@unbrained/pm-cli 2026.8.12 → 2026.8.13

package/.claude-plugin/marketplace.json

@@ -6,14 +6,14 @@
   },
   "metadata": {
     "description": "Official marketplace for pm CLI — native git-based project management for Claude Code and AI coding agents.",
-    "version": "2026.8.12"
+    "version": "2026.8.13"
   },
   "plugins": [
     {
       "name": "pm-claude",
       "source": "./plugins/pm-claude",
       "description": "Native pm CLI integration for Claude Code — 28 MCP tools, 5 workflow skills, 14 slash commands, 4 subagents, hybrid TUI task tracking, session context injection, and coordination subagents for git-based project management without leaving Claude Code.",
-      "version": "2026.8.12",
+      "version": "2026.8.13",
       "author": {
         "name": "unbrained",
         "url": "https://github.com/unbraind/pm-cli"

package/CHANGELOG.md

@@ -1,5 +1,27 @@
 # Changelog
 
+## 2026.8.13 - 2026-08-13
+
+### Added
+
+- Assurance presets and self-derivation: a new workspace acquires a working quality contract in one command, seeded from its own record rather than from a generic template ([pm-m7bb7r](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/features/pm-m7bb7r.toon))
+- Measurement provider API: extensions contribute measurement sources, so a coverage percentage, a benchmark millisecond, an eval score, an RL episode reward, or a registry dist-tag is bounded on the same terms as an item count ([pm-uhv1m5](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/features/pm-uhv1m5.toon))
+
+### Fixed
+
+- The relationship graph's only automated reader is a nine-field census with no structural property, so the deepest enforceable statement about an 11,291-edge record is that every active item has two edges ([pm-4vz6mz](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-4vz6mz.toon))
+- The measurement ratchet has a single polarity: a filed number can only be enforced as a ceiling, so no quality floor this project wants to hold is expressible ([pm-g4k74y](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-g4k74y.toon))
+- Telemetry flush reliability: configurable cold-connect timeout without foreground blocking ([pm-pmwozm](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-pmwozm.toon))
+- The real all-package install is budgeted in one of its two instances, so the coverage gate flakes and then reports no coverage verdict at all ([pm-h9gsix](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-h9gsix.toon))
+- Absence-tolerant readers accept only ENOENT, so a tracker root that is a regular file raises an unclassified fault instead of the typed refusal the guard already owns — and that fault blocks the daily release ([pm-6xlyss](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-6xlyss.toon))
+- Mixed linked-resource remove and add in one command silently favors removal ([pm-c6urop](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-c6urop.toon))
+- Global flags before a subcommand corrupt guided-error command examples by treating the flag value as the command ([pm-lph0y6](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-lph0y6.toon))
+
+### Other
+
+- ADR: Lifecycle-sensitive graph partitions are advisory; stable all-status outcomes carry blocking assurance ([pm-dczodv](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/decisions/pm-dczodv.toon))
+- The Windows nightly leg cannot separate product defects from harness noise: 744 hardcoded POSIX path literals and 203 raw errno strings in the suite fail on Windows for reasons unrelated to pm behaviour ([pm-j668gl](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/chores/pm-j668gl.toon))
+
 ## 2026.8.12 - 2026-08-12
 
 ### Fixed

package/dist/cli/error-guidance.js

@@ -1,5 +1,6 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="0203943b-16ea-5c3a-a2d3-56a0c4d2848f")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="9ec35c35-f2dc-5f86-a166-cf0c80eab1bd")}catch(e){}}();
+import { resolveRecoveryCommandName } from "../sdk/agent/command-recovery.js";
 import { renderPmCommand } from "./argv-utils.js";
 import { discoverNearbyPmRoot } from "../sdk/tracker-root-discovery.js";
 /** Compact an error envelope to fields that change the caller's next action. */
@@ -341,12 +342,7 @@ function dedupeStrings(values) {
     return result;
 }
 function inferCommandNameFromRecovery(recovery) {
-    const args = recovery?.normalized_args;
-    if (!Array.isArray(args) || args.length === 0) {
-        return undefined;
-    }
-    const firstCommandArg = args.find((arg) => arg.trim().length > 0 && !arg.startsWith("-"));
-    return firstCommandArg?.trim();
+    return resolveRecoveryCommandName(recovery?.normalized_args);
 }
 function inferAllowedValuesFromMessage(message) {
     const match = message.match(/\bmust be one of:?\s+([A-Za-z0-9_.|,\- ]+)/i);
@@ -1201,4 +1197,4 @@ export const _testOnly = {
     resolveKnownPackageCommandHint,
 };
 //# sourceMappingURL=error-guidance.js.map
-//# debugId=0203943b-16ea-5c3a-a2d3-56a0c4d2848f
+//# debugId=9ec35c35-f2dc-5f86-a166-cf0c80eab1bd

package/dist/cli/main.js

@@ -3,7 +3,7 @@
  * @module cli/main
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="6eb8f2a6-6096-54af-a3dc-eb15fdbe5999")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="8aed7a8b-4c51-5aba-b27e-80f87f8f3d35")}catch(e){}}();
 import { Command } from "commander";
 import { activateExtensions, clearActiveExtensionHooks, createCoreCommandHookContext, resetActiveExtensionRuntimeState, createEmptyExtensionRegistrationRegistry, discoverExtensions, getActiveCommandResult, getActiveExtensionRegistrations, loadExtensions, consumeAfterCommandAffectedItems, runActiveCommandHandler, runActiveParserOverride, runActivePreflightOverride, runAfterCommandHooks, runBeforeCommandHooks, setActiveCommandResult, setActiveCommandContext, setActiveExtensionCommands, setActiveExtensionHooks, setActiveExtensionParsers, setActiveExtensionPreflight, setActiveExtensionRegistrations, setActiveExtensionRenderers, setActiveExtensionServices, pathExists, resolvePmCliVersion, resolvePmPackageRootFromModule, resolveItemTypeRegistry, resolveRuntimeFieldRegistry, EXIT_CODE, resolveTelemetryErrorCategory, PmCliError, asRecordOrNull, printError, printResult, maybeRunFirstUseTelemetryPrompt, emitTelemetryErrorEvent, startTelemetryCommand, deriveTelemetryCommandResolution, sentryCaptureCliError, sentryFinishCommandSpan, sentryFlush, sentryLogCliUsageError, sentrySetCommandContext, sentryStartCommandSpan, ensureSentryInit, getSettingsPath, resolvePmRoot, readSettings, readSettingsWithMetadata, runWithWorkspaceHarnessSignalDescriptors, createLazyModule, } from "../sdk/runtime-primitives.js";
 import { resolveSubcommandFlagContractsForCommand } from "../sdk/cli-contracts.js";
@@ -938,6 +938,7 @@ function hasGlobalExtensionContributions(contributions) {
         entriesOrEmpty(contributions.item_fields).length,
         entriesOrEmpty(contributions.relationship_kinds).length,
         entriesOrEmpty(contributions.service_overrides).length,
+        entriesOrEmpty(contributions.assurance_providers).length,
         entriesOrEmpty(contributions.renderer_overrides).length -
             entriesOrEmpty(contributions.renderer_ownership).length,
     ];
@@ -2474,4 +2475,4 @@ export const _testOnly = {
     wrapThrownErrorForSentry,
 };
 //# sourceMappingURL=main.js.map
-//# debugId=6eb8f2a6-6096-54af-a3dc-eb15fdbe5999
+//# debugId=8aed7a8b-4c51-5aba-b27e-80f87f8f3d35

package/dist/cli/register-assurance.js

@@ -1,16 +1,21 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="1adbac08-0950-55be-82bf-cc4dc7b6ad18")}catch(e){}}();
-import { ASSURANCE_ACTIONS, ASSURANCE_DECLARATION_KINDS, runAssuranceAction, } from "../sdk/governance/assurance-action.js";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="41d01430-1e95-5f09-9a2f-7e7f8fad8184")}catch(e){}}();
+import { runAssuranceAction } from "../sdk/governance/assurance-action.js";
 import { printResult } from "../sdk/runtime-primitives.js";
 import { getGlobalOptions, readOptionString } from "./registration-helpers.js";
 async function runAssuranceCliAction(action, kindOrGate, id, options, command) {
     const global = getGlobalOptions(command);
     const isRun = action === "run";
     const isVerdicts = action === "verdicts";
+    const isPresetAction = action === "presets" || action === "apply";
+    const isPromote = action === "promote";
     const result = await runAssuranceAction({
         action,
-        ...(isRun || isVerdicts ? {} : { kind: kindOrGate }),
-        id: isRun || isVerdicts ? (id ?? kindOrGate) : id,
+        ...(isRun || isVerdicts || isPresetAction || isPromote
+            ? {}
+            : { kind: kindOrGate }),
+        id: isRun || isVerdicts || isPromote ? (id ?? kindOrGate) : id,
+        preset: isPresetAction ? (id ?? kindOrGate) : undefined,
         definition: readOptionString(options, "definition"),
         trigger: readOptionString(options, "trigger"),
         tree: readOptionString(options, "tree"),
@@ -21,6 +26,9 @@ async function runAssuranceCliAction(action, kindOrGate, id, options, command) {
         idOnly: global.idOnly,
         author: readOptionString(options, "author"),
         message: readOptionString(options, "message"),
+        owner: readOptionString(options, "owner"),
+        apply: options.apply === true,
+        enforcement: readOptionString(options, "enforcement"),
     }, global);
     printResult(result, global);
     if (typeof result === "object" &&
@@ -34,19 +42,22 @@ async function runAssuranceCliAction(action, kindOrGate, id, options, command) {
 export function registerAssuranceCommand(program) {
     program
         .command("assurance")
-        .argument("<action>", `Action: ${ASSURANCE_ACTIONS.join(", ")}`)
-        .argument("[kind]", `Declaration kind: ${ASSURANCE_DECLARATION_KINDS.join(", ")}; for run this may be the gate id`)
-        .argument("[id]", "Declaration or gate id")
-        .description("Declare and evaluate SDK-owned project assurance contracts.")
-        .option("--definition <json>", "JSON declaration for put")
-        .option("--trigger <value>", "Gate lifecycle trigger")
-        .option("--tree <value>", "Commit, tree, or snapshot identity being judged")
-        .option("--gate <id>", "Filter verdict history by gate id")
-        .option("--limit <number>", "Maximum newest verdicts returned")
-        .option("--dry-run", "Evaluate a gate without appending a verdict")
-        .option("--author <value>", "Mutation author override")
-        .option("--message <value>", "Audited mutation rationale")
+        .argument("<action>", "Action; inspect `pm contracts --command assurance`")
+        .argument("[kind]", "Declaration kind or run gate id")
+        .argument("[id]", "Declaration/gate id")
+        .description("Manage SDK-owned assurance contracts.")
+        .option("--definition <json>", "Put declaration JSON")
+        .option("--trigger <value>", "Gate trigger")
+        .option("--tree <value>", "Revision identity")
+        .option("--gate <id>", "Verdict gate filter")
+        .option("--limit <number>", "Verdict limit")
+        .option("--dry-run", "Evaluate without recording")
+        .option("--author <value>", "Mutation author")
+        .option("--message <value>", "Mutation rationale")
+        .option("--owner <item-id>", "Preset/derivation owner")
+        .option("--apply", "Persist derived proposals")
+        .option("--enforcement <level>", "Promote to warn or block")
         .action(runAssuranceCliAction);
 }
 //# sourceMappingURL=register-assurance.js.map
-//# debugId=1adbac08-0950-55be-82bf-cc4dc7b6ad18
+//# debugId=41d01430-1e95-5f09-9a2f-7e7f8fad8184