@unbrained/pm-cli 2026.7.21 → 2026.7.22

package/.claude-plugin/marketplace.json

@@ -6,14 +6,14 @@
   },
   "metadata": {
     "description": "Official marketplace for pm CLI — native git-based project management for Claude Code and AI coding agents.",
-    "version": "2026.7.21"
+    "version": "2026.7.22"
   },
   "plugins": [
     {
       "name": "pm-claude",
       "source": "./plugins/pm-claude",
       "description": "Native pm CLI integration for Claude Code — 28 MCP tools, 5 workflow skills, 14 slash commands, 4 subagents, hybrid TUI task tracking, session context injection, and coordination subagents for git-based project management without leaving Claude Code.",
-      "version": "2026.7.21",
+      "version": "2026.7.22",
       "author": {
         "name": "unbrained",
         "url": "https://github.com/unbraind/pm-cli"

package/CHANGELOG.md

@@ -1,5 +1,30 @@
 # Changelog
 
+## 2026.7.22 - 2026-07-22
+
+### Fixed
+
+- Sentry PM-CLI-2G: make merge-driver installation permission failures actionable ([pm-bnmlsc](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-bnmlsc.toon))
+- Sentry PM-CLI-2F: classify manifest-proven torn bundle call-time TypeError ([pm-pz7xtx](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-pz7xtx.toon))
+- Compatibility gate rejects compact legacy create envelopes after release promotion ([pm-pkdpyz](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-pkdpyz.toon))
+- Sentry PM-CLI-2E: directory-shaped settings.json crashes CLI bootstrap ([pm-k0nl2w](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-k0nl2w.toon))
+- Sentry PM-CLI-2D: storage-integrity history scan reads .jsonl directories as files ([pm-o1c53b](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-o1c53b.toon))
+- GH-576: unknown-command help probes return structured non-zero errors ([pm-bu1m](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-bu1m.toon))
+- GH-551: dependency seeds accept global source_kind and preserve cross-workspace IDs ([pm-topu](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-topu.toon))
+- GH-595: list JSON always emits total/has_more/truncated/next_cursor and omits unset filters ([pm-wrss](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-wrss.toon))
+- GH-623: opt-in post-merge history reconciliation hook and one-command verify repair ([pm-mfkv92](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-mfkv92.toon))
+- GH-553/GH-584: CodeFactor unnecessary-spread findings — restructure flagged spread sites (class owner) ([pm-zt1c](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-zt1c.toon))
+- GH-574: flattened extension alias subcommands still drop option contracts after GH-503/GH-550 fixes (empty --help, valid options rejected as positionals) ([pm-7ufz](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-7ufz.toon))
+
+### Security
+
+- Dependabot alert \#42: brace-expansion CPU denial of service (GHSA-3jxr-9vmj-r5cp) ([pm-f5hy2n](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-f5hy2n.toon))
+
+### Other
+
+- GitHub analyzer follow-up: GH-628 unnecessary spread, GH-629 duplicate blocks, and GH-630 unsafe optional chaining ([pm-aw59hb](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/tasks/pm-aw59hb.toon))
+- GH-582: runRegisteredListCommand flagged Complex Method by CodeFactor — extract option-assembly helpers in register-list-query.ts ([pm-zwya](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/chores/pm-zwya.toon))
+
 ## 2026.7.21 - 2026-07-21
 
 ### Added

package/dist/cli/bundle-integrity.js

@@ -4,7 +4,7 @@
  * Diagnoses proven torn CLI bundle generations without hiding genuine module failures.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="b2ba8e86-e01a-5579-8ce8-f05dc79e059c")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="52d1467a-648f-5f1f-8b03-b6b6684deb3e")}catch(e){}}();
 import { createHash } from "node:crypto";
 import fs from "node:fs";
 import path from "node:path";
@@ -75,7 +75,7 @@ export function diagnoseCliBundleIntegrityFailure(error, initialSnapshot, cliEnt
         ? error.code
         : "";
     if (errorCode !== "ERR_MODULE_NOT_FOUND" &&
-        !/(?:cannot find module|does not provide an export named)/i.test(error.message)) {
+        !/(?:cannot find module|does not provide an export named|[A-Za-z_$][\w$]* is not a function)/i.test(error.message)) {
         return undefined;
     }
     const reason = inspectCurrentBundleIntegrity(initialSnapshot, cliEntrypointPath);
@@ -108,4 +108,4 @@ export async function runCliWithBundleIntegrity(args, cliEntrypointPath, loadMai
     }
 }
 //# sourceMappingURL=bundle-integrity.js.map
-//# debugId=b2ba8e86-e01a-5579-8ce8-f05dc79e059c
+//# debugId=52d1467a-648f-5f1f-8b03-b6b6684deb3e

package/dist/cli/bundle-integrity.js.map

@@ -1 +1 @@
-{"version":3,"file":"bundle-integrity.js","sources":["cli/bundle-integrity.ts"],"sourceRoot":"/","sourcesContent":["/**\n * @module cli/bundle-integrity\n *\n * Diagnoses proven torn CLI bundle generations without hiding genuine module failures.\n */\nimport { createHash } from \"node:crypto\";\nimport fs from \"node:fs\";\nimport path from \"node:path\";\n\n/** Describes one hashed output recorded in the generated CLI bundle manifest. */\nexport interface CliBundleManifestFile {\n  /** Path relative to the directory containing the manifest. */\n  path: string;\n  /** Lowercase SHA-256 digest of the emitted file contents. */\n  sha256: string;\n}\n\n/** Describes one atomic CLI bundle generation emitted by the build. */\nexport interface CliBundleManifest {\n  /** Manifest schema generation. */\n  schema_version: 1;\n  /** Stable digest over the sorted file path and digest pairs. */\n  generation: string;\n  /** Complete set of JavaScript and source-map outputs in this generation. */\n  files: CliBundleManifestFile[];\n}\n\n/** Captures a validated manifest together with its absolute on-disk path. */\nexport interface CliBundleManifestSnapshot {\n  /** Absolute manifest path used for later file verification. */\n  manifest_path: string;\n  /** Validated manifest payload. */\n  manifest: CliBundleManifest;\n}\n\n/** Reports a proven partial-upgrade or concurrent-build bundle failure. */\nexport interface CliBundleIntegrityDiagnostic {\n  /** Stable machine-readable error code. */\n  code: \"bundle_integrity_torn_install\";\n  /** Actionable operator-facing recovery text. */\n  message: string;\n  /** Specific integrity proof that classified the failure. */\n  reason: \"generation_changed\" | \"manifest_missing\" | \"file_missing\" | \"hash_mismatch\";\n  /** Original module-loader failure text retained for diagnosis. */\n  cause: string;\n}\n\nfunction isCliBundleManifest(value: unknown): value is CliBundleManifest {\n  if (typeof value !== \"object\" || value === null) {\n    return false;\n  }\n  const candidate = value as {\n    schema_version?: unknown;\n    generation?: unknown;\n    files?: unknown;\n  };\n  return (\n    candidate.schema_version === 1 &&\n    typeof candidate.generation === \"string\" &&\n    candidate.generation.length > 0 &&\n    Array.isArray(candidate.files) &&\n    candidate.files.every(\n      (entry) =>\n        typeof entry === \"object\" &&\n        entry !== null &&\n        typeof (entry as { path?: unknown }).path === \"string\" &&\n        typeof (entry as { sha256?: unknown }).sha256 === \"string\",\n    )\n  );\n}\n\n/** Reads the bundle manifest next to a compiled `dist/cli.js` entrypoint. */\nexport function readCliBundleManifestSnapshot(\n  cliEntrypointPath: string,\n): CliBundleManifestSnapshot | undefined {\n  const manifestPath = path.join(\n    path.dirname(path.resolve(cliEntrypointPath)),\n    \"cli-bundle\",\n    \"bundle-manifest.json\",\n  );\n  try {\n    const parsed: unknown = JSON.parse(fs.readFileSync(manifestPath, \"utf8\"));\n    return isCliBundleManifest(parsed)\n      ? { manifest_path: manifestPath, manifest: parsed }\n      : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction inspectCurrentBundleIntegrity(\n  initialSnapshot: CliBundleManifestSnapshot,\n  cliEntrypointPath: string,\n): CliBundleIntegrityDiagnostic[\"reason\"] | undefined {\n  const currentSnapshot = readCliBundleManifestSnapshot(cliEntrypointPath);\n  if (!currentSnapshot) {\n    return \"manifest_missing\";\n  }\n  if (\n    currentSnapshot.manifest.generation !==\n    initialSnapshot.manifest.generation\n  ) {\n    return \"generation_changed\";\n  }\n  const bundleRoot = path.dirname(currentSnapshot.manifest_path);\n  for (const entry of currentSnapshot.manifest.files) {\n    const filePath = path.resolve(bundleRoot, entry.path);\n    if (!filePath.startsWith(`${bundleRoot}${path.sep}`)) {\n      continue;\n    }\n    if (!fs.existsSync(filePath)) {\n      return \"file_missing\";\n    }\n    const digest = createHash(\"sha256\")\n      .update(fs.readFileSync(filePath))\n      .digest(\"hex\");\n    if (digest !== entry.sha256) {\n      return \"hash_mismatch\";\n    }\n  }\n  return undefined;\n}\n\n/**\n * Returns a diagnostic only when a module-loader failure coincides with a changed,\n * missing, or hash-invalid bundle generation. Unproven module failures return\n * `undefined` so the original exception remains release-blocking.\n */\nexport function diagnoseCliBundleIntegrityFailure(\n  error: unknown,\n  initialSnapshot: CliBundleManifestSnapshot | undefined,\n  cliEntrypointPath: string,\n): CliBundleIntegrityDiagnostic | undefined {\n  if (!initialSnapshot || !(error instanceof Error)) {\n    return undefined;\n  }\n  const errorCode =\n    \"code\" in error && typeof (error as { code?: unknown }).code === \"string\"\n      ? (error as { code: string }).code\n      : \"\";\n  if (\n    errorCode !== \"ERR_MODULE_NOT_FOUND\" &&\n    !/(?:cannot find module|does not provide an export named)/i.test(\n      error.message,\n    )\n  ) {\n    return undefined;\n  }\n\n  const reason = inspectCurrentBundleIntegrity(\n    initialSnapshot,\n    cliEntrypointPath,\n  );\n  return reason\n    ? {\n        code: \"bundle_integrity_torn_install\",\n        message:\n          \"A partial pm CLI upgrade or concurrent rebuild changed the executable bundle. Reinstall @unbrained/pm-cli, then retry the command.\",\n        reason,\n        cause: error.message,\n      }\n    : undefined;\n}\n\n/**\n * Loads and runs the CLI while converting only manifest-proven torn-bundle\n * failures into a handled recovery diagnostic.\n */\nexport async function runCliWithBundleIntegrity(\n  args: string[],\n  cliEntrypointPath: string,\n  loadMain: () => Promise<{\n    runPmCli: (invocationArgs: string[]) => Promise<void>;\n  }>,\n  writeStderr: (message: string) => void,\n): Promise<void> {\n  const initialBundleManifest =\n    readCliBundleManifestSnapshot(cliEntrypointPath);\n  try {\n    const { runPmCli } = await loadMain();\n    await runPmCli(args);\n  } catch (error: unknown) {\n    const diagnostic = diagnoseCliBundleIntegrityFailure(\n      error,\n      initialBundleManifest,\n      cliEntrypointPath,\n    );\n    if (!diagnostic) {\n      throw error;\n    }\n    writeStderr(\n      `[pm] ${diagnostic.code}: ${diagnostic.message} (${diagnostic.reason})\\n`,\n    );\n    process.exitCode = 1;\n  }\n}\n"],"names":[],"mappings":"AAAA;;;;GAIG;;;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAwC7B,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,SAAS,GAAG,KAIjB,CAAC;IACF,OAAO,CACL,SAAS,CAAC,cAAc,KAAK,CAAC;QAC9B,OAAO,SAAS,CAAC,UAAU,KAAK,QAAQ;QACxC,SAAS,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;QAC/B,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC;QAC9B,SAAS,CAAC,KAAK,CAAC,KAAK,CACnB,CAAC,KAAK,EAAE,EAAE,CACR,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,KAAK,IAAI;YACd,OAAQ,KAA4B,CAAC,IAAI,KAAK,QAAQ;YACtD,OAAQ,KAA8B,CAAC,MAAM,KAAK,QAAQ,CAC7D,CACF,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,6BAA6B,CAC3C,iBAAyB;IAEzB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAC5B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,EAC7C,YAAY,EACZ,sBAAsB,CACvB,CAAC;IACF,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1E,OAAO,mBAAmB,CAAC,MAAM,CAAC;YAChC,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE;YACnD,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,6BAA6B,CACpC,eAA0C,EAC1C,iBAAyB;IAEzB,MAAM,eAAe,GAAG,6BAA6B,CAAC,iBAAiB,CAAC,CAAC;IACzE,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IACD,IACE,eAAe,CAAC,QAAQ,CAAC,UAAU;QACnC,eAAe,CAAC,QAAQ,CAAC,UAAU,EACnC,CAAC;QACD,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;IAC/D,KAAK,MAAM,KAAK,IAAI,eAAe,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YACrD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;aAChC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;aACjC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjB,IAAI,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YAC5B,OAAO,eAAe,CAAC;QACzB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iCAAiC,CAC/C,KAAc,EACd,eAAsD,EACtD,iBAAyB;IAEzB,IAAI,CAAC,eAAe,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GACb,MAAM,IAAI,KAAK,IAAI,OAAQ,KAA4B,CAAC,IAAI,KAAK,QAAQ;QACvE,CAAC,CAAE,KAA0B,CAAC,IAAI;QAClC,CAAC,CAAC,EAAE,CAAC;IACT,IACE,SAAS,KAAK,sBAAsB;QACpC,CAAC,0DAA0D,CAAC,IAAI,CAC9D,KAAK,CAAC,OAAO,CACd,EACD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,6BAA6B,CAC1C,eAAe,EACf,iBAAiB,CAClB,CAAC;IACF,OAAO,MAAM;QACX,CAAC,CAAC;YACE,IAAI,EAAE,+BAA+B;YACrC,OAAO,EACL,oIAAoI;YACtI,MAAM;YACN,KAAK,EAAE,KAAK,CAAC,OAAO;SACrB;QACH,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,IAAc,EACd,iBAAyB,EACzB,QAEE,EACF,WAAsC;IAEtC,MAAM,qBAAqB,GACzB,6BAA6B,CAAC,iBAAiB,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QACtC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,iCAAiC,CAClD,KAAK,EACL,qBAAqB,EACrB,iBAAiB,CAClB,CAAC;QACF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,KAAK,CAAC;QACd,CAAC;QACD,WAAW,CACT,QAAQ,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,OAAO,KAAK,UAAU,CAAC,MAAM,KAAK,CAC1E,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC","debugId":"b2ba8e86-e01a-5579-8ce8-f05dc79e059c"}
+{"version":3,"file":"bundle-integrity.js","sources":["cli/bundle-integrity.ts"],"sourceRoot":"/","sourcesContent":["/**\n * @module cli/bundle-integrity\n *\n * Diagnoses proven torn CLI bundle generations without hiding genuine module failures.\n */\nimport { createHash } from \"node:crypto\";\nimport fs from \"node:fs\";\nimport path from \"node:path\";\n\n/** Describes one hashed output recorded in the generated CLI bundle manifest. */\nexport interface CliBundleManifestFile {\n  /** Path relative to the directory containing the manifest. */\n  path: string;\n  /** Lowercase SHA-256 digest of the emitted file contents. */\n  sha256: string;\n}\n\n/** Describes one atomic CLI bundle generation emitted by the build. */\nexport interface CliBundleManifest {\n  /** Manifest schema generation. */\n  schema_version: 1;\n  /** Stable digest over the sorted file path and digest pairs. */\n  generation: string;\n  /** Complete set of JavaScript and source-map outputs in this generation. */\n  files: CliBundleManifestFile[];\n}\n\n/** Captures a validated manifest together with its absolute on-disk path. */\nexport interface CliBundleManifestSnapshot {\n  /** Absolute manifest path used for later file verification. */\n  manifest_path: string;\n  /** Validated manifest payload. */\n  manifest: CliBundleManifest;\n}\n\n/** Reports a proven partial-upgrade or concurrent-build bundle failure. */\nexport interface CliBundleIntegrityDiagnostic {\n  /** Stable machine-readable error code. */\n  code: \"bundle_integrity_torn_install\";\n  /** Actionable operator-facing recovery text. */\n  message: string;\n  /** Specific integrity proof that classified the failure. */\n  reason: \"generation_changed\" | \"manifest_missing\" | \"file_missing\" | \"hash_mismatch\";\n  /** Original module-loader failure text retained for diagnosis. */\n  cause: string;\n}\n\nfunction isCliBundleManifest(value: unknown): value is CliBundleManifest {\n  if (typeof value !== \"object\" || value === null) {\n    return false;\n  }\n  const candidate = value as {\n    schema_version?: unknown;\n    generation?: unknown;\n    files?: unknown;\n  };\n  return (\n    candidate.schema_version === 1 &&\n    typeof candidate.generation === \"string\" &&\n    candidate.generation.length > 0 &&\n    Array.isArray(candidate.files) &&\n    candidate.files.every(\n      (entry) =>\n        typeof entry === \"object\" &&\n        entry !== null &&\n        typeof (entry as { path?: unknown }).path === \"string\" &&\n        typeof (entry as { sha256?: unknown }).sha256 === \"string\",\n    )\n  );\n}\n\n/** Reads the bundle manifest next to a compiled `dist/cli.js` entrypoint. */\nexport function readCliBundleManifestSnapshot(\n  cliEntrypointPath: string,\n): CliBundleManifestSnapshot | undefined {\n  const manifestPath = path.join(\n    path.dirname(path.resolve(cliEntrypointPath)),\n    \"cli-bundle\",\n    \"bundle-manifest.json\",\n  );\n  try {\n    const parsed: unknown = JSON.parse(fs.readFileSync(manifestPath, \"utf8\"));\n    return isCliBundleManifest(parsed)\n      ? { manifest_path: manifestPath, manifest: parsed }\n      : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction inspectCurrentBundleIntegrity(\n  initialSnapshot: CliBundleManifestSnapshot,\n  cliEntrypointPath: string,\n): CliBundleIntegrityDiagnostic[\"reason\"] | undefined {\n  const currentSnapshot = readCliBundleManifestSnapshot(cliEntrypointPath);\n  if (!currentSnapshot) {\n    return \"manifest_missing\";\n  }\n  if (\n    currentSnapshot.manifest.generation !==\n    initialSnapshot.manifest.generation\n  ) {\n    return \"generation_changed\";\n  }\n  const bundleRoot = path.dirname(currentSnapshot.manifest_path);\n  for (const entry of currentSnapshot.manifest.files) {\n    const filePath = path.resolve(bundleRoot, entry.path);\n    if (!filePath.startsWith(`${bundleRoot}${path.sep}`)) {\n      continue;\n    }\n    if (!fs.existsSync(filePath)) {\n      return \"file_missing\";\n    }\n    const digest = createHash(\"sha256\")\n      .update(fs.readFileSync(filePath))\n      .digest(\"hex\");\n    if (digest !== entry.sha256) {\n      return \"hash_mismatch\";\n    }\n  }\n  return undefined;\n}\n\n/**\n * Returns a diagnostic only when a module-loader failure coincides with a changed,\n * missing, or hash-invalid bundle generation. Unproven module failures return\n * `undefined` so the original exception remains release-blocking.\n */\nexport function diagnoseCliBundleIntegrityFailure(\n  error: unknown,\n  initialSnapshot: CliBundleManifestSnapshot | undefined,\n  cliEntrypointPath: string,\n): CliBundleIntegrityDiagnostic | undefined {\n  if (!initialSnapshot || !(error instanceof Error)) {\n    return undefined;\n  }\n  const errorCode =\n    \"code\" in error && typeof (error as { code?: unknown }).code === \"string\"\n      ? (error as { code: string }).code\n      : \"\";\n  if (\n    errorCode !== \"ERR_MODULE_NOT_FOUND\" &&\n    !/(?:cannot find module|does not provide an export named|[A-Za-z_$][\\w$]* is not a function)/i.test(\n      error.message,\n    )\n  ) {\n    return undefined;\n  }\n\n  const reason = inspectCurrentBundleIntegrity(\n    initialSnapshot,\n    cliEntrypointPath,\n  );\n  return reason\n    ? {\n        code: \"bundle_integrity_torn_install\",\n        message:\n          \"A partial pm CLI upgrade or concurrent rebuild changed the executable bundle. Reinstall @unbrained/pm-cli, then retry the command.\",\n        reason,\n        cause: error.message,\n      }\n    : undefined;\n}\n\n/**\n * Loads and runs the CLI while converting only manifest-proven torn-bundle\n * failures into a handled recovery diagnostic.\n */\nexport async function runCliWithBundleIntegrity(\n  args: string[],\n  cliEntrypointPath: string,\n  loadMain: () => Promise<{\n    runPmCli: (invocationArgs: string[]) => Promise<void>;\n  }>,\n  writeStderr: (message: string) => void,\n): Promise<void> {\n  const initialBundleManifest =\n    readCliBundleManifestSnapshot(cliEntrypointPath);\n  try {\n    const { runPmCli } = await loadMain();\n    await runPmCli(args);\n  } catch (error: unknown) {\n    const diagnostic = diagnoseCliBundleIntegrityFailure(\n      error,\n      initialBundleManifest,\n      cliEntrypointPath,\n    );\n    if (!diagnostic) {\n      throw error;\n    }\n    writeStderr(\n      `[pm] ${diagnostic.code}: ${diagnostic.message} (${diagnostic.reason})\\n`,\n    );\n    process.exitCode = 1;\n  }\n}\n"],"names":[],"mappings":"AAAA;;;;GAIG;;;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAwC7B,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,SAAS,GAAG,KAIjB,CAAC;IACF,OAAO,CACL,SAAS,CAAC,cAAc,KAAK,CAAC;QAC9B,OAAO,SAAS,CAAC,UAAU,KAAK,QAAQ;QACxC,SAAS,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;QAC/B,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC;QAC9B,SAAS,CAAC,KAAK,CAAC,KAAK,CACnB,CAAC,KAAK,EAAE,EAAE,CACR,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,KAAK,IAAI;YACd,OAAQ,KAA4B,CAAC,IAAI,KAAK,QAAQ;YACtD,OAAQ,KAA8B,CAAC,MAAM,KAAK,QAAQ,CAC7D,CACF,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,6BAA6B,CAC3C,iBAAyB;IAEzB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAC5B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,EAC7C,YAAY,EACZ,sBAAsB,CACvB,CAAC;IACF,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1E,OAAO,mBAAmB,CAAC,MAAM,CAAC;YAChC,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE;YACnD,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,6BAA6B,CACpC,eAA0C,EAC1C,iBAAyB;IAEzB,MAAM,eAAe,GAAG,6BAA6B,CAAC,iBAAiB,CAAC,CAAC;IACzE,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IACD,IACE,eAAe,CAAC,QAAQ,CAAC,UAAU;QACnC,eAAe,CAAC,QAAQ,CAAC,UAAU,EACnC,CAAC;QACD,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;IAC/D,KAAK,MAAM,KAAK,IAAI,eAAe,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YACrD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;aAChC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;aACjC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjB,IAAI,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YAC5B,OAAO,eAAe,CAAC;QACzB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iCAAiC,CAC/C,KAAc,EACd,eAAsD,EACtD,iBAAyB;IAEzB,IAAI,CAAC,eAAe,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GACb,MAAM,IAAI,KAAK,IAAI,OAAQ,KAA4B,CAAC,IAAI,KAAK,QAAQ;QACvE,CAAC,CAAE,KAA0B,CAAC,IAAI;QAClC,CAAC,CAAC,EAAE,CAAC;IACT,IACE,SAAS,KAAK,sBAAsB;QACpC,CAAC,6FAA6F,CAAC,IAAI,CACjG,KAAK,CAAC,OAAO,CACd,EACD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,6BAA6B,CAC1C,eAAe,EACf,iBAAiB,CAClB,CAAC;IACF,OAAO,MAAM;QACX,CAAC,CAAC;YACE,IAAI,EAAE,+BAA+B;YACrC,OAAO,EACL,oIAAoI;YACtI,MAAM;YACN,KAAK,EAAE,KAAK,CAAC,OAAO;SACrB;QACH,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,IAAc,EACd,iBAAyB,EACzB,QAEE,EACF,WAAsC;IAEtC,MAAM,qBAAqB,GACzB,6BAA6B,CAAC,iBAAiB,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QACtC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,iCAAiC,CAClD,KAAK,EACL,qBAAqB,EACrB,iBAAiB,CAClB,CAAC;QACF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,KAAK,CAAC;QACd,CAAC;QACD,WAAW,CACT,QAAQ,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,OAAO,KAAK,UAAU,CAAC,MAAM,KAAK,CAC1E,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC","debugId":"52d1467a-648f-5f1f-8b03-b6b6684deb3e"}

package/dist/cli/commands/contracts.d.ts

@@ -1,6 +1,7 @@
 import type { GlobalOptions } from "../../core/shared/command-types.js";
 import type { ExtensionRegistrationRegistry, RegisteredExtensionCommandDefinition, RegisteredExtensionFlagDefinitions } from "../../core/extensions/index.js";
 import { type RuntimeFieldRegistry } from "../../core/schema/runtime-schema.js";
+import { readSettings } from "../../core/store/settings.js";
 import { type McpToolContract } from "../../mcp/tool-definitions.js";
 import { PM_TOOL_ACTIONS, type CliFlagContract, type CommanderOptionAliasContract } from "../../sdk/cli-contracts.js";
 /** Documents the contracts command options payload exchanged by command, SDK, and package integrations. */
@@ -186,6 +187,7 @@ declare function collectExtensionCommandContracts(runtimeProbe: RuntimeExtension
 declare function extensionSchemaPropertyNameFromFlag(flag: CliFlagContract): string | null;
 declare function buildExtensionActionSchemaBranch(contract: ExtensionCommandContract): Record<string, unknown>;
 declare function mergeExtensionContractsByAction(contracts: ExtensionCommandContract[]): ExtensionCommandContract[];
+declare function resolveRuntimeExtensionActionProbe(global: GlobalOptions, readSettingsFn?: typeof readSettings): Promise<RuntimeExtensionActionProbe>;
 interface ActionContractDescriptor {
     action: string;
     provider: "core" | "extension";
@@ -203,6 +205,7 @@ declare function toRuntimeLongFlagToken(token: string): string | null;
 declare function toRuntimeShortFlagToken(token: string): string | null;
 declare function buildRuntimeFieldFlagContracts(fieldRegistry: RuntimeFieldRegistry): Map<string, CliFlagContract[]>;
 declare function attachCreateRequiredOptionContracts(schema: Record<string, unknown>, metadata: Record<string, unknown>): Record<string, unknown>;
+declare function readContractsSettings(pmRoot: string, readSettingsFn?: typeof readSettings): Promise<Awaited<ReturnType<typeof readSettings>>>;
 declare function buildCommandSummarySurface(commands: readonly string[]): CommandSummarySurface[];
 /** Implements run contracts for the public runtime surface of this module. */
 export declare function runContracts(options: ContractsCommandOptions, global: GlobalOptions): Promise<ContractsResult>;
@@ -227,9 +230,11 @@ export declare const _testOnlyContractsCommand: {
     normalizeCommandForRuntimeFieldFlags: typeof normalizeCommandForRuntimeFieldFlags;
     normalizeCommandPath: typeof normalizeCommandPath;
     packageOwnedActionForCommand: typeof packageOwnedActionForCommand;
+    readContractsSettings: typeof readContractsSettings;
     resolveActionCommandPath: typeof resolveActionCommandPath;
     resolveActionAvailability: typeof resolveActionAvailability;
     resolveCoreCommandFlags: typeof resolveCoreCommandFlags;
+    resolveRuntimeExtensionActionProbe: typeof resolveRuntimeExtensionActionProbe;
     resolveScopedCommandsFromActionDescriptors: typeof resolveScopedCommandsFromActionDescriptors;
     splitCommandPathAliases: typeof splitCommandPathAliases;
     toRuntimeLongFlagToken: typeof toRuntimeLongFlagToken;

package/dist/cli/commands/contracts.js

@@ -4,7 +4,7 @@
  * Implements the pm contracts command surface and its agent-facing runtime behavior.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="290e5b17-4f2f-5bb7-a770-d82926f3a936")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="d77abfb1-18a1-5c55-8576-5945feb01aa7")}catch(e){}}();
 import { EXIT_CODE, SETTINGS_DEFAULTS } from "../../core/shared/constants.js";
 import { PmCliError } from "../../core/shared/errors.js";
 import { activateExtensions, getActiveExtensionRegistrations, loadExtensions, } from "../../core/extensions/index.js";
@@ -730,7 +730,7 @@ function mergeExtensionContractsByAction(contracts) {
     return [...byAction.values()].sort((left, right) => left.action.localeCompare(right.action));
 }
 /* c8 ignore stop */
-async function resolveRuntimeExtensionActionProbe(global) {
+async function resolveRuntimeExtensionActionProbe(global, readSettingsFn = readSettings) {
     const defaultPolicyState = {
         mode: SETTINGS_DEFAULTS.extensions.policy.mode,
         trust_mode: SETTINGS_DEFAULTS.extensions.policy.trust_mode,
@@ -758,7 +758,7 @@ async function resolveRuntimeExtensionActionProbe(global) {
         };
     }
     try {
-        const settings = await readSettings(pmRoot);
+        const settings = await readSettingsFn(pmRoot);
         const loadResult = await loadExtensions({
             pmRoot,
             settings,
@@ -1168,9 +1168,9 @@ function assertSingleContractsProjection(selection) {
         throw new PmCliError("Choose only one projection flag: --summary, --schema-only, --flags-only, or --availability-only.", EXIT_CODE.USAGE);
     }
 }
-async function readContractsSettings(pmRoot) {
+async function readContractsSettings(pmRoot, readSettingsFn = readSettings) {
     try {
-        return await readSettings(pmRoot);
+        return await readSettingsFn(pmRoot);
     }
     catch {
         return structuredClone(SETTINGS_DEFAULTS);
@@ -1631,13 +1631,15 @@ export const _testOnlyContractsCommand = {
     normalizeCommandForRuntimeFieldFlags,
     normalizeCommandPath,
     packageOwnedActionForCommand,
+    readContractsSettings,
     resolveActionCommandPath,
     resolveActionAvailability,
     resolveCoreCommandFlags,
+    resolveRuntimeExtensionActionProbe,
     resolveScopedCommandsFromActionDescriptors,
     splitCommandPathAliases,
     toRuntimeLongFlagToken,
     toRuntimeShortFlagToken,
 };
 //# sourceMappingURL=contracts.js.map
-//# debugId=290e5b17-4f2f-5bb7-a770-d82926f3a936
+//# debugId=d77abfb1-18a1-5c55-8576-5945feb01aa7