@unbrained/pm-cli 2026.8.22 → 2026.8.24

package/dist/sdk/runtime-input.d.ts

@@ -3,6 +3,10 @@ import type { CloseManyCommandOptions } from "./lifecycle/close-many.js";
 import type { UpdateManyCommandOptions } from "./lifecycle/update-many.js";
 import type { GraphCommandOptions } from "./graph/run.js";
 import type { ListOptions } from "./query/list.js";
+/** Mark an action object decoded from the MCP JSON-RPC transport. */
+export declare function markMcpMutationTransportInput<T extends object>(input: T): T;
+/** Clone mutation options with overrides while retaining stdin provenance. */
+export declare function mutationOptionsWithOverrides<Source extends object, Overrides extends object>(source: Source, overrides: Overrides, omittedKeys?: readonly PropertyKey[]): Source & Overrides;
 /** Read a non-empty string without altering its caller-provided whitespace. */
 export declare function readRuntimeString(args: Record<string, unknown>, key: string): string | undefined;
 /** Normalize a non-empty string or finite number into a scalar string. */

package/dist/sdk/runtime-input.js

@@ -5,12 +5,41 @@
  * primitives are shared by native action dispatchers and MCP-specific adapters.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="0e153ece-4fc0-5134-97f0-c2315aff0031")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="2a1e986f-304d-50f6-a405-6afc221bdad5")}catch(e){}}();
 import { EXIT_CODE } from "../core/shared/constants.js";
 import { PmCliError } from "../core/shared/errors.js";
 import { asRecordClone } from "../core/shared/primitives.js";
 import { normalizeListOptions, normalizeUpdateOptions, } from "./cli-contracts/registration-helpers.js";
 import { UPDATE_COMMANDER_STRING_OPTION_CONTRACTS } from "./cli-contracts/commander-mutation-options.js";
+import { normalizeBulkIdsValue, } from "../core/io/bulk-ids-input.js";
+import { overlayMutationStdinTokenPolicy, preserveMutationStdinTokenLiterals, transferMutationStdinTokenPolicy, } from "../core/item/parse.js";
+const MCP_MUTATION_TRANSPORT = Symbol("pm.mcp-mutation-transport");
+/** Mark an action object decoded from the MCP JSON-RPC transport. */
+export function markMcpMutationTransportInput(input) {
+    Object.defineProperty(input, MCP_MUTATION_TRANSPORT, {
+        value: true,
+        enumerable: true,
+    });
+    return input;
+}
+function isMcpMutationTransportInput(input) {
+    return MCP_MUTATION_TRANSPORT in input;
+}
+function preserveTransportLiteralOptions(source, options) {
+    return isMcpMutationTransportInput(source)
+        ? preserveMutationStdinTokenLiterals(options)
+        : transferMutationStdinTokenPolicy(source, options);
+}
+/** Clone mutation options with overrides while retaining stdin provenance. */
+export function mutationOptionsWithOverrides(source, overrides, omittedKeys = []) {
+    const options = transferMutationStdinTokenPolicy(source, {
+        ...source,
+        ...overrides,
+    });
+    for (const key of omittedKeys)
+        Reflect.deleteProperty(options, key);
+    return options;
+}
 /** Read a non-empty string without altering its caller-provided whitespace. */
 export function readRuntimeString(args, key) {
     const value = args[key];
@@ -119,6 +148,7 @@ const SCALAR_TO_ARRAY_FIELDS = new Set([
     "envClear",
     "env_clear",
 ]);
+const ANNOTATION_SCALAR_TO_ARRAY_FIELDS = new Set([...SCALAR_TO_ARRAY_FIELDS].filter((field) => field !== "file"));
 // Actions where the linked-resource fields `add` and `remove` are string[] arrays.
 // For other actions (comments/notes/learnings) `add` and `remove` are scalar strings
 // and must NOT be auto-promoted.
@@ -129,6 +159,21 @@ const ARRAY_ADD_REMOVE_ACTIONS = new Set([
     "test",
     "test-all",
 ]);
+const SCALAR_ANNOTATION_SOURCE_ACTIONS = new Set([
+    "comments",
+    "notes",
+    "learnings",
+]);
+function assertMcpAnnotationFileUnavailable(action, options) {
+    if (!SCALAR_ANNOTATION_SOURCE_ACTIONS.has(action) ||
+        !Object.prototype.hasOwnProperty.call(options, "file")) {
+        return;
+    }
+    throw new PmCliError(`MCP ${action} does not accept options.file. Pass annotation text in options.add instead.`, EXIT_CODE.USAGE, {
+        code: "mcp_annotation_file_unavailable",
+        required: "Pass annotation text as JSON data; MCP annotation actions cannot read server-local files.",
+    });
+}
 /** Lifecycle actions where a top-level assignee argument aliases the author. */
 const LIFECYCLE_AUTHOR_ALIAS_ACTIONS = new Set([
     "claim",
@@ -171,10 +216,13 @@ const UNIVERSAL_READ_OUTPUT_OPTION_KEYS = [
     "outputCursor",
 ];
 /** Reconcile MCP array/scalar option spellings with CLI flag expectations. */
-export function normalizeMcpOptionsArrays(options, action) {
+export function normalizeMcpOptionsArrays(options, action = "") {
     const result = {};
-    const promoteAddRemove = action !== undefined && ARRAY_ADD_REMOVE_ACTIONS.has(action);
+    const promoteAddRemove = ARRAY_ADD_REMOVE_ACTIONS.has(action);
     const preserveStandaloneNote = action === "files" || action === "files-discover" || action === "docs";
+    const scalarToArrayFields = SCALAR_ANNOTATION_SOURCE_ACTIONS.has(action)
+        ? ANNOTATION_SCALAR_TO_ARRAY_FIELDS
+        : SCALAR_TO_ARRAY_FIELDS;
     for (const [key, value] of Object.entries(options)) {
         if (Array.isArray(value) && ARRAY_TO_CSV_FIELDS.has(key)) {
             result[key] = value.join(",");
@@ -184,7 +232,8 @@ export function normalizeMcpOptionsArrays(options, action) {
             result[key] = value;
             continue;
         }
-        if (typeof value === "string" && SCALAR_TO_ARRAY_FIELDS.has(key)) {
+        if (typeof value === "string" &&
+            scalarToArrayFields.has(key)) {
             result[key] = [value];
             continue;
         }
@@ -198,8 +247,28 @@ export function normalizeMcpOptionsArrays(options, action) {
     }
     return result;
 }
+/** Resolve the explicit or lifecycle-assignee author accepted by MCP actions. */
+function resolveMcpActionAuthor(args, options, action) {
+    const author = readRuntimeString(args, "author");
+    if (author !== undefined) {
+        return author;
+    }
+    return action !== undefined && LIFECYCLE_AUTHOR_ALIAS_ACTIONS.has(action)
+        ? (readRuntimeString(args, "assignee") ??
+            readRuntimeString(options, "assignee"))
+        : undefined;
+}
+/** Add a resolved author only when the normalized options do not provide one. */
+function withResolvedAuthor(options, author) {
+    return author !== undefined && options.author === undefined
+        ? { ...options, author }
+        : options;
+}
 /** Merge hoisted top-level action arguments and author aliases into options. */
 export function optionsWithAuthor(args, action) {
+    const sourceOptions = isRuntimeRecord(args.options)
+        ? args.options
+        : undefined;
     const baseOptions = asRecordClone(args.options);
     const hoistedTopLevel = {};
     const hoistKey = (key) => {
@@ -214,19 +283,14 @@ export function optionsWithAuthor(args, action) {
     for (const key of UNIVERSAL_READ_OUTPUT_OPTION_KEYS) {
         hoistKey(key);
     }
-    const options = normalizeMcpOptionsArrays({ ...hoistedTopLevel, ...baseOptions }, action);
-    const author = readRuntimeString(args, "author");
-    const authorFromAssignee = action !== undefined && LIFECYCLE_AUTHOR_ALIAS_ACTIONS.has(action)
-        ? (readRuntimeString(args, "assignee") ??
-            readRuntimeString(options, "assignee"))
-        : undefined;
-    if (author && options.author === undefined) {
-        return { ...options, author };
-    }
-    if (authorFromAssignee && options.author === undefined) {
-        return { ...options, author: authorFromAssignee };
+    if (action !== undefined && isMcpMutationTransportInput(args)) {
+        assertMcpAnnotationFileUnavailable(action, baseOptions);
     }
-    return options;
+    const options = normalizeMcpOptionsArrays({ ...hoistedTopLevel, ...baseOptions }, action);
+    const stdinPolicySource = isMcpMutationTransportInput(args)
+        ? args
+        : (sourceOptions ?? args);
+    return preserveTransportLiteralOptions(stdinPolicySource, withResolvedAuthor(options, resolveMcpActionAuthor(args, options, action)));
 }
 // GH-170 (pm-pfnx): the narrow pm_files/pm_docs tools spell the CLI --note flag
 // as `addNote` (the shared `note` parameter is the array-typed create/update
@@ -318,10 +382,13 @@ export function extensionOptionsFromArgs(args, options) {
 }
 /** Mutation tools (create/update/close/append/update-many) return a verbose `changed_fields` array. On the agent path we drop it to a `changed_field_count` by default for token efficiency, restoring the full array only when the caller explicitly passes the MCP-level fullChangedFields=true control. Mutation options are forwarded unchanged so runtime fields named `full` remain valid user data. */
 export function withMutationCompaction(args, options) {
+    const runnerOptions = preserveTransportLiteralOptions(options ?? {}, {
+        ...options,
+    });
     return {
         changedFields: args.fullChangedFields === true ? "full" : "compact",
         idOnly: args.idOnly === true,
-        runnerOptions: { ...options },
+        runnerOptions,
     };
 }
 /** Translate flat MCP filter parameters into the shared list-option shape. */
@@ -336,7 +403,7 @@ export function mutationListOptions(options) {
         updatedBefore: readRuntimeScalarString(options, "filterUpdatedBefore"),
         createdAfter: readRuntimeScalarString(options, "filterCreatedAfter"),
         createdBefore: readRuntimeScalarString(options, "filterCreatedBefore"),
-        ids: readRuntimeScalarStringAllowBlank(options, "ids"),
+        ids: normalizeBulkIdsValue(options.ids),
         assignee: readRuntimeScalarString(options, "filterAssignee"),
         assigneeFilter: readRuntimeScalarString(options, "filterAssigneeFilter") ??
             readRuntimeScalarString(options, "filterAssignee_filter"),
@@ -385,12 +452,19 @@ export function graphOptionsFromFlat(options) {
         ...(options.full === true ? { full: true } : {}),
     };
 }
+function normalizeBulkMutationListOptions(options) {
+    const normalized = normalizeListOptions(options);
+    if (options.ids !== undefined) {
+        normalized.ids = normalizeBulkIdsValue(options.ids);
+    }
+    return normalized;
+}
 /** Build close-many command options from one flat MCP parameter payload. */
 export function closeManyOptionsFromFlat(options) {
     return {
         status: readRuntimeString(options, "filterStatus"),
         list: isRuntimeRecord(options.list)
-            ? normalizeListOptions(options.list)
+            ? normalizeBulkMutationListOptions(options.list)
             : mutationListOptions(options),
         reason: readRuntimeString(options, "reason"),
         resolution: readRuntimeString(options, "resolution"),
@@ -474,12 +548,13 @@ export function updateManyOptionsFromFlat(options) {
         const updateSource = isRuntimeRecord(options.update)
             ? options.update
             : updateManyUpdateOptionsFromFlat(options);
+        const normalizedUpdate = preserveTransportLiteralOptions(options, normalizeMcpUpdateOptions(updateSource));
         return {
             status: readRuntimeScalarString(options, "filterStatus"),
             list: isRuntimeRecord(options.list)
-                ? normalizeListOptions(options.list)
+                ? normalizeBulkMutationListOptions(options.list)
                 : mutationListOptions(options),
-            update: normalizeMcpUpdateOptions(updateSource),
+            update: overlayMutationStdinTokenPolicy(updateSource, normalizedUpdate),
             dryRun: options.dryRun === true || options.dry_run === true ? true : undefined,
             rollback: readRuntimeString(options, "rollback"),
             checkpoint: options.checkpoint === false ||
@@ -492,7 +567,7 @@ export function updateManyOptionsFromFlat(options) {
     return {
         status: readRuntimeScalarString(options, "filterStatus"),
         list: mutationListOptions(options),
-        update: updateManyUpdateOptionsFromFlat(options),
+        update: preserveTransportLiteralOptions(options, updateManyUpdateOptionsFromFlat(options)),
         dryRun: options.dryRun === true || options.dry_run === true ? true : undefined,
         rollback: readRuntimeString(options, "rollback"),
         checkpoint: options.checkpoint === false ||
@@ -503,4 +578,4 @@ export function updateManyOptionsFromFlat(options) {
     };
 }
 //# sourceMappingURL=runtime-input.js.map
-//# debugId=0e153ece-4fc0-5134-97f0-c2315aff0031
+//# debugId=2a1e986f-304d-50f6-a405-6afc221bdad5

package/dist/sdk/runtime-primitives.d.ts

@@ -14,6 +14,7 @@ export { applyRegisteredItemFieldDefaultsAndValidation, collectRegisteredItemFie
 export { resolveExtensionRoots } from "../core/extensions/loader.js";
 export { resolveRegisteredSearchProvider, resolveRegisteredVectorStoreAdapter, } from "../core/extensions/runtime-registrations.js";
 export { pathExists, readFileIfExists, removeFileIfExists, writeFileAtomic, } from "../core/fs/fs-utils.js";
+export { normalizeBulkIdsValue, parseBulkIdsText, resolveCliBulkIdsInput, type BulkIdsFileReader, type BulkIdsInputReaders, type BulkIdsStdinReader, type BulkIdsValue, } from "../core/io/bulk-ids-input.js";
 export { type HistoryDiffValueEntry, computeHistoryDiff, patchPathToChangedField, } from "../core/history/history-diff.js";
 export { enforceHistoryStreamPolicyForItem, enforceHistoryStreamPolicyForItems, } from "../core/history/history-stream-policy.js";
 export { appendHistoryEntry, CURRENT_HISTORY_ITEM_HASH_VERSION, createHistoryEntry, hashDocument, hashDocumentForVersion, hashEmptyDocument, SUPPORTED_HISTORY_ITEM_HASH_VERSIONS, type HistoryItemHashVersion, } from "../core/history/history.js";
@@ -25,7 +26,7 @@ export { generateItemId, normalizeItemId, normalizeRawItemId, } from "../core/it
 export { canonicalDocument, normalizeItemMetadata, parseItemDocument, serializeItemDocument, } from "../core/item/item-format.js";
 export { toItemRecord } from "../core/item/item-record.js";
 export { assertParentReferenceIsNotSelf, isPlaceholderReferenceToken, normalizeParentReferenceValue, validateMissingParentReference, } from "../core/item/parent-reference-policy.js";
-export { applyAcceptanceCriteriaMutations, applyTagRemovals, assertNoUnknownCsvKeys, createStdinTokenResolver, looksLikeGenericKeyValueEntry, mergeAdditiveTags, parseCsvKv, parseOptionalNonNegativeInteger, parseOptionalNumber, parseTags, splitAcceptanceCriteria, } from "../core/item/parse.js";
+export { applyAcceptanceCriteriaMutations, applyTagRemovals, assertNoUnknownCsvKeys, createStdinTokenResolver, looksLikeGenericKeyValueEntry, mergeAdditiveTags, parseCsvKv, parseOptionalNonNegativeInteger, parseOptionalNumber, parseTags, preserveMutationStdinTokenFields, preserveMutationStdinTokenLiterals, transferMutationStdinTokenPolicy, shouldResolveMutationStdinTokenField, shouldResolveMutationStdinTokens, splitAcceptanceCriteria, } from "../core/item/parse.js";
 export { resolvePriority } from "../core/item/priority.js";
 export { validateSprintOrReleaseValue } from "../core/item/sprint-release-format.js";
 export { parseStatusFilterCsv } from "../core/item/status-filter.js";
@@ -53,7 +54,7 @@ export { type VectorizationEmbeddingIdentity, type VectorizationEmbeddingMetadat
 export { sentryCaptureCliError, sentryFinishCommandSpan, sentryFlush, sentryLogCliUsageError, sentrySetCommandContext, sentryStartCommandSpan, } from "../core/sentry/helpers.js";
 export { ensureSentryInit } from "../core/sentry/instrument.js";
 export { clearFocusedItem, getFocusedItem, setFocusedItem, } from "../core/session/session-state.js";
-export { readAuthorEnvironment, diagnoseAgentIdentity, resolveAuthor, resolveClaimPrincipal, runWithHarnessDetectionSignals, runWithWorkspaceHarnessSignalDescriptors, type AgentClientInfo, writeAuthorEnvironment, } from "../core/shared/author.js";
+export { readAuthorEnvironment, diagnoseAgentIdentity, resolveAuthor, resolveClaimPrincipal, runWithHarnessDetectionSignals, runWithWorkspaceHarnessSignalDescriptors, BUILTIN_AGENT_PROVENANCE_ADAPTERS, listAgentProvenanceAdapters, normalizeAgentProvenanceAdapterValue, registerAgentProvenanceAdapters, type AgentProvenanceAdapter, type AgentClientInfo, writeAuthorEnvironment, } from "../core/shared/author.js";
 export { agentSessionEnvironment, boundAgentEpisodeIdentity, runWithAgentSessionContext, resolveAgentSessionContextFromSignals, type AgentEpisodeIdentity, type AgentSessionContext, } from "../core/shared/agent-session-context.js";
 export { evaluateMutationGuard, isMutationAction, listMutationActions, scanMutationSecrets, type EvaluateMutationGuardOptions, type MutationGuardResult, type MutationGuardSettings, type SecretGuardFinding, type SecretGuardMode, } from "./mutation-guard.js";
 export { jaccardSimilarity, normalizeSimilarityText, scoreItemSimilarity, tokenizeSimilarityText, type ItemSimilarityScore, } from "./similarity-scoring.js";

package/dist/sdk/runtime-primitives.js

@@ -7,7 +7,7 @@
  * prefer the typed operations exported by the main SDK barrel.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="1bcfba24-e761-571c-96e6-36bbc12d2814")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="be6f7869-f197-5d38-b8d9-faf8f390cd56")}catch(e){}}();
 export { createCheckpointId, loadMutationCheckpoint, restoreCheckpointItems, writeMutationCheckpoint, } from "../core/checkpoint/mutation-checkpoint.js";
 export { flattenFlagListValue, resolveFlagValueKind, } from "../core/extensions/flag-value-types.js";
 export { createUnknownSubcommandError, } from "./agent/subcommand-recovery.js";
@@ -16,6 +16,7 @@ export { applyRegisteredItemFieldDefaultsAndValidation, collectRegisteredItemFie
 export { resolveExtensionRoots } from "../core/extensions/loader.js";
 export { resolveRegisteredSearchProvider, resolveRegisteredVectorStoreAdapter, } from "../core/extensions/runtime-registrations.js";
 export { pathExists, readFileIfExists, removeFileIfExists, writeFileAtomic, } from "../core/fs/fs-utils.js";
+export { normalizeBulkIdsValue, parseBulkIdsText, resolveCliBulkIdsInput, } from "../core/io/bulk-ids-input.js";
 export { computeHistoryDiff, patchPathToChangedField, } from "../core/history/history-diff.js";
 export { enforceHistoryStreamPolicyForItem, enforceHistoryStreamPolicyForItems, } from "../core/history/history-stream-policy.js";
 export { appendHistoryEntry, CURRENT_HISTORY_ITEM_HASH_VERSION, createHistoryEntry, hashDocument, hashDocumentForVersion, hashEmptyDocument, SUPPORTED_HISTORY_ITEM_HASH_VERSIONS, } from "../core/history/history.js";
@@ -27,7 +28,7 @@ export { generateItemId, normalizeItemId, normalizeRawItemId, } from "../core/it
 export { canonicalDocument, normalizeItemMetadata, parseItemDocument, serializeItemDocument, } from "../core/item/item-format.js";
 export { toItemRecord } from "../core/item/item-record.js";
 export { assertParentReferenceIsNotSelf, isPlaceholderReferenceToken, normalizeParentReferenceValue, validateMissingParentReference, } from "../core/item/parent-reference-policy.js";
-export { applyAcceptanceCriteriaMutations, applyTagRemovals, assertNoUnknownCsvKeys, createStdinTokenResolver, looksLikeGenericKeyValueEntry, mergeAdditiveTags, parseCsvKv, parseOptionalNonNegativeInteger, parseOptionalNumber, parseTags, splitAcceptanceCriteria, } from "../core/item/parse.js";
+export { applyAcceptanceCriteriaMutations, applyTagRemovals, assertNoUnknownCsvKeys, createStdinTokenResolver, looksLikeGenericKeyValueEntry, mergeAdditiveTags, parseCsvKv, parseOptionalNonNegativeInteger, parseOptionalNumber, parseTags, preserveMutationStdinTokenFields, preserveMutationStdinTokenLiterals, transferMutationStdinTokenPolicy, shouldResolveMutationStdinTokenField, shouldResolveMutationStdinTokens, splitAcceptanceCriteria, } from "../core/item/parse.js";
 export { resolvePriority } from "../core/item/priority.js";
 export { validateSprintOrReleaseValue } from "../core/item/sprint-release-format.js";
 export { parseStatusFilterCsv } from "../core/item/status-filter.js";
@@ -55,7 +56,7 @@ export { buildVectorizationEmbeddingIdentity, buildVectorizationEmbeddingMetadat
 export { sentryCaptureCliError, sentryFinishCommandSpan, sentryFlush, sentryLogCliUsageError, sentrySetCommandContext, sentryStartCommandSpan, } from "../core/sentry/helpers.js";
 export { ensureSentryInit } from "../core/sentry/instrument.js";
 export { clearFocusedItem, getFocusedItem, setFocusedItem, } from "../core/session/session-state.js";
-export { readAuthorEnvironment, diagnoseAgentIdentity, resolveAuthor, resolveClaimPrincipal, runWithHarnessDetectionSignals, runWithWorkspaceHarnessSignalDescriptors, writeAuthorEnvironment, } from "../core/shared/author.js";
+export { readAuthorEnvironment, diagnoseAgentIdentity, resolveAuthor, resolveClaimPrincipal, runWithHarnessDetectionSignals, runWithWorkspaceHarnessSignalDescriptors, BUILTIN_AGENT_PROVENANCE_ADAPTERS, listAgentProvenanceAdapters, normalizeAgentProvenanceAdapterValue, registerAgentProvenanceAdapters, writeAuthorEnvironment, } from "../core/shared/author.js";
 export { agentSessionEnvironment, boundAgentEpisodeIdentity, runWithAgentSessionContext, resolveAgentSessionContextFromSignals, } from "../core/shared/agent-session-context.js";
 export { evaluateMutationGuard, isMutationAction, listMutationActions, scanMutationSecrets, } from "./mutation-guard.js";
 export { jaccardSimilarity, normalizeSimilarityText, scoreItemSimilarity, tokenizeSimilarityText, } from "./similarity-scoring.js";
@@ -81,4 +82,4 @@ export { maybeRunFirstUseTelemetryPrompt } from "../core/telemetry/consent.js";
 export { deriveTelemetryCommandResolution, } from "../core/telemetry/observability.js";
 export { emitTelemetryErrorEvent, finishTelemetryCommand, startTelemetryCommand, } from "../core/telemetry/runtime.js";
 //# sourceMappingURL=runtime-primitives.js.map
-//# debugId=1bcfba24-e761-571c-96e6-36bbc12d2814
+//# debugId=be6f7869-f197-5d38-b8d9-faf8f390cd56

package/dist/sdk/runtime.js

@@ -4,7 +4,7 @@
  * Defines public SDK APIs and package-author helpers for Runtime.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="a27b9b88-a8de-5e38-ab7f-dfcc61d1fad6")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="72111aa2-52b2-53da-a1c8-07ba53a74944")}catch(e){}}();
 export { PM_GITIGNORE_END, PM_GITIGNORE_START, ensurePmGitignore, getPmGitignoreBlock, } from "./workspace.js";
 export { SEARCH_EXTENSION_FLAG_DEFINITIONS } from "./extension-contracts.js";
 export * from "./cli-contracts/agent-output-contracts.js";
@@ -72,7 +72,7 @@ import { PROFILE_SUBCOMMANDS, runProfileApply, runProfileLint, runProfileList, r
 import { runHistoryRedact, } from "./history-redact.js";
 import { runMcpHistoryCompactAction, runMcpHistoryRepairAction, } from "./history-mcp.js";
 import { runMcpCloseAction, runMcpReopenAction } from "./lifecycle/mcp-actions.js";
-import { actionGlobalOptions as globalOptions, closeManyOptionsFromFlat, extensionOptionsFromArgs, graphOptionsFromFlat, mutationListOptions, normalizeActionName, normalizeCommandPath, normalizeMcpOptionsArrays, normalizeMcpUpdateOptions, optionsWithAuthor, parseRuntimeInteger as parseMcpInteger, readRuntimeScalarString as readScalarString, readRuntimeScalarStringAllowBlank as readScalarStringAllowBlank, readRuntimeString as readString, readRuntimeStringArray as readStringArray, resolveRuntimeLimit, updateManyOptionsFromFlat, withAddNoteOption, withFilesDiscoveryOptions, withMutationCompaction, } from "./runtime-input.js";
+import { actionGlobalOptions as globalOptions, closeManyOptionsFromFlat, extensionOptionsFromArgs, graphOptionsFromFlat, mutationListOptions, mutationOptionsWithOverrides, normalizeActionName, normalizeCommandPath, normalizeMcpOptionsArrays, normalizeMcpUpdateOptions, optionsWithAuthor, parseRuntimeInteger as parseMcpInteger, readRuntimeScalarString as readScalarString, readRuntimeScalarStringAllowBlank as readScalarStringAllowBlank, readRuntimeString as readString, readRuntimeStringArray as readStringArray, resolveRuntimeLimit, updateManyOptionsFromFlat, withAddNoteOption, withFilesDiscoveryOptions, withMutationCompaction, } from "./runtime-input.js";
 import { runDeps } from "./dependencies.js";
 import { runDocs } from "./docs.js";
 import { runGraph, } from "./graph/run.js";
@@ -252,7 +252,7 @@ export class PmClient {
     append(id, body, options = {}) {
         return this.runTyped("append", {
             id,
-            ...splitFullClientMutationOptions({ ...options, body }),
+            ...splitFullClientMutationOptions(mutationOptionsWithOverrides(options, { body })),
         });
     }
     /** Initialize a workspace with the same semantics as `pm init`. */
@@ -461,7 +461,7 @@ export class PmClient {
             ...(id === undefined ? {} : { id }),
             ...(stepRef === undefined ? {} : { stepRef }),
             ...(reorderTo === undefined ? {} : { reorderTo }),
-            options: { ...options, subcommand },
+            options: mutationOptionsWithOverrides(options, { subcommand }),
         });
     }
     /** Create a durable plan with optional ordered seed steps. */
@@ -1457,12 +1457,13 @@ function runMcpConfigAction(ctx) {
     const configAction = readString(ctx.args, "configAction") ??
         readString(ctx.options, "configAction") ??
         readString(ctx.options, "action");
-    if (configAction === undefined) {
+    if (configAction === undefined)
         throw new PmCliError("Missing required argument: configAction", 64);
-    }
+    const value = readString(ctx.args, "value") ?? readString(ctx.options, "value");
+    const options = readString(ctx.options, "policy") !== undefined && value !== undefined ? { ...ctx.options, value } : ctx.options;
     return runConfig(readString(ctx.args, "scope") ??
         readString(ctx.options, "scope") ??
-        "project", configAction, readString(ctx.args, "key") ?? readString(ctx.options, "key"), ctx.options, ctx.global, readString(ctx.args, "value") ?? readString(ctx.options, "value"));
+        "project", configAction, readString(ctx.args, "key") ?? readString(ctx.options, "key"), options, ctx.global, readString(ctx.options, "policy") === undefined ? value : undefined);
 }
 function runMcpActivityAction(ctx) {
     const options = ctx.options;
@@ -1717,22 +1718,13 @@ async function runMcpRestoreAction(ctx) {
         idOnly,
     });
 }
-function withoutLifecycleAssigneeAlias(options) {
-    const updateOptions = { ...options };
-    delete updateOptions.assignee;
-    return updateOptions;
-}
 async function runMcpStartTaskAction(ctx) {
     const pmRoot = resolvePmRoot(process.cwd(), ctx.global.path);
     const settings = await readSettings(pmRoot);
     const inProgressStatus = resolveStartTaskInProgressStatus(resolveRuntimeStatusRegistry(settings.schema));
     const id = requireMcpItemId(ctx);
     const claimResult = await runClaim(id, ctx.force, ctx.global, ctx.options);
-    const updateResult = await runUpdate(id, {
-        ...withoutLifecycleAssigneeAlias(ctx.options),
-        status: inProgressStatus,
-        force: ctx.force,
-    }, ctx.global);
+    const updateResult = await runUpdate(id, mutationOptionsWithOverrides(ctx.options, { status: inProgressStatus, force: ctx.force }, ["assignee"]), ctx.global);
     return { id, action: "start_task", claim: claimResult, update: updateResult };
 }
 async function runMcpPauseTaskAction(ctx) {
@@ -1740,11 +1732,7 @@ async function runMcpPauseTaskAction(ctx) {
     const settings = await readSettings(pmRoot);
     const id = requireMcpItemId(ctx);
     const openStatus = resolveRuntimeStatusRegistry(settings.schema).open_status;
-    const updateResult = await runUpdate(id, {
-        ...withoutLifecycleAssigneeAlias(ctx.options),
-        status: openStatus,
-        force: ctx.force,
-    }, ctx.global);
+    const updateResult = await runUpdate(id, mutationOptionsWithOverrides(ctx.options, { status: openStatus, force: ctx.force }, ["assignee"]), ctx.global);
     const releaseResult = await runRelease(id, ctx.force, ctx.global, ctx.options);
     return {
         id,
@@ -1945,4 +1933,4 @@ async function loadWorkspaceExtensionRegistrations(pmRoot, settings, cwd) {
     }
 }
 //# sourceMappingURL=runtime.js.map
-//# debugId=a27b9b88-a8de-5e38-ab7f-dfcc61d1fad6
+//# debugId=72111aa2-52b2-53da-a1c8-07ba53a74944

package/dist/sdk/scheduling-shortcuts.js

@@ -1,5 +1,6 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="32223457-5f57-5049-99cf-c5d766413fb6")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="c7c75b13-7317-5089-9869-7e6e22ed95b2")}catch(e){}}();
+import { transferMutationStdinTokenPolicy, } from "./runtime-primitives.js";
 import { runCreate, } from "./lifecycle/create.js";
 const DEFAULT_DURATION = "1h";
 const DEFAULT_START = "now";
@@ -10,7 +11,7 @@ function appendQuotedPair(pairs, key, value) {
     }
 }
 function buildCommonOptions(type, title, options) {
-    return {
+    const createOptions = {
         type,
         title,
         schedulePreset: "lightweight",
@@ -23,6 +24,7 @@ function buildCommonOptions(type, title, options) {
         author: options.author,
         message: options.message,
     };
+    return transferMutationStdinTokenPolicy(options, createOptions);
 }
 async function createMeetingOrEvent(type, title, options, global) {
     const createOptions = buildCommonOptions(type, title, options);
@@ -59,4 +61,4 @@ export function runRemind(title, options, global) {
     return runCreate(createOptions, global);
 }
 //# sourceMappingURL=scheduling-shortcuts.js.map
-//# debugId=32223457-5f57-5049-99cf-c5d766413fb6
+//# debugId=c7c75b13-7317-5089-9869-7e6e22ed95b2

package/dist/sdk/structured-mutations.js

@@ -5,9 +5,10 @@
  * transaction contract and normalizes full item documents for CLI round trips.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="07876c03-63a8-5c69-9c6c-c3446076a382")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="3f348972-0c8f-52da-abeb-46690df967d8")}catch(e){}}();
 import crypto from "node:crypto";
 import { normalizeItemId, normalizePrefix } from "../core/item/id.js";
+import { preserveMutationStdinTokenLiterals } from "../core/item/parse.js";
 import { EXIT_CODE, ITEM_PROJECT_CONTEXT_KEYS, } from "../core/shared/constants.js";
 import { PmCliError } from "../core/shared/errors.js";
 import { levenshteinDistanceWithinLimit } from "../core/shared/levenshtein.js";
@@ -244,7 +245,13 @@ export function parseItemMutationBatch(input) {
     if (rows === undefined || rows.length === 0) {
         throw new PmCliError("Mutation batch must be a non-empty JSON array or an object with a non-empty mutations array.", EXIT_CODE.USAGE);
     }
-    return rows.map((row, index) => validateMutationRow(row, index));
+    return rows.map((row, index) => {
+        const mutation = validateMutationRow(row, index);
+        if (mutation.options !== undefined) {
+            preserveMutationStdinTokenLiterals(mutation.options);
+        }
+        return mutation;
+    });
 }
 function deriveReferencedItemId(transactionId, reference, idPrefix) {
     const digest = crypto
@@ -571,4 +578,4 @@ export function validateItemMutationRows(value) {
     return parseItemMutationBatch(JSON.stringify(value));
 }
 //# sourceMappingURL=structured-mutations.js.map
-//# debugId=07876c03-63a8-5c69-9c6c-c3446076a382
+//# debugId=3f348972-0c8f-52da-abeb-46690df967d8

package/dist/sdk/test/batch.d.ts

@@ -25,6 +25,12 @@ export interface TestAllCommandOptions {
     pmContext?: string;
     /** Value that configures or reports override linked pm context for this contract. */
     overrideLinkedPmContext?: boolean;
+    /** Source-workspace visibility and working-directory mode. */
+    workspaceContext?: string;
+    /** Force run-level source-workspace mode over linked metadata. */
+    overrideLinkedWorkspaceContext?: boolean;
+    /** Explicitly permit untrusted commands when project policy also permits them. */
+    allowUntrustedLinkedTests?: boolean;
     /** Value that configures or reports fail on context mismatch for this contract. */
     failOnContextMismatch?: boolean;
     /** Value that configures or reports fail on skipped for this contract. */

package/dist/sdk/test/batch.js

@@ -4,7 +4,7 @@
  * Implements the pm test all command surface and its agent-facing runtime behavior.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="bb2758a5-a5c1-5f6e-be42-0e173fe16fe3")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="5d3405c0-14e6-51f5-97a1-355438fd0199")}catch(e){}}();
 import { assertInitializedTracker } from "../environment/tracker-preflight.js";
 import { getActiveExtensionRegistrations } from "../../core/extensions/index.js";
 import { resolveItemTypeRegistry } from "../../core/item/type-registry.js";
@@ -80,6 +80,10 @@ const normalizePmContextModeSignature = (value) => {
     const normalized = value?.trim().toLowerCase();
     return normalized && normalized.length > 0 ? normalized : "none";
 };
+const normalizeWorkspaceContextModeSignature = (value) => {
+    const normalized = value?.trim().toLowerCase();
+    return normalized && normalized.length > 0 ? normalized : "source";
+};
 /** Sorts and deduplicates optional assertion string lists. */
 const normalizeAssertionStrings = (values) => [...new Set(values ?? [])].sort((left, right) => left.localeCompare(right));
 /** Sorts optional assertion maps into deterministic key order. */
@@ -110,9 +114,10 @@ const buildLinkedTestKey = (test) => {
     const envSet = normalizeEnvSetSignature(test.env_set);
     const envClear = normalizeEnvClearSignature(test.env_clear);
     const pmContextMode = normalizePmContextModeSignature(test.pm_context_mode);
+    const workspaceContextMode = normalizeWorkspaceContextModeSignature(test.workspace_context_mode);
     const sharedHostSafe = test.shared_host_safe === true ? "true" : "false";
     const assertions = normalizeAssertionSignature(test);
-    return `${resolveLinkedTestTargetSignature(test)}:${envSet}:${envClear}:${pmContextMode}:${sharedHostSafe}:${assertions}`;
+    return `${resolveLinkedTestTargetSignature(test)}:${envSet}:${envClear}:${pmContextMode}:${workspaceContextMode}:${sharedHostSafe}:${assertions}`;
 };
 const maxTimeoutSeconds = (current, candidate) => {
     if (candidate === undefined) {
@@ -227,6 +232,11 @@ const runTestAllItem = async (entry, context) => {
             requireAssertionsForPm: context.options.requireAssertionsForPm,
             checkContext: context.options.checkContext,
             autoPmContext: context.options.autoPmContext,
+            workspaceContext: context.options.workspaceContext,
+            overrideLinkedWorkspaceContext: context.options.overrideLinkedWorkspaceContext,
+            pmRoot: context.pmRoot,
+            allowUntrustedLinkedTests: context.options.allowUntrustedLinkedTests,
+            untrustedLinkedTestsPolicyEnabled: context.settings.testing.allow_untrusted_linked_tests,
         })
         : [];
     let executedIndex = 0;
@@ -307,6 +317,8 @@ const appendTestAllItemTracking = async (entry, summary, runResults, context) =>
                     command: result.command.trim(),
                     requested_pm_context_mode: result.execution_context?.requested_pm_context_mode,
                     pm_context_mode: result.execution_context?.pm_context_mode,
+                    workspace_context_mode: result.execution_context?.workspace_context_mode,
+                    trust_reason: result.execution_context?.trust.reason,
                 })),
             },
         });
@@ -495,4 +507,4 @@ export const _testOnlyTestAll = {
     formatTrackingError,
 };
 //# sourceMappingURL=batch.js.map
-//# debugId=bb2758a5-a5c1-5f6e-be42-0e173fe16fe3
+//# debugId=5d3405c0-14e6-51f5-97a1-355438fd0199

package/dist/sdk/test/entry.d.ts

@@ -1,5 +1,5 @@
 /** Public contract for structured linked test keys, shared by SDK and presentation-layer consumers. */
-export declare const STRUCTURED_LINKED_TEST_KEYS: readonly ["command", "cmd", "path", "scope", "timeout", "timeout_seconds", "pm_context_mode", "env_set", "env_clear", "shared_host_safe", "assert_stdout_contains", "assert_stdout_regex", "assert_stderr_contains", "assert_stderr_regex", "assert_stdout_min_lines", "assert_json_field_equals", "assert_json_field_gte", "note"];
+export declare const STRUCTURED_LINKED_TEST_KEYS: readonly ["command", "cmd", "path", "scope", "timeout", "timeout_seconds", "pm_context_mode", "workspace_context_mode", "env_set", "env_clear", "shared_host_safe", "assert_stdout_contains", "assert_stdout_regex", "assert_stderr_contains", "assert_stderr_regex", "assert_stdout_min_lines", "assert_json_field_equals", "assert_json_field_gte", "note"];
 /** Implements looks like structured linked test entry for the public runtime surface of this module. */
 export declare function looksLikeStructuredLinkedTestEntry(raw: string): boolean;
 /** Implements normalize structured linked test entry for the public runtime surface of this module. */

package/dist/sdk/test/entry.js

@@ -4,7 +4,7 @@
  * Implements the pm linked test entry command surface and its agent-facing runtime behavior.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="2b20ab37-ffbe-5c65-ac0f-800abf876e16")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="44e6a87d-0ca5-53af-b199-b66bb2b98fb5")}catch(e){}}();
 import { EXIT_CODE } from "../../core/shared/constants.js";
 import { PmCliError } from "../../core/shared/errors.js";
 // Keys accepted inside a structured linked-test entry. `cmd` is an alias for
@@ -18,6 +18,7 @@ export const STRUCTURED_LINKED_TEST_KEYS = [
     "timeout",
     "timeout_seconds",
     "pm_context_mode",
+    "workspace_context_mode",
     "env_set",
     "env_clear",
     "shared_host_safe",
@@ -71,4 +72,4 @@ export function normalizeStructuredLinkedTestEntry(kv, optionName) {
     return normalizedKv;
 }
 //# sourceMappingURL=entry.js.map
-//# debugId=2b20ab37-ffbe-5c65-ac0f-800abf876e16
+//# debugId=44e6a87d-0ca5-53af-b199-b66bb2b98fb5