pm-brief 2026.10.23 → 2026.10.24

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## 2026.10.24 - 2026-10-24
+
+### Added
+
+- Record acknowledged handoff contracts against item revisions ([pm-brief-cjxn](https://github.com/unbraind/pm-brief/blob/main/.agents/pm/features/pm-brief-cjxn.toon))
+- Compare recorded decision alternatives with cited evidence ([pm-brief-ktjl](https://github.com/unbraind/pm-brief/blob/main/.agents/pm/features/pm-brief-ktjl.toon))
+
+### Other
+
+- Verify evidence for tracker reconciliation review ([pm-brief-review165](https://github.com/unbraind/pm-brief/blob/main/.agents/pm/chores/pm-brief-review165.toon))
+
 ## 2026.10.23 - 2026-10-23
 
 ### Changed

package/README.md

@@ -51,7 +51,7 @@ pm brief since 2026-07-20T00:00:00Z --until 2026-07-22 --author alice
 
 ### Ranking and Budget Flags
 
-- `--max-tokens` is an alias for `--token-budget`: a ceiling on the chosen rendered brief, estimated as `ceil(characters / 4)` (not a model tokenizer).
+- `--max-tokens` is an alias for `--token-budget`: a ceiling on the chosen rendered brief, estimated by the SDK as `ceil(UTF-8 bytes / 4)` (not a model tokenizer).
 - `--dependency-order` prefers prerequisite items before dependent work in next-work ranking.
 - `--focus` highlights specific item ids, or `type:Type` to highlight every item of a type (repeatable or comma-separated).
 - `--include-history` adds a Recent Activity section sourced from `pm activity` to briefs and prompts; `--history-limit` controls the entry count (default 10).
@@ -88,10 +88,24 @@ const output = renderBrief(brief, "markdown");
 `renderMarkdownBrief`, `renderSlackBrief` and `renderAgentPrompt` enforce the
 selected rendering again if callers change format or modify the returned object.
 `budget.estimatedTokens` measures the rendering chosen at build time, including
-its own digit count. An unchanged ordinary tracker that already fits keeps its
+its own digit count and trailing newline, using the SDK UTF-8 byte estimator. An unchanged ordinary tracker that already fits keeps its
 sections and fields; only the estimate disclosure can differ from older versions.
 See [budget evidence and recovery](docs/brief-budget.md) for the regression matrix.
 
+Next-work recommendations exclude items with unresolved prerequisites, including
+reverse `blocks` edges and missing targets. Held work remains visible in explicit
+focus, blocker and risk evidence. External targets (`source_kind=global`, its
+`external` alias, or external reference syntax) stay separate from local IDs:
+external reverse edges cannot block local namesakes, and external references
+cannot add local dependent context or ranking credit. Workspace terminal roles govern lifecycle
+filters; library callers can supply `BriefOptions.statusRegistry` from
+`resolveRuntimeStatusRegistry((await readSettings(pmRoot)).schema)`. Omitted
+registries use SDK core defaults plus the legacy terminal `done` spelling, so
+custom terminal names need their registry. An explicitly configured `done` role
+takes precedence over that compatibility fallback. Native disclosure reads the
+workspace registry too. See [relationship readiness](docs/relationship-readiness.md)
+for the graph-shape matrix.
+
 ## Agent Brief Contents
 
 - workspace and item counts
@@ -562,10 +576,78 @@ refusals are `invalid` (correct IDs/budget), `missing` (check exact IDs), `track
 fewer items). CLI refusals exit 2 and retain `alternatives_<code>` and a remedy in
 the host's expected-error contract. See the [worked example](docs/examples/alternatives.md).
 
+## Stakeholder disclosure profiles
+
+Render a brief for an explicit audience using native compact TOON (default) or
+JSON. This is a read-only operation and does not require git:
+
+```bash
+pm brief disclose --audience public
+pm --json brief disclose --audience external --dry-run
+pm --json brief disclose --policy disclosure.json --token-budget 8000
+```
+
+| Audience | Permitted brief fields |
+| --- | --- |
+| `public` | Generation time, item count, and ranked item IDs, titles, types, statuses and priorities |
+| `external` | Public fields plus ranking explanations, tags, dependencies, blockers, risks and staleness |
+| `internal` | External fields plus workspace metadata, assignees, required context, activity, recommendations, insights and source budget metadata |
+
+All profiles exclude unmodeled fields, including custom fields, momentum,
+governance and merge receipts. Recognized credential-shaped values are removed
+using the core SDK guard. The tracker path applies this guard before ranking
+and compaction so shortening cannot conceal a recognized secret. This reuses
+core detection; it is not a universal credential scanner or a guarantee that
+arbitrary prose contains no confidential information. Review permitted titles
+and labels before sharing them.
+
+Policies can only narrow a profile. For example, `disclosure.json`:
+
+```json
+{"profile":"public","exclude":["focus.*.title","next.*.title","decisionsNeeded.*.title"]}
+```
+
+Only `profile` and `exclude` are accepted. Unknown keys, audiences or field
+selectors refuse before reading the tracker. `DisclosureField` in the SDK
+enumerates supported selectors; `*` denotes an array index. There is no override
+for adding custom fields or bypassing the credential guard.
+
+Every result contains an exclusion manifest grouped by reason (`profile`,
+`policy`, `secret`, `unknown_field`, `invalid_value`). Each entry maps a
+JSON Pointer path to an occurrence count. Profile/policy paths aggregate array
+indices as `*`; secret paths identify individual rendered occurrences. Unknown
+field names are replaced by `@N`, their zero-based position in their parent
+object's property enumeration. Pre-compaction secret exclusions use
+`/source/N/@M` for record/field positions; `/source/N` means a secret-bearing
+identity caused the whole record to be withheld. These paths describe the
+snapshot and never contain field values, item identifiers or unknown key text.
+Dry runs return the same manifest without any brief values.
+
+```ts
+import { buildBrief, renderDisclosureBrief, buildDisclosureBrief, DisclosureError } from "pm-brief";
+
+const brief = buildBrief(items); // One source; multiple independent renderings.
+const publicView = renderDisclosureBrief(brief, { profile: "public" });
+const reviewPreview = renderDisclosureBrief(brief, { profile: "external" }, { dryRun: true });
+// Or read a complete, certified native snapshot using an optional host PmClient:
+const view = await buildDisclosureBrief({ profile: "public" }, { pmRoot: ".agents/pm" });
+```
+
+The native tracker path reuses the existing 4000-token source brief selection;
+`sourceTruncated` discloses source compaction. The default disclosure ceiling is
+8000 estimated tokens, covering native JSON/TOON framing and every exclusion.
+Use `renderDisclosureBrief` with your own `buildBrief` controls for a different
+source selection. Rendering never silently drops manifest entries to fit.
+`DisclosureError` provides `code` and `remedy`: `policy` (correct the policy),
+`invalid` (correct controls/input), `tracker` (resolve the incomplete/unreadable
+source), or `budget` (increase the ceiling or supply a smaller brief). CLI
+refusals exit 2 with `disclosure_<code>` and a remedy, without source text or
+nested error details. See the [worked example and public-tracker replay](docs/examples/disclosure.md).
+
 ## Without git
 
 Briefs, prompts, ranking, history deltas, governance, duplicate checks and all
-handoff and decision alternatives commands work in plain initialized trackers without a git executable.
+handoff, decision alternatives and stakeholder disclosure commands work in plain initialized trackers without a git executable.
 Handoff storage uses the native SDK dispatcher and can reuse a host client.
 `brief diverge` needs a git repository and git refs. Handoff receipts have no
 branch, commit or repository dependency.

package/dist/disclosure.d.ts

@@ -0,0 +1,70 @@
+import { PmClient } from "@unbrained/pm-cli/sdk";
+import type { ExtensionApi } from "@unbrained/pm-cli/sdk/authoring";
+import type { AgentBrief } from "./index.ts";
+/** Fixed audiences; callers may narrow a profile but cannot widen it. */
+export type DisclosureProfile = "internal" | "external" | "public";
+/** Brief sections containing the same ranked-item shape. */
+type ItemSection = "focus" | "next" | "decisionsNeeded";
+/** Supported scalar fields in ranked items. */
+type ItemField = "id" | "title" | "type" | "status" | "priority" | "assignee" | "whyNow" | "rankingScore" | "confidence" | "tokenCostEstimate" | "mergeCompromised";
+/** Known selectors, using * for array indices; unknown selectors are refused. */
+export type DisclosureField = "generatedAt" | "workspace.root" | "workspace.pmVersion" | "workspace.itemCount" | "budget.requestedTokens" | "budget.estimatedTokens" | "budget.truncated" | `${ItemSection}.*.${ItemField}` | `${ItemSection}.*.${"tags" | "rankingReasons" | "requiredContext" | "dependencyIds" | "dependentIds"}.*` | `blockers.*.${"itemId" | "blockedBy" | "kind" | "title" | "status"}` | `risks.*.${"itemId" | "severity" | "reason"}` | `staleContext.*.${"itemId" | "title" | "updatedAt" | "daysStale"}` | `recentActivity.*.${"timestamp" | "author" | "operation" | "itemId" | "message"}` | `recommendedPmUpdates.*.${"itemId" | "command" | "reason" | "safeToAutoApply"}` | `insights.*.${"level" | "message" | "suggestion"}`;
+/** Explicit audience and optional additional denials. No permissive extension fields. */
+export interface DisclosurePolicy {
+    profile: DisclosureProfile;
+    exclude?: DisclosureField[];
+}
+/** JSON values retained after validation and disclosure checks. */
+export type DisclosureValue = string | number | boolean | DisclosureValue[] | {
+    [key: string]: DisclosureValue;
+};
+/** Value-free reasons; profile/policy paths use * for all matching array indices. */
+export type DisclosureExclusionReason = "profile" | "policy" | "secret" | "unknown_field" | "invalid_value";
+/** Field-level JSON Pointer paths and occurrence counts grouped by exclusion reason. */
+export type DisclosureExclusion = Record<DisclosureExclusionReason, Record<string, number>>;
+/** Agent-sized rendering with a manifest; dry runs contain no brief values. */
+export interface DisclosureResult {
+    protocol: "pm-brief.disclosure/v1";
+    profile: DisclosureProfile;
+    dryRun: boolean;
+    sourceTruncated: boolean;
+    brief?: {
+        [key: string]: DisclosureValue;
+    };
+    exclusions: DisclosureExclusion;
+    estimatedTokenCeiling: number;
+}
+/** Pure rendering controls; the budget includes the full exclusion manifest. */
+export interface DisclosureRenderOptions {
+    dryRun?: boolean;
+    tokenBudget?: number;
+}
+/** Native, backend-neutral tracker context; never invokes git or writes records. */
+export interface DisclosureOptions extends DisclosureRenderOptions {
+    pmRoot: string;
+    client?: PmClient;
+    generatedAt?: string;
+}
+/** Stable refusal categories shared by the SDK and native CLI. */
+export type DisclosureRefusalCode = "policy" | "invalid" | "tracker" | "budget";
+/** Expected failure containing no source values, paths, policy text or nested causes. */
+export declare class DisclosureError extends Error {
+    /** Stable machine category for recovery logic. */
+    readonly code: DisclosureRefusalCode;
+    /** Safe action to take before retrying. */
+    readonly remedy: string;
+    /** Preserve recovery information without exposing the failing input. */
+    constructor(code: DisclosureRefusalCode, message: string, remedy: string);
+    /** Normalize an unexpected failure without retaining potentially forbidden nested text. */
+    static from(error: unknown): DisclosureError;
+}
+/** Validate policy keys and every field selector before any tracker read or render. */
+export declare function parseDisclosurePolicy(value: unknown): DisclosurePolicy;
+/** Render the same brief through a closed field vocabulary before native serialization. */
+export declare function renderDisclosureBrief(brief: AgentBrief, input: DisclosurePolicy, options?: DisclosureRenderOptions): DisclosureResult;
+/** Read a certified native snapshot and reuse pm-brief ranking before disclosure. */
+export declare function buildDisclosureBrief(input: DisclosurePolicy, options: DisclosureOptions): Promise<DisclosureResult>;
+/** Register native structured output and sanitized expected errors, with no git dependency. */
+export declare function registerDisclosureCommand(api: ExtensionApi): void;
+export {};
+//# sourceMappingURL=disclosure.d.ts.map

package/dist/disclosure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"disclosure.d.ts","sourceRoot":"","sources":["../disclosure.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAgJ,MAAM,uBAAuB,CAAC;AAC/L,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAEpE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,yEAAyE;AACzE,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,UAAU,GAAG,QAAQ,CAAC;AACnE,4DAA4D;AAC5D,KAAK,WAAW,GAAG,OAAO,GAAG,MAAM,GAAG,iBAAiB,CAAC;AACxD,+CAA+C;AAC/C,KAAK,SAAS,GAAG,IAAI,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,GAAG,QAAQ,GAAG,cAAc,GAAG,YAAY,GAAG,mBAAmB,GAAG,kBAAkB,CAAC;AACpK,iFAAiF;AACjF,MAAM,MAAM,eAAe,GAAG,aAAa,GAAG,gBAAgB,GAAG,qBAAqB,GAAG,qBAAqB,GAC1G,wBAAwB,GAAG,wBAAwB,GAAG,kBAAkB,GACxE,GAAG,WAAW,MAAM,SAAS,EAAE,GAC/B,GAAG,WAAW,MAAM,MAAM,GAAG,gBAAgB,GAAG,iBAAiB,GAAG,eAAe,GAAG,cAAc,IAAI,GACxG,cAAc,QAAQ,GAAG,WAAW,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,EAAE,GACpE,WAAW,QAAQ,GAAG,UAAU,GAAG,QAAQ,EAAE,GAC7C,kBAAkB,QAAQ,GAAG,OAAO,GAAG,WAAW,GAAG,WAAW,EAAE,GAClE,oBAAoB,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,EAAE,GACjF,0BAA0B,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,iBAAiB,EAAE,GAC/E,cAAc,OAAO,GAAG,SAAS,GAAG,YAAY,EAAE,CAAC;AACvD,yFAAyF;AACzF,MAAM,WAAW,gBAAgB;IAAG,OAAO,EAAE,iBAAiB,CAAC;IAAC,OAAO,CAAC,EAAE,eAAe,EAAE,CAAA;CAAE;AAC7F,mEAAmE;AACnE,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,eAAe,EAAE,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,CAAA;CAAE,CAAC;AACjH,qFAAqF;AACrF,MAAM,MAAM,yBAAyB,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,eAAe,GAAG,eAAe,CAAC;AAC5G,wFAAwF;AACxF,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,yBAAyB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAC5F,+EAA+E;AAC/E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,wBAAwB,CAAC;IACnC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,MAAM,EAAE,OAAO,CAAC;IAChB,eAAe,EAAE,OAAO,CAAC;IACzB,KAAK,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,CAAA;KAAE,CAAC;IAC3C,UAAU,EAAE,mBAAmB,CAAC;IAChC,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AACD,gFAAgF;AAChF,MAAM,WAAW,uBAAuB;IAAG,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE;AACnF,oFAAoF;AACpF,MAAM,WAAW,iBAAkB,SAAQ,uBAAuB;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE;AAC9H,kEAAkE;AAClE,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;AAChF,yFAAyF;AACzF,qBAAa,eAAgB,SAAQ,KAAK;IACxC,kDAAkD;IAClD,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,2CAA2C;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,YAAY,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAEvE;IACD,2FAA2F;IAC3F,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAE3C;CACF;AAiCD,uFAAuF;AACvF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CAItE;AAcD,2FAA2F;AAC3F,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,GAAE,uBAA4B,GAAG,gBAAgB,CAgDzI;AACD,qFAAqF;AACrF,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAwBzH;AACD,+FAA+F;AAC/F,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAyBjE"}

package/dist/disclosure.js

@@ -0,0 +1,227 @@
+import { readFile } from "node:fs/promises";
+import { PmClient, certifyCompleteListResult, createPmCliExpectedError, estimatePmOutputTokens, readSettings, resolveRuntimeStatusRegistry, scanMutationSecrets } from "@unbrained/pm-cli/sdk";
+import { buildBrief } from "./index.js";
+/** Expected failure containing no source values, paths, policy text or nested causes. */
+export class DisclosureError extends Error {
+    /** Stable machine category for recovery logic. */
+    code;
+    /** Safe action to take before retrying. */
+    remedy;
+    /** Preserve recovery information without exposing the failing input. */
+    constructor(code, message, remedy) {
+        super(message);
+        this.name = "DisclosureError";
+        this.code = code;
+        this.remedy = remedy;
+    }
+    /** Normalize an unexpected failure without retaining potentially forbidden nested text. */
+    static from(error) {
+        return error instanceof DisclosureError ? error : new DisclosureError("tracker", "Disclosure could not complete", "Run pm health and check tracker permissions before retrying");
+    }
+}
+const LEVEL = { public: 0, external: 1, internal: 2 };
+const FIELDS = new Map([
+    ["generatedAt", 0], ["workspace.root", 2], ["workspace.pmVersion", 2], ["workspace.itemCount", 0],
+    ["budget.requestedTokens", 2], ["budget.estimatedTokens", 2], ["budget.truncated", 2],
+]);
+for (const section of ["focus", "next", "decisionsNeeded"]) {
+    for (const field of ["id", "title", "type", "status", "priority"])
+        FIELDS.set(`${section}.*.${field}`, 0);
+    for (const field of ["whyNow", "rankingScore", "confidence", "tokenCostEstimate", "mergeCompromised", "tags.*", "rankingReasons.*", "dependencyIds.*", "dependentIds.*"])
+        FIELDS.set(`${section}.*.${field}`, 1);
+    for (const field of ["assignee", "requiredContext.*"])
+        FIELDS.set(`${section}.*.${field}`, 2);
+}
+for (const field of ["itemId", "blockedBy", "kind", "title", "status"])
+    FIELDS.set(`blockers.*.${field}`, 1);
+for (const field of ["itemId", "severity", "reason"])
+    FIELDS.set(`risks.*.${field}`, 1);
+for (const field of ["itemId", "title", "updatedAt", "daysStale"])
+    FIELDS.set(`staleContext.*.${field}`, 1);
+for (const field of ["timestamp", "author", "operation", "itemId", "message"])
+    FIELDS.set(`recentActivity.*.${field}`, 2);
+for (const field of ["itemId", "command", "reason", "safeToAutoApply"])
+    FIELDS.set(`recommendedPmUpdates.*.${field}`, 2);
+for (const field of ["level", "message", "suggestion"])
+    FIELDS.set(`insights.*.${field}`, 2);
+/** Compile only trusted profile selectors; data keys remain exact path segments. */
+const FIELD_PATHS = [...FIELDS].map(([field, level]) => ({ field: field, level, segments: field.split(".") }));
+/** Match a structured data-path prefix; profile wildcards accept only numeric array indices. */
+function matchesDisclosurePath(pattern, path) {
+    return path.length <= pattern.length && path.every((segment, i) => pattern[i] === "*" ? typeof segment === "number" : pattern[i] === segment);
+}
+/** Refuse a malformed or widening policy without echoing its contents. */
+function invalidPolicy() {
+    throw new DisclosureError("policy", "Unknown or invalid disclosure policy", "Use only profile (internal, external or public) and optional exclude containing documented field selectors; policies can only remove fields");
+}
+/** Check JSON object shape without coercing arrays or null into a policy. */
+function object(value) { return typeof value === "object" && value !== null && !Array.isArray(value); }
+/** Validate policy keys and every field selector before any tracker read or render. */
+export function parseDisclosurePolicy(value) {
+    if (!object(value) || !Object.hasOwn(value, "profile") || Reflect.ownKeys(value).some(key => key !== "profile" && key !== "exclude") || typeof value.profile !== "string" || !Object.hasOwn(LEVEL, value.profile))
+        return invalidPolicy();
+    if (value.exclude !== undefined && (!Array.isArray(value.exclude) || value.exclude.length > FIELDS.size || value.exclude.some(field => typeof field !== "string" || !FIELDS.has(field))))
+        return invalidPolicy();
+    return { profile: value.profile, exclude: value.exclude === undefined ? [] : [...new Set(value.exclude)] };
+}
+/** Bound the entire native JSON/TOON envelope, including framing and diagnostics. */
+function budget(options) {
+    const amount = options.tokenBudget ?? 8000;
+    if (!Number.isSafeInteger(amount) || amount < 1 || amount > 64000 || (options.dryRun !== undefined && typeof options.dryRun !== "boolean"))
+        throw new DisclosureError("invalid", "Invalid disclosure controls", "Use a boolean dryRun and an integer --token-budget from 1 to 64000 (default 8000)");
+    return amount;
+}
+/** Account for the complete manifest after both source and render exclusions. */
+function bounded(result, limit) {
+    result.estimatedTokenCeiling = 64000;
+    result.estimatedTokenCeiling = estimatePmOutputTokens(Buffer.byteLength(JSON.stringify(result, null, 2)) * 2 + 256);
+    if (result.estimatedTokenCeiling > limit)
+        throw new DisclosureError("budget", "Disclosure and its exclusion manifest exceed the token budget", "Increase --token-budget (maximum 64000) or supply a smaller brief; no exclusion evidence is silently dropped");
+    return result;
+}
+/** Render the same brief through a closed field vocabulary before native serialization. */
+export function renderDisclosureBrief(brief, input, options = {}) {
+    const policy = parseDisclosurePolicy(input);
+    const limit = budget(options);
+    if (!object(brief))
+        throw new DisclosureError("invalid", "Invalid brief", "Supply the object returned by buildBrief; arbitrary scalar or array input is not a brief");
+    const exclusions = { profile: {}, policy: {}, secret: {}, unknown_field: {}, invalid_value: {} };
+    const denied = new Set(policy.exclude);
+    const active = new Set();
+    /** Aggregate repeated policy paths without source values or redundant per-row metadata. */
+    function exclude(reason, path) { exclusions[reason][path] = (exclusions[reason][path] ?? 0) + 1; }
+    /** Traverse only known containers; never expose unknown key text or scan diagnostics. */
+    function walk(value, segments, path) {
+        if (typeof value === "object" && value !== null && active.has(value))
+            throw new DisclosureError("invalid", "Invalid recursive brief", "Supply an acyclic buildBrief result; known containers have a fixed vocabulary and nesting shape");
+        const matches = FIELD_PATHS.filter(entry => matchesDisclosurePath(entry.segments, segments));
+        const exact = matches.find(entry => entry.segments.length === segments.length);
+        if (exact !== undefined) {
+            const { field, level } = exact;
+            if (level > LEVEL[policy.profile]) {
+                exclude("profile", `/${field.replaceAll(".", "/")}`);
+                return undefined;
+            }
+            if (denied.has(field)) {
+                exclude("policy", `/${field.replaceAll(".", "/")}`);
+                return undefined;
+            }
+            if (!(typeof value === "string" || typeof value === "boolean" || (typeof value === "number" && Number.isFinite(value)))) {
+                exclude("invalid_value", path);
+                return undefined;
+            }
+            if (scanMutationSecrets(value).length > 0) {
+                exclude("secret", path);
+                return undefined;
+            }
+            return value;
+        }
+        if (matches.length === 0) {
+            exclude("unknown_field", path);
+            return undefined;
+        }
+        if (Array.isArray(value)) {
+            active.add(value);
+            const result = [];
+            for (let i = 0; i < value.length; i++) {
+                const entry = walk(value[i], [...segments, i], `${path}/${i}`);
+                if (entry !== undefined)
+                    result.push(entry);
+            }
+            active.delete(value);
+            return result;
+        }
+        if (object(value)) {
+            active.add(value);
+            const result = {};
+            for (const [i, [key, entry]] of Object.entries(value).entries()) {
+                if (entry === undefined)
+                    continue;
+                const child = [...segments, key];
+                const known = FIELD_PATHS.some(field => matchesDisclosurePath(field.segments, child));
+                const rendered = walk(entry, child, `${path}/${known ? key : `@${i}`}`);
+                if (rendered !== undefined)
+                    result[key] = rendered;
+            }
+            active.delete(value);
+            return result;
+        }
+        exclude("invalid_value", path);
+        return undefined;
+    }
+    const filtered = walk(brief, [], "");
+    const result = { protocol: "pm-brief.disclosure/v1", profile: policy.profile, dryRun: options.dryRun ?? false, sourceTruncated: brief.budget?.truncated === true, exclusions, estimatedTokenCeiling: 64000 };
+    if (!result.dryRun)
+        result.brief = filtered;
+    return bounded(result, limit);
+}
+/** Read a certified native snapshot and reuse pm-brief ranking before disclosure. */
+export async function buildDisclosureBrief(input, options) {
+    const policy = parseDisclosurePolicy(input);
+    budget(options);
+    let brief;
+    const sourceSecrets = {};
+    try {
+        const client = options.client ?? new PmClient({ pmRoot: options.pmRoot, noExtensions: true });
+        const items = certifyCompleteListResult(await client.listAllComplete({ includeBody: true })).items;
+        // Guard before compaction: a shortened credential may no longer match its detector.
+        const protectedItems = items.flatMap((item, i) => {
+            if (scanMutationSecrets(item.id).length) {
+                sourceSecrets[`/source/${i}`] = 1;
+                return [];
+            }
+            const safe = { ...item };
+            for (const [j, [field, value]] of Object.entries(item).entries()) {
+                if (scanMutationSecrets(value).length) {
+                    delete safe[field];
+                    sourceSecrets[`/source/${i}/@${j}`] = 1;
+                }
+            }
+            return [safe];
+        });
+        const statusRegistry = resolveRuntimeStatusRegistry((await readSettings(options.pmRoot)).schema);
+        brief = buildBrief(protectedItems, { pmRoot: ".agents/pm", generatedAt: options.generatedAt, statusRegistry });
+    }
+    catch {
+        throw new DisclosureError("tracker", "Cannot build a certified disclosure brief", "Run pm health and resolve unreadable or incomplete records before retrying");
+    }
+    const result = renderDisclosureBrief(brief, policy, { ...options, tokenBudget: 64000 });
+    Object.assign(result.exclusions.secret, sourceSecrets);
+    return bounded(result, budget(options));
+}
+/** Register native structured output and sanitized expected errors, with no git dependency. */
+export function registerDisclosureCommand(api) {
+    api.registerCommand({
+        name: "brief disclose",
+        description: "Render a brief for an explicit stakeholder profile with a value-free exclusion manifest",
+        flags: [
+            { long: "--audience", type: "string", value_name: "audience", description: "Required audience: internal, external or public (or supply --policy)" },
+            { long: "--policy", type: "string", value_name: "file", description: "JSON policy containing profile and optional exclude; cannot widen a profile" },
+            { long: "--dry-run", type: "boolean", description: "Explain exclusions without returning brief values" },
+            { long: "--token-budget", type: "string", value_name: "n", description: "Conservative complete JSON/TOON ceiling (default 8000; maximum 64000)" },
+        ],
+        async run(ctx) {
+            try {
+                if (ctx.args.length || (ctx.options.audience !== undefined && ctx.options.policy !== undefined))
+                    return invalidPolicy();
+                let policy;
+                if (ctx.options.policy !== undefined) {
+                    try {
+                        policy = parseDisclosurePolicy(JSON.parse(await readFile(String(ctx.options.policy), "utf8")));
+                    }
+                    catch {
+                        return invalidPolicy();
+                    }
+                }
+                else
+                    policy = parseDisclosurePolicy({ profile: ctx.options.audience });
+                return await buildDisclosureBrief(policy, { pmRoot: ctx.pm_root, client: ctx.sdk?.client, dryRun: ctx.options.dryRun, tokenBudget: ctx.options.tokenBudget === undefined ? undefined : Number(ctx.options.tokenBudget) });
+            }
+            catch (error) {
+                const refusal = DisclosureError.from(error);
+                throw createPmCliExpectedError(`disclosure ${refusal.code}: ${refusal.message}. Remedy: ${refusal.remedy}`, { exitCode: 2, context: { code: `disclosure_${refusal.code}`, required: refusal.remedy } });
+            }
+        },
+    });
+}
+//# sourceMappingURL=disclosure.js.map

package/dist/disclosure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"disclosure.js","sourceRoot":"","sources":["../disclosure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,YAAY,EAAE,4BAA4B,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE/L,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AA4CxC,yFAAyF;AACzF,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,kDAAkD;IACzC,IAAI,CAAwB;IACrC,2CAA2C;IAClC,MAAM,CAAS;IACxB,wEAAwE;IACxE,YAAY,IAA2B,EAAE,OAAe,EAAE,MAAc;QACtE,KAAK,CAAC,OAAO,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACxF,CAAC;IACD,2FAA2F;IAC3F,MAAM,CAAC,IAAI,CAAC,KAAc;QACxB,OAAO,KAAK,YAAY,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,SAAS,EAAE,+BAA+B,EAAE,6DAA6D,CAAC,CAAC;IACnL,CAAC;CACF;AAED,MAAM,KAAK,GAAsC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AACzF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAiB;IACrC,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,CAAC,qBAAqB,EAAE,CAAC,CAAC,EAAE,CAAC,qBAAqB,EAAE,CAAC,CAAC;IACjG,CAAC,wBAAwB,EAAE,CAAC,CAAC,EAAE,CAAC,wBAAwB,EAAE,CAAC,CAAC,EAAE,CAAC,kBAAkB,EAAE,CAAC,CAAC;CACtF,CAAC,CAAC;AACH,KAAK,MAAM,OAAO,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,CAAC;IAC3D,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,MAAM,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1G,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,QAAQ,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,gBAAgB,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,MAAM,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IACjN,KAAK,MAAM,KAAK,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,MAAM,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;AAChG,CAAC;AACD,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC;IAAE,MAAM,CAAC,GAAG,CAAC,cAAc,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;AAC7G,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC;IAAE,MAAM,CAAC,GAAG,CAAC,WAAW,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;AACxF,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC;IAAE,MAAM,CAAC,GAAG,CAAC,kBAAkB,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;AAC5G,KAAK,MAAM,KAAK,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC;IAAE,MAAM,CAAC,GAAG,CAAC,oBAAoB,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;AAC1H,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,iBAAiB,CAAC;IAAE,MAAM,CAAC,GAAG,CAAC,0BAA0B,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;AACzH,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC;IAAE,MAAM,CAAC,GAAG,CAAC,cAAc,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;AAE7F,oFAAoF;AACpF,MAAM,WAAW,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAwB,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AAElI,gGAAgG;AAChG,SAAS,qBAAqB,CAAC,OAA0B,EAAE,IAAkC;IAC3F,OAAO,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC;AAChJ,CAAC;AAED,0EAA0E;AAC1E,SAAS,aAAa;IACpB,MAAM,IAAI,eAAe,CAAC,QAAQ,EAAE,sCAAsC,EAAE,6IAA6I,CAAC,CAAC;AAC7N,CAAC;AACD,6EAA6E;AAC7E,SAAS,MAAM,CAAC,KAAc,IAAsC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAClJ,uFAAuF;AACvF,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,aAAa,EAAE,CAAC;IAC1O,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,aAAa,EAAE,CAAC;IACjN,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAA4B,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAA4B,CAAC,CAAC,EAAE,CAAC;AACvJ,CAAC;AACD,qFAAqF;AACrF,SAAS,MAAM,CAAC,OAAgC;IAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,SAAS,EAAE,6BAA6B,EAAE,mFAAmF,CAAC,CAAC;IACrS,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,iFAAiF;AACjF,SAAS,OAAO,CAAC,MAAwB,EAAE,KAAa;IACtD,MAAM,CAAC,qBAAqB,GAAG,KAAK,CAAC;IACrC,MAAM,CAAC,qBAAqB,GAAG,sBAAsB,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;IACpH,IAAI,MAAM,CAAC,qBAAqB,GAAG,KAAK;QAAE,MAAM,IAAI,eAAe,CAAC,QAAQ,EAAE,+DAA+D,EAAE,8GAA8G,CAAC,CAAC;IAC/P,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,2FAA2F;AAC3F,MAAM,UAAU,qBAAqB,CAAC,KAAiB,EAAE,KAAuB,EAAE,OAAO,GAA4B,EAAE;IACrH,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAAC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,SAAS,EAAE,eAAe,EAAE,0FAA0F,CAAC,CAAC;IACtK,MAAM,UAAU,GAAwB,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;IACtH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,2FAA2F;IAC3F,SAAS,OAAO,CAAC,MAAiC,EAAE,IAAY,IAAU,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3I,yFAAyF;IACzF,SAAS,IAAI,CAAC,KAAc,EAAE,QAAsC,EAAE,IAAY;QAChF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,SAAS,EAAE,yBAAyB,EAAE,iGAAiG,CAAC,CAAC;QACzO,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC7F,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/E,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;YAC/B,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBAAC,OAAO,CAAC,SAAS,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBAAC,OAAO,SAAS,CAAC;YAAC,CAAC;YAC9G,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBAAC,OAAO,SAAS,CAAC;YAAC,CAAC;YACjG,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAC,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;gBAAC,OAAO,SAAS,CAAC;YAAC,CAAC;YAC9K,IAAI,mBAAmB,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;gBAAC,OAAO,SAAS,CAAC;YAAC,CAAC;YACzF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;QAC/E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAClB,MAAM,MAAM,GAAsB,EAAE,CAAC;YACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;gBAAC,IAAI,KAAK,KAAK,SAAS;oBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9G,CAAC;YACD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC;QACtC,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAClB,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAClB,MAAM,MAAM,GAAoC,EAAE,CAAC;YACnD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;gBAChE,IAAI,KAAK,KAAK,SAAS;oBAAE,SAAS;gBAClC,MAAM,KAAK,GAAG,CAAC,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAC;gBACjC,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;gBACtF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;gBACxE,IAAI,QAAQ,KAAK,SAAS;oBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;YACrD,CAAC;YACD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC;QACtC,CAAC;QACD,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;QAAC,OAAO,SAAS,CAAC;IACnD,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAoC,CAAC;IACxE,MAAM,MAAM,GAAqB,EAAE,QAAQ,EAAE,wBAAwB,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK,EAAE,eAAe,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,KAAK,IAAI,EAAE,UAAU,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC;IAC/N,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC;IAC5C,OAAO,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAChC,CAAC;AACD,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAuB,EAAE,OAA0B;IAC5F,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7D,IAAI,KAAiB,CAAC;IACtB,MAAM,aAAa,GAA2B,EAAE,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,QAAQ,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9F,MAAM,KAAK,GAAG,yBAAyB,CAAC,MAAM,MAAM,CAAC,eAAe,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QACnG,oFAAoF;QACpF,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;YAC/C,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;gBAAC,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;gBAAC,OAAO,EAAE,CAAC;YAAC,CAAC;YAC1F,MAAM,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;YACzB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;gBACjE,IAAI,mBAAmB,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;oBAAC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;oBAAC,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;gBAAC,CAAC;YACzG,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,4BAA4B,CAAC,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACjG,KAAK,GAAG,UAAU,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,cAAc,EAAE,CAAC,CAAC;IACjH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,SAAS,EAAE,2CAA2C,EAAE,4EAA4E,CAAC,CAAC;IAClK,CAAC;IACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IACxF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACvD,OAAO,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;AAC1C,CAAC;AACD,+FAA+F;AAC/F,MAAM,UAAU,yBAAyB,CAAC,GAAiB;IACzD,GAAG,CAAC,eAAe,CAAC;QAClB,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,yFAAyF;QACtG,KAAK,EAAE;YACL,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,sEAAsE,EAAE;YACnJ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,6EAA6E,EAAE;YACpJ,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mDAAmD,EAAE;YACxG,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,uEAAuE,EAAE;SAClJ;QACD,KAAK,CAAC,GAAG,CAAC,GAAG;YACX,IAAI,CAAC;gBACH,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC;oBAAE,OAAO,aAAa,EAAE,CAAC;gBACxH,IAAI,MAAwB,CAAC;gBAC7B,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBACrC,IAAI,CAAC;wBAAC,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;oBAAC,CAAC;oBACvG,MAAM,CAAC;wBAAC,OAAO,aAAa,EAAE,CAAC;oBAAC,CAAC;gBACnC,CAAC;;oBAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACzE,OAAO,MAAM,oBAAoB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAA6B,EAAE,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACnP,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC5C,MAAM,wBAAwB,CAAC,cAAc,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,aAAa,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,cAAc,OAAO,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC1M,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/index.d.ts

@@ -1,3 +1,5 @@
+export { buildDisclosureBrief, renderDisclosureBrief, parseDisclosurePolicy, DisclosureError } from "./disclosure.ts";
+export type { DisclosureProfile, DisclosureField, DisclosurePolicy, DisclosureValue, DisclosureExclusionReason, DisclosureExclusion, DisclosureResult, DisclosureRenderOptions, DisclosureOptions, DisclosureRefusalCode } from "./disclosure.ts";
 export { buildDecisionAlternatives, DecisionAlternativesError } from "./alternatives.ts";
 export type { DecisionExcerpt, DecisionAlternative, DecisionAlternativesDigest, DecisionAlternativesOptions, DecisionAlternativesRefusalCode } from "./alternatives.ts";
 export { previewHandoff, createHandoff, acknowledgeHandoff, inspectHandoff, parseHandoffContract, parseHandoffResponse, HandoffError } from "./handoff.ts";
@@ -7,6 +9,7 @@ import type { ExtensionApi } from "@unbrained/pm-cli/sdk/authoring";
 import type { SimilarItemMatch } from "@unbrained/pm-cli/sdk";
 import type { SecretGuardFinding } from "@unbrained/pm-cli/sdk/governance";
 import type { MergeDecisionReceipt, MergePreferredSide } from "@unbrained/pm-cli/sdk/merge";
+import { type RuntimeStatusRegistry } from "@unbrained/pm-cli/sdk";
 export type { SimilarItemMatch } from "@unbrained/pm-cli/sdk";
 export type { DuplicateCluster, SecretGuardFinding, StorageIntegrityScanResult, StaleInProgressScan, } from "@unbrained/pm-cli/sdk/governance";
 export type { MergeDecisionReceipt, MergePreferredSide } from "@unbrained/pm-cli/sdk/merge";
@@ -84,10 +87,12 @@ export interface PmItem {
     files?: unknown;
     [key: string]: unknown;
 }
-/** Renderings whose complete character estimate can be budgeted by buildBrief. */
+/** Renderings whose complete UTF-8 byte estimate can be budgeted by buildBrief. */
 export type BriefFormat = "json" | "markdown" | "prompt" | "slack";
 /** Selection and rendering controls for a brief whose output must fit the requested ceiling. */
 export interface BriefOptions {
+    /** Workspace lifecycle roles; omitted library calls use the SDK core defaults. */
+    statusRegistry?: RuntimeStatusRegistry;
     /** Rendering to budget, including whitespace and disclosure (default: json). */
     format?: BriefFormat;
     tokenBudget?: number;
@@ -464,6 +469,8 @@ interface Relationship {
     from: string;
     to: string;
     kind: string;
+    source_kind?: string;
+    external?: boolean;
 }
 /** Collect dependency relationships from item metadata for ranking and blocker summaries. */
 export declare function extractRelationships(item: PmItem): Relationship[];
@@ -611,6 +618,7 @@ export declare function parseActivitySinceOutput(output: string): DeltaActivityE
  */
 export declare function buildDelta(entries: DeltaActivityEntry[], itemsById: Map<string, PmItem>, options?: {
     since: string;
+    statusRegistry?: RuntimeStatusRegistry;
     until?: string;
     author?: string;
     generatedAt?: string;
@@ -994,6 +1002,8 @@ export interface DuplicatePair {
 }
 /** Options controlling which items are scanned and how pairs are ranked/truncated. */
 export interface DuplicateSweepOptions {
+    /** Lifecycle registry used by duplicate remediation. */
+    statusRegistry?: RuntimeStatusRegistry;
     /** Inclusive similarity threshold on the 0..1 scale (default 0.6). */
     threshold?: number;
     /** Maximum pairs to report, after ranking (default 20). */
@@ -1054,14 +1064,14 @@ export declare function parseDuplicateThreshold(raw: string | undefined, fallbac
  *   `created_at`) as canonical and relate the newer to it, falling back to id
  *   ordering when creation timestamps are missing.
  */
-export declare function duplicateRemediationCommand(a: DuplicatePairItem, b: DuplicatePairItem): string;
+export declare function duplicateRemediationCommand(a: DuplicatePairItem, b: DuplicatePairItem, statusRegistry?: RuntimeStatusRegistry): string;
 /**
  * Collapse raw per-candidate similarity matches into unordered pairs. When A
  * matches B and B matches A, a single pair keyed on the stable sorted-id pair is
  * emitted and keeps the highest score (and that score's reason) seen in either
  * direction. Pairs are ranked by score descending then pair id for stable output.
  */
-export declare function collapseDuplicatePairs(candidates: readonly PmItem[], matchesByCandidate: ReadonlyMap<string, readonly SimilarItemMatch[]>, itemsById: ReadonlyMap<string, PmItem>): DuplicatePair[];
+export declare function collapseDuplicatePairs(candidates: readonly PmItem[], matchesByCandidate: ReadonlyMap<string, readonly SimilarItemMatch[]>, itemsById: ReadonlyMap<string, PmItem>, statusRegistry?: RuntimeStatusRegistry): DuplicatePair[];
 /**
  * Score every candidate against the tracker with the shared SDK similarity
  * primitive, running at most {@link DUPLICATE_SCAN_CONCURRENCY} scans at a time.