@unbrained/pm-cli 2026.11.3 → 2026.11.5

package/docs/MCP_REMOTE_TRANSPORT_SECURITY.md

@@ -43,16 +43,16 @@ pm-mcp-http
 
 Configuration is explicit and environment-only:
 
-| Variable                      | Meaning                                             | Default            |
-| ----------------------------- | --------------------------------------------------- | ------------------ |
-| `PM_MCP_HTTP_HOST`            | Bind host                                           | `127.0.0.1`        |
-| `PM_MCP_HTTP_PORT`            | Bind port, including `0` for an ephemeral test port | `3000`             |
-| `PM_MCP_HTTP_ALLOWED_ORIGINS` | Comma-separated exact browser origins               | none               |
-| `PM_MCP_HTTP_BEARER_TOKEN`    | Opaque deployment token for the bundled verifier    | none               |
-| `PM_MCP_HTTP_AUTH_ISSUER`     | Exact HTTPS authorization-server issuer             | none               |
-| `PM_MCP_HTTP_RESOURCE`        | Canonical MCP resource/audience URI                 | none               |
-| `PM_MCP_HTTP_SCOPES`          | Space-separated consent scopes                      | `pm:read pm:write` |
-| `PM_MCP_DISCOVERY_CURSOR_KEY` | Shared 32-byte-or-longer secret for discovery pages | process-local key  |
+| Variable | Meaning | Default |
+|---|---|---|
+| `PM_MCP_HTTP_HOST` | Bind host | `127.0.0.1` |
+| `PM_MCP_HTTP_PORT` | Bind port, including `0` for an ephemeral test port | `3000` |
+| `PM_MCP_HTTP_ALLOWED_ORIGINS` | Comma-separated exact browser origins | none |
+| `PM_MCP_HTTP_BEARER_TOKEN` | Opaque deployment token for the bundled verifier | none |
+| `PM_MCP_HTTP_AUTH_ISSUER` | Exact HTTPS authorization-server issuer | none |
+| `PM_MCP_HTTP_RESOURCE` | Canonical MCP resource/audience URI | none |
+| `PM_MCP_HTTP_SCOPES` | Space-separated consent scopes | `pm:read pm:write` |
+| `PM_MCP_DISCOVERY_CURSOR_KEY` | Shared 32-byte-or-longer secret for discovery pages | process-local key |
 
 A non-loopback bind fails closed unless token, issuer, and resource are all
 present. Production deployments should normally call
@@ -151,18 +151,18 @@ inherit one another's trace context. Raw bearer tokens are hashed for
 constant-time comparison by the bundled verifier and are never included in
 claims, errors, traces, or JSON-RPC result data.
 
-| Threat                         | Enforced boundary                                                               |
-| ------------------------------ | ------------------------------------------------------------------------------- |
-| DNS rebinding/browser drive-by | Loopback default plus exact `Origin` allowlist                                  |
-| Token passthrough              | Bearer is verified at pm and never forwarded to another service                 |
-| Issuer mix-up                  | Exact discovery/response issuer checks and issuer-keyed credentials             |
-| Confused audience              | Exact protected-resource audience check                                         |
-| Excess authority               | Required-scope intersection before dispatch                                     |
-| Query/log credential leak      | Query tokens rejected; challenges and errors omit token material                |
-| Header injection               | Schema-derived allowlist, reserved-name checks, control-byte rejection          |
-| Trace privacy leak             | Syntax/size validation, baggage-key allowlist, request-local storage            |
-| Proxy cache disclosure         | MCP and metadata errors use explicit content types; MCP results use `no-store`  |
-| Replay after disconnect        | No session, event id, resume cursor, or redelivery; retry uses a new request id |
+| Threat | Enforced boundary |
+|---|---|
+| DNS rebinding/browser drive-by | Loopback default plus exact `Origin` allowlist |
+| Token passthrough | Bearer is verified at pm and never forwarded to another service |
+| Issuer mix-up | Exact discovery/response issuer checks and issuer-keyed credentials |
+| Confused audience | Exact protected-resource audience check |
+| Excess authority | Required-scope intersection before dispatch |
+| Query/log credential leak | Query tokens rejected; challenges and errors omit token material |
+| Header injection | Schema-derived allowlist, reserved-name checks, control-byte rejection |
+| Trace privacy leak | Syntax/size validation, baggage-key allowlist, request-local storage |
+| Proxy cache disclosure | MCP and metadata errors use explicit content types; MCP results use `no-store` |
+| Replay after disconnect | No session, event id, resume cursor, or redelivery; retry uses a new request id |
 
 ## Deprecated-feature inventory and sunset
 

package/docs/MCP_SKILLS_AND_APPS.md

@@ -75,7 +75,7 @@ SDK-backed tools. `resources/list` and `resources/read` expose the corresponding
 `ui://` documents:
 
 | View | Authoritative tool | Purpose |
-| --- | --- | --- |
+|---|---|---|
 | Context explorer | `pm_context` | Context, provenance, omissions, and token cost |
 | Relationship graph | `pm_graph` | Typed edges, explaining paths, and governance |
 | Plan and milestone | `pm_plan` | Steps, dependencies, decisions, and validation |

package/docs/MERGE_SAFETY.md

@@ -136,12 +136,12 @@ History scalar rebasing and ignored settlement artifacts are tracked by
 [pm-gh1553](../.agents/pm/issues/pm-gh1553.toon) and
 [pm-gh1556](../.agents/pm/issues/pm-gh1556.toon).
 
-| Artifact                                                         | Driver                              | Merge behavior                                                                                                                                                                                                                                                                      |
-| ---------------------------------------------------------------- | ----------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| Item `.toon` / `.md`                                             | `pm-item-toon` / `pm-item-markdown` | Three-way field merge; append-like collections use set union, `updated_at` uses the latest timestamp, scalar conflicts select the value from the later document update with stable value order as an equal-timestamp tie-break, and canonical serialization recomputes TOON counts. |
-| `history/*.jsonl`                                                | `pm-history`                        | Preserves the common prefix and both divergent suffixes, orders deterministically, then re-anchors the resulting hash chain.                                                                                                                                                        |
-| tracker `**/*.jsonl` except the later `history/*.jsonl` override | `pm-relationship`                   | Covers default and package-owned custom relationship event paths, unions divergent suffixes by `eventId` (timestamp-ordered, ours-first on ties), and renumbers `sequence` consecutively so the strict-sequence store loader accepts the merged stream.                             |
-| root `settings.json` and nested `**/*.json`                      | `pm-json`                           | Recursively merges objects per key. Arrays compose when both branches preserve the base and add distinct entries, so independent extension installs and evaluation additions merge without weakening edit/removal conflict detection.                                               |
+| Artifact | Driver | Merge behavior |
+|---|---|---|
+| Item `.toon` / `.md` | `pm-item-toon` / `pm-item-markdown` | Three-way field merge; append-like collections use set union, `updated_at` uses the latest timestamp, scalar conflicts select the value from the later document update with stable value order as an equal-timestamp tie-break, and canonical serialization recomputes TOON counts. |
+| `history/*.jsonl` | `pm-history` | Preserves the common prefix and both divergent suffixes, orders deterministically, then re-anchors the resulting hash chain. |
+| tracker `**/*.jsonl` except the later `history/*.jsonl` override | `pm-relationship` | Covers default and package-owned custom relationship event paths, unions divergent suffixes by `eventId` (timestamp-ordered, ours-first on ties), and renumbers `sequence` consecutively so the strict-sequence store loader accepts the merged stream. |
+| root `settings.json` and nested `**/*.json` | `pm-json` | Recursively merges objects per key. Arrays compose when both branches preserve the base and add distinct entries, so independent extension installs and evaluation additions merge without weakening edit/removal conflict detection. |
 
 History union validates each event in its original branch before rebasing its
 effects. A whole metadata-field replacement still assigns its exact value when

package/docs/MUTATION_INTEGRITY.md

@@ -32,11 +32,11 @@ pm config project set mutation_guard_stale_in_progress_hours 48
 
 Defaults preserve author compatibility while providing secret advice:
 
-| Setting                                    | Default  | Behavior                                                 |
-| ------------------------------------------ | -------- | -------------------------------------------------------- |
-| `mutation_guard.require_attributed_author` | `false`  | When enabled, reject an effective author of `unknown`.   |
-| `mutation_guard.secret_guard`              | `advise` | `off`, stderr/structured `advise`, or pre-write `block`. |
-| `mutation_guard.stale_in_progress_hours`   | `72`     | Age threshold for unclaimed active work in `pm health`.  |
+| Setting | Default | Behavior |
+|---|---|---|
+| `mutation_guard.require_attributed_author` | `false` | When enabled, reject an effective author of `unknown`. |
+| `mutation_guard.secret_guard` | `advise` | `off`, stderr/structured `advise`, or pre-write `block`. |
+| `mutation_guard.stale_in_progress_hours` | `72` | Age threshold for unclaimed active work in `pm health`. |
 
 A blocking secret policy may be bypassed only by an explicit `--force` on a
 force-capable mutation. The warning records that an override occurred while

package/docs/OUTPUT_PROJECTION_CONTRACTS.md

@@ -64,13 +64,13 @@ explicit receipt with `has_omissions: false`,
 
 Mutually exclusive output modes emit only their active row collection:
 
-| Command mode                | Active row key        | Withheld group | Restore          |
-| --------------------------- | --------------------- | -------------- | ---------------- |
-| `activity` (digest default) | `activity_digest`     | `event_rows`   | `--raw`          |
-| `activity --raw/--compact`  | `compact_activity`    | `provenance`   | `--full`         |
-| `activity --full`           | `activity`            | none           | already complete |
-| `history` (compact default) | `compact_history`     | `raw_history`  | `--full`         |
-| `history --full`            | `history`             | none           | already complete |
+| Command mode | Active row key | Withheld group | Restore |
+|---|---|---|---|
+| `activity` (digest default) | `activity_digest` | `event_rows` | `--raw` |
+| `activity --raw/--compact` | `compact_activity` | `provenance` | `--full` |
+| `activity --full` | `activity` | none | already complete |
+| `history` (compact default) | `compact_history` | `raw_history` | `--full` |
+| `history --full` | `history` | none | already complete |
 
 Inactive row keys are omitted, not zero-filled. This makes a wrong parser loud:
 reading `.activity` from compact activity now yields a missing key instead of a
@@ -177,11 +177,11 @@ for their domain without adding package-specific logic to the CLI renderer.
 
 The following bounded built-ins now use this shared declaration:
 
-| Command mode        | Withheld group                                           | Restore  |
-| ------------------- | -------------------------------------------------------- | -------- |
-| `deps --summary`    | selected dependency tree, graph, or relationship context | `--full` |
-| `graph --summary`   | `result_rows`                                            | `--full` |
-| `validate --counts` | `diagnostic_rows`                                        | `--full` |
+| Command mode | Withheld group | Restore |
+|---|---|---|
+| `deps --summary` | selected dependency tree, graph, or relationship context | `--full` |
+| `graph --summary` | `result_rows` | `--full` |
+| `validate --counts` | `diagnostic_rows` | `--full` |
 
 Passing `--full` with the corresponding compact flag is a usage error. An
 explicit full request and the default full request produce the same payload
@@ -337,7 +337,7 @@ metadata as a continuation negative control. The checked-in report is
 [`scripts/release/context-intent-calibration.json`](../scripts/release/context-intent-calibration.json).
 
 | Intent | 2-item tokens / budget | 2,243-item tokens / budget | Current-scale rows | Degradation |
-| ------ | ---------------------- | -------------------------- | ------------------ | ----------- |
+|---|---|---|---|---|
 | `context:orient` | 735 / 2,400 | 1,028 / 2,400 | 3 | bounded sections |
 | `get:inspect` | 401 / 3,200 | 415 / 3,200 | item envelope | standard item |
 | `list:triage` | 443 / 3,200 | 3,189 / 3,200 | 69 | budget-derived rows |
@@ -348,7 +348,7 @@ Whole-answer cursor cost is measured against the unprojected single call for
 the identical ordered row set:
 
 | Family | Rows | Pages | Optimized bytes/row | Optimized walk | Repeated-metadata control | Unbounded call | Walk / unbounded |
-| ------ | ---- | ----- | ------------------- | -------------- | ------------------------- | -------------- | ---------------- |
+|---|---|---|---|---|---|---|---|
 | `list:triage` | 1,998 | 31 | 172.93 | 345,519 B | 387,489 B | 1,558,741 B | 0.2217 |
 | `search:discover` | 1,998 | 66 | 202.50 | 404,591 B | 470,046 B | 1,681,847 B | 0.2406 |
 

package/docs/PACKED_FIRST_RUN.md

@@ -14,7 +14,7 @@ node scripts/release/packed-first-run.mjs /path/to/installed/@unbrained/pm-cli
 ```
 
 | Journey | Required observation |
-| --- | --- |
+|---|---|
 | Installed README | Ordered init/create/list from `60 Second Example`; missing/reordered commands, unsupported expressions or unbalanced quotes fail. No shell execution. |
 | Persistence | Each command returns nonempty output below 4,096 characters; the created item exists. |
 | Branch merge | Independent comments survive a real Git merge; reconciliation and strict history verification succeed. |

package/docs/QUICKSTART.md

@@ -94,16 +94,16 @@ pm create \
 
 Useful item types:
 
-| Type                                        | Use                                                         |
-| ------------------------------------------- | ----------------------------------------------------------- |
-| `Epic`                                      | broad outcome or initiative                                 |
-| `Feature`                                   | user-facing capability or major slice                       |
-| `Task`                                      | implementation work                                         |
-| `Chore`                                     | maintenance, refactoring, or housekeeping work              |
-| `Issue`                                     | bug or defect                                               |
-| `Decision`                                  | recorded choice and rationale                               |
-| `Plan`                                      | agent-optimized living plan with ordered steps and evidence |
-| `Event`, `Reminder`, `Milestone`, `Meeting` | calendar-aware planning                                     |
+| Type | Use |
+|---|---|
+| `Epic` | broad outcome or initiative |
+| `Feature` | user-facing capability or major slice |
+| `Task` | implementation work |
+| `Chore` | maintenance, refactoring, or housekeeping work |
+| `Issue` | bug or defect |
+| `Decision` | recorded choice and rationale |
+| `Plan` | agent-optimized living plan with ordered steps and evidence |
+| `Event`, `Reminder`, `Milestone`, `Meeting` | calendar-aware planning |
 
 ## Find and Claim Work
 

package/docs/README.md

@@ -17,17 +17,17 @@ pm guide release --json
 
 ## Read Path
 
-| Reader                              | First page                                  | Then read                                                                                                                                                      |
-| ----------------------------------- | ------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| New user                            | [Quickstart](QUICKSTART.md)                 | [Command Reference](COMMANDS.md)                                                                                                                               |
-| New maintainer                      | [Onboarding](ONBOARDING.md)                 | [Agent Guide](AGENT_GUIDE.md), [Testing](TESTING.md), [Releasing](RELEASING.md)                                                                                |
-| Coding agent                        | [Agent Guide](AGENT_GUIDE.md)               | [Configuration](CONFIGURATION.md), then command help                                                                                                           |
-| Maintainer                          | [Contributing](../CONTRIBUTING.md)          | [Testing](TESTING.md), [Releasing](RELEASING.md), [Architecture](ARCHITECTURE.md)                                                                              |
-| Package author                      | [Packages and Extensions](EXTENSIONS.md)    | [SDK](SDK.md), [starter extension](examples/starter-extension/README.md)                                                                                       |
-| Codex or ChatGPT plugin implementer | [Codex Plugin](CODEX_PLUGIN.md)             | [Native ChatGPT and Codex Plugin Implementation Plan](CHATGPT_CODEX_PLUGIN_IMPLEMENTATION.md)                                                                  |
-| Codex user                          | [Codex Plugin](CODEX_PLUGIN.md)             | [Agent Guide](AGENT_GUIDE.md), then [Command Reference](COMMANDS.md)                                                                                           |
-| Claude Code user                    | [Claude Code Plugin](CLAUDE_CODE_PLUGIN.md) | [Agent Guide](AGENT_GUIDE.md), then [Command Reference](COMMANDS.md)                                                                                           |
-| Machine client                      | `pm contracts --json`                       | [CLI Scripting Contract](SCRIPTING.md), [Command Reference](COMMANDS.md#machine-contracts), optionally `pm install guide-shell --project && pm guide commands` |
+| Reader | First page | Then read |
+|---|---|---|
+| New user | [Quickstart](QUICKSTART.md) | [Command Reference](COMMANDS.md) |
+| New maintainer | [Onboarding](ONBOARDING.md) | [Agent Guide](AGENT_GUIDE.md), [Testing](TESTING.md), [Releasing](RELEASING.md) |
+| Coding agent | [Agent Guide](AGENT_GUIDE.md) | [Configuration](CONFIGURATION.md), then command help |
+| Maintainer | [Contributing](../CONTRIBUTING.md) | [Testing](TESTING.md), [Releasing](RELEASING.md), [Architecture](ARCHITECTURE.md) |
+| Package author | [Packages and Extensions](EXTENSIONS.md) | [SDK](SDK.md), [starter extension](examples/starter-extension/README.md) |
+| Codex or ChatGPT plugin implementer | [Codex Plugin](CODEX_PLUGIN.md) | [Native ChatGPT and Codex Plugin Implementation Plan](CHATGPT_CODEX_PLUGIN_IMPLEMENTATION.md) |
+| Codex user | [Codex Plugin](CODEX_PLUGIN.md) | [Agent Guide](AGENT_GUIDE.md), then [Command Reference](COMMANDS.md) |
+| Claude Code user | [Claude Code Plugin](CLAUDE_CODE_PLUGIN.md) | [Agent Guide](AGENT_GUIDE.md), then [Command Reference](COMMANDS.md) |
+| Machine client | `pm contracts --json` | [CLI Scripting Contract](SCRIPTING.md), [Command Reference](COMMANDS.md#machine-contracts), optionally `pm install guide-shell --project && pm guide commands` |
 
 ## Documentation Map
 
@@ -127,16 +127,16 @@ Additional SDK, operations, and generated contracts:
 
 ## Guide Topic Map
 
-| Optional `pm guide` topic | Primary docs                                                                                        |
-| ------------------------- | --------------------------------------------------------------------------------------------------- |
-| `quickstart`              | [Quickstart](QUICKSTART.md), [Command Reference](COMMANDS.md)                                       |
-| `commands`                | [Command Reference](COMMANDS.md), [Configuration](CONFIGURATION.md)                                 |
-| `workflows`               | [Agent Guide](AGENT_GUIDE.md), [Testing](TESTING.md)                                                |
-| `sdk`                     | [SDK](SDK.md), [SDK context contracts](SDK_CONTEXT.md), [Architecture](ARCHITECTURE.md)             |
-| `extensions`, `packages`  | [Packages and Extensions](EXTENSIONS.md), [starter extension](examples/starter-extension/README.md) |
-| `skills`                  | [Agent Guide](AGENT_GUIDE.md) plus `.agents/skills/*`                                               |
-| `harnesses`               | [Agent Guide](AGENT_GUIDE.md) plus `.agents/skills/HARNESS_COMPATIBILITY.md`                        |
-| `release`                 | [Releasing](RELEASING.md), [CHANGELOG](../CHANGELOG.md)                                             |
+| Optional `pm guide` topic | Primary docs |
+|---|---|
+| `quickstart` | [Quickstart](QUICKSTART.md), [Command Reference](COMMANDS.md) |
+| `commands` | [Command Reference](COMMANDS.md), [Configuration](CONFIGURATION.md) |
+| `workflows` | [Agent Guide](AGENT_GUIDE.md), [Testing](TESTING.md) |
+| `sdk` | [SDK](SDK.md), [SDK context contracts](SDK_CONTEXT.md), [Architecture](ARCHITECTURE.md) |
+| `extensions`, `packages` | [Packages and Extensions](EXTENSIONS.md), [starter extension](examples/starter-extension/README.md) |
+| `skills` | [Agent Guide](AGENT_GUIDE.md) plus `.agents/skills/*` |
+| `harnesses` | [Agent Guide](AGENT_GUIDE.md) plus `.agents/skills/HARNESS_COMPATIBILITY.md` |
+| `release` | [Releasing](RELEASING.md), [CHANGELOG](../CHANGELOG.md) |
 
 Community files:
 

package/docs/READ_OUTPUT_CONTRACTS.md

@@ -10,12 +10,12 @@ Complete package-envelope fitting and session-reference recovery are tracked by
 
 Every built-in read surface uses four output dimensions: what to include, how much to return, how much the result may cost, and how to encode it. The same canonical controls work through the CLI, SDK, MCP, generated schemas, runtime contracts, and shell completions.
 
-| Dimension | CLI                              | SDK and MCP     | Meaning                                                                |
-| --------- | -------------------------------- | --------------- | ---------------------------------------------------------------------- |
-| Include   | `--output-include <csv>`         | `outputInclude` | Retain named fields or sections, or select a declared projection mode. |
-| Amount    | `--output-limit <n\|unbounded>`  | `outputLimit`   | Bound shared row collections.                                          |
-| Cost      | `--output-budget <n\|unbounded>` | `outputBudget`  | Fail closed when even the compact result cannot fit.                   |
-| Encoding  | `--output-format <toon\|json>`   | `outputFormat`  | Select the CLI renderer and record the requested encoding.             |
+| Dimension | CLI | SDK and MCP | Meaning |
+|---|---|---|---|
+| Include | `--output-include <csv>` | `outputInclude` | Retain named fields or sections, or select a declared projection mode. |
+| Amount | `--output-limit <n\|unbounded>` | `outputLimit` | Bound shared row collections. |
+| Cost | `--output-budget <n\|unbounded>` | `outputBudget` | Fail closed when even the compact result cannot fit. |
+| Encoding | `--output-format <toon\|json>` | `outputFormat` | Select the CLI renderer and record the requested encoding. |
 
 The contract covers `list`, `context`, `search`, `get`, `next`, `health`, `deps`, `graph`, `history`, `activity`, `validate`, `events`, `contracts`, `comments`, `notes`, `files`, `docs`, `stats`, and `aggregate`, including list aliases and `ctx`.
 
@@ -295,9 +295,9 @@ may only shrink, while repeat suppression may only hold or improve. The gate
 also fixes the expected unique-fact shape:
 
 | Tracker tier | Group spend / budget | Seen items | Suppressed repeats | Delivered bytes |
-| ------------ | -------------------- | ---------- | ------------------ | --------------- |
-| 2 items      | 3,820 / 20,000       | 2          | 3                  | 15,274          |
-| 2,243 items  | 10,156 / 20,000      | 106        | 7                  | 40,614          |
+|---|---|---|---|---|
+| 2 items | 3,820 / 20,000 | 2 | 3 | 15,274 |
+| 2,243 items | 10,156 / 20,000 | 106 | 7 | 40,614 |
 
 These are deterministic synthetic-corpus measurements from
 `scripts/release/context-intent-calibration.json`; they contain no hosted

package/docs/RECURRENCE_RECOVERY_CONTRACTS.md

@@ -99,7 +99,7 @@ The refusal contract distinguishes four states before any command-specific
 read or mutation begins:
 
 | Selected root state | Code | Exit | Recovery |
-| --- | --- | ---: | --- |
+|---|---|---:|---|
 | Path does not exist | `tracker_root_missing` | 3 | Tokenized, non-interactive `pm --pm-path <path> init --defaults --agent-guidance skip` |
 | Directory exists but `settings.json` does not | `tracker_not_initialized` | 3 | The same initialization retry |
 | Path or ancestor is a regular file | `tracker_root_not_directory` | 2 | Select a directory; never suggest `pm init` against the file |

package/docs/RELEASING.md

@@ -220,15 +220,15 @@ Signal tiers:
 
 Category precedence (first matching bucket wins):
 
-| Priority | Category     | Trigger terms (from strong + weak signals unless noted)                                                                                 |
-| -------- | ------------ | --------------------------------------------------------------------------------------------------------------------------------------- |
-| 1        | `Security`   | `security`, `cve`, `vulnerability`                                                                                                      |
-| 2        | `Deprecated` | `deprecated`, `deprecation`                                                                                                             |
-| 3        | `Removed`    | `removed`, `remove`, `deleted`, `delete`                                                                                                |
-| 4        | `Fixed`      | `fix`, `fixed`, `bug`, `bugfix`, `hotfix`, `regression`                                                                                 |
-| 5        | `Added`      | `feature`, `feat`, `added`, `add`, `new`                                                                                                |
-| 6        | `Changed`    | strong-signal `change`, `changed`, `refactor`, `update`, `updated`, `improve`; for non-bug-like types only, title fallback is also used |
-| 7        | `Other`      | no classifier match                                                                                                                     |
+| Priority | Category | Trigger terms (from strong + weak signals unless noted) |
+|---|---|---|
+| 1 | `Security` | `security`, `cve`, `vulnerability` |
+| 2 | `Deprecated` | `deprecated`, `deprecation` |
+| 3 | `Removed` | `removed`, `remove`, `deleted`, `delete` |
+| 4 | `Fixed` | `fix`, `fixed`, `bug`, `bugfix`, `hotfix`, `regression` |
+| 5 | `Added` | `feature`, `feat`, `added`, `add`, `new` |
+| 6 | `Changed` | strong-signal `change`, `changed`, `refactor`, `update`, `updated`, `improve`; for non-bug-like types only, title fallback is also used |
+| 7 | `Other` | no classifier match |
 
 Bug-like default:
 
@@ -284,7 +284,16 @@ semantic class is `usage`, `not_found`, or `conflict`. Message and title prose
 never participate. Unknown codes, missing or mismatched exits, unhandled
 events, and every `generic_failure` or `dependency_failed` remain blocking.
 This keeps rewording independent from release policy and makes stale or broad
-message allowlists impossible.
+message allowlists impossible. The gate skips issues seen only in
+`environment=test` (opted-in CI tests); an issue with any other event counts
+whenever any of its events falls inside the activity window. Activity and
+environment are separate Sentry queries, because Sentry applies `lastSeen` after
+an environment filter: a combined query would also skip an issue whose
+production event predates the window while a test event falls inside it. When
+the listing of issues with non-test events may be truncated, nothing is skipped,
+and a failed listing fails the gate. Both listings follow Sentry's next-page links
+up to `--sentry-limit` (default `200`); when active issues remain beyond it, the
+gate fails, because it cannot judge issues it never read.
 
 Sentry API requests use a 120-second deadline by default. Operators can set
 `--sentry-request-timeout-ms` between `1` and `300000` when reproducing

package/docs/SCRIPTING.md

@@ -6,16 +6,16 @@ Use this contract when composing `pm` with shells, CI runners, `jq`, or another
 
 ## Process Contract
 
-| Exit | Meaning                                                                          | Script response                                      |
-| ---- | -------------------------------------------------------------------------------- | ---------------------------------------------------- |
-| `0`  | The requested operation completed. A successful read may still return zero rows. | Parse stdout.                                        |
-| `1`  | Runtime or unexpected failure.                                                   | Preserve stderr and stop.                            |
-| `2`  | Invalid flags, values, or command composition.                                   | Correct the invocation; do not retry unchanged.      |
-| `3`  | Requested tracker or resource was not found.                                     | Correct the path or ID.                              |
-| `4`  | State or concurrency conflict.                                                   | Refresh live state before deciding whether to retry. |
-| `5`  | A required dependency operation failed.                                          | Inspect the dependency evidence before retrying.     |
-| `6`  | The request succeeded but matched nothing to change.                             | Treat as success and inspect the effect receipt.     |
-| `7`  | The request succeeded and changed only part of the selected targets.             | Treat as success and inspect unmatched/skipped rows. |
+| Exit | Meaning | Script response |
+|---|---|---|
+| `0` | The requested operation completed. A successful read may still return zero rows. | Parse stdout. |
+| `1` | Runtime or unexpected failure. | Preserve stderr and stop. |
+| `2` | Invalid flags, values, or command composition. | Correct the invocation; do not retry unchanged. |
+| `3` | Requested tracker or resource was not found. | Correct the path or ID. |
+| `4` | State or concurrency conflict. | Refresh live state before deciding whether to retry. |
+| `5` | A required dependency operation failed. | Inspect the dependency evidence before retrying. |
+| `6` | The request succeeded but matched nothing to change. | Treat as success and inspect the effect receipt. |
+| `7` | The request succeeded and changed only part of the selected targets. | Treat as success and inspect unmatched/skipped rows. |
 
 Exits `0`, `6`, and `7` are successful outcomes. Bulk mutation envelopes repeat
 the distinction as `outcome: effect`, `outcome: no_effect`, or `outcome: