@unbrained/pm-cli 2026.8.22 → 2026.8.23

package/docs/SDK_EVIDENCE_TRACEABILITY.md

@@ -111,7 +111,7 @@ pair pre-redaction item content with post-redaction history during validation.
 
 ## Operational receipts
 
-Linked tests recognize compound acquisition failures such as “could not acquire … lock” together with contention context such as “already running” or “held by another” as `infra_collision`. Generic assertion text mentioning a lock or timeout remains `assertion_failure`, preventing false infrastructure classifications.
+Linked tests recognize compound acquisition failures such as “could not acquire … lock” together with contention context such as “already running” or “held by another” as `infra_collision`. Generic assertion text mentioning a lock or timeout remains `assertion_failure`, preventing false infrastructure classifications. A command refused by clone-local provenance policy is classified separately as `trust_refusal`, so reports do not misstate a pre-execution safety decision as an assertion failure.
 
 Telemetry flush receipts distinguish progress from completion:
 

package/docs/TESTING.md

@@ -2,7 +2,7 @@
 
 This page describes safe local tests, linked tests, coverage, and release-readiness checks.
 
-Tracked implementation updates: [pm-52eh](../.agents/pm/features/pm-52eh.toon), [pm-mcxr](../.agents/pm/issues/pm-mcxr.toon), [pm-u42x](../.agents/pm/issues/pm-u42x.toon), [pm-atfm](../.agents/pm/features/pm-atfm.toon), [pm-xmp5](../.agents/pm/tasks/pm-xmp5.toon), [pm-39cqqx](../.agents/pm/tasks/pm-39cqqx.toon), [pm-5cgm2z](../.agents/pm/chores/pm-5cgm2z.toon), [pm-avv3wx](../.agents/pm/issues/pm-avv3wx.toon), [pm-rizqb6](../.agents/pm/issues/pm-rizqb6.toon), [pm-95h7pg](../.agents/pm/issues/pm-95h7pg.toon), [pm-giks4s](../.agents/pm/issues/pm-giks4s.toon), [pm-xa3t0o](../.agents/pm/issues/pm-xa3t0o.toon).
+Tracked implementation updates: [pm-52eh](../.agents/pm/features/pm-52eh.toon), [pm-mcxr](../.agents/pm/issues/pm-mcxr.toon), [pm-u42x](../.agents/pm/issues/pm-u42x.toon), [pm-atfm](../.agents/pm/features/pm-atfm.toon), [pm-xmp5](../.agents/pm/tasks/pm-xmp5.toon), [pm-39cqqx](../.agents/pm/tasks/pm-39cqqx.toon), [pm-5cgm2z](../.agents/pm/chores/pm-5cgm2z.toon), [pm-avv3wx](../.agents/pm/issues/pm-avv3wx.toon), [pm-rizqb6](../.agents/pm/issues/pm-rizqb6.toon), [pm-95h7pg](../.agents/pm/issues/pm-95h7pg.toon), [pm-giks4s](../.agents/pm/issues/pm-giks4s.toon), [pm-xa3t0o](../.agents/pm/issues/pm-xa3t0o.toon), [pm-e97jyf](../.agents/pm/issues/pm-e97jyf.toon), [pm-efkvdy](../.agents/pm/issues/pm-efkvdy.toon), and [pm-ed28wi](../.agents/pm/issues/pm-ed28wi.toon).
 
 ## Agent Quick Context
 
@@ -372,11 +372,14 @@ Diagnostic ceilings share the executable refusal gate:
 pnpm quality:recovery-closure
 ```
 
-The gate replays 22 refusal contracts and ratchets ten representative failure
-paths against `PM_DIAGNOSTIC_OUTPUT_BUDGET_CONTRACTS`. Every diagnostic must fit
-its declared JSON ceiling and preserve a mechanically actionable correction;
-the missing-probe negative control proves that the diagnostic corpus cannot
-silently shrink.
+The gate replays 117 refusal contracts: 18 closed-domain rows, 88
+grammar-derived required-argument omissions, seven closed positional-action
+families, and four tracker-preflight states. It also ratchets ten representative
+failure paths against `PM_DIAGNOSTIC_OUTPUT_BUDGET_CONTRACTS`. Every diagnostic
+must fit its declared JSON ceiling and preserve a mechanically actionable
+correction; executable retry argv is never collection-truncated. The
+missing-probe negative control and the authoritative tracker-state snapshot
+prove that the corpus cannot silently shrink or turn a refusal into a mutation.
 
 The gate derives every supported harness, model, session, and provenance
 environment key from the SDK-owned harness descriptor registry. It deletes
@@ -441,6 +444,69 @@ into constrained temporary storage.
 Capacity, permission, and resource failures while seeding a required tracker
 surface as typed, path-redacted host-environment refusals with recovery steps.
 
+## Source Workspace Modes
+
+Linked tests have a separate source-workspace contract. Store a default on one
+entry with `workspace_context_mode`, or choose a run-level mode with
+`--workspace-context`:
+
+```bash
+pm test <item-id> --add-json '{"command":"pnpm quality:static","workspace_context_mode":"isolated"}'
+pm test <item-id> --run --workspace-context snapshot --override-linked-workspace-context
+```
+
+- `source` (default) runs in the source checkout and exposes its read-only
+  source-context environment, preserving existing linked-test behavior.
+- `isolated` runs from an empty disposable directory and removes
+  `PM_SOURCE_WORKSPACE_ROOT`, `PM_SOURCE_PM_PATH`, and the source-context access
+  declaration. Use it only for commands that do not require checkout files.
+- `snapshot` copies the workspace into the linked-test sandbox, runs from that
+  copy, and binds its `.agents/pm` path to the selected temporary tracker.
+  `.git`, `.agents`, `node_modules`, coverage output, and common cache
+  directories are excluded at every directory depth; an existing top-level
+  `node_modules` is linked read-only by convention. Built output remains
+  available so linked commands such as `node dist/cli.js` keep working. Writes
+  therefore land in the disposable snapshot rather than the source checkout.
+
+Every result reports the requested/effective workspace mode, working
+directory, exposed source root, and trust decision. Recorded `test_runs` retain
+the effective workspace mode and trust reason beside the command.
+
+## Linked-Test Command Trust
+
+Linked commands are stored shell programs, so merge-unioned tracker data is an
+execution boundary. New command entries record author, creation time, source
+branch when available, and whether the item merge driver introduced the entry.
+Locally created commands keep their previous run behavior. Commands marked as
+merge-unioned or carrying a different source ref fail before process creation.
+Malformed provenance is sanitized to the additive `provenance_invalid` marker
+and receives the same fail-closed treatment; it is never normalized into a
+trusted legacy command.
+These pre-execution refusals use the `trust_refusal` failure category, separate
+from command or assertion failures.
+
+Choose one explicit recovery:
+
+```bash
+# Review and trust the item's current command fingerprints in this clone.
+pm test <item-id> --acknowledge-linked-tests
+
+# Or permit a single reviewed run. Both controls are required.
+pm config project set untrusted-linked-test-execution enabled
+pm test <item-id> --run --allow-untrusted-linked-tests
+```
+
+Acknowledgments live in the clone-local ignored runtime directory and bind to
+the full command, tracker/workspace context, environment controls, host-safety
+mode, and provenance fingerprint; editing any of those fields requires a new
+review. Enabling the project policy alone never executes
+an untrusted command, and the per-run flag alone is also refused. Inspect all
+unacknowledged entries without executing them with:
+
+```bash
+pm validate --check-command-references --verbose-diagnostics
+```
+
 Use explicit modes when needed:
 
 ```bash
@@ -493,8 +559,9 @@ pm test <item-id> --metric-below coverage=100 --metric-diff p95_latency
 Measurements are stored on the producing `test_runs` row, retained with the
 bounded run history, and exposed consistently by CLI, SDK, MCP, and contracts.
 Each recorded row also keeps a bounded `executions` list with the exact linked
-command plus its requested and effective `pm_context_mode`, so tracker-backed
-verification remains attributable after the transient process logs are gone.
+command, requested/effective `pm_context_mode`, effective workspace mode, and
+trust reason, so tracker-backed verification remains attributable after the
+transient process logs are gone.
 
 ## Linked-Test Assertions
 

package/docs/agent-task-token-baseline.json

@@ -18,8 +18,8 @@
     },
     {
       "id": "failing-command",
-      "max_estimated_tokens": 200
+      "max_estimated_tokens": 219
     }
   ],
-  "composite_max_estimated_tokens": 2178
+  "composite_max_estimated_tokens": 2197
 }

package/docs/generated/FLAG_LEXICON_BUDGETS.md

@@ -55,8 +55,8 @@ This file is generated by `listPmFlagLexicon()`. Compatibility aliases do not co
 | `docs` | evidence | 30 | 30 |
 | `deps` | graph | 32 | 32 |
 | `plan` | graph | 109 | 109 |
-| `test` | quality | 48 | 48 |
-| `test-all` | quality | 37 | 37 |
+| `test` | quality | 52 | 52 |
+| `test-all` | quality | 40 | 40 |
 | `telemetry` | workspace | 21 | 21 |
 | `stats` | context | 29 | 29 |
 | `health` | workspace | 36 | 36 |

package/marketplace.json

@@ -6,14 +6,14 @@
   },
   "metadata": {
     "description": "Official marketplace for pm CLI — native git-based project management for Claude Code and AI coding agents.",
-    "version": "2026.8.22"
+    "version": "2026.8.23"
   },
   "plugins": [
     {
       "name": "pm-claude",
       "source": "./plugins/pm-claude",
       "description": "Native pm CLI integration for Claude Code — 28 MCP tools, 5 workflow skills, 14 slash commands, 4 subagents, hybrid TUI task tracking, session context injection, and coordination subagents for git-based project management without leaving Claude Code.",
-      "version": "2026.8.22",
+      "version": "2026.8.23",
       "author": {
         "name": "unbrained",
         "url": "https://github.com/unbraind/pm-cli"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-cli",
-  "version": "2026.8.22",
+  "version": "2026.8.23",
   "description": "Git-native project management CLI for humans and agents.",
   "type": "module",
   "packageManager": "pnpm@11.10.0",
@@ -220,7 +220,7 @@
     "@types/npm-package-arg": "^6.1.4",
     "@vitest/coverage-v8": "^4.1.11",
     "esbuild": "0.28.2",
-    "eslint": "^10.8.1",
+    "eslint": "^10.9.0",
     "eslint-plugin-sonarjs": "^4.2.0",
     "eslint-plugin-unicorn": "^73.0.0",
     "fast-check": "^4.9.0",

package/packages/pm-beads/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-beads",
-  "version": "2026.8.22",
+  "version": "2026.8.23",
   "private": true,
   "type": "module",
   "description": "First-party pm package for importing Beads JSONL records.",

package/packages/pm-calendar/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-calendar",
-  "version": "2026.8.22",
+  "version": "2026.8.23",
   "private": true,
   "type": "module",
   "description": "First-party pm package for calendar and agenda views.",

package/packages/pm-command-kit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-command-kit",
-  "version": "2026.8.22",
+  "version": "2026.8.23",
   "private": true,
   "type": "module",
   "description": "First-party pm exemplar package for the commands capability: registerCommand, registerFlags, and registerParser.",

package/packages/pm-digital-twin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-digital-twin",
-  "version": "2026.8.22",
+  "version": "2026.8.23",
   "private": true,
   "type": "module",
   "description": "Beyond-PM exemplar: a temporal production-facility digital twin built entirely on public pm SDK and extension primitives.",

package/packages/pm-governance-audit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-governance-audit",
-  "version": "2026.8.22",
+  "version": "2026.8.23",
   "private": true,
   "type": "module",
   "description": "First-party pm package for governance audit and normalization workflows.",

package/packages/pm-guide-shell/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-guide-shell",
-  "version": "2026.8.22",
+  "version": "2026.8.23",
   "private": true,
   "type": "module",
   "description": "First-party pm package for guide and shell completion workflows.",

package/packages/pm-kanban/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-kanban",
-  "version": "2026.8.22",
+  "version": "2026.8.23",
   "private": true,
   "type": "module",
   "description": "First-party pm archetype package: a complete Kanban continuous-flow profile built on public SDK primitives.",

package/packages/pm-lifecycle-hooks/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-lifecycle-hooks",
-  "version": "2026.8.22",
+  "version": "2026.8.23",
   "private": true,
   "type": "module",
   "description": "First-party pm package demonstrating safe lifecycle hook registration.",

package/packages/pm-linked-test-adapters/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-linked-test-adapters",
-  "version": "2026.8.22",
+  "version": "2026.8.23",
   "private": true,
   "type": "module",
   "description": "First-party pm package for optional linked-test run management adapters and reporters.",

package/packages/pm-search-advanced/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-search-advanced",
-  "version": "2026.8.22",
+  "version": "2026.8.23",
   "private": true,
   "type": "module",
   "description": "First-party pm package for semantic, hybrid, and reindex search workflows.",

package/packages/pm-templates/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-templates",
-  "version": "2026.8.22",
+  "version": "2026.8.23",
   "private": true,
   "type": "module",
   "description": "First-party pm package for reusable create templates.",

package/packages/pm-todos/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-todos",
-  "version": "2026.8.22",
+  "version": "2026.8.23",
   "private": true,
   "type": "module",
   "description": "First-party pm package for Todo markdown import and export.",

package/packages/pm-vcs/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-vcs-sdk-exemplar",
-  "version": "2026.8.22",
+  "version": "2026.8.23",
   "private": true,
   "type": "module",
   "description": "Beyond-PM exemplar: a VCS-style changeset workflow built entirely on public pm SDK and extension primitives.",

package/plugins/pm-claude/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "pm-claude",
   "description": "Native pm CLI integration for Claude Code — 28 MCP tools, 5 workflow skills, 14 slash commands, 4 subagents (coordinator, delivery-chain, triage, verification), hybrid TUI task tracking (pm as persistent store + Claude Code task panel as live view), session context injection, and full git-based project management without leaving Claude Code.",
-  "version": "2026.8.22",
+  "version": "2026.8.23",
   "author": {
     "name": "unbrained",
     "url": "https://github.com/unbraind/pm-cli"

package/plugins/pm-codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "pm-codex",
-  "version": "2026.8.22",
+  "version": "2026.8.23",
   "description": "Native Codex integration for pm-cli with bundled MCP tools, skills, commands, and agent workflows.",
   "author": {
     "name": "unbrained",