@unbrained/pm-cli 2026.10.13 → 2026.10.15

package/.claude-plugin/marketplace.json

@@ -1 +1 @@
-{"name":"pm","owner":{"name":"unbrained","url":"https://github.com/unbraind/pm-cli"},"description":"Official marketplace for pm CLI — native git-based project management for Claude Code and AI coding agents.","version":"2026.10.13","plugins":[{"name":"pm-claude","source":"./plugins/pm-claude","description":"Native pm CLI integration for Claude Code — 32 MCP tools, 14 workflow skills with slash invocations, 4 subagents, hybrid TUI task tracking, session context injection, and coordination subagents for git-based project management without leaving Claude Code.","version":"2026.10.13","author":{"name":"unbrained","url":"https://github.com/unbraind/pm-cli"},"homepage":"https://github.com/unbraind/pm-cli","repository":"https://github.com/unbraind/pm-cli","license":"MIT","keywords":["pm-cli","project-management","mcp","tasks","agents","workflows","git-native","task-tracker","ai"],"category":"productivity"}]}
+{"name":"pm","owner":{"name":"unbrained","url":"https://github.com/unbraind/pm-cli"},"description":"Official marketplace for pm CLI — native git-based project management for Claude Code and AI coding agents.","version":"2026.10.15","plugins":[{"name":"pm-claude","source":"./plugins/pm-claude","description":"Native pm CLI integration for Claude Code — 32 MCP tools, 14 workflow skills with slash invocations, 4 subagents, hybrid TUI task tracking, session context injection, and coordination subagents for git-based project management without leaving Claude Code.","version":"2026.10.15","author":{"name":"unbrained","url":"https://github.com/unbraind/pm-cli"},"homepage":"https://github.com/unbraind/pm-cli","repository":"https://github.com/unbraind/pm-cli","license":"MIT","keywords":["pm-cli","project-management","mcp","tasks","agents","workflows","git-native","task-tracker","ai"],"category":"productivity"}]}

package/CHANGELOG.md

@@ -1,5 +1,41 @@
 # Changelog
 
+## 2026.10.15 - 2026-10-15
+
+### Fixed
+
+- GH-1467: Preserve optional extension value arity in machine contracts ([pm-gh1467](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-gh1467.toon))
+- GH-1466: Preserve explicitly false values for extension bool aliases ([pm-gh1466](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-gh1466.toon))
+- GH-1458: Preserve linked-test edit history across older published readers and writers ([pm-gh1458](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-gh1458.toon))
+- GH-1457: Recover output cursors passed to --after and expose budget continuation controls ([pm-gh1457](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-gh1457.toon))
+
+### Security
+
+- Redact sensitive values in Sentry command context and encoded diagnostic text ([pm-geywoc](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-geywoc.toon))
+
+### Other
+
+- Compact SDK declaration whitespace while preserving types and documentation ([pm-chw71s](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/tasks/pm-chw71s.toon))
+
+## 2026.10.14 - 2026-10-14
+
+### Added
+
+- GH-1462: Publish host-aligned TOON codecs for extension acceptance tests ([pm-gh1462](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/features/pm-gh1462.toon))
+- Enable explicit successful-command Sentry tracing without eager startup ([pm-58yzil](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/features/pm-58yzil.toon))
+
+### Changed
+
+- Give recurrence policy globs a deterministic matching bound ([pm-0vqbl5](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/tasks/pm-0vqbl5.toon))
+
+### Fixed
+
+- Prevent Sentry command context from recording positional content and option values ([pm-geywoc](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-geywoc.toon))
+- GH-1461: Normalize supported inline flag placeholders across help and parsing ([pm-gh1461](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-gh1461.toon))
+- GH-1460: Merge extension assets as ordinary Git files while preserving tracker drivers ([pm-gh1460](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-gh1460.toon))
+- Resume due telemetry after a concurrent background upload ([pm-j8spis](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-j8spis.toon))
+- Embedded CLI commands fail when an eval host has no script argv entry ([pm-mor9pl](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-mor9pl.toon))
+
 ## 2026.10.13 - 2026-10-13
 
 ### Added
@@ -20,12 +56,12 @@
 
 ### Other
 
+- Compact declaration indentation while preserving SDK types and documentation ([pm-chw71s](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/tasks/pm-chw71s.toon))
 - Refresh eligible Markdown and lint tooling and record pending dependency migrations ([pm-0uxmwf](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/chores/pm-0uxmwf.toon))
 - Deduplicate hosted Commander recovery-context projection ([pm-nrj9sy](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/chores/pm-nrj9sy.toon))
 - Refresh eligible SDK and CI dependencies ([pm-98f0ec](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/chores/pm-98f0ec.toon))
 - Accept universal SDK read receipts in the public context evaluation reader ([pm-i4kxx1](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/tasks/pm-i4kxx1.toon))
 - Expose active planning recovery when a canonical item is reopened ([pm-reopen-planning-recovery](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/tasks/pm-reopen-planning-recovery.toon))
-- Compact declaration indentation while preserving SDK types and documentation ([pm-chw71s](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/tasks/pm-chw71s.toon))
 
 ## 2026.10.12 - 2026-10-12
 
@@ -181,8 +217,16 @@
 - GH-1368: Agent UX: context next silently ignores inherited --fields and --depth options, including invalid values ([pm-gh1368](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-gh1368.toon))
 - GH-1367: Agent UX: context handoff omission receipts suggest depth flags that do not restore omitted sections ([pm-gh1367](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-gh1367.toon))
 
+### Other
+
+- Published artifact weight: the npm tarball ships 20MB of inline-source sourcemaps plus duplicate tsc and bundle outputs ([pm-998juj](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/tasks/pm-998juj.toon))
+
 ## 2026.10.3 - 2026-10-03
 
+### Fixed
+
+- GH-1354: Linked-test snapshot mode drops nested package dependencies and breaks monorepo acceptance ([pm-5iwfkj](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-5iwfkj.toon))
+
 ### Security
 
 - Scorecard alert 29: patch Axios in the CodSpeed development dependency graph ([pm-r61juc](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-r61juc.toon))
@@ -427,6 +471,7 @@
 
 ### Other
 
+- Move meet/event/remind calendar shortcuts from core surface into the builtin-calendar package as create sugar ([pm-o3fh](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/tasks/pm-o3fh.toon))
 - Serialize the complete build pipeline so overlapping validation cannot consume partially rewritten dist artifacts ([pm-cxc4jc](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/tasks/pm-cxc4jc.toon))
 - Released-artifact acceptance: the exact published tarball is installed clean and driven through a scripted agent session before the release is advertised ([pm-ygli86](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/tasks/pm-ygli86.toon))
 - Verify explicit calendar duration in package-first dogfood ([pm-d9bg0i](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/tasks/pm-d9bg0i.toon))
@@ -622,6 +667,7 @@
 
 ### Fixed
 
+- Releases from the default branch are supported with analyzer evidence ([pm-u1baah](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-u1baah.toon))
 - GH-1207: Make advisory health checks and strict verdict authority explicit ([pm-fkohe8](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-fkohe8.toon))
 - The tracker's recurrence edges and the CI recurrence policy are two ledgers with no join, so 59 of the 75 items in a recorded recurrence lineage produce no gate anywhere ([pm-7c27ep](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-7c27ep.toon))
 - Refresh review acknowledgements when bot feedback changes ([pm-8we38i](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-8we38i.toon))
@@ -683,6 +729,7 @@
 
 ### Fixed
 
+- Windows published-release verifier test can preempt its own readiness and cleanup contract ([pm-euqm7x](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-euqm7x.toon))
 - Packed npx smoke timeout rejects valid slow dependency reification ([pm-8eebb6](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-8eebb6.toon))
 - GH-1186: unrecoverable legacy merge-receipt references block strict health with diagnostic-only remediation ([pm-cf4t42](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-cf4t42.toon))
 - GH-1185: hash-only merge receipts make discarded scalar values unreachable to the reviewing agent ([pm-mg13iz](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-mg13iz.toon))
@@ -779,6 +826,7 @@
 
 ### Fixed
 
+- GH-1135: item_hash_version 2 still masks writer hash divergence as corruption ([pm-2qahia](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-2qahia.toon))
 - GH-1144: hash-only merge receipts contradict report output and cannot reconcile truthfully ([pm-z1z96w](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-z1z96w.toon))
 - GH-1146/1147: external blockers remain stale and validation recommends deleting them ([pm-yhle2e](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-yhle2e.toon))
 - GH-1140: reject ambiguous bare comma tuples for linked file and test mutations ([pm-nc94mk](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-nc94mk.toon))
@@ -882,6 +930,7 @@
 
 ### Fixed
 
+- GH-1104: health must not certify pending lossless merge receipts as reconciled ([pm-baksix](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-baksix.toon))
 - Dynamic-read continuation cursors are born stale: pm health emits a cursor that its next invocation rejects ([pm-oahhyc](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-oahhyc.toon))
 - GH-1105: contracts must declare each command projection vocabulary before invocation ([pm-q4isdq](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-q4isdq.toon))
 - The outcome-milestone ladder is a sibling set rather than a layer: 1,024 terminal items reach the roadmap apex through 154 typed roots without traversing any outcome milestone ([pm-h6b73t](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-h6b73t.toon))
@@ -894,6 +943,7 @@
 
 ### Fixed
 
+- Releases from the default branch are supported with analyzer evidence ([pm-u1baah](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-u1baah.toon))
 - Structured release-failure causes are preserved in blocked-release alerts ([pm-x63izf](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-x63izf.toon))
 - Bulk writes accept newline/comma IDs from argv, stdin, and @path with effect-aware exits ([pm-3oq022](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-3oq022.toon))
 - update-many --dry-run allows filter-only preview for review and bulk-selection workflows ([pm-kexu](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-kexu.toon))
@@ -927,6 +977,7 @@
 
 ### Other
 
+- Cross-process reproducibility gate: prove CLI and MCP deterministic runs are byte-identical and fail on ambient time leaks ([pm-vklr99](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/tasks/pm-vklr99.toon))
 - Expose agent probe controls and versioned legacy-author vocabulary through pm config and SDK mutation APIs ([pm-yds9dt](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/chores/pm-yds9dt.toon))
 - Diagnostic output budget: errors, warnings, and recovery bundles are the output an agent reads most and the only output with no declared ceiling ([pm-cha95z](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/tasks/pm-cha95z.toon))
 
@@ -970,6 +1021,10 @@
 
 ## 2026.8.20 - 2026-08-20
 
+### Added
+
+- GH-796: no reopen transition for terminal items, so recurrence is recorded as a duplicate instead of a reopening ([pm-83cz0o](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/features/pm-83cz0o.toon))
+
 ### Fixed
 
 - GH-529: init --agent-guidance emits run-tests.mjs linked-test example that may not exist in the target repo ([pm-surv](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-surv.toon))
@@ -1007,6 +1062,7 @@
 
 ### Fixed
 
+- A commit pushed directly to the default branch can never be released: both analyzer-evidence fallbacks presuppose a pull request, and nothing declares that precondition ([pm-u1baah](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-u1baah.toon))
 - GH-1052: typed fail-closed whole-list SDK primitive ([pm-y4aaol](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-y4aaol.toon))
 - Packed Bun SDK import fails on node:module stripTypeScriptTypes ([pm-ikj8ve](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-ikj8ve.toon))
 - GH-1051: package catalog rejects universal output-budget controls ([pm-2firut](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-2firut.toon))
@@ -1063,6 +1119,7 @@
 
 ### Fixed
 
+- A commit pushed directly to the default branch can never be released: both analyzer-evidence fallbacks presuppose a pull request, and nothing declares that precondition ([pm-u1baah](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-u1baah.toon))
 - Workspace history integrity refusals escape typed CLI recovery and become high Sentry faults ([pm-2zkvxm](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-2zkvxm.toon))
 - GH-1019/GH-1020/GH-1021: Node 24 nightly platform regressions after PR \#1016 ([pm-zno2iu](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-zno2iu.toon))
 - GH-814/GH-821/GH-1034: SDK metadata reads must distinguish missing, invalid, and unreadable tracker roots from empty ([pm-23xkss](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-23xkss.toon))
@@ -1080,6 +1137,8 @@
 
 ### Fixed
 
+- Surface replication gate scopes trigger activation to relevant diff content ([pm-mrhwow](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-mrhwow.toon))
+- A budget-truncated read is resumable on one surface and terminal on five, and the only recovery the envelope names is to abandon the budget that truncated it ([pm-8nev0o](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-8nev0o.toon))
 - Provide an audited repair and severity-migration contract for legacy invalid provenance ([pm-76fkpp](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-76fkpp.toon))
 - Detect extension-host pm-cli version skew before a workspace reports healthy ([pm-643e0k](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-643e0k.toon))
 - Restore strict unknown-key parity for docs linked-artifact additions ([pm-22rzjp](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-22rzjp.toon))
@@ -1148,6 +1207,7 @@
 
 ### Other
 
+- The Windows nightly leg cannot separate product defects from harness noise: 744 hardcoded POSIX path literals and 203 raw errno strings in the suite fail on Windows for reasons unrelated to pm behaviour ([pm-j668gl](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/chores/pm-j668gl.toon))
 - ADR: Lifecycle-sensitive graph partitions are advisory; stable all-status outcomes carry blocking assurance ([pm-dczodv](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/decisions/pm-dczodv.toon))
 
 ## 2026.8.12 - 2026-08-12
@@ -1270,6 +1330,7 @@
 
 ### Fixed
 
+- pm get silently discards --output-include field names because entity reads bind the flag to sections while collection reads bind it to fields, and the omission receipt reports no omissions either way ([pm-0k19l7](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-0k19l7.toon))
 - PR \#935 review remediation: executable gate registry and fail-closed runtime context parsing ([pm-n41vay](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-n41vay.toon))
 - GH-926: warn before a stale pm binary mutates a project pinned to a newer CLI/SDK ([pm-1eted6](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-1eted6.toon))
 - PR \#935 CI: preserve dependency-free fast-version startup and regenerate runtime contracts ([pm-dskxwf](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-dskxwf.toon))
@@ -1286,6 +1347,7 @@
 
 ### Security
 
+- GHSA-2v37-7h3g-55p8: pin patched nanoid in the Vite/PostCSS development graph ([pm-5dwz1a](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-5dwz1a.toon))
 - GH-933: nested PM writes in non-PM linked tests can mutate the source project ([pm-alhqbz](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-alhqbz.toon))
 
 ### Other
@@ -1393,6 +1455,7 @@
 
 ### Other
 
+- Published artifact weight: the npm tarball ships 20MB of inline-source sourcemaps plus duplicate tsc and bundle outputs ([pm-998juj](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/tasks/pm-998juj.toon))
 - Scripting contract: documented and test-gated guarantees for exit codes, stdout/stderr stream discipline, and stable machine-readable field names ([pm-psy1](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/tasks/pm-psy1.toon))
 
 ## 2026.8.3 - 2026-08-03
@@ -1484,6 +1547,7 @@
 
 ### Fixed
 
+- GH-814: SDK metadata reads must distinguish missing and invalid tracker roots from an empty tracker ([pm-23xkss](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-23xkss.toon))
 - Exact-tag npm recovery must stabilize public package access before verification ([pm-t310hx](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-t310hx.toon))
 - GH-830: duplicate-safe creation must require explicit bypass before persistence ([pm-35w9l2](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-35w9l2.toon))
 - GH-828: init status registries must expose one coherent alias contract ([pm-62n4kk](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-62n4kk.toon))
@@ -1495,6 +1559,10 @@
 - The runtime contract enumeration is not closed over the surface it can resolve: 14 rendered commands, including the list-open that AGENTS.md mandates, are contract-backed by name yet absent from every enumeration ([pm-6j7r1a](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-6j7r1a.toon))
 - GH-817: machine-readable flag contracts need semantic invocation metadata and stdin capability ([pm-11phn1](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-11phn1.toon))
 
+### Security
+
+- GH-827: local package install must prevent recursive self-copy and disk exhaustion ([pm-0682l4](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-0682l4.toon))
+
 ## 2026.7.30 - 2026-07-30
 
 ### Added
@@ -1503,6 +1571,7 @@
 
 ### Fixed
 
+- GH-814: SDK metadata reads must distinguish missing and invalid tracker roots from an empty tracker ([pm-23xkss](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-23xkss.toon))
 - Workspace snapshot heartbeat races atomic root activation and loses its writer lock ([pm-ifuysd](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-ifuysd.toon))
 - GH-815: optional missing merge drivers must be advisory in default health verdicts ([pm-r8u2g6](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-r8u2g6.toon))
 - Sentry gate misclassifies handled snapshot identifier validation as a blocking runtime error ([pm-k785lu](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-k785lu.toon))
@@ -1532,6 +1601,7 @@
 
 ### Fixed
 
+- Both token gates are structurally unable to fail: one measures only help payloads, the other measures command output against a three-item fixture, so no check anywhere compares real output to the ceiling the contract declares ([pm-9sui7t](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-9sui7t.toon))
 - GH-676: list tag filter must accept the CSV shape used by tag mutations ([pm-b1zsk9](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-b1zsk9.toon))
 - GH-675: lifecycle must record actual completion time separately from tracker close time ([pm-bwnclq](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-bwnclq.toon))
 - GH-711: update must support intentional unresolved parent references under strict governance ([pm-cragzs](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-cragzs.toon))
@@ -1605,6 +1675,7 @@
 
 ### Other
 
+- The agent token-surface harness from pm-a22j is wired into nothing, so output-size regressions like the 33k-token health check land undetected ([pm-dpqa3h](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/chores/pm-dpqa3h.toon))
 - Ecosystem review and deep-graph enrichment pass 2026-07-27: all-status census, CLI simplification + token-efficiency + long-term brainstorm, dedupe-checked gap filing ([pm-89qv6b](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/tasks/pm-89qv6b.toon))
 - Evaluate Sentry 10.68.0 compatibility and retain 10.67.0 ([pm-r31390](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/chores/pm-r31390.toon))
 - Derive ALL MCP tool inputSchemas from \*\_FLAG_CONTRACTS — eliminate hand-declared parallel schema tables (extend the pm_copy pattern) ([pm-xwah](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/chores/pm-xwah.toon))

package/dist/cli/after-command-context-usage.d.ts

@@ -3,19 +3,19 @@
  *
  * Records privacy-minimal context feedback after successful CLI mutations.
  */
-import { type ActiveTelemetryCommand, type TelemetryCommandOutcome } from "../sdk/runtime-primitives.js";
+import { type ActiveTelemetryCommand,type TelemetryCommandOutcome } from "../sdk/runtime-primitives.js";
 /** Inputs required to attribute one completed command's affected items. */
 export interface AfterCommandContextUsageOptions {
 /** Active tracker root. */
-pmRoot: string;
+pmRoot:string;
 /** Optional invocation-wide author override. */
-author?: string;
+author?:string;
 /** Affected item identifiers, empty for failed or read-only commands. */
-itemIds: readonly string[];
+itemIds:readonly string[];
 /** Stable command intent recorded beside derived touch rows. */
-intent: string;
+intent:string;
 }
 /** Finalizes the active telemetry command with its normalized CLI outcome. */
-export declare function finishActiveTelemetryCommand(runtime: ActiveTelemetryCommand | null, outcome: TelemetryCommandOutcome): Promise<void>;
+export declare function finishActiveTelemetryCommand(runtime:ActiveTelemetryCommand | null,outcome:TelemetryCommandOutcome):Promise<void>;
 /** Records derived touch rows through the same author resolver as mutations. */
-export declare function recordAfterCommandContextUsage(options: AfterCommandContextUsageOptions): Promise<void>;
+export declare function recordAfterCommandContextUsage(options:AfterCommandContextUsageOptions):Promise<void>;

package/dist/cli/argv-utils.d.ts

@@ -4,9 +4,9 @@
  * Provides CLI runtime support for Argv Utils.
  */
 /** Normalizes a raw long-option token into the canonical flag spelling used by CLI bootstrap parsing. */
-export declare function normalizeLongFlag(flag: string): string;
+export declare function normalizeLongFlag(flag:string):string;
 /** Implements normalize long option flag for the public runtime surface of this module. */
-export declare function normalizeLongOptionFlag(token: string): string | undefined;
+export declare function normalizeLongOptionFlag(token:string):string | undefined;
 /** Implements extract provided option flags for the public runtime surface of this module. */
-export declare function extractProvidedOptionFlags(argv: string[]): string[];
-export { quoteCommandArg, redactSensitiveCommandArgs, renderPmCommand, } from "../sdk/command-line.js";
+export declare function extractProvidedOptionFlags(argv:string[]):string[];
+export { quoteCommandArg,redactSensitiveCommandArgs,renderPmCommand,} from "../sdk/command-line.js";

package/dist/cli/bundle-integrity.d.ts

@@ -1,49 +1,49 @@
 /** Describes one hashed output recorded in the generated CLI bundle manifest. */
 export interface CliBundleManifestFile {
 /** Path relative to the directory containing the manifest. */
-path: string;
+path:string;
 /** Lowercase SHA-256 digest of the emitted file contents. */
-sha256: string;
+sha256:string;
 }
 /** Describes one atomic CLI bundle generation emitted by the build. */
 export interface CliBundleManifest {
 /** Manifest schema generation. */
-schema_version: 1;
+schema_version:1;
 /** Stable digest over the sorted file path and digest pairs. */
-generation: string;
+generation:string;
 /** Complete set of JavaScript and source-map outputs in this generation. */
-files: CliBundleManifestFile[];
+files:CliBundleManifestFile[];
 }
 /** Captures a validated manifest together with its absolute on-disk path. */
 export interface CliBundleManifestSnapshot {
 /** Absolute manifest path used for later file verification. */
-manifest_path: string;
+manifest_path:string;
 /** Validated manifest payload. */
-manifest: CliBundleManifest;
+manifest:CliBundleManifest;
 }
 /** Reports a proven partial-upgrade or concurrent-build bundle failure. */
 export interface CliBundleIntegrityDiagnostic {
 /** Stable machine-readable error code. */
-code: "bundle_integrity_torn_install";
+code:"bundle_integrity_torn_install";
 /** Actionable operator-facing recovery text. */
-message: string;
+message:string;
 /** Specific integrity proof that classified the failure. */
-reason: "generation_changed" | "manifest_missing" | "file_missing" | "hash_mismatch";
+reason:"generation_changed" | "manifest_missing" | "file_missing" | "hash_mismatch";
 /** Original module-loader failure text retained for diagnosis. */
-cause: string;
+cause:string;
 }
 /** Reads the bundle manifest next to a compiled `dist/cli.js` entrypoint. */
-export declare function readCliBundleManifestSnapshot(cliEntrypointPath: string): CliBundleManifestSnapshot | undefined;
+export declare function readCliBundleManifestSnapshot(cliEntrypointPath:string):CliBundleManifestSnapshot | undefined;
 /**
  * Returns a diagnostic only when a module-loader failure coincides with a changed,
  * missing, or hash-invalid bundle generation. Unproven module failures return
  * `undefined` so the original exception remains release-blocking.
  */
-export declare function diagnoseCliBundleIntegrityFailure(error: unknown, initialSnapshot: CliBundleManifestSnapshot | undefined, cliEntrypointPath: string): CliBundleIntegrityDiagnostic | undefined;
+export declare function diagnoseCliBundleIntegrityFailure(error:unknown,initialSnapshot:CliBundleManifestSnapshot | undefined,cliEntrypointPath:string):CliBundleIntegrityDiagnostic | undefined;
 /**
  * Loads and runs the CLI while converting only manifest-proven torn-bundle
  * failures into a handled recovery diagnostic.
  */
-export declare function runCliWithBundleIntegrity(args: string[], cliEntrypointPath: string, loadMain: () => Promise<{
-runPmCli: (invocationArgs: string[]) => Promise<void>;
-}>, writeStderr: (message: string) => void): Promise<void>;
+export declare function runCliWithBundleIntegrity(args:string[],cliEntrypointPath:string,loadMain:() => Promise<{
+runPmCli:(invocationArgs:string[]) => Promise<void>;
+}>,writeStderr:(message:string) => void):Promise<void>;

package/dist/cli/command-namespaces.d.ts

@@ -6,4 +6,4 @@
  */
 import type { Command } from "commander";
 /** Relocate existing handlers; the early pass moves only parents needed by package facets. */
-export declare function installCommandNamespaces(program: Command, parentsOnly?: boolean): void;
+export declare function installCommandNamespaces(program:Command,parentsOnly?:boolean):void;

package/dist/cli/commander-usage.d.ts

@@ -8,66 +8,66 @@ import { type CliFlagContract } from "../sdk/cli-contracts.js";
 import { type CommanderGuidanceContext } from "./error-guidance.js";
 import type { ExtensionCommandHelpDescriptor } from "./extension-command-help.js";
 /** Supported values accepted by the builtin type help contract. */
-export declare const BUILTIN_TYPE_HELP_VALUES: string;
+export declare const BUILTIN_TYPE_HELP_VALUES:string;
 /** Documents the commander usage context payload exchanged by command, SDK, and package integrations. */
 export interface CommanderUsageContext extends CommanderGuidanceContext {
 /** Normalized invocation retained for recovery and transport accounting. */
-normalizedInvocationArgs: string[];
+normalizedInvocationArgs:string[];
 /** Human-readable explanation suitable for logs and agent-facing output. */
-message: string;
+message:string;
 /** Value that configures or reports command name for this contract. */
-commandName: string | undefined;
+commandName:string | undefined;
 /** Value that configures or reports allowed types for this contract. */
-allowedTypes: string;
+allowedTypes:string;
 }
 /** Bounded extension activation failure appended to unknown-command guidance. */
 export interface CommanderExtensionFailure {
 /** Extension resolution layer that produced the failure. */
-layer: string;
+layer:string;
 /** Installed extension identity. */
-name: string;
+name:string;
 /** Actionable activation error without raw extension state. */
-error: string;
+error:string;
 /** Whether this failed extension statically declares the attempted command. */
-declared_command_match?: boolean;
+declared_command_match?:boolean;
 /** Bounded repair and diagnostic commands. */
-recovery_commands?: string[];
+recovery_commands?:string[];
 }
 /** Append extension activation failures to text or JSON Commander usage output. */
-export declare function appendCommanderExtensionFailures(renderedUsage: string, json: boolean, failures: CommanderExtensionFailure[]): string;
+export declare function appendCommanderExtensionFailures(renderedUsage:string,json:boolean,failures:CommanderExtensionFailure[]):string;
 /** Resolve the unknown command token from help or ordinary invocation syntax. */
-export declare function resolveUnknownCommanderToken(invocationArgv: string[]): string;
+export declare function resolveUnknownCommanderToken(invocationArgv:string[]):string;
 /** Implements collect runtime command paths for the public runtime surface of this module. */
-export declare function collectRuntimeCommandPaths(root: Command, extensionDescriptors: ReadonlyMap<string, ExtensionCommandHelpDescriptor>): string[];
+export declare function collectRuntimeCommandPaths(root:Command,extensionDescriptors:ReadonlyMap<string,ExtensionCommandHelpDescriptor>):string[];
 /** Implements score command path match for the public runtime surface of this module. */
-export declare function scoreCommandPathMatch(commandPath: string, queryToken: string): number;
-declare function resolveOptionalPackageInstallHint(commandPath: string): {
-packageAlias: string;
-canonicalPath: string;
-installCommand: string;
+export declare function scoreCommandPathMatch(commandPath:string,queryToken:string):number;
+declare function resolveOptionalPackageInstallHint(commandPath:string):{
+packageAlias:string;
+canonicalPath:string;
+installCommand:string;
 } | null;
-declare function collectInstalledPackageCommandPathHints(unknownToken: string, extensionDescriptors: ReadonlyMap<string, ExtensionCommandHelpDescriptor>): string[];
-declare function collectKnownLongFlags(commandName: string | undefined, contractsOverride?: CliFlagContract[]): string[];
-declare function suggestNearestLongFlags(unknownOption: string, knownFlags: string[]): string[];
+declare function collectInstalledPackageCommandPathHints(unknownToken:string,extensionDescriptors:ReadonlyMap<string,ExtensionCommandHelpDescriptor>):string[];
+declare function collectKnownLongFlags(commandName:string | undefined,contractsOverride?:CliFlagContract[]):string[];
+declare function suggestNearestLongFlags(unknownOption:string,knownFlags:string[]):string[];
 /** Build inspection-only recovery from installed commands, preserving tracker scope and explicit extension policy in executable retries. */
-export declare function buildUnknownCommandGuidanceFromRuntime(rawMessage: string, root: Command, extensionDescriptors: ReadonlyMap<string, ExtensionCommandHelpDescriptor>, invocationArgv?: readonly string[]): CommanderGuidanceContext | undefined;
+export declare function buildUnknownCommandGuidanceFromRuntime(rawMessage:string,root:Command,extensionDescriptors:ReadonlyMap<string,ExtensionCommandHelpDescriptor>,invocationArgv?:readonly string[]):CommanderGuidanceContext | undefined;
 /** Implements resolve child command by token for the public runtime surface of this module. */
-export declare function resolveChildCommandByToken(parent: Command, token: string): Command | undefined;
+export declare function resolveChildCommandByToken(parent:Command,token:string):Command | undefined;
 /** Implements check whether known help command path for the public runtime surface of this module. */
-export declare function isKnownHelpCommandPath(root: Command, commandPathTokens: string[]): boolean;
-declare function resolveSuggestedRetryForMissingOption(message: string, invocationArgv: string[]): string | undefined;
+export declare function isKnownHelpCommandPath(root:Command,commandPathTokens:string[]):boolean;
+declare function resolveSuggestedRetryForMissingOption(message:string,invocationArgv:string[]):string | undefined;
 /** Resolve runtime command ownership, workspace types and executable recovery guidance for a parser refusal. */
-export declare function resolveCommanderUsageContext(error: unknown, rootProgram: Command, extensionDescriptors: ReadonlyMap<string, ExtensionCommandHelpDescriptor>, guidanceOverrides?: Partial<CommanderGuidanceContext>, invocationArgs?: readonly string[]): Promise<CommanderUsageContext>;
+export declare function resolveCommanderUsageContext(error:unknown,rootProgram:Command,extensionDescriptors:ReadonlyMap<string,ExtensionCommandHelpDescriptor>,guidanceOverrides?:Partial<CommanderGuidanceContext>,invocationArgs?:readonly string[]):Promise<CommanderUsageContext>;
 /** Implements format commander usage message for the public runtime surface of this module. */
-export declare function formatCommanderUsageMessage(error: unknown, rootProgram: Command, extensionDescriptors: ReadonlyMap<string, ExtensionCommandHelpDescriptor>, guidanceOverrides?: Partial<CommanderGuidanceContext>, invocationArgs?: readonly string[]): Promise<string>;
+export declare function formatCommanderUsageMessage(error:unknown,rootProgram:Command,extensionDescriptors:ReadonlyMap<string,ExtensionCommandHelpDescriptor>,guidanceOverrides?:Partial<CommanderGuidanceContext>,invocationArgs?:readonly string[]):Promise<string>;
 /** Implements format commander usage json for the public runtime surface of this module. */
-export declare function formatCommanderUsageJson(error: unknown, rootProgram: Command, extensionDescriptors: ReadonlyMap<string, ExtensionCommandHelpDescriptor>, lean?: boolean, guidanceOverrides?: Partial<CommanderGuidanceContext>, invocationArgs?: readonly string[]): Promise<string>;
+export declare function formatCommanderUsageJson(error:unknown,rootProgram:Command,extensionDescriptors:ReadonlyMap<string,ExtensionCommandHelpDescriptor>,lean?:boolean,guidanceOverrides?:Partial<CommanderGuidanceContext>,invocationArgs?:readonly string[]):Promise<string>;
 /** Public contract for test only, shared by SDK and presentation-layer consumers. */
-export declare const _testOnly: {
-collectKnownLongFlags: typeof collectKnownLongFlags;
-collectInstalledPackageCommandPathHints: typeof collectInstalledPackageCommandPathHints;
-resolveOptionalPackageInstallHint: typeof resolveOptionalPackageInstallHint;
-resolveSuggestedRetryForMissingOption: typeof resolveSuggestedRetryForMissingOption;
-suggestNearestLongFlags: typeof suggestNearestLongFlags;
+export declare const _testOnly:{
+collectKnownLongFlags:typeof collectKnownLongFlags;
+collectInstalledPackageCommandPathHints:typeof collectInstalledPackageCommandPathHints;
+resolveOptionalPackageInstallHint:typeof resolveOptionalPackageInstallHint;
+resolveSuggestedRetryForMissingOption:typeof resolveSuggestedRetryForMissingOption;
+suggestNearestLongFlags:typeof suggestNearestLongFlags;
 };
 export {};

package/dist/cli/commands/governance/validate.d.ts

@@ -6,4 +6,4 @@
 import { runValidate as runSdkValidate } from "../../../sdk/governance/validate.js";
 export * from "../../../sdk/governance/validate.js";
 /** Run SDK validation with the CLI's canonical audited update mutation service. */
-export declare const runValidate: (options: Parameters<typeof runSdkValidate>[0], global: Parameters<typeof runSdkValidate>[1]) => Promise<import("../../../sdk/governance/validate.js").ValidateResult | import("../../../sdk/governance/validate.js").ValidateCountsResult>;
+export declare const runValidate:(options:Parameters<typeof runSdkValidate>[0],global:Parameters<typeof runSdkValidate>[1]) => Promise<import("../../../sdk/governance/validate.js").ValidateResult | import("../../../sdk/governance/validate.js").ValidateCountsResult>;

package/dist/cli/commands/history/history-compact.d.ts

@@ -4,4 +4,4 @@
  * Presentation compatibility shim for public SDK history compaction. The SDK
  * owns checkpointing, pruning, integrity verification, and bulk target policy.
  */
-export { assertHistoryCompactTarget, runHistoryCompact, runHistoryCompactBulk, } from "../../../sdk/history-compact.js";
+export { assertHistoryCompactTarget,runHistoryCompact,runHistoryCompactBulk,} from "../../../sdk/history-compact.js";

package/dist/cli/commands/history/history-redact.d.ts

@@ -5,4 +5,4 @@
  * primitive. CLI registration imports this module so extensions and existing
  * integrations keep a stable command path while all domain logic is SDK-owned.
  */
-export { _testOnly, runHistoryRedact, } from "../../../sdk/history-redact.js";
+export { _testOnly,runHistoryRedact,} from "../../../sdk/history-redact.js";

package/dist/cli/commands/history/history-repair.d.ts

@@ -4,4 +4,4 @@
  * Presentation compatibility shim for the public SDK history-repair
  * primitives. The SDK owns replay, re-anchor, rollback, and bulk repair logic.
  */
-export { assertHistoryRepairTarget, runHistoryRepair, runHistoryRepairAll, type HistoryRepairAllResult, } from "../../../sdk/history-repair.js";
+export { assertHistoryRepairTarget,runHistoryRepair,runHistoryRepairAll,type HistoryRepairAllResult,} from "../../../sdk/history-repair.js";

package/dist/cli/commands/history/restore.d.ts

@@ -3,4 +3,4 @@
  *
  * Preserves the CLI import path while the restore transaction is owned by the SDK.
  */
-export { _testOnlyRestoreCommand, runRestore, } from "../../../sdk/lifecycle/restore.js";
+export { _testOnlyRestoreCommand,runRestore,} from "../../../sdk/lifecycle/restore.js";

package/dist/cli/commands/lifecycle/close.d.ts

@@ -3,4 +3,4 @@
  *
  * Compatibility presentation shim for the SDK-owned close-item operation.
  */
-export { _testOnlyCloseCommand, runClose, } from "../../../sdk/lifecycle/close.js";
+export { _testOnlyCloseCommand,runClose,} from "../../../sdk/lifecycle/close.js";

package/dist/cli/commands/lifecycle/copy.d.ts

@@ -3,4 +3,4 @@
  *
  * Preserves the CLI import path while copy lifecycle behavior is owned by the SDK.
  */
-export { runCopy, } from "../../../sdk/lifecycle/copy.js";
+export { runCopy,} from "../../../sdk/lifecycle/copy.js";

package/dist/cli/commands/lifecycle/delete.d.ts

@@ -3,4 +3,4 @@
  *
  * Preserves the CLI import path while the delete transaction is owned by the SDK.
  */
-export { runDelete, } from "../../../sdk/lifecycle/delete.js";
+export { runDelete,} from "../../../sdk/lifecycle/delete.js";

package/dist/cli/commands/lifecycle/focus.d.ts

@@ -3,4 +3,4 @@
  *
  * Preserves the CLI import path while focus lifecycle behavior is owned by the SDK.
  */
-export { runFocus, } from "../../../sdk/lifecycle/focus.js";
+export { runFocus,} from "../../../sdk/lifecycle/focus.js";

package/dist/cli/commands/query/get.d.ts

@@ -3,4 +3,4 @@
  *
  * Preserves the CLI import path while item retrieval is owned by the SDK.
  */
-export { _testOnlyGetCommand, runGet, } from "../../../sdk/query/get.js";
+export { _testOnlyGetCommand,runGet,} from "../../../sdk/query/get.js";

package/dist/cli/commands/workspace/merge.d.ts

@@ -5,4 +5,4 @@
  * primitives. The SDK owns the three-way merge semantics, the git merge
  * driver runner, and the repository merge-configuration installer.
  */
-export { MERGE_DRIVER_ARTIFACT_VALUES, runMergeDriver, runMergeInstall, runMergeReceiptEvidenceReport, runMergeReconcile, } from "../../../sdk/merge/index.js";
+export { MERGE_DRIVER_ARTIFACT_VALUES,runMergeDriver,runMergeInstall,runMergeReceiptEvidenceReport,runMergeReconcile,} from "../../../sdk/merge/index.js";

package/dist/cli/commands/workspace/schema.d.ts

@@ -4,4 +4,4 @@
  * Preserves the CLI command-module contract while schema behavior, result
  * types, and rendering helpers are owned by the public SDK module.
  */
-export { SCHEMA_SUBCOMMANDS, _testOnlySchemaCommand, formatSchemaAddFieldHuman, formatSchemaAddStatusHuman, formatSchemaAddTypeHuman, formatSchemaApplyPresetHuman, formatSchemaEvolutionMigrationHuman, formatSchemaInferTypesHuman, formatSchemaListFieldsHuman, formatSchemaListHuman, formatSchemaRemoveFieldHuman, formatSchemaRemoveStatusHuman, formatSchemaRemoveTypeHuman, formatSchemaShowFieldHuman, formatSchemaShowHuman, formatSchemaShowStatusHuman, runSchemaAddField, runSchemaAddStatus, runSchemaAddType, runSchemaApplyPreset, runSchemaEvolutionMigration, runSchemaInferTypes, runSchemaList, runSchemaListFields, runSchemaRemoveField, runSchemaRemoveStatus, runSchemaRemoveType, runSchemaShow, runSchemaShowField, runSchemaShowStatus, runWorkflowPolicyAction, } from "../../../sdk/schema.js";
+export { SCHEMA_SUBCOMMANDS,_testOnlySchemaCommand,formatSchemaAddFieldHuman,formatSchemaAddStatusHuman,formatSchemaAddTypeHuman,formatSchemaApplyPresetHuman,formatSchemaEvolutionMigrationHuman,formatSchemaInferTypesHuman,formatSchemaListFieldsHuman,formatSchemaListHuman,formatSchemaRemoveFieldHuman,formatSchemaRemoveStatusHuman,formatSchemaRemoveTypeHuman,formatSchemaShowFieldHuman,formatSchemaShowHuman,formatSchemaShowStatusHuman,runSchemaAddField,runSchemaAddStatus,runSchemaAddType,runSchemaApplyPreset,runSchemaEvolutionMigration,runSchemaInferTypes,runSchemaList,runSchemaListFields,runSchemaRemoveField,runSchemaRemoveStatus,runSchemaRemoveType,runSchemaShow,runSchemaShowField,runSchemaShowStatus,runWorkflowPolicyAction,} from "../../../sdk/schema.js";

package/dist/cli/context-intent-invocation.d.ts

@@ -1,2 +1,2 @@
 /** Load active-package context intents only when an invocation can consume them. */
-export declare function loadContextIntentSnapshotForInvocation<Snapshot>(invocationArgv: string[], pmRoot: string, noExtensions: boolean, loadSnapshot: (root: string) => Promise<Snapshot | null>): Promise<Snapshot | null>;
+export declare function loadContextIntentSnapshotForInvocation<Snapshot>(invocationArgv:string[],pmRoot:string,noExtensions:boolean,loadSnapshot:(root:string) => Promise<Snapshot | null>):Promise<Snapshot | null>;

package/dist/cli/description-stdin.d.ts

@@ -1,2 +1,2 @@
 /** Replace a description stdin sentinel with the complete standard-input payload. */
-export declare function resolveDescriptionStdin(options: Record<string, unknown>): Promise<void>;
+export declare function resolveDescriptionStdin(options:Record<string,unknown>):Promise<void>;