@unbrained/pm-cli 2026.11.1 → 2026.11.3

package/docs/EXTENSIONS.md

@@ -306,7 +306,7 @@ Use the public SDK barrel. Do not deep-import from `src/core` or `dist/core`.
 - `api.extension` is a read-only identity (`name`, `layer`, `version`, `capabilities`, `pm_min_version?`, `pm_max_version?`, `source_package?`) for self-identifying logs and version gating without re-reading the manifest.
 - `api.registerCommand(definition)` adds package-owned commands; `read_output` opts readers into the [SDK output contract](SDK.md#minimal-command-extension).
 - `api.registerFlags(command, flags)` adds runtime command flags. A flag may declare `value_type` (canonical; the legacy `type` alias is honored only when `value_type` is absent), `list: true` to accumulate repeated/comma-joined values like core `--tags`, a `default` applied when the flag is omitted, and `value_validation: "strict"` to refuse malformed `number`/`boolean` tokens before the handler runs (the default `"coerce"` forwards the raw token). See [Flag Contracts](SDK.md#flag-contracts).
-- `api.registerItemFields(fields)` adds custom metadata fields. Agents can set declared fields with repeatable `pm create --field name=value` and `pm update <id> --field name=value`; undeclared names are rejected. `SchemaFieldDefinition.type` is the same closed union used by `pm schema add-field`: `string | number | boolean | string_array | array | object`. Unsupported values fail at compile time for TypeScript authors and at activation for JavaScript packages, with a did-you-mean hint on typos. `string_array` is the repeatable string collection; `array` and `object` require JSON containers. Active fields support `get`, `list` and `search` projections with `--fields name` or `--fields item.name`, preserving declared value types through `PmClient` and CLI reads. Disabled packages do not contribute selectors. Tracked by [pm-gh1571](../.agents/pm/issues/pm-gh1571.toon).
+- `api.registerItemFields(fields)` adds custom metadata fields. Agents can set declared fields with repeatable `pm create --field name=value` and `pm update <id> --field name=value`; undeclared names are rejected. Extension declarations are matched first; a name that no active extension declares but the project schema does (for example `gate_evidence`) is refused with `project_schema_field_requires_declared_flag`, which names a CLI flag and an SDK option that each set only that field (each is omitted when every spelling is shared with another declared field or with an option of the command itself) and, on the CLI, an executable `suggested_retry_args` that rewrites only that assignment. The guidance follows the invoking scope (a bulk `update-many` row is routed under `update_many`, not `update`), and when the same invocation already sets that field through a declared flag, alias or option, no route or retry is offered, because the retry would carry two values for one field ([pm-wftvem](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-wftvem.toon); tracker record excluded from npm); reserved core keys keep `core_item_field_requires_dedicated_flag`. `SchemaFieldDefinition.type` is the same closed union used by `pm schema add-field`: `string | number | boolean | string_array | array | object`. Unsupported values fail at compile time for TypeScript authors and at activation for JavaScript packages, with a did-you-mean hint on typos. `string_array` is the repeatable string collection; `array` and `object` require JSON containers. Active fields support `get`, `list` and `search` projections with `--fields name` or `--fields item.name`, preserving declared value types through `PmClient` and CLI reads. Disabled packages do not contribute selectors. Tracked by [pm-gh1571](../.agents/pm/issues/pm-gh1571.toon).
 - Custom fields whose camel-case option name is already owned by a canonical MCP input remain usable through `options.<name>`, but authoring surfaces report the collision instead of allowing silent top-level shadowing. `pm schema add-field`, `pm profile lint`, and `pm package doctor` name the field, canonical `mcp_tool_input` owner, and nested recovery path. SDK authors can preflight the same rule with `resolvePmToolCustomFieldCollision`.
 - `api.registerItemTypes(types)` adds custom item types.
 - `api.registerRelationshipKinds(definitions)` adds validated graph semantics. Definitions declare direction, inverse spelling, ordering/precedence, hierarchy, cardinality, lifecycle, aliases, payload schema, compatibility version, and self-edge policy. Active definitions govern CLI, MCP, and SDK dependency mutation admission as well as workspace graph assembly; mutation aliases are stored canonically. Requires the `schema` capability and is governed by the `schema.relationshipkinds` policy surface. See [relationship mutation admission](RELATIONSHIP_GRAPH.md#contract), tracked by [pm-7dsolo](../.agents/pm/issues/pm-7dsolo.toon).
@@ -426,7 +426,7 @@ import { createExtensionTestHarness } from "@unbrained/pm-cli/sdk/testing";
 import { activateExtensionForTest } from "@unbrained/pm-cli/sdk/testing";
 ```
 
-Runtime modules use static SDK imports; installed copies receive a host SDK link. Use `createPmCliExpectedError(message, { exitCode, context })` for expected user/action failures from package commands. It creates an `Error` named `PmCliError` with a structural `exitCode`, so separately installed package code still gets expected-error handling and Sentry filtering. Commands that need to render a structured gate report and still fail CI may instead return an object with `exit_code` from `1` through `255`; optional string `code` and `remediation` fields are preserved by the host. The result is rendered normally, and the CLI exits with the declared status. Thrown plain objects also preserve bounded `code` and `remediation` fields in the host error contract.
+Runtime modules use static SDK imports; installed copies receive a host SDK link. Use `createPmCliExpectedError(message, { exitCode, context })` for expected user/action failures from package commands. It creates an `Error` named `PmCliError` with a structural `exitCode`, so separately installed package code still gets expected-error handling and Sentry filtering. Commands that need to render a structured gate report and still fail CI may instead return an object with `exit_code` from `1` through `255`; optional string `code` and `remediation` fields are preserved by the host. The result is rendered normally, and the CLI exits with the declared status. Thrown plain objects also preserve bounded `code` and `remediation` fields in the host error contract; those bounds never split a surrogate pair. Put structured, package-owned facts in `context.details` (plain JSON, at most 4,096 bytes when rendered) rather than spreading them over host fields. The host renders them in `--json`, text and MCP refusals and never sends them to telemetry or Sentry; see [Producer-owned diagnostics](SDK.md#producer-owned-diagnostics-contextdetails).
 Prefer the `define*` builders for exported registration definitions (`defineCommand`, `defineFlag`, `defineSearchProvider`, `defineAfterCommandHook`, and the matching override/import/export/hook helpers; see ADR [pm-3mph](../.agents/pm/decisions/pm-3mph.toon)). They are zero-cost identity functions that preserve object literal types and contextually type function parameters before the definitions reach `api.register*`; runtime validation remains in the loader, and behavior validation remains in `sdk/testing`.
 Packages that extend core list or search behavior should import `LIST_FILTER_EXTENSION_FLAG_DEFINITIONS`, `SEARCH_EXTENSION_FLAG_DEFINITIONS`, or `toExtensionFlagDefinitions` from `@unbrained/pm-cli/sdk/authoring` instead of copying CLI option tables. For example: `api.registerFlags("my search", SEARCH_EXTENSION_FLAG_DEFINITIONS)`.
 The adapter expands aliases into registration-ready definitions and preserves string/boolean behavior, list accumulation, repeatability, requiredness, descriptions, and value names from the canonical CLI contracts. Use `toExtensionFlagDefinitions` with another exported CLI flag contract for a narrower baseline.

package/docs/LINKED_TEST_EDITS.md

@@ -21,11 +21,44 @@ index and metadata field names in `context.linked_test_update`.
 Use `null` to clear an optional field, such as a note, path or timeout. Scope is
 required and cannot be cleared. Every entry must retain a nonblank command or path:
 replace a path-only entry's path rather than clearing its last identity.
-Unknown fields, command changes, provenance
-changes and editor-stamp overrides are refused. To change the command, remove
-and add it through the ordinary provenance-recording workflow. Editing context
-or environment controls changes the clone-local trust fingerprint, so any prior
-acknowledgment must be reviewed again.
+Unknown fields, provenance changes and editor-stamp overrides are refused with
+`linked_test_patch_fields_unsupported`, which lists the editable fields in
+`recovery.allowed_values`. Editing context or environment controls changes the
+clone-local trust fingerprint, so any prior acknowledgment must be reviewed again.
+
+A command is the entry's immutable identity, so a `command` or `cmd` key is
+refused with `linked_test_command_immutable` before anything is written. The
+refusal's `recovery.suggested_retry_args` is the supported replacement
+([pm-1rfy0y](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-1rfy0y.toon);
+tracker record excluded from npm): one `pm test` invocation
+that removes the selected entry (by its exact command, or by its locked position
+when the entry has no unique command) and adds the new command with the entry's
+other metadata and any other fields from your patch. The replacement records
+fresh provenance in a single `tests_add` history event, leaves every other entry
+untouched, and is appended at the end of the list:
+
+```bash
+pm test <item-id> --update-index 1 --set-json '{"command":"node scripts/check-v2.mjs"}' --json
+# refused: linked_test_command_immutable; run the advertised retry, for example
+pm test <item-id> --remove 'command=node scripts/check.mjs' --add-json '{"command":"node scripts/check-v2.mjs","scope":"project","note":"Verified coverage gate"}'
+```
+
+Repeating the current command, or sending an empty one, is refused with the same
+code and a pointer to the editable fields instead of a replacement. Other fields
+in the same patch are validated before the retry is offered, so an unsupported
+key, `scope: null` or an invalid value refuses instead of being silently dropped.
+When the replacement would have the same identity (command, path, scope and
+context modes) as another entry, the add would be deduplicated away, so no retry
+is offered; the refusal names that entry's `--update-index` and the selected
+entry's `--remove-index` instead. Conflicting `command` and `cmd` values, and a
+replacement that would invoke `pm test-all`, refuse without a retry. Explicit
+`--author`, `--message` and `--force` on the refused edit are carried into the
+retry, so ownership and history attribution match the original request.
+The retry is a separate mutation: if other writers may change the item's tests
+in between, list them again before running it. An atomic replacement under one
+item lock is tracked by
+[pm-5igljl](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-5igljl.toon)
+(tracker record excluded from npm).
 
 Exactly one selector must match the current collection under the item lock.
 Absent selectors and ambiguous command/path matches refuse the whole edit and

package/docs/RELEASING.md

@@ -317,8 +317,18 @@ installed-version verification. [pm-iceees](../.agents/pm/issues/pm-iceees.toon)
 keeps selected optional-peer subtrees complete: npm deliberately skips peer edges
 when gathering bundled files, so staged runtime manifests record the exact tested
 peer bindings as ordinary or optional dependency entries. Package code, source
-and installed manifests, peer declarations, and the root public dependency
-inventory remain intact. A real archive regression resolves the peer's descendant
+and installed manifests, and peer declarations remain intact.
+[pm-2csj4k](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-2csj4k.toon) (repository-only tracker record excluded from npm) adds one root entry per required
+peer: Bun installs resolve a package's dependencies from the registry instead of
+its `bundleDependencies`, so the published root manifest pins every non-optional
+peer target that the ledger installs at the root to its tested version and
+bundles it. A peer resolved only in a nested `node_modules` is not pinned,
+because the root manifest may name only root-installed packages, which the
+installed-runtime verifier enforces. Without the pin,
+`@sentry/node`'s `@opentelemetry/api ^1.9.1` resolved to 1.10.0 and Bun warned
+against the bundled OpenTelemetry packages' `<1.10.0` peer ranges. Optional-only
+peers and direct dependencies are unchanged, and the packed smoke runs a verbose
+`bun add` and fails on any peer-range warning. A real archive regression resolves the peer's descendant
 from an extracted package and the installed-runtime verifier still refuses any
 missing locked package. npm 12 ignores published shrinkwraps; shipping
 a shrinkwrap alone therefore cannot enforce this contract. SDK consumers
@@ -467,6 +477,16 @@ contents, comments, JSDoc, symbols and module boundaries retain their original
 tokens. Source declarations remain readable, and packed TypeScript consumers
 verify the emitted surface before publication. Artifact ceilings remain unchanged.
 
+The generated error-code catalog ships as compact rows
+([pm-998juj](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/tasks/pm-998juj.toon), a repository-only tracker record excluded from npm).
+`scripts/generate-error-code-catalog.mjs` omits every derivable field: the
+meaning sentence, the class implied by the exit code, the shared recovery
+guidance, provisional stability, every-command emitters, a self canonical code
+and empty aliases. `expandPmErrorCodeCatalogRows` restores them at load time,
+so `PM_ERROR_CODE_CATALOG` and every serialized projection stay byte-identical.
+The catalog appears once in the tsc emit and once in each CLI bundle, and the
+compact rows removed about 320 KB from the packed distribution.
+
 5. Land the implementation through a reviewed pull request, then use hosted
    preparation for publication.
 

package/docs/SDK.md

@@ -328,6 +328,32 @@ try {
 }
 ```
 
+Locks are confined to the tracker
+([pm-gh1647](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-gh1647.toon),
+a repository-only tracker record excluded from npm). The built-in provider
+never follows a symlink below the tracker root. If `locks/` or any other
+component between the tracker root and the lock entry is a symlink or not a
+directory, or the lock entry itself is a symlink, `acquireLock` and
+`acquireLockLease` refuse with `lock_path_unsafe` (exit 4). A regular-file lock
+entry is a peer's lock, not a refusal. The refusal carries `context.reason`
+(`lock_directory_symlink`, `lock_directory_not_directory`,
+`lock_entry_symlink` or `lock_path_outside_tracker`), the tracker-relative
+`context.lock_component`, and `context.required` recovery text for that reason.
+For these four reasons nothing is created outside the tracker and no cleanup
+gate remains. After creating the lock file, the provider checks that the new
+file is the confined entry in the directory it inspected. A directory swapped
+during acquisition refuses with the same `lock_path_unsafe` code and the
+fifth reason, `lock_directory_replaced`, with `context.lock_component` naming
+the replaced tracker-relative directory, and the lease is never returned.
+The lock file created through the swapped directory stays where the swap
+pointed, which can be outside the tracker, and a cleanup gate
+created before the swap can stay in the displaced directory. pm never deletes
+outside the tracker: Node has no descriptor-relative unlink, so a path-based
+delete could remove a same-name replacement. `pm gc --scope locks`
+applies the same check and refuses to sweep through a symlinked `locks/`
+directory. The tracker root itself may be a symlink: confinement is relative to
+the root you pass.
+
 See
 [Configuration](CONFIGURATION.md#common-settings) for host identity, local
 recovery audit receipts and `PM_LOCK_WAIT_MS` precedence. Extension lock
@@ -657,7 +683,8 @@ for policies, work ceilings and refusal contracts, tracked by
 Session receipts now advertise `pm get <item-id> --depth brief`; the
 `restore_reference_with` literal type changes accordingly. Hosts constructing
 `ExtensionCommandSdk` implementations must supply `fitOutputEnvelope` from the
-public SDK; host-created command contexts already provide it.
+public SDK, plus `readSettingsSection` and `writeSettingsSection` bound to the
+invocation tracker; host-created command contexts already provide all three.
 
 Tracked by [pm-5t33or](../.agents/pm/features/pm-5t33or.toon),
 [pm-gmdzaa](../.agents/pm/issues/pm-gmdzaa.toon), and
@@ -3102,6 +3129,81 @@ propagates `code` and `remediation` through the command-handler result contract.
 Invalid `exit_code` values are rejected rather than truncated or silently
 treated as success.
 
+### Producer-owned diagnostics (`context.details`)
+
+Tracked by [pm-gh1631](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-gh1631.toon)
+(tracker record excluded from npm). Host fields such as `code`, `required` and
+`recovery` describe the refusal in the host's own vocabulary. Facts that belong
+to the package go in `context.details`, a plain JSON object the host never
+interprets:
+
+```ts
+import { createPmCliExpectedError } from "@unbrained/pm-cli/sdk/runtime";
+
+throw createPmCliExpectedError("No changelog section for 2026.11.1", {
+  exitCode: 1,
+  context: {
+    code: "release_notes_missing",
+    details: {
+      selection_report: { filters: { version: "2026.11.1" }, excluded: { status: 1 } },
+    },
+  },
+});
+```
+
+- **Shape.** Values are `null`, booleans, finite numbers, well-formed strings,
+  arrays and plain objects, nested at most `PM_CLI_ERROR_DETAILS_LIMITS.max_depth`
+  (8) containers deep. `__proto__` keys and accessor properties are refused;
+  getters are never run. `createPmCliExpectedError` throws a `TypeError` whose
+  message names only the reason (`unsupported_value`, `non_finite_number`,
+  `malformed_unicode`, `reserved_key`, `depth_limit`, `not_plain_object`); the
+  offending path is on its non-enumerable `path` property, so crash reporting
+  of that fault never carries your keys. A well-formed value is kept as a
+  detached copy, so later changes to your object do not alter a raised
+  refusal; an oversized one is replaced at construction by the host-set
+  receipt `context.details_omitted: { reason: "byte_limit", byte_limit }`, so a
+  later change cannot alter the refusal either. `isPmCliErrorDetails(value)`
+  performs the same check.
+- **Rendering.** `--json` errors carry the object as `details`, text output
+  renders it as an indented JSON `Details:` block, and MCP tool errors carry it
+  inside the forwarded context. Diagnostics are rendered whole or not at all:
+  above `PM_CLI_ERROR_DETAILS_LIMITS.max_bytes` (4,096 bytes of compact UTF-8
+  JSON), or when a separately bundled error carries a malformed shape, the
+  envelope carries `details_omitted: { reason, path?, byte_limit }` instead.
+  Admitted details that would push the pretty-printed `--json` envelope past
+  the error diagnostic budget are replaced the same way, with reason
+  `diagnostic_budget`.
+  The size is counted while walking and the walk stops at the ceiling, so
+  shared or repeated structures cannot amplify the work; `path` is capped at
+  160 bytes. The CLI and MCP read a separately bundled error's context once as
+  plain data (`snapshotPmCliErrorContext`): getters are never run, and a
+  context that cannot be inspected becomes empty. MCP admits `details` from that
+  snapshot with the same bounded walk before serializing anything, then
+  serializes the remaining host fields once (a context-level `toJSON` is
+  ignored), so no serializer can expand or replace the diagnostics; a context
+  JSON cannot encode (for example a bigint member) is forwarded as
+  `{ code, context_unserializable: true }` so the response is still written. When the text output exceeds its token ceiling, the
+  text renderer drops the explanation (`why`) first and then the `Details:`
+  block (together with the example and next-step limits). A block dropped this
+  way gets no `Details omitted:` line, only the generic notice that points to
+  `--json`, which keeps the details. Custom SDK hosts apply the
+  same bound with `projectPmCliErrorDetails(value)` (returns `{ details }`,
+  `{ details_omitted }` or `undefined`) or, for a context forwarded as-is,
+  `projectPmCliErrorContextDetails(context)`.
+- **Privacy.** Telemetry and Sentry never receive `details`. The telemetry
+  classification is built without it. A crash report carries an error
+  context only as its top-level primitive fields, read without running
+  getters or `toJSON`, so diagnostics cannot reach it under another key: this
+  applies to `error_context` and to the error-data entry, which is rebuilt
+  whole from the original exception (its own primitive fields plus the safe
+  context), because the integration serializes the error, including any
+  error-level `toJSON`, before `beforeSend`. Serialized copies whose original
+  cannot be recovered are discarded: embedded contexts in console-capture
+  data, breadcrumbs and transactions are sent as empty objects, and complete
+  serialized console `arguments` are sent as empty arrays, because an error's
+  own `toJSON` can move diagnostics out of any named slot. The custom-host
+  projections drop a context-level `toJSON` for the same reason.
+
 ## Package Runtime Imports
 
 Third-party packages should import from stable public SDK subpaths:

package/docs/SDK_CONFIGURATION_SAFETY.md

@@ -46,6 +46,61 @@ and reconstructed in the preview. File-backed schema overlays and unknown raw
 keys are outside this normalized preview. Inspect the persisted document when
 raw-source information is needed.
 
+## Extension-owned Settings Sections
+
+Tracked by [pm-gh1580](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-gh1580.toon)
+(a repository-only tracker record excluded from npm).
+
+Core settings readers validate the core tree and strip keys they do not own.
+That includes a package's own top-level section, such as `"lint": {...}`.
+Read and write that section through the host instead of re-reading
+`settings.json` by path:
+
+```ts
+const lint = await context.sdk!.readSettingsSection("lint", {
+  validate: (raw) => lintSettingsSchema.parse(raw),
+  defaultValue: { strict: false },
+});
+// lint.source: "stored" | "default"; lint.value; lint.revision ("sha256:<hex>" or null)
+
+await context.sdk!.writeSettingsSection("lint", { ...lint.value, strict: true }, {
+  expectedRevision: lint.revision,
+  validate: (raw) => lintSettingsSchema.parse(raw),
+});
+```
+
+The same functions are public SDK exports (`readSettingsSection(pmRoot, section,
+options)`, `writeSettingsSection(pmRoot, section, value, options)` and
+`settingsSectionRevision(value)` from `@unbrained/pm-cli/sdk`). The
+`context.sdk` variants are bound to the invocation's tracker.
+
+- A section name is 1-64 lowercase letters, digits, underscores or hyphens,
+  starting with a letter. Any other name refuses with
+  `settings_section_name_invalid`. Core keys such as `locks` or `context`
+  refuse with `settings_section_reserved`; use `writeSettings`, `pm config` or
+  `mutateWorkspaceSettings` for those.
+- If settings.json is not a JSON object, the call refuses with
+  `settings_section_document_malformed` instead of throwing a parse error.
+- If the validator throws, the call refuses with `settings_section_invalid`.
+  `context.field` names the section, and the message carries the validator's
+  bounded message. Reads validate the stored value; writes validate the value
+  before storing it. A write also refuses with `settings_section_invalid` when
+  the value would change if stored as JSON: a non-finite number, an
+  `undefined`, function or symbol value, a symbol key, or a non-plain object
+  such as `Date`, including an array with holes, extra keys or a `toJSON`
+  hook. A key named `__proto__`, or `prototype` beneath `constructor`, also
+  refuses because the settings history cannot record it. The message names the
+  first such path, and nothing is written.
+- A write runs under the settings lock and appends one `settings:section:write`
+  workspace history event. Every other key is kept. Pass `undefined` to remove
+  the section. An unchanged value writes nothing and returns `changed: false`.
+- `expectedRevision` makes the write compare-and-set. `null` requires the section
+  to be absent. If the section changed since it was read, the write refuses with
+  `settings_section_revision_conflict` (exit 4) and records
+  `context.expected_revision` and `context.current_revision`. If settings.json
+  does not exist, the write refuses with `settings_section_document_missing`
+  (exit 3); initialize the tracker first.
+
 ## Read-only Package Freshness
 
 `pm package explore`, `doctor`, and `manage` preserve managed installation state.

package/docs/TESTING.md

@@ -332,7 +332,7 @@ original assertions, deadlines and retry policy. This allocation is tracked by
 (tracker records are excluded from npm); it does not classify or erase
 historical failed attempts.
 
-The complete nightly suites use two Vitest shards on Linux Node 22/25 and
+The complete nightly suites use two Vitest shards on Linux Node 22/26 and
 macOS Node 24, and four shards on Windows Node 24 and Linux Node 24 coverage.
 Every partition must pass within the existing 20-minute job limit. Sharding
 retains the complete file population, serial phase, assertions, per-test
@@ -368,6 +368,7 @@ Coverage gating now targets literal all-source coverage across runtime code fami
 - Avoid reintroducing curated coverage allowlists; keep the full all-source corpus measurable and gated.
 - Prefer extending existing test files and shared helpers so new coverage remains fast and non-duplicative.
 - Prefer extracting deterministic pure helpers (and unit-testing them) when an orchestration-heavy file is difficult to cover directly.
+- Vitest 5 clears every mock's recorded calls before each test (`clearMocks` defaults to `true`; [pm-fokyhh](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/chores/pm-fokyhh.toon), a repository-only tracker record excluded from npm). A spy created in `vi.hoisted` that observes work done while the module under test is imported must record into its own array, as the SDK exemplar entry specs do; `mock.calls` is empty by the time the test body runs.
 
 Static quality also enforces source documentation coverage through `pnpm
 quality:static`: every `src/**/*.ts` source file needs a module TSDoc block,

package/docs/generated/REFUSAL_CLOSURE_CENSUS.md

@@ -4,12 +4,12 @@ Tracker: `pm-f05lsg`.
 
 Every catalog code is listed. An `uncovered` row is an explicit closure obligation, never an omission or implied approval.
 
-- Catalog error codes: 434
+- Catalog error codes: 446
 - Executable error codes: 19
 - Executable-code ratchet floor: 18
 - Required executable canonical codes: `bulk_ids_input_empty`, `bulk_ids_input_missing_path`, `bulk_ids_input_unreadable`, `invalid_argument_value`, `manifest_unknown_key`, `missing_lifecycle_target`, `missing_required_argument`, `no_version_bounds_declared`, `projection_options_mutually_exclusive`, `tracker_not_initialized`, `tracker_root_missing`, `tracker_root_not_directory`, `tracker_root_unreadable`, `unknown_context_intent`, `unknown_field_projection`, `unknown_option`, `unknown_subcommand`
-- Uncovered error codes: 415
-- Coverage fraction: 0.043779
+- Uncovered error codes: 427
+- Coverage fraction: 0.042601
 - Closed-domain probes: 19
 - Grammar probes: 117
 
@@ -194,8 +194,10 @@ Every catalog code is listed. An `uncovered` row is an explicit closure obligati
 | `likely_duplicate` | `likely_duplicate` | uncovered | none | 0 |
 | `linked_artifact_mutation_conflict` | `linked_artifact_mutation_conflict` | uncovered | none | 0 |
 | `linked_resource_positional_value` | `linked_resource_positional_value` | uncovered | none | 0 |
+| `linked_test_command_immutable` | `linked_test_command_immutable` | uncovered | none | 0 |
 | `linked_test_command_not_executable` | `linked_test_command_not_executable` | uncovered | none | 0 |
 | `linked_test_context_invalid` | `linked_test_context_invalid` | uncovered | none | 0 |
+| `linked_test_patch_fields_unsupported` | `linked_test_patch_fields_unsupported` | uncovered | none | 0 |
 | `linked_test_remove_no_match` | `linked_test_remove_no_match` | uncovered | none | 0 |
 | `linked_test_update_ambiguous` | `linked_test_update_ambiguous` | uncovered | none | 0 |
 | `linked_test_update_no_match` | `linked_test_update_no_match` | uncovered | none | 0 |
@@ -205,6 +207,7 @@ Every catalog code is listed. An `uncovered` row is an explicit closure obligati
 | `local_source_not_found_bare_name` | `local_source_not_found_bare_name` | uncovered | none | 0 |
 | `lock_conflict` | `lock_conflict` | uncovered | none | 0 |
 | `lock_lost` | `lock_lost` | uncovered | none | 0 |
+| `lock_path_unsafe` | `lock_path_unsafe` | uncovered | none | 0 |
 | `locks_stale_count` | `locks_stale_count` | uncovered | none | 0 |
 | `locks_unreadable` | `locks_unreadable` | uncovered | none | 0 |
 | `malformed_plan_step_evidence` | `malformed_plan_step_evidence` | uncovered | none | 0 |
@@ -282,6 +285,7 @@ Every catalog code is listed. An `uncovered` row is an explicit closure obligati
 | `project_runtime_item_format_incompatible` | `project_runtime_item_format_incompatible` | uncovered | none | 0 |
 | `project_runtime_stale_mutation` | `project_runtime_stale_mutation` | uncovered | none | 0 |
 | `project_runtime_stale_read` | `project_runtime_stale_read` | uncovered | none | 0 |
+| `project_schema_field_requires_declared_flag` | `project_schema_field_requires_declared_flag` | uncovered | none | 0 |
 | `projection_options_mutually_exclusive` | `projection_options_mutually_exclusive` | executable | closed_domain | 3 |
 | `provenance_value_domain_invalid` | `provenance_value_domain_invalid` | uncovered | none | 0 |
 | `read_output_cursor_command_mismatch` | `read_output_cursor_command_mismatch` | uncovered | none | 0 |
@@ -312,8 +316,16 @@ Every catalog code is listed. An `uncovered` row is an explicit closure obligati
 | `settings_read_invalid_json` | `settings_read_invalid_json` | uncovered | none | 0 |
 | `settings_read_invalid_schema` | `settings_read_invalid_schema` | uncovered | none | 0 |
 | `settings_read_merge_failed` | `settings_read_merge_failed` | uncovered | none | 0 |
+| `settings_section_document_malformed` | `settings_section_document_malformed` | uncovered | none | 0 |
+| `settings_section_document_missing` | `settings_section_document_missing` | uncovered | none | 0 |
+| `settings_section_invalid` | `settings_section_invalid` | uncovered | none | 0 |
+| `settings_section_name_invalid` | `settings_section_name_invalid` | uncovered | none | 0 |
+| `settings_section_reserved` | `settings_section_reserved` | uncovered | none | 0 |
+| `settings_section_revision_conflict` | `settings_section_revision_conflict` | uncovered | none | 0 |
 | `settings_unreadable` | `settings_unreadable` | uncovered | none | 0 |
+| `settings_write_assigned_path_invalid` | `settings_write_assigned_path_invalid` | uncovered | none | 0 |
 | `settings_write_invalid_existing_json` | `settings_write_invalid_existing_json` | uncovered | none | 0 |
+| `settings_write_invalid_existing_schema` | `settings_write_invalid_existing_schema` | uncovered | none | 0 |
 | `stale_budget` | `stale_budget` | uncovered | none | 0 |
 | `stale_destination` | `stale_destination` | uncovered | none | 0 |
 | `stale_observed_signature` | `stale_observed_signature` | uncovered | none | 0 |

package/marketplace.json

@@ -1 +1 @@
-{"name":"pm","owner":{"name":"unbrained","url":"https://github.com/unbraind/pm-cli"},"description":"Official marketplace for pm CLI — native git-based project management for Claude Code and AI coding agents.","version":"2026.11.1","plugins":[{"name":"pm-claude","source":"./plugins/pm-claude","description":"Native pm CLI integration for Claude Code — 32 MCP tools, 14 workflow skills with slash invocations, 4 subagents, hybrid TUI task tracking, session context injection, and coordination subagents for git-based project management without leaving Claude Code.","version":"2026.11.1","author":{"name":"unbrained","url":"https://github.com/unbraind/pm-cli"},"homepage":"https://github.com/unbraind/pm-cli","repository":"https://github.com/unbraind/pm-cli","license":"MIT","keywords":["pm-cli","project-management","mcp","tasks","agents","workflows","git-native","task-tracker","ai"],"category":"productivity"}]}
+{"name":"pm","owner":{"name":"unbrained","url":"https://github.com/unbraind/pm-cli"},"description":"Official marketplace for pm CLI — native git-based project management for Claude Code and AI coding agents.","version":"2026.11.3","plugins":[{"name":"pm-claude","source":"./plugins/pm-claude","description":"Native pm CLI integration for Claude Code — 32 MCP tools, 14 workflow skills with slash invocations, 4 subagents, hybrid TUI task tracking, session context injection, and coordination subagents for git-based project management without leaving Claude Code.","version":"2026.11.3","author":{"name":"unbrained","url":"https://github.com/unbraind/pm-cli"},"homepage":"https://github.com/unbraind/pm-cli","repository":"https://github.com/unbraind/pm-cli","license":"MIT","keywords":["pm-cli","project-management","mcp","tasks","agents","workflows","git-native","task-tracker","ai"],"category":"productivity"}]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-cli",
-  "version": "2026.11.1",
+  "version": "2026.11.3",
   "description": "Git-native project management CLI for humans and agents.",
   "type": "module",
   "packageManager": "pnpm@11.28.5",
@@ -137,7 +137,10 @@
     "semver": "7.8.5",
     "tar": "7.5.22",
     "tinyglobby": "^0.2.17",
-    "yaml": "^2.9.1"
+    "yaml": "^2.9.1",
+    "@opentelemetry/api": "1.9.1",
+    "@opentelemetry/core": "2.12.0",
+    "@opentelemetry/sdk-trace-base": "2.12.0"
   },
   "peerDependencies": {
     "@types/node": "^22 || ^24 || ^26"
@@ -156,6 +159,9 @@
     "semver",
     "tar",
     "tinyglobby",
-    "yaml"
+    "yaml",
+    "@opentelemetry/api",
+    "@opentelemetry/core",
+    "@opentelemetry/sdk-trace-base"
   ]
 }

package/packages/pm-beads/package.json

@@ -1 +1 @@
-{"name":"@unbrained/pm-beads","version":"2026.11.1","private":true,"type":"module","description":"First-party pm package for importing Beads JSONL records.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-beads#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-beads"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","project-management","beads"],"pm":{"aliases":["beads"],"extensions":["extensions/beads"],"catalog":{"display_name":"Beads Import","category":"migration","summary":"Import Beads JSONL records into pm while preserving source IDs.","tags":["migration","beads","import"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-beads#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-beads","report":"https://github.com/unbraind/pm-cli/issues"}},"docs":["README.md"],"examples":["README.md"]}}
+{"name":"@unbrained/pm-beads","version":"2026.11.3","private":true,"type":"module","description":"First-party pm package for importing Beads JSONL records.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-beads#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-beads"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","project-management","beads"],"pm":{"aliases":["beads"],"extensions":["extensions/beads"],"catalog":{"display_name":"Beads Import","category":"migration","summary":"Import Beads JSONL records into pm while preserving source IDs.","tags":["migration","beads","import"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-beads#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-beads","report":"https://github.com/unbraind/pm-cli/issues"}},"docs":["README.md"],"examples":["README.md"]}}

package/packages/pm-calendar/package.json

@@ -1 +1 @@
-{"name":"@unbrained/pm-calendar","version":"2026.11.1","private":true,"type":"module","description":"First-party pm package for calendar and agenda views.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-calendar#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-calendar"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","project-management","calendar","agenda"],"pm":{"aliases":["calendar"],"extensions":["extensions/calendar"],"catalog":{"display_name":"Calendar Views","category":"workflow","summary":"Show agenda, day, week, and month views for deadlines, reminders, and scheduled events.","tags":["calendar","agenda","workflow"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-calendar#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-calendar","report":"https://github.com/unbraind/pm-cli/issues"}},"docs":["README.md"],"examples":["README.md"]}}
+{"name":"@unbrained/pm-calendar","version":"2026.11.3","private":true,"type":"module","description":"First-party pm package for calendar and agenda views.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-calendar#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-calendar"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","project-management","calendar","agenda"],"pm":{"aliases":["calendar"],"extensions":["extensions/calendar"],"catalog":{"display_name":"Calendar Views","category":"workflow","summary":"Show agenda, day, week, and month views for deadlines, reminders, and scheduled events.","tags":["calendar","agenda","workflow"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-calendar#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-calendar","report":"https://github.com/unbraind/pm-cli/issues"}},"docs":["README.md"],"examples":["README.md"]}}

package/packages/pm-command-kit/package.json

@@ -1 +1 @@
-{"name":"@unbrained/pm-command-kit","version":"2026.11.1","private":true,"type":"module","description":"First-party pm exemplar package for the commands capability: registerCommand, registerFlags, and registerParser.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-command-kit#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-command-kit"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","project-management","sdk","commands","exemplar"],"pm":{"aliases":["command-kit"],"extensions":["extensions/command-kit"],"catalog":{"display_name":"Command Kit Exemplar","category":"sdk","summary":"Copy-paste-able exemplar for registerCommand, registerFlags, and registerParser.","tags":["sdk","commands","parser","exemplar"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-command-kit#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-command-kit","report":"https://github.com/unbraind/pm-cli/issues"}},"docs":["README.md"],"examples":["README.md"]}}
+{"name":"@unbrained/pm-command-kit","version":"2026.11.3","private":true,"type":"module","description":"First-party pm exemplar package for the commands capability: registerCommand, registerFlags, and registerParser.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-command-kit#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-command-kit"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","project-management","sdk","commands","exemplar"],"pm":{"aliases":["command-kit"],"extensions":["extensions/command-kit"],"catalog":{"display_name":"Command Kit Exemplar","category":"sdk","summary":"Copy-paste-able exemplar for registerCommand, registerFlags, and registerParser.","tags":["sdk","commands","parser","exemplar"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-command-kit#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-command-kit","report":"https://github.com/unbraind/pm-cli/issues"}},"docs":["README.md"],"examples":["README.md"]}}

package/packages/pm-digital-twin/package.json

@@ -1 +1 @@
-{"name":"@unbrained/pm-digital-twin","version":"2026.11.1","private":true,"type":"module","description":"Beyond-PM exemplar: a temporal production-facility digital twin built entirely on public pm SDK and extension primitives.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-digital-twin#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-digital-twin"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","sdk","digital-twin","event-sourcing","temporal-graph","exemplar"],"pm":{"aliases":["digital-twin","twin"],"extensions":["extensions/digital-twin"],"catalog":{"display_name":"Digital Twin SDK Exemplar","category":"sdk","summary":"Temporal facility graph proving event replay, point-in-time state, invariants, federation, checkpoints, and compact exports through public SDK contracts.","tags":["sdk","digital-twin","event-sourcing","graph","offline-first","exemplar"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-digital-twin#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-digital-twin","report":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-digital-twin/GAP_REPORT.md"}},"docs":["README.md","GAP_REPORT.md"],"examples":["README.md"]}}
+{"name":"@unbrained/pm-digital-twin","version":"2026.11.3","private":true,"type":"module","description":"Beyond-PM exemplar: a temporal production-facility digital twin built entirely on public pm SDK and extension primitives.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-digital-twin#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-digital-twin"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","sdk","digital-twin","event-sourcing","temporal-graph","exemplar"],"pm":{"aliases":["digital-twin","twin"],"extensions":["extensions/digital-twin"],"catalog":{"display_name":"Digital Twin SDK Exemplar","category":"sdk","summary":"Temporal facility graph proving event replay, point-in-time state, invariants, federation, checkpoints, and compact exports through public SDK contracts.","tags":["sdk","digital-twin","event-sourcing","graph","offline-first","exemplar"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-digital-twin#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-digital-twin","report":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-digital-twin/GAP_REPORT.md"}},"docs":["README.md","GAP_REPORT.md"],"examples":["README.md"]}}

package/packages/pm-governance-audit/package.json

@@ -1 +1 @@
-{"name":"@unbrained/pm-governance-audit","version":"2026.11.1","private":true,"type":"module","description":"First-party pm package for governance audit and normalization workflows.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-governance-audit#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-governance-audit"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","project-management","governance","audit","normalize","hooks"],"pm":{"aliases":["governance-audit","audit"],"extensions":["extensions/governance-audit"],"catalog":{"display_name":"Governance Audit","category":"governance","summary":"Run dedupe audits, comments audits, and normalize sweeps as package-owned workflows.","tags":["governance","audit","normalize","hooks"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-governance-audit#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-governance-audit","report":"https://github.com/unbraind/pm-cli/issues"}},"docs":["README.md"],"examples":["README.md"]}}
+{"name":"@unbrained/pm-governance-audit","version":"2026.11.3","private":true,"type":"module","description":"First-party pm package for governance audit and normalization workflows.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-governance-audit#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-governance-audit"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","project-management","governance","audit","normalize","hooks"],"pm":{"aliases":["governance-audit","audit"],"extensions":["extensions/governance-audit"],"catalog":{"display_name":"Governance Audit","category":"governance","summary":"Run dedupe audits, comments audits, and normalize sweeps as package-owned workflows.","tags":["governance","audit","normalize","hooks"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-governance-audit#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-governance-audit","report":"https://github.com/unbraind/pm-cli/issues"}},"docs":["README.md"],"examples":["README.md"]}}

package/packages/pm-guide-shell/package.json

@@ -1 +1 @@
-{"name":"@unbrained/pm-guide-shell","version":"2026.11.1","private":true,"type":"module","description":"First-party pm package for guide and shell completion workflows.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-guide-shell#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-guide-shell"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","project-management","guide","completion","shell"],"pm":{"aliases":["guide-shell"],"extensions":["extensions/guide-shell"],"catalog":{"display_name":"Guide + Shell UX","category":"workflow","summary":"Restore guide documentation and shell completion commands as package-owned UX surfaces.","tags":["guide","completion","shell"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-guide-shell#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-guide-shell","report":"https://github.com/unbraind/pm-cli/issues"}},"docs":["README.md"],"examples":["README.md"]}}
+{"name":"@unbrained/pm-guide-shell","version":"2026.11.3","private":true,"type":"module","description":"First-party pm package for guide and shell completion workflows.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-guide-shell#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-guide-shell"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","project-management","guide","completion","shell"],"pm":{"aliases":["guide-shell"],"extensions":["extensions/guide-shell"],"catalog":{"display_name":"Guide + Shell UX","category":"workflow","summary":"Restore guide documentation and shell completion commands as package-owned UX surfaces.","tags":["guide","completion","shell"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-guide-shell#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-guide-shell","report":"https://github.com/unbraind/pm-cli/issues"}},"docs":["README.md"],"examples":["README.md"]}}

package/packages/pm-kanban/package.json

@@ -1 +1 @@
-{"name":"@unbrained/pm-kanban","version":"2026.11.1","private":true,"type":"module","description":"First-party pm archetype package: a complete Kanban continuous-flow profile built on public SDK primitives.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-kanban#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-kanban"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","project-management","sdk","profile","archetype","kanban","exemplar"],"pm":{"aliases":["kanban"],"extensions":["extensions/kanban"],"catalog":{"display_name":"Kanban Archetype","category":"sdk","summary":"Installable Kanban continuous-flow archetype: Card item type, flow fields, and a ProjectProfileDefinition built on public SDK primitives.","tags":["sdk","profile","archetype","kanban","schema","exemplar"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-kanban#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-kanban","report":"https://github.com/unbraind/pm-cli/issues"}},"docs":["README.md"],"examples":["README.md"]}}
+{"name":"@unbrained/pm-kanban","version":"2026.11.3","private":true,"type":"module","description":"First-party pm archetype package: a complete Kanban continuous-flow profile built on public SDK primitives.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-kanban#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-kanban"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","project-management","sdk","profile","archetype","kanban","exemplar"],"pm":{"aliases":["kanban"],"extensions":["extensions/kanban"],"catalog":{"display_name":"Kanban Archetype","category":"sdk","summary":"Installable Kanban continuous-flow archetype: Card item type, flow fields, and a ProjectProfileDefinition built on public SDK primitives.","tags":["sdk","profile","archetype","kanban","schema","exemplar"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-kanban#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-kanban","report":"https://github.com/unbraind/pm-cli/issues"}},"docs":["README.md"],"examples":["README.md"]}}

package/packages/pm-lifecycle-hooks/package.json

@@ -1 +1 @@
-{"name":"@unbrained/pm-lifecycle-hooks","version":"2026.11.1","private":true,"type":"module","description":"First-party pm package demonstrating safe lifecycle hook registration.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-lifecycle-hooks#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-lifecycle-hooks"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","project-management","hooks","lifecycle","sdk"],"pm":{"aliases":["lifecycle-hooks"],"extensions":["extensions/lifecycle-hooks"],"catalog":{"display_name":"Lifecycle Hooks","category":"sdk","summary":"Default-inert lifecycle hook exemplar for package authors.","tags":["hooks","lifecycle","sdk"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-lifecycle-hooks#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-lifecycle-hooks","report":"https://github.com/unbraind/pm-cli/issues"}},"docs":["README.md"],"examples":["README.md"]}}
+{"name":"@unbrained/pm-lifecycle-hooks","version":"2026.11.3","private":true,"type":"module","description":"First-party pm package demonstrating safe lifecycle hook registration.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-lifecycle-hooks#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-lifecycle-hooks"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","project-management","hooks","lifecycle","sdk"],"pm":{"aliases":["lifecycle-hooks"],"extensions":["extensions/lifecycle-hooks"],"catalog":{"display_name":"Lifecycle Hooks","category":"sdk","summary":"Default-inert lifecycle hook exemplar for package authors.","tags":["hooks","lifecycle","sdk"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-lifecycle-hooks#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-lifecycle-hooks","report":"https://github.com/unbraind/pm-cli/issues"}},"docs":["README.md"],"examples":["README.md"]}}

package/packages/pm-linked-test-adapters/package.json

@@ -1 +1 @@
-{"name":"@unbrained/pm-linked-test-adapters","version":"2026.11.1","private":true,"type":"module","description":"First-party pm package for optional linked-test run management adapters and reporters.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-linked-test-adapters#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-linked-test-adapters"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","project-management","linked-tests","background-runs","test-runs"],"pm":{"aliases":["linked-test-adapters"],"extensions":["extensions/linked-test-adapters"],"catalog":{"display_name":"Linked Test Adapters","category":"testing","summary":"Restore optional linked-test run management/reporting command surfaces.","tags":["tests","linked-tests","background","reporting"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-linked-test-adapters#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-linked-test-adapters","report":"https://github.com/unbraind/pm-cli/issues"}},"docs":["README.md"],"examples":["README.md"]}}
+{"name":"@unbrained/pm-linked-test-adapters","version":"2026.11.3","private":true,"type":"module","description":"First-party pm package for optional linked-test run management adapters and reporters.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-linked-test-adapters#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-linked-test-adapters"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","project-management","linked-tests","background-runs","test-runs"],"pm":{"aliases":["linked-test-adapters"],"extensions":["extensions/linked-test-adapters"],"catalog":{"display_name":"Linked Test Adapters","category":"testing","summary":"Restore optional linked-test run management/reporting command surfaces.","tags":["tests","linked-tests","background","reporting"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-linked-test-adapters#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-linked-test-adapters","report":"https://github.com/unbraind/pm-cli/issues"}},"docs":["README.md"],"examples":["README.md"]}}

package/packages/pm-search-advanced/package.json

@@ -1 +1 @@
-{"name":"@unbrained/pm-search-advanced","version":"2026.11.1","private":true,"type":"module","description":"First-party pm package for semantic, hybrid, and reindex search workflows.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-search-advanced#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-search-advanced"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","project-management","search","reindex","semantic","hybrid"],"pm":{"aliases":["search-advanced"],"extensions":["extensions/search-advanced"],"catalog":{"display_name":"Advanced Search","category":"search","summary":"Enable semantic/hybrid search modes and reindex workflows.","tags":["search","semantic","hybrid","reindex"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-search-advanced#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-search-advanced","report":"https://github.com/unbraind/pm-cli/issues"}},"docs":["README.md"],"examples":["README.md"]}}
+{"name":"@unbrained/pm-search-advanced","version":"2026.11.3","private":true,"type":"module","description":"First-party pm package for semantic, hybrid, and reindex search workflows.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-search-advanced#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-search-advanced"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","project-management","search","reindex","semantic","hybrid"],"pm":{"aliases":["search-advanced"],"extensions":["extensions/search-advanced"],"catalog":{"display_name":"Advanced Search","category":"search","summary":"Enable semantic/hybrid search modes and reindex workflows.","tags":["search","semantic","hybrid","reindex"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-search-advanced#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-search-advanced","report":"https://github.com/unbraind/pm-cli/issues"}},"docs":["README.md"],"examples":["README.md"]}}

package/packages/pm-templates/package.json

@@ -1 +1 @@
-{"name":"@unbrained/pm-templates","version":"2026.11.1","private":true,"type":"module","description":"First-party pm package for reusable create templates.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-templates#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-templates"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","project-management","templates"],"pm":{"aliases":["templates"],"extensions":["extensions/templates"],"catalog":{"display_name":"Create Templates","category":"workflow","summary":"Save, list, show, and apply reusable pm create option templates.","tags":["templates","create","workflow"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-templates#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-templates","report":"https://github.com/unbraind/pm-cli/issues"}},"docs":["README.md"],"examples":["README.md"]}}
+{"name":"@unbrained/pm-templates","version":"2026.11.3","private":true,"type":"module","description":"First-party pm package for reusable create templates.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-templates#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-templates"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","project-management","templates"],"pm":{"aliases":["templates"],"extensions":["extensions/templates"],"catalog":{"display_name":"Create Templates","category":"workflow","summary":"Save, list, show, and apply reusable pm create option templates.","tags":["templates","create","workflow"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-templates#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-templates","report":"https://github.com/unbraind/pm-cli/issues"}},"docs":["README.md"],"examples":["README.md"]}}

package/packages/pm-todos/package.json

@@ -1 +1 @@
-{"name":"@unbrained/pm-todos","version":"2026.11.1","private":true,"type":"module","description":"First-party pm package for Todo markdown import and export.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-todos#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-todos"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","project-management","todos"],"pm":{"aliases":["todos"],"extensions":["extensions/todos"],"catalog":{"display_name":"Todos Import/Export","category":"migration","summary":"Import and export Todo markdown tasks through pm package commands.","tags":["migration","todos","import","export"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-todos#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-todos","report":"https://github.com/unbraind/pm-cli/issues"}},"docs":["README.md"],"examples":["README.md"]}}
+{"name":"@unbrained/pm-todos","version":"2026.11.3","private":true,"type":"module","description":"First-party pm package for Todo markdown import and export.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-todos#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-todos"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","project-management","todos"],"pm":{"aliases":["todos"],"extensions":["extensions/todos"],"catalog":{"display_name":"Todos Import/Export","category":"migration","summary":"Import and export Todo markdown tasks through pm package commands.","tags":["migration","todos","import","export"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-todos#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-todos","report":"https://github.com/unbraind/pm-cli/issues"}},"docs":["README.md"],"examples":["README.md"]}}

package/packages/pm-vcs/package.json

@@ -1 +1 @@
-{"name":"@unbrained/pm-vcs-sdk-exemplar","version":"2026.11.1","private":true,"type":"module","description":"Beyond-PM exemplar: a VCS-style changeset workflow built entirely on public pm SDK and extension primitives.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-vcs#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-vcs"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","sdk","vcs","event-sourcing","exemplar"],"pm":{"aliases":["vcs-exemplar"],"extensions":["extensions/vcs"],"catalog":{"display_name":"VCS SDK Exemplar","category":"sdk","summary":"Non-PM changeset/ref workflow proving custom schema, domain commands, hooks, history replay, and typed relationship events through public SDK contracts.","tags":["sdk","vcs","event-sourcing","graph","exemplar"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-vcs#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-vcs","report":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-vcs/GAP_REPORT.md"}},"docs":["README.md","GAP_REPORT.md"],"examples":["README.md"]}}
+{"name":"@unbrained/pm-vcs-sdk-exemplar","version":"2026.11.3","private":true,"type":"module","description":"Beyond-PM exemplar: a VCS-style changeset workflow built entirely on public pm SDK and extension primitives.","homepage":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-vcs#readme","repository":{"type":"git","url":"git+https://github.com/unbraind/pm-cli.git","directory":"packages/pm-vcs"},"bugs":{"url":"https://github.com/unbraind/pm-cli/issues"},"keywords":["pm-package","sdk","vcs","event-sourcing","exemplar"],"pm":{"aliases":["vcs-exemplar"],"extensions":["extensions/vcs"],"catalog":{"display_name":"VCS SDK Exemplar","category":"sdk","summary":"Non-PM changeset/ref workflow proving custom schema, domain commands, hooks, history replay, and typed relationship events through public SDK contracts.","tags":["sdk","vcs","event-sourcing","graph","exemplar"],"links":{"docs":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-vcs#readme","repository":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-vcs","report":"https://github.com/unbraind/pm-cli/tree/main/packages/pm-vcs/GAP_REPORT.md"}},"docs":["README.md","GAP_REPORT.md"],"examples":["README.md"]}}

package/plugins/pm-claude/.claude-plugin/plugin.json

@@ -1 +1 @@
-{"$schema":"https://json.schemastore.org/claude-code-plugin-manifest.json","name":"pm-claude","displayName":"pm CLI","description":"Native pm CLI integration for Claude Code — 32 MCP tools, 14 skills with slash invocations, 4 subagents (coordinator, delivery-chain, triage, verification), hybrid TUI task tracking (pm as persistent store + Claude Code task panel as live view), session context injection, and full git-based project management without leaving Claude Code.","version":"2026.11.1","author":{"name":"unbrained","url":"https://github.com/unbraind/pm-cli"},"homepage":"https://github.com/unbraind/pm-cli","repository":"https://github.com/unbraind/pm-cli","license":"MIT","keywords":["pm-cli","project-management","mcp","tasks","agents","workflows","git-native","task-tracker","ai"]}
+{"$schema":"https://json.schemastore.org/claude-code-plugin-manifest.json","name":"pm-claude","displayName":"pm CLI","description":"Native pm CLI integration for Claude Code — 32 MCP tools, 14 skills with slash invocations, 4 subagents (coordinator, delivery-chain, triage, verification), hybrid TUI task tracking (pm as persistent store + Claude Code task panel as live view), session context injection, and full git-based project management without leaving Claude Code.","version":"2026.11.3","author":{"name":"unbrained","url":"https://github.com/unbraind/pm-cli"},"homepage":"https://github.com/unbraind/pm-cli","repository":"https://github.com/unbraind/pm-cli","license":"MIT","keywords":["pm-cli","project-management","mcp","tasks","agents","workflows","git-native","task-tracker","ai"]}

package/plugins/pm-claude/package.json

@@ -1 +1 @@
-{"name":"pm-claude-runtime","private":true,"type":"module","version":"2026.11.1","dependencies":{"@unbrained/pm-cli":"2026.11.1"}}
+{"name":"pm-claude-runtime","private":true,"type":"module","version":"2026.11.3","dependencies":{"@unbrained/pm-cli":"2026.11.3"}}