@unbrained/pm-cli 2026.9.18 → 2026.9.20

package/docs/SDK_LIFECYCLE.md

@@ -1,8 +1,9 @@
 # SDK Lifecycle Policy
 
 Tracked by [pm-z5pmf8](../.agents/pm/issues/pm-z5pmf8.toon),
-[pm-xm0id4](../.agents/pm/issues/pm-xm0id4.toon), and
-[pm-2ew0w3](../.agents/pm/issues/pm-2ew0w3.toon).
+[pm-xm0id4](../.agents/pm/issues/pm-xm0id4.toon),
+[pm-2ew0w3](../.agents/pm/issues/pm-2ew0w3.toon), and
+[pm-scbr0s](../.agents/pm/issues/pm-scbr0s.toon).
 
 The public SDK owns lifecycle transactions and policy. CLI and MCP operations
 delegate to SDK modules, so an item does not gain different storage,
@@ -39,6 +40,10 @@ Package authors can import these operations from `@unbrained/pm-cli/sdk`
 without importing CLI modules or spawning the executable. Existing CLI import
 paths remain source-compatible while integrations migrate.
 
+See [Concurrent Workspace Mutations](WORKSPACE_CONCURRENCY.md) for settings
+snapshot reconciliation, schema publication, session locks, and checkpoint
+collision semantics shared by these operations.
+
 ## Relationship Identity
 
 Tracked by [pm-olcoon](../.agents/pm/issues/pm-olcoon.toon).
@@ -94,6 +99,15 @@ An embedded SDK consumer can explicitly choose `orderingEdges: "remove"` for
 a domain where predecessor facts are intentionally ephemeral. The CLI and MCP
 do not expose that override and use the durable default.
 
+Explicit removal returns `closed_removed_predecessors:<item>:<ids>` for the
+complete removed row set and `closed_removed_predecessors_count:<item>:<n>`
+for its cardinality. The count is the number of dependency rows, including
+distinct provenance rows that reference the same item. Clearing a transient
+`blocked_by` scalar is reported separately as
+`closed_cleared_blocked_by:<item>:<blocker>` and does not inflate that count.
+Both removal and its receipts use the same selected rows; other relationship
+kinds survive unchanged.
+
 ```ts
 import {
   closeItem,

package/docs/WORKSPACE_CONCURRENCY.md

@@ -0,0 +1,67 @@
+# Concurrent Workspace Mutations
+
+Tracked by [pm-bgcu](../.agents/pm/issues/pm-bgcu.toon). Power-loss durability is
+governed by [pm-o2kc](../.agents/pm/epics/pm-o2kc.toon).
+
+The CLI and MCP use the SDK's persistence primitives. Atomic replacement makes
+one file write indivisible, but preserving concurrent edits also requires
+protecting the read and decision that precede that write.
+
+## Settings snapshots
+
+`readSettings` attaches an internal, non-enumerable persistence snapshot.
+`writeSettings` compares the caller's edited snapshot with the latest document
+while holding the `workspace-history` lock. Changes to different object keys
+are combined, including separate keys in a newly introduced nested object.
+Unchanged keys keep the current persisted values; sparse defaults and
+file-backed schema definitions remain sparse.
+
+Concurrent incompatible edits to the same scalar, array, or deleted object
+return a conflict before writing. Read a fresh settings snapshot and reapply
+the intended operation. Equal concurrent changes are idempotent. A successful
+write advances that instance's baseline, so reusing it cannot replay an earlier
+edit over another writer. Conflict messages name keys without exposing values.
+Deleting the settings document also invalidates an unchanged read snapshot;
+its next write returns the same structured conflict.
+
+Keep the object returned by `readSettings` when editing settings. Constructing
+a new object, spreading it, or using `structuredClone` drops the internal
+snapshot; `writeSettings` treats such objects as explicit whole-document
+replacements. They are suitable for initialization, not concurrent edits.
+
+The same lock protects the persisted document, its workspace history entry,
+and compensation if history append fails. This prevents concurrent writers
+from forking the chain or leaving an accepted write unrecorded. It does not
+claim crash atomicity across separate filesystem writes.
+
+## Schema, session, and rollback state
+
+Schema mutations hold the existing `schema-types`, `schema-statuses`, or
+`schema-fields` lock while reading and modifying their file. Profile application
+uses the same lock order. Bootstrap stages complete seed bytes and publishes
+them through a non-replacing hard link: a concurrent schema writer or reader
+can never be overwritten by a delayed bootstrap. A filesystem that refuses
+hard links returns an error instead of falling back to an unsafe overwrite.
+
+Focus and semantic attribution share the `session-state` lock across the full
+read-modify-write operation. Independent agents retain their attribution while
+focus changes. This state remains local and ephemeral.
+
+Rollback checkpoints use the same atomic, non-replacing publication as schema
+seeds. Filesystem identity also protects paths reached through symlink aliases.
+A byte-identical retry succeeds; reusing an ID for different contents fails without
+replacing the original rollback evidence. Different checkpoint paths remain
+independent.
+
+Atomic publication guarantees complete visible bytes and prevents replacement.
+It does not flush file data or directory entries to stable storage, so success
+does not guarantee survival of power loss. A stronger durability policy must
+cover all writers, newly created ancestor directories, retry acknowledgements,
+and supported filesystems; syncing only this publication path would not establish
+that workspace-wide guarantee.
+
+The mutation locks use the existing bounded contention and stale-owner recovery
+mechanism. Settings use configured lock TTL and wait values. Internal session
+locks use the standard defaults; `PM_LOCK_WAIT_MS` still
+overrides their wait budget. Every acquired lock is released on success and
+failure.

package/docs/generated/REFUSAL_CLOSURE_CENSUS.md

@@ -4,12 +4,12 @@ Tracker: `pm-f05lsg`.
 
 Every catalog code is listed. An `uncovered` row is an explicit closure obligation, never an omission or implied approval.
 
-- Catalog error codes: 377
+- Catalog error codes: 378
 - Executable error codes: 19
 - Executable-code ratchet floor: 18
 - Required executable canonical codes: `bulk_ids_input_empty`, `bulk_ids_input_missing_path`, `bulk_ids_input_unreadable`, `invalid_argument_value`, `manifest_unknown_key`, `missing_lifecycle_target`, `missing_required_argument`, `no_version_bounds_declared`, `projection_options_mutually_exclusive`, `tracker_not_initialized`, `tracker_root_missing`, `tracker_root_not_directory`, `tracker_root_unreadable`, `unknown_context_intent`, `unknown_field_projection`, `unknown_option`, `unknown_subcommand`
-- Uncovered error codes: 358
-- Coverage fraction: 0.050398
+- Uncovered error codes: 359
+- Coverage fraction: 0.050265
 - Closed-domain probes: 19
 - Grammar probes: 113
 
@@ -353,6 +353,7 @@ Every catalog code is listed. An `uncovered` row is an explicit closure obligati
 | `validate_metadata_duplicate_issue_codes` | `validate_metadata_duplicate_issue_codes` | uncovered | none | 0 |
 | `validate_metadata_missing_acceptance_criteria` | `validate_metadata_missing_acceptance_criteria` | uncovered | none | 0 |
 | `validate_metadata_missing_close_reason` | `validate_metadata_missing_close_reason` | uncovered | none | 0 |
+| `validate_metadata_missing_closed_at` | `validate_metadata_missing_closed_at` | uncovered | none | 0 |
 | `validate_metadata_missing_confidence` | `validate_metadata_missing_confidence` | uncovered | none | 0 |
 | `validate_metadata_missing_estimate` | `validate_metadata_missing_estimate` | uncovered | none | 0 |
 | `validate_metadata_missing_release` | `validate_metadata_missing_release` | uncovered | none | 0 |

package/marketplace.json

@@ -6,14 +6,14 @@
   },
   "metadata": {
     "description": "Official marketplace for pm CLI — native git-based project management for Claude Code and AI coding agents.",
-    "version": "2026.9.18"
+    "version": "2026.9.20"
   },
   "plugins": [
     {
       "name": "pm-claude",
       "source": "./plugins/pm-claude",
       "description": "Native pm CLI integration for Claude Code — 28 MCP tools, 5 workflow skills, 14 slash commands, 4 subagents, hybrid TUI task tracking, session context injection, and coordination subagents for git-based project management without leaving Claude Code.",
-      "version": "2026.9.18",
+      "version": "2026.9.20",
       "author": {
         "name": "unbrained",
         "url": "https://github.com/unbraind/pm-cli"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-cli",
-  "version": "2026.9.18",
+  "version": "2026.9.20",
   "description": "Git-native project management CLI for humans and agents.",
   "type": "module",
   "packageManager": "pnpm@11.10.0",
@@ -222,7 +222,7 @@
     "@eslint/js": "^10.0.1",
     "@modelcontextprotocol/ext-apps": "2.0.0",
     "@sentry/cli": "^3.8.0",
-    "@types/node": "^26.5.1",
+    "@types/node": "^26.6.1",
     "@types/npm-package-arg": "^6.1.4",
     "@vitest/coverage-v8": "^4.1.11",
     "esbuild": "0.28.2",
@@ -232,7 +232,7 @@
     "fast-check": "^4.10.1",
     "github-slugger": "2.0.0",
     "greptile": "^3.5.2",
-    "jscpd": "^5.2.1",
+    "jscpd": "^5.3.0",
     "marked": "18.0.13",
     "parse5": "8.0.1",
     "tsx": "^4.23.13",

package/packages/pm-beads/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-beads",
-  "version": "2026.9.18",
+  "version": "2026.9.20",
   "private": true,
   "type": "module",
   "description": "First-party pm package for importing Beads JSONL records.",

package/packages/pm-calendar/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-calendar",
-  "version": "2026.9.18",
+  "version": "2026.9.20",
   "private": true,
   "type": "module",
   "description": "First-party pm package for calendar and agenda views.",

package/packages/pm-command-kit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-command-kit",
-  "version": "2026.9.18",
+  "version": "2026.9.20",
   "private": true,
   "type": "module",
   "description": "First-party pm exemplar package for the commands capability: registerCommand, registerFlags, and registerParser.",

package/packages/pm-digital-twin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-digital-twin",
-  "version": "2026.9.18",
+  "version": "2026.9.20",
   "private": true,
   "type": "module",
   "description": "Beyond-PM exemplar: a temporal production-facility digital twin built entirely on public pm SDK and extension primitives.",

package/packages/pm-governance-audit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-governance-audit",
-  "version": "2026.9.18",
+  "version": "2026.9.20",
   "private": true,
   "type": "module",
   "description": "First-party pm package for governance audit and normalization workflows.",

package/packages/pm-guide-shell/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-guide-shell",
-  "version": "2026.9.18",
+  "version": "2026.9.20",
   "private": true,
   "type": "module",
   "description": "First-party pm package for guide and shell completion workflows.",

package/packages/pm-kanban/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-kanban",
-  "version": "2026.9.18",
+  "version": "2026.9.20",
   "private": true,
   "type": "module",
   "description": "First-party pm archetype package: a complete Kanban continuous-flow profile built on public SDK primitives.",

package/packages/pm-lifecycle-hooks/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-lifecycle-hooks",
-  "version": "2026.9.18",
+  "version": "2026.9.20",
   "private": true,
   "type": "module",
   "description": "First-party pm package demonstrating safe lifecycle hook registration.",

package/packages/pm-linked-test-adapters/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-linked-test-adapters",
-  "version": "2026.9.18",
+  "version": "2026.9.20",
   "private": true,
   "type": "module",
   "description": "First-party pm package for optional linked-test run management adapters and reporters.",

package/packages/pm-search-advanced/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-search-advanced",
-  "version": "2026.9.18",
+  "version": "2026.9.20",
   "private": true,
   "type": "module",
   "description": "First-party pm package for semantic, hybrid, and reindex search workflows.",

package/packages/pm-templates/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-templates",
-  "version": "2026.9.18",
+  "version": "2026.9.20",
   "private": true,
   "type": "module",
   "description": "First-party pm package for reusable create templates.",

package/packages/pm-todos/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-todos",
-  "version": "2026.9.18",
+  "version": "2026.9.20",
   "private": true,
   "type": "module",
   "description": "First-party pm package for Todo markdown import and export.",

package/packages/pm-vcs/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-vcs-sdk-exemplar",
-  "version": "2026.9.18",
+  "version": "2026.9.20",
   "private": true,
   "type": "module",
   "description": "Beyond-PM exemplar: a VCS-style changeset workflow built entirely on public pm SDK and extension primitives.",

package/plugins/pm-claude/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "pm-claude",
   "description": "Native pm CLI integration for Claude Code — 28 MCP tools, 5 workflow skills, 14 slash commands, 4 subagents (coordinator, delivery-chain, triage, verification), hybrid TUI task tracking (pm as persistent store + Claude Code task panel as live view), session context injection, and full git-based project management without leaving Claude Code.",
-  "version": "2026.9.18",
+  "version": "2026.9.20",
   "author": {
     "name": "unbrained",
     "url": "https://github.com/unbraind/pm-cli"

package/plugins/pm-codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "pm-codex",
-  "version": "2026.9.18",
+  "version": "2026.9.20",
   "description": "Native Codex integration for pm-cli with bundled MCP tools, skills, commands, and agent workflows.",
   "author": {
     "name": "unbrained",