@unbrained/pm-cli 2026.10.8 → 2026.10.10

package/docs/QUALITY_EVIDENCE.md

@@ -1,7 +1,58 @@
 # Test strength and documentation content
 
 Tracked by [pm-zclzll](../.agents/pm/tasks/pm-zclzll.toon) and
-[pm-dvwm](../.agents/pm/chores/pm-dvwm.toon).
+[pm-dvwm](../.agents/pm/chores/pm-dvwm.toon). Release acceptance and token
+comparison contracts: [pm-gh1428](../.agents/pm/issues/pm-gh1428.toon),
+[pm-gh1429](../.agents/pm/issues/pm-gh1429.toon), and
+[pm-agent-token-path](../.agents/pm/issues/pm-agent-token-path.toon).
+
+## Installed context and immutable release recovery
+
+The installed-agent journey requests `context --for orient --limit 1` with an
+explicit 512-token output budget. A complete successful result must report the
+actual population: zero items before creation and one closed item after the
+lifecycle. An omitted result cannot establish either fact. When the installed
+version refuses an infeasible budget, the verifier checks exit 2, the omission
+and budget receipts, and the exact advertised `outputBudget: "unbounded"`
+recovery. It then repeats the same intent and amount with that recovery. Older
+control releases may return complete bounded context immediately. Every step
+keeps its existing character ceiling and process deadline; reports retain the
+observed exit status and all refusal/recovery output costs.
+
+Unexpected process failures retain classified status, signal, spawn error and
+both output streams, with credential redaction before 512-character excerpts.
+Unit tests own malformed receipts and failure diagnostics. Real npm/Bun
+installations and the hosted candidate/control platform matrix own compatibility
+with the actual SDK-backed CLI. A stubbed empty context object cannot satisfy
+the population assertions.
+
+Exact-tag recovery preserves reviewed artifact controls before selecting tagged
+source. The preserved directory retains `scripts/release` and its parent script
+dependencies, including temporary lifecycle and cleanup modules. The executable
+workflow regression copies those real controls, packs a foreign workspace with
+real npm, and checks the committed artifact budget. Removing a transitive import
+must fail with its original module error. Preserved controls stay outside the
+source checkout; published immutable versions are verified without republishing.
+
+## Portable agent-task token comparisons
+
+Version 5 of the agent-task baseline declares
+`comparison_scope: "plan_recovery_tracker_root_canonicalized"`. Each replay
+continues to report exact `emitted_bytes`, `estimated_tokens`, and accounting
+receipt bytes for the actual transport. Its `comparison_emitted_bytes` and
+`comparison_estimated_tokens` replace only the validated tracker suffixes in
+Plan inspection, next-action and plan-detail recovery commands with the fixed
+`/replay/.agents/pm` comparison root. The actual payload retains executable
+commands targeting its real fixture. Other facts, paths and commands remain
+part of the cost.
+
+Step, completed-task and composite ceilings use those comparison measurements.
+The orientation selector uses the same cost basis. Missing, negative,
+non-integer or non-finite measurements and mismatched comparison scopes fail
+closed. Short and long temporary roots must produce the same verdict while
+their real emitted-byte counts may differ. Output growth still fails the
+unchanged ceilings; normalization does not waive accounting, payload parity,
+required-field or executable-recovery checks.
 
 ## SDK mutation testing
 

package/docs/README.md

@@ -35,6 +35,7 @@ pm guide release --json
 - [Onboarding](ONBOARDING.md) - first-two-hours maintainer and contributor setup.
 - [Agent Guide](AGENT_GUIDE.md) - canonical agent loop, tracker linking, and token-minimal command choices.
 - [Agent Read and Test Receipts](AGENT_READ_AND_TEST_RECEIPTS.md) - JSON help provenance, linked-test persistence, and history diff continuation.
+- [Fact-preserving Agent Output](AGENT_OUTPUT_ENCODINGS.md) - lossless SDK table cells, measured token ratchets, count aliases, and whole-response context budgets.
 - [Agent Evidence Consistency](AGENT_EVIDENCE_CONSISTENCY.md) - literal annotations, concurrent history validation, and declared recovery help.
 - [Actionable Item-read Evidence](GET_READ_EVIDENCE.md) - declared blocker status, historical separation, and truthful schedule/artifact omission receipts.
 - [Command Reference](COMMANDS.md) - command families with examples and when to use each family.
@@ -43,6 +44,7 @@ pm guide release --json
 - [Configuration](CONFIGURATION.md) - settings, storage formats, output, search, validation, and environment variables.
 - [Semantic Batching and Retrieval Quality](SEARCH_QUALITY.md) - independent request bounds, execution receipts, and per-query quality floors.
 - [Testing](TESTING.md) - sandbox-safe local tests and linked-test orchestration.
+- [Faithful Package Acceptance](PACKAGE_GATE_ACCEPTANCE.md) - self-isolating package gates, independent Git snapshots, native diagnostics and isolated timing admission.
 - [Completion Portability and Bounded Replication Checks](VALIDATION_PORTABILITY.md) - literal Bash choices across versions and locales, and semantic Git diff collection.
 - [Build and Release Acceptance](BUILD_AND_RELEASE_ACCEPTANCE.md) - complete-build leases and cross-platform registry installation controls.
 - [Security Governance](SECURITY_GOVERNANCE.md) - vulnerability reporting, review discipline, property fuzzing, and OpenSSF limitations.

package/docs/RELEASE_RELIABILITY.md

@@ -7,7 +7,7 @@ installed-package diagnostics are tracked by
 [pm-q7c36n](../.agents/pm/issues/pm-q7c36n.toon).
 
 The **Release Reliability** workflow evaluates the preceding 30 days after a
-scheduled Auto Release completes, daily at nominal 04:35 UTC, and on manual
+default-branch Auto Release or Nightly Validation completes, daily at nominal 04:35 UTC, and on manual
 dispatch. It saves a JSON report and fails its own check when policy is breached.
 The report is independent of candidate correctness: historical failures must
 remain visible while a reviewed repair can still pass publication gates.
@@ -48,6 +48,11 @@ be uploaded, the collector reads the declared run name. Historical dispatches
 without either declaration appear in `pre_attribution_gap`; the failed
 2026-09-28 morning dispatch cannot be attributed from its old run record.
 Dispatcher rows retain creation time, queue delay, outcome, and failure stage.
+The `origins` map also retains independent `native_schedule`, `operator`, and
+`blocker_retry` series, each with original counts, failure stages and outcome
+evidence completeness. Undeclared historical runs remain explicit attribution
+gaps; event or actor never supplies an invented origin. These diagnostic series
+do not alter the native scheduled policy denominator.
 They omit nominal occurrence and dispatch delay because the native 02:35 UTC
 cron is not the dispatcher's clock; the scheduled timing policy does not apply
 to those rows.
@@ -85,8 +90,54 @@ hosted acceptance job limit.
 
 The report is a rolling observation, not a permanent archive of all releases.
 Retain exported receipts externally if a longer historical window is needed.
-It does not implement the separate nightly per-leg reliability programme or
-change the manual same-day version policy.
+It does not change the manual same-day version policy or propagate upstream
+origin through historical lightweight tags. Those remaining outcomes retain
+their existing PM owners.
+
+## Nightly recurrence and public SDK
+
+[pm-2zjs0g](../.agents/pm/issues/pm-2zjs0g.toon) owns the nightly recurrence meter.
+The same reporting workflow builds trusted default-branch code and writes a
+separate `nightly-reliability-<run>-<attempt>` artifact, including when release
+reporting is already red. Its [versioned policy](../config/nightly-reliability-policy.json)
+requires seven completed original attempts per family and at most 10% failures
+over 30 days. Breaches fail the operational report and appear in the workflow
+summary; they remain distinct from checks evaluating a candidate repair.
+
+The collector derives current leg identities from `nightly.yml` and each run's
+applicable population from the workflow at its original head SHA. Immutable
+definitions are cached within one census; legacy OS/Node matrices and today's
+labelled shards both retain their actual generations. Newly introduced families
+never gain synthetic pending attempts in older runs. It retains historical
+observed legs, retrieves attempt 1 after reruns, and reads both open
+and closed alert issues plus their complete comment pages. Original failures,
+distinct affected UTC days and observed closure durations survive alert repair.
+Every new alert carries the stable PM recurrence owner and a platform/Node family
+identity. Counts do not depend on a maintained list of occurrence IDs. An absent
+job is pending evidence; an empty family has a null rate and fails coverage.
+
+Alert closure is the recorded latency endpoint, not proof of a product fix.
+When one alert episode links several failed runs, its shared closure is the
+endpoint for each recorded occurrence's alert-closure latency. This does not
+assert that an independent per-attempt product repair was verified.
+Product versus infrastructure cause stays `unknown` until independent evidence
+classifies it. Repairs at or beyond the report cutoff remain unresolved in that
+historical window. API errors, incomplete search results, missing pages,
+duplicate identities and ambiguous jobs refuse a complete-census claim.
+
+Packages can reuse the harness-independent evaluator through
+`evaluateReliabilityWindow` from `@unbrained/pm-cli/sdk/governance`. Supply
+`ReliabilityAttempt` records with unique `id`, stable `family`, `started_at`,
+original `outcome` and optional `repaired_at`/`cause`, plus an explicit
+`ReliabilityWindowPolicy` population, half-open window, maximum failure fraction
+and minimum completed count. The typed result preserves per-family findings,
+unknown causes and repair observations. No GitHub dependency, filesystem tracker,
+clock read or network call is required by this SDK primitive.
+
+For reproducible offline evaluation, retain the report's `attempts` and `policy`
+with its exact window; rerun the SDK evaluator against those records. The GitHub
+adapter accepts a caller-chosen clock and a 1–90 day policy window, allowing
+historical family reconstruction while keeping the production 30-day policy fixed.
 
 Provider contracts: [workflow run attempts](https://docs.github.com/en/rest/actions/workflow-runs#get-a-workflow-run-attempt)
 and [completion-triggered workflows](https://docs.github.com/en/actions/reference/workflows-and-actions/events-that-trigger-workflows#workflow_run).

package/docs/SDK.md

@@ -1552,8 +1552,22 @@ accepts either a direct `ItemDocument` or the envelope returned by
 `pm get <id> --json`, strips read-only metadata, maps canonical snake-case item
 fields to typed mutation options, and serializes linked facets through the same
 repeatable option forms as create/update. Explicit options win over document
-values. Unknown near-miss keys fail; application-defined fields are routed
-through the public `field` escape hatch.
+values. Pass `resolveRuntimeFieldRegistry(settings.schema).definitions` as the
+fourth argument to route workspace metadata keys through their declared SDK
+option names. CLI stdin automatically resolves the selected workspace schema.
+Schema aliases override document values through the same field registry.
+Declared extension fields use raw `name=value` assignments; explicit `field`
+entries override only matching names, preserving other document fields. Strings
+retain commas, equals signs, quotes, Unicode, and newlines; numbers, booleans,
+objects, and arrays retain their types. Unknown fields and near-miss built-in
+keys refuse before item or history writes.
+
+Tracked by [pm-stdin-schema-fields](../.agents/pm/issues/pm-stdin-schema-fields.toon).
+Stored schema containers retain their decoded shape; repeated CLI container
+flags still select the final supplied value. Normal SDK item operations refuse
+ahead-of-runtime storage markers before schema or body validation and retain
+item identity/path in the structured error. Integrity diagnostics preserve
+future markers for inspection.
 
 The built-in adapters stay deliberately thin:
 

package/docs/TESTING.md

@@ -57,8 +57,12 @@ fixtures must never create production incidents from a developer host.
 
 Temporary directories must live outside the checkout and outside any ancestor
 workspace with initialized tracker data. The runner rejects a checkout-local
-temporary root, including a symlink alias, before starting build or test
-processes ([pm-bukwmy](../.agents/pm/issues/pm-bukwmy.toon)). If the default
+temporary root and every initialized standard or root-layout ancestor tracker,
+including physical symlink aliases, before allocating fixtures or starting build
+or test processes ([pm-bukwmy](../.agents/pm/issues/pm-bukwmy.toon),
+[pm-runner-ancestor-tracker](../.agents/pm/issues/pm-runner-ancestor-tracker.toon)).
+Unrelated valid settings files remain admissible; unreadable or invalid ancestor
+settings refuse ancestry certification. If the default
 temporary filesystem is full, set `TMPDIR` (or `TEMP`/`TMP` on Windows) to an
 existing isolated scratch directory; an ignored directory inside the repository
 is not isolated. Filesystem fixtures must honor `node:os`'s `tmpdir()` and remove
@@ -138,6 +142,42 @@ failed, skipped, stale, ambiguous, and different-tree results all fail.
 `pnpm release:gates` includes the same non-skippable verification, so run it
 only after the pushed reviewed head's hosted analyzers are terminal.
 
+## Published Workspace Compatibility
+
+Tracked by [pm-pae3wo](../.agents/pm/tasks/pm-pae3wo.toon).
+Run `node scripts/release/workspace-compatibility.mjs --json` after building.
+The policy in `scripts/release/workspace-compatibility-policy.json` requires
+the two immediately preceding stable calendar releases. Each installed release
+writes a disposable workspace read by the current runtime, and the current
+runtime writes one read by that release. Exact scalar and container values must
+survive CLI and public SDK reads, ordinary writes with their registration
+disabled, history restoration, native Git merges, reconciliation, and history
+verification. Missing releases, metadata loss, or invalid merged histories fail
+the gate. CI, nightly quality, release publication, and local preflight require
+this matrix alongside the independent legacy Markdown migration check.
+
+Metadata probes and installs explicitly use the public npm registry with
+separate empty user/global configurations and a fresh temporary cache. Inherited
+npm settings and registry-auth environment variables are removed, so host
+configuration cannot change the artifacts selected by the declared window.
+
+The current item-operation boundary refuses a stored `pm_format_version`
+ahead of its supported version with `item_format_version_unsupported` and
+upgrade guidance. Reads, updates, deletion, and restoration preserve the
+original item/history on refusal, including documents whose metadata/body
+shapes are invalid for the current runtime. Admission precedes schema validation
+so restore cannot misclassify newer data as ordinary corruption. Static fixture
+modules read separate JSON data; published SDK probes use the public package
+entrypoint from their own consumer directory. Raw parsers still preserve future version
+markers for integrity inspection; inventory diagnostics are not permission to
+rewrite an unsupported item.
+
+Run the matrix from the built workspace root. Exact-tag release recovery retains
+the reviewed matrix controls, policy and static fixtures outside the checkout,
+then tests the selected tagged runtime through its manifest and public SDK. A
+historical tag need not contain newly added gate scripts; recovery still runs
+the mandatory matrix without rewriting the tagged source or skipping policy.
+
 ## Focused Test Runs
 
 ```bash
@@ -549,7 +589,11 @@ pm test <item-id> --run --workspace-context snapshot --override-linked-workspace
   copy, and binds its `.agents/pm` path to the selected temporary tracker.
   `.git`, `.agents`, coverage output, and common cache directories are excluded
   at every directory depth, with reserved names matched case-insensitively for
-  portable admission. Each existing root or nested `node_modules`
+  portable admission. Git sources receive an independent commit/tag object store
+  with fresh configuration, no source hooks, and no origin remote. Repository
+  history remains available; this is execution isolation, not history redaction.
+  See [Faithful package acceptance](PACKAGE_GATE_ACCEPTANCE.md) for limits.
+  Each existing root or nested `node_modules`
   directory is linked at its original relative path, including installations
   already represented by directory symlinks. This preserves independent
   monorepo dependency versions without copying dependency trees. Dependency

package/docs/agent-task-token-baseline.json

@@ -1,8 +1,9 @@
 {
-  "version": 4,
+  "version": 5,
   "transcript_version": 2,
   "transcript_digest": "sha256:6d4041acfaa4075dde1972d6127a74f18916f7661738b4f5d5fd47a61c179a78",
   "estimator": "ceil(utf8_bytes / 4)",
+  "comparison_scope": "plan_recovery_tracker_root_canonicalized",
   "measurement_scope": "output_before_token_accounting",
   "published_with_release": true,
   "orientation": {
@@ -12,12 +13,12 @@
       "active_ownership",
       "workspace_state"
     ],
-    "measured_winner_tokens": 1102,
+    "measured_winner_tokens": 1087,
     "protocols": [
       {
         "task_id": "orientation-context-intent",
         "command_count": 1,
-        "estimated_tokens": 1102,
+        "estimated_tokens": 1087,
         "capabilities": [
           "actionable_work",
           "active_ownership",
@@ -47,7 +48,7 @@
       {
         "task_id": "orientation-operating-rules",
         "command_count": 4,
-        "estimated_tokens": 2340,
+        "estimated_tokens": 2325,
         "capabilities": [
           "actionable_work",
           "active_ownership",
@@ -109,11 +110,11 @@
   "tasks": [
     {
       "id": "orientation-context-intent",
-      "max_estimated_tokens": 1102,
+      "max_estimated_tokens": 1087,
       "steps": [
         {
           "id": "context",
-          "max_estimated_tokens": 1102,
+          "max_estimated_tokens": 1087,
           "accounting_mode": "self_reported"
         }
       ]
@@ -136,11 +137,11 @@
     },
     {
       "id": "orientation-operating-rules",
-      "max_estimated_tokens": 2340,
+      "max_estimated_tokens": 2325,
       "steps": [
         {
           "id": "context",
-          "max_estimated_tokens": 1102,
+          "max_estimated_tokens": 1087,
           "accounting_mode": "self_reported"
         },
         {
@@ -162,7 +163,7 @@
     },
     {
       "id": "context-bootstrap",
-      "max_estimated_tokens": 2025,
+      "max_estimated_tokens": 2010,
       "steps": [
         {
           "id": "triage",
@@ -171,7 +172,7 @@
         },
         {
           "id": "orient",
-          "max_estimated_tokens": 1102,
+          "max_estimated_tokens": 1087,
           "accounting_mode": "self_reported"
         },
         {
@@ -262,7 +263,7 @@
     },
     {
       "id": "plan-execution-mutations",
-      "max_estimated_tokens": 848,
+      "max_estimated_tokens": 806,
       "steps": [
         {
           "id": "create-plan",
@@ -271,12 +272,12 @@
         },
         {
           "id": "add-step",
-          "max_estimated_tokens": 275,
+          "max_estimated_tokens": 254,
           "accounting_mode": "self_reported"
         },
         {
           "id": "complete-step",
-          "max_estimated_tokens": 274,
+          "max_estimated_tokens": 253,
           "accounting_mode": "self_reported"
         },
         {
@@ -287,5 +288,5 @@
       ]
     }
   ],
-  "composite_max_estimated_tokens": 13882
+  "composite_max_estimated_tokens": 13795
 }

package/docs/generated/REFUSAL_CLOSURE_CENSUS.md

@@ -4,12 +4,12 @@ Tracker: `pm-f05lsg`.
 
 Every catalog code is listed. An `uncovered` row is an explicit closure obligation, never an omission or implied approval.
 
-- Catalog error codes: 396
+- Catalog error codes: 397
 - Executable error codes: 19
 - Executable-code ratchet floor: 18
 - Required executable canonical codes: `bulk_ids_input_empty`, `bulk_ids_input_missing_path`, `bulk_ids_input_unreadable`, `invalid_argument_value`, `manifest_unknown_key`, `missing_lifecycle_target`, `missing_required_argument`, `no_version_bounds_declared`, `projection_options_mutually_exclusive`, `tracker_not_initialized`, `tracker_root_missing`, `tracker_root_not_directory`, `tracker_root_unreadable`, `unknown_context_intent`, `unknown_field_projection`, `unknown_option`, `unknown_subcommand`
-- Uncovered error codes: 377
-- Coverage fraction: 0.047980
+- Uncovered error codes: 378
+- Coverage fraction: 0.047859
 - Closed-domain probes: 19
 - Grammar probes: 117
 
@@ -177,6 +177,7 @@ Every catalog code is listed. An `uncovered` row is an explicit closure obligati
 | `item_document_encoding_invalid` | `item_document_encoding_invalid` | uncovered | none | 0 |
 | `item_document_invalid` | `item_document_invalid` | uncovered | none | 0 |
 | `item_document_roundtrip_failed` | `item_document_roundtrip_failed` | uncovered | none | 0 |
+| `item_format_version_unsupported` | `item_format_version_unsupported` | uncovered | none | 0 |
 | `item_id_collision` | `item_id_collision` | uncovered | none | 0 |
 | `item_identity_ambiguous` | `item_identity_ambiguous` | uncovered | none | 0 |
 | `item_identity_conflict` | `item_identity_conflict` | uncovered | none | 0 |

package/marketplace.json

@@ -5,13 +5,13 @@
     "url": "https://github.com/unbraind/pm-cli"
   },
   "description": "Official marketplace for pm CLI — native git-based project management for Claude Code and AI coding agents.",
-  "version": "2026.10.8",
+  "version": "2026.10.10",
   "plugins": [
     {
       "name": "pm-claude",
       "source": "./plugins/pm-claude",
       "description": "Native pm CLI integration for Claude Code — 32 MCP tools, 14 workflow skills with slash invocations, 4 subagents, hybrid TUI task tracking, session context injection, and coordination subagents for git-based project management without leaving Claude Code.",
-      "version": "2026.10.8",
+      "version": "2026.10.10",
       "author": {
         "name": "unbrained",
         "url": "https://github.com/unbraind/pm-cli"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-cli",
-  "version": "2026.10.8",
+  "version": "2026.10.10",
   "description": "Git-native project management CLI for humans and agents.",
   "type": "module",
   "packageManager": "pnpm@11.10.0",

package/packages/pm-beads/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-beads",
-  "version": "2026.10.8",
+  "version": "2026.10.10",
   "private": true,
   "type": "module",
   "description": "First-party pm package for importing Beads JSONL records.",

package/packages/pm-calendar/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-calendar",
-  "version": "2026.10.8",
+  "version": "2026.10.10",
   "private": true,
   "type": "module",
   "description": "First-party pm package for calendar and agenda views.",

package/packages/pm-command-kit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-command-kit",
-  "version": "2026.10.8",
+  "version": "2026.10.10",
   "private": true,
   "type": "module",
   "description": "First-party pm exemplar package for the commands capability: registerCommand, registerFlags, and registerParser.",

package/packages/pm-digital-twin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-digital-twin",
-  "version": "2026.10.8",
+  "version": "2026.10.10",
   "private": true,
   "type": "module",
   "description": "Beyond-PM exemplar: a temporal production-facility digital twin built entirely on public pm SDK and extension primitives.",

package/packages/pm-governance-audit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-governance-audit",
-  "version": "2026.10.8",
+  "version": "2026.10.10",
   "private": true,
   "type": "module",
   "description": "First-party pm package for governance audit and normalization workflows.",

package/packages/pm-guide-shell/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-guide-shell",
-  "version": "2026.10.8",
+  "version": "2026.10.10",
   "private": true,
   "type": "module",
   "description": "First-party pm package for guide and shell completion workflows.",

package/packages/pm-kanban/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-kanban",
-  "version": "2026.10.8",
+  "version": "2026.10.10",
   "private": true,
   "type": "module",
   "description": "First-party pm archetype package: a complete Kanban continuous-flow profile built on public SDK primitives.",

package/packages/pm-lifecycle-hooks/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-lifecycle-hooks",
-  "version": "2026.10.8",
+  "version": "2026.10.10",
   "private": true,
   "type": "module",
   "description": "First-party pm package demonstrating safe lifecycle hook registration.",

package/packages/pm-linked-test-adapters/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-linked-test-adapters",
-  "version": "2026.10.8",
+  "version": "2026.10.10",
   "private": true,
   "type": "module",
   "description": "First-party pm package for optional linked-test run management adapters and reporters.",

package/packages/pm-search-advanced/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-search-advanced",
-  "version": "2026.10.8",
+  "version": "2026.10.10",
   "private": true,
   "type": "module",
   "description": "First-party pm package for semantic, hybrid, and reindex search workflows.",

package/packages/pm-templates/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-templates",
-  "version": "2026.10.8",
+  "version": "2026.10.10",
   "private": true,
   "type": "module",
   "description": "First-party pm package for reusable create templates.",

package/packages/pm-todos/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-todos",
-  "version": "2026.10.8",
+  "version": "2026.10.10",
   "private": true,
   "type": "module",
   "description": "First-party pm package for Todo markdown import and export.",

package/packages/pm-vcs/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-vcs-sdk-exemplar",
-  "version": "2026.10.8",
+  "version": "2026.10.10",
   "private": true,
   "type": "module",
   "description": "Beyond-PM exemplar: a VCS-style changeset workflow built entirely on public pm SDK and extension primitives.",

package/plugins/pm-claude/.claude-plugin/plugin.json

@@ -3,7 +3,7 @@
   "name": "pm-claude",
   "displayName": "pm CLI",
   "description": "Native pm CLI integration for Claude Code — 32 MCP tools, 14 skills with slash invocations, 4 subagents (coordinator, delivery-chain, triage, verification), hybrid TUI task tracking (pm as persistent store + Claude Code task panel as live view), session context injection, and full git-based project management without leaving Claude Code.",
-  "version": "2026.10.8",
+  "version": "2026.10.10",
   "author": {
     "name": "unbrained",
     "url": "https://github.com/unbraind/pm-cli"

package/plugins/pm-claude/package.json

@@ -2,8 +2,8 @@
   "name": "pm-claude-runtime",
   "private": true,
   "type": "module",
-  "version": "2026.10.8",
+  "version": "2026.10.10",
   "dependencies": {
-    "@unbrained/pm-cli": "2026.10.8"
+    "@unbrained/pm-cli": "2026.10.10"
   }
 }

package/plugins/pm-codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "pm-codex",
-  "version": "2026.10.8",
+  "version": "2026.10.10",
   "description": "Native Codex integration for pm-cli with bundled MCP tools, skills, commands, and agent workflows.",
   "author": {
     "name": "unbrained",

package/plugins/pm-codex/package.json

@@ -2,8 +2,8 @@
   "name": "pm-codex-runtime",
   "private": true,
   "type": "module",
-  "version": "2026.10.8",
+  "version": "2026.10.10",
   "dependencies": {
-    "@unbrained/pm-cli": "2026.10.8"
+    "@unbrained/pm-cli": "2026.10.10"
   }
 }

package/plugins/pm-codex/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "pm-codex",
-  "version": "2026.10.8",
+  "version": "2026.10.10",
   "description": "Repository-native project context workflows and a version-pinned pm MCP server for Codex.",
   "author": {
     "name": "unbrained",

package/runtime-dependencies.json

@@ -1,12 +1,12 @@
 {
   "name": "@unbrained/pm-cli",
-  "version": "2026.10.8",
+  "version": "2026.10.10",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@unbrained/pm-cli",
-      "version": "2026.10.8",
+      "version": "2026.10.10",
       "dependencies": {
         "@sentry/node": "10.75.1",
         "@toon-format/toon": "^4.1.1",