@unbrained/pm-cli 2026.8.6 → 2026.8.7

package/.claude-plugin/marketplace.json

@@ -6,14 +6,14 @@
   },
   "metadata": {
     "description": "Official marketplace for pm CLI — native git-based project management for Claude Code and AI coding agents.",
-    "version": "2026.8.6"
+    "version": "2026.8.7"
   },
   "plugins": [
     {
       "name": "pm-claude",
       "source": "./plugins/pm-claude",
       "description": "Native pm CLI integration for Claude Code — 28 MCP tools, 5 workflow skills, 14 slash commands, 4 subagents, hybrid TUI task tracking, session context injection, and coordination subagents for git-based project management without leaving Claude Code.",
-      "version": "2026.8.6",
+      "version": "2026.8.7",
       "author": {
         "name": "unbrained",
         "url": "https://github.com/unbraind/pm-cli"

package/CHANGELOG.md

@@ -1,5 +1,35 @@
 # Changelog
 
+## 2026.8.7 - 2026-08-07
+
+### Added
+
+- Caller-carried output sessions compose token budgets across reads and suppress repeated item facts ([pm-hid9g1](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/features/pm-hid9g1.toon))
+- Fleet attribution analytics: per-harness and per-model throughput, rework, and defect-escape rates derived from immutable history alone ([pm-gw6uyq](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/features/pm-gw6uyq.toon))
+- Improvement ledger: measured properties of pm carry a recorded time series, because a ceiling proves a number did not grow and can never prove a change made it smaller ([pm-chahyq](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/features/pm-chahyq.toon))
+
+### Changed
+
+- Update @toon-format/toon to 4.1.1 and verify codec compatibility ([pm-ko35zx](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/chores/pm-ko35zx.toon))
+
+### Fixed
+
+- Nested pm test coverage changes repository-root fixtures because outer PM_PATH sandboxing leaks into package-owned run-tests ([pm-ay3l0p](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-ay3l0p.toon))
+- Read surfaces have no common row contract: field projection reaches 4 of 11 commands and the row collection sits under a different key on each, so no single shell or jq expression works across pm ([pm-sb0tns](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-sb0tns.toon))
+- Sentry PM-CLI-2W: rejected unknown-author acknowledgments are emitted as high production errors ([pm-c3uru0](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-c3uru0.toon))
+- Expose live bounded provenance coverage over immutable history ([pm-1wiugq](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-1wiugq.toon))
+- GH-915: Windows nightly Vite import portability and shared contract-fixture isolation regressions ([pm-ssd7vv](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-ssd7vv.toon))
+- GH-914: macOS extension source identity compares non-canonical /var and /private/var paths ([pm-eu46an](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-eu46an.toon))
+- The coverage gate every contributor is told to run is not a gate: run-tests.mjs coverage prints the shortfall and exits 0, so only CI can fail on coverage ([pm-2qqcgl](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-2qqcgl.toon))
+- The one projection that promises completeness is the one that loses data: pm contracts --full drops all 76 structured command summaries, returns 160 bare name strings, and reports has_omissions false ([pm-x0iv17](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-x0iv17.toon))
+- GH-910: keep extension assets outside item merge-driver patterns ([pm-t9qbmp](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-t9qbmp.toon))
+- GH-911: preserve runtime dependency resolution in post-install activation probes ([pm-pg9599](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-pg9599.toon))
+- GH-912 regression: restore atomic cross-owner seeded Plan creation ([pm-hxuqsa](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/issues/pm-hxuqsa.toon))
+
+### Other
+
+- Refresh compatible tooling dependencies: tsx 4.23.8 and pm-changelog 2026.8.6 ([pm-l9fv1e](https://github.com/unbraind/pm-cli/blob/main/.agents/pm/chores/pm-l9fv1e.toon))
+
 ## 2026.8.6 - 2026-08-06
 
 ### Fixed

package/dist/cli/main.js

@@ -3,7 +3,7 @@
  * @module cli/main
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="a16a4e5c-eaa5-59fd-a1ba-b5752e29ec47")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="bb6049e8-1185-5702-b8c1-3a30a98db516")}catch(e){}}();
 import { Command } from "commander";
 import { activateExtensions, clearActiveExtensionHooks, createCoreCommandHookContext, resetActiveExtensionRuntimeState, createEmptyExtensionRegistrationRegistry, discoverExtensions, getActiveCommandResult, getActiveExtensionRegistrations, loadExtensions, consumeAfterCommandAffectedItems, runActiveCommandHandler, runActiveParserOverride, runActivePreflightOverride, runAfterCommandHooks, runBeforeCommandHooks, setActiveCommandResult, setActiveCommandContext, setActiveExtensionCommands, setActiveExtensionHooks, setActiveExtensionParsers, setActiveExtensionPreflight, setActiveExtensionRegistrations, setActiveExtensionRenderers, setActiveExtensionServices, pathExists, resolvePmCliVersion, resolvePmPackageRootFromModule, resolveItemTypeRegistry, resolveRuntimeFieldRegistry, EXIT_CODE, resolveTelemetryErrorCategory, PmCliError, asRecordOrNull, printError, printResult, maybeRunFirstUseTelemetryPrompt, emitTelemetryErrorEvent, startTelemetryCommand, deriveTelemetryCommandResolution, sentryCaptureCliError, sentryFinishCommandSpan, sentryFlush, sentryLogCliUsageError, sentrySetCommandContext, sentryStartCommandSpan, ensureSentryInit, getSettingsPath, resolvePmRoot, readSettings, readSettingsWithMetadata, runWithWorkspaceHarnessSignalDescriptors, createLazyModule, } from "../sdk/runtime-primitives.js";
 import { resolveSubcommandFlagContractsForCommand } from "../sdk/cli-contracts.js";
@@ -515,6 +515,7 @@ function extractCommandScopedOptions(command, commandArgs, extensionFlagDefiniti
     delete scoped.outputLimit;
     delete scoped.outputBudget;
     delete scoped.outputFormat;
+    delete scoped.outputSession;
     const looseOptions = parseLooseCommandOptions(commandArgs);
     for (const [key, value] of Object.entries(looseOptions)) {
         /* c8 ignore next */
@@ -1541,6 +1542,7 @@ function attachProgramLifecycleHooks(rootProgram) {
             outputLimit: rawGlobalOptions.outputLimit,
             outputBudget: rawGlobalOptions.outputBudget,
             outputFormat: rawGlobalOptions.outputFormat,
+            outputSession: rawGlobalOptions.outputSession,
         });
         await maybeRunFirstUseTelemetryPrompt(commandPath, globalOptions);
         const fallbackPmRoot = resolvePmRoot(process.cwd(), bootstrapGlobalOptions.path);
@@ -2451,4 +2453,4 @@ export const _testOnly = {
     wrapThrownErrorForSentry,
 };
 //# sourceMappingURL=main.js.map
-//# debugId=a16a4e5c-eaa5-59fd-a1ba-b5752e29ec47
+//# debugId=bb6049e8-1185-5702-b8c1-3a30a98db516

package/dist/cli/register-operations.js

@@ -1,7 +1,8 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="f8f29a82-44af-5354-9880-335ec177bae3")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="4856ec1e-7841-5ad0-95e3-6e3057ed999c")}catch(e){}}();
 import { resolveRuntimeStatusRegistry, setActiveCommandResult, EXIT_CODE, PmCliError, resolveAuthor, resolvePmRoot, readSettings, } from "../sdk/runtime-primitives.js";
 import { resolveStartTaskInProgressStatus } from "../sdk/start-task-status.js";
+import { parseStatsAnalyticsJson } from "./stats-analytics-json.js";
 import { createWorkspaceSnapshot, deleteWorkspaceSnapshot, inspectWorkspaceSnapshot, listWorkspaceSnapshots, planWorkspaceSnapshotRestore, restoreWorkspaceSnapshotWithRecovery, } from "../sdk/workspace-snapshot.js";
 import { runClaim, runClaimNext, runRelease } from "./commands/claim.js";
 import { runClose } from "./commands/close.js";
@@ -232,6 +233,7 @@ async function runTelemetryAction(namespaceOrSubcommand, subcommand, options, co
 async function runStatsAction(options, command) {
     const globalOptions = getGlobalOptions(command);
     const startedAt = Date.now();
+    const analytics = parseStatsAnalyticsJson(readOptionString(options, "analytics"));
     const result = await runStats(globalOptions, {
         storage: options.storage === true,
         metadataCoverage: options.metadataCoverage === true,
@@ -240,7 +242,13 @@ async function runStatsAction(options, command) {
         byPriority: options.byPriority === true,
         tagPrefix: readOptionString(options, "tagPrefix"),
         fieldUtilization: options.fieldUtilization === true,
+        ...analytics,
     });
+    if (result.recorded_observations?.some((entry) => entry.changed) === true) {
+        await invalidateSearchCachesForMutation(globalOptions, {
+            ids: result.recorded_observations?.flatMap((entry) => entry.observation.item_id ? [entry.observation.item_id] : []),
+        });
+    }
     printResult(result, globalOptions);
     if (globalOptions.profile) {
         printError(`profile:command=stats took_ms=${Date.now() - startedAt}`);
@@ -607,6 +615,7 @@ export function registerOperationCommands(program) {
         .option("--by-priority", "Include a lifecycle-bucketed item breakdown grouped by priority")
         .option("--tag-prefix <value>", "With --by-tag: only count tags starting with this prefix (e.g. domain:)")
         .option("--field-utilization", "Report content-field utilization rates (notes/learnings/files/docs/tests/comments/deps/body) for governance analysis")
+        .option("--analytics <json>", "Improvement ledger/history analytics JSON")
         .action(runStatsAction);
     program
         .command("health")
@@ -849,4 +858,4 @@ function registerSchedulingShortcutCommands(program) {
     });
 }
 //# sourceMappingURL=register-operations.js.map
-//# debugId=f8f29a82-44af-5354-9880-335ec177bae3
+//# debugId=4856ec1e-7841-5ad0-95e3-6e3057ed999c

package/dist/cli/stats-analytics-json.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @module cli/stats-analytics-json
+ *
+ * Validates the compact JSON adapter used to keep the agent-facing stats CLI
+ * contract bounded while preserving the fully typed SDK and MCP primitives.
+ */
+import type { StatsCommandOptions } from "./commands/stats.js";
+/** Parse and strictly validate the compact CLI improvement-analytics payload. */
+export declare function parseStatsAnalyticsJson(input: string | undefined): StatsCommandOptions;

package/dist/cli/stats-analytics-json.js

@@ -0,0 +1,69 @@
+
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="13159f49-7756-58b8-ac32-7ddd571e7d09")}catch(e){}}();
+import { EXIT_CODE, PmCliError } from "../sdk/runtime-primitives.js";
+const STATS_ANALYTICS_JSON_FIELDS = new Map([
+    ["measurements", "boolean"],
+    ["metric", "string"],
+    ["measurementLimit", "number"],
+    ["observe", "string_array"],
+    ["direction", "direction"],
+    ["measurementSource", "string"],
+    ["measurementItem", "string"],
+    ["measurementRevision", "string"],
+    ["author", "string"],
+    ["message", "string"],
+    ["provenanceCoverage", "boolean"],
+    ["fleetAttribution", "boolean"],
+    ["since", "string"],
+    ["eventLimit", "number"],
+    ["minimumSample", "number"],
+]);
+const IMPROVEMENT_DIRECTIONS = new Set([
+    "higher",
+    "lower",
+    "target",
+]);
+const ACCEPTED_STATS_ANALYTICS_JSON_FIELDS = [
+    ...STATS_ANALYTICS_JSON_FIELDS.keys(),
+]
+    .sort((left, right) => left.localeCompare(right))
+    .join(", ");
+/** Validate one field against the compact analytics JSON type contract. */
+function isStatsAnalyticsValue(expected, value) {
+    if (expected === "boolean")
+        return typeof value === "boolean";
+    if (expected === "string")
+        return typeof value === "string";
+    if (expected === "number")
+        return typeof value === "number";
+    if (expected === "string_array") {
+        return (Array.isArray(value) && value.every((entry) => typeof entry === "string"));
+    }
+    return expected === "direction" && IMPROVEMENT_DIRECTIONS.has(value);
+}
+/** Parse and strictly validate the compact CLI improvement-analytics payload. */
+export function parseStatsAnalyticsJson(input) {
+    if (input === undefined)
+        return {};
+    let parsed;
+    try {
+        parsed = JSON.parse(input);
+    }
+    catch (error) {
+        throw new PmCliError(`--analytics must be valid JSON: ${String(error)}`, EXIT_CODE.USAGE);
+    }
+    if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+        throw new PmCliError("--analytics must be a JSON object.", EXIT_CODE.USAGE);
+    }
+    for (const [key, value] of Object.entries(parsed)) {
+        const expected = STATS_ANALYTICS_JSON_FIELDS.get(key);
+        if (!isStatsAnalyticsValue(expected, value)) {
+            throw new PmCliError(expected === undefined
+                ? `Unknown --analytics field "${key}". Accepted fields: ${ACCEPTED_STATS_ANALYTICS_JSON_FIELDS}.`
+                : `--analytics field "${key}" must be ${expected.replace("_", " ")}.`, EXIT_CODE.USAGE);
+        }
+    }
+    return parsed;
+}
+//# sourceMappingURL=stats-analytics-json.js.map
+//# debugId=13159f49-7756-58b8-ac32-7ddd571e7d09