@unbrained/pm-cli 2026.10.30 → 2026.11.1

package/docs/CONFIGURATION.md

@@ -110,7 +110,43 @@ capture an opaque boot/PID-namespace coordinate and the owner's process start
 tick. A matching host can reclaim a provably dead original owner before TTL,
 including when its PID has been reused. Foreign hosts, legacy receipts, denied
 process probes and unavailable identity remain subject to the existing TTL
-policy. Early recovery writes an immutable `locks/recoveries/*.json` intent
+policy. A commit gate with a provably dead same-host owner can also be recovered
+immediately, before its ordinary age threshold. Its original owner receipt is
+retained in `locks/recoveries/gate-<generation-hash>/owner.json`. These nonempty
+generation directories prevent concurrent recoverers from retiring a replacement
+gate and must be retained while writers may still hold observations of that
+generation. Recovery after the age grace requires a dead PID or verified PID
+reuse for a readable owner, and uses the same retained generation protocol.
+A live PID with unavailable start identity keeps its gate regardless of age;
+elapsed time alone cannot safely distinguish a paused writer from abandonment.
+Recorded host coordinates must be verified before recovery; a recorded foreign
+host or unavailable recorded host evidence cannot be replaced by a local PID
+comparison. Legacy receipts without `host_identity` use a local PID probe after
+the grace period. On shared storage, that probe can retire a gate owned by a
+writer on another host whose PID appears dead locally; these legacy receipts
+do not provide cross-host recovery safety.
+Non-missing owner-file read errors also retain the gate regardless of age.
+Lock wait durations use a monotonic clock independently of the
+wall-clock timestamps used for TTL policy. This recovery is tracked by
+[pm-gh1609](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-gh1609.toon)
+(repository tracker record excluded from npm).
+
+If a reboot, PID-namespace change or tracker relocation leaves an unverifiable
+`locks/<lock-file>.stale-cleanup` gate, automatic age-based recovery intentionally
+refuses it. `pm gc --scope locks` does not remove these gate directories.
+For manual recovery, first stop every CLI, MCP server, watcher and service that
+can write this tracker, including writers on other hosts when storage is shared.
+Independently establish that the recorded original owner cannot still run; a
+different host hash or an old timestamp alone is insufficient. While exclusive
+access is maintained, preserve the complete gate directory and its `owner.json`
+receipt by moving it to a unique backup location outside `locks`, without
+overwriting any existing backup. Keep `locks/recoveries` evidence intact. Then
+retry the original command, run `pm health --check-only`, and verify the affected
+item's history with `pm history <id> --verify --strict-exit`. If exclusive access
+or owner death cannot be established, retain the gate and investigate ownership.
+This procedure does not override the remaining lease's TTL or ownership checks.
+
+Early recovery writes an immutable `locks/recoveries/*.json` intent
 receipt before removal; it records the original owner and is an attempted
 recovery audit, not proof that a later mutation committed. Keep these local
 runtime receipts out of version control.
@@ -390,6 +426,16 @@ pm get <id> --full --json
 pm contracts --json
 ```
 
+With JSON output, preflight advisories are deferred until the command outcome.
+A failed command includes their stable codes in the error envelope's `warnings`
+array on stderr, preserving one parseable error and its original exit code.
+Additional explanatory or remediation text is retained in `warning_details`.
+A successful command emits one `{ "type": "warning", "warnings": [...] }`
+diagnostic on stderr when needed; its result remains on stdout. Human output
+keeps immediate warning text. See
+[pm-gh1602](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-gh1602.toon)
+(repository tracker record excluded from npm).
+
 `--output-format json|toon` selects encoding on both reads and mutations.
 Item collection and lifecycle commands accept `--format json|toon` as a
 compatibility alias, before or after the command:
@@ -593,6 +639,7 @@ Useful commands:
 
 ```bash
 pm config project set search_default_mode keyword
+pm config project set context_next_ranking_policy weighted   # pm next: priority_floor (default) or weighted
 pm config project set search_mutation_refresh_policy cache_only
 pm config project set search_embedding_corpus_max_characters 12000
 pm config project set search_query_expansion_enabled true

package/docs/DEVELOPMENT_DEPENDENCY_SECURITY.md

@@ -130,6 +130,32 @@ patterns, absolute paths and invocation-relative anchoring remain supported.
 The regression uses a real temporary directory and the same deeply nested input
 that failed before the replacement. Audit errors remain mandatory failures.
 
+## Redirect credential and glob amplification advisories
+
+[pm-irviv0](../.agents/pm/issues/pm-irviv0.toon) tracks
+[GHSA-mrwp-f3q8-3g9p](https://github.com/advisories/GHSA-mrwp-f3q8-3g9p)
+(`follow-redirects` 1.16.0 through 1.16.1: cross-realm `sensitiveHeaders`
+arrays are discarded, so custom credentials can follow redirects) and
+[GHSA-g3hv-75wg-m249](https://github.com/advisories/GHSA-g3hv-75wg-m249)
+(`minimatch` before 11.0.1: denial of service through glob-part
+amplification). Both were published on October 30 and the registry feed
+reported them from the next run on `main` while OSV was still clean, so the
+advisory gate refused every PR and the scheduled release path until the lock
+changed. `follow-redirects` is reached only through the CodSpeed benchmark
+plugin's Axios client, and `minimatch` through ESLint and its config array
+and as a direct dependency of `@stryker-mutator/core` (mutation testing); all
+of these are development dependencies and none establishes a CLI or SDK
+route. The pnpm overrides require `follow-redirects` 1.16.2 or a newer
+1.x release and `minimatch` 11.0.1 or a newer 11.x release. `minimatch` 11
+keeps dual CommonJS and ES module exports, so ESLint's `require` path is
+unchanged and the full lint run passes; the override applies to the Stryker
+path as well. Both releases satisfy pnpm's one-day
+minimum release age without an exclusion; the seven-day Dependabot cooldown
+is unchanged. The gate's catch-all refusal said that no feed success could be
+inferred, which hid the real cause (a non-empty registry id list); read
+`.cache/dependency-security/receipt.json` before treating that message as a
+feed outage.
+
 ## CodSpeed 5.7.1 patch
 
 CodSpeed's declared dependency previously resolved Axios 1.19.0, and both

package/docs/LIFECYCLE_COMMANDS.md

@@ -33,9 +33,22 @@ stdin selection, dry runs, rollback behavior, and evidence flags. Put bulk flags
 after `many`. Deletion recovery remains `pm history restore <id> <version>`.
 
 Plain `claim`, `release`, `update`, and `close` keep their original semantics.
-`claim --start` requires an explicit item and rejects `--next` and
-`--if-available` before mutation. It claims ownership, then moves the item to the
-configured in-progress status. `release --pause` moves work to the configured
+`claim <id> --start` rejects `--if-available` before mutation. It claims
+ownership, then moves the item to the configured in-progress status.
+`claim --next --start` selects the next caller-available item with the same
+filters, `--if-available` behavior, and race-loss walk as `claim --next`.
+Ranking happens before any lock, so a candidate can change before it is
+claimed. Each attempt re-reads the candidate under its item lock and then
+claims it and moves it to the configured in-progress status in one locked
+mutation and one `claim` history event. No other agent can therefore observe
+the claimed item before it starts. Configured type workflows are enforced, a
+terminal candidate is refused (`terminal_state_conflict`), and the receipt
+carries `start: { from_status, to_status }`. A claim without an id or `--next`
+is refused with `missing_required_argument`, and `claim <id> --next` with
+`ambiguous_option_combination`; their next steps never tell the caller to pass
+a flag that is already present. `claim <id> --start --next` (or
+`--if-available`) is refused by the explicit-start composition with
+`invalid_argument_value`, whose recovery names the flags to remove. `release --pause` moves work to the configured
 open status, then releases ownership. `close --release-assignment` records the
 close and its inline evidence, then releases ownership.
 
@@ -67,6 +80,7 @@ import { PmClient } from "@unbrained/pm-cli/sdk";
 
 const pm = new PmClient({ pmRoot: "/project/.agents/pm" });
 const started = await pm.claim("pm-example", { start: true });
+const nextStarted = await pm.claimNext({ start: true }); // ranked selection, then one locked claim-and-start write
 const paused = await pm.release("pm-example", { pause: true });
 const closed = await pm.close("pm-example", "Acceptance verified", {
   releaseAssignment: true,
@@ -84,7 +98,8 @@ Literal `true` options return typed `StartTaskResult`, `PauseTaskResult`, or
 `runCloseTask` primitives expose the same SDK-owned compositions.
 
 MCP actions remain `claim`, `release`, and `close`, using `start`, `pause`, and
-`releaseAssignment`. Action-specific discovery types claim's `start` as boolean;
+`releaseAssignment`. MCP `claim` with `next: true` and `start: true` uses the
+same ranked selection and single locked claim-and-start write as `claim --next --start`. Action-specific discovery types claim's `start` as boolean;
 scheduling actions retain string timestamps. For the broad provider tool schema,
 pass the claim boolean through `options: { start: true }` because its shared flat
 `start` property retains the scheduling string contract. Bulk action names remain

package/docs/PACKED_FIRST_RUN.md

@@ -6,7 +6,8 @@ Trackers: [pm-ygli86](../.agents/pm/tasks/pm-ygli86.toon),
 [pm-p5u6](../.agents/pm/chores/pm-p5u6.toon).
 
 CI globally installs one tarball in isolated npm prefixes on Ubuntu/macOS/Windows
-with Node 22.18.0 and 24, runs the installed `pm` shim, then invokes:
+with Node 22.18.0 and 24, one `Packed runtime (<os>)` job per OS with a fresh
+prefix, cache and home per Node version, runs the installed `pm` shim, then invokes:
 
 ```bash
 node scripts/release/packed-first-run.mjs /path/to/installed/@unbrained/pm-cli

package/docs/READ_OUTPUT_CONTRACTS.md

@@ -221,12 +221,30 @@ Read-option recovery is tracked by
 use `--output-format toon|json` across read commands. Completeness uses
 `--output-include full` on list, search and get; context detail depth uses
 `--depth full`. These controls retain the normal row and token ceilings.
-When `context --full`, `list/search --depth full`, or `--toon` on list, search,
-context or get is refused,
-the error provides `recovery.suggested_retry_args` for the same command with the
-supported spelling. The SDK's `resolveReadOptionRetryArgs` exposes the same
-token-preserving correction. Conflicting controls or ambiguous operands do not
-receive a guessed retry.
+When a completeness spelling is refused on a read command that has an
+equivalent spelling of its own, the error provides
+`recovery.suggested_retry_args` for that same command. Examples are
+`get/context --brief`, which becomes `--depth brief`, and
+`list/search/history --depth full`, which becomes `--full`. The same applies to
+`--toon` on list, search, context or get, which becomes `--output-format toon`.
+The correction is derived from runtime contracts, not from a hand-maintained
+list. A boolean `--<level>` maps to `--depth <level>` only when that command's
+`--depth` flag contract declares the level in its `values` domain. A
+`--depth <level>` maps to `--<level>` only when the level is one of the
+command's declared read-output projection modes. `--depth standard` on a
+command without `--depth` replays without the flag, because standard is every
+command's default level. Aliased paths such as `deps` and `health` replay on
+their canonical noun-first path (`pm item deps`, `pm ops health`). When a
+command has no equivalent, for example `search --depth brief`, no retry is
+guessed. The refusal instead lists the controls that command accepts: for
+search, `Completeness controls accepted by pm search: --compact, --full.`
+([pm-gh1626](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-gh1626.toon);
+repository-only tracker record excluded from npm). The SDK's
+`resolveReadOptionRetryArgs` exposes the same token-preserving correction, and
+`resolveReadCompletenessControls` returns each command's declared vocabulary.
+Conflicting controls such as `--fields`, `--output-include`, `--section`, `--for`
+or another completeness flag, and ambiguous operands, do not receive a guessed
+retry.
 An explicit `--json` conflicts with `--toon`, so that invocation receives no
 encoding-changing retry. Non-conflicting TOON refusals include the corrected
 command in human output without requiring JSON diagnostics.

package/docs/SDK.md

@@ -278,7 +278,17 @@ async function writePackageState(pmRoot: string, write: () => Promise<void>) {
 ```
 
 The built-in provider automatically recovers a provably dead original Linux
-owner before TTL. Unknown owners retain the existing lease policy. Conflicts
+owner before TTL, including an owner killed inside its commit fence. Recovery
+retains the gate generation as evidence so concurrent recoverers cannot
+remove its replacement, including recovery after the age grace when a dead PID
+or verified PID reuse establishes abandonment. A readable gate with a live PID
+and unavailable start identity is retained regardless of age. An unreadable
+gate owner is also retained; age and failed reads do not prove abandonment.
+Recorded host coordinates must be verified; a local PID comparison cannot
+authorize recovery of foreign or unverifiable host evidence.
+Acquisition, commit-gate and release wait budgets use
+a monotonic clock; wall-clock adjustments do not extend those budgets.
+Unknown owners retain the existing lease policy. Conflicts
 expose the lock identity, observed process state, `waited_ms`, observed
 `owner_handoffs` and wait advice through `PmCliError.context`. The wait budget
 is a fixed total by default. Pass `{ waitPolicy: "progress" }` in the options
@@ -675,7 +685,7 @@ import {
   parseMutationReceipt,
   estimatePmOutputTokens,
   resolvePmCommandOutputBudget,
-} from "@unbraind/pm-cli/sdk/contracts";
+} from "@unbrained/pm-cli/sdk/contracts";
 
 const compactRead = definePmCommandOutputBudget({
   command: "get",
@@ -2040,6 +2050,19 @@ contract compact and fail-safe for newly added flags. Use
 package-authored query surface. `encodeQueryCursor`, `decodeQueryCursorState`, and
 `paginateQueryRows` remain the transport-neutral continuation primitives.
 
+A flag with a closed value domain declares it in `CliFlagContract.values`. For
+example, `get` and `context` declare `--depth brief|standard|deep|full`, and
+`plan` declares `--depth brief|standard|deep`, so `pm contracts --command <c>
+--flags-only --json` shows the accepted spellings without parsing help prose.
+`resolveReadCompletenessControls(command)` combines that domain with the
+command's read-output projection modes. `resolveReadOptionRetryArgs` uses the
+result to correct a completeness spelling only into a flag the attempted
+command declares
+([pm-gh1626](../.agents/pm/issues/pm-gh1626.toon)). A flag that accepts a
+comma-separated value list declares `list: true`. `--unset` on create, update
+and update-many does, so repeated flags and comma lists reach the parser as the
+same field set ([pm-gh1633](../.agents/pm/issues/pm-gh1633.toon)).
+
 `decodeQueryCursorEnvelope`, `decodeQueryCursorState`, and
 `resolveQueryCursorStart` accept an optional final `cursorFlag` argument
 (`"--after"`, the default, or `"--cursor"`) so package-authored queries can
@@ -2117,7 +2140,15 @@ Custom agent hosts can import `projectPmBriefListEnvelope` from
 `@unbrained/pm-cli/sdk` to apply the same brief-list presentation without
 mutating the original result. It retains unchecked source status and actionable
 continuation, and leaves partial, custom, or inconsistent envelopes intact.
-The CLI applies this projection only to TOON; ordinary JSON and SDK query
+`projectPmBriefSearchEnvelope` does the same for search pages. It drops
+`truncated` when it repeats `has_more` and a `filters.limit` echo of
+`applied_limit`, and it replaces the single default `projection_metadata`
+omission receipt with `details: "--full"`. For flat default lists, the list
+projection replaces the default ascending sort's legacy `sort`/`order` echo with
+one `effective_keys` comparator line, so the effective default order stays
+visible. Tree-mode lists carry no `effective_keys`, because hierarchy traversal
+overrides flat ordering; there the default sort echo is simply omitted.
+The CLI applies these projections only to TOON; ordinary JSON and SDK query
 results retain their complete contracts. The public `encodePmTableRows` and
 `decodePmTableRows` primitives distinguish explicit null and empty cells from
 missing keys. TOON rendering preserves those row facts before selecting the
@@ -2341,6 +2372,13 @@ const signalRead = await store.readOrRebuild(itemsFromDerivedIndex, {
 const report = await scoreContextCandidates(signalRead.candidates);
 ```
 
+`pm next` applies a ranking policy after scoring: `priority_floor` (the
+default, from `context.next_ranking_policy` or the `rankingPolicy` option)
+resumes in-progress work, then orders by priority tier with relevance inside a
+tier; `weighted` keeps the blended score order. The response discloses it as
+`filters.ranking_policy`, and the recommendation reasons name the disagreement
+when the score leader differs from the recommendation (GH-1618).
+
 Use `--explain-ranking --json` on `pm context` or `pm next` to include the model,
 available signals, baseline rank, final rank, score, and per-signal
 contributions. Explanation data is opt-in so default agent output stays bounded.
@@ -2849,6 +2887,19 @@ delivered to the registered positional arguments unchanged.
 
 ## Output Ownership
 
+Unicode output policy ([pm-gh1624](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-gh1624.toon), tracker record excluded from npm):
+the built-in JSON and TOON formatters refuse unpaired UTF-16 surrogates in
+structured output values or object keys with `text_unpaired_surrogate` and a
+field path. Custom `toJSON()` values and boxed primitives are materialized once
+per render using their native JSON semantics; the resulting snapshot is validated
+and shared by both formatters. Valid astral characters and caller data are preserved. Extension
+producers can call `assertWellFormedOutputText(value)` before returning
+JSON-compatible data. When replacing malformed external text is intentional,
+use `toWellFormedText(text)` from `@unbrained/pm-cli/sdk/core` (also available from
+`@unbrained/pm-cli/sdk`); it replaces lone
+surrogates with U+FFFD without splitting valid pairs. Apply normalization before
+constructing object keys so the producer can handle possible key collisions.
+
 Command handlers should normally return structured data and let the host select
 TOON, JSON, service, or registered renderer output. A renderer override returns a
 string when it owns the matching payload and `null` to fall back to native
@@ -2915,6 +2966,34 @@ A typo fails activation with a did-you-mean hint (e.g. `type: "strnig"` →
 `Did you mean "string"?`) instead of silently passing and failing opaquely at use
 time.
 
+## Package Error Provenance
+
+Expected package errors retain their structured `context` across separately
+bundled SDK copies. Use `createPmCliExpectedError` to declare an expected refusal.
+A custom exception carrying only `code`, `exitCode: 1` and `remediation` remains
+an unexpected fault. Sentry error attribution uses the same bounded source
+context as telemetry without requiring telemetry delivery or command tracing, with host version
+and the registered command owner's manifest version. Noninteractive traffic
+uses `automation`; explicit `test`/`dogfood` contexts retain their own environments.
+Error events and usage logs tagged `user` use `production`, including when CI was inferred at initialization.
+Early errors retain `--json` and `--quiet` automation attribution. Original
+extension causes remain available locally through the SDK; Sentry's extra error
+data integration does not copy cause payload fields into diagnostic contexts.
+Explicit `SENTRY_ENVIRONMENT`, consent and test isolation remain authoritative.
+Sequential commands clear previous extension attribution. Tracked by
+[pm-gh1625](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-gh1625.toon)
+(tracker record excluded from npm).
+
+`resolveTelemetrySourceAttribution(options?, env?, interactive?)` exposes that
+same pure attribution policy to custom SDK hosts without reading configuration,
+creating an installation identity, or sending data. Expected refusals use
+`createPmCliExpectedError`; unexpected handler failures retain their original
+non-enumerable `cause` in `CommandHandlerResult` and become
+`ExtensionCommandError` in the CLI host. The host preserves structured diagnostics
+and reports these faults as exceptions. An exception name alone cannot declare
+an expected refusal when the original error violates the public contract.
+SDK extension actions and delegated template reads retain the same failure kind.
+
 ## Expected CLI Errors
 
 `resolveLifecycleVerbRecovery(verb, availablePaths)` returns explicit argument

package/docs/SDK_ACTION_CONFORMANCE.md

@@ -90,6 +90,27 @@ ceiling. For row-oriented `list` and `search` intents, pm reports:
 - `binding_constraint` as `token_budget` or `explicit_limit`;
 - `limit_reason` with the selection rationale.
 
+When the intent budget reduces an explicit `--limit`, as with
+`pm context --for orient --limit 10` (the 3000-token orient budget carries 3
+rows), the reduction is never silent. `context_intent.limit_override` records the
+reduced `flag` (`"--limit"`), `requested`, `effective`, the
+`token_budget_for_requested` that would carry the
+request, and `restore_with`: the flag to add to (or replace in) the original
+command, so every original positional, inline filter, and option is kept. Both
+fields are omitted when no safe-integer budget can carry the request. `filters.requested_limit` sits beside the
+effective `filters.limit`, and `warnings` carries
+`limit_overridden_by_intent:--limit <requested>-><effective>`. The same applies
+to `context`, `list`, and `search` intents.
+
+MCP read tools (`pm_context`, `pm_get`, `pm_list`, `pm_next`, `pm_search`)
+accept every optional parameter their action contract declares either flat or
+under `options`. The runtime derives the flat-to-options mapping from
+`PM_TOOL_ACTION_PARAMETER_CONTRACTS`, so a declared argument such as `for`,
+`depth`, `limit`, or `tokenBudget` is never silently ignored; nested `options`
+win when both are present. Positional operands stay top-level like `pm_get`'s
+`id`: `pm_search` reads `query` (or its declared alias `keywords`) only from the
+top-level arguments.
+
 Default intent budgets retain the ordinary page cap. Explicit budgets may
 derive larger pages; recursive compaction and resumable cursor safeguards still
 enforce the final serialized token ceiling.

package/docs/TESTING.md

@@ -58,6 +58,14 @@ node scripts/run-tests.mjs test
 node scripts/run-tests.mjs coverage
 ```
 
+The Linux killed-owner integration suite always exercises Node. Its additional
+Bun case runs locally when `bun --version` succeeds; CI requires Bun and retains
+the case even when the executable is missing, so a broken CI setup fails visibly.
+Install Bun before claiming local Node-and-Bun recovery coverage. This fixture
+policy is tracked by
+[pm-gh1609](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-gh1609.toon)
+(repository tracker record excluded from npm).
+
 For the exact ordered local preflight used to make release-readiness claims,
 run the registry-owned entrypoint:
 
@@ -264,6 +272,26 @@ node scripts/run-tests.mjs test -- tests/integration/cli.integration.spec.ts
 
 Use focused runs while iterating, then run coverage before closure when risk or scope warrants it.
 
+## CI Job Layout and Runner Budget
+
+Every pull-request push draws from the account-wide hosted-runner pool (20
+concurrent jobs, 5 on macOS, shared by every repository on the account), so the
+required CI asks for as few runners as the proofs allow
+([pm-m6ig79](../.agents/pm/issues/pm-m6ig79.toon)):
+
+| Job | Runs |
+| --- | --- |
+| `Build foundation (Ubuntu, Node 24)` | Build, `dist` artifact, packed tarball. |
+| `Packed runtime (<os>)` × 3 | Packed first run on Node 22.18.0 and 24 in isolated prefixes, dist version smoke; Ubuntu adds the Node 22 telemetry and snapshot regressions, macOS the native shell and portability checks, Windows the full npm npx and Bun bunx acceptance. |
+| `Gates (static)` | Typecheck, version, changelog, secret scan, `pnpm lint` (`quality:static`), package artifact, token budgets, tracker merge-safety and assurance gates. |
+| `Gates (smokes)` | Shell completion, npx/plugin smokes, host isolation, context evaluation, compatibility migration and published workspace compatibility. |
+| `Coverage shard N/4` × 4, `Gates (coverage)` | Sharded coverage, then the merged 100% threshold. |
+| `Windows regression cohort` × 3, `Windows regression (Node 24)` | Script and native Windows cohorts, all running at once, then their aggregate. |
+
+Add a proof as a step inside the job that owns its platform and runtime rather
+than as a new job: a sub-minute job still waits in the shared queue before it
+starts.
+
 ## CI Retry and Timeout Diagnostics
 
 The required `Gates (coverage)` job runs after the coverage matrix settles and
@@ -759,8 +787,9 @@ pm test <item-id> --run --workspace-context snapshot --override-linked-workspace
   Node 24 releases retain the same dangling-link behavior; the async `stat`
   `throwIfNoEntry` option was added in
   [Node 24.15](https://nodejs.org/download/release/v24.20.0/docs/api/fs.html#fspromisesstatpath-options).
-  The real filesystem and CLI snapshot suite runs in the required Node 22
-  telemetry regression job and native Windows regression job before merge.
+  The real filesystem and CLI snapshot suite runs on Node 22 in the required
+  `Packed runtime (ubuntu-latest)` job and in the native Windows regression job
+  before merge.
 
   Windows execution is tracked by [pm-bj7rq0](../.agents/pm/issues/pm-bj7rq0.toon).
   Script and native keeper cohorts run independently on Windows Node 24. Their
@@ -878,6 +907,13 @@ pm test <item-id> --run --only-index 2
 pm test <item-id> --run --only-last
 ```
 
+A selective run's receipt lists only the tests it selected. When the
+receipt includes `tests_omitted`, copy and run the complete
+`tests_omitted.restore_with` command to read the whole stored collection. It
+keeps the invocation's `--pm-path` (including a tracker chosen through
+`PM_PATH`) and `--no-extensions`, which a bare `pm test <item-id> --list` would
+drop.
+
 Linked-command stdout and stderr are captured through temporary regular files,
 then read back with the 20 MiB per-stream retention bound. This keeps inherited
 descriptors blocking for Bun, Rust, and other runtimes that treat `EAGAIN` on a

package/docs/agent-task-token-baseline.json

@@ -1 +1 @@
-{"version":5,"transcript_version":2,"transcript_digest":"sha256:83d4523ca528ad5e8801cf5c7c02dcebbf2b87dc72422d4b8e648755dcdc36c2","estimator":"ceil(utf8_bytes / 4)","comparison_scope":"plan_recovery_tracker_root_canonicalized","measurement_scope":"output_before_token_accounting","published_with_release":true,"orientation":{"canonical_task_id":"orientation-context-intent","required_capabilities":["actionable_work","active_ownership","workspace_state"],"measured_winner_tokens":1087,"protocols":[{"task_id":"orientation-context-intent","command_count":1,"estimated_tokens":1087,"capabilities":["actionable_work","active_ownership","workspace_state"],"capability_evidence":{"actionable_work":[{"step_id":"context","field_path":"hierarchy"}],"active_ownership":[{"step_id":"context","field_path":"activity"}],"workspace_state":[{"step_id":"context","field_path":"summary.active_items"}]}},{"task_id":"orientation-operating-rules","command_count":4,"estimated_tokens":2139,"capabilities":["actionable_work","active_ownership","workspace_state"],"capability_evidence":{"actionable_work":[{"step_id":"open","field_path":"items"}],"active_ownership":[{"step_id":"in-progress","field_path":"items"}],"workspace_state":[{"step_id":"context","field_path":"summary.active_items"}]}},{"task_id":"orientation-contracts-next","command_count":2,"estimated_tokens":5203,"capabilities":["actionable_work","active_ownership","workspace_state"],"capability_evidence":{"actionable_work":[{"step_id":"next","field_path":"recommended.id"}],"active_ownership":[{"step_id":"next","field_path":"held_by_others"}],"workspace_state":[{"step_id":"next","field_path":"summary.in_progress"}]}}]},"tasks":[{"id":"orientation-context-intent","max_estimated_tokens":1087,"steps":[{"id":"context","max_estimated_tokens":1087,"accounting_mode":"self_reported"}]},{"id":"orientation-contracts-next","max_estimated_tokens":5203,"steps":[{"id":"contracts","max_estimated_tokens":4481,"accounting_mode":"self_reported"},{"id":"next","max_estimated_tokens":722,"accounting_mode":"self_reported"}]},{"id":"orientation-operating-rules","max_estimated_tokens":2139,"steps":[{"id":"context","max_estimated_tokens":1087,"accounting_mode":"self_reported"},{"id":"search","max_estimated_tokens":164,"accounting_mode":"self_reported"},{"id":"open","max_estimated_tokens":712,"accounting_mode":"self_reported"},{"id":"in-progress","max_estimated_tokens":176,"accounting_mode":"self_reported"}]},{"id":"context-bootstrap","max_estimated_tokens":2077,"steps":[{"id":"triage","max_estimated_tokens":619,"accounting_mode":"self_reported"},{"id":"orient","max_estimated_tokens":1087,"accounting_mode":"self_reported"},{"id":"inspect","max_estimated_tokens":371,"accounting_mode":"self_reported"}]},{"id":"closed-domain-recovery","max_estimated_tokens":630,"steps":[{"id":"refuse-intent","max_estimated_tokens":259,"accounting_mode":"self_reported"},{"id":"retry-intent","max_estimated_tokens":371,"accounting_mode":"self_reported"}]},{"id":"unknown-option-recovery","max_estimated_tokens":596,"steps":[{"id":"refuse-option","max_estimated_tokens":433,"accounting_mode":"self_reported"},{"id":"retry-option","max_estimated_tokens":163,"accounting_mode":"self_reported"}]},{"id":"lifecycle-mutation","max_estimated_tokens":888,"steps":[{"id":"create","max_estimated_tokens":20,"accounting_mode":"self_reported"},{"id":"inspect-open","max_estimated_tokens":363,"accounting_mode":"self_reported"},{"id":"close","max_estimated_tokens":107,"accounting_mode":"self_reported"},{"id":"inspect-closed","max_estimated_tokens":398,"accounting_mode":"self_reported"}]},{"id":"bulk-effect-outcomes","max_estimated_tokens":406,"steps":[{"id":"create-bulk-target","max_estimated_tokens":20,"accounting_mode":"self_reported"},{"id":"partial-effect","max_estimated_tokens":254,"accounting_mode":"self_reported"},{"id":"no-effect","max_estimated_tokens":132,"accounting_mode":"self_reported"}]},{"id":"plan-execution-mutations","max_estimated_tokens":806,"steps":[{"id":"create-plan","max_estimated_tokens":21,"accounting_mode":"self_reported"},{"id":"add-step","max_estimated_tokens":254,"accounting_mode":"self_reported"},{"id":"complete-step","max_estimated_tokens":253,"accounting_mode":"self_reported"},{"id":"inspect-plan","max_estimated_tokens":278,"accounting_mode":"self_reported"}]}],"composite_max_estimated_tokens":13832}
+{"version":5,"transcript_version":2,"transcript_digest":"sha256:b4b151f3d36860e73cd535d0520e9f03b4ecec4444ee81a8b868896b5b0bba47","estimator":"ceil(utf8_bytes / 4)","comparison_scope":"plan_recovery_tracker_root_canonicalized","measurement_scope":"output_before_token_accounting","published_with_release":true,"orientation":{"canonical_task_id":"orientation-context-intent","required_capabilities":["actionable_work","active_ownership","workspace_state"],"measured_winner_tokens":1051,"protocols":[{"task_id":"orientation-context-intent","command_count":1,"estimated_tokens":1051,"capabilities":["actionable_work","active_ownership","workspace_state"],"capability_evidence":{"actionable_work":[{"step_id":"context","field_path":"hierarchy"}],"active_ownership":[{"step_id":"context","field_path":"activity"}],"workspace_state":[{"step_id":"context","field_path":"summary.active_items"}]}},{"task_id":"orientation-operating-rules","command_count":4,"estimated_tokens":2067,"capabilities":["actionable_work","active_ownership","workspace_state"],"capability_evidence":{"actionable_work":[{"step_id":"open","field_path":"items"}],"active_ownership":[{"step_id":"in-progress","field_path":"items"}],"workspace_state":[{"step_id":"context","field_path":"summary.active_items"}]}},{"task_id":"orientation-contracts-next","command_count":2,"estimated_tokens":5213,"capabilities":["actionable_work","active_ownership","workspace_state"],"capability_evidence":{"actionable_work":[{"step_id":"next","field_path":"recommended.id"}],"active_ownership":[{"step_id":"next","field_path":"held_by_others"}],"workspace_state":[{"step_id":"next","field_path":"summary.in_progress"}]}}]},"tasks":[{"id":"orientation-context-intent","max_estimated_tokens":1051,"steps":[{"id":"context","max_estimated_tokens":1051,"accounting_mode":"self_reported"}]},{"id":"orientation-contracts-next","max_estimated_tokens":5213,"steps":[{"id":"contracts","max_estimated_tokens":4481,"accounting_mode":"self_reported"},{"id":"next","max_estimated_tokens":732,"accounting_mode":"self_reported"}]},{"id":"orientation-operating-rules","max_estimated_tokens":2067,"steps":[{"id":"context","max_estimated_tokens":1015,"accounting_mode":"self_reported"},{"id":"search","max_estimated_tokens":164,"accounting_mode":"self_reported"},{"id":"open","max_estimated_tokens":712,"accounting_mode":"self_reported"},{"id":"in-progress","max_estimated_tokens":176,"accounting_mode":"self_reported"}]},{"id":"context-bootstrap","max_estimated_tokens":2005,"steps":[{"id":"triage","max_estimated_tokens":619,"accounting_mode":"self_reported"},{"id":"orient","max_estimated_tokens":1015,"accounting_mode":"self_reported"},{"id":"inspect","max_estimated_tokens":371,"accounting_mode":"self_reported"}]},{"id":"closed-domain-recovery","max_estimated_tokens":630,"steps":[{"id":"refuse-intent","max_estimated_tokens":259,"accounting_mode":"self_reported"},{"id":"retry-intent","max_estimated_tokens":371,"accounting_mode":"self_reported"}]},{"id":"unknown-option-recovery","max_estimated_tokens":596,"steps":[{"id":"refuse-option","max_estimated_tokens":433,"accounting_mode":"self_reported"},{"id":"retry-option","max_estimated_tokens":163,"accounting_mode":"self_reported"}]},{"id":"lifecycle-mutation","max_estimated_tokens":873,"steps":[{"id":"create","max_estimated_tokens":20,"accounting_mode":"self_reported"},{"id":"inspect-open","max_estimated_tokens":363,"accounting_mode":"self_reported"},{"id":"close","max_estimated_tokens":92,"accounting_mode":"self_reported"},{"id":"inspect-closed","max_estimated_tokens":398,"accounting_mode":"self_reported"}]},{"id":"bulk-effect-outcomes","max_estimated_tokens":392,"steps":[{"id":"create-bulk-target","max_estimated_tokens":20,"accounting_mode":"self_reported"},{"id":"partial-effect","max_estimated_tokens":240,"accounting_mode":"self_reported"},{"id":"no-effect","max_estimated_tokens":132,"accounting_mode":"self_reported"}]},{"id":"plan-execution-mutations","max_estimated_tokens":806,"steps":[{"id":"create-plan","max_estimated_tokens":21,"accounting_mode":"self_reported"},{"id":"add-step","max_estimated_tokens":254,"accounting_mode":"self_reported"},{"id":"complete-step","max_estimated_tokens":253,"accounting_mode":"self_reported"},{"id":"inspect-plan","max_estimated_tokens":278,"accounting_mode":"self_reported"}]}],"composite_max_estimated_tokens":13633}

package/docs/agent-task-transcripts.json

@@ -1 +1 @@
-{"version":2,"orientation":{"canonical_task_id":"orientation-context-intent","required_capabilities":["workspace_state","active_ownership","actionable_work"],"protocols":[{"task_id":"orientation-context-intent","capabilities":["workspace_state","active_ownership","actionable_work"],"capability_evidence":{"workspace_state":[{"step_id":"context","field_path":"summary.active_items"}],"active_ownership":[{"step_id":"context","field_path":"activity"}],"actionable_work":[{"step_id":"context","field_path":"hierarchy"}]}},{"task_id":"orientation-contracts-next","capabilities":["workspace_state","active_ownership","actionable_work"],"capability_evidence":{"workspace_state":[{"step_id":"next","field_path":"summary.in_progress"}],"active_ownership":[{"step_id":"next","field_path":"held_by_others"}],"actionable_work":[{"step_id":"next","field_path":"recommended.id"}]}},{"task_id":"orientation-operating-rules","capabilities":["workspace_state","active_ownership","actionable_work"],"capability_evidence":{"workspace_state":[{"step_id":"context","field_path":"summary.active_items"}],"active_ownership":[{"step_id":"in-progress","field_path":"items"}],"actionable_work":[{"step_id":"open","field_path":"items"}]}}]},"tasks":[{"id":"orientation-context-intent","description":"Build sufficient cold-start workspace, ownership, and actionable-work context with the bounded orientation intent.","steps":[{"id":"context","args":["context","--for","orient","--limit","10"],"expected_exit_code":0,"expected_output_kind":"diagnostic","expected_accounting_mode":"self_reported","required_fields":["summary.active_items","hierarchy","activity"]}]},{"id":"orientation-contracts-next","description":"Compare the proposed contracts-summary plus next cold-start protocol on the same fixed workspace.","steps":[{"id":"contracts","args":["contracts","--summary"],"expected_exit_code":0,"expected_output_kind":"collection","expected_accounting_mode":"self_reported","required_fields":["commands"]},{"id":"next","args":["next","--for","execute","--ready-only","--limit","3"],"expected_exit_code":0,"expected_output_kind":"diagnostic","expected_accounting_mode":"self_reported","required_fields":["summary.in_progress","held_by_others","recommended.id"]}]},{"id":"orientation-operating-rules","description":"Compare the historical context, search, open-list, and in-progress-list orientation sequence.","steps":[{"id":"context","args":["context","--for","orient","--limit","10"],"expected_exit_code":0,"expected_output_kind":"diagnostic","expected_accounting_mode":"self_reported","required_fields":["summary.active_items","hierarchy","activity"]},{"id":"search","args":["search","agent task","--status","all","--limit","10"],"expected_exit_code":0,"expected_output_kind":"collection","expected_accounting_mode":"self_reported","required_fields":["items"]},{"id":"open","args":["list","--status","open","--limit","20"],"expected_exit_code":0,"expected_output_kind":"collection","expected_accounting_mode":"self_reported","required_fields":["items"]},{"id":"in-progress","args":["list","--status","in_progress","--limit","20"],"expected_exit_code":0,"expected_output_kind":"collection","expected_accounting_mode":"self_reported","required_fields":["items"]}]},{"id":"context-bootstrap","description":"Orient in a scaled workspace and inspect the canonical focus item.","steps":[{"id":"triage","args":["list","--for","triage","--limit","2"],"expected_exit_code":0,"expected_output_kind":"collection","expected_accounting_mode":"self_reported","required_fields":["items"]},{"id":"orient","args":["context","--for","orient","--limit","5"],"expected_exit_code":0,"expected_output_kind":"diagnostic","expected_accounting_mode":"self_reported","required_fields":["summary.active_items","hierarchy","activity"]},{"id":"inspect","args":["get","$ANCHOR_ID","--for","inspect"],"expected_exit_code":0,"expected_output_kind":"entity","expected_accounting_mode":"self_reported","required_fields":["item.id"]}]},{"id":"closed-domain-recovery","description":"Reject an invalid context intent and execute the advertised shell-free retry.","steps":[{"id":"refuse-intent","args":["get","$ANCHOR_ID","--for","invalid-agent-intent"],"expected_exit_code":2,"expected_output_kind":"refusal","expected_accounting_mode":"self_reported","required_fields":["code","refusal","recovery"],"expected_error_code":"unknown_context_intent","expected_field_values":{"recovery.recovery_mode":"compact"},"expected_refusal_surface":"--for"},{"id":"retry-intent","args":["get","$ANCHOR_ID","--for","inspect"],"expected_exit_code":0,"expected_output_kind":"entity","expected_accounting_mode":"self_reported","required_fields":["item.id"],"recovery_for":"refuse-intent"}]},{"id":"unknown-option-recovery","description":"Identify an unsupported option after valid flags and continue with the corrected command.","steps":[{"id":"refuse-option","args":["search","agent task","--status","open","--limit","5","--include-body"],"expected_exit_code":2,"expected_output_kind":"refusal","expected_accounting_mode":"self_reported","required_fields":["code","refusal","recovery"],"expected_error_code":"unknown_option","expected_refusal_surface":"--include-body"},{"id":"retry-option","args":["search","agent task","--status","open","--limit","5"],"expected_exit_code":0,"expected_output_kind":"collection","expected_accounting_mode":"self_reported","required_fields":["items"],"recovery_for":"refuse-option"}]},{"id":"lifecycle-mutation","description":"Create, inspect, close, and confirm a project item through public CLI receipts.","steps":[{"id":"create","args":["create","--id","$LIFECYCLE_ID","--title","Transcript lifecycle item","--description","Golden multi-step lifecycle task","--type","Task","--status","open","--create-mode","progressive"],"expected_exit_code":0,"expected_output_kind":"mutation_receipt","expected_accounting_mode":"self_reported","required_fields":["id","changed_field_count"]},{"id":"inspect-open","args":["get","$LIFECYCLE_ID","--for","inspect"],"expected_exit_code":0,"expected_output_kind":"entity","expected_accounting_mode":"self_reported","required_fields":["item.id","item.status"],"expected_field_values":{"item.status":"open"}},{"id":"close","args":["close","$LIFECYCLE_ID","Golden task completed"],"expected_exit_code":0,"expected_output_kind":"mutation_receipt","expected_accounting_mode":"self_reported","required_fields":["id","status","close_reason","completion.timestamp","completion.source","completion.hint"],"expected_field_values":{"completion.source":"close_time"}},{"id":"inspect-closed","args":["get","$LIFECYCLE_ID","--for","inspect"],"expected_exit_code":0,"expected_output_kind":"entity","expected_accounting_mode":"self_reported","required_fields":["item.id","item.status"],"expected_field_values":{"item.status":"closed"}}]},{"id":"bulk-effect-outcomes","description":"Preserve successful partial-effect and no-effect outcomes across a bulk lifecycle task.","steps":[{"id":"create-bulk-target","args":["create","--id","$BULK_ID","--title","Transcript bulk effect target","--description","Golden bulk outcome transcript target","--type","Task","--status","open","--create-mode","progressive"],"expected_exit_code":0,"expected_output_kind":"mutation_receipt","expected_accounting_mode":"self_reported","required_fields":["id","status","changed_field_count"]},{"id":"partial-effect","args":["close-many","--ids","$BULK_ID,pm-transcript-missing","--reason","Golden partial-effect transcript","--validate-close","off","--no-checkpoint"],"expected_exit_code":7,"expected_output_kind":"collection","expected_accounting_mode":"self_reported","required_fields":["rows","outcome","exit_code","rows.0.completion.timestamp","rows.0.completion.source","rows.0.completion.hint"],"expected_field_values":{"outcome":"partial_effect","rows.0.completion.source":"close_time"}},{"id":"no-effect","args":["close-many","--ids","$BULK_ID","--reason","Golden no-effect transcript","--validate-close","off","--no-checkpoint"],"expected_exit_code":6,"expected_output_kind":"collection","expected_accounting_mode":"self_reported","required_fields":["rows","outcome","exit_code"],"expected_field_values":{"outcome":"no_effect"}}]},{"id":"plan-execution-mutations","description":"Create a Plan, add and complete a step, then inspect its durable evidence without echoing the full Plan on each mutation.","steps":[{"id":"create-plan","args":["create","--id","pm-transcript-plan","--type","Plan","--title","Transcript execution Plan","--create-mode","progressive"],"expected_exit_code":0,"expected_output_kind":"mutation_receipt","expected_accounting_mode":"self_reported","required_fields":["id","status"]},{"id":"add-step","args":["plan","add-step","pm-transcript-plan","--step-title","Verify result","--step-body","Durable execution context retained for later inspection."],"expected_exit_code":0,"expected_output_kind":"diagnostic","expected_accounting_mode":"self_reported","required_fields":["id","step.id","steps_summary.total","inspection_command"],"expected_field_values":{"kind":"plan_mutation","steps_summary.total":1}},{"id":"complete-step","args":["plan","complete-step","pm-transcript-plan","plan-step-001","--step-evidence","Verified result"],"expected_exit_code":0,"expected_output_kind":"diagnostic","expected_accounting_mode":"self_reported","required_fields":["id","step.status","steps_summary.completed","omission_receipt"],"expected_field_values":{"step.status":"completed","steps_summary.completed":1}},{"id":"inspect-plan","args":["plan","show","pm-transcript-plan","--depth","deep"],"expected_exit_code":0,"expected_output_kind":"diagnostic","expected_accounting_mode":"self_reported","required_fields":["plan.steps","plan.steps_summary.completed"],"expected_field_values":{"plan.steps_summary.completed":1}}]}]}
+{"version":2,"orientation":{"canonical_task_id":"orientation-context-intent","required_capabilities":["workspace_state","active_ownership","actionable_work"],"protocols":[{"task_id":"orientation-context-intent","capabilities":["workspace_state","active_ownership","actionable_work"],"capability_evidence":{"workspace_state":[{"step_id":"context","field_path":"summary.active_items"}],"active_ownership":[{"step_id":"context","field_path":"activity"}],"actionable_work":[{"step_id":"context","field_path":"hierarchy"}]}},{"task_id":"orientation-contracts-next","capabilities":["workspace_state","active_ownership","actionable_work"],"capability_evidence":{"workspace_state":[{"step_id":"next","field_path":"summary.in_progress"}],"active_ownership":[{"step_id":"next","field_path":"held_by_others"}],"actionable_work":[{"step_id":"next","field_path":"recommended.id"}]}},{"task_id":"orientation-operating-rules","capabilities":["workspace_state","active_ownership","actionable_work"],"capability_evidence":{"workspace_state":[{"step_id":"context","field_path":"summary.active_items"}],"active_ownership":[{"step_id":"in-progress","field_path":"items"}],"actionable_work":[{"step_id":"open","field_path":"items"}]}}]},"tasks":[{"id":"orientation-context-intent","description":"Build sufficient cold-start workspace, ownership, and actionable-work context with the bounded orientation intent.","steps":[{"id":"context","args":["context","--for","orient"],"expected_exit_code":0,"expected_output_kind":"diagnostic","expected_accounting_mode":"self_reported","required_fields":["summary.active_items","hierarchy","activity"]}]},{"id":"orientation-contracts-next","description":"Compare the proposed contracts-summary plus next cold-start protocol on the same fixed workspace.","steps":[{"id":"contracts","args":["contracts","--summary"],"expected_exit_code":0,"expected_output_kind":"collection","expected_accounting_mode":"self_reported","required_fields":["commands"]},{"id":"next","args":["next","--for","execute","--ready-only","--limit","3"],"expected_exit_code":0,"expected_output_kind":"diagnostic","expected_accounting_mode":"self_reported","required_fields":["summary.in_progress","held_by_others","recommended.id"]}]},{"id":"orientation-operating-rules","description":"Compare the historical context, search, open-list, and in-progress-list orientation sequence.","steps":[{"id":"context","args":["context","--for","orient"],"expected_exit_code":0,"expected_output_kind":"diagnostic","expected_accounting_mode":"self_reported","required_fields":["summary.active_items","hierarchy","activity"]},{"id":"search","args":["search","agent task","--status","all","--limit","10"],"expected_exit_code":0,"expected_output_kind":"collection","expected_accounting_mode":"self_reported","required_fields":["items"]},{"id":"open","args":["list","--status","open","--limit","20"],"expected_exit_code":0,"expected_output_kind":"collection","expected_accounting_mode":"self_reported","required_fields":["items"]},{"id":"in-progress","args":["list","--status","in_progress","--limit","20"],"expected_exit_code":0,"expected_output_kind":"collection","expected_accounting_mode":"self_reported","required_fields":["items"]}]},{"id":"context-bootstrap","description":"Orient in a scaled workspace and inspect the canonical focus item.","steps":[{"id":"triage","args":["list","--for","triage","--limit","2"],"expected_exit_code":0,"expected_output_kind":"collection","expected_accounting_mode":"self_reported","required_fields":["items"]},{"id":"orient","args":["context","--for","orient"],"expected_exit_code":0,"expected_output_kind":"diagnostic","expected_accounting_mode":"self_reported","required_fields":["summary.active_items","hierarchy","activity"]},{"id":"inspect","args":["get","$ANCHOR_ID","--for","inspect"],"expected_exit_code":0,"expected_output_kind":"entity","expected_accounting_mode":"self_reported","required_fields":["item.id"]}]},{"id":"closed-domain-recovery","description":"Reject an invalid context intent and execute the advertised shell-free retry.","steps":[{"id":"refuse-intent","args":["get","$ANCHOR_ID","--for","invalid-agent-intent"],"expected_exit_code":2,"expected_output_kind":"refusal","expected_accounting_mode":"self_reported","required_fields":["code","refusal","recovery"],"expected_error_code":"unknown_context_intent","expected_field_values":{"recovery.recovery_mode":"compact"},"expected_refusal_surface":"--for"},{"id":"retry-intent","args":["get","$ANCHOR_ID","--for","inspect"],"expected_exit_code":0,"expected_output_kind":"entity","expected_accounting_mode":"self_reported","required_fields":["item.id"],"recovery_for":"refuse-intent"}]},{"id":"unknown-option-recovery","description":"Identify an unsupported option after valid flags and continue with the corrected command.","steps":[{"id":"refuse-option","args":["search","agent task","--status","open","--limit","5","--include-body"],"expected_exit_code":2,"expected_output_kind":"refusal","expected_accounting_mode":"self_reported","required_fields":["code","refusal","recovery"],"expected_error_code":"unknown_option","expected_refusal_surface":"--include-body"},{"id":"retry-option","args":["search","agent task","--status","open","--limit","5"],"expected_exit_code":0,"expected_output_kind":"collection","expected_accounting_mode":"self_reported","required_fields":["items"],"recovery_for":"refuse-option"}]},{"id":"lifecycle-mutation","description":"Create, inspect, close, and confirm a project item through public CLI receipts.","steps":[{"id":"create","args":["create","--id","$LIFECYCLE_ID","--title","Transcript lifecycle item","--description","Golden multi-step lifecycle task","--type","Task","--status","open","--create-mode","progressive"],"expected_exit_code":0,"expected_output_kind":"mutation_receipt","expected_accounting_mode":"self_reported","required_fields":["id","changed_field_count"]},{"id":"inspect-open","args":["get","$LIFECYCLE_ID","--for","inspect"],"expected_exit_code":0,"expected_output_kind":"entity","expected_accounting_mode":"self_reported","required_fields":["item.id","item.status"],"expected_field_values":{"item.status":"open"}},{"id":"close","args":["close","$LIFECYCLE_ID","Golden task completed"],"expected_exit_code":0,"expected_output_kind":"mutation_receipt","expected_accounting_mode":"self_reported","required_fields":["id","status","close_reason","completion.timestamp","completion.source","completion.hint"],"expected_field_values":{"completion.source":"close_time"}},{"id":"inspect-closed","args":["get","$LIFECYCLE_ID","--for","inspect"],"expected_exit_code":0,"expected_output_kind":"entity","expected_accounting_mode":"self_reported","required_fields":["item.id","item.status"],"expected_field_values":{"item.status":"closed"}}]},{"id":"bulk-effect-outcomes","description":"Preserve successful partial-effect and no-effect outcomes across a bulk lifecycle task.","steps":[{"id":"create-bulk-target","args":["create","--id","$BULK_ID","--title","Transcript bulk effect target","--description","Golden bulk outcome transcript target","--type","Task","--status","open","--create-mode","progressive"],"expected_exit_code":0,"expected_output_kind":"mutation_receipt","expected_accounting_mode":"self_reported","required_fields":["id","status","changed_field_count"]},{"id":"partial-effect","args":["close-many","--ids","$BULK_ID,pm-transcript-missing","--reason","Golden partial-effect transcript","--validate-close","off","--no-checkpoint"],"expected_exit_code":7,"expected_output_kind":"collection","expected_accounting_mode":"self_reported","required_fields":["rows","outcome","exit_code","rows.0.completion.timestamp","rows.0.completion.source","rows.0.completion.hint"],"expected_field_values":{"outcome":"partial_effect","rows.0.completion.source":"close_time"}},{"id":"no-effect","args":["close-many","--ids","$BULK_ID","--reason","Golden no-effect transcript","--validate-close","off","--no-checkpoint"],"expected_exit_code":6,"expected_output_kind":"collection","expected_accounting_mode":"self_reported","required_fields":["rows","outcome","exit_code"],"expected_field_values":{"outcome":"no_effect"}}]},{"id":"plan-execution-mutations","description":"Create a Plan, add and complete a step, then inspect its durable evidence without echoing the full Plan on each mutation.","steps":[{"id":"create-plan","args":["create","--id","pm-transcript-plan","--type","Plan","--title","Transcript execution Plan","--create-mode","progressive"],"expected_exit_code":0,"expected_output_kind":"mutation_receipt","expected_accounting_mode":"self_reported","required_fields":["id","status"]},{"id":"add-step","args":["plan","add-step","pm-transcript-plan","--step-title","Verify result","--step-body","Durable execution context retained for later inspection."],"expected_exit_code":0,"expected_output_kind":"diagnostic","expected_accounting_mode":"self_reported","required_fields":["id","step.id","steps_summary.total","inspection_command"],"expected_field_values":{"kind":"plan_mutation","steps_summary.total":1}},{"id":"complete-step","args":["plan","complete-step","pm-transcript-plan","plan-step-001","--step-evidence","Verified result"],"expected_exit_code":0,"expected_output_kind":"diagnostic","expected_accounting_mode":"self_reported","required_fields":["id","step.status","steps_summary.completed","omission_receipt"],"expected_field_values":{"step.status":"completed","steps_summary.completed":1}},{"id":"inspect-plan","args":["plan","show","pm-transcript-plan","--depth","deep"],"expected_exit_code":0,"expected_output_kind":"diagnostic","expected_accounting_mode":"self_reported","required_fields":["plan.steps","plan.steps_summary.completed"],"expected_field_values":{"plan.steps_summary.completed":1}}]}]}

package/marketplace.json

@@ -1 +1 @@
-{"name":"pm","owner":{"name":"unbrained","url":"https://github.com/unbraind/pm-cli"},"description":"Official marketplace for pm CLI — native git-based project management for Claude Code and AI coding agents.","version":"2026.10.30","plugins":[{"name":"pm-claude","source":"./plugins/pm-claude","description":"Native pm CLI integration for Claude Code — 32 MCP tools, 14 workflow skills with slash invocations, 4 subagents, hybrid TUI task tracking, session context injection, and coordination subagents for git-based project management without leaving Claude Code.","version":"2026.10.30","author":{"name":"unbrained","url":"https://github.com/unbraind/pm-cli"},"homepage":"https://github.com/unbraind/pm-cli","repository":"https://github.com/unbraind/pm-cli","license":"MIT","keywords":["pm-cli","project-management","mcp","tasks","agents","workflows","git-native","task-tracker","ai"],"category":"productivity"}]}
+{"name":"pm","owner":{"name":"unbrained","url":"https://github.com/unbraind/pm-cli"},"description":"Official marketplace for pm CLI — native git-based project management for Claude Code and AI coding agents.","version":"2026.11.1","plugins":[{"name":"pm-claude","source":"./plugins/pm-claude","description":"Native pm CLI integration for Claude Code — 32 MCP tools, 14 workflow skills with slash invocations, 4 subagents, hybrid TUI task tracking, session context injection, and coordination subagents for git-based project management without leaving Claude Code.","version":"2026.11.1","author":{"name":"unbrained","url":"https://github.com/unbraind/pm-cli"},"homepage":"https://github.com/unbraind/pm-cli","repository":"https://github.com/unbraind/pm-cli","license":"MIT","keywords":["pm-cli","project-management","mcp","tasks","agents","workflows","git-native","task-tracker","ai"],"category":"productivity"}]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-cli",
-  "version": "2026.10.30",
+  "version": "2026.11.1",
   "description": "Git-native project management CLI for humans and agents.",
   "type": "module",
   "packageManager": "pnpm@11.28.5",

package/packages/pm-beads/package.json

@@ -1 +1 @@
-{"name":"@unbrained/pm-beads","version":"2026.10.30","private":true,"type":"module","description":"First-party pm package for importing Beads JSONL records.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-beads#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-beads"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","project-management","beads"],"pm":{"aliases":["beads"],"extensions":["extensions/beads"],"catalog":{"display_name":"Beads Import","category":"migration","summary":"Import Beads JSONL records into pm while preserving source IDs.","tags":["migration","beads","import"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-beads#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-beads","report":"https://github.com/unbraind/pm-cli/issues"}},"docs":["README.md"],"examples":["README.md"]}}
+{"name":"@unbrained/pm-beads","version":"2026.11.1","private":true,"type":"module","description":"First-party pm package for importing Beads JSONL records.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-beads#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-beads"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","project-management","beads"],"pm":{"aliases":["beads"],"extensions":["extensions/beads"],"catalog":{"display_name":"Beads Import","category":"migration","summary":"Import Beads JSONL records into pm while preserving source IDs.","tags":["migration","beads","import"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-beads#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-beads","report":"https://github.com/unbraind/pm-cli/issues"}},"docs":["README.md"],"examples":["README.md"]}}

package/packages/pm-calendar/extensions/calendar/index.ts

@@ -20,6 +20,7 @@ const CALENDAR_VIEW_NAMES = ["agenda", "day", "week", "month"] as const;
 // not leak into Sentry as crashes.
 class PmCliError extends Error {
   exitCode: number;
+  context: Record<string, unknown> = {};
   constructor(message: string, exitCode: number) {
     super(message);
     this.name = "PmCliError";

package/packages/pm-calendar/package.json

@@ -1 +1 @@
-{"name":"@unbrained/pm-calendar","version":"2026.10.30","private":true,"type":"module","description":"First-party pm package for calendar and agenda views.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-calendar#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-calendar"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","project-management","calendar","agenda"],"pm":{"aliases":["calendar"],"extensions":["extensions/calendar"],"catalog":{"display_name":"Calendar Views","category":"workflow","summary":"Show agenda, day, week, and month views for deadlines, reminders, and scheduled events.","tags":["calendar","agenda","workflow"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-calendar#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-calendar","report":"https://github.com/unbraind/pm-cli/issues"}},"docs":["README.md"],"examples":["README.md"]}}
+{"name":"@unbrained/pm-calendar","version":"2026.11.1","private":true,"type":"module","description":"First-party pm package for calendar and agenda views.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-calendar#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-calendar"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","project-management","calendar","agenda"],"pm":{"aliases":["calendar"],"extensions":["extensions/calendar"],"catalog":{"display_name":"Calendar Views","category":"workflow","summary":"Show agenda, day, week, and month views for deadlines, reminders, and scheduled events.","tags":["calendar","agenda","workflow"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-calendar#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-calendar","report":"https://github.com/unbraind/pm-cli/issues"}},"docs":["README.md"],"examples":["README.md"]}}

package/packages/pm-command-kit/package.json

@@ -1 +1 @@
-{"name":"@unbrained/pm-command-kit","version":"2026.10.30","private":true,"type":"module","description":"First-party pm exemplar package for the commands capability: registerCommand, registerFlags, and registerParser.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-command-kit#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-command-kit"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","project-management","sdk","commands","exemplar"],"pm":{"aliases":["command-kit"],"extensions":["extensions/command-kit"],"catalog":{"display_name":"Command Kit Exemplar","category":"sdk","summary":"Copy-paste-able exemplar for registerCommand, registerFlags, and registerParser.","tags":["sdk","commands","parser","exemplar"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-command-kit#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-command-kit","report":"https://github.com/unbraind/pm-cli/issues"}},"docs":["README.md"],"examples":["README.md"]}}
+{"name":"@unbrained/pm-command-kit","version":"2026.11.1","private":true,"type":"module","description":"First-party pm exemplar package for the commands capability: registerCommand, registerFlags, and registerParser.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-command-kit#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-command-kit"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","project-management","sdk","commands","exemplar"],"pm":{"aliases":["command-kit"],"extensions":["extensions/command-kit"],"catalog":{"display_name":"Command Kit Exemplar","category":"sdk","summary":"Copy-paste-able exemplar for registerCommand, registerFlags, and registerParser.","tags":["sdk","commands","parser","exemplar"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-command-kit#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-command-kit","report":"https://github.com/unbraind/pm-cli/issues"}},"docs":["README.md"],"examples":["README.md"]}}

package/packages/pm-digital-twin/package.json

@@ -1 +1 @@
-{"name":"@unbrained/pm-digital-twin","version":"2026.10.30","private":true,"type":"module","description":"Beyond-PM exemplar: a temporal production-facility digital twin built entirely on public pm SDK and extension primitives.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-digital-twin#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-digital-twin"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","sdk","digital-twin","event-sourcing","temporal-graph","exemplar"],"pm":{"aliases":["digital-twin","twin"],"extensions":["extensions/digital-twin"],"catalog":{"display_name":"Digital Twin SDK Exemplar","category":"sdk","summary":"Temporal facility graph proving event replay, point-in-time state, invariants, federation, checkpoints, and compact exports through public SDK contracts.","tags":["sdk","digital-twin","event-sourcing","graph","offline-first","exemplar"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-digital-twin#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-digital-twin","report":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-digital-twin/GAP_REPORT.md"}},"docs":["README.md","GAP_REPORT.md"],"examples":["README.md"]}}
+{"name":"@unbrained/pm-digital-twin","version":"2026.11.1","private":true,"type":"module","description":"Beyond-PM exemplar: a temporal production-facility digital twin built entirely on public pm SDK and extension primitives.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-digital-twin#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-digital-twin"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","sdk","digital-twin","event-sourcing","temporal-graph","exemplar"],"pm":{"aliases":["digital-twin","twin"],"extensions":["extensions/digital-twin"],"catalog":{"display_name":"Digital Twin SDK Exemplar","category":"sdk","summary":"Temporal facility graph proving event replay, point-in-time state, invariants, federation, checkpoints, and compact exports through public SDK contracts.","tags":["sdk","digital-twin","event-sourcing","graph","offline-first","exemplar"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-digital-twin#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-digital-twin","report":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-digital-twin/GAP_REPORT.md"}},"docs":["README.md","GAP_REPORT.md"],"examples":["README.md"]}}