@unbrained/pm-cli 2026.8.7 → 2026.8.8

package/docs/RELEASING.md

@@ -21,7 +21,10 @@ Tracked documentation work: [pm-u9d0](../.agents/pm/epics/pm-u9d0.toon),
 [pm-39cqqx](../.agents/pm/tasks/pm-39cqqx.toon), stable peer compatibility
 [pm-csuce0](../.agents/pm/issues/pm-csuce0.toon), and artifact budgets
 [pm-998juj](../.agents/pm/tasks/pm-998juj.toon), plus exact-tag recovery
-[pm-lwnifd](../.agents/pm/issues/pm-lwnifd.toon).
+[pm-lwnifd](../.agents/pm/issues/pm-lwnifd.toon), and SDK-bound reliability
+classification [pm-dqtzva](../.agents/pm/issues/pm-dqtzva.toon).
+The local/hosted gate selection contract is tracked by
+[pm-ei6x66](../.agents/pm/tasks/pm-ei6x66.toon).
 
 ## Version Policy
 
@@ -177,6 +180,16 @@ Run the public Sentry/telemetry threshold gate through the package script alias:
 pnpm sentry:telemetry:gate -- --telemetry-mode best-effort
 ```
 
+The Sentry threshold gate reads the latest event for each issue and classifies
+expected handled failures from the SDK error catalog. An event is ignored only
+when it is handled, its `pm.error_code` resolves to a declared canonical code,
+its `pm.exit_code` exactly matches that code's transport contract, and the
+semantic class is `usage`, `not_found`, or `conflict`. Message and title prose
+never participate. Unknown codes, missing or mismatched exits, unhandled
+events, and every `generic_failure` or `dependency_failed` remain blocking.
+This keeps rewording independent from release policy and makes stale or broad
+message allowlists impossible.
+
 If private reliability checks identify repeated user friction, either confirm the current release already contains the remediation with regression coverage or fix it before continuing.
 
 The build writes `dist/cli-bundle/bundle-manifest.json` atomically with SHA-256 digests for every emitted bundle file. At startup, `pm` reports `bundle_integrity_torn_install` only when a module-loader failure is accompanied by manifest proof that an upgrade or rebuild changed, removed, or corrupted the active bundle. Reinstall `@unbrained/pm-cli` and retry after that diagnostic. Ordinary `ERR_MODULE_NOT_FOUND` and export failures with an intact manifest remain unexpected failures and must continue to block reliability gates.
@@ -184,7 +197,19 @@ The build writes `dist/cli-bundle/bundle-manifest.json` atomically with SHA-256
 4. Run the same release pipeline locally.
 
 Push the final implementation commit first, wait for DeepScan and CodeFactor to
-finish on that reviewed SHA, and run the mandatory local hosted-analysis proof:
+finish on that reviewed SHA, then run the canonical registry-owned preflight:
+
+```bash
+pnpm verify:preflight
+```
+
+The registry supplies the ordered executable plan, command arguments,
+environment, capture policy, and explicit skip policy. Its receipt distinguishes
+passed checks from declared skips. The same registry maps named PR, nightly,
+and release workflow gates; hosted-only entries must explain why no faithful
+local equivalent exists.
+
+The preflight includes the mandatory local hosted-analysis proof:
 
 ```bash
 pnpm quality:hosted-analysis

package/docs/SCRIPTING.md

@@ -1,6 +1,6 @@
 # CLI Scripting Contract
 
-Tracked by [pm-psy1](../.agents/pm/tasks/pm-psy1.toon), [pm-gknu](../.agents/pm/issues/pm-gknu.toon), [pm-999jh7](../.agents/pm/issues/pm-999jh7.toon), and [pm-srns](../.agents/pm/issues/pm-srns.toon).
+Tracked by [pm-psy1](../.agents/pm/tasks/pm-psy1.toon), [pm-hqa8g1](../.agents/pm/tasks/pm-hqa8g1.toon), [pm-gknu](../.agents/pm/issues/pm-gknu.toon), [pm-999jh7](../.agents/pm/issues/pm-999jh7.toon), and [pm-srns](../.agents/pm/issues/pm-srns.toon).
 
 Use this contract when composing `pm` with shells, CI runners, `jq`, or another process. Exact flags remain discoverable from `pm <command> --help --json` and `pm contracts --command <command> --flags-only --json`.
 
@@ -14,6 +14,32 @@ Use this contract when composing `pm` with shells, CI runners, `jq`, or another
 | `3`  | Requested tracker or resource was not found.                                     | Correct the path or ID.                              |
 | `4`  | State or concurrency conflict.                                                   | Refresh live state before deciding whether to retry. |
 | `5`  | A required dependency operation failed.                                          | Inspect the dependency evidence before retrying.     |
+| `6`  | The request succeeded but matched nothing to change.                              | Treat as success and inspect the effect receipt.      |
+| `7`  | The request succeeded and changed only part of the selected targets.              | Treat as success and inspect unmatched/skipped rows.  |
+
+Exits `0`, `6`, and `7` are successful outcomes. Bulk mutation envelopes repeat
+the distinction as `outcome: effect`, `outcome: no_effect`, or `outcome:
+partial_effect` with the same `exit_code`. Because POSIX shells treat every
+nonzero exit as a false condition, scripts invoking effect-aware bulk commands
+must preserve and classify the status explicitly rather than relying on a bare
+`if` condition:
+
+```bash
+set +e
+result=$(pm update-many --ids "$ids" --tags reviewed --json)
+status=$?
+set -e
+
+case "$status" in
+  0|6|7) printf '%s\n' "$result" | jq '{outcome, matched_count, updated_count}' ;;
+  *)     printf '%s\n' "pm update-many failed with exit $status" >&2; exit "$status" ;;
+esac
+```
+
+The generated contract is authoritative. `pm contracts --command update-many
+--full --json` returns `command_exit_contracts.vocabulary` and the selected
+command's exhaustive `exit_codes`; SDK consumers can use the same declarations
+and `isPmSuccessfulExitCode` from `@unbrained/pm-cli/sdk/contracts`.
 
 Successful structured results are written to stdout. Diagnostics, warnings, profiles, and errors are written to stderr so `--json`, `--format ndjson`, CSV, and table stdout remain pipe-safe. Never merge stderr into stdout before parsing structured output.
 

package/docs/SDK_CONTEXT_INTEGRITY.md

@@ -0,0 +1,66 @@
+# SDK Context Integrity
+
+Tracker: [pm-0k19l7](../.agents/pm/issues/pm-0k19l7.toon), [pm-9stazf](../.agents/pm/issues/pm-9stazf.toon), [pm-tu71](../.agents/pm/issues/pm-tu71.toon), [pm-0xmajx](../.agents/pm/issues/pm-0xmajx.toon), [pm-7rrqsk](../.agents/pm/issues/pm-7rrqsk.toon), and [pm-ety1qc](../.agents/pm/issues/pm-ety1qc.toon).
+
+## Agent Quick Context
+
+These contracts keep project management equal to context management: reads say what they omit, writes return only newly useful context, diagnostics do not unexpectedly call remote providers, and every transport delegates domain validation to the same SDK primitive. Package authors can use the same primitives without reproducing CLI parsing rules.
+
+## `get` output selectors
+
+`pm get` has one declared selector namespace. Top-level sections use their names, while item fields may be written as either a bare field or `item.<field>`:
+
+```bash
+pm get pm-a1b2 --output-include id,title
+pm get pm-a1b2 --output-include item.id,item.title,linked
+pm get pm-a1b2 --output-include item,claim_state
+```
+
+An unknown selector is a usage refusal that lists the valid vocabulary. Selecting the complete `item` object together with an item field is also refused because the two selectors express conflicting projection depths. Every successful projection carries an `omission_receipt` with the exact selectors needed to restore withheld item fields or sections.
+
+## Bounded annotation mutations
+
+Adding, editing, or deleting a comment, note, or learning returns the changed entry plus mutation and omission receipts. The reply size therefore stays independent of the item’s existing annotation history. Pass `--full-history` when a human or integration genuinely needs the complete post-mutation collection:
+
+```bash
+pm comments pm-a1b2 "Decision evidence"
+pm comments pm-a1b2 --edit 3 --message "Corrected evidence" --full-history
+pm notes pm-a1b2 --delete 2 --full-history
+```
+
+SDK callers use `fullHistory: true`; MCP callers use `full: true`. The default stays bounded on every transport. An omission receipt identifies the semantic `full_history` selector and includes its CLI (`--full-history`), SDK (`fullHistory`), and MCP (`full`) spellings, so non-CLI consumers never need to interpret shell-only guidance.
+
+## Author acknowledgment coordinates
+
+CLI, SDK, and MCP use the same selector and coordinate parser for `history-author-acknowledge`. A coordinate is `<item-id>:<line>` or `_workspace:<line>`, with a positive one-based line number. Exactly one of explicit events or `all_actionable` is required.
+
+```bash
+pm history-author-acknowledge \
+  --event _workspace:4 \
+  --attributed-author import-agent \
+  --reviewer maintainer \
+  --reason "Verified workspace provenance"
+```
+
+The SDK exposes `resolveUnknownAuthorAcknowledgmentSelector` and `parseUnknownAuthorHistoryEventCoordinates` so packages never need a private copy of this grammar.
+
+## Health provider boundary
+
+`pm health` is read-only by default and never refreshes embeddings merely because a semantic provider is configured. Provider I/O requires `--refresh-vectors`; `--skip-vectors` or `--no-refresh` records the explicit non-provider path. Provider requests remain bounded by the configured embedding timeout, and a failed refresh reports the responsible vector diagnostic plus the skip remediation.
+
+## Replication and refusal gate
+
+`scripts/release/surface-replication-sets.json` declares replicated SDK, CLI, MCP, documentation, and test members. `pnpm quality:surface-replication` activates sets from the Git changeset, verifies every member invariant, and reports:
+
+- active set recurrence density;
+- the largest source member’s utilization of the mandatory file-size cap;
+- every remaining CLI-owned `PmCliError`, grouped by an explicit adapter-level disposition;
+- applied waivers, including their PM owner and expiry.
+
+Query waivers directly with:
+
+```bash
+node scripts/release/surface-replication-gate.mjs --list-waivers
+```
+
+Waivers are never implicit: they require a canonical PM item, a reason, an exact set member, and an expiry date. New or moved CLI refusals fail until the inventory is updated or the rule is delegated into the SDK. The same declaration runs locally and inside the required static-quality workflow.

package/docs/SDK_RUNTIME_BOUNDARIES.md

@@ -0,0 +1,58 @@
+# SDK Runtime Boundaries
+
+Tracker: [pm-1eted6](../.agents/pm/issues/pm-1eted6.toon),
+[pm-3lhth4](../.agents/pm/issues/pm-3lhth4.toon), and
+[pm-0xmajx](../.agents/pm/issues/pm-0xmajx.toon).
+
+These SDK primitives keep host and project-runtime policy consistent across the
+bundled CLI, packages, and automation without requiring consumers to reproduce
+private CLI parsing rules.
+
+## Project runtime compatibility
+
+Packages and automation can call `inspectProjectRuntimeCompatibility` before a
+mutation, or `assertProjectRuntimeCompatibility` when refusal semantics are
+preferred. The SDK discovers the strongest project-local pm version pin from
+the package manifest, installed package metadata, and supported lockfiles. A
+CLI older than that pin refuses mutation with
+`project_runtime_stale_mutation`; read commands stay available so an agent can
+recover context before upgrading. Stale reads, including `context` and
+read-only `health` invocations, emit the non-blocking
+`project_runtime_stale_read` warning. JSON modes write a single structured
+warning object to stderr, leaving the command's normal stdout envelope valid;
+human modes identify both versions, the redaction-safe pin source, and a
+package-manager-neutral recovery action. SDK callers receive the same warning
+inside `ProjectRuntimeCompatibilityResult`. `PM_ALLOW_STALE_CLI=1` is the
+explicit, auditable emergency override.
+
+The public `isProjectMutatingInvocation` classifier applies the same decision
+to package hosts and the bundled CLI. It resolves mixed command families by
+their effective action: configuration, merge, schema, profile, package,
+telemetry, workspace snapshot, template, VCS, validation, health, test, linked
+artifact, and changelog reads remain available while their write forms are
+fenced. Help, checks, previews, and dry runs remain reads, so compatibility
+enforcement does not turn diagnostics into writes.
+
+## Host-environment fault boundary
+
+Use `withHostEnvironmentBoundary` around filesystem and resource operations
+that cross into the host. It translates recognized Node errno failures into
+the stable, path-redacted `host_environment_capacity_fault`,
+`host_environment_permission_fault`, or `host_environment_resource_fault`
+contracts. `classifyHostEnvironmentFault` supports diagnostics that need a
+non-throwing classification, while `translateHostEnvironmentFault` supports an
+existing catch boundary. Non-errno failures are returned unchanged and must
+not be relabeled as environment faults.
+
+Existing SDK surfaces can supply category-specific `codes` to preserve their
+published error vocabulary while still sharing classification, path redaction,
+and recovery guidance. Workspace snapshots use this compatibility path for
+their stable storage, resource, and permission fault codes.
+
+## CLI refusal ownership
+
+CLI adapters preserve SDK error codes, exit semantics, and actionable recovery
+guidance when presenting refusals as human-readable or structured output.
+Host-only validation remains at the transport boundary, while rules shared by
+packages and commands live in public SDK primitives so callers receive the
+same refusal contract regardless of entrypoint.

package/docs/SELF_DESCRIBING_CONTEXT_CONTRACTS.md

@@ -79,6 +79,7 @@ The default summary stays bounded. Larger intent and error catalogs are emitted
 - recovery guidance;
 - source modules that emit the code.
 - inferred CLI command roots (`*` for cross-cutting runtime failures).
+- canonical code and compatibility aliases for concept-level handling.
 
 Existing catalog entries are recorded in `scripts/error-code-stability.json`.
 The generator refuses to remove one of those stable codes unless the reviewed
@@ -86,6 +87,18 @@ compatibility ledger is changed explicitly. Newly discovered codes are emitted
 as provisional until deliberately promoted, so adding a runtime declaration
 does not accidentally promise permanent compatibility.
 
+The compatibility ledger also pins every stable code to its reviewed process
+exit. An executable `PmCliError` declaration that disagrees with that mapping
+fails generation, and a stable code without a mapping fails the drift check.
+Reviewed alias groups preserve every emitted legacy spelling while exposing one
+canonical concept to SDK, package, CLI-contract, and observability consumers.
+Aliases must resolve directly to a declared stable canonical code and share its
+exit class; cycles, missing targets, and transport mismatches fail closed.
+
+Use `resolvePmErrorCodeContract` when the exact emitted spelling matters, and
+`resolveCanonicalPmErrorCodeContract` when one handler should cover a complete
+compatibility group.
+
 `PM_ERROR_CODE_EXIT_CLASS_CONTRACTS` is the portable shell taxonomy: exit 1 is
 generic failure, 2 is usage, 3 is not-found, 4 is conflict, and 5 is dependency
 failure. Catalog validation rejects a code whose declared semantic class and

package/docs/TESTING.md

@@ -16,6 +16,8 @@ Tracked implementation updates: [pm-52eh](../.agents/pm/features/pm-52eh.toon),
 
 Tracked documentation work: [pm-u9d0](../.agents/pm/epics/pm-u9d0.toon).
 
+Local/hosted gate parity is tracked by [pm-ei6x66](../.agents/pm/tasks/pm-ei6x66.toon).
+
 ## Standard Local Checks
 
 ```bash
@@ -26,6 +28,21 @@ node scripts/run-tests.mjs test
 node scripts/run-tests.mjs coverage
 ```
 
+For the exact ordered local preflight used to make release-readiness claims,
+run the registry-owned entrypoint:
+
+```bash
+pnpm verify:preflight
+```
+
+`scripts/release/gate-registry.json` is the executable plan for this command:
+each ordered step declares its command, arguments, environment, capture mode,
+and whether an explicit skip flag is permitted. Receipts distinguish passed
+steps from declared skips, and `quality:gate-registry` maps hosted workflow
+claims to the same canonical gate IDs. Hosted-only environment isolation and
+tracker-integrity steps remain explicit entries with reasons rather than
+silently disappearing from local parity.
+
 `node scripts/run-tests.mjs` wraps Vitest in temporary tracker roots, then cleans them up.
 
 Public SDK changes additionally run semantic surface and import-cost contracts:

package/marketplace.json

@@ -6,14 +6,14 @@
   },
   "metadata": {
     "description": "Official marketplace for pm CLI — native git-based project management for Claude Code and AI coding agents.",
-    "version": "2026.8.7"
+    "version": "2026.8.8"
   },
   "plugins": [
     {
       "name": "pm-claude",
       "source": "./plugins/pm-claude",
       "description": "Native pm CLI integration for Claude Code — 28 MCP tools, 5 workflow skills, 14 slash commands, 4 subagents, hybrid TUI task tracking, session context injection, and coordination subagents for git-based project management without leaving Claude Code.",
-      "version": "2026.8.7",
+      "version": "2026.8.8",
       "author": {
         "name": "unbrained",
         "url": "https://github.com/unbraind/pm-cli"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-cli",
-  "version": "2026.8.7",
+  "version": "2026.8.8",
   "description": "Git-native project management CLI for humans and agents.",
   "type": "module",
   "packageManager": "pnpm@11.10.0",
@@ -120,7 +120,7 @@
     "lint:complexity:baseline": "eslint . --suppress-rule complexity --suppress-rule sonarjs/cognitive-complexity",
     "lint:duplicates": "jscpd --config .jscpd.json",
     "lint:codefactor": "pnpm quality:static",
-    "quality:static": "pnpm build && pnpm exec tsx scripts/release/static-quality-gate.mts --max-eslint-suppressions 114 --max-coverage-ignore-pragmas 477 --min-docstring-coverage 100 --min-exported-docstring-coverage 100 --min-member-docstring-coverage 100 && node scripts/release/audit-package-boundary.mjs && node scripts/release/package-sdk-contract-parity.mjs && node scripts/release/token-budget-gate.mjs && node scripts/release/context-intent-calibration-gate.mjs && node scripts/release/tracker-measurement-gate.mjs && node scripts/release/gate-registry.mjs && node scripts/sdk-surface-snapshot.mjs --check && node scripts/bench/sdk-entrypoint-costs.mjs --check && node scripts/bench/cli-transport-floor.mjs --check",
+    "quality:static": "pnpm build && pnpm exec tsx scripts/release/static-quality-gate.mts --max-eslint-suppressions 114 --max-coverage-ignore-pragmas 477 --min-docstring-coverage 100 --min-exported-docstring-coverage 100 --min-member-docstring-coverage 100 && node scripts/release/audit-package-boundary.mjs && node scripts/release/package-sdk-contract-parity.mjs && node scripts/release/surface-replication-gate.mjs && node scripts/release/token-budget-gate.mjs && node scripts/release/context-intent-calibration-gate.mjs && node scripts/release/tracker-measurement-gate.mjs && node scripts/release/gate-registry.mjs && node scripts/sdk-surface-snapshot.mjs --check && node scripts/bench/sdk-entrypoint-costs.mjs --check && node scripts/bench/cli-transport-floor.mjs --check",
     "quality:token-budget": "node scripts/release/token-budget-gate.mjs",
     "quality:token-surface": "node scripts/measure-agent-token-surface.mjs --check",
     "quality:token-surface:update": "pnpm build && node scripts/measure-agent-token-surface.mjs --update",
@@ -132,6 +132,7 @@
     "quality:gate-registry": "pnpm build && node scripts/release/gate-registry.mjs",
     "quality:tracker-measurements": "pnpm build && node scripts/release/tracker-measurement-gate.mjs",
     "quality:package-artifact": "pnpm build && node scripts/release/package-artifact-gate.mjs",
+    "quality:surface-replication": "node scripts/release/surface-replication-gate.mjs",
     "quality:docs-skills": "node scripts/release/docs-skills-gate.mjs",
     "quality:docs-links": "node scripts/release/docs-skills-gate.mjs --links-only",
     "quality:hosted-analysis": "node scripts/release/hosted-analysis-gate.mjs",
@@ -163,6 +164,7 @@
     "changelog:pm:check": "pnpm changelog:pm:install && node dist/cli.js changelog generate --output CHANGELOG.md --title \"Changelog\" --mode replace --all-release-tags --status closed --item-url-base https://github.com/unbraind/pm-cli/blob/main/.agents/pm --check",
     "release:notes": "node scripts/generate-release-notes.mjs",
     "release:gates": "node scripts/release/run-gates.mjs --telemetry-mode best-effort",
+    "verify:preflight": "node scripts/release/run-gates.mjs --telemetry-mode best-effort",
     "release:pipeline": "node scripts/release/run-release-pipeline.mjs",
     "release:pipeline:dry-run": "node scripts/release/run-release-pipeline.mjs --dry-run",
     "release:verify-published": "node scripts/release/verify-published-release.mjs",
@@ -218,7 +220,7 @@
     "fast-check": "^4.9.0",
     "greptile": "^3.3.1",
     "jscpd": "^5.0.14",
-    "tsx": "^4.23.8",
+    "tsx": "^4.23.11",
     "typescript": "^6.0.3",
     "typescript-eslint": "^8.66.0",
     "vitest": "^4.1.10",

package/packages/pm-beads/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-beads",
-  "version": "2026.8.7",
+  "version": "2026.8.8",
   "private": true,
   "type": "module",
   "description": "First-party pm package for importing Beads JSONL records.",

package/packages/pm-calendar/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-calendar",
-  "version": "2026.8.7",
+  "version": "2026.8.8",
   "private": true,
   "type": "module",
   "description": "First-party pm package for calendar and agenda views.",

package/packages/pm-command-kit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-command-kit",
-  "version": "2026.8.7",
+  "version": "2026.8.8",
   "private": true,
   "type": "module",
   "description": "First-party pm exemplar package for the commands capability: registerCommand, registerFlags, and registerParser.",

package/packages/pm-digital-twin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-digital-twin",
-  "version": "2026.8.7",
+  "version": "2026.8.8",
   "private": true,
   "type": "module",
   "description": "Beyond-PM exemplar: a temporal production-facility digital twin built entirely on public pm SDK and extension primitives.",

package/packages/pm-governance-audit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-governance-audit",
-  "version": "2026.8.7",
+  "version": "2026.8.8",
   "private": true,
   "type": "module",
   "description": "First-party pm package for governance audit and normalization workflows.",

package/packages/pm-guide-shell/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-guide-shell",
-  "version": "2026.8.7",
+  "version": "2026.8.8",
   "private": true,
   "type": "module",
   "description": "First-party pm package for guide and shell completion workflows.",

package/packages/pm-kanban/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-kanban",
-  "version": "2026.8.7",
+  "version": "2026.8.8",
   "private": true,
   "type": "module",
   "description": "First-party pm archetype package: a complete Kanban continuous-flow profile built on public SDK primitives.",

package/packages/pm-lifecycle-hooks/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-lifecycle-hooks",
-  "version": "2026.8.7",
+  "version": "2026.8.8",
   "private": true,
   "type": "module",
   "description": "First-party pm package demonstrating safe lifecycle hook registration.",

package/packages/pm-linked-test-adapters/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-linked-test-adapters",
-  "version": "2026.8.7",
+  "version": "2026.8.8",
   "private": true,
   "type": "module",
   "description": "First-party pm package for optional linked-test run management adapters and reporters.",

package/packages/pm-search-advanced/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-search-advanced",
-  "version": "2026.8.7",
+  "version": "2026.8.8",
   "private": true,
   "type": "module",
   "description": "First-party pm package for semantic, hybrid, and reindex search workflows.",

package/packages/pm-templates/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-templates",
-  "version": "2026.8.7",
+  "version": "2026.8.8",
   "private": true,
   "type": "module",
   "description": "First-party pm package for reusable create templates.",

package/packages/pm-todos/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-todos",
-  "version": "2026.8.7",
+  "version": "2026.8.8",
   "private": true,
   "type": "module",
   "description": "First-party pm package for Todo markdown import and export.",

package/packages/pm-vcs/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-vcs-sdk-exemplar",
-  "version": "2026.8.7",
+  "version": "2026.8.8",
   "private": true,
   "type": "module",
   "description": "Beyond-PM exemplar: a VCS-style changeset workflow built entirely on public pm SDK and extension primitives.",

package/plugins/pm-claude/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "pm-claude",
   "description": "Native pm CLI integration for Claude Code — 28 MCP tools, 5 workflow skills, 14 slash commands, 4 subagents (coordinator, delivery-chain, triage, verification), hybrid TUI task tracking (pm as persistent store + Claude Code task panel as live view), session context injection, and full git-based project management without leaving Claude Code.",
-  "version": "2026.8.7",
+  "version": "2026.8.8",
   "author": {
     "name": "unbrained",
     "url": "https://github.com/unbraind/pm-cli"

package/plugins/pm-codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "pm-codex",
-  "version": "2026.8.7",
+  "version": "2026.8.8",
   "description": "Native Codex integration for pm-cli with bundled MCP tools, skills, commands, and agent workflows.",
   "author": {
     "name": "unbrained",