@unbrained/pm-cli 2026.9.7 → 2026.9.9

package/dist/core/history/history.js

@@ -1,618 +1,3 @@
-/**
- * @module core/history/history
- *
- * Implements append-only history and replay behavior for History.
- */
-
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="a5449fec-c5b4-5cf4-9a7f-b7c5dc7161c2")}catch(e){}}();
-import jsonPatch from "fast-json-patch";
-import fs from "node:fs/promises";
-import path from "node:path";
-import { EXIT_CODE, ITEM_METADATA_KEY_ORDER } from "../shared/constants.js";
-import { runActiveServiceOverride } from "../extensions/index.js";
-import { appendLineAtomic } from "../fs/fs-utils.js";
-import { canonicalDocument } from "../item/item-format.js";
-import { toItemRecord } from "../item/item-record.js";
-import { orderObject, sha256Hex, stableStringify, } from "../shared/serialization.js";
-import { isMillisecondPrecisionRfc3339DateTime, nowIso, } from "../shared/time.js";
-import { diagnoseAgentIdentity, resolveHistoryAgentIdentity, resolveHistoryAuthorSource, } from "../shared/author.js";
-import { appendHistoryEntryWithEventIndex, removeHistoryEventIndexForHistoryPath, } from "./event-index.js";
-import { classifyHistoryEvent } from "./event-classification.js";
-import { invalidateHistoryDriftCacheForPath } from "./drift-cache.js";
-import { PmCliError } from "../shared/errors.js";
-const EMPTY_LEGACY_HASH_DOCUMENT = {
-    front_matter: {},
-    body: "",
-};
-/** Hash epoch for the current canonical item surface written into immutable history. */
-export const CURRENT_HISTORY_ITEM_HASH_VERSION = 3;
-/** Hash epochs understood by this runtime. */
-export const SUPPORTED_HISTORY_ITEM_HASH_VERSIONS = [1, 2, 3];
-/** Record-integrity epoch written beside new immutable history events. */
-export const CURRENT_HISTORY_RECORD_HASH_VERSION = 1;
-/** Record-integrity epochs understood by this runtime. */
-export const SUPPORTED_HISTORY_RECORD_HASH_VERSIONS = [1];
-/** Canonicalize and hash every immutable record field except the hash value itself. */
-export function hashHistoryRecord(entry) {
-    return sha256Hex(stableStringify(entry));
-}
-/** Hash one patch representation without retaining its potentially sensitive values. */
-export function hashHistoryPatch(patch) {
-    return sha256Hex(stableStringify(patch));
-}
-/** Hash an ordered history prefix for compact checkpoint provenance. */
-export function hashHistoryStream(entries) {
-    return sha256Hex(stableStringify(entries));
-}
-/** Attach the current immutable-record integrity envelope to one history event. */
-export function sealHistoryRecord(entry) {
-    const sealed = {
-        ...entry,
-        record_hash_version: CURRENT_HISTORY_RECORD_HASH_VERSION,
-    };
-    const { record_hash: _recordHash, ...canonical } = sealed;
-    return { ...sealed, record_hash: hashHistoryRecord(canonical) };
-}
-/** Verify record-level attribution coverage while accepting explicit legacy item-state-only entries. */
-export function verifyHistoryRecordHash(entry) {
-    if (entry.record_hash_version === undefined &&
-        entry.record_hash === undefined) {
-        return { ok: true, coverage: "item_state_only" };
-    }
-    if (entry.record_hash_version === undefined ||
-        entry.record_hash === undefined) {
-        return { ok: false, error: "incomplete_record_hash_envelope" };
-    }
-    if (!SUPPORTED_HISTORY_RECORD_HASH_VERSIONS.includes(entry.record_hash_version)) {
-        return { ok: false, error: "unsupported_record_hash_version" };
-    }
-    const { record_hash: _recordHash, ...canonical } = entry;
-    return hashHistoryRecord(canonical) === entry.record_hash
-        ? { ok: true, coverage: "record_and_item_state" }
-        : { ok: false, error: "record_hash_mismatch" };
-}
-/** Build the retained coordinate and optional exact-record rewrite evidence. */
-function createHistoryRewriteEvidence(original, options) {
-    const evidence = {
-        before_hash: original.before_hash,
-        after_hash: original.after_hash,
-        patch_hash: hashHistoryPatch(original.patch),
-    };
-    if (original.item_hash_version !== undefined) {
-        evidence.item_hash_version = original.item_hash_version;
-    }
-    if (options.retainOriginalPatch) {
-        evidence.patch = structuredClone(original.patch);
-    }
-    if (options.retainPriorRecordHash !== false &&
-        original.record_hash_version !== undefined &&
-        original.record_hash !== undefined) {
-        evidence.record_hash_version = original.record_hash_version;
-        evidence.record_hash = original.record_hash;
-        evidence.record = structuredClone(original);
-    }
-    return evidence;
-}
-/** Reseal a maintenance rewrite and retain the anchors and patch digest it replaced. */
-export function resealHistoryRewrite(original, rewritten, options = {}) {
-    const originalRecordVerification = verifyHistoryRecordHash(original);
-    if (!originalRecordVerification.ok) {
-        throw new TypeError(originalRecordVerification.error);
-    }
-    const originalPatchHash = hashHistoryPatch(original.patch);
-    const retainsRewriteEvidence = options.retainPriorRecord === true ||
-        original.before_hash !== rewritten.before_hash ||
-        original.after_hash !== rewritten.after_hash ||
-        original.item_hash_version !== rewritten.item_hash_version ||
-        originalPatchHash !== hashHistoryPatch(rewritten.patch);
-    const sealed = sealHistoryRecord({
-        ...rewritten,
-        ...(retainsRewriteEvidence
-            ? {
-                reanchor_evidence: [
-                    ...(rewritten.reanchor_evidence ?? []),
-                    createHistoryRewriteEvidence(original, options),
-                ],
-            }
-            : {}),
-    });
-    const evidenceVerification = verifyHistoryRewriteEvidence(sealed);
-    if (!evidenceVerification.ok) {
-        throw new TypeError(evidenceVerification.error);
-    }
-    return sealed;
-}
-/** Return whether runtime data is a dense list of structurally valid patch operations. */
-function isHistoryPatch(value) {
-    if (!Array.isArray(value) || Object.keys(value).length !== value.length) {
-        return false;
-    }
-    return value.every((operation) => {
-        if (!isRecord(operation) || typeof operation.path !== "string") {
-            return false;
-        }
-        if (operation.op === "move" || operation.op === "copy") {
-            return typeof operation.from === "string";
-        }
-        if (["add", "replace", "test"].includes(operation.op)) {
-            return Object.hasOwn(operation, "value");
-        }
-        return operation.op === "remove";
-    });
-}
-/** Return whether a retained record has the minimum immutable event shape. */
-function isRetainedHistoryRecordShape(value) {
-    return (isRecord(value) &&
-        typeof value.ts === "string" &&
-        typeof value.author === "string" &&
-        typeof value.op === "string" &&
-        typeof value.before_hash === "string" &&
-        typeof value.after_hash === "string" &&
-        isHistoryPatch(value.patch));
-}
-/** Return whether optional retained record-hash fields form a complete pair. */
-function hasCompleteRetainedRecordHashEnvelope(evidence) {
-    const hasVersion = evidence.record_hash_version !== undefined;
-    const hasHash = evidence.record_hash !== undefined;
-    return hasVersion === hasHash;
-}
-/** Return whether runtime evidence has the bounded shape needed for verification. */
-function isHistoryReanchorEvidence(evidence) {
-    if (!isRecord(evidence) ||
-        !hasCompleteRetainedRecordHashEnvelope(evidence) ||
-        typeof evidence.before_hash !== "string" ||
-        typeof evidence.after_hash !== "string" ||
-        typeof evidence.patch_hash !== "string" ||
-        !/^[a-f0-9]{64}$/u.test(evidence.patch_hash) ||
-        (evidence.patch !== undefined && !isHistoryPatch(evidence.patch)) ||
-        (evidence.record_hash_version !== undefined &&
-            typeof evidence.record_hash_version !== "number") ||
-        (evidence.record_hash !== undefined &&
-            (typeof evidence.record_hash !== "string" ||
-                !/^[a-f0-9]{64}$/u.test(evidence.record_hash)))) {
-        return false;
-    }
-    return (evidence.record === undefined ||
-        isRetainedHistoryRecordShape(evidence.record));
-}
-/** Return whether a retained exact record agrees with its summary coordinates. */
-function matchesRetainedHistoryRecord(evidence) {
-    const record = evidence.record;
-    return (record !== undefined &&
-        record.before_hash === evidence.before_hash &&
-        record.after_hash === evidence.after_hash &&
-        record.item_hash_version === evidence.item_hash_version &&
-        record.record_hash_version === evidence.record_hash_version &&
-        record.record_hash === evidence.record_hash &&
-        hashHistoryPatch(record.patch) === evidence.patch_hash);
-}
-/** Reconstruct one prior record represented by retained rewrite evidence. */
-function reconstructPriorHistoryRecord(current, evidence, priorEvidence) {
-    if (evidence.patch &&
-        hashHistoryPatch(evidence.patch) !== evidence.patch_hash) {
-        return { kind: "patch_hash_mismatch" };
-    }
-    if (evidence.record) {
-        if (!matchesRetainedHistoryRecord(evidence)) {
-            return { kind: "record_hash_mismatch" };
-        }
-        return { kind: "record", entry: evidence.record };
-    }
-    const priorPatch = evidence.patch ?? current.patch;
-    if (hashHistoryPatch(priorPatch) !== evidence.patch_hash) {
-        return { kind: "digest_only" };
-    }
-    const priorRecord = {
-        ...current,
-        before_hash: evidence.before_hash,
-        after_hash: evidence.after_hash,
-        patch: priorPatch,
-        ...(evidence.item_hash_version === undefined
-            ? {}
-            : { item_hash_version: evidence.item_hash_version }),
-        ...(evidence.record_hash_version === undefined
-            ? {}
-            : { record_hash_version: evidence.record_hash_version }),
-        ...(evidence.record_hash === undefined
-            ? {}
-            : { record_hash: evidence.record_hash }),
-        ...(priorEvidence.length === 0 ? {} : { reanchor_evidence: priorEvidence }),
-    };
-    if (priorEvidence.length === 0)
-        delete priorRecord.reanchor_evidence;
-    if (evidence.item_hash_version === undefined) {
-        delete priorRecord.item_hash_version;
-    }
-    return evidence.record_hash_version === undefined ||
-        evidence.record_hash === undefined
-        ? { kind: "legacy", entry: priorRecord }
-        : { kind: "record", entry: priorRecord };
-}
-/** Verify that retained rewrite evidence reconstructs every available prior record envelope. */
-export function verifyHistoryRewriteEvidence(entry) {
-    const evidenceEntries = entry.reanchor_evidence;
-    if (evidenceEntries === undefined)
-        return { ok: true, coverage: "none" };
-    if (!Array.isArray(evidenceEntries)) {
-        return { ok: false, error: "rewrite_evidence_invalid" };
-    }
-    if (evidenceEntries.length === 0)
-        return { ok: true, coverage: "none" };
-    let reconstructed = entry;
-    for (let index = evidenceEntries.length - 1; index >= 0; index -= 1) {
-        const evidence = evidenceEntries[index];
-        if (!(index in evidenceEntries) || !isHistoryReanchorEvidence(evidence)) {
-            return { ok: false, error: "rewrite_evidence_invalid" };
-        }
-        const prior = reconstructPriorHistoryRecord(reconstructed, evidence, evidenceEntries.slice(0, index));
-        if (prior.kind === "patch_hash_mismatch") {
-            return { ok: false, error: "rewrite_evidence_patch_hash_mismatch" };
-        }
-        if (prior.kind === "record_hash_mismatch") {
-            return { ok: false, error: "rewrite_evidence_record_hash_mismatch" };
-        }
-        if (prior.kind === "digest_only") {
-            return { ok: true, coverage: "digest_only" };
-        }
-        if (prior.kind === "legacy") {
-            return { ok: true, coverage: "legacy_anchor_only" };
-        }
-        if (!verifyHistoryRecordHash(prior.entry).ok) {
-            return { ok: false, error: "rewrite_evidence_record_hash_mismatch" };
-        }
-        reconstructed = prior.entry;
-    }
-    return { ok: true, coverage: "complete" };
-}
-function compareOptionalStrings(left, right) {
-    return (left ?? "").localeCompare(right ?? "");
-}
-function compareOptionalNumbers(left, right) {
-    return (left ?? 0) - (right ?? 0);
-}
-function compareJsonValues(left, right, fallback) {
-    // Preserve the original v1 comparator byte-for-byte: replacing JSON.stringify
-    // with stableStringify would invalidate immutable hashes from legacy streams.
-    return JSON.stringify(left ?? fallback).localeCompare(JSON.stringify(right ?? fallback));
-}
-function compareLegacyLinkedTests(left, right) {
-    const comparisons = [
-        left.scope.localeCompare(right.scope),
-        compareOptionalStrings(left.path, right.path),
-        compareOptionalStrings(left.command, right.command),
-        compareOptionalNumbers(left.timeout_seconds, right.timeout_seconds),
-        compareOptionalStrings(left.pm_context_mode, right.pm_context_mode),
-        Number(Boolean(left.shared_host_safe)) -
-            Number(Boolean(right.shared_host_safe)),
-        compareJsonValues(left.env_clear, right.env_clear, []),
-        compareJsonValues(left.env_set, right.env_set, {}),
-        compareJsonValues(left.assert_stdout_contains, right.assert_stdout_contains, []),
-        compareJsonValues(left.assert_stdout_regex, right.assert_stdout_regex, []),
-        compareJsonValues(left.assert_stderr_contains, right.assert_stderr_contains, []),
-        compareJsonValues(left.assert_stderr_regex, right.assert_stderr_regex, []),
-        compareOptionalNumbers(left.assert_stdout_min_lines, right.assert_stdout_min_lines),
-        compareJsonValues(left.assert_json_field_equals, right.assert_json_field_equals, {}),
-        compareJsonValues(left.assert_json_field_gte, right.assert_json_field_gte, {}),
-        compareOptionalStrings(left.note, right.note),
-    ];
-    return comparisons.find((comparison) => comparison !== 0) ?? 0;
-}
-function decodeJsonPointer(path) {
-    if (!path || path === "/") {
-        return [];
-    }
-    if (!path.startsWith("/")) {
-        return [];
-    }
-    return path
-        .slice(1)
-        .split("/")
-        .map((segment) => segment.replaceAll("~1", "/").replaceAll("~0", "~"));
-}
-function isDefinedPointerPath(document, path) {
-    const segments = decodeJsonPointer(path);
-    if (segments.length === 0) {
-        return true;
-    }
-    let cursor = document;
-    for (const segment of segments) {
-        const arrayIndex = /^(0|[1-9]\d*)$/.test(segment) ? Number(segment) : -1;
-        const next = Array.isArray(cursor)
-            ? arrayIndex >= 0 && arrayIndex < cursor.length
-                ? cursor[arrayIndex]
-                : undefined
-            : isRecord(cursor) &&
-                Object.prototype.hasOwnProperty.call(cursor, segment)
-                ? cursor[segment]
-                : undefined;
-        if (next === undefined)
-            return false;
-        cursor = next;
-    }
-    return true;
-}
-function normalizeHistoryPatchOps(beforeDocument, patch) {
-    const normalized = [];
-    let replayCursor = structuredClone(beforeDocument);
-    for (const operation of patch) {
-        const normalizedOperation = operation.op === "replace" &&
-            !isDefinedPointerPath(replayCursor, operation.path)
-            ? { ...operation, op: "add" }
-            : operation;
-        normalized.push(normalizedOperation);
-        replayCursor = jsonPatch.applyPatch(replayCursor, [normalizedOperation], true, true).newDocument;
-    }
-    return normalized;
-}
-function canonicalHashDocument(document, version, legacyV2Fields = false) {
-    const hasMetadata = document.metadata && Object.keys(document.metadata).length > 0;
-    if (!hasMetadata) {
-        return {
-            front_matter: {},
-            body: document.body ?? "",
-        };
-    }
-    const canonical = canonicalDocument(document);
-    // Epoch 1 and the earliest epoch-2 writer predate linked-test provenance,
-    // workspace isolation, per-execution receipts, and case-preserving
-    // dependency ids. Later epoch-2 writers included those fields without
-    // advancing the marker, so verification must retain both immutable forms.
-    const usesLegacyFields = version === 1 || (version === 2 && legacyV2Fields);
-    const epochMetadata = usesLegacyFields
-        ? {
-            ...canonical.metadata,
-            ...(canonical.metadata.dependencies === undefined
-                ? {}
-                : {
-                    dependencies: canonical.metadata.dependencies.map((dependency) => ({
-                        ...dependency,
-                        id: dependency.id.toLowerCase(),
-                    })),
-                }),
-            ...(canonical.metadata.tests === undefined
-                ? {}
-                : {
-                    tests: canonical.metadata.tests.map(({ workspace_context_mode: _workspaceContextMode, provenance: _provenance, provenance_invalid: _provenanceInvalid, ...test }) => test),
-                }),
-            ...(canonical.metadata.test_runs === undefined
-                ? {}
-                : {
-                    test_runs: canonical.metadata.test_runs.map(({ executions: _executions, ...testRun }) => testRun),
-                }),
-        }
-        : canonical.metadata;
-    const metadata = version === 1 && epochMetadata.tests
-        ? {
-            ...epochMetadata,
-            tests: [...epochMetadata.tests].sort(compareLegacyLinkedTests),
-        }
-        : epochMetadata;
-    const orderedMetadata = orderObject(toItemRecord(metadata), ITEM_METADATA_KEY_ORDER);
-    return {
-        front_matter: orderedMetadata,
-        body: canonical.body,
-    };
-}
-function canonicalPatchDocument(document) {
-    const hasMetadata = document.metadata && Object.keys(document.metadata).length > 0;
-    if (!hasMetadata) {
-        return {
-            metadata: {},
-            body: document.body ?? "",
-        };
-    }
-    const canonical = canonicalDocument(document);
-    const orderedMetadata = orderObject(toItemRecord(canonical.metadata), ITEM_METADATA_KEY_ORDER);
-    return {
-        metadata: orderedMetadata,
-        body: canonical.body,
-    };
-}
-/** Implements hash document for the public runtime surface of this module. */
-export function hashDocument(document) {
-    return hashDocumentForVersion(document, CURRENT_HISTORY_ITEM_HASH_VERSION);
-}
-/** Hash an item with an explicit canonicalization epoch for replay compatibility. */
-export function hashDocumentForVersion(document, version) {
-    if (!SUPPORTED_HISTORY_ITEM_HASH_VERSIONS.some((supportedVersion) => supportedVersion === version)) {
-        throw new TypeError(`unsupported_item_hash_version:${String(version)}`);
-    }
-    return sha256Hex(stableStringify(canonicalHashDocument(document, version)));
-}
-/**
- * Return the ordered hash candidates accepted when verifying one immutable
- * history epoch. Epoch 2 has both its established expanded hash first and the
- * earlier field-frozen writer hash second; the other epochs have one form.
- */
-export function hashDocumentVerificationCandidates(document, version) {
-    const canonicalHash = hashDocumentForVersion(document, version);
-    return version === 2
-        ? [
-            canonicalHash,
-            sha256Hex(stableStringify(canonicalHashDocument(document, version, true))),
-        ]
-        : [canonicalHash];
-}
-/** Implements hash empty document for the public runtime surface of this module. */
-export function hashEmptyDocument() {
-    return sha256Hex(stableStringify(EMPTY_LEGACY_HASH_DOCUMENT));
-}
-/** Implements create history entry for the public runtime surface of this module. */
-export function createHistoryEntry(params) {
-    const beforeHashCanonical = canonicalHashDocument(params.before, CURRENT_HISTORY_ITEM_HASH_VERSION);
-    const afterHashCanonical = canonicalHashDocument(params.after, CURRENT_HISTORY_ITEM_HASH_VERSION);
-    const beforePatchCanonical = canonicalPatchDocument(params.before);
-    const afterPatchCanonical = canonicalPatchDocument(params.after);
-    const rawPatch = jsonPatch.compare(beforePatchCanonical, afterPatchCanonical);
-    const patch = normalizeHistoryPatchOps(beforePatchCanonical, rawPatch);
-    const agentIdentity = resolveHistoryAgentIdentity(params.author);
-    const provenanceOutcomes = agentIdentity.harness
-        ? Object.fromEntries(Object.entries(diagnoseAgentIdentity().provenance_outcomes).filter(([, outcome]) => outcome.resolver !== undefined && outcome.status !== "resolved"))
-        : undefined;
-    const context = provenanceOutcomes === undefined ||
-        Object.keys(provenanceOutcomes).length === 0
-        ? params.context
-        : {
-            ...params.context,
-            agent_provenance_outcomes: provenanceOutcomes,
-        };
-    const entry = {
-        ts: params.nowIso,
-        author: params.author,
-        author_source: params.authorSource ?? resolveHistoryAuthorSource(params.author),
-        ...(agentIdentity.harness ? { agent_harness: agentIdentity.harness } : {}),
-        ...(agentIdentity.model ? { agent_model: agentIdentity.model } : {}),
-        ...(agentIdentity.model_source
-            ? { agent_model_source: agentIdentity.model_source }
-            : {}),
-        ...(agentIdentity.instance
-            ? { agent_instance: agentIdentity.instance }
-            : {}),
-        ...(agentIdentity.provenance
-            ? { agent_provenance: agentIdentity.provenance }
-            : {}),
-        ...(agentIdentity.episode ? { agent_episode: agentIdentity.episode } : {}),
-        op: params.op,
-        patch,
-        before_hash: sha256Hex(stableStringify(beforeHashCanonical)),
-        after_hash: sha256Hex(stableStringify(afterHashCanonical)),
-        item_hash_version: CURRENT_HISTORY_ITEM_HASH_VERSION,
-        message: params.message === undefined ? undefined : params.message,
-        ...(context === undefined ? {} : { context }),
-    };
-    return sealHistoryRecord({
-        ...entry,
-        event_class: classifyHistoryEvent(entry),
-    });
-}
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function invalidHistoryTimestamp(message) {
-    return new PmCliError(message, EXIT_CODE.GENERIC_FAILURE, {
-        code: "history_timestamp_invalid",
-    });
-}
-function fallbackHistoryTimestamp(entry) {
-    const ts = entry.ts.trim();
-    if (ts.length === 0)
-        return nowIso();
-    if (!isMillisecondPrecisionRfc3339DateTime(ts)) {
-        throw invalidHistoryTimestamp("History timestamp must be a valid RFC 3339 date-time with millisecond precision");
-    }
-    if (ts !== entry.ts) {
-        throw invalidHistoryTimestamp("History timestamp must not contain surrounding whitespace");
-    }
-    return entry.ts;
-}
-function withHistoryTimestamp(value, fallbackTs) {
-    const ts = value.ts;
-    if (typeof ts === "string" && ts.trim().length > 0) {
-        if (!isMillisecondPrecisionRfc3339DateTime(ts)) {
-            throw invalidHistoryTimestamp("History timestamp must be a valid RFC 3339 date-time with millisecond precision");
-        }
-        return value;
-    }
-    return { ...value, ts: fallbackTs };
-}
-function serializeHistoryLine(value, fallbackEntry) {
-    const fallbackTs = fallbackHistoryTimestamp(fallbackEntry);
-    if (typeof value === "string") {
-        let parsed;
-        try {
-            parsed = JSON.parse(value);
-        }
-        catch {
-            // Non-JSON extension lines are preserved for compatibility.
-            return value;
-        }
-        if (isRecord(parsed)) {
-            return JSON.stringify(withHistoryTimestamp(parsed, fallbackTs));
-        }
-        return value;
-    }
-    if (isRecord(value)) {
-        return JSON.stringify(withHistoryTimestamp(value, fallbackTs));
-    }
-    return JSON.stringify(value);
-}
-/** Apply one extension-provided append decision and report whether it consumed the write. */
-async function applyHistoryAppendOverride(historyPath, entry, result) {
-    if (result === false)
-        return true;
-    if (typeof result === "string") {
-        const line = serializeHistoryLine(result, entry);
-        await appendHistoryLineWithIdentityReservation(historyPath, line);
-        await invalidateHistoryDriftCacheForPath(historyPath);
-        await removeHistoryEventIndexForHistoryPath(historyPath);
-        return true;
-    }
-    if (typeof result !== "object" || result === null)
-        return false;
-    const record = result;
-    if (record.skip === true)
-        return true;
-    const nextHistoryPath = typeof record.history_path === "string" ? record.history_path : historyPath;
-    const line = serializeHistoryLine(typeof record.line === "string" ? record.line : (record.entry ?? entry), entry);
-    await appendHistoryLineWithIdentityReservation(nextHistoryPath, line);
-    await invalidateHistoryDriftCacheForPath(nextHistoryPath);
-    await removeHistoryEventIndexForHistoryPath(nextHistoryPath);
-    return true;
-}
-/** Exclusively create genesis streams at their effective destination; never remove a failed partial reservation. */
-async function appendHistoryLineWithIdentityReservation(historyPath, line) {
-    let record;
-    try {
-        record = JSON.parse(line);
-    }
-    catch {
-        // Legacy service overrides may provide non-JSON lines; verification diagnoses them.
-        record = null;
-    }
-    if (!isRecord(record) || record.op !== "create") {
-        await appendLineAtomic(historyPath, line);
-        return;
-    }
-    await fs.mkdir(path.dirname(historyPath), { recursive: true });
-    try {
-        await fs.writeFile(historyPath, `${line}\n`, { encoding: "utf8", flag: "wx" });
-    }
-    catch (error) {
-        if (error.code !== "EEXIST")
-            throw error;
-        throw new PmCliError("This item identity is reserved by an existing history stream.", EXIT_CODE.CONFLICT, {
-            code: "item_identity_reserved",
-            required: "Choose a new item ID or restore the original item from its history.",
-            nextSteps: ["Run pm history <id> --full, then pm restore <id> <version> to recover the original item."],
-        });
-    }
-}
-/** Implements append history entry for the public runtime surface of this module. */
-export async function appendHistoryEntry(historyPath, entry) {
-    const override = await runActiveServiceOverride("history_append", {
-        history_path: historyPath,
-        entry,
-    });
-    if (override.handled &&
-        (await applyHistoryAppendOverride(historyPath, entry, override.result))) {
-        return;
-    }
-    const timestampedEntry = entry.ts.trim().length > 0
-        ? entry
-        : { ...entry, ts: fallbackHistoryTimestamp(entry) };
-    const normalizedEntry = sealHistoryRecord({
-        ...timestampedEntry,
-        event_class: classifyHistoryEvent(timestampedEntry),
-    });
-    await appendHistoryEntryWithEventIndex(historyPath, normalizedEntry, async () => {
-        await appendHistoryLineWithIdentityReservation(historyPath, serializeHistoryLine(normalizedEntry, normalizedEntry));
-    });
-    await invalidateHistoryDriftCacheForPath(historyPath);
-}
-/** Public contract for test only, shared by SDK and presentation-layer consumers. */
-export const _testOnly = {
-    decodeJsonPointer,
-    isDefinedPointerPath,
-};
+!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="70eda133-68fd-5dd6-afe9-c892f23e50a5")}catch(e2){}})();import jsonPatch from"fast-json-patch";import fs from"node:fs/promises";import path from"node:path";import{EXIT_CODE,ITEM_METADATA_KEY_ORDER}from"../shared/constants.js";import{runActiveServiceOverride}from"../extensions/index.js";import{appendLineAtomic}from"../fs/fs-utils.js";import{canonicalDocument}from"../item/item-format.js";import{toItemRecord}from"../item/item-record.js";import{orderObject,sha256Hex,stableStringify}from"../shared/serialization.js";import{isMillisecondPrecisionRfc3339DateTime,nowIso}from"../shared/time.js";import{diagnoseAgentIdentity,resolveHistoryAgentIdentity,resolveHistoryAuthorSource}from"../shared/author.js";import{appendHistoryEntryWithEventIndex,removeHistoryEventIndexForHistoryPath}from"./event-index.js";import{classifyHistoryEvent}from"./event-classification.js";import{invalidateHistoryDriftCacheForPath}from"./drift-cache.js";import{PmCliError}from"../shared/errors.js";const EMPTY_LEGACY_HASH_DOCUMENT={front_matter:{},body:""};const CURRENT_HISTORY_ITEM_HASH_VERSION=3;const SUPPORTED_HISTORY_ITEM_HASH_VERSIONS=[1,2,3];const CURRENT_HISTORY_RECORD_HASH_VERSION=1;const SUPPORTED_HISTORY_RECORD_HASH_VERSIONS=[1];function hashHistoryRecord(entry){return sha256Hex(stableStringify(entry))}function hashHistoryPatch(patch){return sha256Hex(stableStringify(patch))}function hashHistoryStream(entries){return sha256Hex(stableStringify(entries))}function sealHistoryRecord(entry){const sealed={...entry,record_hash_version:CURRENT_HISTORY_RECORD_HASH_VERSION};const{record_hash:_recordHash,...canonical}=sealed;return{...sealed,record_hash:hashHistoryRecord(canonical)}}function verifyHistoryRecordHash(entry){if(entry.record_hash_version===void 0&&entry.record_hash===void 0){return{ok:true,coverage:"item_state_only"}}if(entry.record_hash_version===void 0||entry.record_hash===void 0){return{ok:false,error:"incomplete_record_hash_envelope"}}if(!SUPPORTED_HISTORY_RECORD_HASH_VERSIONS.includes(entry.record_hash_version)){return{ok:false,error:"unsupported_record_hash_version"}}const{record_hash:_recordHash,...canonical}=entry;return hashHistoryRecord(canonical)===entry.record_hash?{ok:true,coverage:"record_and_item_state"}:{ok:false,error:"record_hash_mismatch"}}function createHistoryRewriteEvidence(original,options){const evidence={before_hash:original.before_hash,after_hash:original.after_hash,patch_hash:hashHistoryPatch(original.patch)};if(original.item_hash_version!==void 0){evidence.item_hash_version=original.item_hash_version}if(options.retainOriginalPatch){evidence.patch=structuredClone(original.patch)}if(options.retainPriorRecordHash!==false&&original.record_hash_version!==void 0&&original.record_hash!==void 0){evidence.record_hash_version=original.record_hash_version;evidence.record_hash=original.record_hash;evidence.record=structuredClone(original)}return evidence}function resealHistoryRewrite(original,rewritten,options={}){const originalRecordVerification=verifyHistoryRecordHash(original);if(!originalRecordVerification.ok){throw new TypeError(originalRecordVerification.error)}const originalPatchHash=hashHistoryPatch(original.patch);const retainsRewriteEvidence=options.retainPriorRecord===true||original.before_hash!==rewritten.before_hash||original.after_hash!==rewritten.after_hash||original.item_hash_version!==rewritten.item_hash_version||originalPatchHash!==hashHistoryPatch(rewritten.patch);const sealed=sealHistoryRecord({...rewritten,...retainsRewriteEvidence?{reanchor_evidence:[...rewritten.reanchor_evidence??[],createHistoryRewriteEvidence(original,options)]}:{}});const evidenceVerification=verifyHistoryRewriteEvidence(sealed);if(!evidenceVerification.ok){throw new TypeError(evidenceVerification.error)}return sealed}function isHistoryPatch(value){if(!Array.isArray(value)||Object.keys(value).length!==value.length){return false}return value.every(operation=>{if(!isRecord(operation)||typeof operation.path!=="string"){return false}if(operation.op==="move"||operation.op==="copy"){return typeof operation.from==="string"}if(["add","replace","test"].includes(operation.op)){return Object.hasOwn(operation,"value")}return operation.op==="remove"})}function isRetainedHistoryRecordShape(value){return isRecord(value)&&typeof value.ts==="string"&&typeof value.author==="string"&&typeof value.op==="string"&&typeof value.before_hash==="string"&&typeof value.after_hash==="string"&&isHistoryPatch(value.patch)}function hasCompleteRetainedRecordHashEnvelope(evidence){const hasVersion=evidence.record_hash_version!==void 0;const hasHash=evidence.record_hash!==void 0;return hasVersion===hasHash}function isHistoryReanchorEvidence(evidence){if(!isRecord(evidence)||!hasCompleteRetainedRecordHashEnvelope(evidence)||typeof evidence.before_hash!=="string"||typeof evidence.after_hash!=="string"||typeof evidence.patch_hash!=="string"||!/^[a-f0-9]{64}$/u.test(evidence.patch_hash)||evidence.patch!==void 0&&!isHistoryPatch(evidence.patch)||evidence.record_hash_version!==void 0&&typeof evidence.record_hash_version!=="number"||evidence.record_hash!==void 0&&(typeof evidence.record_hash!=="string"||!/^[a-f0-9]{64}$/u.test(evidence.record_hash))){return false}return evidence.record===void 0||isRetainedHistoryRecordShape(evidence.record)}function matchesRetainedHistoryRecord(evidence){const record=evidence.record;return record!==void 0&&record.before_hash===evidence.before_hash&&record.after_hash===evidence.after_hash&&record.item_hash_version===evidence.item_hash_version&&record.record_hash_version===evidence.record_hash_version&&record.record_hash===evidence.record_hash&&hashHistoryPatch(record.patch)===evidence.patch_hash}function reconstructPriorHistoryRecord(current,evidence,priorEvidence){if(evidence.patch&&hashHistoryPatch(evidence.patch)!==evidence.patch_hash){return{kind:"patch_hash_mismatch"}}if(evidence.record){if(!matchesRetainedHistoryRecord(evidence)){return{kind:"record_hash_mismatch"}}return{kind:"record",entry:evidence.record}}const priorPatch=evidence.patch??current.patch;if(hashHistoryPatch(priorPatch)!==evidence.patch_hash){return{kind:"digest_only"}}const priorRecord={...current,before_hash:evidence.before_hash,after_hash:evidence.after_hash,patch:priorPatch,...evidence.item_hash_version===void 0?{}:{item_hash_version:evidence.item_hash_version},...evidence.record_hash_version===void 0?{}:{record_hash_version:evidence.record_hash_version},...evidence.record_hash===void 0?{}:{record_hash:evidence.record_hash},...priorEvidence.length===0?{}:{reanchor_evidence:priorEvidence}};if(priorEvidence.length===0)delete priorRecord.reanchor_evidence;if(evidence.item_hash_version===void 0){delete priorRecord.item_hash_version}return evidence.record_hash_version===void 0||evidence.record_hash===void 0?{kind:"legacy",entry:priorRecord}:{kind:"record",entry:priorRecord}}function verifyHistoryRewriteEvidence(entry){const evidenceEntries=entry.reanchor_evidence;if(evidenceEntries===void 0)return{ok:true,coverage:"none"};if(!Array.isArray(evidenceEntries)){return{ok:false,error:"rewrite_evidence_invalid"}}if(evidenceEntries.length===0)return{ok:true,coverage:"none"};let reconstructed=entry;for(let index=evidenceEntries.length-1;index>=0;index-=1){const evidence=evidenceEntries[index];if(!(index in evidenceEntries)||!isHistoryReanchorEvidence(evidence)){return{ok:false,error:"rewrite_evidence_invalid"}}const prior=reconstructPriorHistoryRecord(reconstructed,evidence,evidenceEntries.slice(0,index));if(prior.kind==="patch_hash_mismatch"){return{ok:false,error:"rewrite_evidence_patch_hash_mismatch"}}if(prior.kind==="record_hash_mismatch"){return{ok:false,error:"rewrite_evidence_record_hash_mismatch"}}if(prior.kind==="digest_only"){return{ok:true,coverage:"digest_only"}}if(prior.kind==="legacy"){return{ok:true,coverage:"legacy_anchor_only"}}if(!verifyHistoryRecordHash(prior.entry).ok){return{ok:false,error:"rewrite_evidence_record_hash_mismatch"}}reconstructed=prior.entry}return{ok:true,coverage:"complete"}}function compareOptionalStrings(left,right){return(left??"").localeCompare(right??"")}function compareOptionalNumbers(left,right){return(left??0)-(right??0)}function compareJsonValues(left,right,fallback){return JSON.stringify(left??fallback).localeCompare(JSON.stringify(right??fallback))}function compareLegacyLinkedTests(left,right){const comparisons=[left.scope.localeCompare(right.scope),compareOptionalStrings(left.path,right.path),compareOptionalStrings(left.command,right.command),compareOptionalNumbers(left.timeout_seconds,right.timeout_seconds),compareOptionalStrings(left.pm_context_mode,right.pm_context_mode),Number(Boolean(left.shared_host_safe))-Number(Boolean(right.shared_host_safe)),compareJsonValues(left.env_clear,right.env_clear,[]),compareJsonValues(left.env_set,right.env_set,{}),compareJsonValues(left.assert_stdout_contains,right.assert_stdout_contains,[]),compareJsonValues(left.assert_stdout_regex,right.assert_stdout_regex,[]),compareJsonValues(left.assert_stderr_contains,right.assert_stderr_contains,[]),compareJsonValues(left.assert_stderr_regex,right.assert_stderr_regex,[]),compareOptionalNumbers(left.assert_stdout_min_lines,right.assert_stdout_min_lines),compareJsonValues(left.assert_json_field_equals,right.assert_json_field_equals,{}),compareJsonValues(left.assert_json_field_gte,right.assert_json_field_gte,{}),compareOptionalStrings(left.note,right.note)];return comparisons.find(comparison=>comparison!==0)??0}function decodeJsonPointer(path2){if(!path2||path2==="/"){return[]}if(!path2.startsWith("/")){return[]}return path2.slice(1).split("/").map(segment=>segment.replaceAll("~1","/").replaceAll("~0","~"))}function isDefinedPointerPath(document,path2){const segments=decodeJsonPointer(path2);if(segments.length===0){return true}let cursor=document;for(const segment of segments){const arrayIndex=/^(0|[1-9]\d*)$/.test(segment)?Number(segment):-1;const next=Array.isArray(cursor)?arrayIndex>=0&&arrayIndex<cursor.length?cursor[arrayIndex]:void 0:isRecord(cursor)&&Object.prototype.hasOwnProperty.call(cursor,segment)?cursor[segment]:void 0;if(next===void 0)return false;cursor=next}return true}function normalizeHistoryPatchOps(beforeDocument,patch){const normalized=[];let replayCursor=structuredClone(beforeDocument);for(const operation of patch){const normalizedOperation=operation.op==="replace"&&!isDefinedPointerPath(replayCursor,operation.path)?{...operation,op:"add"}:operation;normalized.push(normalizedOperation);replayCursor=jsonPatch.applyPatch(replayCursor,[normalizedOperation],true,true).newDocument}return normalized}function canonicalHashDocument(document,version,legacyV2Fields=false){const hasMetadata=document.metadata&&Object.keys(document.metadata).length>0;if(!hasMetadata){return{front_matter:{},body:document.body??""}}const canonical=canonicalDocument(document);const usesLegacyFields=version===1||version===2&&legacyV2Fields;const epochMetadata=usesLegacyFields?{...canonical.metadata,...canonical.metadata.dependencies===void 0?{}:{dependencies:canonical.metadata.dependencies.map(dependency=>({...dependency,id:dependency.id.toLowerCase()}))},...canonical.metadata.tests===void 0?{}:{tests:canonical.metadata.tests.map(({workspace_context_mode:_workspaceContextMode,provenance:_provenance,provenance_invalid:_provenanceInvalid,...test})=>test)},...canonical.metadata.test_runs===void 0?{}:{test_runs:canonical.metadata.test_runs.map(({executions:_executions,...testRun})=>testRun)}}:canonical.metadata;const metadata=version===1&&epochMetadata.tests?{...epochMetadata,tests:[...epochMetadata.tests].sort(compareLegacyLinkedTests)}:epochMetadata;const orderedMetadata=orderObject(toItemRecord(metadata),ITEM_METADATA_KEY_ORDER);return{front_matter:orderedMetadata,body:canonical.body}}function canonicalPatchDocument(document){const hasMetadata=document.metadata&&Object.keys(document.metadata).length>0;if(!hasMetadata){return{metadata:{},body:document.body??""}}const canonical=canonicalDocument(document);const orderedMetadata=orderObject(toItemRecord(canonical.metadata),ITEM_METADATA_KEY_ORDER);return{metadata:orderedMetadata,body:canonical.body}}function hashDocument(document){return hashDocumentForVersion(document,CURRENT_HISTORY_ITEM_HASH_VERSION)}function hashDocumentForVersion(document,version){if(!SUPPORTED_HISTORY_ITEM_HASH_VERSIONS.some(supportedVersion=>supportedVersion===version)){throw new TypeError(`unsupported_item_hash_version:${String(version)}`)}return sha256Hex(stableStringify(canonicalHashDocument(document,version)))}function hashDocumentVerificationCandidates(document,version){const canonicalHash=hashDocumentForVersion(document,version);return version===2?[canonicalHash,sha256Hex(stableStringify(canonicalHashDocument(document,version,true)))]:[canonicalHash]}function hashEmptyDocument(){return sha256Hex(stableStringify(EMPTY_LEGACY_HASH_DOCUMENT))}function createHistoryEntry(params){const beforeHashCanonical=canonicalHashDocument(params.before,CURRENT_HISTORY_ITEM_HASH_VERSION);const afterHashCanonical=canonicalHashDocument(params.after,CURRENT_HISTORY_ITEM_HASH_VERSION);const beforePatchCanonical=canonicalPatchDocument(params.before);const afterPatchCanonical=canonicalPatchDocument(params.after);const rawPatch=jsonPatch.compare(beforePatchCanonical,afterPatchCanonical);const patch=normalizeHistoryPatchOps(beforePatchCanonical,rawPatch);const agentIdentity=resolveHistoryAgentIdentity(params.author);const provenanceOutcomes=agentIdentity.harness?Object.fromEntries(Object.entries(diagnoseAgentIdentity().provenance_outcomes).filter(([,outcome])=>outcome.resolver!==void 0&&outcome.status!=="resolved")):void 0;const context=provenanceOutcomes===void 0||Object.keys(provenanceOutcomes).length===0?params.context:{...params.context,agent_provenance_outcomes:provenanceOutcomes};const entry={ts:params.nowIso,author:params.author,author_source:params.authorSource??resolveHistoryAuthorSource(params.author),...agentIdentity.harness?{agent_harness:agentIdentity.harness}:{},...agentIdentity.model?{agent_model:agentIdentity.model}:{},...agentIdentity.model_source?{agent_model_source:agentIdentity.model_source}:{},...agentIdentity.instance?{agent_instance:agentIdentity.instance}:{},...agentIdentity.provenance?{agent_provenance:agentIdentity.provenance}:{},...agentIdentity.episode?{agent_episode:agentIdentity.episode}:{},op:params.op,patch,before_hash:sha256Hex(stableStringify(beforeHashCanonical)),after_hash:sha256Hex(stableStringify(afterHashCanonical)),item_hash_version:CURRENT_HISTORY_ITEM_HASH_VERSION,message:params.message===void 0?void 0:params.message,...context===void 0?{}:{context}};return sealHistoryRecord({...entry,event_class:classifyHistoryEvent(entry)})}function isRecord(value){return typeof value==="object"&&value!==null&&!Array.isArray(value)}function invalidHistoryTimestamp(message){return new PmCliError(message,EXIT_CODE.GENERIC_FAILURE,{code:"history_timestamp_invalid"})}function fallbackHistoryTimestamp(entry){const ts=entry.ts.trim();if(ts.length===0)return nowIso();if(!isMillisecondPrecisionRfc3339DateTime(ts)){throw invalidHistoryTimestamp("History timestamp must be a valid RFC 3339 date-time with millisecond precision")}if(ts!==entry.ts){throw invalidHistoryTimestamp("History timestamp must not contain surrounding whitespace")}return entry.ts}function withHistoryTimestamp(value,fallbackTs){const ts=value.ts;if(typeof ts==="string"&&ts.trim().length>0){if(!isMillisecondPrecisionRfc3339DateTime(ts)){throw invalidHistoryTimestamp("History timestamp must be a valid RFC 3339 date-time with millisecond precision")}return value}return{...value,ts:fallbackTs}}function serializeHistoryLine(value,fallbackEntry){const fallbackTs=fallbackHistoryTimestamp(fallbackEntry);if(typeof value==="string"){let parsed;try{parsed=JSON.parse(value)}catch{return value}if(isRecord(parsed)){return JSON.stringify(withHistoryTimestamp(parsed,fallbackTs))}return value}if(isRecord(value)){return JSON.stringify(withHistoryTimestamp(value,fallbackTs))}return JSON.stringify(value)}async function applyHistoryAppendOverride(historyPath,entry,result){if(result===false)return true;if(typeof result==="string"){const line2=serializeHistoryLine(result,entry);await appendHistoryLineWithIdentityReservation(historyPath,line2);await invalidateHistoryDriftCacheForPath(historyPath);await removeHistoryEventIndexForHistoryPath(historyPath);return true}if(typeof result!=="object"||result===null)return false;const record=result;if(record.skip===true)return true;const nextHistoryPath=typeof record.history_path==="string"?record.history_path:historyPath;const line=serializeHistoryLine(typeof record.line==="string"?record.line:record.entry??entry,entry);await appendHistoryLineWithIdentityReservation(nextHistoryPath,line);await invalidateHistoryDriftCacheForPath(nextHistoryPath);await removeHistoryEventIndexForHistoryPath(nextHistoryPath);return true}async function appendHistoryLineWithIdentityReservation(historyPath,line){let record;try{record=JSON.parse(line)}catch{record=null}if(!isRecord(record)||record.op!=="create"){await appendLineAtomic(historyPath,line);return}await fs.mkdir(path.dirname(historyPath),{recursive:true});try{await fs.writeFile(historyPath,`${line}
+`,{encoding:"utf8",flag:"wx"})}catch(error){if(error.code!=="EEXIST")throw error;throw new PmCliError("This item identity is reserved by an existing history stream.",EXIT_CODE.CONFLICT,{code:"item_identity_reserved",required:"Choose a new item ID or restore the original item from its history.",nextSteps:["Run pm history <id> --full, then pm restore <id> <version> to recover the original item."]})}}async function appendHistoryEntry(historyPath,entry){const override=await runActiveServiceOverride("history_append",{history_path:historyPath,entry});if(override.handled&&await applyHistoryAppendOverride(historyPath,entry,override.result)){return}const timestampedEntry=entry.ts.trim().length>0?entry:{...entry,ts:fallbackHistoryTimestamp(entry)};const normalizedEntry=sealHistoryRecord({...timestampedEntry,event_class:classifyHistoryEvent(timestampedEntry)});await appendHistoryEntryWithEventIndex(historyPath,normalizedEntry,async()=>{await appendHistoryLineWithIdentityReservation(historyPath,serializeHistoryLine(normalizedEntry,normalizedEntry))});await invalidateHistoryDriftCacheForPath(historyPath)}const _testOnly={decodeJsonPointer,isDefinedPointerPath};export{CURRENT_HISTORY_ITEM_HASH_VERSION,CURRENT_HISTORY_RECORD_HASH_VERSION,SUPPORTED_HISTORY_ITEM_HASH_VERSIONS,SUPPORTED_HISTORY_RECORD_HASH_VERSIONS,_testOnly,appendHistoryEntry,createHistoryEntry,hashDocument,hashDocumentForVersion,hashDocumentVerificationCandidates,hashEmptyDocument,hashHistoryPatch,hashHistoryRecord,hashHistoryStream,resealHistoryRewrite,sealHistoryRecord,verifyHistoryRecordHash,verifyHistoryRewriteEvidence};
 //# sourceMappingURL=history.js.map
-//# debugId=a5449fec-c5b4-5cf4-9a7f-b7c5dc7161c2