core/shared/errors.js";import{resolveAuthor}from"../../core/shared/author.js";import{nowIso}from"../../core/shared/time.js";import{resolvePmRoot}from"../../core/store/paths.js";import{readSettings,resolveGovernanceKnobs}from"../../core/store/settings.js";import{isPathOutsideRoot}from"../workspace.js";import{resolveSourceContextWritePolicy}from"../environment/source-context.js";const execFileAsync=promisify(execFile);const PM_GITATTRIBUTES_START="# pm-cli:merge-drivers:start";const PM_GITATTRIBUTES_END="# pm-cli:merge-drivers:end";const PM_GITATTRIBUTES_V2_START="# pm-cli:merge-drivers:v2:start";const PM_GITATTRIBUTES_V2_END="# pm-cli:merge-drivers:v2:end";const MERGE_FENCE_LOCK_ID="merge-fence";function quoteMergeDriverArgument(value){return`'${value.replaceAll("'",`'"'"'`)}'`}function resolveMergeDriverCliCommand(){const packageRoot=resolvePmPackageRootFromModule(import.meta.url,["../../.."]);return`${quoteMergeDriverArgument(process.execPath)} ${quoteMergeDriverArgument(path.join(packageRoot,"dist","cli.js"))}`}const MERGE_DRIVER_DEFINITIONS=[{key:"pm-item-toon",name:"pm field-aware TOON item document merge",artifact:"item",itemPath:"%P"},{key:"pm-item-markdown",name:"pm field-aware JSON-markdown item document merge",artifact:"item",itemPath:"%P"},{key:"pm-history",name:"pm append-only history stream merge",artifact:"history",itemPath:void 0},{key:"pm-relationship",name:"pm append-only relationship event store merge",artifact:"relationship",itemPath:void 0},{key:"pm-json",name:"pm key-level JSON config merge",artifact:"json",itemPath:void 0}];function resolveMergeInstallContext(options){const explicitPath=options.explicitPath?.trim();const sourceWorkspaceRoot=options.environment.PM_SOURCE_WORKSPACE_ROOT?.trim();const sourcePmRoot=options.environment.PM_SOURCE_PM_PATH?.trim();const sourcePolicy=resolveSourceContextWritePolicy(options.environment);const sourceCoordinatesAvailable=Boolean(sourceWorkspaceRoot&&sourcePmRoot);const sourceContextSelected=explicitPath===void 0&&sourceCoordinatesAvailable&&(options.dryRun||sourcePolicy.source_writes_allowed);if(explicitPath!==void 0){const pmRoot=resolvePmRoot(options.cwd,explicitPath);return{pm_root:pmRoot,workspace_start:pmRoot,source_coordinates_available:sourceCoordinatesAvailable,source_context_selected:false,source_policy:sourcePolicy}}if(sourceContextSelected){return{pm_root:path.resolve(sourcePmRoot),workspace_start:path.resolve(sourceWorkspaceRoot),source_coordinates_available:true,source_context_selected:true,source_policy:sourcePolicy}}return{pm_root:sourceCoordinatesAvailable?resolvePmRoot(options.cwd,".agents/pm"):resolvePmRoot(options.cwd),workspace_start:options.cwd,source_coordinates_available:sourceCoordinatesAvailable,source_context_selected:false,source_policy:sourcePolicy}}async function findGitWorkspaceRoot(cwd){try{const{stdout}=await execFileAsync("git",["rev-parse","--show-toplevel"],{cwd,encoding:"utf8",windowsHide:true,timeout:1e4});return await realpath(stdout.trim())}catch{return null}}async function resolveGitWorkspaceRoot(cwd){const workspaceRoot=await findGitWorkspaceRoot(cwd);if(workspaceRoot===null){throw new PmCliError("pm merge install requires a git repository (merge drivers are git configuration).",EXIT_CODE.USAGE)}return workspaceRoot}function toPosixRelative(fromPath,toPath){return path.relative(fromPath,toPath).replaceAll("\\","/")}function quoteGitAttributePattern(value){return`"${value.replaceAll("\\","\\\\").replaceAll('"','\\"')}"`}function readSingleQuotedArgument(command,offset){if(command[offset]!=="'"){return null}let value="";for(let index=offset+1;index<command.length;index+=1){if(command.startsWith(`'"'"'`,index)){value+="'";index+=4;continue}if(command[index]==="'"){return{value,nextOffset:index+1}}value+=command[index]}return null}async function isPortableMergeDriverCommand(configured,expectedSuffix){const nodeArgument=readSingleQuotedArgument(configured,0);if(nodeArgument===null||configured[nodeArgument.nextOffset]!==" "){return false}const cliArgument=readSingleQuotedArgument(configured,nodeArgument.nextOffset+1);if(cliArgument===null||configured.slice(cliArgument.nextOffset)!==expectedSuffix||!/^node(?:\.exe)?$/iu.test(path.basename(nodeArgument.value))||path.basename(cliArgument.value)!=="cli.js"||path.basename(path.dirname(cliArgument.value))!=="dist"){return false}if(!await pathExists(nodeArgument.value)||!await pathExists(cliArgument.value)){return false}try{const packageRoot=path.dirname(path.dirname(cliArgument.value));const manifest=JSON.parse(await readFile(path.join(packageRoot,"package.json"),"utf8"));const pmBin=typeof manifest.bin==="object"&&manifest.bin!==null&&"pm"in manifest.bin?manifest.bin.pm:void 0;return manifest.name==="@unbrained/pm-cli"&&(manifest.bin==="dist/cli.js"||pmBin==="dist/cli.js")}catch{return false}}function buildMergeAttributePatterns(trackerRelativeRoot,typeFolders){const prefix=trackerRelativeRoot.length>0?`${trackerRelativeRoot}/`:"";const patterns=[`${quoteGitAttributePattern(`${prefix}**/*.toon`)} merge=pm-item-toon`,`${quoteGitAttributePattern(`${prefix}**/*.md`)} merge=pm-item-markdown`];for(const folder of typeFolders){patterns.push(`${quoteGitAttributePattern(`${prefix}${folder}/*.toon`)} merge=pm-item-toon`);patterns.push(`${quoteGitAttributePattern(`${prefix}${folder}/*.md`)} merge=pm-item-markdown`)}patterns.push(`${quoteGitAttributePattern(`${prefix}**/*.jsonl`)} merge=pm-relationship`);patterns.push(`${quoteGitAttributePattern(`${prefix}history/*.jsonl`)} merge=pm-history`);patterns.push(`${quoteGitAttributePattern(`${prefix}settings.json`)} merge=pm-json`);patterns.push(`${quoteGitAttributePattern(`${prefix}**/*.json`)} merge=pm-json`);patterns.push(`${quoteGitAttributePattern(`${prefix}extensions/**`)} -merge`);patterns.push(`${quoteGitAttributePattern(`${prefix}extensions/.managed-extensions.json`)} merge=pm-json`);return patterns}function removeManagedBlock(content,startMarker,endMarker){const start=content.indexOf(startMarker);const end=content.indexOf(endMarker);return start>=0&&end>start?`${content.slice(0,start)}${content.slice(end+endMarker.length)}`:content.replace(startMarker,"").replace(endMarker,"")}async function reconcileGitattributesBlock(workspaceRoot,patterns,dryRun){const gitattributesPath=path.join(workspaceRoot,".gitattributes");let current="";try{current=await readFile(gitattributesPath,"utf8")}catch(error){if(!(error instanceof Error&&"code"in error&&isFileMissingError(error))){throw error}}const block=[PM_GITATTRIBUTES_V2_START,...patterns,PM_GITATTRIBUTES_V2_END].join("\n");const withoutManagedBlock=removeManagedBlock(removeManagedBlock(current,PM_GITATTRIBUTES_V2_START,PM_GITATTRIBUTES_V2_END),PM_GITATTRIBUTES_START,PM_GITATTRIBUTES_END);const prefix=withoutManagedBlock.trimEnd();const next=`${prefix.length>0?`${prefix}
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="dea4137f-adbd-5dca-bfc7-b56c99c7aa79")}catch(e){}}();
-import { assertInitializedTracker } from "../environment/tracker-preflight.js";
-import { isFileMissingError } from "../../core/fs/fs-utils.js";
-import { readFile, realpath, writeFile } from "node:fs/promises";
-import { execFile } from "node:child_process";
-import path from "node:path";
-import { promisify } from "node:util";
-import { pathExists } from "../../core/fs/fs-utils.js";
-import { resolveItemTypeRegistry } from "../../core/item/type-registry.js";
-import { acquireLock } from "../../core/lock/lock.js";
-import { resolvePmPackageRootFromModule } from "../../core/packages/root.js";
-import { EXIT_CODE } from "../../core/shared/constants.js";
-import { PmCliError } from "../../core/shared/errors.js";
-import { resolveAuthor } from "../../core/shared/author.js";
-import { nowIso } from "../../core/shared/time.js";
-import { resolvePmRoot } from "../../core/store/paths.js";
-import { readSettings, resolveGovernanceKnobs, } from "../../core/store/settings.js";
-import { isPathOutsideRoot } from "../workspace.js";
-import { resolveSourceContextWritePolicy } from "../environment/source-context.js";
-const execFileAsync = promisify(execFile);
-/** Opening marker for the pm-owned merge-driver `.gitattributes` block. */
-export const PM_GITATTRIBUTES_START = "# pm-cli:merge-drivers:start";
-/** Closing marker for the pm-owned merge-driver `.gitattributes` block. */
-export const PM_GITATTRIBUTES_END = "# pm-cli:merge-drivers:end";
-/** Opening marker for the versioned fence that older releases leave untouched. */
-export const PM_GITATTRIBUTES_V2_START = "# pm-cli:merge-drivers:v2:start";
-/** Closing marker for the versioned fence that older releases leave untouched. */
-export const PM_GITATTRIBUTES_V2_END = "# pm-cli:merge-drivers:v2:end";
-const MERGE_FENCE_LOCK_ID = "merge-fence";
-/**
- * Quote one argument for the shell used by Git merge-driver configuration.
- *
- * Git executes configured driver strings through a shell even when the
- * original `pm merge install` process was launched directly. Single-quoting
- * both the Node executable and bundled CLI path prevents spaces or shell
- * metacharacters in either installation path from changing the command.
- */
-function quoteMergeDriverArgument(value) {
-    return `'${value.replaceAll("'", `'"'"'`)}'`;
-}
-/** Resolve the installed CLI without relying on the collaborator's PATH. */
-function resolveMergeDriverCliCommand() {
-    const packageRoot = resolvePmPackageRootFromModule(import.meta.url, [
-        "../../..",
-    ]);
-    return `${quoteMergeDriverArgument(process.execPath)} ${quoteMergeDriverArgument(path.join(packageRoot, "dist", "cli.js"))}`;
-}
-const MERGE_DRIVER_DEFINITIONS = [
-    {
-        key: "pm-item-toon",
-        name: "pm field-aware TOON item document merge",
-        artifact: "item",
-        itemPath: "%P",
-    },
-    {
-        key: "pm-item-markdown",
-        name: "pm field-aware JSON-markdown item document merge",
-        artifact: "item",
-        itemPath: "%P",
-    },
-    {
-        key: "pm-history",
-        name: "pm append-only history stream merge",
-        artifact: "history",
-        itemPath: undefined,
-    },
-    {
-        key: "pm-relationship",
-        name: "pm append-only relationship event store merge",
-        artifact: "relationship",
-        itemPath: undefined,
-    },
-    {
-        key: "pm-json",
-        name: "pm key-level JSON config merge",
-        artifact: "json",
-        itemPath: undefined,
-    },
-];
-/** Resolve explicit, inherited-source, and current-workspace precedence without I/O. */
-export function resolveMergeInstallContext(options) {
-    const explicitPath = options.explicitPath?.trim();
-    const sourceWorkspaceRoot = options.environment.PM_SOURCE_WORKSPACE_ROOT?.trim();
-    const sourcePmRoot = options.environment.PM_SOURCE_PM_PATH?.trim();
-    const sourcePolicy = resolveSourceContextWritePolicy(options.environment);
-    const sourceCoordinatesAvailable = Boolean(sourceWorkspaceRoot && sourcePmRoot);
-    const sourceContextSelected = explicitPath === undefined &&
-        sourceCoordinatesAvailable &&
-        (options.dryRun || sourcePolicy.source_writes_allowed);
-    if (explicitPath !== undefined) {
-        const pmRoot = resolvePmRoot(options.cwd, explicitPath);
-        return {
-            pm_root: pmRoot,
-            workspace_start: pmRoot,
-            source_coordinates_available: sourceCoordinatesAvailable,
-            source_context_selected: false,
-            source_policy: sourcePolicy,
-        };
-    }
-    if (sourceContextSelected) {
-        return {
-            pm_root: path.resolve(sourcePmRoot),
-            workspace_start: path.resolve(sourceWorkspaceRoot),
-            source_coordinates_available: true,
-            source_context_selected: true,
-            source_policy: sourcePolicy,
-        };
-    }
-    return {
-        pm_root: sourceCoordinatesAvailable
-            ? resolvePmRoot(options.cwd, ".agents/pm")
-            : resolvePmRoot(options.cwd),
-        workspace_start: options.cwd,
-        source_coordinates_available: sourceCoordinatesAvailable,
-        source_context_selected: false,
-        source_policy: sourcePolicy,
-    };
-}
-/** Resolve the enclosing Git worktree root or return null outside Git. */
-export async function findGitWorkspaceRoot(cwd) {
-    try {
-        const { stdout } = await execFileAsync("git", ["rev-parse", "--show-toplevel"], { cwd, encoding: "utf8", windowsHide: true, timeout: 10_000 });
-        return await realpath(stdout.trim());
-    }
-    catch {
-        return null;
-    }
-}
-async function resolveGitWorkspaceRoot(cwd) {
-    const workspaceRoot = await findGitWorkspaceRoot(cwd);
-    if (workspaceRoot === null) {
-        throw new PmCliError("pm merge install requires a git repository (merge drivers are git configuration).", EXIT_CODE.USAGE);
-    }
-    return workspaceRoot;
-}
-function toPosixRelative(fromPath, toPath) {
-    return path.relative(fromPath, toPath).replaceAll("\\", "/");
-}
-/** Encode one Git attributes pattern with C-style quoting so whitespace, backslashes, and quotation marks remain part of the repository path instead of being parsed as attribute separators. */
-function quoteGitAttributePattern(value) {
-    return `"${value.replaceAll("\\", "\\\\").replaceAll('"', '\\"')}"`;
-}
-function readSingleQuotedArgument(command, offset) {
-    if (command[offset] !== "'") {
-        return null;
-    }
-    let value = "";
-    for (let index = offset + 1; index < command.length; index += 1) {
-        if (command.startsWith(`'"'"'`, index)) {
-            value += "'";
-            index += 4;
-            continue;
-        }
-        if (command[index] === "'") {
-            return { value, nextOffset: index + 1 };
-        }
-        value += command[index];
-    }
-    return null;
-}
-async function isPortableMergeDriverCommand(configured, expectedSuffix) {
-    const nodeArgument = readSingleQuotedArgument(configured, 0);
-    if (nodeArgument === null || configured[nodeArgument.nextOffset] !== " ") {
-        return false;
-    }
-    const cliArgument = readSingleQuotedArgument(configured, nodeArgument.nextOffset + 1);
-    if (cliArgument === null ||
-        configured.slice(cliArgument.nextOffset) !== expectedSuffix ||
-        !/^node(?:\.exe)?$/iu.test(path.basename(nodeArgument.value)) ||
-        path.basename(cliArgument.value) !== "cli.js" ||
-        path.basename(path.dirname(cliArgument.value)) !== "dist") {
-        return false;
-    }
-    if (!(await pathExists(nodeArgument.value)) ||
-        !(await pathExists(cliArgument.value))) {
-        return false;
-    }
-    try {
-        const packageRoot = path.dirname(path.dirname(cliArgument.value));
-        const manifest = JSON.parse(await readFile(path.join(packageRoot, "package.json"), "utf8"));
-        const pmBin = typeof manifest.bin === "object" &&
-            manifest.bin !== null &&
-            "pm" in manifest.bin
-            ? manifest.bin.pm
-            : undefined;
-        return (manifest.name === "@unbrained/pm-cli" &&
-            (manifest.bin === "dist/cli.js" || pmBin === "dist/cli.js"));
-    }
-    catch {
-        return false;
-    }
-}
-/**
- * Build the complete fenced `.gitattributes` pattern list for a tracker rooted
- * at `trackerRelativeRoot` (git-root-relative POSIX path, empty when the
- * tracker root IS the git root). This is the single coverage contract shared
- * by `pm merge install` (which writes the fence) and the validate
- * merge-fence-drift detection (which compares the committed fence against the
- * active schema's type folders), so schema-added custom types can never
- * silently diverge from the installed fence without a warning.
- */
-export function buildMergeAttributePatterns(trackerRelativeRoot, typeFolders) {
-    const prefix = trackerRelativeRoot.length > 0 ? `${trackerRelativeRoot}/` : "";
-    // Package-owned types can register folders at runtime, and a branch can
-    // contain their items before the receiving branch has installed the package.
-    // Fence every tracker TOON/Markdown item first; the explicit per-type rows
-    // below remain useful diagnostics for registry drift and override nothing.
-    const patterns = [
-        `${quoteGitAttributePattern(`${prefix}**/*.toon`)} merge=pm-item-toon`,
-        `${quoteGitAttributePattern(`${prefix}**/*.md`)} merge=pm-item-markdown`,
-    ];
-    for (const folder of typeFolders) {
-        patterns.push(`${quoteGitAttributePattern(`${prefix}${folder}/*.toon`)} merge=pm-item-toon`);
-        patterns.push(`${quoteGitAttributePattern(`${prefix}${folder}/*.md`)} merge=pm-item-markdown`);
-    }
-    // RelationshipEventStore deliberately accepts a caller-chosen relativePath
-    // anywhere below the tracker root. Cover all tracker JSONL first, then let
-    // the more-specific history rule below override it. This keeps custom event
-    // stores protected without guessing package-owned paths.
-    patterns.push(`${quoteGitAttributePattern(`${prefix}**/*.jsonl`)} merge=pm-relationship`);
-    patterns.push(`${quoteGitAttributePattern(`${prefix}history/*.jsonl`)} merge=pm-history`);
-    patterns.push(`${quoteGitAttributePattern(`${prefix}settings.json`)} merge=pm-json`);
-    patterns.push(`${quoteGitAttributePattern(`${prefix}**/*.json`)} merge=pm-json`);
-    // Extensions are package assets, not tracker item streams. The broad
-    // fallback patterns above intentionally protect unknown contributed item
-    // folders, so this last-match escape hatch must explicitly unset merge for
-    // every file beneath the reserved extension package root.
-    patterns.push(`${quoteGitAttributePattern(`${prefix}extensions/**`)} -merge`);
-    // The managed extension inventory is tracker state rather than package
-    // content, so restore its structured JSON driver after the asset exclusion.
-    patterns.push(`${quoteGitAttributePattern(`${prefix}extensions/.managed-extensions.json`)} merge=pm-json`);
-    return patterns;
-}
-function removeManagedBlock(content, startMarker, endMarker) {
-    const start = content.indexOf(startMarker);
-    const end = content.indexOf(endMarker);
-    return start >= 0 && end > start
-        ? `${content.slice(0, start)}${content.slice(end + endMarker.length)}`
-        : content.replace(startMarker, "").replace(endMarker, "");
-}
-async function reconcileGitattributesBlock(workspaceRoot, patterns, dryRun) {
-    const gitattributesPath = path.join(workspaceRoot, ".gitattributes");
-    let current = "";
-    try {
-        current = await readFile(gitattributesPath, "utf8");
-    }
-    catch (error) {
-        if (!(error instanceof Error && "code" in error && isFileMissingError(error))) {
-            throw error;
-        }
-    }
-    const block = [
-        PM_GITATTRIBUTES_V2_START,
-        ...patterns,
-        PM_GITATTRIBUTES_V2_END,
-    ].join("\n");
-    const withoutManagedBlock = removeManagedBlock(removeManagedBlock(current, PM_GITATTRIBUTES_V2_START, PM_GITATTRIBUTES_V2_END), PM_GITATTRIBUTES_START, PM_GITATTRIBUTES_END);
-    const prefix = withoutManagedBlock.trimEnd();
-    const next = `${prefix.length > 0 ? `${prefix}\n\n` : ""}${block}\n`;
-    if (next === current) {
-        return { path: gitattributesPath, changed: false };
-    }
-    if (!dryRun) {
-        await writeFile(gitattributesPath, next, "utf8");
-    }
-    return { path: gitattributesPath, changed: true };
-}
-/** Resolve merge-fence folders from built-ins plus persisted project schema only. */
-export function resolveProjectMergeTypeFolders(settings) {
-    const registry = resolveItemTypeRegistry(settings, null);
-    return [...new Set(Object.values(registry.type_to_folder))].sort((left, right) => left.localeCompare(right));
-}
-/**
- * Audit the committed `.gitattributes` merge fence against the coverage the
- * active schema requires, without touching git configuration. The fence file
- * is discovered by walking up from the tracker root (bounded), so the audit
- * stays filesystem-only and safe to run inside `pm validate`. A `drift`
- * result means items of some type folder (or a tracker JSONL store) would
- * merge under git's default text driver despite the fence being installed.
- */
-export async function auditMergeAttributeFence(pmRoot, typeFolders) {
-    const resolvedRoot = path.resolve(pmRoot);
-    let fenceDirectory = null;
-    let fenceContent = "";
-    let directory = resolvedRoot;
-    for (let depth = 0; depth < 8; depth += 1) {
-        const candidate = path.join(directory, ".gitattributes");
-        try {
-            const raw = await readFile(candidate, "utf8");
-            if (raw.includes(PM_GITATTRIBUTES_V2_START) ||
-                raw.includes(PM_GITATTRIBUTES_START)) {
-                fenceDirectory = directory;
-                fenceContent = raw;
-                break;
-            }
-        }
-        catch {
-            // No .gitattributes at this level; keep walking up.
-        }
-        const parent = path.dirname(directory);
-        if (parent === directory) {
-            break;
-        }
-        directory = parent;
-    }
-    if (fenceDirectory === null) {
-        return {
-            status: "not_installed",
-            missing_patterns: [],
-            stale_patterns: [],
-            schema_scope: "project",
-        };
-    }
-    const fencePath = path.join(fenceDirectory, ".gitattributes");
-    const usesV2 = fenceContent.includes(PM_GITATTRIBUTES_V2_START);
-    const startMarker = usesV2
-        ? PM_GITATTRIBUTES_V2_START
-        : PM_GITATTRIBUTES_START;
-    const endMarker = usesV2 ? PM_GITATTRIBUTES_V2_END : PM_GITATTRIBUTES_END;
-    const start = fenceContent.indexOf(startMarker);
-    const end = fenceContent.indexOf(endMarker);
-    const committed = end > start
-        ? fenceContent
-            .slice(start + startMarker.length, end)
-            .split("\n")
-            .map((line) => line.trim())
-            .filter((line) => line.length > 0)
-        : [];
-    const expected = buildMergeAttributePatterns(toPosixRelative(fenceDirectory, resolvedRoot), typeFolders);
-    const committedSet = new Set(committed);
-    const expectedSet = new Set(expected);
-    const missing = expected.filter((line) => !committedSet.has(line));
-    const stale = committed.filter((line) => !expectedSet.has(line));
-    return {
-        status: missing.length > 0 || stale.length > 0 ? "drift" : "ok",
-        path: fencePath,
-        missing_patterns: missing,
-        stale_patterns: stale,
-        schema_scope: "project",
-    };
-}
-/** Audit the clone-local Git driver commands without executing a merge. */
-export async function auditMergeDriverConfiguration(workspaceRoot) {
-    const cliCommand = resolveMergeDriverCliCommand();
-    const missingKeys = [];
-    const driftedKeys = [];
-    for (const definition of MERGE_DRIVER_DEFINITIONS) {
-        const key = `merge.${definition.key}.driver`;
-        const expectedSuffix = ` merge driver ${definition.artifact} "%O" "%A" "%B"${definition.itemPath === undefined ? "" : ` --item-path ${definition.itemPath}`}`;
-        const expected = `${cliCommand}${expectedSuffix}`;
-        try {
-            const { stdout } = await execFileAsync("git", ["config", "--local", "--get", key], {
-                cwd: workspaceRoot,
-                encoding: "utf8",
-                windowsHide: true,
-                timeout: 10_000,
-            });
-            const configured = stdout.trim();
-            if (configured !== expected &&
-                !(await isPortableMergeDriverCommand(configured, expectedSuffix))) {
-                driftedKeys.push(key);
-            }
-        }
-        catch {
-            missingKeys.push(key);
-        }
-    }
-    return {
-        status: missingKeys.length > 0
-            ? "missing"
-            : driftedKeys.length > 0
-                ? "drift"
-                : "ok",
-        missing_keys: missingKeys,
-        drifted_keys: driftedKeys,
-    };
-}
-/**
- * Refresh the fenced `.gitattributes` merge-driver block after a schema type
- * mutation, but only when `pm merge install` already ran (the fence markers
- * are present). Without this, custom item types registered after install
- * would write items into folders with no merge attribute — silently
- * reintroducing the whole-file conflict class for exactly those items. Repos
- * that never installed the fence get a `not_installed` outcome so callers can
- * surface an actionable hint instead of mutating git configuration nobody
- * asked for.
- */
-export async function refreshMergeAttributeFenceIfInstalled(pmRoot) {
-    let workspaceRoot;
-    try {
-        workspaceRoot = await resolveGitWorkspaceRoot(path.resolve(pmRoot));
-    }
-    catch {
-        return { status: "no_git" };
-    }
-    const trackerRelativeRoot = toPosixRelative(workspaceRoot, path.resolve(pmRoot));
-    const lockSettings = await readSettings(pmRoot);
-    const owner = resolveAuthor(undefined, lockSettings.author_default);
-    const releaseLock = await acquireLock(pmRoot, MERGE_FENCE_LOCK_ID, lockSettings.locks.ttl_seconds, owner, false, resolveGovernanceKnobs(lockSettings).force_required_for_stale_lock, lockSettings.locks.wait_ms);
-    try {
-        const gitattributesPath = path.join(workspaceRoot, ".gitattributes");
-        let current;
-        try {
-            current = await readFile(gitattributesPath, "utf8");
-        }
-        catch (error) {
-            if (error instanceof Error &&
-                "code" in error &&
-                isFileMissingError(error)) {
-                return { status: "not_installed", path: gitattributesPath };
-            }
-            throw error;
-        }
-        if (!current.includes(PM_GITATTRIBUTES_V2_START) &&
-            !current.includes(PM_GITATTRIBUTES_START)) {
-            return { status: "not_installed", path: gitattributesPath };
-        }
-        // Re-read after acquiring the dedicated fence lock so every concurrent
-        // refresher computes from the latest committed type registry.
-        const settings = await readSettings(pmRoot);
-        const typeFolders = resolveProjectMergeTypeFolders(settings);
-        const outcome = await reconcileGitattributesBlock(workspaceRoot, buildMergeAttributePatterns(trackerRelativeRoot, typeFolders), false);
-        return {
-            status: outcome.changed ? "refreshed" : "unchanged",
-            path: outcome.path,
-        };
-    }
-    finally {
-        await releaseLock();
-    }
-}
-/**
- * Install (or preview) the repository merge configuration for tracker data:
- * writes the fenced merge-driver block into `.gitattributes` (committed and
- * shared with every branch) and defines the `merge.pm-*.driver` entries in the
- * repository-local git config (per-clone, so every collaborator runs this once
- * per checkout). Requires an initialized tracker and a git repository.
- */
-export async function runMergeInstall(options, global) {
-    const context = resolveMergeInstallContext({
-        cwd: process.cwd(),
-        explicitPath: global.path,
-        dryRun: options.dryRun === true,
-        environment: process.env,
-    });
-    const pmRoot = context.pm_root;
-    await assertInitializedTracker(pmRoot);
-    const workspaceRoot = await resolveGitWorkspaceRoot(context.workspace_start);
-    return installMergeFence({
-        pmRoot,
-        workspaceRoot,
-        dryRun: options.dryRun === true,
-    });
-}
-/**
- * Install merge safety for an initialized tracker without depending on the
- * caller's cwd or global CLI path resolution. This is the SDK primitive used
- * by fresh init and by the `pm merge install` adapter.
- */
-export async function installMergeFence(options) {
-    const pmRoot = path.resolve(options.pmRoot);
-    const workspaceRoot = path.resolve(options.workspaceRoot);
-    const dryRun = options.dryRun === true;
-    // Git for Windows may report a worktree through an 8.3 short path while
-    // Node resolves the tracker through its long path. Compare filesystem
-    // identities rather than those two equivalent spellings so a valid
-    // in-repository tracker is not rejected as external.
-    let canonicalPmRoot;
-    let canonicalWorkspaceRoot;
-    try {
-        [canonicalPmRoot, canonicalWorkspaceRoot] = await Promise.all([
-            realpath(pmRoot),
-            realpath(workspaceRoot),
-        ]);
-    }
-    catch (error) {
-        throw new PmCliError(`Cannot resolve tracker root ${pmRoot} or workspace root ${workspaceRoot}: ${String(error)}`, EXIT_CODE.NOT_FOUND, {
-            code: "merge_root_not_found",
-            nextSteps: [
-                "Initialize the tracker and ensure both paths are accessible.",
-                'Retry "pm merge install" from the repository workspace.',
-            ],
-        });
-    }
-    const trackerRelativeRoot = toPosixRelative(canonicalWorkspaceRoot, canonicalPmRoot);
-    if (isPathOutsideRoot(trackerRelativeRoot)) {
-        throw new PmCliError(`Tracker root ${pmRoot} is outside the git repository ${workspaceRoot}; there is nothing to configure for this repository.`, EXIT_CODE.USAGE);
-    }
-    const settings = await readSettings(canonicalPmRoot);
-    const typeFolders = resolveProjectMergeTypeFolders(settings);
-    const patterns = buildMergeAttributePatterns(trackerRelativeRoot, typeFolders);
-    const gitConfigEntries = [];
-    const cliCommand = resolveMergeDriverCliCommand();
-    for (const definition of MERGE_DRIVER_DEFINITIONS) {
-        gitConfigEntries.push({
-            key: `merge.${definition.key}.name`,
-            value: definition.name,
-        });
-        gitConfigEntries.push({
-            key: `merge.${definition.key}.driver`,
-            value: `${cliCommand} merge driver ${definition.artifact} "%O" "%A" "%B"${definition.itemPath === undefined ? "" : ` --item-path ${definition.itemPath}`}`,
-        });
-    }
-    if (!dryRun) {
-        try {
-            for (const entry of gitConfigEntries) {
-                await execFileAsync("git", ["config", "--local", entry.key, entry.value], {
-                    cwd: canonicalWorkspaceRoot,
-                    encoding: "utf8",
-                    windowsHide: true,
-                    timeout: 10_000,
-                });
-            }
-        }
-        catch {
-            throw new PmCliError(`Cannot install repository-local merge drivers in ${canonicalWorkspaceRoot}. Ensure the repository Git config is writable and no other Git process holds its lock, then retry.`, EXIT_CODE.DEPENDENCY_FAILED, {
-                code: "merge_git_config_unwritable",
-                why: "pm merge install must persist clone-local driver commands before publishing their shared .gitattributes mappings.",
-                nextSteps: [
-                    "Make the repository Git config writable or wait for the process holding its lock to finish.",
-                    'Retry "pm merge install"; the operation is idempotent.',
-                    'Use "pm merge install --dry-run --json" when the workspace is intentionally read-only.',
-                ],
-            });
-        }
-    }
-    // Publish the shared attribute fence only after the clone-local commands are
-    // usable. A read-only or locked Git config therefore cannot leave a newly
-    // activated fence pointing at drivers that this clone has not installed.
-    const gitattributes = await reconcileGitattributesBlock(canonicalWorkspaceRoot, patterns, dryRun);
-    return {
-        ok: true,
-        dry_run: dryRun,
-        workspace_root: canonicalWorkspaceRoot,
-        pm_root: canonicalPmRoot,
-        gitattributes: {
-            path: gitattributes.path,
-            changed: gitattributes.changed,
-            patterns,
-            schema_scope: "project",
-        },
-        git_config: gitConfigEntries,
-        guidance: [
-            "Commit .gitattributes so every branch and collaborator shares the merge mapping.",
-            'git config is per-clone: each collaborator (and each fresh worktree/clone) runs "pm merge install" once.',
-            'After merging branches, run "pm merge reconcile --dry-run" to inspect the complete receipt and history repair, then apply "pm merge reconcile"; use --force only after explicitly accepting any discarded values.',
-            "Custom item types registered later refresh this fence automatically (pm schema add-type/remove-type); rerun pm merge install only after out-of-band type-folder edits.",
-        ],
-        generated_at: nowIso(),
-    };
-}
+`:""}${block}
+`;if(next===current){return{path:gitattributesPath,changed:false}}if(!dryRun){await writeFile(gitattributesPath,next,"utf8")}return{path:gitattributesPath,changed:true}}function resolveProjectMergeTypeFolders(settings){const registry=resolveItemTypeRegistry(settings,null);return[...new Set(Object.values(registry.type_to_folder))].sort((left,right)=>left.localeCompare(right))}async function auditMergeAttributeFence(pmRoot,typeFolders){const resolvedRoot=path.resolve(pmRoot);let fenceDirectory=null;let fenceContent="";let directory=resolvedRoot;for(let depth=0;depth<8;depth+=1){const candidate=path.join(directory,".gitattributes");try{const raw=await readFile(candidate,"utf8");if(raw.includes(PM_GITATTRIBUTES_V2_START)||raw.includes(PM_GITATTRIBUTES_START)){fenceDirectory=directory;fenceContent=raw;break}}catch{}const parent=path.dirname(directory);if(parent===directory){break}directory=parent}if(fenceDirectory===null){return{status:"not_installed",missing_patterns:[],stale_patterns:[],schema_scope:"project"}}const fencePath=path.join(fenceDirectory,".gitattributes");const usesV2=fenceContent.includes(PM_GITATTRIBUTES_V2_START);const startMarker=usesV2?PM_GITATTRIBUTES_V2_START:PM_GITATTRIBUTES_START;const endMarker=usesV2?PM_GITATTRIBUTES_V2_END:PM_GITATTRIBUTES_END;const start=fenceContent.indexOf(startMarker);const end=fenceContent.indexOf(endMarker);const committed=end>start?fenceContent.slice(start+startMarker.length,end).split("\n").map(line=>line.trim()).filter(line=>line.length>0):[];const expected=buildMergeAttributePatterns(toPosixRelative(fenceDirectory,resolvedRoot),typeFolders);const committedSet=new Set(committed);const expectedSet=new Set(expected);const missing=expected.filter(line=>!committedSet.has(line));const stale=committed.filter(line=>!expectedSet.has(line));return{status:missing.length>0||stale.length>0?"drift":"ok",path:fencePath,missing_patterns:missing,stale_patterns:stale,schema_scope:"project"}}async function auditMergeDriverConfiguration(workspaceRoot){const cliCommand=resolveMergeDriverCliCommand();const missingKeys=[];const driftedKeys=[];for(const definition of MERGE_DRIVER_DEFINITIONS){const key=`merge.${definition.key}.driver`;const expectedSuffix=` merge driver ${definition.artifact} "%O" "%A" "%B"${definition.itemPath===void 0?"":` --item-path ${definition.itemPath}`}`;const expected=`${cliCommand}${expectedSuffix}`;try{const{stdout}=await execFileAsync("git",["config","--local","--get",key],{cwd:workspaceRoot,encoding:"utf8",windowsHide:true,timeout:1e4});const configured=stdout.trim();if(configured!==expected&&!await isPortableMergeDriverCommand(configured,expectedSuffix)){driftedKeys.push(key)}}catch{missingKeys.push(key)}}return{status:missingKeys.length>0?"missing":driftedKeys.length>0?"drift":"ok",missing_keys:missingKeys,drifted_keys:driftedKeys}}async function refreshMergeAttributeFenceIfInstalled(pmRoot){let workspaceRoot;try{workspaceRoot=await resolveGitWorkspaceRoot(path.resolve(pmRoot))}catch{return{status:"no_git"}}const trackerRelativeRoot=toPosixRelative(workspaceRoot,path.resolve(pmRoot));const lockSettings=await readSettings(pmRoot);const owner=resolveAuthor(void 0,lockSettings.author_default);const releaseLock=await acquireLock(pmRoot,MERGE_FENCE_LOCK_ID,lockSettings.locks.ttl_seconds,owner,false,resolveGovernanceKnobs(lockSettings).force_required_for_stale_lock,lockSettings.locks.wait_ms);try{const gitattributesPath=path.join(workspaceRoot,".gitattributes");let current;try{current=await readFile(gitattributesPath,"utf8")}catch(error){if(error instanceof Error&&"code"in error&&isFileMissingError(error)){return{status:"not_installed",path:gitattributesPath}}throw error}if(!current.includes(PM_GITATTRIBUTES_V2_START)&&!current.includes(PM_GITATTRIBUTES_START)){return{status:"not_installed",path:gitattributesPath}}const settings=await readSettings(pmRoot);const typeFolders=resolveProjectMergeTypeFolders(settings);const outcome=await reconcileGitattributesBlock(workspaceRoot,buildMergeAttributePatterns(trackerRelativeRoot,typeFolders),false);return{status:outcome.changed?"refreshed":"unchanged",path:outcome.path}}finally{await releaseLock()}}async function runMergeInstall(options,global2){const context=resolveMergeInstallContext({cwd:process.cwd(),explicitPath:global2.path,dryRun:options.dryRun===true,environment:process.env});const pmRoot=context.pm_root;await assertInitializedTracker(pmRoot);const workspaceRoot=await resolveGitWorkspaceRoot(context.workspace_start);return installMergeFence({pmRoot,workspaceRoot,dryRun:options.dryRun===true})}async function installMergeFence(options){const pmRoot=path.resolve(options.pmRoot);const workspaceRoot=path.resolve(options.workspaceRoot);const dryRun=options.dryRun===true;let canonicalPmRoot;let canonicalWorkspaceRoot;try{[canonicalPmRoot,canonicalWorkspaceRoot]=await Promise.all([realpath(pmRoot),realpath(workspaceRoot)])}catch(error){throw new PmCliError(`Cannot resolve tracker root ${pmRoot} or workspace root ${workspaceRoot}: ${String(error)}`,EXIT_CODE.NOT_FOUND,{code:"merge_root_not_found",nextSteps:["Initialize the tracker and ensure both paths are accessible.",'Retry "pm merge install" from the repository workspace.']})}const trackerRelativeRoot=toPosixRelative(canonicalWorkspaceRoot,canonicalPmRoot);if(isPathOutsideRoot(trackerRelativeRoot)){throw new PmCliError(`Tracker root ${pmRoot} is outside the git repository ${workspaceRoot}; there is nothing to configure for this repository.`,EXIT_CODE.USAGE)}const settings=await readSettings(canonicalPmRoot);const typeFolders=resolveProjectMergeTypeFolders(settings);const patterns=buildMergeAttributePatterns(trackerRelativeRoot,typeFolders);const gitConfigEntries=[];const cliCommand=resolveMergeDriverCliCommand();for(const definition of MERGE_DRIVER_DEFINITIONS){gitConfigEntries.push({key:`merge.${definition.key}.name`,value:definition.name});gitConfigEntries.push({key:`merge.${definition.key}.driver`,value:`${cliCommand} merge driver ${definition.artifact} "%O" "%A" "%B"${definition.itemPath===void 0?"":` --item-path ${definition.itemPath}`}`})}if(!dryRun){try{for(const entry of gitConfigEntries){await execFileAsync("git",["config","--local",entry.key,entry.value],{cwd:canonicalWorkspaceRoot,encoding:"utf8",windowsHide:true,timeout:1e4})}}catch{throw new PmCliError(`Cannot install repository-local merge drivers in ${canonicalWorkspaceRoot}. Ensure the repository Git config is writable and no other Git process holds its lock, then retry.`,EXIT_CODE.DEPENDENCY_FAILED,{code:"merge_git_config_unwritable",why:"pm merge install must persist clone-local driver commands before publishing their shared .gitattributes mappings.",nextSteps:["Make the repository Git config writable or wait for the process holding its lock to finish.",'Retry "pm merge install"; the operation is idempotent.','Use "pm merge install --dry-run --json" when the workspace is intentionally read-only.']})}}const gitattributes=await reconcileGitattributesBlock(canonicalWorkspaceRoot,patterns,dryRun);return{ok:true,dry_run:dryRun,workspace_root:canonicalWorkspaceRoot,pm_root:canonicalPmRoot,gitattributes:{path:gitattributes.path,changed:gitattributes.changed,patterns,schema_scope:"project"},git_config:gitConfigEntries,guidance:["Commit .gitattributes so every branch and collaborator shares the merge mapping.",'git config is per-clone: each collaborator (and each fresh worktree/clone) runs "pm merge install" once.','After merging branches, run "pm merge reconcile --dry-run" to inspect the complete receipt and history repair, then apply "pm merge reconcile"; use --force only after explicitly accepting any discarded values.',"Custom item types registered later refresh this fence automatically (pm schema add-type/remove-type); rerun pm merge install only after out-of-band type-folder edits."],generated_at:nowIso()}}export{PM_GITATTRIBUTES_END,PM_GITATTRIBUTES_START,PM_GITATTRIBUTES_V2_END,PM_GITATTRIBUTES_V2_START,auditMergeAttributeFence,auditMergeDriverConfiguration,buildMergeAttributePatterns,findGitWorkspaceRoot,installMergeFence,refreshMergeAttributeFenceIfInstalled,resolveMergeInstallContext,resolveProjectMergeTypeFolders,runMergeInstall};
 //# sourceMappingURL=install.js.map
-//# debugId=dea4137f-adbd-5dca-bfc7-b56c99c7aa79

package/dist/sdk/merge/receipt-file-boundary.js

@@ -1,47 +1,2 @@
-/**
- * @module sdk/merge/receipt-file-boundary
- *
- * Reads untrusted receipt candidates through a bounded, no-follow file
- * boundary whose race and short-read behavior can be exercised directly.
- */
-
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="6ece0e15-aff5-5e2d-b18a-16ffaa0fe2ea")}catch(e){}}();
-import { constants as fsConstants } from "node:fs";
-import { lstat, open } from "node:fs/promises";
-const NODE_RECEIPT_FILE_BOUNDARY = { lstat, open };
-/** Resolve the platform no-follow flag, falling back only where Node omits it. */
-export function resolveReceiptNoFollowFlag(constants) {
-    return constants.O_NOFOLLOW ?? 0;
-}
-/** Read one regular file only when its opened identity remains bounded and stable. */
-export async function readBoundedRegularFile(receiptPath, maximumBytes, boundary = NODE_RECEIPT_FILE_BOUNDARY) {
-    const pathStats = await boundary.lstat(receiptPath);
-    if (pathStats.isSymbolicLink() ||
-        !pathStats.isFile() ||
-        pathStats.size > maximumBytes) {
-        return null;
-    }
-    const handle = await boundary.open(receiptPath, fsConstants.O_RDONLY | resolveReceiptNoFollowFlag(fsConstants));
-    try {
-        const openedStats = await handle.stat();
-        if (!openedStats.isFile() || openedStats.size > maximumBytes)
-            return null;
-        const buffer = Buffer.alloc(openedStats.size);
-        let offset = 0;
-        while (offset < buffer.length) {
-            const { bytesRead } = await handle.read(buffer, offset, buffer.length - offset, offset);
-            if (bytesRead === 0)
-                break;
-            offset += bytesRead;
-        }
-        const finalStats = await handle.stat();
-        return finalStats.size === openedStats.size && offset === openedStats.size
-            ? buffer.toString("utf8", 0, offset)
-            : null;
-    }
-    finally {
-        await handle.close();
-    }
-}
+!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="b8cf81eb-6afd-5d5a-8a4d-b5b5fbd51ace")}catch(e2){}})();import{constants as fsConstants}from"node:fs";import{lstat,open}from"node:fs/promises";const NODE_RECEIPT_FILE_BOUNDARY={lstat,open};function resolveReceiptNoFollowFlag(constants){return constants.O_NOFOLLOW??0}async function readBoundedRegularFile(receiptPath,maximumBytes,boundary=NODE_RECEIPT_FILE_BOUNDARY){const pathStats=await boundary.lstat(receiptPath);if(pathStats.isSymbolicLink()||!pathStats.isFile()||pathStats.size>maximumBytes){return null}const handle=await boundary.open(receiptPath,fsConstants.O_RDONLY|resolveReceiptNoFollowFlag(fsConstants));try{const openedStats=await handle.stat();if(!openedStats.isFile()||openedStats.size>maximumBytes)return null;const buffer=Buffer.alloc(openedStats.size);let offset=0;while(offset<buffer.length){const{bytesRead}=await handle.read(buffer,offset,buffer.length-offset,offset);if(bytesRead===0)break;offset+=bytesRead}const finalStats=await handle.stat();return finalStats.size===openedStats.size&&offset===openedStats.size?buffer.toString("utf8",0,offset):null}finally{await handle.close()}}export{readBoundedRegularFile,resolveReceiptNoFollowFlag};
 //# sourceMappingURL=receipt-file-boundary.js.map
-//# debugId=6ece0e15-aff5-5e2d-b18a-16ffaa0fe2ea