@unbrained/pm-cli 2026.8.28 → 2026.8.29

package/docs/CONTEXT_RECOVERY_PRIMITIVES.md

@@ -0,0 +1,67 @@
+# Context Integrity and Recovery Primitives
+
+Tracker: [pm-hu92i3](../.agents/pm/issues/pm-hu92i3.toon), [pm-nc94mk](../.agents/pm/issues/pm-nc94mk.toon), [pm-xrjy8o](../.agents/pm/issues/pm-xrjy8o.toon), [pm-f60039](../.agents/pm/issues/pm-f60039.toon), [pm-2qahia](../.agents/pm/issues/pm-2qahia.toon), [pm-z1z96w](../.agents/pm/issues/pm-z1z96w.toon), [pm-yhle2e](../.agents/pm/issues/pm-yhle2e.toon), [pm-t7wl00](../.agents/pm/issues/pm-t7wl00.toon), [pm-hiqlkh](../.agents/pm/issues/pm-hiqlkh.toon), [pm-ntnv4k](../.agents/pm/issues/pm-ntnv4k.toon), [pm-sxg7wl](../.agents/pm/issues/pm-sxg7wl.toon), [pm-xspd](../.agents/pm/chores/pm-xspd.toon)
+
+`project management = context management`: a successful command is useful only when the context it records and later returns is truthful, lossless, and actionable. These SDK-owned primitives are shared by the CLI and package integrations.
+
+## Lossless structured values
+
+CSV-style structured metadata preserves whitespace following literal commas. An escaped comma (`\,`) is consumed as one literal comma. Prefer quoted or structured forms when a value itself contains delimiters:
+
+```bash
+pm files pm-123 --add 'path="docs/name,with-comma.md",scope=project'
+pm update pm-123 --annotation 'key=summary,value=Alpha\, beta'
+```
+
+Bare comma-separated file and documentation paths are refused because the CLI cannot know whether the comma separates two paths or belongs to one filename. Repeat the option for multiple values. A linked-test command followed by a structured tuple, such as `command,scope=project`, is refused for the same reason; use `command=<value>,scope=project`.
+
+## Linked path write receipts
+
+`pm files --add`, `pm docs --add`, and path migrations validate the resulting paths when the mutation changes stored metadata. The result includes `validation.missing_paths`, `validation.non_file_paths`, and `validation.remote_references`. Missing local paths remain permitted as deliberate forward references, but they are visible in the write receipt instead of becoming silent durable context.
+
+## Executed-test evidence
+
+A linked runner command carrying a name filter must execute at least one test. An explicit zero-test runner summary is classified as `failure_category: empty_run`, even when the process exits zero. A zero-pass count alone is not an empty-run receipt when the runner reports a positive test count. Filtered commands without either positive execution evidence or an explicit zero-test signal fail closed as `missing_positive_execution_receipt`; unfiltered commands retain the explicit `--fail-on-empty-test-run` policy.
+
+## External blockers
+
+URL and named external locators are not dangling local item identifiers. Validation excludes them from local dangling-reference remediation, and graph assembly materializes them as external predecessor nodes. Until an integration resolves the remote state, `pm next` retains the blocker and reports:
+
+- `external: true`
+- `blocked_since`: the holder's conservative last-mutation timestamp
+- `resolver: null`
+
+This makes an unverifiable or stale dependency visible without suggesting destructive removal.
+
+Packages can add provider-specific resolution without coupling core to GitHub, Jira, Linear, or another service. Register an `ExternalDependencyResolver` through the public SDK and dispose it when the package deactivates. The SDK normalizes lifecycle state to `open`, `closed`, or `unknown`; caps remote titles at 240 characters and evidence locators at 2,048 characters; records `checked_at` plus the registered resolver name; and treats only trusted `closed` evidence as resolved. Provider errors and unsupported locators fail closed so another registered resolver can handle the reference or the blocker remains explicitly unverifiable.
+
+## Package-manager receipt compatibility
+
+The npm package source accepts both documented receipt families:
+
+- npm 11: an array of package receipt objects
+- npm 12: an object keyed by package name
+
+When multiple entries exist, the SDK selects the requested package by key or `name`. A well-formed but unsupported or ambiguous JSON value fails with `npm_pack_json_shape_unsupported`; filename-only fallback is used only for genuinely non-JSON legacy output.
+
+## History and merge recovery
+
+History hash capability 3 distinguishes the current canonical writer surface from older epoch-2 writers while retaining readers for epochs 1 and 2. An unsupported epoch is version skew, not permission to reinterpret or silently normalize history.
+
+Health keeps the metadata-only cache path for clean history streams. A cached hash mismatch, chain mismatch, or writer-version skew is only a candidate: health rereads canonical item sources and verifies stream content hashes before reporting corruption. The `history_drift` details expose `cache_confirmation` candidate, confirmed, and resolved-false-positive item sets, while `cache_hit_verification: metadata_then_content_hash` identifies the authoritative fallback. Drift-cache envelopes also carry the current item-hash capability, so a runtime with incompatible hash semantics rebuilds the cache instead of trusting it.
+
+Merge reconciliation may consume a durable hash-only receipt without `--force` only when its canonical item path, complete declared-field set, and every merged-value hash exactly match the current item snapshot. Raw discarded values remain clone-local. Any incomplete or mismatched proof fails closed.
+
+## Strict-create recovery
+
+When strict governance requires a collection, the recovery bundle lists the truthful empty declaration before an example that adds metadata:
+
+```text
+--clear-deps, --dep, --create-mode progressive
+```
+
+The same contract covers comments, docs, events, files, learnings, notes, reminders, tests, and type options. Agents should never invent an edge or evidence row merely to satisfy a required-field gate.
+
+## Duplication gates
+
+`pnpm lint:duplicates` runs both the repository-wide clone gate and a lower-line production-source profile. The source profile covers `src`, `packages`, and `plugins` so a compact clone reported by hosted analysis cannot hide below the broader repository threshold.

package/docs/MERGE_SAFETY.md

@@ -3,7 +3,9 @@
 Tracked by [pm-wc1r](../.agents/pm/features/pm-wc1r.toon), with the integrity and concurrency fixes [pm-9q2t](../.agents/pm/issues/pm-9q2t.toon), [pm-cxyv](../.agents/pm/issues/pm-cxyv.toon), [pm-gpo7](../.agents/pm/issues/pm-gpo7.toon), [pm-m3nl](../.agents/pm/issues/pm-m3nl.toon), [pm-wwfd](../.agents/pm/issues/pm-wwfd.toon), and [pm-xdn6](../.agents/pm/issues/pm-xdn6.toon). Fresh-init fence ownership is tracked by [pm-1w3ljt](../.agents/pm/issues/pm-1w3ljt.toon); runtime-cache index governance by [pm-hous](../.agents/pm/issues/pm-hous.toon); local allocation safety by [pm-khdq](../.agents/pm/issues/pm-khdq.toon); fence-coverage completeness and drift detection by [pm-i4fx](../.agents/pm/issues/pm-i4fx.toon); package-defined item coverage by [pm-5rexki](../.agents/pm/issues/pm-5rexki.toon); non-item JSON coverage by [pm-gjicmx](../.agents/pm/issues/pm-gjicmx.toon); portable driver identity by [pm-w91mvg](../.agents/pm/issues/pm-w91mvg.toon); pending receipt validation by [pm-ysqb6n](../.agents/pm/issues/pm-ysqb6n.toon); receipt classification by [pm-jtwsct](../.agents/pm/issues/pm-jtwsct.toon); direction-independent item conflict selection by [pm-dlx7v7](../.agents/pm/issues/pm-dlx7v7.toon); corrected reconciliation guidance by [pm-lwmstb](../.agents/pm/issues/pm-lwmstb.toon); cross-branch id collision safety by [pm-pibw](../.agents/pm/issues/pm-pibw.toon); auditable merge history by [pm-9j2r3b](../.agents/pm/tasks/pm-9j2r3b.toon); durable conflict decisions by [pm-rh98vo](../.agents/pm/issues/pm-rh98vo.toon); continuous conformance by [pm-76dnfg](../.agents/pm/tasks/pm-76dnfg.toon); workspace-wide CI enforcement by [pm-pdr8t1](../.agents/pm/tasks/pm-pdr8t1.toon); post-merge reconciliation by [pm-mfkv92](../.agents/pm/issues/pm-mfkv92.toon); linked-command execution trust by [pm-ed28wi](../.agents/pm/issues/pm-ed28wi.toon); this repository's own adoption by [pm-iwsj](../.agents/pm/chores/pm-iwsj.toon).
 
 Lossless receipt health gating is tracked by
-[pm-baksix](../.agents/pm/issues/pm-baksix.toon).
+[pm-baksix](../.agents/pm/issues/pm-baksix.toon), and executable remediation
+that performs settlement is tracked by
+[pm-r0p3at](../.agents/pm/issues/pm-r0p3at.toon).
 
 pm stores project context as reviewable repository files. Concurrent agents can therefore use ordinary branches and worktrees, but tracker artifacts need semantic merge behavior: raw line merging cannot preserve TOON collection counts, JSON object structure, or append-only history hash chains.
 
@@ -116,7 +118,7 @@ After every branch merge that touches `.agents/pm`, run:
 ```bash
 pm merge reconcile --dry-run --json
 pm merge reconcile --message "Reconcile merged tracker histories" --json
-# Required only after every discarded field has been reviewed or re-applied:
+# Required only to accept a receipt that lacks qualifying exact hash proof:
 pm merge reconcile --force --message "Accept reviewed merge decisions" --json
 ```
 
@@ -125,10 +127,10 @@ Lossless receipts do not become discarded-value decisions and reconcile without
 `--force`, but `pm health` reports `merge_receipts_pending:<n>` and remains
 non-green until the apply pass settles them. `pm history-repair` cannot clear
 that receipt finding. When a drifted item also has a pending receipt, the
-`history_drift` remediation map prioritizes `pm merge reconcile --dry-run` only
+`history_drift` remediation map prioritizes `pm merge reconcile` only
 when canonical item path, changed-field, and merged-value hash evidence all
 attribute that finding to one or more receipts loaded from the clone-local Git
-evidence store. Every field declared by each receipt must match its current merged-value
+evidence store or the authoritative durable receipt store. Every field declared by each receipt must match its current merged-value
 hash, even when only a subset appears in the history reconciliation diff.
 Disjoint valid receipts may collectively cover a multi-field reconciliation;
 the audit and settlement then retain every individually proven receipt id.
@@ -136,22 +138,33 @@ Serialized source claims are ignored. Receipt readers validate the complete
 bounded schema, safe identifiers, filename and item-path identity, timestamps,
 and bounded decision structure before a sidecar enters health or
 reconciliation. Reads use size-preflighted, no-follow regular-file descriptors;
-durable decisions must retain hash-only values. Legacy or durable-only receipts,
+durable decisions must retain hash-only values. Qualifying durable-only receipts
+are reloaded from the authoritative store and accepted only after exact canonical
+item path, declared-field, and merged-value hash verification. Legacy receipts,
 receipts whose declared fields disagree with their hashes, same-item tampering,
 and drift on unrelated items fail closed to the normal `pm history-repair`
-guidance. Health indexes clone-local evidence once by item and reconciliation
+guidance. Health indexes authoritative evidence once by item and reconciliation
 uses the same per-item groups with a fixed receipt-only worker pool, so committed
 sidecars cannot amplify drift scans into unbounded parallel repair work.
+The machine-executable remediation names the apply command because `--dry-run`
+returns a successful preview without changing the red health state. Operators
+may still run the documented dry-run first; agents that execute the remediation
+field verbatim perform the settlement instead of entering a successful no-op
+loop.
 Apply-mode reconciliation repeats the same proof against the exact
 item snapshot used by the audited history rewrite. The audit event and
 settlement include only the individually proven receipt id, so one valid receipt
 cannot authorize an untrusted same-item sibling. Failed or unproven receipts
 remain pending unless the coordinator explicitly reviews and supplies `--force`.
 Receipts with discarded scalar values retain the distinct
-`merge_decisions_unreviewed:<n>` finding, and the apply pass refuses them unless
-the coordinator explicitly supplies `--force` after review. This prevents a
-routine history repair from hiding unfinished reconciliation or silently
-accepting data loss.
+`merge_decisions_unreviewed:<n>` finding. Matching authoritative hash proof
+allows those receipts to settle without `--force`; without qualifying proof,
+the apply pass refuses them until the coordinator explicitly supplies `--force`
+after review. The `history_drift_merge_receipt` remediation may therefore emit
+an unforced apply command that clears `merge_decisions_unreviewed` when the
+receipt proves the exact current merged values. This prevents routine repair
+from hiding unfinished reconciliation while avoiding redundant force for an
+already-proven canonical snapshot.
 It exits nonzero while either merge-critical validation check is non-green, so
 CI and explicit post-merge hooks cannot approve unresolved receipts or drift.
 The apply pass uses the audited history rewrite boundary to append a

package/docs/README.md

@@ -68,6 +68,7 @@ pm guide release --json
 - [Recurrence and Executable Recovery Contracts](RECURRENCE_RECOVERY_CONTRACTS.md) - terminal-item recurrence, duplicate-intake routing, capability-aware reindex recovery, and target-aware generated test guidance.
 - [Trustworthy Context and Evidence Contracts](TRUSTWORTHY_CONTEXT_EVIDENCE.md) - full-record assurance, graph composition, boolean health rows, lossless linked-test removal, and role-labelled recovery.
 - [Context Integrity Contracts](CONTEXT_INTEGRITY_CONTRACTS.md) - sparse-read identity, closed extension manifests, lossless remote docs, direction-locked graph impact, and cross-version history epochs.
+- [Context Integrity and Recovery Primitives](CONTEXT_RECOVERY_PRIMITIVES.md) - lossless metadata, write-time link receipts, executed-test evidence, external blockers, npm receipts, history capabilities, and truthful recovery.
 - [SDK Evidence Traceability and Integrity](SDK_EVIDENCE_TRACEABILITY.md) - reverse source-to-item lookup, atomic evidence replacement, no-op history, linked-test collision classification, and telemetry drain receipts.
 - [SDK Context and Evidence Contracts](SDK_CONTEXT_EVIDENCE_CONTRACTS.md) - material omission receipts, scoped preflight activation, truthful merge preference, claim-race classification, and versioned history hashes.
 - [Reproducible Workspaces and Snapshots](REPRODUCIBLE_WORKSPACES.md) - deterministic SDK recipes and content-addressed authoritative tracker restore points.

package/docs/generated/REFUSAL_CLOSURE_CENSUS.md

@@ -4,12 +4,12 @@ Tracker: `pm-f05lsg`.
 
 Every catalog code is listed. An `uncovered` row is an explicit closure obligation, never an omission or implied approval.
 
-- Catalog error codes: 347
+- Catalog error codes: 353
 - Executable error codes: 19
 - Executable-code ratchet floor: 18
 - Required executable canonical codes: `bulk_ids_input_empty`, `bulk_ids_input_missing_path`, `bulk_ids_input_unreadable`, `invalid_argument_value`, `manifest_unknown_key`, `missing_lifecycle_target`, `missing_required_argument`, `no_version_bounds_declared`, `projection_options_mutually_exclusive`, `tracker_not_initialized`, `tracker_root_missing`, `tracker_root_not_directory`, `tracker_root_unreadable`, `unknown_context_intent`, `unknown_field_projection`, `unknown_option`, `unknown_subcommand`
-- Uncovered error codes: 328
-- Coverage fraction: 0.054755
+- Uncovered error codes: 334
+- Coverage fraction: 0.053824
 - Closed-domain probes: 19
 - Grammar probes: 94
 
@@ -30,6 +30,7 @@ Every catalog code is listed. An `uncovered` row is an explicit closure obligati
 | `annotation_transposed_subcommand` | `annotation_transposed_subcommand` | uncovered | none | 0 |
 | `append_empty_body` | `append_empty_body` | uncovered | none | 0 |
 | `assurance_registry_invalid` | `assurance_registry_invalid` | uncovered | none | 0 |
+| `bare_comma_entry_ambiguous` | `bare_comma_entry_ambiguous` | uncovered | none | 0 |
 | `body_file_conflicts_with_body` | `body_file_conflicts_with_body` | uncovered | none | 0 |
 | `body_file_missing_path` | `body_file_missing_path` | uncovered | none | 0 |
 | `body_file_unreadable` | `body_file_unreadable` | uncovered | none | 0 |
@@ -115,6 +116,7 @@ Every catalog code is listed. An `uncovered` row is an explicit closure obligati
 | `history_drift_merge_receipt` | `history_drift_merge_receipt` | uncovered | none | 0 |
 | `history_drift_missing_stream` | `history_drift_missing_stream` | uncovered | none | 0 |
 | `history_drift_unreadable_stream` | `history_drift_unreadable_stream` | uncovered | none | 0 |
+| `history_drift_version_skew` | `history_drift_version_skew` | uncovered | none | 0 |
 | `history_merge_conflict_markers_detected` | `merge_conflict_markers_detected` | uncovered | none | 0 |
 | `history_stream_over_compact_threshold` | `history_stream_over_compact_threshold` | uncovered | none | 0 |
 | `history_target_out_of_range` | `history_target_out_of_range` | uncovered | none | 0 |
@@ -185,7 +187,6 @@ Every catalog code is listed. An `uncovered` row is an explicit closure obligati
 | `merge_git_config_unwritable` | `merge_git_config_unwritable` | uncovered | none | 0 |
 | `merge_receipt_evidence_invalid` | `merge_receipt_evidence_invalid` | uncovered | none | 0 |
 | `merge_receipts_pending` | `merge_receipts_pending` | uncovered | none | 0 |
-| `merge_reconcile_discards_require_acceptance` | `merge_reconcile_discards_require_acceptance` | uncovered | none | 0 |
 | `merge_reconcile_receipt_evidence_untrusted` | `merge_reconcile_receipt_evidence_untrusted` | uncovered | none | 0 |
 | `merge_root_not_found` | `merge_root_not_found` | uncovered | none | 0 |
 | `missing_allowed_values` | `missing_allowed_values` | uncovered | none | 0 |
@@ -198,6 +199,7 @@ Every catalog code is listed. An `uncovered` row is an explicit closure obligati
 | `missing_observation` | `missing_observation` | uncovered | none | 0 |
 | `missing_observed_signature` | `missing_observed_signature` | uncovered | none | 0 |
 | `missing_parameter_alias` | `missing_parameter_alias` | uncovered | none | 0 |
+| `missing_positive_execution_receipt` | `missing_positive_execution_receipt` | uncovered | none | 0 |
 | `missing_probe` | `missing_probe` | uncovered | none | 0 |
 | `missing_required_argument` | `missing_required_argument` | executable | grammar | 57 |
 | `missing_required_option` | `missing_required_option` | uncovered | none | 0 |
@@ -214,6 +216,7 @@ Every catalog code is listed. An `uncovered` row is an explicit closure obligati
 | `no_update_fields` | `no_update_fields` | uncovered | none | 0 |
 | `no_version_bounds_declared` | `no_version_bounds_declared` | executable | owned_state | 1 |
 | `non_refusal_exit` | `non_refusal_exit` | uncovered | none | 0 |
+| `npm_pack_json_shape_unsupported` | `npm_pack_json_shape_unsupported` | uncovered | none | 0 |
 | `npm_package_archive_missing` | `npm_package_archive_missing` | uncovered | none | 0 |
 | `npm_package_archive_unsafe` | `npm_package_archive_unsafe` | uncovered | none | 0 |
 | `npm_package_not_found` | `npm_package_not_found` | uncovered | none | 0 |
@@ -249,6 +252,8 @@ Every catalog code is listed. An `uncovered` row is an explicit closure obligati
 | `reopen_reason_required` | `reopen_reason_required` | uncovered | none | 0 |
 | `reopen_receipt_missing` | `reopen_receipt_missing` | uncovered | none | 0 |
 | `reopen_target_status_invalid` | `reopen_target_status_invalid` | uncovered | none | 0 |
+| `reported_zero_passes` | `reported_zero_passes` | uncovered | none | 0 |
+| `reported_zero_tests` | `reported_zero_tests` | uncovered | none | 0 |
 | `reserved_item_field` | `reserved_item_field` | uncovered | none | 0 |
 | `retry_failed` | `retry_failed` | uncovered | none | 0 |
 | `schema_migration_input_required` | `schema_migration_input_required` | uncovered | none | 0 |
@@ -317,6 +322,7 @@ Every catalog code is listed. An `uncovered` row is an explicit closure obligati
 | `validate_history_drift_hash_mismatches` | `history_drift_hash_mismatch` | uncovered | none | 0 |
 | `validate_history_drift_missing_streams` | `history_drift_missing_stream` | uncovered | none | 0 |
 | `validate_history_drift_unreadable_streams` | `history_drift_unreadable_stream` | uncovered | none | 0 |
+| `validate_history_drift_version_skews` | `history_drift_version_skew` | uncovered | none | 0 |
 | `validate_history_unknown_author_events` | `history_unknown_author_events` | uncovered | none | 0 |
 | `validate_lifecycle_active_closure_like_metadata` | `validate_lifecycle_active_closure_like_metadata` | uncovered | none | 0 |
 | `validate_lifecycle_active_terminal_parent` | `validate_lifecycle_active_terminal_parent` | uncovered | none | 0 |

package/marketplace.json

@@ -6,14 +6,14 @@
   },
   "metadata": {
     "description": "Official marketplace for pm CLI — native git-based project management for Claude Code and AI coding agents.",
-    "version": "2026.8.28"
+    "version": "2026.8.29"
   },
   "plugins": [
     {
       "name": "pm-claude",
       "source": "./plugins/pm-claude",
       "description": "Native pm CLI integration for Claude Code — 28 MCP tools, 5 workflow skills, 14 slash commands, 4 subagents, hybrid TUI task tracking, session context injection, and coordination subagents for git-based project management without leaving Claude Code.",
-      "version": "2026.8.28",
+      "version": "2026.8.29",
       "author": {
         "name": "unbrained",
         "url": "https://github.com/unbraind/pm-cli"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-cli",
-  "version": "2026.8.28",
+  "version": "2026.8.29",
   "description": "Git-native project management CLI for humans and agents.",
   "type": "module",
   "packageManager": "pnpm@11.10.0",
@@ -120,7 +120,7 @@
     "lint:eslint": "eslint . --max-warnings=0",
     "lint:eslint:prune": "eslint . --prune-suppressions",
     "lint:complexity:baseline": "eslint . --suppress-rule complexity --suppress-rule sonarjs/cognitive-complexity",
-    "lint:duplicates": "jscpd --config .jscpd.json",
+    "lint:duplicates": "jscpd --config .jscpd.json && jscpd --config .jscpd.source.json",
     "lint:codefactor": "pnpm quality:static",
     "quality:static": "pnpm build && node scripts/contracts-snapshot.mjs --check && node scripts/generate-agent-capability-surfaces.mjs --check && node scripts/generate-error-code-catalog.mjs --check && node scripts/release/repository-assurance.mjs repository-static-quality --trigger ci --json && node scripts/release/audit-package-boundary.mjs && node scripts/release/package-sdk-contract-parity.mjs && node scripts/release/surface-replication-gate.mjs && node scripts/release/command-grammar-gate.mjs && node scripts/release/flag-invocation-parity.mjs && node scripts/release/flag-lexicon-gate.mjs && node scripts/release/refusal-closure-gate.mjs && node scripts/release/agent-task-token-gate.mjs && pnpm quality:mcp-deprecations && node dist/cli.js assurance run tracker-context-quality --trigger ci --dry-run --json --output-budget unbounded && node scripts/release/gate-registry.mjs && node scripts/sdk-surface-snapshot.mjs --check && node scripts/bench/sdk-entrypoint-costs.mjs --check && node scripts/bench/cli-transport-floor.mjs --check && node dist/cli.js assurance run graph-composition --trigger ci --dry-run --json --output-budget unbounded && node dist/cli.js assurance run record-integrity --trigger ci --dry-run --json --output-budget unbounded",
     "quality:command-grammar": "pnpm build && node scripts/release/command-grammar-gate.mjs && node scripts/release/flag-invocation-parity.mjs && node scripts/release/flag-lexicon-gate.mjs",
@@ -206,7 +206,7 @@
     "node": ">=22.18.0"
   },
   "dependencies": {
-    "@sentry/node": "10.71.0",
+    "@sentry/node": "10.72.0",
     "@toon-format/toon": "^4.1.1",
     "@types/node": ">=22",
     "commander": "^15.0.0",
@@ -217,11 +217,11 @@
     "yaml": "^2.9.0"
   },
   "devDependencies": {
-    "@modelcontextprotocol/ext-apps": "1.7.5",
     "@codspeed/vitest-plugin": "^5.7.1",
     "@eslint/js": "^10.0.1",
-    "@sentry/cli": "^3.6.2",
-    "@types/node": "^26.3.0",
+    "@modelcontextprotocol/ext-apps": "1.7.5",
+    "@sentry/cli": "^3.7.0",
+    "@types/node": "^26.4.0",
     "@types/npm-package-arg": "^6.1.4",
     "@vitest/coverage-v8": "^4.1.11",
     "esbuild": "0.28.2",
@@ -229,7 +229,7 @@
     "eslint-plugin-sonarjs": "^4.2.0",
     "eslint-plugin-unicorn": "^73.0.0",
     "fast-check": "^4.9.0",
-    "greptile": "^3.4.1",
+    "greptile": "^3.4.2",
     "jscpd": "^5.0.16",
     "tsx": "^4.23.12",
     "typescript": "^6.0.3",

package/packages/pm-beads/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-beads",
-  "version": "2026.8.28",
+  "version": "2026.8.29",
   "private": true,
   "type": "module",
   "description": "First-party pm package for importing Beads JSONL records.",

package/packages/pm-calendar/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-calendar",
-  "version": "2026.8.28",
+  "version": "2026.8.29",
   "private": true,
   "type": "module",
   "description": "First-party pm package for calendar and agenda views.",

package/packages/pm-command-kit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-command-kit",
-  "version": "2026.8.28",
+  "version": "2026.8.29",
   "private": true,
   "type": "module",
   "description": "First-party pm exemplar package for the commands capability: registerCommand, registerFlags, and registerParser.",

package/packages/pm-digital-twin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-digital-twin",
-  "version": "2026.8.28",
+  "version": "2026.8.29",
   "private": true,
   "type": "module",
   "description": "Beyond-PM exemplar: a temporal production-facility digital twin built entirely on public pm SDK and extension primitives.",

package/packages/pm-governance-audit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-governance-audit",
-  "version": "2026.8.28",
+  "version": "2026.8.29",
   "private": true,
   "type": "module",
   "description": "First-party pm package for governance audit and normalization workflows.",

package/packages/pm-guide-shell/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-guide-shell",
-  "version": "2026.8.28",
+  "version": "2026.8.29",
   "private": true,
   "type": "module",
   "description": "First-party pm package for guide and shell completion workflows.",

package/packages/pm-kanban/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-kanban",
-  "version": "2026.8.28",
+  "version": "2026.8.29",
   "private": true,
   "type": "module",
   "description": "First-party pm archetype package: a complete Kanban continuous-flow profile built on public SDK primitives.",

package/packages/pm-lifecycle-hooks/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-lifecycle-hooks",
-  "version": "2026.8.28",
+  "version": "2026.8.29",
   "private": true,
   "type": "module",
   "description": "First-party pm package demonstrating safe lifecycle hook registration.",

package/packages/pm-linked-test-adapters/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-linked-test-adapters",
-  "version": "2026.8.28",
+  "version": "2026.8.29",
   "private": true,
   "type": "module",
   "description": "First-party pm package for optional linked-test run management adapters and reporters.",

package/packages/pm-search-advanced/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-search-advanced",
-  "version": "2026.8.28",
+  "version": "2026.8.29",
   "private": true,
   "type": "module",
   "description": "First-party pm package for semantic, hybrid, and reindex search workflows.",

package/packages/pm-templates/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-templates",
-  "version": "2026.8.28",
+  "version": "2026.8.29",
   "private": true,
   "type": "module",
   "description": "First-party pm package for reusable create templates.",

package/packages/pm-todos/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-todos",
-  "version": "2026.8.28",
+  "version": "2026.8.29",
   "private": true,
   "type": "module",
   "description": "First-party pm package for Todo markdown import and export.",

package/packages/pm-vcs/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-vcs-sdk-exemplar",
-  "version": "2026.8.28",
+  "version": "2026.8.29",
   "private": true,
   "type": "module",
   "description": "Beyond-PM exemplar: a VCS-style changeset workflow built entirely on public pm SDK and extension primitives.",

package/plugins/pm-claude/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "pm-claude",
   "description": "Native pm CLI integration for Claude Code — 28 MCP tools, 5 workflow skills, 14 slash commands, 4 subagents (coordinator, delivery-chain, triage, verification), hybrid TUI task tracking (pm as persistent store + Claude Code task panel as live view), session context injection, and full git-based project management without leaving Claude Code.",
-  "version": "2026.8.28",
+  "version": "2026.8.29",
   "author": {
     "name": "unbrained",
     "url": "https://github.com/unbraind/pm-cli"

package/plugins/pm-codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "pm-codex",
-  "version": "2026.8.28",
+  "version": "2026.8.29",
   "description": "Native Codex integration for pm-cli with bundled MCP tools, skills, commands, and agent workflows.",
   "author": {
     "name": "unbrained",