@unbrained/pm-cli 2026.8.25 → 2026.8.26

package/sdk/public-surface.json

@@ -1,6 +1,6 @@
 {
   "aggregate_completeness": {
-    "covered_symbols": 1796,
+    "covered_symbols": 1801,
     "excluded": [
       {
         "name": "_testOnlyCliContracts",
@@ -8,7 +8,7 @@
       }
     ],
     "missing": [],
-    "required_symbols": 1797
+    "required_symbols": 1802
   },
   "breaking_acknowledgements": [
     {
@@ -1256,6 +1256,13 @@
       ],
       "package_version": "2026.8.24",
       "reason": "Add strict requireExisting settlement mode while preserving default idempotency"
+    },
+    {
+      "changes": [
+        "signature ./sdk:validateMcpAuthorizationServerMetadata"
+      ],
+      "package_version": "2026.8.25",
+      "reason": "Covariant return refinement: existing metadata interface remains source-compatible while the validator now exposes endpoints it already requires at runtime"
     }
   ],
   "entrypoints": {
@@ -2066,6 +2073,18 @@
           "name": "assertLinkedArtifactMutationIsUnambiguous",
           "signature": "(adds: LinkedArtifact[], removes: string[], migrations?: PathMigration[]) => void | calls: (adds: LinkedArtifact[], removes: string[], migrations?: PathMigration[]) => void"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "assertMcpClientCapabilities",
+          "signature": "(requestContext: PmMcpRequestContext, requiredCapabilities: readonly string[]) => void | calls: (requestContext: PmMcpRequestContext, requiredCapabilities: readonly string[]) => void"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "assertMcpProtocolHeader",
+          "signature": "(requestContext: PmMcpRequestContext, headerValue: string | undefined) => void | calls: (requestContext: PmMcpRequestContext, headerValue: string | undefined) => void"
+        },
         {
           "classification": "supported",
           "kind": "function",
@@ -2642,6 +2661,12 @@
           "name": "attachLinkedTestProvenance",
           "signature": "(tests: LinkedTest[] | undefined, author: string, createdAt: string, sourceRef: string | undefined) => LinkedTest[] | undefined | calls: (tests: LinkedTest[] | undefined, author: string, createdAt: string, sourceRef: string | undefined) => LinkedTest[] | undefined"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "attachMcpServerInfo",
+          "signature": "<Payload extends Record<string, unknown>>(payload: Payload, serverInfo: PmMcpImplementation) => Payload & PmMcpServerResultMetadata | calls: <Payload extends Record<string, unknown>>(payload: Payload, serverInfo: PmMcpImplementation) => Payload & PmMcpServerResultMetadata"
+        },
         {
           "classification": "advanced_export",
           "kind": "function",
@@ -2690,6 +2715,12 @@
           "name": "AuthorIdentityVocabulary",
           "signature": "export interface AuthorIdentityVocabulary { version: number; aliases: Readonly<Record<string, string>>; }"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "authorizeMcpHttpRequest",
+          "signature": "(input: { headers: PmMcpHttpHeaders; requestUrl: string; policy: PmMcpHttpAuthorizationPolicy; }) => Promise<PmMcpAccessTokenClaims> | calls: (input: { headers: PmMcpHttpHeaders; requestUrl: string; policy: PmMcpHttpAuthorizationPolicy; }) => Promise<PmMcpAccessTokenClaims>"
+        },
         {
           "classification": "supported",
           "kind": "type",
@@ -2924,6 +2955,48 @@
           "name": "buildItemSchedule",
           "signature": "(item: ItemMetadata) => ItemScheduleContext | undefined | calls: (item: ItemMetadata) => ItemScheduleContext | undefined"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "buildMcpAuthorizationDiscoveryUrls",
+          "signature": "(issuer: string) => string[] | calls: (issuer: string) => string[]"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "buildMcpCompleteResult",
+          "signature": "<Payload extends Record<string, unknown>>(payload: Payload, serverInfo: PmMcpImplementation) => Payload & PmMcpResultEnvelope | calls: <Payload extends Record<string, unknown>>(payload: Payload, serverInfo: PmMcpImplementation) => Payload & PmMcpResultEnvelope"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "buildMcpDiscoverResult",
+          "signature": "(input: { serverInfo: PmMcpImplementation; capabilities: PmMcpServerCapabilities; instructions?: string; ttlMs?: number; }) => PmMcpDiscoverResult | calls: (input: { serverInfo: PmMcpImplementation; capabilities: PmMcpServerCapabilities; instructions?: string; ttlMs?: number; }) => PmMcpDiscoverResult"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "buildMcpDynamicRegistrationMetadata",
+          "signature": "(input: { redirectUris: readonly string[]; applicationType: \"native\" | \"web\"; clientName: string; }) => Record<string, unknown> | calls: (input: { redirectUris: readonly string[]; applicationType: \"native\" | \"web\"; clientName: string; }) => Record<string, unknown>"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "buildMcpHttpRequestHeaders",
+          "signature": "(input: { request: Record<string, unknown>; toolSchema?: unknown; }) => Record<string, string> | calls: (input: { request: Record<string, unknown>; toolSchema?: unknown; }) => Record<string, string>"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "buildMcpInputRequiredResult",
+          "signature": "(input: { requestContext: PmMcpRequestContext; serverInfo: PmMcpImplementation; inputRequests?: unknown; requestState?: string; }) => PmMcpInputRequiredResult | calls: (input: { requestContext: PmMcpRequestContext; serverInfo: PmMcpImplementation; inputRequests?: unknown; requestState?: string; }) => PmMcpInputRequiredResult"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "buildMcpProtectedResourceMetadata",
+          "signature": "(input: { resource: string; authorizationServers: readonly string[]; scopes?: readonly string[]; }) => PmMcpProtectedResourceMetadata | calls: (input: { resource: string; authorizationServers: readonly string[]; scopes?: readonly string[]; }) => PmMcpProtectedResourceMetadata"
+        },
         {
           "classification": "supported",
           "kind": "function",
@@ -3452,6 +3525,12 @@
           "name": "collectHierarchyRelations",
           "signature": "(items: readonly HierarchyIntegrityItem[], registry?: RelationshipKindRegistry) => HierarchyRelation[] | calls: (items: readonly HierarchyIntegrityItem[], registry?: RelationshipKindRegistry) => HierarchyRelation[]"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "collectMcpHeaderAnnotations",
+          "signature": "(schema: unknown) => PmMcpHeaderAnnotation[] | calls: (schema: unknown) => PmMcpHeaderAnnotation[]"
+        },
         {
           "classification": "supported",
           "kind": "function",
@@ -4394,6 +4473,18 @@
           "name": "createLazyModule",
           "signature": "<T>(importer: () => Promise<T>) => () => Promise<T> | calls: <T>(importer: () => Promise<T>) => () => Promise<T>"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "createMcpStaticBearerVerifier",
+          "signature": "(input: { token: string; claims: PmMcpAccessTokenClaims; }) => (token: string) => PmMcpAccessTokenClaims | calls: (input: { token: string; claims: PmMcpAccessTokenClaims; }) => (token: string) => PmMcpAccessTokenClaims"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "createMcpTaskStore",
+          "signature": "(options: PmMcpTaskStoreOptions) => PmMcpTaskStore | calls: (options: PmMcpTaskStoreOptions) => PmMcpTaskStore"
+        },
         {
           "classification": "advanced_export",
           "kind": "function",
@@ -4568,6 +4659,12 @@
           "name": "decodeHtmlEntitiesInOptions",
           "signature": "<T>(options: T) => T | calls: <T>(options: T) => T"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "decodeMcpHttpHeaderValue",
+          "signature": "(value: string, header: string) => string | calls: (value: string, header: string) => string"
+        },
         {
           "classification": "supported",
           "kind": "function",
@@ -5180,6 +5277,12 @@
           "name": "diffTestRunMeasurements",
           "signature": "(runs: ItemTestRunSummary[], name: string) => TestRunMeasurementDiff | calls: (runs: ItemTestRunSummary[], name: string) => TestRunMeasurementDiff"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "digestMcpRequestParameters",
+          "signature": "(value: unknown) => string | calls: (value: unknown) => string"
+        },
         {
           "classification": "advanced_export",
           "kind": "function",
@@ -5330,6 +5433,12 @@
           "name": "emptyImportedDocument",
           "signature": "() => ItemDocument | calls: () => ItemDocument"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "encodeMcpHttpHeaderValue",
+          "signature": "(value: string | number | boolean) => string | calls: (value: string | number | boolean) => string"
+        },
         {
           "classification": "supported",
           "kind": "function",
@@ -6074,6 +6183,24 @@
           "name": "ExtensionManifestEngines",
           "signature": "export interface ExtensionManifestEngines { pm?: string; node?: string; [engine: string]: string | undefined; }"
         },
+        {
+          "classification": "supported",
+          "kind": "interface",
+          "name": "ExtensionManifestSchemaFinding",
+          "signature": "export interface ExtensionManifestSchemaFinding { code: \"manifest_unknown_key\" | \"no_version_bounds_declared\"; path: string; suggested_key?: \"pm_min_version\" | \"pm_max_version\"; message: string; }"
+        },
+        {
+          "classification": "supported",
+          "kind": "interface",
+          "name": "ExtensionManifestSchemaInspection",
+          "signature": "export interface ExtensionManifestSchemaInspection { unknownKeys: string[]; missingVersionBounds: boolean; }"
+        },
+        {
+          "classification": "supported",
+          "kind": "interface",
+          "name": "ExtensionManifestSchemaLintResult",
+          "signature": "export interface ExtensionManifestSchemaLintResult { ok: boolean; findings: ExtensionManifestSchemaFinding[]; }"
+        },
         {
           "classification": "advanced_export",
           "kind": "function",
@@ -6272,6 +6399,12 @@
           "name": "EXTERNAL_DEPENDENCY_SOURCE_KIND_ALIAS",
           "signature": "\"external\""
         },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "extractMcpTraceContext",
+          "signature": "(params: unknown, options?: { baggageAllowlist?: readonly string[]; }) => PmMcpTraceContext | calls: (params: unknown, options?: { baggageAllowlist?: readonly string[]; }) => PmMcpTraceContext"
+        },
         {
           "classification": "advanced_export",
           "kind": "function",
@@ -6644,6 +6777,12 @@
           "name": "getActiveExtensionRegistrations",
           "signature": "() => ExtensionRegistrationRegistry | null | calls: () => ExtensionRegistrationRegistry | null"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "getActiveMcpTraceContext",
+          "signature": "() => PmMcpTraceContext | undefined | calls: () => PmMcpTraceContext | undefined"
+        },
         {
           "classification": "supported",
           "kind": "function",
@@ -7088,6 +7227,12 @@
           "name": "hashEmptyDocument",
           "signature": "() => string | calls: () => string"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "hasMcpClientExtension",
+          "signature": "(requestContext: PmMcpRequestContext, extension: string) => boolean | calls: (requestContext: PmMcpRequestContext, extension: string) => boolean"
+        },
         {
           "classification": "contract_data",
           "kind": "function",
@@ -7664,6 +7809,12 @@
           "name": "inspectCompleteListResult",
           "signature": "(candidate: unknown) => PmCompleteListInspection | calls: (candidate: unknown) => PmCompleteListInspection"
         },
+        {
+          "classification": "supported",
+          "kind": "function",
+          "name": "inspectExtensionManifestSchema",
+          "signature": "(manifest: Readonly<Record<string, unknown>>) => ExtensionManifestSchemaInspection | calls: (manifest: Readonly<Record<string, unknown>>) => ExtensionManifestSchemaInspection"
+        },
         {
           "classification": "supported",
           "kind": "value",
@@ -7724,6 +7875,12 @@
           "name": "InstallSource",
           "signature": "export type InstallSource = LocalInstallSource | GithubInstallSource | NpmInstallSource;"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "interpretMcpResultType",
+          "signature": "(result: unknown, era: PmMcpProtocolEra) => string | calls: (result: unknown, era: PmMcpProtocolEra) => string"
+        },
         {
           "classification": "supported",
           "kind": "function",
@@ -7748,12 +7905,24 @@
           "name": "isExternalDependencySourceKind",
           "signature": "(sourceKind: string | undefined) => boolean | calls: (sourceKind: string | undefined) => boolean"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "isFileMissingError",
+          "signature": "(error: unknown) => boolean | calls: (error: unknown) => boolean"
+        },
         {
           "classification": "advanced_export",
           "kind": "function",
           "name": "isHostOutputSuppressed",
           "signature": "(value: unknown) => value is SuppressedHostOutput | calls: (value: unknown) => value is SuppressedHostOutput"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "isMcpRecord",
+          "signature": "(value: unknown) => value is Record<string, unknown> | calls: (value: unknown) => value is Record<string, unknown>"
+        },
         {
           "classification": "supported",
           "kind": "function",
@@ -8222,6 +8391,12 @@
           "name": "LintExtensionBlueprintOptions",
           "signature": "export interface LintExtensionBlueprintOptions { declaredCapabilities?: readonly string[]; }"
         },
+        {
+          "classification": "supported",
+          "kind": "function",
+          "name": "lintExtensionManifestSchema",
+          "signature": "(manifest: Readonly<Record<string, unknown>>) => ExtensionManifestSchemaLintResult | calls: (manifest: Readonly<Record<string, unknown>>) => ExtensionManifestSchemaLintResult"
+        },
         {
           "classification": "supported",
           "kind": "function",
@@ -9224,6 +9399,12 @@
           "name": "openDurableGraphCache",
           "signature": "(pmRoot: string, fingerprint: string) => Promise<DurableGraphCacheView> | calls: (pmRoot: string, fingerprint: string) => Promise<DurableGraphCacheView>"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "openMcpRequestState",
+          "signature": "(value: string, secret: string | Uint8Array, expected: { method: string; parameterDigest: string; principal: string; nowMs?: number; }) => PmMcpRequestStatePayload | calls: (value: string, secret: string | Uint8Array, expected: { method: string; parameterDigest: string; principal: string; nowMs?: number; }) => PmMcpRequestStatePayload"
+        },
         {
           "classification": "contract_data",
           "kind": "type",
@@ -9626,6 +9807,36 @@
           "name": "parseLinkedTestWorkspaceContextMode",
           "signature": "(raw: string | undefined, optionName: string) => LinkedTest[\"workspace_context_mode\"] | undefined | calls: (raw: string | undefined, optionName: string) => LinkedTest[\"workspace_context_mode\"] | undefined"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "parseMcpCachePolicy",
+          "signature": "(value: PmMcpCachePolicy) => PmMcpCachePolicy | calls: (value: PmMcpCachePolicy) => PmMcpCachePolicy"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "parseMcpImplementation",
+          "signature": "(value: unknown) => PmMcpImplementation | undefined | calls: (value: unknown) => PmMcpImplementation | undefined"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "parseMcpInputRequests",
+          "signature": "(value: unknown, requestContext: PmMcpRequestContext) => PmMcpInputRequests | calls: (value: unknown, requestContext: PmMcpRequestContext) => PmMcpInputRequests"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "parseMcpInputResponses",
+          "signature": "(value: unknown) => PmMcpInputResponses | calls: (value: unknown) => PmMcpInputResponses"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "parseMcpSubscriptionFilter",
+          "signature": "(value: unknown) => PmMcpSubscriptionFilter | calls: (value: unknown) => PmMcpSubscriptionFilter"
+        },
         {
           "classification": "advanced_export",
           "kind": "function",
@@ -10196,18 +10407,78 @@
           "name": "PM_ITEM_ACTION_SUBCOMMANDS",
           "signature": "readonly [\"reopen\"]"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "value",
+          "name": "PM_MCP_ERROR_CODES",
+          "signature": "{ readonly headerMismatch: -32020; readonly missingRequiredClientCapability: -32021; readonly unsupportedProtocolVersion: -32022; readonly invalidParams: -32602; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "value",
+          "name": "PM_MCP_HTTP_PROTOCOL_VERSION",
+          "signature": "\"2026-07-28\""
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "value",
+          "name": "PM_MCP_INPUT_REQUEST_METHODS",
+          "signature": "readonly [\"elicitation/create\", \"roots/list\", \"sampling/createMessage\"]"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "value",
+          "name": "PM_MCP_LEGACY_PROTOCOL_VERSIONS",
+          "signature": "readonly [\"2025-06-18\"]"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "value",
+          "name": "PM_MCP_META_KEYS",
+          "signature": "{ readonly clientCapabilities: \"io.modelcontextprotocol/clientCapabilities\"; readonly clientInfo: \"io.modelcontextprotocol/clientInfo\"; readonly protocolVersion: \"io.modelcontextprotocol/protocolVersion\"; readonly serverInfo: \"io.modelcontextprotocol/serverInfo\"; }"
+        },
         {
           "classification": "advanced_export",
           "kind": "value",
           "name": "PM_MCP_PROMPT_CONTRACTS",
           "signature": "readonly PmMcpPromptContract[]"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "value",
+          "name": "PM_MCP_PROTOCOL_VERSION",
+          "signature": "\"2026-07-28\""
+        },
         {
           "classification": "advanced_export",
           "kind": "value",
           "name": "PM_MCP_RESOURCE_CONTRACTS",
           "signature": "readonly PmMcpResourceContract[]"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "value",
+          "name": "PM_MCP_SUBSCRIPTION_ID_META_KEY",
+          "signature": "\"io.modelcontextprotocol/subscriptionId\""
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "value",
+          "name": "PM_MCP_SUPPORTED_PROTOCOL_VERSIONS",
+          "signature": "readonly [\"2026-07-28\"]"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "value",
+          "name": "PM_MCP_TASK_STATUSES",
+          "signature": "readonly [\"working\", \"input_required\", \"completed\", \"failed\", \"cancelled\"]"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "value",
+          "name": "PM_MCP_TASKS_EXTENSION",
+          "signature": "\"io.modelcontextprotocol/tasks\""
+        },
         {
           "classification": "advanced_export",
           "kind": "value",
@@ -10352,12 +10623,24 @@
           "name": "PM_REFUSAL_CLOSURE_EXECUTABLE_CANONICAL_CODE_BASELINE",
           "signature": "readonly [\"bulk_ids_input_empty\", \"bulk_ids_input_missing_path\", \"bulk_ids_input_unreadable\", \"invalid_argument_value\", \"missing_lifecycle_target\", \"missing_required_argument\", \"projection_options_mutually_exclusive\", \"tracker_not_initialized\", \"tracker_root_missing\", \"tracker_root_not_directory\", \"tracker_root_unreadable\", \"unknown_context_intent\", \"unknown_field_projection\", \"unknown_option\", \"unknown_subcommand\"]"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "value",
+          "name": "PM_REFUSAL_CLOSURE_EXECUTABLE_CANONICAL_CODE_BASELINE_V2",
+          "signature": "readonly string[]"
+        },
         {
           "classification": "advanced_export",
           "kind": "value",
           "name": "PM_REFUSAL_CLOSURE_EXECUTABLE_CODE_BASELINE",
           "signature": "16"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "value",
+          "name": "PM_REFUSAL_CLOSURE_EXECUTABLE_CODE_BASELINE_V2",
+          "signature": "18"
+        },
         {
           "classification": "advanced_export",
           "kind": "value",
@@ -10952,6 +11235,126 @@
           "name": "PmGrammarRefusalObservation",
           "signature": "export interface PmGrammarRefusalObservation { probe_id: string; error_code: string; exit_code: number; allowed_values: readonly string[]; recovery_succeeded: boolean; refusal_mutated_state: boolean; mutated_paths?: readonly string[]; }"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmMcpAccessTokenClaims",
+          "signature": "export interface PmMcpAccessTokenClaims { principal: string; issuer: string; audience: string | string[]; scopes: string[]; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "class",
+          "name": "PmMcpAuthorizationError",
+          "signature": "export declare class PmMcpAuthorizationError extends Error { readonly httpStatus: 401 | 403; readonly challenge?: string; constructor(message: string, httpStatus: 401 | 403, challenge?: string); }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmMcpAuthorizationServerMetadata",
+          "signature": "export interface PmMcpAuthorizationServerMetadata { issuer: string; authorization_endpoint?: string; token_endpoint?: string; code_challenge_methods_supported: string[]; client_id_metadata_document_supported?: boolean; registration_endpoint?: string; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmMcpCachePolicy",
+          "signature": "export interface PmMcpCachePolicy { ttlMs: number; cacheScope: \"private\" | \"public\"; [key: string]: unknown; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "type",
+          "name": "PmMcpClientCapabilities",
+          "signature": "export type PmMcpClientCapabilities = Record<string, unknown>;"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "type",
+          "name": "PmMcpClientRegistrationMode",
+          "signature": "export type PmMcpClientRegistrationMode = \"pre_registered\" | \"client_id_metadata_document\" | \"dynamic\" | \"user_supplied\";"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "type",
+          "name": "PmMcpCreateTaskResult",
+          "signature": "export type PmMcpCreateTaskResult = PmMcpTask & { resultType: \"task\"; };"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "type",
+          "name": "PmMcpDetailedTask",
+          "signature": "export type PmMcpDetailedTask = (PmMcpTask & { status: \"working\"; }) | (PmMcpTask & { status: \"input_required\"; inputRequests: PmMcpInputRequests; }) | (PmMcpTask & { status: \"completed\"; result: Record<string, unknown>; }) | (PmMcpTask & { status: \"failed\"; error: PmMcpTaskError; }) | (PmMcpTask & { status: \"cancelled\"; });"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmMcpDiscoverResult",
+          "signature": "export interface PmMcpDiscoverResult extends PmMcpResultEnvelope { supportedVersions: string[]; capabilities: PmMcpServerCapabilities; ttlMs: number; cacheScope: \"public\"; instructions?: string; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmMcpHeaderAnnotation",
+          "signature": "export interface PmMcpHeaderAnnotation { name: string; path: string[]; type: \"boolean\" | \"integer\" | \"string\"; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmMcpHttpAuthorizationPolicy",
+          "signature": "export interface PmMcpHttpAuthorizationPolicy { issuer: string; resource: string; requiredScopes?: string[]; resourceMetadataUrl: string; verifyAccessToken: (token: string) => PmMcpAccessTokenClaims | Promise<PmMcpAccessTokenClaims>; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "type",
+          "name": "PmMcpHttpHeaders",
+          "signature": "export type PmMcpHttpHeaders = Record<string, string | readonly string[] | undefined>;"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmMcpImplementation",
+          "signature": "export interface PmMcpImplementation { name: string; version: string; description?: string; websiteUrl?: string; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmMcpInputRequest",
+          "signature": "export interface PmMcpInputRequest { method: (typeof PM_MCP_INPUT_REQUEST_METHODS)[number]; params: Record<string, unknown>; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "type",
+          "name": "PmMcpInputRequests",
+          "signature": "export type PmMcpInputRequests = Record<string, PmMcpInputRequest>;"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "class",
+          "name": "PmMcpInputRequiredError",
+          "signature": "export declare class PmMcpInputRequiredError extends Error { readonly inputRequests?: unknown; readonly requestState?: string; constructor(input: { inputRequests?: unknown; requestState?: string; }); }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmMcpInputRequiredResult",
+          "signature": "export interface PmMcpInputRequiredResult { resultType: \"input_required\"; inputRequests?: PmMcpInputRequests; requestState?: string; _meta: { \"io.modelcontextprotocol/serverInfo\": PmMcpImplementation; }; [key: string]: unknown; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "type",
+          "name": "PmMcpInputResponses",
+          "signature": "export type PmMcpInputResponses = Record<string, Record<string, unknown>>;"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "class",
+          "name": "PmMcpIssuerCredentialStore",
+          "signature": "export declare class PmMcpIssuerCredentialStore<Credential extends Record<string, unknown>> { #private; set(issuer: string, credential: Credential): void; get(issuer: string): Credential | undefined; delete(issuer: string): boolean; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmMcpJsonSchemaBounds",
+          "signature": "export interface PmMcpJsonSchemaBounds { maxBytes?: number; maxDepth?: number; maxNodes?: number; }"
+        },
         {
           "classification": "advanced_export",
           "kind": "interface",
@@ -10964,18 +11367,144 @@
           "name": "PmMcpPromptContract",
           "signature": "export interface PmMcpPromptContract { name: string; description: string; arguments: readonly PmMcpPromptArgumentContract[]; template: string; }"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmMcpProtectedResourceMetadata",
+          "signature": "export interface PmMcpProtectedResourceMetadata { resource: string; authorization_servers: string[]; scopes_supported?: string[]; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "type",
+          "name": "PmMcpProtocolEra",
+          "signature": "export type PmMcpProtocolEra = \"modern\" | \"legacy\";"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "class",
+          "name": "PmMcpProtocolError",
+          "signature": "export declare class PmMcpProtocolError extends Error { readonly code: number; readonly data: Record<string, unknown>; constructor(message: string, code: number, data?: Record<string, unknown>); }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmMcpRequestContext",
+          "signature": "export interface PmMcpRequestContext { protocolVersion: (typeof PM_MCP_SUPPORTED_PROTOCOL_VERSIONS)[number]; clientCapabilities: PmMcpClientCapabilities; clientInfo?: PmMcpImplementation; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmMcpRequestStatePayload",
+          "signature": "export interface PmMcpRequestStatePayload { expiresAt: number; method: string; parameterDigest: string; principal: string; state: unknown; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "class",
+          "name": "PmMcpRequestStateReplayGuard",
+          "signature": "export declare class PmMcpRequestStateReplayGuard { #private; constructor(maximumEntries?: number); consume(value: string): void; }"
+        },
         {
           "classification": "advanced_export",
           "kind": "interface",
           "name": "PmMcpResourceContract",
           "signature": "export interface PmMcpResourceContract { uri: string; name: string; description: string; mimeType: \"application/json\" | \"text/markdown\"; }"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmMcpResultEnvelope",
+          "signature": "export interface PmMcpResultEnvelope { resultType: \"complete\"; _meta: { \"io.modelcontextprotocol/serverInfo\": PmMcpImplementation; }; [key: string]: unknown; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmMcpServerCapabilities",
+          "signature": "export interface PmMcpServerCapabilities { prompts?: { listChanged?: boolean; }; resources?: { listChanged?: boolean; subscribe?: boolean; }; tools?: { listChanged?: boolean; }; extensions?: Record<string, Record<string, unknown>>; [key: string]: unknown; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmMcpServerResultMetadata",
+          "signature": "export interface PmMcpServerResultMetadata { _meta: { \"io.modelcontextprotocol/serverInfo\": PmMcpImplementation; [key: string]: unknown; }; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmMcpSubscriptionFilter",
+          "signature": "export interface PmMcpSubscriptionFilter { toolsListChanged?: boolean; promptsListChanged?: boolean; resourcesListChanged?: boolean; resourceSubscriptions?: string[]; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "type",
+          "name": "PmMcpSubscriptionId",
+          "signature": "export type PmMcpSubscriptionId = string | number;"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmMcpSubscriptionNotification",
+          "signature": "export interface PmMcpSubscriptionNotification { jsonrpc: \"2.0\"; method: string; params: Record<string, unknown>; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "class",
+          "name": "PmMcpSubscriptionRegistry",
+          "signature": "export declare class PmMcpSubscriptionRegistry { #private; constructor(input: { capabilities: PmMcpServerCapabilities; serverInfo: PmMcpImplementation; }); get size(): number; open(input: { id: PmMcpSubscriptionId; notifications: unknown; sink: PmMcpSubscriptionSink; }): Promise<PmMcpSubscriptionFilter>; emitListChanged(family: \"tools\" | \"prompts\" | \"resources\"): Promise<number>; emitResourceUpdated(uri: string): Promise<number>; close(id: PmMcpSubscriptionId): Record<string, unknown> | undefined; closeAll(): Array<{ id: PmMcpSubscriptionId; result: Record<string, unknown>; }>; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "type",
+          "name": "PmMcpSubscriptionSink",
+          "signature": "export type PmMcpSubscriptionSink = (notification: PmMcpSubscriptionNotification) => void | Promise<void>;"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmMcpTask",
+          "signature": "export interface PmMcpTask { taskId: string; status: PmMcpTaskStatus; statusMessage?: string; createdAt: string; lastUpdatedAt: string; ttlMs: number | null; pollIntervalMs?: number; [key: string]: unknown; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmMcpTaskError",
+          "signature": "export interface PmMcpTaskError { code: number; message: string; data?: Record<string, unknown>; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "type",
+          "name": "PmMcpTaskStatus",
+          "signature": "export type PmMcpTaskStatus = (typeof PM_MCP_TASK_STATUSES)[number];"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "class",
+          "name": "PmMcpTaskStore",
+          "signature": "export declare class PmMcpTaskStore { #private; constructor(options: PmMcpTaskStoreOptions); create(input: { principal: string; ttlMs?: number | null; pollIntervalMs?: number; statusMessage?: string; }): Promise<PmMcpCreateTaskResult>; get(taskId: string, principal: string): Promise<PmMcpDetailedTask>; requireInput(input: { taskId: string; principal: string; requestContext: PmMcpRequestContext; inputRequests: unknown; statusMessage?: string; }): Promise<PmMcpDetailedTask>; update(taskId: string, principal: string, inputResponses: unknown): Promise<{ acceptedKeys: string[]; remainingKeys: string[]; }>; takeInputResponses(taskId: string, principal: string): Promise<PmMcpInputResponses>; complete(taskId: string, principal: string, result: Record<string, unknown>): Promise<PmMcpDetailedTask>; fail(taskId: string, principal: string, error: PmMcpTaskError): Promise<PmMcpDetailedTask>; cancel(taskId: string, principal: string): Promise<PmMcpDetailedTask>; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmMcpTaskStoreOptions",
+          "signature": "export interface PmMcpTaskStoreOptions { pmRoot: string; owner?: string; now?: () => Date; taskIdFactory?: () => string; workerPid?: number; }"
+        },
         {
           "classification": "advanced_export",
           "kind": "type",
           "name": "PmMcpToolProfile",
           "signature": "export type PmMcpToolProfile = \"core\" | \"standard\" | \"full\" | \"custom\";"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmMcpTraceContext",
+          "signature": "export interface PmMcpTraceContext { traceparent?: string; tracestate?: string; baggage?: string; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmMcpValidatedAuthorizationServerMetadata",
+          "signature": "export interface PmMcpValidatedAuthorizationServerMetadata extends PmMcpAuthorizationServerMetadata { authorization_endpoint: string; token_endpoint: string; }"
+        },
         {
           "classification": "contract_data",
           "kind": "type",
@@ -13670,6 +14199,18 @@
           "name": "resolveLinkedTestTrustBatch",
           "signature": "(pmRoot: string, tests: LinkedTest[], currentSourceRef?: string) => Promise<LinkedTestTrustDecision[]> | calls: (pmRoot: string, tests: LinkedTest[], currentSourceRef?: string) => Promise<LinkedTestTrustDecision[]>"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "resolveMcpAcknowledgedSubscriptionFilter",
+          "signature": "(requested: PmMcpSubscriptionFilter, capabilities: PmMcpServerCapabilities) => PmMcpSubscriptionFilter | calls: (requested: PmMcpSubscriptionFilter, capabilities: PmMcpServerCapabilities) => PmMcpSubscriptionFilter"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "resolveMcpRequestContext",
+          "signature": "(params: unknown) => PmMcpRequestContext | calls: (params: unknown) => PmMcpRequestContext"
+        },
         {
           "classification": "supported",
           "kind": "function",
@@ -14906,6 +15447,12 @@
           "name": "runWithHarnessDetectionSignals",
           "signature": "<T>(signals: HarnessDetectionSignals, callback: () => T) => T | calls: <T>(signals: HarnessDetectionSignals, callback: () => T) => T"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "runWithMcpTraceContext",
+          "signature": "<Result>(context: PmMcpTraceContext, callback: () => Result) => Result | calls: <Result>(context: PmMcpTraceContext, callback: () => Result) => Result"
+        },
         {
           "classification": "advanced_export",
           "kind": "function",
@@ -15392,6 +15939,12 @@
           "name": "SdkCliParameterDisposition",
           "signature": "export type SdkCliParameterDisposition = \"shared\" | \"compatibility_alias\" | \"cli_transport\" | \"cli_presentation\" | \"cli_adapter\" | \"cli_scope_selector\" | \"sdk_transport\" | \"cli_positional\" | \"sdk_native\" | \"unclassified\";"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "sealMcpRequestState",
+          "signature": "(payload: PmMcpRequestStatePayload, secret: string | Uint8Array) => string | calls: (payload: PmMcpRequestStatePayload, secret: string | Uint8Array) => string"
+        },
         {
           "classification": "supported",
           "kind": "function",
@@ -15560,6 +16113,12 @@
           "name": "selectImportAuthor",
           "signature": "(explicitAuthor: string | undefined, settingsAuthor: string) => string | calls: (explicitAuthor: string | undefined, settingsAuthor: string) => string"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "selectMcpClientRegistrationMode",
+          "signature": "(input: { hasPreRegisteredClient: boolean; metadata: Pick<PmMcpAuthorizationServerMetadata, \"client_id_metadata_document_supported\" | \"registration_endpoint\">; }) => PmMcpClientRegistrationMode | calls: (input: { hasPreRegisteredClient: boolean; metadata: Pick<PmMcpAuthorizationServerMetadata, \"client_id_metadata_document_supported\" | \"registration_endpoint\">; }) => PmMcpClientRegistrationMode"
+        },
         {
           "classification": "supported",
           "kind": "function",
@@ -16934,6 +17493,36 @@
           "name": "validateLinkedPaths",
           "signature": "(paths: string[], workspaceRoot?: string) => Promise<LinkedPathValidation> | calls: (paths: string[], workspaceRoot?: string) => Promise<LinkedPathValidation>"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "validateMcpAuthorizationResponseIssuer",
+          "signature": "(input: { expectedIssuer: string; responseIssuer?: string; issuerParameterSupported?: boolean; }) => void | calls: (input: { expectedIssuer: string; responseIssuer?: string; issuerParameterSupported?: boolean; }) => void"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "validateMcpAuthorizationServerMetadata",
+          "signature": "(value: unknown, expectedIssuer: string) => PmMcpValidatedAuthorizationServerMetadata | calls: (value: unknown, expectedIssuer: string) => PmMcpValidatedAuthorizationServerMetadata"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "validateMcpClientMetadataDocument",
+          "signature": "(value: unknown, documentUrl: string) => Record<string, unknown> | calls: (value: unknown, documentUrl: string) => Record<string, unknown>"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "validateMcpHttpRequestHeaders",
+          "signature": "(input: { headers: PmMcpHttpHeaders; request: Record<string, unknown>; toolSchema?: unknown; }) => void | calls: (input: { headers: PmMcpHttpHeaders; request: Record<string, unknown>; toolSchema?: unknown; }) => void"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "validateMcpJsonSchema",
+          "signature": "(schema: unknown, bounds?: PmMcpJsonSchemaBounds) => unknown | calls: (schema: unknown, bounds?: PmMcpJsonSchemaBounds) => unknown"
+        },
         {
           "classification": "supported",
           "kind": "function",
@@ -17144,6 +17733,12 @@
           "name": "withHostEnvironmentBoundary",
           "signature": "<T>(operation: string, run: () => Promise<T>, options?: HostEnvironmentBoundaryOptions) => Promise<T> | calls: <T>(operation: string, run: () => Promise<T>, options?: HostEnvironmentBoundaryOptions) => Promise<T>"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "withMcpCachePolicy",
+          "signature": "<Payload extends Record<string, unknown>>(payload: Payload, policy: PmMcpCachePolicy) => Payload & PmMcpCachePolicy | calls: <Payload extends Record<string, unknown>>(payload: Payload, policy: PmMcpCachePolicy) => Payload & PmMcpCachePolicy"
+        },
         {
           "classification": "supported",
           "kind": "interface",
@@ -18056,6 +18651,24 @@
           "name": "ExtensionManifestEngines",
           "signature": "export interface ExtensionManifestEngines { pm?: string; node?: string; [engine: string]: string | undefined; }"
         },
+        {
+          "classification": "supported",
+          "kind": "interface",
+          "name": "ExtensionManifestSchemaFinding",
+          "signature": "export interface ExtensionManifestSchemaFinding { code: \"manifest_unknown_key\" | \"no_version_bounds_declared\"; path: string; suggested_key?: \"pm_min_version\" | \"pm_max_version\"; message: string; }"
+        },
+        {
+          "classification": "supported",
+          "kind": "interface",
+          "name": "ExtensionManifestSchemaInspection",
+          "signature": "export interface ExtensionManifestSchemaInspection { unknownKeys: string[]; missingVersionBounds: boolean; }"
+        },
+        {
+          "classification": "supported",
+          "kind": "interface",
+          "name": "ExtensionManifestSchemaLintResult",
+          "signature": "export interface ExtensionManifestSchemaLintResult { ok: boolean; findings: ExtensionManifestSchemaFinding[]; }"
+        },
         {
           "classification": "supported",
           "kind": "interface",
@@ -18224,6 +18837,12 @@
           "name": "ImportExportRegistrationOptions",
           "signature": "export interface ImportExportRegistrationOptions { action?: string; description?: string; intent?: string; examples?: string[]; failure_hints?: string[]; arguments?: ExtensionCommandArgumentDefinition[]; flags?: FlagDefinition[]; }"
         },
+        {
+          "classification": "supported",
+          "kind": "function",
+          "name": "inspectExtensionManifestSchema",
+          "signature": "(manifest: Readonly<Record<string, unknown>>) => ExtensionManifestSchemaInspection | calls: (manifest: Readonly<Record<string, unknown>>) => ExtensionManifestSchemaInspection"
+        },
         {
           "classification": "supported",
           "kind": "function",
@@ -18236,6 +18855,12 @@
           "name": "LintExtensionBlueprintOptions",
           "signature": "export interface LintExtensionBlueprintOptions { declaredCapabilities?: readonly string[]; }"
         },
+        {
+          "classification": "supported",
+          "kind": "function",
+          "name": "lintExtensionManifestSchema",
+          "signature": "(manifest: Readonly<Record<string, unknown>>) => ExtensionManifestSchemaLintResult | calls: (manifest: Readonly<Record<string, unknown>>) => ExtensionManifestSchemaLintResult"
+        },
         {
           "classification": "supported",
           "kind": "function",
@@ -30686,6 +31311,7 @@
     "manifest_unknown_key",
     "mcp_annotation_file_unavailable",
     "mcp_stdin_unavailable",
+    "mcp_task_not_found_or_not_authorized",
     "merge_conflict_markers_detected",
     "merge_decisions_unreviewed",
     "merge_git_config_unwritable",