@unbrained/pm-cli 2026.9.17 → 2026.9.19

package/packages/pm-governance-audit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-governance-audit",
-  "version": "2026.9.17",
+  "version": "2026.9.19",
   "private": true,
   "type": "module",
   "description": "First-party pm package for governance audit and normalization workflows.",

package/packages/pm-guide-shell/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-guide-shell",
-  "version": "2026.9.17",
+  "version": "2026.9.19",
   "private": true,
   "type": "module",
   "description": "First-party pm package for guide and shell completion workflows.",

package/packages/pm-kanban/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-kanban",
-  "version": "2026.9.17",
+  "version": "2026.9.19",
   "private": true,
   "type": "module",
   "description": "First-party pm archetype package: a complete Kanban continuous-flow profile built on public SDK primitives.",

package/packages/pm-lifecycle-hooks/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-lifecycle-hooks",
-  "version": "2026.9.17",
+  "version": "2026.9.19",
   "private": true,
   "type": "module",
   "description": "First-party pm package demonstrating safe lifecycle hook registration.",

package/packages/pm-linked-test-adapters/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-linked-test-adapters",
-  "version": "2026.9.17",
+  "version": "2026.9.19",
   "private": true,
   "type": "module",
   "description": "First-party pm package for optional linked-test run management adapters and reporters.",

package/packages/pm-search-advanced/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-search-advanced",
-  "version": "2026.9.17",
+  "version": "2026.9.19",
   "private": true,
   "type": "module",
   "description": "First-party pm package for semantic, hybrid, and reindex search workflows.",

package/packages/pm-templates/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-templates",
-  "version": "2026.9.17",
+  "version": "2026.9.19",
   "private": true,
   "type": "module",
   "description": "First-party pm package for reusable create templates.",

package/packages/pm-todos/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-todos",
-  "version": "2026.9.17",
+  "version": "2026.9.19",
   "private": true,
   "type": "module",
   "description": "First-party pm package for Todo markdown import and export.",

package/packages/pm-vcs/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-vcs-sdk-exemplar",
-  "version": "2026.9.17",
+  "version": "2026.9.19",
   "private": true,
   "type": "module",
   "description": "Beyond-PM exemplar: a VCS-style changeset workflow built entirely on public pm SDK and extension primitives.",

package/plugins/pm-claude/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "pm-claude",
   "description": "Native pm CLI integration for Claude Code — 28 MCP tools, 5 workflow skills, 14 slash commands, 4 subagents (coordinator, delivery-chain, triage, verification), hybrid TUI task tracking (pm as persistent store + Claude Code task panel as live view), session context injection, and full git-based project management without leaving Claude Code.",
-  "version": "2026.9.17",
+  "version": "2026.9.19",
   "author": {
     "name": "unbrained",
     "url": "https://github.com/unbraind/pm-cli"

package/plugins/pm-codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "pm-codex",
-  "version": "2026.9.17",
+  "version": "2026.9.19",
   "description": "Native Codex integration for pm-cli with bundled MCP tools, skills, commands, and agent workflows.",
   "author": {
     "name": "unbrained",

package/scripts/build-lease.mjs

@@ -0,0 +1,43 @@
+import { randomUUID } from "node:crypto";
+import { mkdir, readFile, realpath, rm, writeFile } from "node:fs/promises";
+import path from "node:path";
+import { setTimeout as delay } from "node:timers/promises";
+
+/**
+ * Hold an exclusive checkout lease through a complete producer or consumer.
+ * Never steal a lock by age: a slow compiler or test is still its owner.
+ * Nested read-only runners may reuse the parent's opaque, live-owner receipt.
+ */
+export async function withBuildLease(root, operation, options = {}) {
+  const directory = path.join(await realpath(root), ".cache", "build-lease");
+  const ownerFile = path.join(directory, "owner.json");
+  if (options.inherited) {
+    const owner = JSON.parse(await readFile(ownerFile, "utf8"));
+    if (owner.token !== options.inherited || !Number.isSafeInteger(owner.pid) || owner.pid <= 0) {
+      throw new Error("Invalid inherited build lease; run validation from an independent shell.");
+    }
+    process.kill(owner.pid, 0);
+    return operation(owner.token);
+  }
+  await mkdir(path.dirname(directory), { recursive: true });
+  const deadline = Date.now() + (options.timeoutMs ?? 1_200_000);
+  for (;;) {
+    try {
+      await mkdir(directory);
+      break;
+    } catch (error) {
+      if (error.code !== "EEXIST") throw error;
+      if (Date.now() >= deadline) {
+        throw new Error("Timed out waiting for build lease. Check .cache/build-lease/owner.json; remove an abandoned lease only after confirming its producer and consumers have stopped.", { cause: error });
+      }
+      await delay(Math.min(100, Math.max(1, deadline - Date.now())));
+    }
+  }
+  const token = randomUUID();
+  try {
+    await writeFile(ownerFile, JSON.stringify({ token, pid: process.pid }), "utf8");
+    return await operation(token);
+  } finally {
+    await rm(directory, { recursive: true, force: true });
+  }
+}

package/scripts/build.mjs

@@ -0,0 +1,40 @@
+#!/usr/bin/env node
+
+import { spawn } from "node:child_process";
+import { rm, writeFile } from "node:fs/promises";
+import path from "node:path";
+import { pathToFileURL } from "node:url";
+import { withBuildLease } from "./build-lease.mjs";
+
+/** Run each build stage under one lease, retaining a failure marker until a complete rebuild. */
+export async function main(root = process.cwd()) {
+  if (process.env.PM_BUILD_CONSUMER_LEASE) {
+    throw new Error("Cannot rebuild dist inside a validation consumer lease. Build before starting tests.");
+  }
+  return withBuildLease(root, async () => {
+    const incomplete = path.join(root, ".cache", "build-incomplete");
+    await writeFile(incomplete, "Build has not completed. Run pnpm build before consuming dist.\n");
+    for (const args of [
+      ["scripts/prepare-build-cache.mjs"],
+      ["node_modules/typescript/bin/tsc", "-p", "tsconfig.json"],
+      ["scripts/bundle-cli.mjs"],
+      ["scripts/finalize-build.mjs"],
+    ]) {
+      const code = await new Promise((resolve, reject) => {
+        const child = spawn(process.execPath, args, { cwd: root, stdio: "inherit" });
+        child.once("error", reject);
+        child.once("close", (status, signal) => resolve(signal ? 1 : (status ?? 1)));
+      });
+      if (code !== 0) return code;
+    }
+    await rm(incomplete);
+    return 0;
+  });
+}
+
+if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
+  main().then((code) => { process.exitCode = code; }).catch((error) => {
+    console.error(error);
+    process.exitCode = 1;
+  });
+}