@unbrained/pm-cli 2026.8.30 → 2026.9.1

package/dist/sdk/merge/receipts.js

@@ -7,13 +7,13 @@
  * value for the coordinator that performed the merge.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="145a6d31-5e14-5b0b-95fb-6f837d11e2f4")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="624fc190-4c46-5a55-b757-72e621aec35d")}catch(e){}}();
 import { execFile } from "node:child_process";
 import { randomUUID } from "node:crypto";
 import { readdir } from "node:fs/promises";
 import path from "node:path";
 import { promisify } from "node:util";
-import { ensureDir, isFileAbsentError, pathExists, writeFileAtomic, } from "../../core/fs/fs-utils.js";
+import { ensureDir, isFileAbsentError, isFileMissingError, pathExists, writeFileAtomic, } from "../../core/fs/fs-utils.js";
 import { sha256Hex, stableStringify } from "../../core/shared/serialization.js";
 import { isRfc3339DateTime, nowIso } from "../../core/shared/time.js";
 import { readBoundedRegularFile } from "./receipt-file-boundary.js";
@@ -367,15 +367,15 @@ export async function writeMergeReceipt(params) {
     return receipt;
 }
 async function readReceiptsFromDirectory(directory, evidenceSource) {
-    if (!(await pathExists(directory))) {
-        return { receipts: [], invalid_evidence_count: 0 };
-    }
     let names;
     try {
         names = await readdir(directory);
     }
-    catch {
-        return { receipts: [], invalid_evidence_count: 1 };
+    catch (error) {
+        return {
+            receipts: [],
+            invalid_evidence_count: isFileMissingError(error) ? 0 : 1,
+        };
     }
     const receipts = [];
     let invalidEvidenceCount = 0;
@@ -441,6 +441,7 @@ export async function inspectMergeReceiptEvidence(cwd, options = {}) {
         invalid_evidence_count: local.invalid_evidence_count +
             durable.invalid_evidence_count +
             divergentCopyCount,
+        clone_local_evidence_resolved: directory !== null,
     };
 }
 /** Read clone-local receipts with explicit reconciled/lossless classification controls. */
@@ -524,7 +525,25 @@ export async function runMergeReceiptReport(options) {
         generated_at: nowIso(),
     };
 }
+/** Inspect every receipt candidate and retain completeness diagnostics without exposing rejected file contents. */
+export async function runMergeReceiptEvidenceReport(options) {
+    const evidence = await inspectMergeReceiptEvidence(options.cwd ?? process.cwd(), {
+        ...options,
+        includeLossless: true,
+    });
+    const complete = evidence.clone_local_evidence_resolved === true &&
+        evidence.invalid_evidence_count === 0;
+    return {
+        ok: complete,
+        complete,
+        count: evidence.receipts.length,
+        invalid_evidence_count: evidence.invalid_evidence_count,
+        clone_local_evidence_resolved: evidence.clone_local_evidence_resolved,
+        receipts: evidence.receipts,
+        generated_at: nowIso(),
+    };
+}
 /** Test-only seams for deterministic receipt-boundary fault coverage. */
 export const _testOnlyMergeReceipts = { prepareReceiptSettlement };
 //# sourceMappingURL=receipts.js.map
-//# debugId=145a6d31-5e14-5b0b-95fb-6f837d11e2f4
+//# debugId=624fc190-4c46-5a55-b757-72e621aec35d

package/dist/sdk/merge/three-way.d.ts

@@ -28,7 +28,9 @@ export interface HistoryMergeResult {
  * hash re-anchored so the resulting chain verifies again. No side's events are
  * ever discarded: content divergence is preserved for the post-merge
  * reconciliation pass (`pm validate` + `pm history-repair`) instead of being
- * silently resolved by last-writer-wins.
+ * silently resolved by last-writer-wins. If either suffix cannot apply after
+ * deterministic ordering, the merge fails closed instead of publishing a
+ * hash-valid stream that omitted a branch effect.
  */
 export declare function mergeHistoryStreams(baseRaw: string, oursRaw: string, theirsRaw: string): HistoryMergeResult;
 /** Documents the relationship event stream merge result payload exchanged by command, SDK, and package integrations. */

package/dist/sdk/merge/three-way.js

@@ -9,7 +9,7 @@
  * definition for multi-branch agent workflows.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="393f6460-bf8b-5479-8e3e-cac6f2680823")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="7e8fcddf-09fe-5979-b23a-78915bf7f896")}catch(e){}}();
 import { historyEntriesToRaw, reanchorHistoryEntries, } from "../../core/history/replay.js";
 import { canonicalDocument, parseItemDocument, serializeItemDocument, } from "../../core/item/item-format.js";
 import { EXIT_CODE } from "../../core/shared/constants.js";
@@ -69,7 +69,9 @@ function commonHistoryPrefixLength(ours, theirs) {
  * hash re-anchored so the resulting chain verifies again. No side's events are
  * ever discarded: content divergence is preserved for the post-merge
  * reconciliation pass (`pm validate` + `pm history-repair`) instead of being
- * silently resolved by last-writer-wins.
+ * silently resolved by last-writer-wins. If either suffix cannot apply after
+ * deterministic ordering, the merge fails closed instead of publishing a
+ * hash-valid stream that omitted a branch effect.
  */
 export function mergeHistoryStreams(baseRaw, oursRaw, theirsRaw) {
     parseHistoryJsonl(baseRaw, "base");
@@ -126,10 +128,10 @@ export function mergeHistoryStreams(baseRaw, oursRaw, theirsRaw) {
         }
         return historyEntryIdentity(left).localeCompare(historyEntryIdentity(right));
     });
-    const reanchored = reanchorHistoryEntries([
-        ...ours.slice(0, shared),
-        ...mergedSuffix,
-    ]);
+    const reanchored = reanchorHistoryEntries([...ours.slice(0, shared), ...mergedSuffix], undefined, { continuousHashSurface: true });
+    if (reanchored.skippedOps > 0) {
+        throw new PmCliError(`History union cannot preserve ${reanchored.skippedOps} patch operation(s) after deterministic suffix ordering; leave the file unresolved for manual recovery.`, EXIT_CODE.GENERIC_FAILURE);
+    }
     return {
         merged: historyEntriesToRaw(reanchored.entries),
         strategy: "union_reanchor",
@@ -704,4 +706,4 @@ export function mergeJsonDocuments(baseRaw, oursRaw, theirsRaw, options = {}) {
     };
 }
 //# sourceMappingURL=three-way.js.map
-//# debugId=393f6460-bf8b-5479-8e3e-cac6f2680823
+//# debugId=7e8fcddf-09fe-5979-b23a-78915bf7f896

package/dist/sdk/query/context.js

@@ -4,7 +4,7 @@
  * Implements the pm context command surface and its agent-facing runtime behavior.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="ee5279f2-7489-59fb-8f96-f2e035434cce")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="a870e3ac-f731-5cbf-a66e-38d1d5b1d0aa")}catch(e){}}();
 import { SETTINGS_DEFAULTS, EXIT_CODE, PmCliError, compareTimestampStrings, nowIso, isTerminalStatus, normalizeStatusForRegistry, normalizeStatusInput, resolveRuntimeStatusRegistry, resolvePmRoot, readSettings, resolveAuthor, discoverExtensions, } from "../runtime-primitives.js";
 import { collectDependencyBlockedIds, resolveItemBlockers, } from "../actionability.js";
 import { CONTEXT_DEPTH_VALUES, CONTEXT_SECTION_VALUES, } from "../../types/index.js";
@@ -221,20 +221,16 @@ function parseStaleThresholdDays(raw, settings) {
 // ---------------------------------------------------------------------------
 function statusRank(status, statusRegistry) {
     const normalizedStatus = normalizeStatusForRegistry(status, statusRegistry);
-    const inProgressStatus = normalizeStatusInput("in_progress", statusRegistry);
-    const openStatus = normalizeStatusInput("open", statusRegistry);
     const blockedStatus = normalizeStatusInput("blocked", statusRegistry);
     const draftStatus = normalizeStatusInput("draft", statusRegistry);
-    if (inProgressStatus && normalizedStatus === inProgressStatus)
+    if (normalizedStatus === statusRegistry.in_progress_status)
         return 0;
-    if (openStatus && normalizedStatus === openStatus)
+    if (statusRegistry.active_statuses.has(normalizedStatus))
         return 1;
     if (blockedStatus && normalizedStatus === blockedStatus)
         return 2;
     if (draftStatus && normalizedStatus === draftStatus)
         return 3;
-    if (statusRegistry.active_statuses.has(normalizedStatus))
-        return 4;
     if (statusRegistry.blocked_statuses.has(normalizedStatus))
         return 5;
     if (statusRegistry.terminal_statuses.has(normalizedStatus))
@@ -246,12 +242,13 @@ function isClosedStatus(status, statusRegistry) {
     return normalizeStatusForRegistry(status, statusRegistry) === closeStatus;
 }
 function isInProgressStatus(status, statusRegistry) {
-    const inProgressStatus = normalizeStatusInput("in_progress", statusRegistry);
-    return (normalizeStatusForRegistry(status, statusRegistry) === inProgressStatus);
+    return (normalizeStatusForRegistry(status, statusRegistry) ===
+        statusRegistry.in_progress_status);
 }
 function isOpenStatus(status, statusRegistry) {
-    const openStatus = normalizeStatusInput("open", statusRegistry);
-    return normalizeStatusForRegistry(status, statusRegistry) === openStatus;
+    const normalizedStatus = normalizeStatusForRegistry(status, statusRegistry);
+    return (normalizedStatus !== statusRegistry.in_progress_status &&
+        statusRegistry.active_statuses.has(normalizedStatus));
 }
 function isBlockedStatus(status, statusRegistry) {
     return statusRegistry.blocked_statuses.has(normalizeStatusForRegistry(status, statusRegistry));
@@ -1598,8 +1595,8 @@ export async function runContext(options, global) {
         now: agendaContext.agenda.now,
     });
     const warnings = mergeSortedWarnings(corpus.listed.warnings, agendaContext.agenda.warnings, focusGroups.ranking.warnings, [...focusGroups.featureStore.warnings], workspaceMemory.warnings);
-    const inProgressCount = countContextStatus(focusGroups.activeItems, normalizeStatusInput("in_progress", runtime.statusRegistry), runtime.statusRegistry);
-    const openCount = countContextStatus(focusGroups.activeItems, normalizeStatusInput("open", runtime.statusRegistry), runtime.statusRegistry);
+    const inProgressCount = countContextStatus(focusGroups.activeItems, runtime.statusRegistry.in_progress_status, runtime.statusRegistry);
+    const openCount = focusGroups.activeItems.length - inProgressCount;
     const sections = await buildOptionalContextSections({
         runtime,
         allItems: corpus.allItems,
@@ -1679,4 +1676,4 @@ export async function runContext(options, global) {
     return result;
 }
 //# sourceMappingURL=context.js.map
-//# debugId=ee5279f2-7489-59fb-8f96-f2e035434cce
+//# debugId=a870e3ac-f731-5cbf-a66e-38d1d5b1d0aa

package/dist/sdk/query/list.d.ts

@@ -56,6 +56,8 @@ export interface ListOptions extends SharedItemFilterOptions {
      * lifecycle-status filter.
      */
     dependencyBlocked?: boolean;
+    /** Select a role-derived active lifecycle bucket instead of one literal status id. */
+    lifecycleBucket?: "open" | "in_progress";
     /** Value that configures or reports filter ac missing for this contract. */
     filterAcMissing?: boolean;
     /** Value that configures or reports filter estimates missing for this contract. */

package/dist/sdk/query/list.js

@@ -4,7 +4,7 @@
  * Implements the pm list command surface and its agent-facing runtime behavior.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="93e8c187-e198-50fc-bf2c-7dae2ea42219")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="ccdb7d16-4f38-58d4-a19d-4ab1516cb1d7")}catch(e){}}();
 import { assertInitializedTracker } from "../environment/tracker-preflight.js";
 import { getActiveExtensionRegistrations, hasActiveOnReadHooks, } from "../../core/extensions/index.js";
 import { toItemRecord } from "../../core/item/item-record.js";
@@ -978,20 +978,40 @@ function resolveListOrderingOptions(options) {
 }
 function resolveListStatusSelection(status, options, statusRegistry) {
     const explicitStatus = resolveStatusFilter(options.status, statusRegistry);
-    const resolvedStatus = explicitStatus ?? resolveStatusFilter(status, statusRegistry);
+    let lifecycleStatus;
+    if (options.lifecycleBucket === "in_progress") {
+        lifecycleStatus = [statusRegistry.in_progress_status];
+    }
+    else if (options.lifecycleBucket === "open") {
+        lifecycleStatus = [...statusRegistry.active_statuses]
+            .filter((entry) => entry !== statusRegistry.in_progress_status)
+            .sort((left, right) => left.localeCompare(right));
+    }
+    const resolvedStatus = explicitStatus ??
+        lifecycleStatus ??
+        resolveStatusFilter(status, statusRegistry);
     const explicitAllStatuses = isStatusAllFilterInput(options.status);
     const effectiveOptions = explicitStatus || explicitAllStatuses
         ? { ...options, excludeTerminal: false }
         : options;
-    const filtersStatus = explicitAllStatuses
-        ? "all"
-        : resolvedStatus === undefined
-            ? effectiveOptions.excludeTerminal === true
-                ? null
-                : "all"
-            : resolvedStatus.length === 1
-                ? resolvedStatus[0]
-                : resolvedStatus;
+    let filtersStatus = "all";
+    if (explicitAllStatuses) {
+        filtersStatus = "all";
+    }
+    else if (explicitStatus !== undefined) {
+        filtersStatus =
+            explicitStatus.length === 1 ? explicitStatus[0] : explicitStatus;
+    }
+    else if (options.lifecycleBucket !== undefined) {
+        filtersStatus = options.lifecycleBucket;
+    }
+    else if (resolvedStatus !== undefined) {
+        filtersStatus =
+            resolvedStatus.length === 1 ? resolvedStatus[0] : resolvedStatus;
+    }
+    else if (effectiveOptions.excludeTerminal === true) {
+        filtersStatus = null;
+    }
     return {
         resolvedStatus,
         explicitAllStatuses,
@@ -1045,6 +1065,7 @@ async function tryLoadIndexedListPage(params) {
         "includeBody",
         "excludeTerminal",
         "dependencyBlocked",
+        "lifecycleBucket",
         "noTruncate",
         "projectionCommand",
         "truncate",
@@ -1281,4 +1302,4 @@ export const _testOnly = {
     withTreeMetadata,
 };
 //# sourceMappingURL=list.js.map
-//# debugId=93e8c187-e198-50fc-bf2c-7dae2ea42219
+//# debugId=ccdb7d16-4f38-58d4-a19d-4ab1516cb1d7

package/dist/sdk/runtime-extended-actions.js

@@ -1,19 +1,20 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="8a3a82a1-9e3d-555f-9111-3c3e19887f75")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="41227e35-6354-5208-997b-e8a1cf696bf9")}catch(e){}}();
 import { EXIT_CODE } from "../core/shared/constants.js";
 import { PmCliError } from "../core/shared/errors.js";
-import { transferMutationStdinTokenPolicy, } from "./runtime-primitives.js";
+import { transferMutationStdinTokenPolicy } from "./runtime-primitives.js";
 import { createUnknownSubcommandError } from "./agent/subcommand-recovery.js";
 import { resolvePmRoot } from "../core/store/paths.js";
 import { runEval } from "./eval.js";
 import { runMergeDriver } from "./merge/driver.js";
 import { runMergeInstall } from "./merge/install.js";
 import { runMergeReconcile } from "./merge/reconcile.js";
-import { runMergeReceiptReport } from "./merge/receipts.js";
+import { runMergeReceiptEvidenceReport } from "./merge/receipts.js";
 import { listMutationEvents } from "./mutation-events.js";
 import { parseRuntimeInteger, readRuntimeString, readRuntimeStringArray, } from "./runtime-input.js";
 import { runEvent, runMeet, runRemind, } from "./scheduling-shortcuts.js";
 import { createWorkspaceSnapshot, deleteWorkspaceSnapshot, inspectWorkspaceSnapshot, listWorkspaceSnapshots, planWorkspaceSnapshotRestore, restoreWorkspaceSnapshotWithRecovery, } from "./workspace-snapshot.js";
+import { readWorkspacePosition } from "./governance/workspace-position.js";
 function mergedInput(context) {
     const input = { ...context.args, ...context.options };
     return transferMutationStdinTokenPolicy(context.options, input);
@@ -86,7 +87,7 @@ export function runRuntimeMergeAction(context) {
         }, context.global);
     }
     if (subcommand === "report") {
-        return runMergeReceiptReport({
+        return runMergeReceiptEvidenceReport({
             includeReconciled: input.includeReconciled === true,
             cwd: readRuntimeString(input, "cwd"),
         });
@@ -114,11 +115,14 @@ export function runRuntimeMergeAction(context) {
 export function runRuntimeWorkspaceAction(context) {
     const input = mergedInput(context);
     const subcommand = requiredString(input, "subcommand");
+    if (subcommand === "position") {
+        return readWorkspacePosition(context.global);
+    }
     if (subcommand !== "snapshot") {
         throw createUnknownSubcommandError({
             command_path: "workspace",
             token: subcommand,
-            allowed: ["snapshot"],
+            allowed: ["position", "snapshot"],
             display_name: "workspace",
         });
     }
@@ -171,4 +175,4 @@ export function runRuntimeSchedulingAction(context) {
     return runRemind(title, input, context.global);
 }
 //# sourceMappingURL=runtime-extended-actions.js.map
-//# debugId=8a3a82a1-9e3d-555f-9111-3c3e19887f75
+//# debugId=41227e35-6354-5208-997b-e8a1cf696bf9

package/dist/sdk/schema.js

@@ -4,7 +4,7 @@
  * Owns typed schema customization primitives shared by SDK, CLI, and MCP consumers.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="6112923d-5e06-5839-b452-a32818c6398d")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="264088a5-09d1-52ed-8b12-af00392e1a5f")}catch(e){}}();
 import { assertInitializedTracker } from "./environment/tracker-preflight.js";
 import path from "node:path";
 import { mkdir } from "node:fs/promises";
@@ -422,6 +422,16 @@ export async function runSchemaAddStatus(id, options, global) {
     // --role/--alias preserves metadata defined in settings.schema.statuses, not
     // only what is already in statuses.json.
     const baseDefinition = toExistingStatusDefinition(statusRegistry.by_id.get(normalized.id));
+    const effectiveRoles = normalized.roles ?? baseDefinition?.roles ?? [];
+    if (effectiveRoles.length === 0) {
+        throw new PmCliError(`Status "${normalized.id}" requires at least one lifecycle role. Re-run with --role active, --role blocked, --role draft, or an appropriate terminal/default role.`, EXIT_CODE.USAGE, {
+            code: "status_lifecycle_role_required",
+            examples: [
+                `pm schema add-status "${escapeForDoubleQuotes(normalized.id)}" --role active`,
+                `pm schema add-status "${escapeForDoubleQuotes(normalized.id)}" --role blocked`,
+            ],
+        });
+    }
     const warnings = [];
     const author = resolveAuthor(options.author, settings.author_default);
     const governance = resolveGovernanceKnobs(settings);
@@ -1364,4 +1374,4 @@ export const _testOnlySchemaCommand = {
     workflowSlotsReferencing,
 };
 //# sourceMappingURL=schema.js.map
-//# debugId=6112923d-5e06-5839-b452-a32818c6398d
+//# debugId=264088a5-09d1-52ed-8b12-af00392e1a5f

package/dist/sdk/test/execution.d.ts

@@ -206,6 +206,21 @@ declare function resolveDirectRunnerSubcommand(parsed: {
 } | null): string | undefined;
 declare function firstDirectTestRunnerSubcommand(executable: string, args: string[]): string | undefined;
 declare function segmentInvokesRecursiveTestAll(segment: string): boolean;
+/** Describes the SDK-owned safety policy applied when a linked command is recorded. */
+export interface LinkedTestCommandSafetyClassification {
+    /** Whether intake accepts the command before provenance checks at execution time. */
+    accepted: true;
+    /** Capability-oriented command family, independent of shell wrapping. */
+    command_kind: "direct_runner" | "sandbox_runner" | "other";
+    /** Tracker isolation is injected by the linked-test runtime for every command. */
+    tracker_isolation: "runtime_injected";
+    /** Stored-command provenance and explicit acknowledgment form the execution trust boundary. */
+    trust_boundary: "provenance";
+    /** Human guidance for reproducible execution without presenting string shape as enforcement. */
+    advisory: string;
+}
+/** Classify linked-test commands without pretending string shape is a security boundary. */
+export declare function classifyLinkedTestCommandSafety(command: string): LinkedTestCommandSafetyClassification;
 declare function parseLinkedTestTimeoutSeconds(timeoutSecondsRaw: string | undefined, timeoutAliasRaw: string | undefined): number | undefined;
 declare function parseAddJsonEntries(raw: string[] | undefined): LinkedTest[];
 declare function endLinkedTestProgress(context: LinkedTestProgressContext, executionResult: Pick<LinkedTestExecutionResult, "timedOut" | "maxBufferExceeded" | "outputTruncated" | "exitCode" | "signal">, startedAt: number, mode: LinkedTestProgressMode): void;

package/dist/sdk/test/execution.js

@@ -4,7 +4,7 @@
  * Implements the pm test command surface and its agent-facing runtime behavior.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="de5bc6bf-fe31-5643-a809-ee9ca52aac48")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="03f2f710-3b96-5671-85fa-d8ea4726ee86")}catch(e){}}();
 import { assertInitializedTracker } from "../environment/tracker-preflight.js";
 import { spawn } from "node:child_process";
 import { cp, mkdir, mkdtemp, open, readdir, rm, symlink, } from "node:fs/promises";
@@ -388,14 +388,7 @@ function commandUsesSandboxRunner(normalizedCommand) {
         normalizedCommand.includes("node ./scripts/run-tests.mjs ") ||
         normalizedCommand.endsWith("node ./scripts/run-tests.mjs"));
 }
-function segmentHasExplicitSandboxEnv(normalizedSegment) {
-    const hasExplicitPmPath = /\bpm_path\s*=/.test(normalizedSegment) ||
-        /\$env:pm_path\s*=/.test(normalizedSegment);
-    const hasExplicitPmGlobalPath = /\bpm_global_path\s*=/.test(normalizedSegment) ||
-        /\$env:pm_global_path\s*=/.test(normalizedSegment);
-    return hasExplicitPmPath && hasExplicitPmGlobalPath;
-}
-function segmentInvokesUnsafeDirectTestRunner(normalizedSegment) {
+function segmentInvokesDirectTestRunner(normalizedSegment) {
     const rawTokens = normalizedSegment
         .split(" ")
         .filter((token) => token.length > 0);
@@ -404,45 +397,62 @@ function segmentInvokesUnsafeDirectTestRunner(normalizedSegment) {
         return false;
     }
     const [executable, ...args] = tokens;
+    const shellCommandFlagPattern = SHELL_COMMAND_FLAG_PATTERNS.get(executable);
+    if (shellCommandFlagPattern) {
+        const commandFlagIndex = args.findIndex((argument) => shellCommandFlagPattern.test(argument));
+        return (commandFlagIndex >= 0 &&
+            segmentInvokesDirectTestRunner(args.slice(commandFlagIndex + 1).join(" ")));
+    }
     if (executable === "vitest" ||
         executable.endsWith("/vitest") ||
         executable.endsWith("/vitest.mjs")) {
         return true;
     }
     if (executable === "node") {
-        return nodeArgsInvokeUnsafeDirectTestRunner(args);
+        return nodeArgsInvokeDirectTestRunner(args);
     }
-    return packageManagerInvokesUnsafeDirectTestRunner(executable, args);
+    return packageManagerInvokesDirectTestRunner(executable, args);
 }
-function nodeArgsInvokeUnsafeDirectTestRunner(args) {
+function nodeArgsInvokeDirectTestRunner(args) {
     return (args.includes("--test") ||
         args.some((arg) => arg === "vitest" ||
             arg === "vitest.mjs" ||
             arg.endsWith("/vitest") ||
             arg.endsWith("/vitest.mjs")));
 }
-function packageManagerInvokesUnsafeDirectTestRunner(executable, args) {
+function packageManagerInvokesDirectTestRunner(executable, args) {
     if (executable === "npx" || executable === "bunx") {
         return isDirectTestRunnerSubcommand(parseNpxCommand(args)?.command);
     }
     if (executable === "pnpm" || executable === "npm") {
         return (isDirectTestRunnerSubcommand((executable === "pnpm"
             ? parsePnpmDlxCommand(args)
-            : parseNpmExecCommand(args))?.command) || firstDirectTestRunnerSubcommand(executable, args) === "vitest");
+            : parseNpmExecCommand(args))?.command) ||
+            isDirectTestRunnerSubcommand(firstDirectTestRunnerSubcommand(executable, args)));
     }
     return ((executable === "yarn" || executable === "bun") &&
-        firstDirectTestRunnerSubcommand(executable, args) === "vitest");
+        isDirectTestRunnerSubcommand(firstDirectTestRunnerSubcommand(executable, args)));
 }
-function assertSandboxSafeTestRunnerCommand(command) {
+/** Classify linked-test commands without pretending string shape is a security boundary. */
+export function classifyLinkedTestCommandSafety(command) {
     const normalized = normalizeCommandForValidation(command);
     const segments = splitNormalizedCommandSegments(normalized);
-    const hasUnsafeDirectRunnerSegment = segments.some((segment) => !commandUsesSandboxRunner(segment) &&
-        segmentInvokesUnsafeDirectTestRunner(segment) &&
-        !segmentHasExplicitSandboxEnv(segment));
-    if (!hasUnsafeDirectRunnerSegment) {
-        return;
-    }
-    throw new PmCliError('Linked test runner commands must be sandbox-safe: use "node scripts/run-tests.mjs <test|coverage>", use a package-manager script such as "pnpm test", or include PM_PATH=... PM_GLOBAL_PATH=... INLINE in the command string (exporting them in your shell environment is not checked). Example: "PM_PATH=/tmp/pm-x PM_GLOBAL_PATH=/tmp/pm-x-g vitest run".', EXIT_CODE.USAGE);
+    const directRunner = segments.some((segment) => !commandUsesSandboxRunner(segment) &&
+        segmentInvokesDirectTestRunner(segment));
+    const sandboxRunner = segments.some(commandUsesSandboxRunner);
+    return {
+        accepted: true,
+        command_kind: directRunner
+            ? "direct_runner"
+            : sandboxRunner
+                ? "sandbox_runner"
+                : "other",
+        tracker_isolation: "runtime_injected",
+        trust_boundary: "provenance",
+        advisory: directRunner
+            ? "Accepted with runtime-injected tracker isolation. Prefer the repository sandbox runner when available for reproducible build and coverage setup."
+            : "Accepted with runtime-injected tracker isolation and provenance checks before execution.",
+    };
 }
 function getRuntimeSafetySkipReason(command) {
     if (!invokesRecursiveTestAllCommand(command))
@@ -464,7 +474,6 @@ function parseAddEntry(entry) {
         throw new PmCliError("--add requires command=<value> or a bare command (path=<value> is optional metadata)", EXIT_CODE.USAGE);
     }
     assertNoRecursiveTestAllCommand(command);
-    assertSandboxSafeTestRunnerCommand(command);
     return {
         command,
         path: trimLinkedTestEntryField(kv.path),
@@ -516,7 +525,6 @@ function parseAddJsonEntries(raw) {
                 throw new PmCliError("--add-json requires a non-empty command string", EXIT_CODE.USAGE);
             }
             assertNoRecursiveTestAllCommand(command);
-            assertSandboxSafeTestRunnerCommand(command);
         }
         return parsed;
     });
@@ -1325,7 +1333,7 @@ function commandUsesTestNameFilter(command) {
         return true;
     }
     return splitNormalizedCommandSegments(normalized).some((segment) => /(?:^|\s)-t(?:=|\s)/u.test(segment) &&
-        segmentInvokesUnsafeDirectTestRunner(segment));
+        segmentInvokesDirectTestRunner(segment));
 }
 function createLinkedTestSandboxLayout(sandboxRoot) {
     return {
@@ -2201,4 +2209,4 @@ export const _testOnlyTestCommand = {
     summarizeRunResultStatuses,
 };
 //# sourceMappingURL=execution.js.map
-//# debugId=de5bc6bf-fe31-5643-a809-ee9ca52aac48
+//# debugId=03f2f710-3b96-5671-85fa-d8ea4726ee86

package/docs/AGENT_GUIDE.md

@@ -4,18 +4,25 @@ This guide is optimized for coding agents that need to understand and mutate rep
 
 ## Agent Quick Context
 
-Run this before heavy work:
+Run this before heavy work. The first call is the canonical cold start. Then run the request-specific duplicate and ownership checks before item mutation:
 
 ```bash
-pm context --limit 10
+pm context --limit 10 --for orient
 pm search "<request keywords>" --limit 10
 pm list --status open --limit 20
 pm list --status in_progress --limit 20
+```
+
+Run the optional guidance setup commands only when needed:
+
+```bash
 pm init --agent-guidance status
-pm install guide-shell --project
+pm package install guide-shell --project
 pm guide workflows
 ```
 
+The completed-task replay gate selects that one-call protocol from equivalent fixed-corpus candidates: 1,055 estimated tokens versus 2,293 for the historical four-read sequence and 4,798 for `contracts --summary` plus `next`. The reviewed numbers and per-step receipts live in [the published token baseline](agent-task-token-baseline.json).
+
 If a relevant item exists, reuse it. If not, create a parent lineage, then create and claim the child implementation item.
 When AGENTS/CLAUDE guidance is missing, use `pm init --agent-guidance add` to inject compact workflow guardrails, or `pm init --agent-guidance skip` to persist an explicit decline.
 
@@ -26,7 +33,7 @@ Tracked documentation work: [pm-u9d0](../.agents/pm/epics/pm-u9d0.toon).
 1. **Orient**
 
 ```bash
-pm context --limit 10
+pm context --limit 10 --for orient
 pm search "<keywords>" --limit 10
 pm list --status open --limit 20
 pm list --status in_progress --limit 20
@@ -108,6 +115,7 @@ pm release <item-id>
 | ------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | The single next action + why         | `pm next` (concrete ready leaves first; completed-container closeout rows surface only when no leaf work is ready; `--ready-only` for the tightest output) |
 | Next ready work in one epic          | `pm next --parent <id>`                                                                                                                                    |
+| Canonical cold-start orientation     | `pm context --limit 10 --for orient` (1,055 estimated tokens on the fixed 101-item replay corpus)                                                          |
 | Next work and agenda                 | `pm context --limit 10`                                                                                                                                    |
 | Comprehensive whole-tracker snapshot | `pm context --depth full` (every section, no per-section row cap)                                                                                          |
 | Status of one epic/subtree           | `pm context --parent <id> --depth deep`                                                                                                                    |

package/docs/AGENT_PROVENANCE_ADR.md

@@ -84,7 +84,7 @@ Modern MCP clients may supply a bounded
 `io.modelcontextprotocol/clientInfo.provenance` map in each request's `_meta`.
 The server retains only valid dimension names and trimmed values, then resolves
 that map inside the invocation-scoped identity context for that request. The
-bounded `2025-06-18` adapter accepts the same map during legacy `initialize`.
+bounded initialize-era adapter accepts the same map during legacy `initialize`.
 A missing MCP signal is recorded as explicit `null`; it is never confused with
 a legacy entry that predates the dimension.
 

package/docs/AGENT_RUNTIME_PRIMITIVES.md

@@ -158,8 +158,8 @@ summary. No history entry is rewritten.
 
 MCP 2026-07-28 reads `io.modelcontextprotocol/clientInfo` independently from
 every request's `_meta` and scopes only that request to the client signal. The
-bounded legacy adapter still reads `clientInfo` during `2025-06-18`
-`initialize`. Optional host-provided `model`, `session`, `provenance`, and
+bounded legacy adapter still reads `clientInfo` during an initialize-era
+handshake. Optional host-provided `model`, `session`, `provenance`, and
 `episode` fields are supported, but version is not misclassified as a model or
 session. Provenance keys must use the bounded
 lowercase dimension vocabulary; blank, malformed, and oversized data is

package/docs/ARCHITECTURE.md

@@ -56,9 +56,12 @@ src/
     shared/
   mcp/
     server.ts
+    tool-definitions.ts
   sdk/
     cli-contracts.ts
     index.ts
+    mcp/
+      discovery.ts
   types/
 tests/
   unit/
@@ -287,6 +290,8 @@ allowance file:
 Do not add new CLI/MCP behavior by deep-importing `src/core`. Add or extend an
 SDK primitive first, then consume that SDK surface from the presentation layer.
 
+Progressive tool discovery follows this boundary directly: `src/sdk/mcp/discovery.ts` owns ranking, authorization filtering, budgets, cursors, omissions, cache identity, and the canonical result contract. `src/mcp/server.ts` only negotiates the extension, selects the entry catalog, and adapts compatibility text. See [Progressive Tool Discovery](PROGRESSIVE_TOOL_DISCOVERY.md).
+
 ## Telemetry Schema Negotiation
 
 Telemetry preserves wire compatibility through an explicit client/server negotiation split: