@unbrained/pm-cli 2026.5.11 → 2026.5.12

package/AGENTS.md

@@ -321,120 +321,7 @@ Recover previous state:
 pm restore pm-a1b2 2026-02-17T11:15:03.120Z
 ```
 
-## 9) Pi Tool Wrapper Usage
-
-The built-in Pi wrapper exposes one tool: `pm`.
-Reference implementation source lives at `.pi/extensions/pm-cli/index.ts` as a Pi agent extension module.
-`pm install` has been removed; install bundled managed runtime extensions via `pm extension --install beads|todos` (or explicit `.agents/pm/extensions/<name>` paths) when needed.
-Load the Pi wrapper in Pi with `pi -e ./.pi/extensions/pm-cli/index.ts` (or copy it into your Pi extensions directory).
-Use `action: "completion"` with `shell: "bash"|"zsh"|"fish"` to forward to `pm completion <shell>`.
-Use `action: "calendar"` for date-centric event views (`view`, `date`, `from`, `to`, `past`, `fullPeriod`, `type`, `tag`, `priority`, `status`, `assignee`, `sprint`, `release`, `limit`, `format`).
-Use `action: "aggregate"` for grouped decomposition checks (`groupBy`, `count`, `includeUnparented`, list-style filters).
-Use `action: "dedupe-audit"` for duplicate corpus checks (`mode`, `threshold`, `limit`, list-style filters).
-Use `action: "normalize"` for lifecycle metadata hygiene scans (`dryRun`) and explicit apply mode (`apply`) with list-style filter targeting.
-Use `action: "validate"` with optional check toggles (`checkMetadata`, `checkResolution`, `checkFiles`, `checkHistoryDrift`) and optional `scanMode` (`default|tracked-all`) for standalone audit workflows.
-Use `action: "extension-doctor"` for consolidated extension diagnostics with optional `scope` and `detail` (`summary|deep`).
-For `list*` wrapper actions, use projection/sort controls (`compact`, `fields`, `sort`, `order`) plus `includeBody` when body projection is needed.
-For `comments-audit`, use governance filters (`parent`, `tag`, `sprint`, `release`, `priority`) in addition to status/type/assignee filters.
-For `health`, use vector refresh controls (`checkOnly`, `noRefresh`, `refreshVectors`) while keeping strict flags available (`strictDirectories`, `strictExit`, `failOnWarn`).
-For `create` and `update`, use camelCase wrapper parameters for the canonical CLI scalar fields such as `parent`, `reviewer`, `risk`, `confidence`, `sprint`, `release`, `blockedBy`, `blockedReason`, `unblockNote`, `definitionOfReady`, `order`, `goal`, `objective`, `value`, `impact`, `outcome`, `whyNow`, `reporter`, `severity`, `environment`, `reproSteps`, `resolution`, `expectedResult`, `actualResult`, `affectedVersion`, `fixedVersion`, `component`, `regression`, and `customerImpact`; use `createMode` (`strict|progressive`) when staged creation is needed, `appendStable` for minimal-diff file-link appends, `allowAuditUpdate` for ownership-safe metadata-only non-owner updates, `allowAuditDepUpdate` for ownership-safe dependency-only non-owner updates, `allowAuditComment` for additive non-owner comment writes, repeatable `reminder` values for persistent reminders (`at=<iso|relative>,text=<text>`), and repeatable `typeOption` values for custom type metadata.
-For `contracts`, use projection controls (`flagsOnly`, `availabilityOnly`) when you need narrow machine-readable payloads; with `command` selected, contract output is command-scoped by default.
-For `completion`, use `eagerTags` only when embedding static tags in generated scripts is required; default generated scripts resolve tags lazily at runtime.
-For `activity`, use `id`, `op`, `author`, `from`, `to`, `limit`, and `stream` (`rows|ndjson|jsonl` or boolean true) for deterministic timeline filtering/export.
-For `test` and `test-all`, prefer explicit runtime parity/strictness parameters when needed: `pmContext` (`schema|tracker|auto`), `checkContext`, `autoPmContext`, `failOnContextMismatch`, `failOnSkipped`, and `requireAssertionsForPm`.
-For `gc`, use `dryRun` and repeatable `gcScope` (`index`, `embeddings`, `runtime`) for no-side-effect previews and targeted cleanup.
-
-### Example: list open tasks
-
-```json
-{
-  "action": "list-open",
-  "limit": 10
-}
-```
-
-### Example: create item
-
-```json
-{
-  "action": "create",
-  "title": "Implement extension loader",
-  "description": "Load global and project extensions with precedence.",
-  "type": "Feature",
-  "status": "open",
-  "priority": 1,
-  "tags": "extensions,core",
-  "body": "",
-  "deadline": "+14d",
-  "estimate": 120,
-  "acceptanceCriteria": "Loader applies deterministic precedence for core global and project extensions.",
-  "author": "maintainer-agent",
-  "message": "Create extension loader task",
-  "assignee": "maintainer-agent",
-  "parent": "pm-epic01",
-  "reviewer": "maintainer-reviewer",
-  "risk": "medium",
-  "confidence": "high",
-  "sprint": "maintainer-loop",
-  "release": "v0.1",
-  "blockedBy": "pm-arch-review",
-  "blockedReason": "Awaiting architecture sign-off",
-  "unblockNote": "Resume implementation once review notes are resolved",
-  "reporter": "maintainer-agent",
-  "severity": "medium",
-  "environment": "cli",
-  "reproSteps": "Create conflicting extension registrations across project/global scopes",
-  "resolution": "Apply deterministic precedence in extension loader bootstrap",
-  "expectedResult": "Loader applies project-over-global precedence deterministically",
-  "actualResult": "Registration order currently varies by load path",
-  "affectedVersion": "v0.1",
-  "fixedVersion": "v0.2",
-  "component": "extension-host",
-  "regression": "false",
-  "customerImpact": "Unpredictable extension behavior increases operator overhead",
-  "definitionOfReady": "Extension loading behavior is clarified in docs.",
-  "order": 1,
-  "goal": "Release-hardening",
-  "objective": "Ship deterministic extension loading",
-  "value": "Makes extension behavior predictable for agents and humans",
-  "impact": "Reduces configuration and precedence drift",
-  "outcome": "Extension loader applies deterministic precedence",
-  "whyNow": "Extension loading is foundational for the remaining roadmap",
-  "dep": ["id=pm-epic01,kind=parent,author=maintainer-agent,created_at=now"],
-  "comment": ["author=maintainer-agent,created_at=now,text=Why this task exists align extension load precedence behavior."],
-  "note": ["author=maintainer-agent,created_at=now,text=Initial implementation plan wire loader in runtime bootstrap."],
-  "learning": [],
-  "linkedFile": ["path=src/core/extensions/loader.ts,scope=project,note=planned implementation file"],
-  "linkedTest": ["command=node scripts/run-tests.mjs test,scope=project,timeout_seconds=240,note=sandbox-safe regression"],
-  "doc": ["path=docs/ARCHITECTURE.md,scope=project,note=implementation reference"]
-}
-```
-
-### Example: append body update
-
-```json
-{
-  "action": "append",
-  "id": "pm-a1b2",
-  "body": "Implemented lock TTL and stale lock override."
-}
-```
-
-Expected wrapper return shape:
-
-```json
-{
-  "content": [
-    { "type": "text", "text": "..." }
-  ],
-  "details": {
-    "action": "create",
-    "item": {}
-  }
-}
-```
-
-## 10) Multi-Agent Etiquette
+## 9) Multi-Agent Etiquette
 
 - Claim before heavy edits.
 - Release when blocked or context-switching.
@@ -442,7 +329,7 @@ Expected wrapper return shape:
 - Avoid silent force-claim unless policy allows and conflict is stale.
 - Keep item descriptions stable; append details in body/notes/comments.
 
-## 11) Troubleshooting for Agents
+## 10) Troubleshooting for Agents
 
 Lock conflict:
 
@@ -467,7 +354,7 @@ Extension issues:
 - when debugging runtime behavior changes, inspect parser/preflight/service override collisions in health/profile diagnostics (last registration wins)
 - use SDK contracts from `@unbrained/pm-cli/sdk` (not internal `src/core/...` imports) for extension authoring and examples
 
-## 12) Dogfood Logging Protocol (Required)
+## 11) Dogfood Logging Protocol (Required)
 
 From now on in this repository, all implementation work must be tracked through `pm` items and `pm` mutations.
 

package/CHANGELOG.md

@@ -7,6 +7,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2026.5.12] - 2026-05-12
+
+### Changed
+- Added `pm install '*'` / `pm install all` to install all bundled first-party pm packages, including shell-expanded `pm install *`, and added typechecking for TypeScript-authored package sources.
+- Added `pm upgrade` for package-first maintenance, including dry-run planning, CLI/SDK npm self-upgrade, managed package refresh from recorded sources, SDK/MCP action contracts, and docs/help coverage.
+- Moved the Beads and Todo import/export bridges out of active project extension state so they are sourced from the first-party `packages/pm-beads` and `packages/pm-todos` package roots and installed on demand.
+
 ## [2026.5.11] - 2026-05-11
 
 ### Added

package/PRD.md

@@ -43,9 +43,9 @@ Existing trackers either rely on hosted backends, store state in non-diff-friend
 - Provide safe mutation under concurrent access (claim/release + lock + atomic writes).
 - Default stdout to TOON; support `--json` parity for every command.
 - Provide extension architecture for commands, schema, rendering, import/export, search adapters, and hooks.
-- Ship bundled managed extension sources:
-  - Beads import (`beads` alias, installed via `pm extension --install`)
-  - todos.ts import/export (`todos` alias, installed via `pm extension --install`)
+- Ship first-party installable package sources:
+  - Beads import (`packages/pm-beads`, installed via `pm install`)
+  - todos.ts import/export (`packages/pm-todos`, installed via `pm install`)
   - Pi agent extension wrapper source module
 - Provide optional semantic search with provider + vector-store adapters.
 
@@ -1327,7 +1327,7 @@ export interface ExtensionApi {
 - Mandatory migration resolution is deterministic: `status` equal to `"applied"` (case-insensitive) is treated as resolved; any other/missing status is unresolved.
 - Force-capable write commands may bypass the guard with explicit `--force`; write commands without `--force` remain blocked until blockers resolve.
 
-## 15) Bundled Managed Extensions Required in v1
+## 15) First-Party Installable Packages Required in v1
 
 ### A) Beads import
 
@@ -1337,8 +1337,8 @@ Command:
 
 Current baseline status (release-hardening):
 
-- Command is packaged in bundled managed extension source (`.agents/pm/extensions/beads`) using `activate(api)` and `api.registerCommand({ name, run })` for `beads import`.
-- Command path is available only after extension install/activation in selected scope (`pm extension --install beads` or explicit path install).
+- Command is packaged in the first-party package root (`packages/pm-beads`) using `activate(api)` and `api.registerCommand({ name, run })` for `beads import`.
+- Command path is available only after package install/activation in selected scope (`pm install packages/pm-beads`, package aliases, or explicit package source install).
 
 Behavior:
 
@@ -1359,8 +1359,8 @@ Commands:
 
 Current baseline status (release-hardening):
 
-- Commands are packaged in bundled managed extension source (`.agents/pm/extensions/todos`) using `activate(api)` and `api.registerCommand({ name, run })` for `todos import` and `todos export`.
-- Command paths are available only after extension install/activation in selected scope (`pm extension --install todos` or explicit path install).
+- Commands are packaged in the first-party package root (`packages/pm-todos`) using `activate(api)` and `api.registerCommand({ name, run })` for `todos import` and `todos export`.
+- Command paths are available only after package install/activation in selected scope (`pm install packages/pm-todos`, package aliases, or explicit package source install).
 
 Behavior:
 
@@ -1711,10 +1711,10 @@ Definition of Done:
 Checklist:
 
 - [x] extension manifest loader + sandboxed execution boundary (deterministic manifest discovery, precedence, failure-isolated runtime loading, realpath/symlink-resolved entry containment enforcement, command-handler context snapshot isolation for `args`/`options`/`global`, per-hook context snapshot isolation, and dynamic extension command loose-option parsing hardening (null-prototype option maps + prototype-pollution key rejection) are implemented; broader command sandbox API surface is post-v0.1 roadmap)
-- [x] hook lifecycle (extension `activate(api)` baseline with deterministic hook registration is implemented; registration now validates hook handlers as functions at activation time, per-hook context snapshot isolation prevents mutation leakage across hook callbacks and caller state, and `beforeCommand`/`afterCommand` command-lifecycle execution plus baseline read/write/index call-site wiring for core item-store reads/writes, create/restore item and history writes, settings read/write operations, history/activity history-directory scans and history-stream reads, health history-directory scans plus history-stream path dispatch, search item/linked reads, reindex flows, stats/health/gc command file-system paths (including `pm gc` onIndex dispatch with mode `gc` and deterministic cache-target totals), lock file read/write/unlink operations, init directory bootstrap ensure-write dispatch, and bundled managed beads/todos import-export source/item/history file operations are implemented)
+- [x] hook lifecycle (extension `activate(api)` baseline with deterministic hook registration is implemented; registration now validates hook handlers as functions at activation time, per-hook context snapshot isolation prevents mutation leakage across hook callbacks and caller state, and `beforeCommand`/`afterCommand` command-lifecycle execution plus baseline read/write/index call-site wiring for core item-store reads/writes, create/restore item and history writes, settings read/write operations, history/activity history-directory scans and history-stream reads, health history-directory scans plus history-stream path dispatch, search item/linked reads, reindex flows, stats/health/gc command file-system paths (including `pm gc` onIndex dispatch with mode `gc` and deterministic cache-target totals), lock file read/write/unlink operations, init directory bootstrap ensure-write dispatch, and first-party Beads/Todos package source/item/history file operations are implemented)
 - [x] renderer and command extension points (deterministic core-command override + renderer override registration/dispatch is implemented with failure containment, extension command handlers for declared command paths including dynamically surfaced non-core paths are implemented, dynamic command help now surfaces `registerFlags` metadata deterministically, deep snapshot isolation for override/renderer result contexts is implemented, and override/renderer execution now includes cloned command `args`/`options`/`global` snapshots plus `pm_root` metadata for contextual deterministic extension output behavior)
-- [x] bundled managed beads import extension (bundled source packaging in `.agents/pm/extensions/beads`, install-only command surfacing through `pm extension`, Beads JSONL field mapping, deterministic defaults, `op: "import"` history entries, and parity polish implemented)
-- [x] bundled managed todos import/export extension (bundled source packaging in `.agents/pm/extensions/todos`, install-only command surfacing through `pm extension`, todos markdown round-trip, canonical optional metadata preservation including planning/workflow and issue fields, hierarchical ID preservation, and `med` alias normalization implemented)
+- [x] first-party Beads import package (`packages/pm-beads`) with install-only command surfacing through `pm install`, Beads JSONL field mapping, deterministic defaults, `op: "import"` history entries, and parity polish implemented)
+- [x] first-party Todos import/export package (`packages/pm-todos`) with install-only command surfacing through `pm install`, todos markdown round-trip, canonical optional metadata preservation including planning/workflow and issue fields, hierarchical ID preservation, and `med` alias normalization implemented)
 - [x] Pi tool wrapper extension source module (Pi agent extension module at `.pi/extensions/pm-cli/index.ts` with full v0.1 action dispatch parity, including `completion` + `shell` mapping, camelCase parameter surface for all canonical scalar metadata, explicit empty-string passthrough, numeric-flag stringification, claim/release parity, packaged CLI fallback, and distribution packaging polish implemented)
 
 Definition of Done:

package/README.md

@@ -16,7 +16,7 @@
 | Command families and examples | [Command Reference](docs/COMMANDS.md) |
 | Settings, storage, search, and output | [Configuration](docs/CONFIGURATION.md) |
 | Safe test execution and linked tests | [Testing](docs/TESTING.md) |
-| Extension authoring | [Extensions](docs/EXTENSIONS.md) and [SDK](docs/SDK.md) |
+| Package and extension authoring | [Packages and Extensions](docs/EXTENSIONS.md) and [SDK](docs/SDK.md) |
 | Pi native package | [Pi Package](docs/PI_PACKAGE.md) |
 | Codex native integration | [Codex Plugin](docs/CODEX_PLUGIN.md) |
 | Maintainer release process (daily auto-release + local parity) | [Releasing](docs/RELEASING.md) |
@@ -67,6 +67,16 @@ pi install npm:@unbrained/pm-cli
 
 This registers a native `pm` tool, custom TUI panels/renderers (`/pm-board`, `/pm-item`, `/pm-history`), Pi skills, prompt templates, and optional pi-subagents setup without requiring Pi to run the `pm` shell command.
 
+`pm` packages use the same package-first vocabulary:
+
+```bash
+pm install ./my-package
+pm package manage --project
+pm package doctor --detail summary
+```
+
+The legacy `pm extension ...` command remains available for existing automation.
+
 ## 60 Second Example
 
 ```bash

package/dist/cli/commands/contracts.js

@@ -6,7 +6,7 @@ import { commandOptionFlagLabel, resolveCommandOptionPolicyState, resolveItemTyp
 import { resolveRuntimeFieldRegistry, resolveRuntimeStatusRegistry, } from "../../core/schema/runtime-schema.js";
 import { getSettingsPath, resolvePmRoot } from "../../core/store/paths.js";
 import { readSettings } from "../../core/store/settings.js";
-import { ACTIVITY_COMMANDER_STRING_OPTION_CONTRACTS, ACTIVITY_FLAG_CONTRACTS, AGGREGATE_FLAG_CONTRACTS, APPEND_FLAG_CONTRACTS, CALENDAR_COMMANDER_STRING_OPTION_CONTRACTS, CALENDAR_FLAG_CONTRACTS, CLAIM_FLAG_CONTRACTS, CLOSE_TASK_FLAG_CONTRACTS, COMMENTS_FLAG_CONTRACTS, COMMENTS_AUDIT_FLAG_CONTRACTS, CLOSE_FLAG_CONTRACTS, COMPLETION_FLAG_CONTRACTS, CONFIG_FLAG_CONTRACTS, CONTRACTS_FLAG_CONTRACTS, CONTEXT_COMMANDER_STRING_OPTION_CONTRACTS, CONTEXT_FLAG_CONTRACTS, CREATE_COMMANDER_REPEATABLE_OPTION_CONTRACTS, CREATE_COMMANDER_STRING_OPTION_CONTRACTS, CREATE_FLAG_CONTRACTS, DELETE_FLAG_CONTRACTS, DEPS_FLAG_CONTRACTS, DEDUPE_AUDIT_FLAG_CONTRACTS, DOCS_FLAG_CONTRACTS, EXTENSION_FLAG_CONTRACTS, FILES_FLAG_CONTRACTS, GC_FLAG_CONTRACTS, GUIDE_FLAG_CONTRACTS, GLOBAL_FLAG_CONTRACTS, HEALTH_FLAG_CONTRACTS, HISTORY_FLAG_CONTRACTS, LEARNINGS_FLAG_CONTRACTS, LIST_COMMANDER_STRING_OPTION_CONTRACTS, LIST_FILTER_FLAG_CONTRACTS, NORMALIZE_FLAG_CONTRACTS, NOTES_FLAG_CONTRACTS, PM_EXTENSION_CAPABILITY_CONTRACTS, PM_EXTENSION_POLICY_MODE_CONTRACTS, PM_EXTENSION_POLICY_SURFACE_CONTRACTS, PM_EXTENSION_SANDBOX_PROFILE_CONTRACTS, PM_EXTENSION_SERVICE_NAME_CONTRACTS, PM_EXTENSION_TRUST_MODE_CONTRACTS, PM_CORE_COMMAND_NAMES, PM_TOOL_ACTIONS, PM_TOOL_PARAMETERS_SCHEMA, REINDEX_FLAG_CONTRACTS, RELEASE_FLAG_CONTRACTS, RESTORE_FLAG_CONTRACTS, SEARCH_COMMANDER_STRING_OPTION_CONTRACTS, SEARCH_FLAG_CONTRACTS, START_TASK_FLAG_CONTRACTS, PAUSE_TASK_FLAG_CONTRACTS, TEST_ALL_FLAG_CONTRACTS, TEST_FLAG_CONTRACTS, TEST_RUNS_FLAG_CONTRACTS, UPDATE_COMMANDER_REPEATABLE_OPTION_CONTRACTS, UPDATE_COMMANDER_STRING_OPTION_CONTRACTS, UPDATE_FLAG_CONTRACTS, UPDATE_MANY_FLAG_CONTRACTS, VALIDATE_FLAG_CONTRACTS, withFlagAliasMetadata, } from "../../sdk/cli-contracts.js";
+import { ACTIVITY_COMMANDER_STRING_OPTION_CONTRACTS, ACTIVITY_FLAG_CONTRACTS, AGGREGATE_FLAG_CONTRACTS, APPEND_FLAG_CONTRACTS, CALENDAR_COMMANDER_STRING_OPTION_CONTRACTS, CALENDAR_FLAG_CONTRACTS, CLAIM_FLAG_CONTRACTS, CLOSE_TASK_FLAG_CONTRACTS, COMMENTS_FLAG_CONTRACTS, COMMENTS_AUDIT_FLAG_CONTRACTS, CLOSE_FLAG_CONTRACTS, COMPLETION_FLAG_CONTRACTS, CONFIG_FLAG_CONTRACTS, CONTRACTS_FLAG_CONTRACTS, CONTEXT_COMMANDER_STRING_OPTION_CONTRACTS, CONTEXT_FLAG_CONTRACTS, CREATE_COMMANDER_REPEATABLE_OPTION_CONTRACTS, CREATE_COMMANDER_STRING_OPTION_CONTRACTS, CREATE_FLAG_CONTRACTS, DELETE_FLAG_CONTRACTS, DEPS_FLAG_CONTRACTS, DEDUPE_AUDIT_FLAG_CONTRACTS, DOCS_FLAG_CONTRACTS, EXTENSION_FLAG_CONTRACTS, FILES_FLAG_CONTRACTS, GC_FLAG_CONTRACTS, GUIDE_FLAG_CONTRACTS, GLOBAL_FLAG_CONTRACTS, HEALTH_FLAG_CONTRACTS, HISTORY_FLAG_CONTRACTS, LEARNINGS_FLAG_CONTRACTS, LIST_COMMANDER_STRING_OPTION_CONTRACTS, LIST_FILTER_FLAG_CONTRACTS, NORMALIZE_FLAG_CONTRACTS, NOTES_FLAG_CONTRACTS, PM_EXTENSION_CAPABILITY_CONTRACTS, PM_EXTENSION_POLICY_MODE_CONTRACTS, PM_EXTENSION_POLICY_SURFACE_CONTRACTS, PM_EXTENSION_SANDBOX_PROFILE_CONTRACTS, PM_EXTENSION_SERVICE_NAME_CONTRACTS, PM_EXTENSION_TRUST_MODE_CONTRACTS, PM_CORE_COMMAND_NAMES, PM_TOOL_ACTIONS, PM_TOOL_PARAMETERS_SCHEMA, REINDEX_FLAG_CONTRACTS, RELEASE_FLAG_CONTRACTS, RESTORE_FLAG_CONTRACTS, SEARCH_COMMANDER_STRING_OPTION_CONTRACTS, SEARCH_FLAG_CONTRACTS, START_TASK_FLAG_CONTRACTS, PAUSE_TASK_FLAG_CONTRACTS, TEST_ALL_FLAG_CONTRACTS, TEST_FLAG_CONTRACTS, TEST_RUNS_FLAG_CONTRACTS, UPDATE_COMMANDER_REPEATABLE_OPTION_CONTRACTS, UPDATE_COMMANDER_STRING_OPTION_CONTRACTS, UPDATE_FLAG_CONTRACTS, UPDATE_MANY_FLAG_CONTRACTS, UPGRADE_FLAG_CONTRACTS, VALIDATE_FLAG_CONTRACTS, withFlagAliasMetadata, } from "../../sdk/cli-contracts.js";
 const LIST_COMMAND_NAMES = new Set([
     "list",
     "list-all",
@@ -33,6 +33,9 @@ function resolveActionCommandPath(action) {
     if (action.startsWith("extension-")) {
         return normalizeCommandPath(`extension ${action.slice("extension-".length)}`);
     }
+    if (action.startsWith("package-")) {
+        return normalizeCommandPath(`package ${action.slice("package-".length)}`);
+    }
     if (action.startsWith("test-runs-")) {
         return normalizeCommandPath(`test-runs ${action.slice("test-runs-".length)}`);
     }
@@ -478,7 +481,7 @@ function resolveCoreCommandFlags(command) {
     if (command === "config") {
         return CONFIG_FLAG_CONTRACTS;
     }
-    if (command === "extension") {
+    if (command === "extension" || command === "package" || command === "packages" || command === "install") {
         return EXTENSION_FLAG_CONTRACTS;
     }
     if (command === "create") {
@@ -490,6 +493,9 @@ function resolveCoreCommandFlags(command) {
     if (command === "update-many") {
         return UPDATE_MANY_FLAG_CONTRACTS;
     }
+    if (command === "upgrade") {
+        return UPGRADE_FLAG_CONTRACTS;
+    }
     if (command === "normalize") {
         return NORMALIZE_FLAG_CONTRACTS;
     }