@unbrained/pm-cli 2026.8.22 → 2026.8.24

package/dist/cli/main.js

@@ -3,14 +3,15 @@
  * @module cli/main
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="5a349bce-a08d-5ff6-870a-3ec38843b512")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="ffd55bde-cc30-529f-a6f9-ec43abe4efba")}catch(e){}}();
 import { Command } from "commander";
 import { activateExtensions, clearActiveExtensionHooks, createCoreCommandHookContext, resetActiveExtensionRuntimeState, createEmptyExtensionRegistrationRegistry, discoverExtensions, getActiveCommandResult, getActiveExtensionRegistrations, loadExtensions, consumeAfterCommandAffectedItems, runActiveCommandHandler, runActiveParserOverride, runActivePreflightOverride, runAfterCommandHooks, runBeforeCommandHooks, setActiveCommandResult, setActiveCommandContext, setActiveExtensionCommands, setActiveExtensionHooks, setActiveExtensionParsers, setActiveExtensionPreflight, setActiveExtensionRegistrations, setActiveExtensionRenderers, setActiveExtensionServices, pathExists, resolvePmCliVersion, resolvePmPackageRootFromModule, resolveItemTypeRegistry, resolveRuntimeFieldRegistry, EXIT_CODE, resolveTelemetryErrorCategory, PmCliError, asRecordOrNull, printError, printResult, maybeRunFirstUseTelemetryPrompt, emitTelemetryErrorEvent, startTelemetryCommand, deriveTelemetryCommandResolution, sentryCaptureCliError, sentryFinishCommandSpan, sentryFlush, sentryLogCliUsageError, sentrySetCommandContext, sentryStartCommandSpan, ensureSentryInit, getSettingsPath, resolvePmRoot, readSettings, readSettingsWithMetadata, runWithWorkspaceHarnessSignalDescriptors, createLazyModule, } from "../sdk/runtime-primitives.js";
+import { runWithReproducibleProcessEnvironment } from "../sdk/reproducibility/process.js";
 import { resolveSubcommandFlagContractsForCommand } from "../sdk/cli-contracts.js";
 import { createExtensionCommandSdk } from "../sdk/extension-command-context.js";
 import { PmClient } from "../sdk/runtime.js";
 import { coerceLooseCommandOptionsWithFlagDefinitions, collectLooseCommandOptionKeysForDefinitions, collectLoosePositionalArgs, parseLooseCommandOptions, stripLooseCommandOptionTokens, validateLooseCommandOptionsWithFlagDefinitions, } from "./extension-command-options.js";
-import { attachRichHelpText } from "./help-content.js";
+import { attachRichHelpText, setPmCommandHelpVisibilityTier, } from "./help-content.js";
 import { finishActiveTelemetryCommand, recordAfterCommandContextUsage } from "./after-command-context-usage.js";
 import { extractProvidedOptionFlags, normalizeLongOptionFlag, redactSensitiveCommandArgs, renderPmCommand, } from "./argv-utils.js";
 import { classifyCommanderError, classifyPmCliError, classifyUnknownError, formatPmCliErrorForDisplay, formatPmCliErrorForJson, formatUnknownErrorForJson, projectLeanErrorEnvelope, } from "./error-guidance.js";
@@ -1507,6 +1508,28 @@ function attachDynamicExtensionHelp(command, descriptor, flagHelp, metadataHelp)
 }
 /* v8 ignore stop */
 /* c8 ignore start */
+/** Apply descendant-derived visibility to every generated extension namespace. */
+function applyDynamicExtensionRootHelpVisibility(rootProgram, preexistingTopLevelCommands, descriptors) {
+    const tierRank = { core: 0, standard: 1, full: 2, internal: 3 };
+    const applyVisibility = (command, pathParts) => {
+        const commandPath = pathParts.join(" ");
+        const matchingDescriptors = [...descriptors.entries()]
+            .filter(([path]) => path === commandPath || path.startsWith(`${commandPath} `))
+            .map(([, descriptor]) => descriptor);
+        const tier = matchingDescriptors.length === 0
+            ? "standard"
+            : matchingDescriptors.reduce((selected, descriptor) => tierRank[descriptor.tier] < tierRank[selected] ? descriptor.tier : selected, "internal");
+        setPmCommandHelpVisibilityTier(command, tier);
+        for (const child of command.commands) {
+            applyVisibility(child, [...pathParts, child.name()]);
+        }
+    };
+    for (const command of rootProgram.commands) {
+        if (!preexistingTopLevelCommands.has(command.name())) {
+            applyVisibility(command, [command.name()]);
+        }
+    }
+}
 async function registerDynamicExtensionCommandPaths(rootProgram, invocationArgv) {
     const bootstrapGlobalOptions = parseBootstrapGlobalOptions(invocationArgv);
     const pmRoot = resolvePmRoot(process.cwd(), bootstrapGlobalOptions.path);
@@ -1551,6 +1574,7 @@ async function registerDynamicExtensionCommandPaths(rootProgram, invocationArgv)
     activeRuntimeExtensionCommandDescriptors = new Map(snapshot.commandDescriptors);
     await maybeAttachCreateUpdatePolicyHelpText(rootProgram, pmRoot, invocationArgv, snapshot.registrations, snapshot.settings);
     const commandPaths = collectSafeExtensionCommandPaths(rootProgram, snapshot.commandHandlers, snapshot.commandDescriptors, snapshot.commandAliases, (warning) => reportExtensionCommandCollision(snapshot.activationWarnings, printError, warning));
+    const preexistingTopLevelCommands = new Set(rootProgram.commands.map((command) => command.name()));
     const registerCommandPath = (commandPath) => {
         const pathParts = commandPath.split(" ").filter((part) => part.length > 0);
         const descriptor = snapshot.commandDescriptors.get(commandPath);
@@ -1608,6 +1632,7 @@ async function registerDynamicExtensionCommandPaths(rootProgram, invocationArgv)
     for (const commandPath of commandPaths) {
         registerCommandPath(commandPath);
     }
+    applyDynamicExtensionRootHelpVisibility(rootProgram, preexistingTopLevelCommands, snapshot.commandDescriptors);
 }
 /* c8 ignore stop */
 /* c8 ignore start */
@@ -2387,8 +2412,7 @@ async function handleRunPmCliError(params) {
         emitTelemetryCommandError: context.emitTelemetryCommandError,
     });
 }
-/** Implements run pm cli for the public runtime surface of this module. */
-export async function runPmCli(rawArgv = process.argv.slice(2)) {
+async function runPmCliInReproducibleContext(rawArgv) {
     program = createPmCliProgram(CLI_VERSION);
     attachProgramLifecycleHooks(program);
     // The runtime-extension snapshot caches dedupe discovery work within a
@@ -2458,9 +2482,19 @@ export async function runPmCli(rawArgv = process.argv.slice(2)) {
         restorePmAuthor?.();
     }
 }
+/** Implements run pm cli for the public runtime surface of this module. */
+export async function runPmCli(rawArgv = process.argv.slice(2)) {
+    try {
+        await runWithReproducibleProcessEnvironment(process.env, () => runPmCliInReproducibleContext(rawArgv));
+    }
+    catch (error) {
+        await handleRunPmCliError({ error, invocationArgv: [...rawArgv] });
+    }
+}
 /** Public contract for test only, shared by SDK and presentation-layer consumers. */
 export const _testOnly = {
     activationCommandMatchesProbe,
+    applyDynamicExtensionRootHelpVisibility,
     bootstrapProfileEnabled,
     buildBootstrapActivationProbe,
     buildPostActionTelemetryOutcome,
@@ -2549,4 +2583,4 @@ export const _testOnly = {
     wrapThrownErrorForSentry,
 };
 //# sourceMappingURL=main.js.map
-//# debugId=5a349bce-a08d-5ff6-870a-3ec38843b512
+//# debugId=ffd55bde-cc30-529f-a6f9-ec43abe4efba

package/dist/cli/register-annotations.js

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="616fff4b-f86e-54e5-b569-0b9894da5221")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="79bf0b3f-ad63-5d9f-9911-d5a142214ac1")}catch(e){}}();
 import { EXIT_CODE, PmCliError, } from "../sdk/runtime-primitives.js";
 import { renderPmCommand } from "../sdk/command-line.js";
 import { runComments } from "./commands/comments.js";
@@ -194,7 +194,7 @@ export function registerAnnotationCommands(program, parsePositiveInteger) {
         .argument("[text]", "Optional comment text shorthand (equivalent to --add)")
         .option("--add <text>", "Add one comment entry (plain text fallback, text=<value>, markdown pairs, or - for stdin; CSV-like key fragments are preserved as plain text unless text is explicit)")
         .option("--stdin", "Read comment text from stdin (supports multiline markdown)")
-        .option("--file <path>", "Read comment text from file (supports multiline markdown)")
+        .option("--file <path>", "Read comment text from a file or stdin (-)")
         .option("--edit <index>", "Replace the comment at 1-based <index> (replacement text from positional [text], --add, --stdin, or --file)", parsePositiveInteger("--edit"))
         .option("--delete <index>", "Delete the comment at 1-based <index>", parsePositiveInteger("--delete"))
         .option("--limit <n>", "Return only latest n comments")
@@ -214,7 +214,7 @@ export function registerAnnotationCommands(program, parsePositiveInteger) {
         .option("--note <text>", "Alias for --add")
         .option("--add-json <json>", "Append a merge-safe JSON event")
         .option("--stdin", "Read note text from stdin")
-        .option("--file <path>", "Read note text from a UTF-8 file")
+        .option("--file <path>", "Read note from file or stdin (-)")
         .option("--edit <index>", "Replace a 1-based note using the selected text input", parsePositiveInteger("--edit"))
         .option("--delete <index>", "Delete the note at 1-based <index>", parsePositiveInteger("--delete"))
         .option("--limit <n>", "Return only latest n notes")
@@ -233,7 +233,7 @@ export function registerAnnotationCommands(program, parsePositiveInteger) {
         .argument("[text]", "Optional learning text shorthand (equivalent to --add; use - for stdin)")
         .option("--add <text>", "Add one learning entry (plain text fallback, text=<value>, markdown pairs, or - for stdin; CSV-like key fragments are preserved as plain text unless text is explicit)")
         .option("--stdin", "Read learning text from stdin (supports multiline markdown)")
-        .option("--file <path>", "Read learning text from file (supports multiline markdown)")
+        .option("--file <path>", "Read learning text from a file or stdin (-)")
         .option("--edit <index>", "Replace the learning at 1-based <index> (replacement text from positional [text], --add, --stdin, or --file)", parsePositiveInteger("--edit"))
         .option("--delete <index>", "Delete the learning at 1-based <index>", parsePositiveInteger("--delete"))
         .option("--limit <n>", "Return only latest n learnings")
@@ -245,4 +245,4 @@ export function registerAnnotationCommands(program, parsePositiveInteger) {
         .action(runLearningsAction);
 }
 //# sourceMappingURL=register-annotations.js.map
-//# debugId=616fff4b-f86e-54e5-b569-0b9894da5221
+//# debugId=79bf0b3f-ad63-5d9f-9911-d5a142214ac1

package/dist/cli/register-mutation.js

@@ -1,7 +1,7 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="07f3212f-c6d3-534e-8273-fae43a8fca18")}catch(e){}}();
-import { resolveBodyFileContent, EXIT_CODE, splitCommaList, PmCliError, createUnknownSubcommandError, } from "../sdk/runtime-primitives.js";
-import { CREATE_COMMANDER_OPTION_REGISTRATION_CONTRACTS, PLAN_CREATE_METADATA_PARAMETER_KEYS, UPDATE_COMMANDER_OPTION_REGISTRATION_CONTRACTS, } from "../sdk/cli-contracts.js";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="28a59fb9-80bc-5e2a-b926-1bb227c103c6")}catch(e){}}();
+import { resolveBodyFileContent, resolveCliBulkIdsInput, EXIT_CODE, splitCommaList, PmCliError, createUnknownSubcommandError, } from "../sdk/runtime-primitives.js";
+import { CREATE_COMMANDER_OPTION_REGISTRATION_CONTRACTS, MERGE_SUBCOMMAND_VALUES, PLAN_CREATE_METADATA_PARAMETER_KEYS, UPDATE_COMMANDER_OPTION_REGISTRATION_CONTRACTS, } from "../sdk/cli-contracts.js";
 import { BUILTIN_ITEM_TYPE_VALUES, PLAN_STEP_LINK_KIND_VALUES, } from "../types/index.js";
 import { MERGE_DRIVER_ARTIFACT_VALUES, runMergeDriver, runMergeInstall, runMergeReconcile, runMergeReceiptReport, } from "./commands/merge.js";
 import { runAppend } from "./commands/append.js";
@@ -22,7 +22,7 @@ import { runRestore } from "./commands/restore.js";
 import * as schemaModule from "./commands/schema.js";
 import { runUpdate } from "./commands/update.js";
 import { runUpdateMany } from "./commands/update-many.js";
-import { createStdinTokenResolver } from "../sdk/runtime-primitives.js";
+import { createStdinTokenResolver, preserveMutationStdinTokenFields, preserveMutationStdinTokenLiterals, } from "../sdk/runtime-primitives.js";
 import { resolveDescriptionStdin } from "./description-stdin.js";
 import { itemDocumentToMutationOptions } from "../sdk/structured-mutations.js";
 import { registerStructuredMutationCommands } from "./register-structured-mutation.js";
@@ -484,6 +484,7 @@ function assertCreatePositionalTypeHasTitle(positionalType, positionalTitle, opt
 }
 const STRUCTURED_STDIN_CONFLICT_KEYS = [
     "body",
+    "bodyFile",
     "description",
     "dep",
     "depRemove",
@@ -497,21 +498,45 @@ const STRUCTURED_STDIN_CONFLICT_KEYS = [
     "event",
     "typeOption",
     "field",
+    "ids",
 ];
-function assertExclusiveStructuredStdin(options) {
-    const conflictingFlags = STRUCTURED_STDIN_CONFLICT_KEYS.filter((key) => {
+function assertSingleMutationStdinConsumer(options) {
+    const stdinFlags = STRUCTURED_STDIN_CONFLICT_KEYS.flatMap((key) => {
         const value = options[key];
-        return value === "-" || (Array.isArray(value) && value.includes("-"));
-    }).map((key) => `--${key.replace(/[A-Z]/g, (letter) => `-${letter.toLowerCase()}`)}`);
-    if (conflictingFlags.length > 0) {
-        throw new PmCliError(`--stdin-json cannot be combined with other stdin consumers: ${conflictingFlags.join(", ")}`, EXIT_CODE.USAGE);
+        const count = typeof value === "string" && value.trim() === "-"
+            ? 1
+            : Array.isArray(value)
+                ? value.filter((entry) => typeof entry === "string" && entry.trim() === "-").length
+                : 0;
+        const flag = `--${key.replace(/[A-Z]/g, (letter) => `-${letter.toLowerCase()}`)}`;
+        return Array.from({ length: count }, () => flag);
+    });
+    if (options.stdinJson === true) {
+        stdinFlags.unshift("--stdin-json");
+    }
+    if (stdinFlags.length > 1) {
+        throw new PmCliError(`Only one option may consume stdin per command invocation. Found: ${stdinFlags.join(", ")}.`, EXIT_CODE.USAGE);
     }
 }
+function preserveResolvedMutationStdinFields(options, bodyFileResolved, descriptionStdinResolved) {
+    const fields = [];
+    if (bodyFileResolved)
+        fields.push("body");
+    if (descriptionStdinResolved)
+        fields.push("description");
+    preserveMutationStdinTokenFields(options, fields);
+}
+function isDescriptionStdinConsumer(options, stdinJsonConsumed) {
+    return (!stdinJsonConsumed &&
+        typeof options.description === "string" &&
+        options.description.trim() === "-");
+}
 async function runCreateAction(typeOrTitle, secondTitle, options, command) {
     const globalOptions = getGlobalOptions(command);
     const startedAt = Date.now();
-    if (options.stdinJson === true) {
-        assertExclusiveStructuredStdin(options);
+    assertSingleMutationStdinConsumer(options);
+    const stdinJsonConsumed = options.stdinJson === true;
+    if (stdinJsonConsumed) {
         const input = await createStdinTokenResolver().resolveValue("-", "--stdin-json");
         options = itemDocumentToMutationOptions(input ?? "", "create", options);
     }
@@ -526,12 +551,19 @@ async function runCreateAction(typeOrTitle, secondTitle, options, command) {
         positionals.positionalTitle.length > 0 &&
         options.title === undefined)
         options.title = positionals.positionalTitle;
-    await resolveDescriptionStdin(options);
-    if (typeof options.bodyFile === "string") {
-        options.body = await resolveBodyFileContent(options.bodyFile, options.body !== undefined ? String(options.body) : undefined);
+    const descriptionStdinResolved = isDescriptionStdinConsumer(options, stdinJsonConsumed);
+    if (!stdinJsonConsumed) {
+        await resolveDescriptionStdin(options);
+    }
+    const bodyFileResolved = typeof options.bodyFile === "string";
+    if (bodyFileResolved) {
+        options.body = await resolveBodyFileContent(String(options.bodyFile), options.body !== undefined ? String(options.body) : undefined);
         delete options.bodyFile;
     }
     const normalized = normalizeCreateOptions(options, { requireType: false });
+    preserveResolvedMutationStdinFields(normalized, bodyFileResolved, descriptionStdinResolved);
+    if (stdinJsonConsumed)
+        preserveMutationStdinTokenLiterals(normalized);
     const result = await runCreate(normalized, globalOptions);
     await invalidateSearchCachesForMutation(globalOptions, result);
     printResult(result, globalOptions);
@@ -564,6 +596,8 @@ function buildCloseManyListOptions(options) {
 async function runCloseManyAction(options, command) {
     const globalOptions = getGlobalOptions(command);
     const startedAt = Date.now();
+    assertSingleMutationStdinConsumer(options);
+    options.ids = await resolveCliBulkIdsInput(readOptionString(options, "ids"));
     const result = await runCloseMany({
         status: readOptionString(options, "filterStatus"),
         list: buildCloseManyListOptions(options),
@@ -591,6 +625,8 @@ async function runCloseManyAction(options, command) {
 async function runUpdateManyAction(options, command) {
     const globalOptions = getGlobalOptions(command);
     const startedAt = Date.now();
+    assertSingleMutationStdinConsumer(options);
+    options.ids = await resolveCliBulkIdsInput(readOptionString(options, "ids"));
     const result = await runUpdateMany({
         status: readOptionString(options, "filterStatus"),
         list: buildUpdateManyListOptions(options),
@@ -823,7 +859,7 @@ async function runMergeAction(subcommand, artifact, base, ours, theirs, options,
             throw createUnknownSubcommandError({
                 command_path: "merge",
                 token: subcommand,
-                allowed: ["install", "reconcile", "report", "driver"],
+                allowed: MERGE_SUBCOMMAND_VALUES,
                 display_name: "merge",
             });
     }
@@ -834,7 +870,8 @@ async function runMergeAction(subcommand, artifact, base, ours, theirs, options,
 async function runHistoryCompactAction(id, options, command) {
     const globalOptions = getGlobalOptions(command);
     const startedAt = Date.now();
-    const ids = typeof options.ids === "string" ? splitCommaList(options.ids) : undefined;
+    const idsValue = await resolveCliBulkIdsInput(readOptionString(options, "ids"));
+    const ids = idsValue === undefined ? undefined : splitCommaList(idsValue);
     const allOver = parseNonNegativeIntFlag(options.allOver, "--all-over");
     const minEntries = parseNonNegativeIntFlag(options.minEntries, "--min-entries");
     if (options.closed === true && options.allStreams === true) {
@@ -898,7 +935,7 @@ async function runSchemaAction(subcommand, name, options, command) {
     assertSchemaSubcommandPresent(normalizedSubcommand, SCHEMA_SUBCOMMANDS);
     if (!SCHEMA_SUBCOMMANDS.includes(normalizedSubcommand) &&
         typeName === undefined &&
-        !looksLikeSchemaSubcommandTypo(normalizedSubcommand)) {
+        !looksLikeSchemaSubcommandTypo(subcommand)) {
         typeName = subcommand;
         normalizedSubcommand = "add-type";
     }
@@ -987,19 +1024,28 @@ async function runFocusAction(id, options, command) {
 async function runUpdateAction(id, options, command) {
     const globalOptions = getGlobalOptions(command);
     const startedAt = Date.now();
-    if (options.stdinJson === true) {
-        assertExclusiveStructuredStdin(options);
+    assertSingleMutationStdinConsumer(options);
+    const stdinJsonConsumed = options.stdinJson === true;
+    if (stdinJsonConsumed) {
         const input = await createStdinTokenResolver().resolveValue("-", "--stdin-json");
         options = itemDocumentToMutationOptions(input ?? "", "update", options);
     }
-    await resolveDescriptionStdin(options);
+    const descriptionStdinResolved = isDescriptionStdinConsumer(options, stdinJsonConsumed);
+    if (!stdinJsonConsumed) {
+        await resolveDescriptionStdin(options);
+    }
     // GH-214: resolve --body-file into the existing body field before
     // normalization so the rest of update is unchanged. CLI-only input alias.
-    if (typeof options.bodyFile === "string") {
-        options.body = await resolveBodyFileContent(options.bodyFile, options.body !== undefined ? String(options.body) : undefined);
+    const bodyFileResolved = typeof options.bodyFile === "string";
+    if (bodyFileResolved) {
+        options.body = await resolveBodyFileContent(String(options.bodyFile), options.body !== undefined ? String(options.body) : undefined);
         delete options.bodyFile;
     }
-    const result = await runUpdate(id, normalizeUpdateOptions(options), globalOptions);
+    const normalized = normalizeUpdateOptions(options);
+    preserveResolvedMutationStdinFields(normalized, bodyFileResolved, descriptionStdinResolved);
+    if (stdinJsonConsumed)
+        preserveMutationStdinTokenLiterals(normalized);
+    const result = await runUpdate(id, normalized, globalOptions);
     await invalidateSearchCachesForMutation(globalOptions, result);
     printResult(await applyActiveCommandResultService("update", [id], options, globalOptions, result), globalOptions);
     if (globalOptions.profile) {
@@ -1239,7 +1285,7 @@ export function registerMutationCommands(program, registrationOptions = {}) {
     registerCommanderOptionContracts(createCommand, CREATE_COMMANDER_OPTION_REGISTRATION_CONTRACTS);
     createCommand
         .option("--stdin-json", "Read a full item JSON document from stdin; explicit flags override document values")
-        .option("--body-file <path>", "Load the item markdown body from a file (mutually exclusive with --body)")
+        .option("--body-file <path>", "Load body from a file or stdin (-); conflicts with --body")
         .option("--clear-deps", "Clear dependency entries")
         .option("--clear-comments", "Clear comments")
         .option("--clear-notes", "Clear notes")
@@ -1277,7 +1323,7 @@ export function registerMutationCommands(program, registrationOptions = {}) {
     registerCommanderOptionContracts(updateCommand, UPDATE_COMMANDER_OPTION_REGISTRATION_CONTRACTS);
     updateCommand
         .option("--stdin-json", "Read a full item JSON document from stdin; explicit flags override document values")
-        .option("--body-file <path>", "Load the item markdown body from a file (mutually exclusive with --body)")
+        .option("--body-file <path>", "Load body from a file or stdin (-); conflicts with --body")
         .option("--replace-deps", "Atomically replace dependency entries with the provided --dep values")
         .option("--replace-tests", "Atomically replace linked test entries with the provided --test values")
         .option("--replace-files", "Atomically replace linked file entries with the provided --file values")
@@ -1319,7 +1365,7 @@ export function registerMutationCommands(program, registrationOptions = {}) {
         .option("--filter-metadata-missing", "Select only items missing any tracked metadata (AC, estimate, or resolution)");
     registerBulkContentAndGovernanceFilters(updateManyCommand, "applying updates");
     updateManyCommand
-        .option("--ids <value>", "Restrict to an explicit comma-separated ID allowlist (intersected with other filters)")
+        .option("--ids <value>", "Explicit ID allowlist: comma/newline text, - stdin, or @path file")
         .option("--limit <n>", "Limit matched item count before apply/preview")
         .option("--offset <n>", "Skip first n matched rows before apply/preview")
         .option("--dry-run", "Preview per-item diffs and checkpoint intent without mutating")
@@ -1477,7 +1523,7 @@ export function registerMutationCommands(program, registrationOptions = {}) {
         .option("--filter-release <value>", "Filter by release before closing");
     registerBulkContentAndGovernanceFilters(closeManyCommand, "closing");
     closeManyCommand
-        .option("--ids <value>", "Restrict to an explicit comma-separated ID allowlist (intersected with other filters)")
+        .option("--ids <value>", "Explicit ID allowlist: comma/newline text, - stdin, or @path file")
         .option("--limit <n>", "Limit matched item count before apply/preview")
         .option("--offset <n>", "Skip first n matched rows before apply/preview")
         .option("--reason <value>", "Shared close reason applied to matched items (required when governance.require_close_reason is enabled)")
@@ -1711,7 +1757,7 @@ export function registerMutationCommands(program, registrationOptions = {}) {
         .command("history-compact")
         .argument("[id]", "Item id (omit when using a bulk selector)")
         .option("--before <value>", "Compact entries strictly before this version number or ISO timestamp (single-id mode only)")
-        .option("--ids <value>", "Bulk: compact an explicit comma-separated list of item ids")
+        .option("--ids <value>", "Bulk IDs: comma/newline text, - stdin, or @path file")
         .option("--all-over <n>", "Bulk: compact every stream with more than N entries")
         .option("--closed", "Bulk: compact only closed (terminal) items' streams")
         .option("--all-streams", "Bulk: compact every history stream regardless of lifecycle state")
@@ -1724,7 +1770,7 @@ export function registerMutationCommands(program, registrationOptions = {}) {
         .action(runHistoryCompactAction);
     program
         .command("merge")
-        .argument("<subcommand>", "Merge subcommand: install, reconcile, report, driver")
+        .argument("<subcommand>", `Merge subcommand: ${MERGE_SUBCOMMAND_VALUES.join(", ")}`)
         .argument("[artifact]", `driver only: artifact class to merge (${MERGE_DRIVER_ARTIFACT_VALUES.join(", ")})`)
         .argument("[base]", "driver only: common-ancestor file path (git %O)")
         .argument("[ours]", "driver only: current-branch file path (git %A)")
@@ -1840,4 +1886,4 @@ export function registerMutationCommands(program, registrationOptions = {}) {
         .action(runDepsAction);
 }
 //# sourceMappingURL=register-mutation.js.map
-//# debugId=07f3212f-c6d3-534e-8273-fae43a8fca18
+//# debugId=28a59fb9-80bc-5e2a-b926-1bb227c103c6

package/dist/cli/register-operations.d.ts

@@ -4,7 +4,80 @@
  * Provides CLI runtime support for Register Operations.
  */
 import type { Command } from "commander";
+declare function validateBackgroundTestOptions(options: Record<string, unknown>, values: {
+    addValues: string[];
+    addJsonValues: string[];
+    removeValues: string[];
+    removeIndexValues: string[];
+}): void;
+declare function buildRunTestOptions(options: Record<string, unknown>, values: {
+    addValues: string[];
+    addJsonValues: string[];
+    removeValues: string[];
+    removeIndexValues: string[];
+}): {
+    add: string[];
+    addJson: string[];
+    remove: string[];
+    removeIndex: string[];
+    list: boolean;
+    run: boolean;
+    match: string | undefined;
+    onlyIndex: string | number | undefined;
+    onlyLast: boolean;
+    timeout: string | undefined;
+    progress: boolean;
+    envSet: string[];
+    envClear: string[];
+    sharedHostSafe: boolean;
+    pmContext: string | undefined;
+    overrideLinkedPmContext: boolean;
+    workspaceContext: string | undefined;
+    overrideLinkedWorkspaceContext: boolean;
+    allowUntrustedLinkedTests: boolean;
+    acknowledgeLinkedTests: boolean;
+    failOnContextMismatch: boolean;
+    failOnSkipped: boolean;
+    failOnEmptyTestRun: boolean;
+    requireAssertionsForPm: boolean;
+    checkContext: boolean;
+    autoPmContext: boolean;
+    author: string | undefined;
+    message: string | undefined;
+    force: boolean;
+    measure: string[];
+    metricBelow: string | undefined;
+    metricDiff: string | undefined;
+};
+/** Public contract for test-only operation adapter coverage. */
+export declare const _testOnlyRegisterOperations: {
+    buildRunTestOptions: typeof buildRunTestOptions;
+    buildRunTestAllOptions: typeof buildRunTestAllOptions;
+    validateBackgroundTestOptions: typeof validateBackgroundTestOptions;
+};
+declare function buildRunTestAllOptions(options: Record<string, unknown>): {
+    status: string | undefined;
+    limit: string | undefined;
+    offset: string | undefined;
+    timeout: string | undefined;
+    progress: boolean;
+    envSet: string[];
+    envClear: string[];
+    sharedHostSafe: boolean;
+    pmContext: string | undefined;
+    overrideLinkedPmContext: boolean;
+    workspaceContext: string | undefined;
+    overrideLinkedWorkspaceContext: boolean;
+    allowUntrustedLinkedTests: boolean;
+    failOnContextMismatch: boolean;
+    failOnSkipped: boolean;
+    failOnEmptyTestRun: boolean;
+    requireAssertionsForPm: boolean;
+    checkContext: boolean;
+    autoPmContext: boolean;
+};
 /** Enforces the claim target XOR selection contract before dispatch. */
 export declare function requireClaimTarget(id: string | undefined, next: boolean): void;
 /** Implements register operation commands for the public runtime surface of this module. */
 export declare function registerOperationCommands(program: Command): void;
+export {};

package/dist/cli/register-operations.js

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="975321a1-0375-5829-a012-f23e32e9c6bf")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="7377fa65-aaa9-5d28-b3fb-a8becaf0d484")}catch(e){}}();
 import { resolveRuntimeStatusRegistry, setActiveCommandResult, EXIT_CODE, PmCliError, createUnknownSubcommandError, resolveAuthor, resolvePmRoot, readSettings, } from "../sdk/runtime-primitives.js";
 import { resolveStartTaskInProgressStatus } from "../sdk/start-task-status.js";
 import { parseStatsAnalyticsJson } from "./stats-analytics-json.js";
@@ -66,6 +66,9 @@ function validateBackgroundTestOptions(options, values) {
     if (options.run !== true) {
         throw new PmCliError("--background requires --run", EXIT_CODE.USAGE);
     }
+    if (options.acknowledgeLinkedTests === true) {
+        throw new PmCliError("--background cannot be combined with --acknowledge-linked-tests; acknowledgement is a non-executing foreground operation", EXIT_CODE.USAGE);
+    }
     if (values.addValues.length > 0 ||
         values.addJsonValues.length > 0 ||
         values.removeValues.length > 0 ||
@@ -112,6 +115,12 @@ function buildRunTestOptions(options, values) {
         sharedHostSafe: Boolean(options.sharedHostSafe),
         pmContext: typeof options.pmContext === "string" ? options.pmContext : undefined,
         overrideLinkedPmContext: Boolean(options.overrideLinkedPmContext),
+        workspaceContext: typeof options.workspaceContext === "string"
+            ? options.workspaceContext
+            : undefined,
+        overrideLinkedWorkspaceContext: Boolean(options.overrideLinkedWorkspaceContext),
+        allowUntrustedLinkedTests: Boolean(options.allowUntrustedLinkedTests),
+        acknowledgeLinkedTests: Boolean(options.acknowledgeLinkedTests),
         failOnContextMismatch: Boolean(options.failOnContextMismatch),
         failOnSkipped: Boolean(options.failOnSkipped),
         failOnEmptyTestRun: Boolean(options.failOnEmptyTestRun),
@@ -128,6 +137,12 @@ function buildRunTestOptions(options, values) {
         metricDiff: typeof options.metricDiff === "string" ? options.metricDiff : undefined,
     };
 }
+/** Public contract for test-only operation adapter coverage. */
+export const _testOnlyRegisterOperations = {
+    buildRunTestOptions,
+    buildRunTestAllOptions,
+    validateBackgroundTestOptions,
+};
 async function runForegroundLinkedTests(id, options, globalOptions, values) {
     const result = await runTest(id, buildRunTestOptions(options, values), globalOptions);
     if (values.addValues.length > 0 ||
@@ -193,7 +208,20 @@ async function runTestAllAction(options, command) {
         }
         return;
     }
-    const result = await runTestAll({
+    const result = await runTestAll(buildRunTestAllOptions(options), globalOptions);
+    await invalidateSearchCachesForMutation(globalOptions, {
+        ids: result.results.map((entry) => entry.id),
+    });
+    printResult(result, globalOptions);
+    if (result.failed > 0 || result.fail_on_skipped_triggered === true) {
+        process.exitCode = EXIT_CODE.DEPENDENCY_FAILED;
+    }
+    if (globalOptions.profile) {
+        printError(`profile:command=test-all took_ms=${Date.now() - startedAt}`);
+    }
+}
+function buildRunTestAllOptions(options) {
+    return {
         status: readOptionString(options, "status"),
         limit: readOptionString(options, "limit"),
         offset: readOptionString(options, "offset"),
@@ -206,23 +234,16 @@ async function runTestAllAction(options, command) {
         sharedHostSafe: Boolean(options.sharedHostSafe),
         pmContext: readOptionString(options, "pmContext"),
         overrideLinkedPmContext: Boolean(options.overrideLinkedPmContext),
+        workspaceContext: readOptionString(options, "workspaceContext"),
+        overrideLinkedWorkspaceContext: Boolean(options.overrideLinkedWorkspaceContext),
+        allowUntrustedLinkedTests: Boolean(options.allowUntrustedLinkedTests),
         failOnContextMismatch: Boolean(options.failOnContextMismatch),
         failOnSkipped: Boolean(options.failOnSkipped),
         failOnEmptyTestRun: Boolean(options.failOnEmptyTestRun),
         requireAssertionsForPm: Boolean(options.requireAssertionsForPm),
         checkContext: Boolean(options.checkContext),
         autoPmContext: Boolean(options.autoPmContext),
-    }, globalOptions);
-    await invalidateSearchCachesForMutation(globalOptions, {
-        ids: result.results.map((entry) => entry.id),
-    });
-    printResult(result, globalOptions);
-    if (result.failed > 0 || result.fail_on_skipped_triggered === true) {
-        process.exitCode = EXIT_CODE.DEPENDENCY_FAILED;
-    }
-    if (globalOptions.profile) {
-        printError(`profile:command=test-all took_ms=${Date.now() - startedAt}`);
-    }
+    };
 }
 async function runTelemetryAction(namespaceOrSubcommand, subcommand, options, command) {
     const globalOptions = getGlobalOptions(command);
@@ -558,6 +579,9 @@ function addLinkedTestExecutionOptions(command) {
         .option("--shared-host-safe", "Apply additive shared-host-safe runtime defaults for linked-test runs")
         .option("--pm-context <mode>", "PM linked-test context mode: schema|tracker|auto (default: schema)")
         .option("--override-linked-pm-context", "Force run-level --pm-context to override per-linked-test pm_context_mode metadata")
+        .option("--workspace-context <mode>", "Source-workspace mode: source|isolated|snapshot (default: source)")
+        .option("--override-linked-workspace-context", "Force run-level --workspace-context over per-linked-test metadata")
+        .option("--allow-untrusted-linked-tests", "Execute untrusted linked commands when project policy also permits it")
         .option("--fail-on-context-mismatch", "Fail linked PM commands when context item counts differ")
         .option("--fail-on-skipped", "Treat skipped linked tests as dependency failures")
         .option("--fail-on-empty-test-run", "Treat successful linked-test commands that report zero executed tests as failures")
@@ -580,6 +604,7 @@ export function registerOperationCommands(program) {
         .option("--match <value>", "Run only linked tests whose command/path contains this substring")
         .option("--only-index <n>", "Run only the 1-based linked-test index from --list order")
         .option("--only-last", "Run only the most recently added linked test");
+    testCommand.option("--acknowledge-linked-tests", "Trust the item's current linked commands in this clone without executing them");
     addLinkedTestExecutionOptions(testCommand)
         .option("--measure <value>", "Record name=value[,unit=...][,threshold=...] evidence; repeatable", collect)
         .option("--metric-below <value>", "Return evidence below name=value")
@@ -873,4 +898,4 @@ function registerSchedulingShortcutCommands(program) {
     });
 }
 //# sourceMappingURL=register-operations.js.map
-//# debugId=975321a1-0375-5829-a012-f23e32e9c6bf
+//# debugId=7377fa65-aaa9-5d28-b3fb-a8becaf0d484

package/dist/cli/register-setup.js

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="d498a64c-9680-52a9-981d-4ce86949784d")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="2a7939ad-52a6-5d9c-b7cf-2bc59a6b3d32")}catch(e){}}();
 import fs from "node:fs/promises";
 import path from "node:path";
 import { EXIT_CODE, PmCliError, } from "../sdk/runtime-primitives.js";
@@ -622,7 +622,7 @@ export function registerSetupCommands(program) {
         .option("--criterion <text>", "Criteria value for definition-of-done, metadata-required-fields, or lifecycle pattern keys (repeatable for set)", collect)
         .option("--clear-criteria", "Clear criteria-list keys for config set operations")
         .option("--format <value>", "Item format for item-format key: toon")
-        .option("--policy <value>", "Policy key values: history-missing-stream-policy=auto_create|strict_error; sprint-release-format-policy=warn|strict_error; parent-reference-policy=warn|strict_error; governance-preset=minimal|default|strict|custom; governance-ownership-enforcement=none|warn|strict; governance-create-mode-default=progressive|strict; governance-close-validation-default=off|warn|strict; governance-require-close-reason=enabled|disabled; governance-parent-reference-policy=warn|strict_error; governance-metadata-validation-profile=core|strict|custom; governance-force-required-for-stale-lock=enabled|disabled; governance-duplicate-detection-mode=off|advisory|strict; test-result-tracking=enabled|disabled; telemetry-tracking=enabled|disabled")
+        .option("--policy <value>", "Policy key values: history-missing-stream-policy=auto_create|strict_error; sprint-release-format-policy=warn|strict_error; parent-reference-policy=warn|strict_error; governance-preset=minimal|default|strict|custom; governance-ownership-enforcement=none|warn|strict; governance-create-mode-default=progressive|strict; governance-close-validation-default=off|warn|strict; governance-require-close-reason=enabled|disabled; governance-parent-reference-policy=warn|strict_error; governance-metadata-validation-profile=core|strict|custom; governance-force-required-for-stale-lock=enabled|disabled; governance-duplicate-detection-mode=off|advisory|strict; test-result-tracking=enabled|disabled; untrusted-linked-test-execution=enabled|disabled; telemetry-tracking=enabled|disabled")
         .option("--value <value>", "Typed nested setting value. Mutation guards: require-attributed-author=true|false, secret-guard=off|advise|block, stale-in-progress-hours=integer>=1. Kebab-case is preferred; underscore aliases remain accepted.")
         .option("--default-depth <value>", "Context default depth: brief|standard|deep")
         .option("--activity-limit <n>", "Context default activity limit")
@@ -673,4 +673,4 @@ export function registerSetupCommands(program) {
     });
 }
 //# sourceMappingURL=register-setup.js.map
-//# debugId=d498a64c-9680-52a9-981d-4ce86949784d
+//# debugId=2a7939ad-52a6-5d9c-b7cf-2bc59a6b3d32

package/dist/cli/schema-registration-helpers.d.ts

@@ -5,7 +5,14 @@
  * registration and its focused contract tests.
  */
 import { isPureSnakeCaseAlias } from "../sdk/runtime-primitives.js";
-/** Return whether a shorthand token resembles a misspelled schema subcommand. */
+/**
+ * Return whether a token must remain on the schema-action refusal path.
+ *
+ * Bare custom-type shorthand is intentionally limited to PascalCase names.
+ * Lowercase tokens occupy the action namespace, so a misspelling such as
+ * `pm schema nonsense` cannot silently register a new type. Explicit
+ * `pm schema add-type <name>` remains available for every valid type name.
+ */
 export declare function looksLikeSchemaSubcommandTypo(value: string): boolean;
 /**
  * Parse the integer `--order` value accepted by `pm schema add-status`.