@unbrained/pm-cli 2026.8.22 → 2026.8.23

package/.claude-plugin/marketplace.json

@@ -6,14 +6,14 @@
   },
   "metadata": {
     "description": "Official marketplace for pm CLI — native git-based project management for Claude Code and AI coding agents.",
-    "version": "2026.8.22"
+    "version": "2026.8.23"
   },
   "plugins": [
     {
       "name": "pm-claude",
       "source": "./plugins/pm-claude",
       "description": "Native pm CLI integration for Claude Code — 28 MCP tools, 5 workflow skills, 14 slash commands, 4 subagents, hybrid TUI task tracking, session context injection, and coordination subagents for git-based project management without leaving Claude Code.",
-      "version": "2026.8.22",
+      "version": "2026.8.23",
       "author": {
         "name": "unbrained",
         "url": "https://github.com/unbraind/pm-cli"

package/CHANGELOG.md

@@ -1,5 +1,33 @@
 # Changelog
 
+## 2026.8.23 - 2026-08-23
+
+### Added
+
+- Every instruction the product emits about its own next command is an unexecuted claim: the recovery vocabulary is generated, asserted as text, and run by nothing ([pm-h8tpeh](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/features/pm-h8tpeh.toon))
+
+### Changed
+
+- Update ESLint to compatible 10.9.0 release ([pm-940mcx](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/chores/pm-940mcx.toon))
+
+### Fixed
+
+- Allow linked tests to opt out of source-workspace injection for self-sandboxing repo-wide gates ([pm-efkvdy](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-efkvdy.toon))
+- Linked-test schema context changes non-PM repository checks, so commands that pass directly fail when recorded and run through pm test ([pm-e97jyf](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-e97jyf.toon))
+- GH-1089: expose reproducible execution through supported CLI and MCP process configuration ([pm-gh1089](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-gh1089.toon))
+- Budget recovery can recommend a smaller ceiling than the request that already truncated ([pm-xam9bt](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-xam9bt.toon))
+
+### Security
+
+- Linked-test commands are merge-unioned workspace data executed with shell:true — no provenance, allowlist, or confirmation boundary ([pm-ed28wi](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-ed28wi.toon))
+- Cross-harness provenance adapters: automatically resolve native model, version, and effort signals beyond Claude without identity flags ([pm-c0lrdm](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/features/pm-c0lrdm.toon))
+
+### Other
+
+- Cross-process reproducibility gate: prove CLI and MCP deterministic runs are byte-identical and fail on ambient time leaks ([pm-vklr99](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/tasks/pm-vklr99.toon))
+- Expose agent probe controls and versioned legacy-author vocabulary through pm config and SDK mutation APIs ([pm-yds9dt](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/chores/pm-yds9dt.toon))
+- Diagnostic output budget: errors, warnings, and recovery bundles are the output an agent reads most and the only output with no declared ceiling ([pm-cha95z](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/tasks/pm-cha95z.toon))
+
 ## 2026.8.22 - 2026-08-22
 
 ### Fixed

package/dist/cli/error-guidance.d.ts

@@ -21,6 +21,17 @@ interface GuidanceMessage {
     availableDependencies?: NonNullable<PmCliErrorContext["available_dependencies"]>;
     recovery?: PmCliErrorRecoveryPayload;
 }
+/** Compact refusal identity embedded in every structured error envelope. */
+export interface PmRefusalEnvelope {
+    /** Command, flag, or missing operand that rejected the invocation. */
+    surface: string;
+    /** Supplied scalar rejected by a closed domain, when available. */
+    rejected_value?: string;
+    /** Complete legal domain advertised by the refusal, when applicable. */
+    legal_domain?: string[];
+    /** Process exit code paired with the refusal. */
+    exit_code: number;
+}
 /** Documents the json error envelope payload exchanged by command, SDK, and package integrations. */
 export interface JsonErrorEnvelope {
     /** Schema type that determines the shape and validation rules for this value. */
@@ -53,6 +64,8 @@ export interface JsonErrorEnvelope {
     available_dependencies?: NonNullable<PmCliErrorContext["available_dependencies"]>;
     /** Value that configures or reports recovery for this contract. */
     recovery?: PmCliErrorRecoveryPayload;
+    /** Stable compact identity of the failing surface and legal recovery domain. */
+    refusal: PmRefusalEnvelope;
     /** Binding output-budget receipt for this diagnostic. */
     diagnostic_output?: PmDiagnosticOutputReceipt;
 }

package/dist/cli/error-guidance.js

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="72da6986-67d5-5adf-8e63-4f654d9ec7dd")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="4bdb7fcf-dd74-57bc-8a0e-07539095462e")}catch(e){}}();
 import { resolveRecoveryCommandName } from "../sdk/agent/command-recovery.js";
 import { projectPmDiagnosticOutput, projectPmDiagnosticText, } from "../sdk/cli-contracts/agent-output-contracts.js";
 import { renderPmCommand } from "./argv-utils.js";
@@ -304,6 +304,42 @@ function attachStructuredGuidanceDetails(payload, message) {
     }
     return payload;
 }
+function resolveRefusalCandidateFlag(message, normalizedArgs) {
+    if (message.flag)
+        return message.flag;
+    return message.recovery?.provided_fields?.find((field) => field !== "--json" &&
+        field !== "--quiet" &&
+        normalizedArgs.includes(field));
+}
+function resolveRefusalRejectedValue(message, normalizedArgs, candidateFlag) {
+    if (message.value !== undefined)
+        return message.value;
+    if (candidateFlag) {
+        return normalizedArgs[normalizedArgs.indexOf(candidateFlag) + 1];
+    }
+    const allowedValues = message.recovery?.allowed_values;
+    if (!allowedValues?.length)
+        return undefined;
+    return normalizedArgs.find((argument, index) => index > 0 &&
+        !argument.startsWith("-") &&
+        !allowedValues.includes(argument));
+}
+function buildRefusalEnvelope(message, exitCode) {
+    const normalizedArgs = message.recovery?.normalized_args ?? [];
+    const candidateFlag = resolveRefusalCandidateFlag(message, normalizedArgs);
+    const rejectedValue = resolveRefusalRejectedValue(message, normalizedArgs, candidateFlag);
+    return {
+        surface: candidateFlag ??
+            message.recovery?.missing?.[0] ??
+            inferCommandNameFromRecovery(message.recovery) ??
+            "command",
+        ...(rejectedValue !== undefined ? { rejected_value: rejectedValue } : {}),
+        ...(message.recovery?.allowed_values?.length
+            ? { legal_domain: message.recovery.allowed_values }
+            : {}),
+        exit_code: exitCode,
+    };
+}
 function guidanceToJsonEnvelope(message, exitCode) {
     return attachStructuredGuidanceDetails({
         type: message.type,
@@ -312,8 +348,20 @@ function guidanceToJsonEnvelope(message, exitCode) {
         detail: message.happened,
         required: message.required,
         exit_code: exitCode,
+        refusal: buildRefusalEnvelope(message, exitCode),
     }, message);
 }
+function projectJsonErrorGuidance(guidance, exitCode) {
+    const recovery = guidance.recovery;
+    const hasActionableRecovery = Boolean(recovery?.suggested_retry) ||
+        Boolean(recovery?.suggested_retry_args?.length) ||
+        Boolean(recovery?.allowed_values?.length) ||
+        Boolean(recovery?.candidate_commands?.length) ||
+        Boolean(guidance.nextSteps?.length);
+    return projectPmDiagnosticOutput(guidanceToJsonEnvelope(guidance, exitCode), {
+        diagnosticClass: hasActionableRecovery ? "recovery_bundle" : "error",
+    });
+}
 function guidanceToClassification(message) {
     return attachStructuredGuidanceDetails({
         type: message.type,
@@ -415,7 +463,10 @@ function applyPmCliErrorContext(guidance, rawMessage, context) {
     const fallbackTitle = guidance.code === "command_failed" && context.code
         ? buildFallbackTitleFromMessage(normalizedRawMessage)
         : undefined;
-    const recovery = normalizeRecoveryPayload(context.recovery) ?? guidance.recovery;
+    const contextRecovery = normalizeRecoveryPayload(context.recovery);
+    const recovery = contextRecovery && guidance.recovery
+        ? normalizeRecoveryPayload({ ...guidance.recovery, ...contextRecovery })
+        : (contextRecovery ?? guidance.recovery);
     return {
         ...guidance,
         code,
@@ -600,6 +651,10 @@ function buildInvalidArgumentGuidance(rawMessage, message, context) {
         ? `pm ${commandName} --help`
         : "pm <command> --help";
     const allowedValues = inferAllowedValuesFromMessage(message);
+    const enrichedRecovery = normalizeRecoveryPayload({
+        ...recovery,
+        allowed_values: recovery?.allowed_values ?? allowedValues,
+    });
     const retryExample = buildAllowedValueRetryCommand(recovery, allowedValues);
     const examples = retryExample
         ? [retryExample, helpExample]
@@ -620,6 +675,7 @@ function buildInvalidArgumentGuidance(rawMessage, message, context) {
         why: "Validation protects data consistency and deterministic behavior across commands.",
         examples,
         nextSteps,
+        recovery: enrichedRecovery,
     }), rawMessage, context);
 }
 function buildPmCliErrorGuidance(rawMessage, context) {
@@ -1172,7 +1228,7 @@ export function classifyPmCliError(rawMessage, context) {
 }
 /** Implements format pm cli error for json for the public runtime surface of this module. */
 export function formatPmCliErrorForJson(rawMessage, exitCode, context) {
-    return projectPmDiagnosticOutput(guidanceToJsonEnvelope(buildPmCliErrorGuidance(rawMessage, context), exitCode));
+    return projectJsonErrorGuidance(buildPmCliErrorGuidance(rawMessage, context), exitCode);
 }
 /** Implements format commander error for display for the public runtime surface of this module. */
 export function formatCommanderErrorForDisplay(rawMessage, commandName, allowedTypes, context) {
@@ -1185,12 +1241,12 @@ export function classifyCommanderError(rawMessage, commandName, allowedTypes, co
 }
 /** Implements format commander error for json for the public runtime surface of this module. */
 export function formatCommanderErrorForJson(rawMessage, commandName, allowedTypes, exitCode, context) {
-    return projectPmDiagnosticOutput(guidanceToJsonEnvelope(buildCommanderErrorGuidance(rawMessage, commandName, allowedTypes, context), exitCode));
+    return projectJsonErrorGuidance(buildCommanderErrorGuidance(rawMessage, commandName, allowedTypes, context), exitCode);
 }
 /** Implements format unknown error for json for the public runtime surface of this module. */
 export function formatUnknownErrorForJson(rawMessage, exitCode) {
     const guidance = buildUnknownErrorGuidance(rawMessage);
-    return projectPmDiagnosticOutput(guidanceToJsonEnvelope(guidance, exitCode));
+    return projectJsonErrorGuidance(guidance, exitCode);
 }
 function buildUnknownErrorGuidance(rawMessage) {
     const message = normalizeMessage(rawMessage);
@@ -1241,4 +1297,4 @@ export const _testOnly = {
     resolveKnownPackageCommandHint,
 };
 //# sourceMappingURL=error-guidance.js.map
-//# debugId=72da6986-67d5-5adf-8e63-4f654d9ec7dd
+//# debugId=4bdb7fcf-dd74-57bc-8a0e-07539095462e

package/dist/cli/main.js

@@ -3,9 +3,10 @@
  * @module cli/main
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="5a349bce-a08d-5ff6-870a-3ec38843b512")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="7289d222-cf1f-5fa5-ac8a-d690b6012e39")}catch(e){}}();
 import { Command } from "commander";
 import { activateExtensions, clearActiveExtensionHooks, createCoreCommandHookContext, resetActiveExtensionRuntimeState, createEmptyExtensionRegistrationRegistry, discoverExtensions, getActiveCommandResult, getActiveExtensionRegistrations, loadExtensions, consumeAfterCommandAffectedItems, runActiveCommandHandler, runActiveParserOverride, runActivePreflightOverride, runAfterCommandHooks, runBeforeCommandHooks, setActiveCommandResult, setActiveCommandContext, setActiveExtensionCommands, setActiveExtensionHooks, setActiveExtensionParsers, setActiveExtensionPreflight, setActiveExtensionRegistrations, setActiveExtensionRenderers, setActiveExtensionServices, pathExists, resolvePmCliVersion, resolvePmPackageRootFromModule, resolveItemTypeRegistry, resolveRuntimeFieldRegistry, EXIT_CODE, resolveTelemetryErrorCategory, PmCliError, asRecordOrNull, printError, printResult, maybeRunFirstUseTelemetryPrompt, emitTelemetryErrorEvent, startTelemetryCommand, deriveTelemetryCommandResolution, sentryCaptureCliError, sentryFinishCommandSpan, sentryFlush, sentryLogCliUsageError, sentrySetCommandContext, sentryStartCommandSpan, ensureSentryInit, getSettingsPath, resolvePmRoot, readSettings, readSettingsWithMetadata, runWithWorkspaceHarnessSignalDescriptors, createLazyModule, } from "../sdk/runtime-primitives.js";
+import { runWithReproducibleProcessEnvironment } from "../sdk/reproducibility/process.js";
 import { resolveSubcommandFlagContractsForCommand } from "../sdk/cli-contracts.js";
 import { createExtensionCommandSdk } from "../sdk/extension-command-context.js";
 import { PmClient } from "../sdk/runtime.js";
@@ -2387,8 +2388,7 @@ async function handleRunPmCliError(params) {
         emitTelemetryCommandError: context.emitTelemetryCommandError,
     });
 }
-/** Implements run pm cli for the public runtime surface of this module. */
-export async function runPmCli(rawArgv = process.argv.slice(2)) {
+async function runPmCliInReproducibleContext(rawArgv) {
     program = createPmCliProgram(CLI_VERSION);
     attachProgramLifecycleHooks(program);
     // The runtime-extension snapshot caches dedupe discovery work within a
@@ -2458,6 +2458,15 @@ export async function runPmCli(rawArgv = process.argv.slice(2)) {
         restorePmAuthor?.();
     }
 }
+/** Implements run pm cli for the public runtime surface of this module. */
+export async function runPmCli(rawArgv = process.argv.slice(2)) {
+    try {
+        await runWithReproducibleProcessEnvironment(process.env, () => runPmCliInReproducibleContext(rawArgv));
+    }
+    catch (error) {
+        await handleRunPmCliError({ error, invocationArgv: [...rawArgv] });
+    }
+}
 /** Public contract for test only, shared by SDK and presentation-layer consumers. */
 export const _testOnly = {
     activationCommandMatchesProbe,
@@ -2549,4 +2558,4 @@ export const _testOnly = {
     wrapThrownErrorForSentry,
 };
 //# sourceMappingURL=main.js.map
-//# debugId=5a349bce-a08d-5ff6-870a-3ec38843b512
+//# debugId=7289d222-cf1f-5fa5-ac8a-d690b6012e39

package/dist/cli/register-mutation.js

@@ -1,7 +1,7 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="07f3212f-c6d3-534e-8273-fae43a8fca18")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="49cddeba-127e-5d6c-a62d-4a63088ce8c6")}catch(e){}}();
 import { resolveBodyFileContent, EXIT_CODE, splitCommaList, PmCliError, createUnknownSubcommandError, } from "../sdk/runtime-primitives.js";
-import { CREATE_COMMANDER_OPTION_REGISTRATION_CONTRACTS, PLAN_CREATE_METADATA_PARAMETER_KEYS, UPDATE_COMMANDER_OPTION_REGISTRATION_CONTRACTS, } from "../sdk/cli-contracts.js";
+import { CREATE_COMMANDER_OPTION_REGISTRATION_CONTRACTS, MERGE_SUBCOMMAND_VALUES, PLAN_CREATE_METADATA_PARAMETER_KEYS, UPDATE_COMMANDER_OPTION_REGISTRATION_CONTRACTS, } from "../sdk/cli-contracts.js";
 import { BUILTIN_ITEM_TYPE_VALUES, PLAN_STEP_LINK_KIND_VALUES, } from "../types/index.js";
 import { MERGE_DRIVER_ARTIFACT_VALUES, runMergeDriver, runMergeInstall, runMergeReconcile, runMergeReceiptReport, } from "./commands/merge.js";
 import { runAppend } from "./commands/append.js";
@@ -823,7 +823,7 @@ async function runMergeAction(subcommand, artifact, base, ours, theirs, options,
             throw createUnknownSubcommandError({
                 command_path: "merge",
                 token: subcommand,
-                allowed: ["install", "reconcile", "report", "driver"],
+                allowed: MERGE_SUBCOMMAND_VALUES,
                 display_name: "merge",
             });
     }
@@ -898,7 +898,7 @@ async function runSchemaAction(subcommand, name, options, command) {
     assertSchemaSubcommandPresent(normalizedSubcommand, SCHEMA_SUBCOMMANDS);
     if (!SCHEMA_SUBCOMMANDS.includes(normalizedSubcommand) &&
         typeName === undefined &&
-        !looksLikeSchemaSubcommandTypo(normalizedSubcommand)) {
+        !looksLikeSchemaSubcommandTypo(subcommand)) {
         typeName = subcommand;
         normalizedSubcommand = "add-type";
     }
@@ -1724,7 +1724,7 @@ export function registerMutationCommands(program, registrationOptions = {}) {
         .action(runHistoryCompactAction);
     program
         .command("merge")
-        .argument("<subcommand>", "Merge subcommand: install, reconcile, report, driver")
+        .argument("<subcommand>", `Merge subcommand: ${MERGE_SUBCOMMAND_VALUES.join(", ")}`)
         .argument("[artifact]", `driver only: artifact class to merge (${MERGE_DRIVER_ARTIFACT_VALUES.join(", ")})`)
         .argument("[base]", "driver only: common-ancestor file path (git %O)")
         .argument("[ours]", "driver only: current-branch file path (git %A)")
@@ -1840,4 +1840,4 @@ export function registerMutationCommands(program, registrationOptions = {}) {
         .action(runDepsAction);
 }
 //# sourceMappingURL=register-mutation.js.map
-//# debugId=07f3212f-c6d3-534e-8273-fae43a8fca18
+//# debugId=49cddeba-127e-5d6c-a62d-4a63088ce8c6

package/dist/cli/register-operations.d.ts

@@ -4,7 +4,80 @@
  * Provides CLI runtime support for Register Operations.
  */
 import type { Command } from "commander";
+declare function validateBackgroundTestOptions(options: Record<string, unknown>, values: {
+    addValues: string[];
+    addJsonValues: string[];
+    removeValues: string[];
+    removeIndexValues: string[];
+}): void;
+declare function buildRunTestOptions(options: Record<string, unknown>, values: {
+    addValues: string[];
+    addJsonValues: string[];
+    removeValues: string[];
+    removeIndexValues: string[];
+}): {
+    add: string[];
+    addJson: string[];
+    remove: string[];
+    removeIndex: string[];
+    list: boolean;
+    run: boolean;
+    match: string | undefined;
+    onlyIndex: string | number | undefined;
+    onlyLast: boolean;
+    timeout: string | undefined;
+    progress: boolean;
+    envSet: string[];
+    envClear: string[];
+    sharedHostSafe: boolean;
+    pmContext: string | undefined;
+    overrideLinkedPmContext: boolean;
+    workspaceContext: string | undefined;
+    overrideLinkedWorkspaceContext: boolean;
+    allowUntrustedLinkedTests: boolean;
+    acknowledgeLinkedTests: boolean;
+    failOnContextMismatch: boolean;
+    failOnSkipped: boolean;
+    failOnEmptyTestRun: boolean;
+    requireAssertionsForPm: boolean;
+    checkContext: boolean;
+    autoPmContext: boolean;
+    author: string | undefined;
+    message: string | undefined;
+    force: boolean;
+    measure: string[];
+    metricBelow: string | undefined;
+    metricDiff: string | undefined;
+};
+/** Public contract for test-only operation adapter coverage. */
+export declare const _testOnlyRegisterOperations: {
+    buildRunTestOptions: typeof buildRunTestOptions;
+    buildRunTestAllOptions: typeof buildRunTestAllOptions;
+    validateBackgroundTestOptions: typeof validateBackgroundTestOptions;
+};
+declare function buildRunTestAllOptions(options: Record<string, unknown>): {
+    status: string | undefined;
+    limit: string | undefined;
+    offset: string | undefined;
+    timeout: string | undefined;
+    progress: boolean;
+    envSet: string[];
+    envClear: string[];
+    sharedHostSafe: boolean;
+    pmContext: string | undefined;
+    overrideLinkedPmContext: boolean;
+    workspaceContext: string | undefined;
+    overrideLinkedWorkspaceContext: boolean;
+    allowUntrustedLinkedTests: boolean;
+    failOnContextMismatch: boolean;
+    failOnSkipped: boolean;
+    failOnEmptyTestRun: boolean;
+    requireAssertionsForPm: boolean;
+    checkContext: boolean;
+    autoPmContext: boolean;
+};
 /** Enforces the claim target XOR selection contract before dispatch. */
 export declare function requireClaimTarget(id: string | undefined, next: boolean): void;
 /** Implements register operation commands for the public runtime surface of this module. */
 export declare function registerOperationCommands(program: Command): void;
+export {};

package/dist/cli/register-operations.js

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="975321a1-0375-5829-a012-f23e32e9c6bf")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="7377fa65-aaa9-5d28-b3fb-a8becaf0d484")}catch(e){}}();
 import { resolveRuntimeStatusRegistry, setActiveCommandResult, EXIT_CODE, PmCliError, createUnknownSubcommandError, resolveAuthor, resolvePmRoot, readSettings, } from "../sdk/runtime-primitives.js";
 import { resolveStartTaskInProgressStatus } from "../sdk/start-task-status.js";
 import { parseStatsAnalyticsJson } from "./stats-analytics-json.js";
@@ -66,6 +66,9 @@ function validateBackgroundTestOptions(options, values) {
     if (options.run !== true) {
         throw new PmCliError("--background requires --run", EXIT_CODE.USAGE);
     }
+    if (options.acknowledgeLinkedTests === true) {
+        throw new PmCliError("--background cannot be combined with --acknowledge-linked-tests; acknowledgement is a non-executing foreground operation", EXIT_CODE.USAGE);
+    }
     if (values.addValues.length > 0 ||
         values.addJsonValues.length > 0 ||
         values.removeValues.length > 0 ||
@@ -112,6 +115,12 @@ function buildRunTestOptions(options, values) {
         sharedHostSafe: Boolean(options.sharedHostSafe),
         pmContext: typeof options.pmContext === "string" ? options.pmContext : undefined,
         overrideLinkedPmContext: Boolean(options.overrideLinkedPmContext),
+        workspaceContext: typeof options.workspaceContext === "string"
+            ? options.workspaceContext
+            : undefined,
+        overrideLinkedWorkspaceContext: Boolean(options.overrideLinkedWorkspaceContext),
+        allowUntrustedLinkedTests: Boolean(options.allowUntrustedLinkedTests),
+        acknowledgeLinkedTests: Boolean(options.acknowledgeLinkedTests),
         failOnContextMismatch: Boolean(options.failOnContextMismatch),
         failOnSkipped: Boolean(options.failOnSkipped),
         failOnEmptyTestRun: Boolean(options.failOnEmptyTestRun),
@@ -128,6 +137,12 @@ function buildRunTestOptions(options, values) {
         metricDiff: typeof options.metricDiff === "string" ? options.metricDiff : undefined,
     };
 }
+/** Public contract for test-only operation adapter coverage. */
+export const _testOnlyRegisterOperations = {
+    buildRunTestOptions,
+    buildRunTestAllOptions,
+    validateBackgroundTestOptions,
+};
 async function runForegroundLinkedTests(id, options, globalOptions, values) {
     const result = await runTest(id, buildRunTestOptions(options, values), globalOptions);
     if (values.addValues.length > 0 ||
@@ -193,7 +208,20 @@ async function runTestAllAction(options, command) {
         }
         return;
     }
-    const result = await runTestAll({
+    const result = await runTestAll(buildRunTestAllOptions(options), globalOptions);
+    await invalidateSearchCachesForMutation(globalOptions, {
+        ids: result.results.map((entry) => entry.id),
+    });
+    printResult(result, globalOptions);
+    if (result.failed > 0 || result.fail_on_skipped_triggered === true) {
+        process.exitCode = EXIT_CODE.DEPENDENCY_FAILED;
+    }
+    if (globalOptions.profile) {
+        printError(`profile:command=test-all took_ms=${Date.now() - startedAt}`);
+    }
+}
+function buildRunTestAllOptions(options) {
+    return {
         status: readOptionString(options, "status"),
         limit: readOptionString(options, "limit"),
         offset: readOptionString(options, "offset"),
@@ -206,23 +234,16 @@ async function runTestAllAction(options, command) {
         sharedHostSafe: Boolean(options.sharedHostSafe),
         pmContext: readOptionString(options, "pmContext"),
         overrideLinkedPmContext: Boolean(options.overrideLinkedPmContext),
+        workspaceContext: readOptionString(options, "workspaceContext"),
+        overrideLinkedWorkspaceContext: Boolean(options.overrideLinkedWorkspaceContext),
+        allowUntrustedLinkedTests: Boolean(options.allowUntrustedLinkedTests),
         failOnContextMismatch: Boolean(options.failOnContextMismatch),
         failOnSkipped: Boolean(options.failOnSkipped),
         failOnEmptyTestRun: Boolean(options.failOnEmptyTestRun),
         requireAssertionsForPm: Boolean(options.requireAssertionsForPm),
         checkContext: Boolean(options.checkContext),
         autoPmContext: Boolean(options.autoPmContext),
-    }, globalOptions);
-    await invalidateSearchCachesForMutation(globalOptions, {
-        ids: result.results.map((entry) => entry.id),
-    });
-    printResult(result, globalOptions);
-    if (result.failed > 0 || result.fail_on_skipped_triggered === true) {
-        process.exitCode = EXIT_CODE.DEPENDENCY_FAILED;
-    }
-    if (globalOptions.profile) {
-        printError(`profile:command=test-all took_ms=${Date.now() - startedAt}`);
-    }
+    };
 }
 async function runTelemetryAction(namespaceOrSubcommand, subcommand, options, command) {
     const globalOptions = getGlobalOptions(command);
@@ -558,6 +579,9 @@ function addLinkedTestExecutionOptions(command) {
         .option("--shared-host-safe", "Apply additive shared-host-safe runtime defaults for linked-test runs")
         .option("--pm-context <mode>", "PM linked-test context mode: schema|tracker|auto (default: schema)")
         .option("--override-linked-pm-context", "Force run-level --pm-context to override per-linked-test pm_context_mode metadata")
+        .option("--workspace-context <mode>", "Source-workspace mode: source|isolated|snapshot (default: source)")
+        .option("--override-linked-workspace-context", "Force run-level --workspace-context over per-linked-test metadata")
+        .option("--allow-untrusted-linked-tests", "Execute untrusted linked commands when project policy also permits it")
         .option("--fail-on-context-mismatch", "Fail linked PM commands when context item counts differ")
         .option("--fail-on-skipped", "Treat skipped linked tests as dependency failures")
         .option("--fail-on-empty-test-run", "Treat successful linked-test commands that report zero executed tests as failures")
@@ -580,6 +604,7 @@ export function registerOperationCommands(program) {
         .option("--match <value>", "Run only linked tests whose command/path contains this substring")
         .option("--only-index <n>", "Run only the 1-based linked-test index from --list order")
         .option("--only-last", "Run only the most recently added linked test");
+    testCommand.option("--acknowledge-linked-tests", "Trust the item's current linked commands in this clone without executing them");
     addLinkedTestExecutionOptions(testCommand)
         .option("--measure <value>", "Record name=value[,unit=...][,threshold=...] evidence; repeatable", collect)
         .option("--metric-below <value>", "Return evidence below name=value")
@@ -873,4 +898,4 @@ function registerSchedulingShortcutCommands(program) {
     });
 }
 //# sourceMappingURL=register-operations.js.map
-//# debugId=975321a1-0375-5829-a012-f23e32e9c6bf
+//# debugId=7377fa65-aaa9-5d28-b3fb-a8becaf0d484

package/dist/cli/register-setup.js

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="d498a64c-9680-52a9-981d-4ce86949784d")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="2a7939ad-52a6-5d9c-b7cf-2bc59a6b3d32")}catch(e){}}();
 import fs from "node:fs/promises";
 import path from "node:path";
 import { EXIT_CODE, PmCliError, } from "../sdk/runtime-primitives.js";
@@ -622,7 +622,7 @@ export function registerSetupCommands(program) {
         .option("--criterion <text>", "Criteria value for definition-of-done, metadata-required-fields, or lifecycle pattern keys (repeatable for set)", collect)
         .option("--clear-criteria", "Clear criteria-list keys for config set operations")
         .option("--format <value>", "Item format for item-format key: toon")
-        .option("--policy <value>", "Policy key values: history-missing-stream-policy=auto_create|strict_error; sprint-release-format-policy=warn|strict_error; parent-reference-policy=warn|strict_error; governance-preset=minimal|default|strict|custom; governance-ownership-enforcement=none|warn|strict; governance-create-mode-default=progressive|strict; governance-close-validation-default=off|warn|strict; governance-require-close-reason=enabled|disabled; governance-parent-reference-policy=warn|strict_error; governance-metadata-validation-profile=core|strict|custom; governance-force-required-for-stale-lock=enabled|disabled; governance-duplicate-detection-mode=off|advisory|strict; test-result-tracking=enabled|disabled; telemetry-tracking=enabled|disabled")
+        .option("--policy <value>", "Policy key values: history-missing-stream-policy=auto_create|strict_error; sprint-release-format-policy=warn|strict_error; parent-reference-policy=warn|strict_error; governance-preset=minimal|default|strict|custom; governance-ownership-enforcement=none|warn|strict; governance-create-mode-default=progressive|strict; governance-close-validation-default=off|warn|strict; governance-require-close-reason=enabled|disabled; governance-parent-reference-policy=warn|strict_error; governance-metadata-validation-profile=core|strict|custom; governance-force-required-for-stale-lock=enabled|disabled; governance-duplicate-detection-mode=off|advisory|strict; test-result-tracking=enabled|disabled; untrusted-linked-test-execution=enabled|disabled; telemetry-tracking=enabled|disabled")
         .option("--value <value>", "Typed nested setting value. Mutation guards: require-attributed-author=true|false, secret-guard=off|advise|block, stale-in-progress-hours=integer>=1. Kebab-case is preferred; underscore aliases remain accepted.")
         .option("--default-depth <value>", "Context default depth: brief|standard|deep")
         .option("--activity-limit <n>", "Context default activity limit")
@@ -673,4 +673,4 @@ export function registerSetupCommands(program) {
     });
 }
 //# sourceMappingURL=register-setup.js.map
-//# debugId=d498a64c-9680-52a9-981d-4ce86949784d
+//# debugId=2a7939ad-52a6-5d9c-b7cf-2bc59a6b3d32

package/dist/cli/schema-registration-helpers.d.ts

@@ -5,7 +5,14 @@
  * registration and its focused contract tests.
  */
 import { isPureSnakeCaseAlias } from "../sdk/runtime-primitives.js";
-/** Return whether a shorthand token resembles a misspelled schema subcommand. */
+/**
+ * Return whether a token must remain on the schema-action refusal path.
+ *
+ * Bare custom-type shorthand is intentionally limited to PascalCase names.
+ * Lowercase tokens occupy the action namespace, so a misspelling such as
+ * `pm schema nonsense` cannot silently register a new type. Explicit
+ * `pm schema add-type <name>` remains available for every valid type name.
+ */
 export declare function looksLikeSchemaSubcommandTypo(value: string): boolean;
 /**
  * Parse the integer `--order` value accepted by `pm schema add-status`.

package/dist/cli/schema-registration-helpers.js

@@ -5,7 +5,7 @@
  * registration and its focused contract tests.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="af464386-4cc8-5110-b0b6-9f63224baa8e")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="2e6b30ea-5891-578a-9e6c-a612aa26361f")}catch(e){}}();
 import { EXIT_CODE, PmCliError, isPureSnakeCaseAlias, } from "../sdk/runtime-primitives.js";
 const SCHEMA_SHORTHAND_RESERVED_PREFIXES = [
     "add-",
@@ -23,13 +23,22 @@ const SCHEMA_SHORTHAND_RESERVED_TOKENS = new Set([
     "type",
     "types",
 ]);
-/** Return whether a shorthand token resembles a misspelled schema subcommand. */
+/**
+ * Return whether a token must remain on the schema-action refusal path.
+ *
+ * Bare custom-type shorthand is intentionally limited to PascalCase names.
+ * Lowercase tokens occupy the action namespace, so a misspelling such as
+ * `pm schema nonsense` cannot silently register a new type. Explicit
+ * `pm schema add-type <name>` remains available for every valid type name.
+ */
 export function looksLikeSchemaSubcommandTypo(value) {
-    const normalized = value.trim().toLowerCase();
+    const trimmed = value.trim();
+    const normalized = trimmed.toLowerCase();
     if (normalized.length === 0) {
         return false;
     }
-    return (SCHEMA_SHORTHAND_RESERVED_TOKENS.has(normalized) ||
+    return (trimmed[0] === normalized[0] ||
+        SCHEMA_SHORTHAND_RESERVED_TOKENS.has(normalized) ||
         SCHEMA_SHORTHAND_RESERVED_PREFIXES.some((prefix) => normalized.startsWith(prefix)));
 }
 /**
@@ -62,4 +71,4 @@ export function parseSchemaOrderOption(raw) {
 }
 export { isPureSnakeCaseAlias };
 //# sourceMappingURL=schema-registration-helpers.js.map
-//# debugId=af464386-4cc8-5110-b0b6-9f63224baa8e
+//# debugId=2e6b30ea-5891-578a-9e6c-a612aa26361f