@unbrained/pm-cli 2026.8.15 → 2026.8.17

package/marketplace.json

@@ -6,14 +6,14 @@
   },
   "metadata": {
     "description": "Official marketplace for pm CLI — native git-based project management for Claude Code and AI coding agents.",
-    "version": "2026.8.15"
+    "version": "2026.8.17"
   },
   "plugins": [
     {
       "name": "pm-claude",
       "source": "./plugins/pm-claude",
       "description": "Native pm CLI integration for Claude Code — 28 MCP tools, 5 workflow skills, 14 slash commands, 4 subagents, hybrid TUI task tracking, session context injection, and coordination subagents for git-based project management without leaving Claude Code.",
-      "version": "2026.8.15",
+      "version": "2026.8.17",
       "author": {
         "name": "unbrained",
         "url": "https://github.com/unbraind/pm-cli"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-cli",
-  "version": "2026.8.15",
+  "version": "2026.8.17",
   "description": "Git-native project management CLI for humans and agents.",
   "type": "module",
   "packageManager": "pnpm@11.10.0",
@@ -77,9 +77,9 @@
     },
     "./sdk/public-surface.json": "./sdk/public-surface.json",
     "./cli": {
-      "types": "./dist/cli/main.d.ts",
-      "import": "./dist/cli/main.js",
-      "default": "./dist/cli/main.js"
+      "types": "./dist/cli/public.d.ts",
+      "import": "./dist/cli/public.js",
+      "default": "./dist/cli/public.js"
     },
     "./package.json": "./package.json"
   },
@@ -136,6 +136,7 @@
     "quality:absence-tolerance": "node scripts/release/absence-tolerance-gate.mjs",
     "quality:docs-skills": "node scripts/release/docs-skills-gate.mjs",
     "quality:docs-links": "node scripts/release/docs-skills-gate.mjs --links-only",
+    "quality:defect-evidence": "pnpm build && node scripts/release/defect-evidence-gate.mjs",
     "quality:hosted-analysis": "node scripts/release/hosted-analysis-gate.mjs",
     "benchmark:scale:generate": "node scripts/bench/scale-workspace.mjs",
     "benchmark:scale": "node scripts/bench/run-scale-benchmarks.mjs",
@@ -145,6 +146,7 @@
     "benchmark:sdk-entrypoints:check": "pnpm build && node scripts/bench/sdk-entrypoint-costs.mjs --check",
     "benchmark:transport:update": "pnpm build && node scripts/bench/cli-transport-floor.mjs --update",
     "benchmark:transport:check": "pnpm build && node scripts/bench/cli-transport-floor.mjs --check",
+    "benchmark:defect-recurrence": "pnpm build && node scripts/bench/defect-recurrence-index.mjs --check",
     "contracts:update": "node scripts/contracts-snapshot.mjs --update",
     "contracts:check": "pnpm build && node scripts/contracts-snapshot.mjs --check && node scripts/generate-agent-capability-surfaces.mjs --check && node scripts/generate-error-code-catalog.mjs --check",
     "contracts:errors:update": "node scripts/generate-error-code-catalog.mjs",

package/packages/pm-beads/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-beads",
-  "version": "2026.8.15",
+  "version": "2026.8.17",
   "private": true,
   "type": "module",
   "description": "First-party pm package for importing Beads JSONL records.",

package/packages/pm-calendar/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-calendar",
-  "version": "2026.8.15",
+  "version": "2026.8.17",
   "private": true,
   "type": "module",
   "description": "First-party pm package for calendar and agenda views.",

package/packages/pm-command-kit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-command-kit",
-  "version": "2026.8.15",
+  "version": "2026.8.17",
   "private": true,
   "type": "module",
   "description": "First-party pm exemplar package for the commands capability: registerCommand, registerFlags, and registerParser.",

package/packages/pm-digital-twin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-digital-twin",
-  "version": "2026.8.15",
+  "version": "2026.8.17",
   "private": true,
   "type": "module",
   "description": "Beyond-PM exemplar: a temporal production-facility digital twin built entirely on public pm SDK and extension primitives.",

package/packages/pm-governance-audit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-governance-audit",
-  "version": "2026.8.15",
+  "version": "2026.8.17",
   "private": true,
   "type": "module",
   "description": "First-party pm package for governance audit and normalization workflows.",

package/packages/pm-guide-shell/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-guide-shell",
-  "version": "2026.8.15",
+  "version": "2026.8.17",
   "private": true,
   "type": "module",
   "description": "First-party pm package for guide and shell completion workflows.",

package/packages/pm-kanban/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-kanban",
-  "version": "2026.8.15",
+  "version": "2026.8.17",
   "private": true,
   "type": "module",
   "description": "First-party pm archetype package: a complete Kanban continuous-flow profile built on public SDK primitives.",

package/packages/pm-lifecycle-hooks/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-lifecycle-hooks",
-  "version": "2026.8.15",
+  "version": "2026.8.17",
   "private": true,
   "type": "module",
   "description": "First-party pm package demonstrating safe lifecycle hook registration.",

package/packages/pm-linked-test-adapters/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-linked-test-adapters",
-  "version": "2026.8.15",
+  "version": "2026.8.17",
   "private": true,
   "type": "module",
   "description": "First-party pm package for optional linked-test run management adapters and reporters.",

package/packages/pm-search-advanced/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-search-advanced",
-  "version": "2026.8.15",
+  "version": "2026.8.17",
   "private": true,
   "type": "module",
   "description": "First-party pm package for semantic, hybrid, and reindex search workflows.",

package/packages/pm-templates/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-templates",
-  "version": "2026.8.15",
+  "version": "2026.8.17",
   "private": true,
   "type": "module",
   "description": "First-party pm package for reusable create templates.",

package/packages/pm-todos/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-todos",
-  "version": "2026.8.15",
+  "version": "2026.8.17",
   "private": true,
   "type": "module",
   "description": "First-party pm package for Todo markdown import and export.",

package/packages/pm-vcs/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-vcs-sdk-exemplar",
-  "version": "2026.8.15",
+  "version": "2026.8.17",
   "private": true,
   "type": "module",
   "description": "Beyond-PM exemplar: a VCS-style changeset workflow built entirely on public pm SDK and extension primitives.",

package/plugins/pm-claude/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "pm-claude",
   "description": "Native pm CLI integration for Claude Code — 28 MCP tools, 5 workflow skills, 14 slash commands, 4 subagents (coordinator, delivery-chain, triage, verification), hybrid TUI task tracking (pm as persistent store + Claude Code task panel as live view), session context injection, and full git-based project management without leaving Claude Code.",
-  "version": "2026.8.15",
+  "version": "2026.8.17",
   "author": {
     "name": "unbrained",
     "url": "https://github.com/unbraind/pm-cli"

package/plugins/pm-claude/skills/pm-audit/SKILL.md

@@ -82,3 +82,29 @@ For each **finding item** created during the audit, also create a matching `Task
 ## Privacy
 
 Keep sensitive operational data (telemetry credentials, user PII, internal endpoints) out of public docs and tracked comments. Use `pm notes` for sensitive context instead of `pm comments`.
+
+## Progressive Disclosure and Token Discipline
+
+Load the smallest thing that answers the question. Costs are measured.
+
+| Need | Call | Cost |
+|------|------|------|
+| Pick or resume work | `pm_next`, or `pm_context` with `limit: 10` | ~2.1-2.5k tok |
+| Exact flags for one command | `pm_contracts` with `command: "<name>", flagsOnly: true` | ~1-3.4k tok |
+| The whole command surface with per-command ceilings | `pm_contracts` with `summary: true` | ~2.6k tok |
+| An unfamiliar capability family | `pm_run` with `action: "guide", topic: "<topic>", depth: "brief"` | ~0.6-1k tok |
+
+Guide topics: `quickstart`, `commands`, `workflows`, `sdk`, `extensions`,
+`skills`, `harnesses`, `release`, `tokens`, `graph`, `assurance`, `merge`.
+
+Never load `docs/COMMANDS.md` (~29k tok) or `docs/SDK.md` (~45k tok) whole.
+
+Bound every read in this order: projection (`outputInclude`), then row limit
+(`outputLimit` or `limit`), then `outputBudget`, then `outputCursor` to resume.
+Read the `omission_receipt` before treating a result as complete — a
+budget-truncated read is a claim about the part it withheld, and a truncated
+list must never be summarized as if it were the whole population.
+
+Author identity is detected automatically. Never pass `author` and never set
+`PM_AUTHOR`; the harness, model, effort, role, and topic are probed and recorded
+on every history entry.

package/plugins/pm-claude/skills/pm-developer/SKILL.md

@@ -121,3 +121,29 @@ When no existing item matches:
 ```
 
 Then call `TaskCreate` + `TaskUpdate(in_progress)` after claiming.
+
+## Progressive Disclosure and Token Discipline
+
+Load the smallest thing that answers the question. Costs are measured.
+
+| Need | Call | Cost |
+|------|------|------|
+| Pick or resume work | `pm_next`, or `pm_context` with `limit: 10` | ~2.1-2.5k tok |
+| Exact flags for one command | `pm_contracts` with `command: "<name>", flagsOnly: true` | ~1-3.4k tok |
+| The whole command surface with per-command ceilings | `pm_contracts` with `summary: true` | ~2.6k tok |
+| An unfamiliar capability family | `pm_run` with `action: "guide", topic: "<topic>", depth: "brief"` | ~0.6-1k tok |
+
+Guide topics: `quickstart`, `commands`, `workflows`, `sdk`, `extensions`,
+`skills`, `harnesses`, `release`, `tokens`, `graph`, `assurance`, `merge`.
+
+Never load `docs/COMMANDS.md` (~29k tok) or `docs/SDK.md` (~45k tok) whole.
+
+Bound every read in this order: projection (`outputInclude`), then row limit
+(`outputLimit` or `limit`), then `outputBudget`, then `outputCursor` to resume.
+Read the `omission_receipt` before treating a result as complete — a
+budget-truncated read is a claim about the part it withheld, and a truncated
+list must never be summarized as if it were the whole population.
+
+Author identity is detected automatically. Never pass `author` and never set
+`PM_AUTHOR`; the harness, model, effort, role, and topic are probed and recorded
+on every history entry.

package/plugins/pm-claude/skills/pm-planner/SKILL.md

@@ -145,3 +145,29 @@ Call the same lifecycle through the `pm_plan` MCP tool. Use `harness: "claude-co
 - Run `pm_validate` after batch changes.
 - Set exactly one step `in_progress` per plan; pass `allowMultipleActive: true` only for explicit parallel branches.
 - Use `pm_plan` `subcommand=resume` after long-running sessions so the next agent can pick up with a deterministic context.
+
+## Progressive Disclosure and Token Discipline
+
+Load the smallest thing that answers the question. Costs are measured.
+
+| Need | Call | Cost |
+|------|------|------|
+| Pick or resume work | `pm_next`, or `pm_context` with `limit: 10` | ~2.1-2.5k tok |
+| Exact flags for one command | `pm_contracts` with `command: "<name>", flagsOnly: true` | ~1-3.4k tok |
+| The whole command surface with per-command ceilings | `pm_contracts` with `summary: true` | ~2.6k tok |
+| An unfamiliar capability family | `pm_run` with `action: "guide", topic: "<topic>", depth: "brief"` | ~0.6-1k tok |
+
+Guide topics: `quickstart`, `commands`, `workflows`, `sdk`, `extensions`,
+`skills`, `harnesses`, `release`, `tokens`, `graph`, `assurance`, `merge`.
+
+Never load `docs/COMMANDS.md` (~29k tok) or `docs/SDK.md` (~45k tok) whole.
+
+Bound every read in this order: projection (`outputInclude`), then row limit
+(`outputLimit` or `limit`), then `outputBudget`, then `outputCursor` to resume.
+Read the `omission_receipt` before treating a result as complete — a
+budget-truncated read is a claim about the part it withheld, and a truncated
+list must never be summarized as if it were the whole population.
+
+Author identity is detected automatically. Never pass `author` and never set
+`PM_AUTHOR`; the harness, model, effort, role, and topic are probed and recorded
+on every history entry.

package/plugins/pm-claude/skills/pm-release/SKILL.md

@@ -80,3 +80,29 @@ gh run view <run-id>                         # Detailed run status
 - Never set `path` for real repository tracking — only for sandbox tests.
 - Run coverage gate before any `npm publish` or version tag.
 - Confirm GitHub CI green before closing the release item.
+
+## Progressive Disclosure and Token Discipline
+
+Load the smallest thing that answers the question. Costs are measured.
+
+| Need | Call | Cost |
+|------|------|------|
+| Pick or resume work | `pm_next`, or `pm_context` with `limit: 10` | ~2.1-2.5k tok |
+| Exact flags for one command | `pm_contracts` with `command: "<name>", flagsOnly: true` | ~1-3.4k tok |
+| The whole command surface with per-command ceilings | `pm_contracts` with `summary: true` | ~2.6k tok |
+| An unfamiliar capability family | `pm_run` with `action: "guide", topic: "<topic>", depth: "brief"` | ~0.6-1k tok |
+
+Guide topics: `quickstart`, `commands`, `workflows`, `sdk`, `extensions`,
+`skills`, `harnesses`, `release`, `tokens`, `graph`, `assurance`, `merge`.
+
+Never load `docs/COMMANDS.md` (~29k tok) or `docs/SDK.md` (~45k tok) whole.
+
+Bound every read in this order: projection (`outputInclude`), then row limit
+(`outputLimit` or `limit`), then `outputBudget`, then `outputCursor` to resume.
+Read the `omission_receipt` before treating a result as complete — a
+budget-truncated read is a claim about the part it withheld, and a truncated
+list must never be summarized as if it were the whole population.
+
+Author identity is detected automatically. Never pass `author` and never set
+`PM_AUTHOR`; the harness, model, effort, role, and topic are probed and recorded
+on every history entry.

package/plugins/pm-claude/skills/pm-workflow/SKILL.md

@@ -142,3 +142,29 @@ Most tools accept `cwd`, `author`, and `options`:
 ## Safety
 
 Do not pass `path` during real repository tracking. Only pass `path` for sandbox/test runs.
+
+## Progressive Disclosure and Token Discipline
+
+Load the smallest thing that answers the question. Costs are measured.
+
+| Need | Call | Cost |
+|------|------|------|
+| Pick or resume work | `pm_next`, or `pm_context` with `limit: 10` | ~2.1-2.5k tok |
+| Exact flags for one command | `pm_contracts` with `command: "<name>", flagsOnly: true` | ~1-3.4k tok |
+| The whole command surface with per-command ceilings | `pm_contracts` with `summary: true` | ~2.6k tok |
+| An unfamiliar capability family | `pm_run` with `action: "guide", topic: "<topic>", depth: "brief"` | ~0.6-1k tok |
+
+Guide topics: `quickstart`, `commands`, `workflows`, `sdk`, `extensions`,
+`skills`, `harnesses`, `release`, `tokens`, `graph`, `assurance`, `merge`.
+
+Never load `docs/COMMANDS.md` (~29k tok) or `docs/SDK.md` (~45k tok) whole.
+
+Bound every read in this order: projection (`outputInclude`), then row limit
+(`outputLimit` or `limit`), then `outputBudget`, then `outputCursor` to resume.
+Read the `omission_receipt` before treating a result as complete — a
+budget-truncated read is a claim about the part it withheld, and a truncated
+list must never be summarized as if it were the whole population.
+
+Author identity is detected automatically. Never pass `author` and never set
+`PM_AUTHOR`; the harness, model, effort, role, and topic are probed and recorded
+on every history entry.

package/plugins/pm-codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "pm-codex",
-  "version": "2026.8.15",
+  "version": "2026.8.17",
   "description": "Native Codex integration for pm-cli with bundled MCP tools, skills, commands, and agent workflows.",
   "author": {
     "name": "unbrained",

package/plugins/pm-codex/skills/pm-auditor/SKILL.md

@@ -18,3 +18,29 @@ Use for broad repository audits, release readiness checks, privacy reviews, and
 ## Evidence
 
 Record exact verification commands and summarized results through `pm_comments`, and link touched files through `pm_files`.
+
+## Progressive Disclosure and Token Discipline
+
+Load the smallest thing that answers the question. Costs are measured.
+
+| Need | Call | Cost |
+|------|------|------|
+| Pick or resume work | `pm_next`, or `pm_context` with `limit: 10` | ~2.1-2.5k tok |
+| Exact flags for one command | `pm_contracts` with `command: "<name>", flagsOnly: true` | ~1-3.4k tok |
+| The whole command surface with per-command ceilings | `pm_contracts` with `summary: true` | ~2.6k tok |
+| An unfamiliar capability family | `pm_run` with `action: "guide", topic: "<topic>", depth: "brief"` | ~0.6-1k tok |
+
+Guide topics: `quickstart`, `commands`, `workflows`, `sdk`, `extensions`,
+`skills`, `harnesses`, `release`, `tokens`, `graph`, `assurance`, `merge`.
+
+Never load `docs/COMMANDS.md` (~29k tok) or `docs/SDK.md` (~45k tok) whole.
+
+Bound every read in this order: projection (`outputInclude`), then row limit
+(`outputLimit` or `limit`), then `outputBudget`, then `outputCursor` to resume.
+Read the `omission_receipt` before treating a result as complete — a
+budget-truncated read is a claim about the part it withheld, and a truncated
+list must never be summarized as if it were the whole population.
+
+Author identity is detected automatically. Never pass `author` and never set
+`PM_AUTHOR`; the harness, model, effort, role, and topic are probed and recorded
+on every history entry.

package/plugins/pm-codex/skills/pm-native/SKILL.md

@@ -67,3 +67,29 @@ Invariants:
 - One step `in_progress` at a time by default; pass `allowMultipleActive: true` for explicit parallel branches.
 - Use `subcommand: block-step` with `stepBlockedReason` when discovery flips a step.
 - Use `subcommand: materialize` once steps are concrete enough to become Tasks.
+
+## Progressive Disclosure and Token Discipline
+
+Load the smallest thing that answers the question. Costs are measured.
+
+| Need | Call | Cost |
+|------|------|------|
+| Pick or resume work | `pm_next`, or `pm_context` with `limit: 10` | ~2.1-2.5k tok |
+| Exact flags for one command | `pm_contracts` with `command: "<name>", flagsOnly: true` | ~1-3.4k tok |
+| The whole command surface with per-command ceilings | `pm_contracts` with `summary: true` | ~2.6k tok |
+| An unfamiliar capability family | `pm_run` with `action: "guide", topic: "<topic>", depth: "brief"` | ~0.6-1k tok |
+
+Guide topics: `quickstart`, `commands`, `workflows`, `sdk`, `extensions`,
+`skills`, `harnesses`, `release`, `tokens`, `graph`, `assurance`, `merge`.
+
+Never load `docs/COMMANDS.md` (~29k tok) or `docs/SDK.md` (~45k tok) whole.
+
+Bound every read in this order: projection (`outputInclude`), then row limit
+(`outputLimit` or `limit`), then `outputBudget`, then `outputCursor` to resume.
+Read the `omission_receipt` before treating a result as complete — a
+budget-truncated read is a claim about the part it withheld, and a truncated
+list must never be summarized as if it were the whole population.
+
+Author identity is detected automatically. Never pass `author` and never set
+`PM_AUTHOR`; the harness, model, effort, role, and topic are probed and recorded
+on every history entry.

package/plugins/pm-codex/skills/pm-release/SKILL.md

@@ -17,3 +17,29 @@ Use for release prep, compatibility gates, publication checks, and post-release
 5. Verify public surfaces after publish and record results through `pm_comments`.
 
 Use `pm_run` for release-adjacent pm actions not exposed as narrow tools.
+
+## Progressive Disclosure and Token Discipline
+
+Load the smallest thing that answers the question. Costs are measured.
+
+| Need | Call | Cost |
+|------|------|------|
+| Pick or resume work | `pm_next`, or `pm_context` with `limit: 10` | ~2.1-2.5k tok |
+| Exact flags for one command | `pm_contracts` with `command: "<name>", flagsOnly: true` | ~1-3.4k tok |
+| The whole command surface with per-command ceilings | `pm_contracts` with `summary: true` | ~2.6k tok |
+| An unfamiliar capability family | `pm_run` with `action: "guide", topic: "<topic>", depth: "brief"` | ~0.6-1k tok |
+
+Guide topics: `quickstart`, `commands`, `workflows`, `sdk`, `extensions`,
+`skills`, `harnesses`, `release`, `tokens`, `graph`, `assurance`, `merge`.
+
+Never load `docs/COMMANDS.md` (~29k tok) or `docs/SDK.md` (~45k tok) whole.
+
+Bound every read in this order: projection (`outputInclude`), then row limit
+(`outputLimit` or `limit`), then `outputBudget`, then `outputCursor` to resume.
+Read the `omission_receipt` before treating a result as complete — a
+budget-truncated read is a claim about the part it withheld, and a truncated
+list must never be summarized as if it were the whole population.
+
+Author identity is detected automatically. Never pass `author` and never set
+`PM_AUTHOR`; the harness, model, effort, role, and topic are probed and recorded
+on every history entry.