@unbrained/pm-cli 2026.8.31 → 2026.9.2

package/packages/pm-kanban/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-kanban",
-  "version": "2026.8.31",
+  "version": "2026.9.2",
   "private": true,
   "type": "module",
   "description": "First-party pm archetype package: a complete Kanban continuous-flow profile built on public SDK primitives.",

package/packages/pm-lifecycle-hooks/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-lifecycle-hooks",
-  "version": "2026.8.31",
+  "version": "2026.9.2",
   "private": true,
   "type": "module",
   "description": "First-party pm package demonstrating safe lifecycle hook registration.",

package/packages/pm-linked-test-adapters/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-linked-test-adapters",
-  "version": "2026.8.31",
+  "version": "2026.9.2",
   "private": true,
   "type": "module",
   "description": "First-party pm package for optional linked-test run management adapters and reporters.",

package/packages/pm-search-advanced/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-search-advanced",
-  "version": "2026.8.31",
+  "version": "2026.9.2",
   "private": true,
   "type": "module",
   "description": "First-party pm package for semantic, hybrid, and reindex search workflows.",

package/packages/pm-templates/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-templates",
-  "version": "2026.8.31",
+  "version": "2026.9.2",
   "private": true,
   "type": "module",
   "description": "First-party pm package for reusable create templates.",

package/packages/pm-todos/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-todos",
-  "version": "2026.8.31",
+  "version": "2026.9.2",
   "private": true,
   "type": "module",
   "description": "First-party pm package for Todo markdown import and export.",

package/packages/pm-vcs/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-vcs-sdk-exemplar",
-  "version": "2026.8.31",
+  "version": "2026.9.2",
   "private": true,
   "type": "module",
   "description": "Beyond-PM exemplar: a VCS-style changeset workflow built entirely on public pm SDK and extension primitives.",

package/plugins/pm-claude/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "pm-claude",
   "description": "Native pm CLI integration for Claude Code — 28 MCP tools, 5 workflow skills, 14 slash commands, 4 subagents (coordinator, delivery-chain, triage, verification), hybrid TUI task tracking (pm as persistent store + Claude Code task panel as live view), session context injection, and full git-based project management without leaving Claude Code.",
-  "version": "2026.8.31",
+  "version": "2026.9.2",
   "author": {
     "name": "unbrained",
     "url": "https://github.com/unbraind/pm-cli"

package/plugins/pm-claude/README.md

@@ -6,7 +6,7 @@ Native pm CLI integration for Claude Code. Use pm project management tools direc
 
 | Component | What it provides |
 |-----------|----------------|
-| **31 MCP tools** | Full pm surface: next, context, search, events, list, get, create, atomic mutate, copy, focus, update, claim, release, close, comments, files, docs, notes, learnings, deps, graph, test, validate, health, contracts, plan, append, schema, config, profile + `pm_run` for everything else |
+| **32 MCP tools** | Full pm surface: discover, next, context, search, events, list, get, create, atomic mutate, copy, focus, update, claim, release, close, comments, files, docs, notes, learnings, deps, graph, test, validate, health, contracts, plan, append, schema, config, profile + `pm_run` for everything else |
 | **5 skills** | `pm-workflow`, `pm-developer`, `pm-release`, `pm-audit`, `pm-planner` — auto-loaded as Claude Code skills |
 | **14 slash commands** | Full lifecycle coverage — status, start, close, triage, audit, search, new, list, calendar, developer, planner, release, workflow, init |
 | **4 subagents** | `pm-coordinator` (batch/multi-item), `pm-triage-agent` (duplicate-safe item creation), `pm-verification-agent` (evidence + close readiness), and `pm-delivery-chain` (orchestrated delivery) |
@@ -29,7 +29,7 @@ claude plugin marketplace add /path/to/pm-cli
 # claude plugin marketplace add unbraind/pm-cli
 ```
 
-This installs all 31 MCP tools, 5 skills, 14 slash commands, 4 subagents, hybrid TUI tracking, and the session hook in one step. (`pm-claude` is the plugin name; `pm` is the marketplace name from `marketplace.json`.)
+This installs all 32 MCP tools, 5 skills, 14 slash commands, 4 subagents, hybrid TUI tracking, and the session hook in one step. (`pm-claude` is the plugin name; `pm` is the marketplace name from `marketplace.json`.)
 
 ### Option B: Global MCP server via Claude Code CLI (MCP tools only)
 
@@ -37,7 +37,7 @@ This installs all 31 MCP tools, 5 skills, 14 slash commands, 4 subagents, hybrid
 claude mcp add --transport stdio pm-mcp -- npx -y --package=@unbrained/pm-cli@latest pm-mcp
 ```
 
-This gives you the 31 MCP tools but not the skills, slash commands, or session hook.
+This gives you the 32 MCP tools but not the skills, slash commands, or session hook.
 
 ### Option C: Direct `.mcp.json` (project-scoped MCP only)
 
@@ -136,6 +136,7 @@ Spawn pm-triage-agent to set up the pm item for: add OAuth2 login support
 
 | Tool | Purpose |
 |------|---------|
+| `pm_discover` | Expand the authorized tool catalog by intent under an explicit token budget |
 | `pm_next` | Pick the next actionable item |
 | `pm_context` | Active work snapshot |
 | `pm_search` | Keyword/semantic/hybrid search |

package/plugins/pm-codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "pm-codex",
-  "version": "2026.8.31",
+  "version": "2026.9.2",
   "description": "Native Codex integration for pm-cli with bundled MCP tools, skills, commands, and agent workflows.",
   "author": {
     "name": "unbrained",

package/sdk/public-surface.json

@@ -1,6 +1,6 @@
 {
   "aggregate_completeness": {
-    "covered_symbols": 1820,
+    "covered_symbols": 1825,
     "excluded": [
       {
         "name": "_testOnlyCliContracts",
@@ -8,7 +8,7 @@
       }
     ],
     "missing": [],
-    "required_symbols": 1821
+    "required_symbols": 1826
   },
   "breaking_acknowledgements": [
     {
@@ -1446,6 +1446,33 @@
       ],
       "package_version": "2026.8.30",
       "reason": "Fail closed on malformed history evidence and expose complete bounded lifecycle-role diagnostics"
+    },
+    {
+      "changes": [
+        "signature ./sdk:MergeReceiptEvidenceReport",
+        "signature ./sdk:MergeReceiptEvidenceScan",
+        "signature ./sdk/merge:MergeReceiptEvidenceReport",
+        "signature ./sdk/merge:MergeReceiptEvidenceScan"
+      ],
+      "package_version": "2026.8.30",
+      "reason": "Add optional clone-local resolution evidence to loss-aware receipt scans and reports so gates fail closed while existing structural consumers remain compatible."
+    },
+    {
+      "changes": [
+        "signature ./sdk:PmToolDiscoveryOptions"
+      ],
+      "package_version": "2026.8.31",
+      "reason": "Add optional host-owned cursor integrity key for deployment-stable pagination; existing callers and process-local fallback remain compatible."
+    },
+    {
+      "changes": [
+        "signature ./sdk:MergeReceiptEvidenceReport",
+        "signature ./sdk:MergeReceiptEvidenceScan",
+        "signature ./sdk/merge:MergeReceiptEvidenceReport",
+        "signature ./sdk/merge:MergeReceiptEvidenceScan"
+      ],
+      "package_version": "2026.9.1",
+      "reason": "Expose loss-aware receipt evidence details as required runtime fields so SDK gates cannot silently discard invalid candidates."
     }
   ],
   "entrypoints": {
@@ -5508,6 +5535,12 @@
           "name": "discoverNearbyPmRoot",
           "signature": "(cwd: string, excludedRoot?: string) => string | undefined | calls: (cwd: string, excludedRoot?: string) => string | undefined"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "discoverPmTools",
+          "signature": "(candidates: readonly PmToolDiscoveryCandidate[], options?: PmToolDiscoveryOptions) => PmToolDiscoveryResult | calls: (candidates: readonly PmToolDiscoveryCandidate[], options?: PmToolDiscoveryOptions) => PmToolDiscoveryResult"
+        },
         {
           "classification": "advanced_export",
           "kind": "function",
@@ -8088,6 +8121,12 @@
           "name": "inspectHistoryAuthorStream",
           "signature": "(itemId: string, raw: string, sampleLimit?: number, acknowledgedEvents?: ReadonlySet<string>) => Pick<HistoryAuthorAttributionScan, \"acknowledged_actionable_event_count\" | \"actionable_events\" | \"actionable_unknown_event_count\" | \"checked_events\" | \"legacy_unknown_event_count\" | \"samples_truncated\" | \"samples\" | \"unknown_event_count\"> | calls: (itemId: string, raw: string, sampleLimit?: number, acknowledgedEvents?: ReadonlySet<string>) => Pick<HistoryAuthorAttributionScan, \"checked_events\" | \"unknown_event_count\" | \"legacy_unknown_event_count\" | \"actionable_unknown_event_count\" | \"acknowledged_actionable_event_count\" | \"samples\" | \"samples_truncated\" | \"actionable_events\">"
         },
+        {
+          "classification": "supported",
+          "kind": "function",
+          "name": "inspectMergeReceiptEvidence",
+          "signature": "(cwd: string, options?: { includeReconciled?: boolean; includeLossless?: boolean; pmRoot?: string; }) => Promise<MergeReceiptEvidenceScan> | calls: (cwd: string, options?: { includeReconciled?: boolean; includeLossless?: boolean; pmRoot?: string; }) => Promise<MergeReceiptEvidenceScan>"
+        },
         {
           "classification": "advanced_export",
           "kind": "function",
@@ -9258,6 +9297,24 @@
           "name": "MergePreferredSide",
           "signature": "export type MergePreferredSide = \"ours\" | \"theirs\";"
         },
+        {
+          "classification": "supported",
+          "kind": "interface",
+          "name": "MergeReceiptEvidenceReport",
+          "signature": "export interface MergeReceiptEvidenceReport { ok: boolean; complete: boolean; count: number; invalid_evidence_count: number; invalid_evidence: MergeReceiptInvalidEvidence[]; invalid_evidence_truncated: boolean; clone_local_evidence_resolved?: boolean; receipts: MergeDecisionReceipt[]; generated_at: string; }"
+        },
+        {
+          "classification": "supported",
+          "kind": "interface",
+          "name": "MergeReceiptEvidenceScan",
+          "signature": "export interface MergeReceiptEvidenceScan { receipts: MergeDecisionReceipt[]; invalid_evidence_count: number; invalid_evidence: MergeReceiptInvalidEvidence[]; invalid_evidence_truncated: boolean; clone_local_evidence_resolved?: boolean; }"
+        },
+        {
+          "classification": "supported",
+          "kind": "interface",
+          "name": "MergeReceiptInvalidEvidence",
+          "signature": "export interface MergeReceiptInvalidEvidence { evidence_source: \"clone_local\" | \"durable\" | \"clone_local_and_durable\"; reason: \"directory_unreadable\" | \"candidate_not_bounded_regular_file\" | \"candidate_unreadable\" | \"candidate_invalid_json\" | \"schema_or_identity_invalid\" | \"copy_provenance_mismatch\"; receipt_id?: string; candidate_name_hash?: string; }"
+        },
         {
           "classification": "advanced_export",
           "kind": "interface",
@@ -10176,6 +10233,12 @@
           "name": "parsePmAgentTaskTranscriptCorpus",
           "signature": "(value: unknown) => PmAgentTaskTranscriptCorpus | calls: (value: unknown) => PmAgentTaskTranscriptCorpus"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "function",
+          "name": "parsePmToolDiscoveryOptions",
+          "signature": "(input: Record<string, unknown>) => PmToolDiscoveryOptions | calls: (input: Record<string, unknown>) => PmToolDiscoveryOptions"
+        },
         {
           "classification": "supported",
           "kind": "function",
@@ -10758,6 +10821,12 @@
           "name": "PM_MCP_APPS_SPEC_VERSION",
           "signature": "\"2026-01-26\""
         },
+        {
+          "classification": "advanced_export",
+          "kind": "value",
+          "name": "PM_MCP_ENTRY_TOOL_NAMES",
+          "signature": "readonly string[]"
+        },
         {
           "classification": "advanced_export",
           "kind": "value",
@@ -10788,6 +10857,18 @@
           "name": "PM_MCP_META_KEYS",
           "signature": "{ readonly clientCapabilities: \"io.modelcontextprotocol/clientCapabilities\"; readonly clientInfo: \"io.modelcontextprotocol/clientInfo\"; readonly protocolVersion: \"io.modelcontextprotocol/protocolVersion\"; readonly serverInfo: \"io.modelcontextprotocol/serverInfo\"; }"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "value",
+          "name": "PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION",
+          "signature": "\"dev.unbrained.pm/progressive-tool-discovery\""
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "value",
+          "name": "PM_MCP_PROGRESSIVE_DISCOVERY_SERVER_CAPABILITY",
+          "signature": "Readonly<{ version: 1; discoveryTool: \"pm_discover\"; canonicalResult: \"structuredContent.result\"; compatibilityText: \"pointer\"; }>"
+        },
         {
           "classification": "advanced_export",
           "kind": "value",
@@ -12384,6 +12465,54 @@
           "name": "PmToolCustomFieldCollision",
           "signature": "export interface PmToolCustomFieldCollision { field: string; property: string; owner: \"mcp_tool_input\"; nested_path: string; }"
         },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmToolDiscoveryAppliedSignal",
+          "signature": "export interface PmToolDiscoveryAppliedSignal { value: number; weight: number; available: boolean; source: \"computed\" | \"host\" | \"authorization\" | \"unavailable\"; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmToolDiscoveryCandidate",
+          "signature": "export interface PmToolDiscoveryCandidate { name: string; description: string; inputSchema: Record<string, unknown>; authorized?: boolean; signals?: PmToolDiscoverySignalInput; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmToolDiscoveryOmissionReceipt",
+          "signature": "export interface PmToolDiscoveryOmissionReceipt { has_omissions: boolean; omitted: Array<{ name: \"input_schema\" | \"tools\"; reason: \"compact_projection\" | \"limit\" | \"token_budget\"; restore_with: string; }>; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmToolDiscoveryOptions",
+          "signature": "export interface PmToolDiscoveryOptions { query?: string; family?: PmCommandCapabilityFamily; tier?: Exclude<PmCommandVisibilityTier, \"internal\">; limit?: number; cursor?: string; includeSchema?: boolean; outputBudget?: number | \"unbounded\"; profile?: PmMcpToolProfile; cursorIntegrityKey?: Uint8Array; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmToolDiscoveryResult",
+          "signature": "export interface PmToolDiscoveryResult { result_type: \"pm_tool_discovery\"; contract_version: 1; query: string; profile: PmMcpToolProfile; tools: PmToolDiscoveryResultRow[]; total: number; returned: number; has_more: boolean; next_cursor?: string; token_cost: { estimated_tokens: number; budget: number | \"unbounded\"; within_budget: boolean; }; ranking_policy: { version: 1; formula: \"weighted_sum_then_name\"; weights: Readonly<Record<PmToolDiscoverySignalName, number>>; }; cache: { key: string; ttl_ms: number; scope: \"private\"; invalidates_on: readonly string[]; }; omission_receipt: PmToolDiscoveryOmissionReceipt; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmToolDiscoveryResultRow",
+          "signature": "export interface PmToolDiscoveryResultRow { name: string; description: string; command: string; tier: PmCommandVisibilityTier; family: PmCommandCapabilityFamily; score: number; signals: Readonly<Record<PmToolDiscoverySignalName, PmToolDiscoveryAppliedSignal>>; input_schema?: Record<string, unknown>; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "interface",
+          "name": "PmToolDiscoverySignalInput",
+          "signature": "export interface PmToolDiscoverySignalInput { semantic?: number; graph?: number; freshness?: number; usage?: number; }"
+        },
+        {
+          "classification": "advanced_export",
+          "kind": "type",
+          "name": "PmToolDiscoverySignalName",
+          "signature": "export type PmToolDiscoverySignalName = \"lexical\" | \"semantic\" | \"graph\" | \"permission\" | \"freshness\" | \"usage\";"
+        },
         {
           "classification": "contract_data",
           "kind": "type",
@@ -15528,6 +15657,12 @@
           "name": "runMergeInstall",
           "signature": "(options: MergeInstallOptions, global: GlobalOptions) => Promise<MergeInstallResult> | calls: (options: MergeInstallOptions, global: GlobalOptions) => Promise<MergeInstallResult>"
         },
+        {
+          "classification": "supported",
+          "kind": "function",
+          "name": "runMergeReceiptEvidenceReport",
+          "signature": "(options: { includeReconciled?: boolean; cwd?: string; }) => Promise<MergeReceiptEvidenceReport> | calls: (options: { includeReconciled?: boolean; cwd?: string; }) => Promise<MergeReceiptEvidenceReport>"
+        },
         {
           "classification": "supported",
           "kind": "function",
@@ -26460,6 +26595,12 @@
           "name": "HistoryMergeStrategy",
           "signature": "export type HistoryMergeStrategy = \"identical\" | \"fast_forward_ours\" | \"fast_forward_theirs\" | \"union_reanchor\";"
         },
+        {
+          "classification": "supported",
+          "kind": "function",
+          "name": "inspectMergeReceiptEvidence",
+          "signature": "(cwd: string, options?: { includeReconciled?: boolean; includeLossless?: boolean; pmRoot?: string; }) => Promise<MergeReceiptEvidenceScan> | calls: (cwd: string, options?: { includeReconciled?: boolean; includeLossless?: boolean; pmRoot?: string; }) => Promise<MergeReceiptEvidenceScan>"
+        },
         {
           "classification": "supported",
           "kind": "function",
@@ -26604,6 +26745,24 @@
           "name": "MergePreferredSide",
           "signature": "export type MergePreferredSide = \"ours\" | \"theirs\";"
         },
+        {
+          "classification": "supported",
+          "kind": "interface",
+          "name": "MergeReceiptEvidenceReport",
+          "signature": "export interface MergeReceiptEvidenceReport { ok: boolean; complete: boolean; count: number; invalid_evidence_count: number; invalid_evidence: MergeReceiptInvalidEvidence[]; invalid_evidence_truncated: boolean; clone_local_evidence_resolved?: boolean; receipts: MergeDecisionReceipt[]; generated_at: string; }"
+        },
+        {
+          "classification": "supported",
+          "kind": "interface",
+          "name": "MergeReceiptEvidenceScan",
+          "signature": "export interface MergeReceiptEvidenceScan { receipts: MergeDecisionReceipt[]; invalid_evidence_count: number; invalid_evidence: MergeReceiptInvalidEvidence[]; invalid_evidence_truncated: boolean; clone_local_evidence_resolved?: boolean; }"
+        },
+        {
+          "classification": "supported",
+          "kind": "interface",
+          "name": "MergeReceiptInvalidEvidence",
+          "signature": "export interface MergeReceiptInvalidEvidence { evidence_source: \"clone_local\" | \"durable\" | \"clone_local_and_durable\"; reason: \"directory_unreadable\" | \"candidate_not_bounded_regular_file\" | \"candidate_unreadable\" | \"candidate_invalid_json\" | \"schema_or_identity_invalid\" | \"copy_provenance_mismatch\"; receipt_id?: string; candidate_name_hash?: string; }"
+        },
         {
           "classification": "supported",
           "kind": "interface",
@@ -26688,6 +26847,12 @@
           "name": "runMergeInstall",
           "signature": "(options: MergeInstallOptions, global: GlobalOptions) => Promise<MergeInstallResult> | calls: (options: MergeInstallOptions, global: GlobalOptions) => Promise<MergeInstallResult>"
         },
+        {
+          "classification": "supported",
+          "kind": "function",
+          "name": "runMergeReceiptEvidenceReport",
+          "signature": "(options: { includeReconciled?: boolean; cwd?: string; }) => Promise<MergeReceiptEvidenceReport> | calls: (options: { includeReconciled?: boolean; cwd?: string; }) => Promise<MergeReceiptEvidenceReport>"
+        },
         {
           "classification": "supported",
           "kind": "function",
@@ -31952,6 +32117,7 @@
     "merge_decisions_unreviewed",
     "merge_git_config_unwritable",
     "merge_receipt_evidence_invalid",
+    "merge_receipt_history_reference_missing",
     "merge_receipts_pending",
     "merge_reconcile_receipt_evidence_untrusted",
     "merge_root_not_found",