@unbrained/pm-cli 2026.8.8 → 2026.8.10

package/docs/READ_OUTPUT_CONTRACTS.md

@@ -60,8 +60,8 @@ also fixes the expected unique-fact shape:
 
 | Tracker tier | Group spend / budget | Seen items | Suppressed repeats | Delivered bytes |
 | ------------ | -------------------- | ---------- | ------------------ | --------------- |
-| 2 items      | 3,663 / 20,000       | 2          | 3                  | 14,646          |
-| 2,243 items  | 9,999 / 20,000       | 106        | 7                  | 39,985          |
+| 2 items      | 3,820 / 20,000       | 2          | 3                  | 15,274          |
+| 2,243 items  | 10,156 / 20,000      | 106        | 7                  | 40,614          |
 
 These are deterministic synthetic-corpus measurements from
 `scripts/release/context-intent-calibration.json`; they contain no hosted

package/docs/RELATIONSHIP_GRAPH.md

@@ -16,7 +16,7 @@ Ordering-cycle validation considers only kinds whose registry definition sets `o
 
 SDK queries are deterministic, bounded, cancellation-aware, and return explicit visited-node, inspected-edge, truncation, and continuation metadata. The graph kernel supplies adjacency, incoming and outgoing traversal, closure, shortest path, reverse impact through incoming traversal, and induced subgraphs. The in-memory index is rebuildable directly from item metadata; durable large-workspace indexes remain an interchangeable storage implementation.
 
-Ordering kinds also declare precedence. `source_before_target` means the source must execute first; `target_before_source` models dependency-shaped edges such as `blocked_by`. Custom kinds default to source-first for compatibility, but domain packages should declare the direction explicitly. Analytics consume this field and never infer execution meaning from the label.
+Ordering kinds also declare precedence. `source_before_target` means the source must execute first; `target_before_source` models dependency-shaped edges such as `blocked_by`. Custom kinds default to source-first for compatibility, but domain packages should declare the direction explicitly. Analytics consume this field and never infer execution meaning from the label. Built-in canonical spellings, compatibility aliases, and inverse actionability are defined in [Dependency-kind contract](DEPENDENCY_KIND_CONTRACT.md).
 
 Hierarchy kinds likewise declare which endpoint is the structural parent. `source_parent` supports domain edges such as company `owns` asset, while `target_parent` preserves item-shaped child `parent` parent storage. Custom hierarchy kinds default to `source_parent`; packages should declare the orientation explicitly when their persisted edge shape differs. Context explanations use this contract instead of inferring ancestry from a kind name.
 

package/docs/SDK.md

@@ -35,6 +35,14 @@ ownership are tracked by [pm-ig5cfe](../.agents/pm/issues/pm-ig5cfe.toon),
 [pm-495lkc](../.agents/pm/issues/pm-495lkc.toon), and
 [pm-miy5k6](../.agents/pm/issues/pm-miy5k6.toon).
 
+Shared item addressing, lossless recovery, explicit-empty create policy,
+semantic command discovery, and append-stable linked tests are tracked by
+[pm-mkinft](../.agents/pm/issues/pm-mkinft.toon),
+[pm-p316vn](../.agents/pm/issues/pm-p316vn.toon),
+[pm-st7wgu](../.agents/pm/issues/pm-st7wgu.toon),
+[pm-g543](../.agents/pm/issues/pm-g543.toon), and
+[pm-x2vx](../.agents/pm/issues/pm-x2vx.toon).
+
 Use it for extension authoring, package authoring, command/action contract discovery, and deterministic app or CI automation. Do not import private `src/core/...` modules from external integrations or packages.
 
 ## Install
@@ -309,6 +317,7 @@ Command/action contract exports:
 - Execution and diagnostics engines: `runTest`, `runLinkedTests`, `runTestAll`, `runStartBackgroundRun`, `runTestRunsList`, `runTestRunsStatus`, `runTestRunsLogs`, `runTestRunsStop`, `runTestRunsResume`, `runTestRunsWorker`, `runEval`, `runTelemetry`, and `runStats`. Their CLI modules are compatibility re-exports of SDK-owned implementations.
 - Execution and diagnostics contracts: `TestCommandOptions` / `TestResult` / `TestRunResult`, `TestAllCommandOptions` / `TestAllResult`, `StartBackgroundRunCommandOptions` / `StartBackgroundRunResult`, `TestRuns*CommandOptions`, `EvalOptions` / `EvalResult`, `TelemetryCommandOptions` / `TelemetrySubcommand`, and `StatsCommandOptions` / `StatsResult`.
 - Linked-test authoring primitives: `parseLinkedTestJsonEntries`, the `parseLinkedTest*` field parsers, `LINKED_TEST_PM_CONTEXT_MODE_VALUES`, `LINKED_TEST_PROTECTED_ENV_KEYS`, `classifyLinkedTestFailure`, `countFailureCategories`, and `summarizeContextPreflight` let custom hosts validate, execute, classify, and report linked tests without duplicating CLI policy.
+- Agent command primitives: `normalizeItemAddressInvocation` and `supportsItemIdAlias` project one item-id grammar across CLI adapters; `renderMissingOptionRetry` and `resolveMissingOptionPlaceholder` preserve attempted argv while deriving enum, boolean, and scalar recovery arity from flag contracts; `rankCommandPaths` and `scoreCommandPathMatch` provide deterministic synonym/edit-distance/substring ranking; `resolveCreateExplicitEmptyFlag` and `supportsCreateExplicitEmpty` model a considered-but-empty strict repeatable input without inventing metadata or graph edges.
 - Typed plan workflow primitives on `PmClient`: `plan`, `planCreate`, `planShow`, `planAddStep`, `planUpdateStep`, `planCompleteStep`, `planBlockStep`, `planReorderStep`, `planRemoveStep`, `planLink`, `planUnlink`, `planDecision`, `planDiscovery`, `planValidation`, `planResume`, `planApprove`, and `planMaterialize`
 - Plan contracts: `PlanSubcommand`, `PlanCommandOptions`, `PlanCommandResult`, `PlanResultPlan`, `PlanStepSummary`, `PlanShowDepth`, and `PlanTemplateName`
 - Typed package and extension lifecycle primitives on `PmClient`: `extension`, `extensionList`, `extensionActivate`, `extensionDeactivate`, `package`, `packageList`, `packageInstall`, `packageUninstall`, `packageDoctor`, `packageManage`, `packageDescribe`, `packageReload`, `packageCatalog`, `packageActivate`, `packageDeactivate`, `packageMigrate`, and `upgrade`; one-shot `extensionMigrate` and `packageMigrate` helpers mirror those lifecycle actions.
@@ -1272,11 +1281,21 @@ const result = await commitItemMutations({
 `commitWorkspaceTransaction` remains the escape hatch for arbitrary domains
 (relationship events, foreign stores, mixed-step plans); `commitItemMutations`
 covers the item-mutation 90% case with correct-by-construction wiring.
-Update mutation options use the same acceptance-criteria representation as the
-CLI: criteria are stored in one string with semicolons as boundaries. Therefore
-each `addAc`/`removeAc` entry must be semicolon-free; unmatched removals are
-reported as `remove_ac_unmatched:<text>` warnings rather than disappearing as
-silent no-ops.
+Update mutation options use the same lossless acceptance-criteria contract as
+the CLI: criteria are stored in one string with semicolons as boundaries, so
+each `addAc`/`removeAc` entry must be semicolon-free. Every removal must match or
+the complete mutation rejects with `acceptance_criteria_remove_unmatched` and
+structured `unmatched` recovery data. Whole-value `acceptanceCriteria`
+replacement is mutually exclusive with additive edits and returns an
+`acceptance_criteria_replaced:<before-count>:<after-count>` warning when it
+changes existing criteria.
+
+Create and update mutation options also resolve every newly supplied local
+dependency target before persistence. Use `source_kind: "external"` for a
+cross-workspace endpoint. A staged local import must opt in with
+`allowUnresolvedDeps: true`; successful results then retain one
+`dependency_target_unresolved:<id>` warning per missing target. Bulk dry-runs
+perform the identical validation before producing a plan.
 
 `parseItemMutationBatch` is the strict legacy JSON boundary for that primitive. It
 accepts either a non-empty mutation array or `{ "mutations": [...] }`, derives
@@ -3258,9 +3277,15 @@ For SDK and automation consumers, the key runtime change is the optional `recove
 - `suggested_retry`
 
 Treat `recovery.suggested_retry` as the first-choice deterministic replay
-command when present. It is emitted only from structured recovery metadata or
-flags declared on the invoked command; prose that merely mentions another flag
-is not interpreted as a missing input.
+command when present. Generic missing-option retries preserve every original
+argv token, insert only absent real flags before the first `--` argument
+terminator while leaving that terminator in place, and derive placeholders from
+the declared flag domain (`<off|warn|strict>` for enum values and no placeholder
+for booleans). It is emitted only from structured recovery metadata or flags
+declared on the invoked command; prose that merely mentions another flag is not
+interpreted as a missing input. Strict close validation reports missing
+resolution fields first and suggests a targeted `pm update` before retrying the
+original close invocation.
 
 ## Authoring Pattern
 

package/docs/SDK_AGENT_SESSION_CONTEXT.md

@@ -2,7 +2,10 @@
 
 Tracker references: [pm-9wbiye](../.agents/pm/issues/pm-9wbiye.toon),
 [pm-rbg1qo](../.agents/pm/issues/pm-rbg1qo.toon), and
-[pm-oqo9l2](../.agents/pm/features/pm-oqo9l2.toon).
+[pm-oqo9l2](../.agents/pm/features/pm-oqo9l2.toon),
+[pm-3zgh2c](../.agents/pm/features/pm-3zgh2c.toon),
+[pm-eq9dlw](../.agents/pm/issues/pm-eq9dlw.toon), and
+[pm-lu6sca](../.agents/pm/features/pm-lu6sca.toon).
 
 Project management is context management. The public SDK therefore carries a
 session's purpose and episode boundary through the same immutable history that
@@ -59,7 +62,7 @@ import { spawn } from "node:child_process";
 import { agentSessionEnvironment } from "@unbrained/pm-cli/sdk";
 
 const session = {
-  provenance: { role: "grader", topic: "package acceptance" },
+  provenance: { role: "release-operator", topic: "package acceptance" },
   episode: { id: "package-acceptance", label: "Package acceptance" },
 };
 
@@ -75,6 +78,37 @@ The environment contract is `PM_AGENT_SESSION_ROLE`,
 context keys, distinct from intentional per-observation overrides such as
 `PM_AGENT_MODEL`.
 
+Roles use the controlled values `implementer`, `implementation`,
+`investigator`, `orchestrator`, `planner`, `release-operator`, and `reviewer`.
+Case, spaces, and underscores normalize to lowercase hyphenated values. Other
+values are ignored instead of polluting analytics. Presence-only harness flags,
+including `CLAUDE_CODE_CHILD_SESSION=1`, are detection evidence and are never
+persisted as semantic roles.
+
+For ordinary CLI mutations, the detector can infer an `implementer` or
+`reviewer` role from the bounded command verb and a topic from an explicit
+`pm-...` item argument. Explicit overrides, session declarations, and trusted
+host declarations retain precedence over this inference.
+
+## Diagnose missing provenance
+
+`diagnoseAgentIdentity()` is the additive diagnostic companion to
+`detectAgentIdentity()`. It returns the same privacy-safe identity plus a
+`provenance_outcomes` row for every built-in dimension. Each row is
+`resolved`, `unavailable`, `not_configured`, or `failed`, carries rule version `v1`, and may name
+the bounded built-in resolver. It never contains environment values, session
+paths, prompts, or file contents.
+
+New mutation history records failed resolver outcomes under
+`context.agent_provenance_outcomes`; ordinary unavailable dimensions retain
+the compact legacy-compatible null projection. A resolver is only counted as
+attempted when its required input belongs to the detected harness; a foreign
+host's shared `AI_AGENT` value is not Codex input. Consequently `pm health` can report
+`provenance_resolver_zero_success:<harness>:<dimension>:<resolver>:<attempts>`
+without confusing an unavailable harness signal with a failed resolver. The
+warning is advisory and the storage check includes the bounded attempt and
+success counters for diagnosis.
+
 ## Cross an MCP boundary
 
 An embedding MCP client can add bounded `provenance` and `episode` fields to

package/docs/SDK_CONTEXT.md

@@ -0,0 +1,97 @@
+# SDK context platform
+
+Tracker: [pm-9hv1o7](../.agents/pm/issues/pm-9hv1o7.toon).
+
+`pm` treats project management as context management. This task-oriented entry
+point routes SDK hosts, package authors, CLI integrators, and agents to the
+smallest authoritative context primitive.
+
+## Choose the smallest authoritative read
+
+- Use `PmClient.context()` for ranked working context and bounded workspace memory.
+- Use `PmClient.listAllItemMetadataLight()` or
+  `listAllItemMetadataLight(pmRoot)` for whole-project scalar metadata without
+  bodies or heavy annotation/evidence collections.
+- Use `PmClient.get(id, { depth: "deep" })` when one item needs its complete
+  collections. Shallower reads carry an omission receipt naming every withheld
+  group and the exact `--fields` restoration.
+- Use mutation events for changes since a cursor instead of repeatedly loading
+  a full workspace.
+
+The root package, `sdk/runtime`, and `PmClient` expose the lightweight reader.
+It distinguishes an empty tracker from a missing or invalid root and preserves
+custom item-type folders from workspace settings.
+
+## Rank and pack context
+
+Context ranking combines recency, activity, graph proximity, priority, risk,
+knowledge density, structural fit, and caller affinity. Derived signal snapshots
+are rebuildable; item documents and history remain authoritative. Invalid,
+stale, or unwritable snapshots return a stable warning, its meaning, an
+executable recovery command, and the expected effect. Re-running `pm context`
+confirms a successful rebuild as fresh.
+
+See [Context relevance and packing](CONTEXT_RELEVANCE.md) for signal and token
+budgets, and [context coordination](SDK_CONTEXT_COORDINATION.md) for cursored
+events and duplicate governance.
+
+## Preserve truth at boundaries
+
+Bounded reads disclose omissions. Bounded annotation mutations return the
+changed entry instead of replaying complete history. Unknown-author findings
+route directly to append-only attribution. Diagnostics remain read-only unless
+a mutation is explicitly selected.
+
+See [context integrity](SDK_CONTEXT_INTEGRITY.md) for output selectors,
+annotation receipts, attribution coordinates, provider boundaries, and
+replication enforcement; see [truth contracts](SDK_CONTEXT_TRUTH_CONTRACTS.md)
+for tracker-root and merge-driver distinctions.
+
+## Build package workflows
+
+Use the root SDK for application workflows and `sdk/runtime` for dependency-light
+host primitives. Runtime contracts are authoritative for active flags and
+package-contributed commands:
+
+```bash
+pm <command> --help --json
+pm contracts --command <command> --flags-only --json
+pm contracts --runtime-only --json
+```
+
+Use `findSimilarItems` for one proposal, `findDuplicateClusters` for a bounded
+whole-tracker sweep, and `prepareSimilarityText` with
+`scorePreparedItemSimilarity` for custom pipelines. All paths share one
+canonical Jaccard implementation and one canonical status-token normalizer.
+
+See [context integrity primitives](SDK_CONTEXT_INTEGRITY_PRIMITIVES.md) for
+duplicate batches, structured errors, Plan evidence, tombstones, linked-test
+output, and extension output ownership.
+
+## Validate and recover
+
+Fast health projections use light metadata. Validation materializes collections
+needed by evidence and relationship checks, but loads bodies only for strict
+history-drift verification. Unknown-author remediation is shared:
+
+```bash
+pm health --verbose-author-events --json
+pm history-author-acknowledge --all-actionable \
+  --attributed-author "<principal>" \
+  --reviewer "<reviewer>" \
+  --reason "<evidence>"
+```
+
+Run repository gates after public SDK changes:
+
+```bash
+pnpm build
+pnpm typecheck
+pnpm quality:surface-replication
+pnpm sdk:surface:check
+node scripts/run-tests.mjs coverage
+```
+
+The replication gate reports an AST-derived denominator of repeated named rule
+bodies and enforces a non-decreasing detector floor, so deleting declarations
+cannot make recurring implementation rules disappear from governance reports.

package/docs/SDK_CONTEXT_INTEGRITY.md

@@ -1,6 +1,6 @@
 # SDK Context Integrity
 
-Tracker: [pm-0k19l7](../.agents/pm/issues/pm-0k19l7.toon), [pm-9stazf](../.agents/pm/issues/pm-9stazf.toon), [pm-tu71](../.agents/pm/issues/pm-tu71.toon), [pm-0xmajx](../.agents/pm/issues/pm-0xmajx.toon), [pm-7rrqsk](../.agents/pm/issues/pm-7rrqsk.toon), and [pm-ety1qc](../.agents/pm/issues/pm-ety1qc.toon).
+Tracker: [pm-0k19l7](../.agents/pm/issues/pm-0k19l7.toon), [pm-9stazf](../.agents/pm/issues/pm-9stazf.toon), [pm-tu71](../.agents/pm/issues/pm-tu71.toon), [pm-0xmajx](../.agents/pm/issues/pm-0xmajx.toon), [pm-7rrqsk](../.agents/pm/issues/pm-7rrqsk.toon), [pm-ety1qc](../.agents/pm/issues/pm-ety1qc.toon), and [pm-lu6sca](../.agents/pm/features/pm-lu6sca.toon).
 
 ## Agent Quick Context
 
@@ -18,6 +18,19 @@ pm get pm-a1b2 --output-include item,claim_state
 
 An unknown selector is a usage refusal that lists the valid vocabulary. Selecting the complete `item` object together with an item field is also refused because the two selectors express conflicting projection depths. Every successful projection carries an `omission_receipt` with the exact selectors needed to restore withheld item fields or sections.
 
+Automatic receipts cover every heavy item collection (`comments`, `notes`,
+`learnings`, `files`, `tests`, `docs`, `reminders`, and `events`) plus `body`,
+`children`, `claim_state`, `linked`, and `schedule`. Empty included collections
+are distinguishable from omitted collections because inclusion is derived from
+property presence, not collection length.
+
+Standard and brief item reads expose the stable `collection_counts` selector;
+full reads retain those counts and normalize every supported collection key to
+an array. `--output-include item.collection_counts` therefore uses the same
+selector grammar and omission receipts as any other SDK-owned item field.
+
+The same SDK-owned read-output registry now declares `package manage` as a first-class read surface. Package authors can resolve either `package manage` or `package-manage` to its canonical contract and discover the universal include, amount, cost, and encoding dimensions without copying CLI knowledge.
+
 ## Bounded annotation mutations
 
 Adding, editing, or deleting a comment, note, or learning returns the changed entry plus mutation and omission receipts. The reply size therefore stays independent of the item’s existing annotation history. Pass `--full-history` when a human or integration genuinely needs the complete post-mutation collection:
@@ -42,12 +55,27 @@ pm history-author-acknowledge \
   --reason "Verified workspace provenance"
 ```
 
-The SDK exposes `resolveUnknownAuthorAcknowledgmentSelector` and `parseUnknownAuthorHistoryEventCoordinates` so packages never need a private copy of this grammar.
+The SDK exposes `resolveUnknownAuthorAcknowledgmentSelector` and `parseUnknownAuthorHistoryEventCoordinates` so packages never need a private copy of this grammar. Health and validate map actionable unknown-author warnings directly to this append-only acknowledgment command instead of sending callers through another diagnostic loop.
 
 ## Health provider boundary
 
 `pm health` is read-only by default and never refreshes embeddings merely because a semantic provider is configured. Provider I/O requires `--refresh-vectors`; `--skip-vectors` or `--no-refresh` records the explicit non-provider path. Provider requests remain bounded by the configured embedding timeout, and a failed refresh reports the responsible vector diagnostic plus the skip remediation.
 
+Storage integrity is evaluated independently of that provider boundary. Lossless merge receipts remain visible as provenance, while only receipts containing discarded scalar values produce `merge_decisions_unreviewed` guidance; neither classification enables vector refresh or remote provider I/O.
+
+Brief and summary check-only health projections use the scalar-only metadata
+reader. Validation uses collection-bearing metadata for evidence and
+relationship checks and materializes bodies only when strict history-drift
+verification is requested.
+
+The storage check also reads at most 10,000 local immutable events for bounded
+agent-provenance resolver outcomes. This scan performs no network or provider
+I/O, tolerates malformed streams already owned by integrity diagnostics, and
+reports an advisory warning only when a resolver was actually attempted but
+never succeeded. The same bounded pass classifies bare boolean and single-digit
+values across every recorded provenance dimension, publishes only aggregate
+harness/dimension/kind counts, and never echoes the historical value.
+
 ## Replication and refusal gate
 
 `scripts/release/surface-replication-sets.json` declares replicated SDK, CLI, MCP, documentation, and test members. `pnpm quality:surface-replication` activates sets from the Git changeset, verifies every member invariant, and reports:
@@ -55,7 +83,9 @@ The SDK exposes `resolveUnknownAuthorAcknowledgmentSelector` and `parseUnknownAu
 - active set recurrence density;
 - the largest source member’s utilization of the mandatory file-size cap;
 - every remaining CLI-owned `PmCliError`, grouped by an explicit adapter-level disposition;
-- applied waivers, including their PM owner and expiry.
+- applied waivers, including their PM owner and expiry;
+- an AST-derived denominator of identical named rule bodies, declared coverage,
+  and a non-decreasing detected-cluster floor.
 
 Query waivers directly with:
 

package/docs/SENTRY_CONTRACT_EPOCHS.md

@@ -0,0 +1,20 @@
+# Sentry Error Contract Epochs
+
+Tracker reference: [pm-h75tjh](../.agents/pm/issues/pm-h75tjh.toon).
+
+The release reliability gate declares `2026.8.7` as the minimum producer
+version for canonical `pm.error_code` and `pm.exit_code` tags. An unresolved
+event with a known older release is reported as `legacy_pre_contract`; it does
+not block a current release merely because it cannot satisfy a future
+producer contract.
+
+Events from the minimum producer or newer remain blocking when they are
+unexpected faults or lack the required tags. Events with no parseable producer
+version are also blocking. JSON output includes the minimum version,
+`legacy_pre_contract_total`, bounded legacy ids, and a bounded blocking-reason
+row for each current issue. Expected handled usage, not-found, and conflict
+errors remain a separate non-blocking class.
+
+This epoch rule only changes gate classification. It does not resolve, delete,
+or hide Sentry issues, and it does not weaken fatal or error thresholds for
+current producers.

package/docs/agent-task-token-baseline.json

@@ -14,12 +14,12 @@
     },
     {
       "id": "returning-agent",
-      "max_estimated_tokens": 336
+      "max_estimated_tokens": 597
     },
     {
       "id": "failing-command",
       "max_estimated_tokens": 197
     }
   ],
-  "composite_max_estimated_tokens": 2390
+  "composite_max_estimated_tokens": 2651
 }

package/marketplace.json

@@ -6,14 +6,14 @@
   },
   "metadata": {
     "description": "Official marketplace for pm CLI — native git-based project management for Claude Code and AI coding agents.",
-    "version": "2026.8.8"
+    "version": "2026.8.10"
   },
   "plugins": [
     {
       "name": "pm-claude",
       "source": "./plugins/pm-claude",
       "description": "Native pm CLI integration for Claude Code — 28 MCP tools, 5 workflow skills, 14 slash commands, 4 subagents, hybrid TUI task tracking, session context injection, and coordination subagents for git-based project management without leaving Claude Code.",
-      "version": "2026.8.8",
+      "version": "2026.8.10",
       "author": {
         "name": "unbrained",
         "url": "https://github.com/unbraind/pm-cli"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-cli",
-  "version": "2026.8.8",
+  "version": "2026.8.10",
   "description": "Git-native project management CLI for humans and agents.",
   "type": "module",
   "packageManager": "pnpm@11.10.0",
@@ -120,7 +120,7 @@
     "lint:complexity:baseline": "eslint . --suppress-rule complexity --suppress-rule sonarjs/cognitive-complexity",
     "lint:duplicates": "jscpd --config .jscpd.json",
     "lint:codefactor": "pnpm quality:static",
-    "quality:static": "pnpm build && pnpm exec tsx scripts/release/static-quality-gate.mts --max-eslint-suppressions 114 --max-coverage-ignore-pragmas 477 --min-docstring-coverage 100 --min-exported-docstring-coverage 100 --min-member-docstring-coverage 100 && node scripts/release/audit-package-boundary.mjs && node scripts/release/package-sdk-contract-parity.mjs && node scripts/release/surface-replication-gate.mjs && node scripts/release/token-budget-gate.mjs && node scripts/release/context-intent-calibration-gate.mjs && node scripts/release/tracker-measurement-gate.mjs && node scripts/release/gate-registry.mjs && node scripts/sdk-surface-snapshot.mjs --check && node scripts/bench/sdk-entrypoint-costs.mjs --check && node scripts/bench/cli-transport-floor.mjs --check",
+    "quality:static": "pnpm build && pnpm exec tsx scripts/release/static-quality-gate.mts --max-eslint-suppressions 114 --max-coverage-ignore-pragmas 477 --min-docstring-coverage 100 --min-exported-docstring-coverage 100 --min-member-docstring-coverage 100 && node scripts/release/audit-package-boundary.mjs && node scripts/release/package-sdk-contract-parity.mjs && node scripts/release/surface-replication-gate.mjs && node scripts/release/absence-tolerance-gate.mjs && node scripts/release/token-budget-gate.mjs && node scripts/release/context-intent-calibration-gate.mjs && node scripts/release/tracker-measurement-gate.mjs && node scripts/release/gate-registry.mjs && node scripts/sdk-surface-snapshot.mjs --check && node scripts/bench/sdk-entrypoint-costs.mjs --check && node scripts/bench/cli-transport-floor.mjs --check",
     "quality:token-budget": "node scripts/release/token-budget-gate.mjs",
     "quality:token-surface": "node scripts/measure-agent-token-surface.mjs --check",
     "quality:token-surface:update": "pnpm build && node scripts/measure-agent-token-surface.mjs --update",
@@ -133,6 +133,7 @@
     "quality:tracker-measurements": "pnpm build && node scripts/release/tracker-measurement-gate.mjs",
     "quality:package-artifact": "pnpm build && node scripts/release/package-artifact-gate.mjs",
     "quality:surface-replication": "node scripts/release/surface-replication-gate.mjs",
+    "quality:absence-tolerance": "node scripts/release/absence-tolerance-gate.mjs",
     "quality:docs-skills": "node scripts/release/docs-skills-gate.mjs",
     "quality:docs-links": "node scripts/release/docs-skills-gate.mjs --links-only",
     "quality:hosted-analysis": "node scripts/release/hosted-analysis-gate.mjs",
@@ -160,8 +161,8 @@
     "version:next": "node scripts/release-version.mjs next",
     "version:sync": "node scripts/sync-versions.mjs apply",
     "changelog:pm:install": "node dist/cli.js install npm:pm-changelog --project",
-    "changelog:pm": "pnpm changelog:pm:install && node dist/cli.js changelog generate --output CHANGELOG.md --title \"Changelog\" --mode replace --all-release-tags --status closed --item-url-base https://github.com/unbraind/pm-cli/blob/main/.agents/pm",
-    "changelog:pm:check": "pnpm changelog:pm:install && node dist/cli.js changelog generate --output CHANGELOG.md --title \"Changelog\" --mode replace --all-release-tags --status closed --item-url-base https://github.com/unbraind/pm-cli/blob/main/.agents/pm --check",
+    "changelog:pm": "pnpm changelog:pm:install && node dist/cli.js changelog generate --output CHANGELOG.md --title \"Changelog\" --mode replace --all-release-tags --status closed --exclude-tag changelog-exclude --item-url-base https://github.com/unbraind/pm-cli/blob/main/.agents/pm",
+    "changelog:pm:check": "pnpm changelog:pm:install && node dist/cli.js changelog generate --output CHANGELOG.md --title \"Changelog\" --mode replace --all-release-tags --status closed --exclude-tag changelog-exclude --item-url-base https://github.com/unbraind/pm-cli/blob/main/.agents/pm --check",
     "release:notes": "node scripts/generate-release-notes.mjs",
     "release:gates": "node scripts/release/run-gates.mjs --telemetry-mode best-effort",
     "verify:preflight": "node scripts/release/run-gates.mjs --telemetry-mode best-effort",

package/packages/pm-beads/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-beads",
-  "version": "2026.8.8",
+  "version": "2026.8.10",
   "private": true,
   "type": "module",
   "description": "First-party pm package for importing Beads JSONL records.",

package/packages/pm-calendar/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-calendar",
-  "version": "2026.8.8",
+  "version": "2026.8.10",
   "private": true,
   "type": "module",
   "description": "First-party pm package for calendar and agenda views.",

package/packages/pm-command-kit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-command-kit",
-  "version": "2026.8.8",
+  "version": "2026.8.10",
   "private": true,
   "type": "module",
   "description": "First-party pm exemplar package for the commands capability: registerCommand, registerFlags, and registerParser.",

package/packages/pm-digital-twin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-digital-twin",
-  "version": "2026.8.8",
+  "version": "2026.8.10",
   "private": true,
   "type": "module",
   "description": "Beyond-PM exemplar: a temporal production-facility digital twin built entirely on public pm SDK and extension primitives.",

package/packages/pm-governance-audit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-governance-audit",
-  "version": "2026.8.8",
+  "version": "2026.8.10",
   "private": true,
   "type": "module",
   "description": "First-party pm package for governance audit and normalization workflows.",

package/packages/pm-guide-shell/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-guide-shell",
-  "version": "2026.8.8",
+  "version": "2026.8.10",
   "private": true,
   "type": "module",
   "description": "First-party pm package for guide and shell completion workflows.",

package/packages/pm-kanban/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-kanban",
-  "version": "2026.8.8",
+  "version": "2026.8.10",
   "private": true,
   "type": "module",
   "description": "First-party pm archetype package: a complete Kanban continuous-flow profile built on public SDK primitives.",

package/packages/pm-lifecycle-hooks/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-lifecycle-hooks",
-  "version": "2026.8.8",
+  "version": "2026.8.10",
   "private": true,
   "type": "module",
   "description": "First-party pm package demonstrating safe lifecycle hook registration.",

package/packages/pm-linked-test-adapters/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-linked-test-adapters",
-  "version": "2026.8.8",
+  "version": "2026.8.10",
   "private": true,
   "type": "module",
   "description": "First-party pm package for optional linked-test run management adapters and reporters.",

package/packages/pm-search-advanced/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-search-advanced",
-  "version": "2026.8.8",
+  "version": "2026.8.10",
   "private": true,
   "type": "module",
   "description": "First-party pm package for semantic, hybrid, and reindex search workflows.",

package/packages/pm-templates/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-templates",
-  "version": "2026.8.8",
+  "version": "2026.8.10",
   "private": true,
   "type": "module",
   "description": "First-party pm package for reusable create templates.",

package/packages/pm-todos/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-todos",
-  "version": "2026.8.8",
+  "version": "2026.8.10",
   "private": true,
   "type": "module",
   "description": "First-party pm package for Todo markdown import and export.",

package/packages/pm-vcs/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-vcs-sdk-exemplar",
-  "version": "2026.8.8",
+  "version": "2026.8.10",
   "private": true,
   "type": "module",
   "description": "Beyond-PM exemplar: a VCS-style changeset workflow built entirely on public pm SDK and extension primitives.",

package/plugins/pm-claude/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "pm-claude",
   "description": "Native pm CLI integration for Claude Code — 28 MCP tools, 5 workflow skills, 14 slash commands, 4 subagents (coordinator, delivery-chain, triage, verification), hybrid TUI task tracking (pm as persistent store + Claude Code task panel as live view), session context injection, and full git-based project management without leaving Claude Code.",
-  "version": "2026.8.8",
+  "version": "2026.8.10",
   "author": {
     "name": "unbrained",
     "url": "https://github.com/unbraind/pm-cli"

package/plugins/pm-codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "pm-codex",
-  "version": "2026.8.8",
+  "version": "2026.8.10",
   "description": "Native Codex integration for pm-cli with bundled MCP tools, skills, commands, and agent workflows.",
   "author": {
     "name": "unbrained",