pm-ops 2026.7.6

package/CHANGELOG.md

@@ -0,0 +1,15 @@
+# Changelog
+
+## 2026.7.6 - 2026-07-06
+
+### Other
+
+- Align Node engine with pm CLI runtime ([ops-45xp](https://github.com/unbraind/pm-ops/blob/main/.agents/pm/tasks/ops-45xp.toon))
+- Refresh pm-ops to latest pm CLI and changelog toolchain ([ops-xfit](https://github.com/unbraind/pm-ops/blob/main/.agents/pm/tasks/ops-xfit.toon))
+- Output rendering via renderer-override marker ([ops-kmjq](https://github.com/unbraind/pm-ops/blob/main/.agents/pm/decisions/ops-kmjq.toon))
+- Real-data test suite against pm fleet ([ops-hadw](https://github.com/unbraind/pm-ops/blob/main/.agents/pm/tasks/ops-hadw.toon))
+- CI + daily release workflow setup ([ops-8d93](https://github.com/unbraind/pm-ops/blob/main/.agents/pm/tasks/ops-8d93.toon))
+- Implement ops report command ([ops-u5t3](https://github.com/unbraind/pm-ops/blob/main/.agents/pm/tasks/ops-u5t3.toon))
+- Implement ops verify-release command ([ops-621x](https://github.com/unbraind/pm-ops/blob/main/.agents/pm/tasks/ops-621x.toon))
+- Implement ops policy command ([ops-b9rl](https://github.com/unbraind/pm-ops/blob/main/.agents/pm/tasks/ops-b9rl.toon))
+- Implement ops scan command ([ops-jxpd](https://github.com/unbraind/pm-ops/blob/main/.agents/pm/tasks/ops-jxpd.toon))

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 unbraind
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,179 @@
+# pm-ops
+
+Multi-repo fleet operations for [pm-cli](https://github.com/unbraind/pm-cli).
+
+`pm-ops` gives coding agents one command surface for operating across **many** `pm-*` repositories: audit release readiness, enforce naming/workflow policies, run a release-gate matrix, and emit concise fleet reports. Zero external runtime dependencies — Node built-ins only.
+
+> Philosophy: _project management = context management_, applied to a **fleet** of repos.
+
+---
+
+## Installation
+
+```bash
+pm install github.com/unbraind/pm-ops --project
+```
+
+Or install globally:
+
+```bash
+pm install github.com/unbraind/pm-ops --global
+```
+
+---
+
+## Commands
+
+### `pm ops scan`
+
+Scan a set of repos and produce a per-repo release-readiness snapshot.
+
+```bash
+pm ops scan
+pm ops scan --repos ./pm-csv ./pm-github
+pm ops scan --repos ./pm-csv,./pm-github --json
+pm ops scan --format markdown
+pm ops scan --repos ~/container/pm-* --format markdown --output FLEET.md
+```
+
+For each repo `scan` checks:
+
+- `package.json` present (name, version)
+- `tsconfig.json` with `strict: true`
+- `CHANGELOG.md` present
+- `.github/workflows/release.yml` and `ci.yml` present
+- `.agents/pm` workspace + open/in_progress item counts (`pm list --json`)
+- `pm-changelog` wired into devDependencies
+- `npm outdated` count
+- `npm audit --omit=dev` critical/high counts
+- open PRs/issues via `gh` (when the repo is a GitHub repo)
+
+A repo is `ready` when it has a package.json, strict TS, a changelog, both CI/release workflows, pm-changelog wired, and zero critical audit vulnerabilities.
+
+**Flags**
+
+| Flag | Type | Default | Description |
+|---|---|---|---|
+| `--repos <paths>` | string[] | current dir | Repo paths to scan (comma-separated or repeatable) |
+| `--json` | boolean | false | Emit clean JSON to stdout (progress on stderr) |
+| `--format <toon\|json\|markdown>` | string | `toon` | Output format |
+| `--output <file>` | string | — | Write the rendered output to a file instead of stdout |
+
+---
+
+### `pm ops policy`
+
+Validate a policy bundle against repos. The default policy (no file needed) checks:
+
+- **naming** — repo name matches `^pm-[a-z][a-z0-9-]*$` (no `pm-ext-` / `pm-preset-` prefixes)
+- **required-scripts** — `package.json` has `typecheck`, `test`, `build`, `release:check`, `changelog`, `changelog:check`
+- **required-workflows** — `ci.yml` + `release.yml` present
+- **private-no-runners** — private repos must NOT use `runs-on: github-hosted` / `macos-` / `windows-` / `ubuntu-` (skipped for public repos)
+- **pm-duplicate-titles** — no two OPEN pm items share the same title
+- **pm-changelog-wired** — `pm-changelog` in devDeps AND a `changelog` script exists
+
+```bash
+pm ops policy
+pm ops policy --repos ./pm-csv ./pm-github
+pm ops policy --policy ./fleet-policy.json --strict
+pm ops policy --format markdown
+```
+
+`--policy <file>` loads a JSON bundle overriding the defaults:
+
+```json
+{
+  "checks": [
+    { "id": "naming", "severity": "error" },
+    { "id": "required-scripts", "severity": "error", "repo_filter": "pm-csv",
+      "params": { "scripts": ["typecheck", "test", "build"] } }
+  ]
+}
+```
+
+`--strict` exits non-zero on any failed check (any severity).
+
+**Flags**
+
+| Flag | Type | Default | Description |
+|---|---|---|---|
+| `--repos <paths>` | string[] | current dir | Repo paths to check |
+| `--policy <file>` | string | built-in | JSON policy bundle |
+| `--json` | boolean | false | Emit clean JSON to stdout |
+| `--format <toon\|json\|markdown>` | string | `toon` | Output format |
+| `--strict` | boolean | false | Exit non-zero on any failure |
+| `--output <file>` | string | — | Write the rendered output to a file instead of stdout |
+
+---
+
+### `pm ops verify-release`
+
+Run the release gate matrix per repo: executes `npm run release:check` (or the individual `typecheck` / `build` / `test` / `audit:prod` / `pack:dry-run` / `changelog:check` steps when `release:check` is missing) and reports pass/fail with per-step timing. **Does NOT publish.** Exits non-zero if any repo fails.
+
+```bash
+pm ops verify-release
+pm ops verify-release --repos ./pm-csv ./pm-github
+pm ops verify-release --json
+```
+
+**Flags**
+
+| Flag | Type | Default | Description |
+|---|---|---|---|
+| `--repos <paths>` | string[] | current dir | Repo paths to verify |
+| `--json` | boolean | false | Emit clean JSON to stdout |
+| `--format <toon\|json\|markdown>` | string | `toon` | Output format |
+
+---
+
+### `pm ops report`
+
+Emit a concise fleet report combining scan + policy results.
+
+```bash
+pm ops report
+pm ops report --repos ./pm-csv ./pm-github --format markdown
+pm ops report --format markdown --output FLEET.md
+pm ops report --json
+```
+
+**Flags**
+
+| Flag | Type | Default | Description |
+|---|---|---|---|
+| `--repos <paths>` | string[] | current dir | Repo paths to report on |
+| `--json` | boolean | false | Emit clean JSON to stdout |
+| `--format <toon\|json\|markdown>` | string | `toon` | Output format |
+| `--output <file>` | string | — | Write the report to a file instead of stdout |
+
+---
+
+## Agent usage
+
+`pm-ops` is designed for coding agents operating across a fleet of `pm-*` repos:
+
+- **Deterministic JSON.** Every command supports `--json` for strict parsing; human-readable progress goes to stderr so stdout stays clean.
+- **Stable ordering.** Repo results are emitted in the order passed on `--repos`.
+- **Failure diagnostics.** `verify-release` writes the full per-check matrix to stdout _then_ throws a non-zero exit on failure, so agents get both the diagnostics and the exit code.
+- **Offline mode.** Set `PM_OPS_OFFLINE=1` to skip `npm outdated` / `npm audit` / `gh` calls (useful in air-gapped CI); file-based checks still run.
+- **No shell injection.** All subprocess calls (`pm`, `npm`, `gh`) pass args as arrays via `spawnSync` — never through a shell.
+- **Zero runtime deps.** Only Node built-ins, so the package installs fast and audits clean.
+
+### Output formats
+
+- **toon** (default) — compact, host-rendered TOON of the structured result; easy to read in a terminal.
+- **json** — `JSON.stringify(result, null, 2)`; the same object shape for every command.
+- **markdown** — GitHub-flavoured tables suitable for pasting into PRs, issues, or a `FLEET.md`.
+
+### Result shapes
+
+`scan` → `{ repos: RepoScan[], summary: { total, ready, not_ready } }`
+`policy` → `{ repos: RepoPolicy[], summary: { total, passed, failed, by_severity } }`
+`verify-release` → `{ repos: RepoRelease[], summary: { total, passed, failed } }`
+`report` → `{ generated_at, scan: ScanResult, policy: PolicyResult }`
+
+---
+
+## License
+
+MIT © unbraind

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+declare const _default: {
+    name: string;
+    version: string;
+    activate(api: any): void;
+};
+export default _default;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":";;;kBA4+BgB,GAAG;;AAJnB,wBAsLG"}