pm
Menu

Changelog

What changed in each pm release, with a link to the pm item that records every change.

2026.8.30

Other

  • Adopt eslint-plugin-unicorn 74 with strict lint and packed-consumer proof item pm-6f66vu

2026.8.29

Fixed

  • GH-1144: hash-only merge receipts contradict report output and cannot reconcile truthfully item pm-z1z96w
  • GH-1146/1147: external blockers remain stale and validation recommends deleting them item pm-yhle2e
  • GH-1140: reject ambiguous bare comma tuples for linked file and test mutations item pm-nc94mk
  • GH-1148: cached drift mismatch can falsely report tracker corruption item pm-sxg7wl
  • GH-1138: linked test name filters can pass after executing zero tests item pm-ntnv4k
  • GH-1136: npm 12 object-form npm pack receipts break registry package installs item pm-xrjy8o
  • The annotation key=value grammar has three divergent comma behaviours, two of which silently corrupt the evidence text before it is made immutable item pm-hu92i3
  • GH-1150: health remediation for pending merge receipts must perform the repair item pm-r0p3at
  • GH-1134: required collection recovery omits truthful --clear-\* intent item pm-t7wl00
  • GH-1143: Claude session-file provenance resolver ignores real nested stream fields item pm-f60039
  • GH-1137: linked docs writes silently persist nonexistent workspace paths item pm-hiqlkh
  • Sentry release gate aborts valid API queries at a fixed 15-second deadline item pm-b9g2cs

Other

  • Close the jscpd/CodeFactor sensitivity gap: minTokens 115 misses low-token table clones the CodeFactor bot still files item pm-xspd
  • Refresh @sentry/node 10.72 with packed SDK and release proof item pm-mwhv33
  • Refresh compatible 2026-08-29 dependency releases item pm-vwuidf

2026.8.28

Fixed

  • Repository test runner inherits production Sentry and turns negative CLI fixtures into release-blocking incidents item pm-5ug5xq
  • Broad squash commits overflow hosted-analysis tree lookup and falsely lose reviewed PR provenance item pm-gactwj
  • Golden agent-transcript replay: measure tokens-per-completed-task as a CI-visible DX regression gate item pm-8pnj
  • Unknown-option refusal textual flags bypass structured global-option filtering item pm-x4wbui
  • Agent-task transcript recovery accepts a refusal as a successful retry item pm-o360q6
  • Close lifecycle bypasses reproducible process clock item pm-hmpu4p
  • GH-1132: opt-in idempotent annotation append (ifAbsent/--if-absent) prevents retry-driven context duplication; duplicate appends remain available by default item pm-ea1yh2
  • Agent-task transcripts accept declared no-effect and partial-effect successful exits item pm-wanwyc
  • Agent-task baselines accept missing task and composite token ceilings item pm-aksavu
  • Agent-task closeout claims lack linked full-verification commands item pm-ervmsc
  • CLI transport-floor RSS admission false-fails on single-sample page noise item pm-pz49xc
  • Unknown-option refusals identify the actual rejected flag and fail closed at delimiters item pm-fo8g7j
  • Agent-task gate accepts incidental substrings as required-field completeness item pm-o7u08u
  • Completed-task transcripts require terminal success, exclusive refusal metadata, and complete recovery item pm-wa39rl
  • Agent-task token replay trusts missing or incorrect accounting estimates item pm-ok2kdn

Security

  • GH-1131: macOS Node 24 nightly cannot create the Skills-over-MCP special-file socket fixture item pm-k23c4c

2026.8.27

Added

  • Tiered contract-driven help: one-screen core help, full surface via pm help --all, generated from the contract table item pm-e2bq
  • Skills over MCP: discoverable version-coherent pm workflows with progressive disclosure, capability requirements, and token budgets item pm-8nzivt
  • MCP Apps for pm: interactive graph, context, plan, assurance, and long-operation views with consent-safe action boundaries item pm-pznhee

Fixed

  • GH-859: pm-beads source export can omit Beads comment bodies and events item pm-tpwde6
  • pm get silently discards --output-include field names because entity reads bind the flag to sections while collection reads bind it to fields, and the omission receipt reports no omissions either way item pm-0k19l7
  • GH-860: pm-beads --preserve-source-ids changes source ID casing item pm-f7jj9b
  • GH-862: pm-beads must map Beads close reasons into native resolution metadata item pm-gus5ft
  • GH-1118: natural-language word-number titles trigger duplicate issue-code false positives item pm-blvfye
  • Published-artifact verification rejects the new pm-mcp-http bin before executing its healthy published entrypoint item pm-fpdne3

Other

  • Consolidate package lifecycle: extension/package/install/upgrade under a single pm package namespace item pm-tnud
  • Refresh compatible ESLint 10.9.1 and Node type 26.3 patches item pm-crkmmr
  • MCP 2026-07-28 conformance and release gate: official schema matrix, protocol-era adapters, real transports, adversarial cases, and published consumers item pm-55yf1t

2026.8.26

Added

  • MCP subscriptions and transports: subscriptions/listen, request-scoped streams, Streamable HTTP headers, retry semantics, and stdio parity item pm-v7e337
  • MCP server surface and cache contracts: deterministic tools, prompts, resources, JSON Schema 2020-12, ttlMs, cacheScope, and change coherence item pm-hv1x1x
  • Official MCP tasks extension for pm: asynchronous long operations, tasks/get polling, tasks/update input, durable handles, and lifecycle convergence item pm-rzs24j
  • MCP multi round-trip requests: input_required results, elicitation, retry state, and removal of server-initiated request assumptions item pm-rz9gep
  • Stateless MCP core: request-local version and capabilities, mandatory server/discover, typed result envelopes, and deterministic identity item pm-vae5ec

Changed

  • SDK-first architecture: pm CLI (and MCP) become thin layers over a complete public pm SDK item pm-usfg

Fixed

  • GH-1091: surface extension manifest schema lint separately from version compatibility item pm-gh1091
  • GH-1109: tracker-context seeding writes an empty settings history document item pm-2ga1g7
  • GH-1112: Windows Node 24 merge-receipt boundary test relies on POSIX name-length failure item pm-v3umtp

Security

  • MCP remote authorization and observability: issuer-bound credentials, client metadata documents, consent, header security, and OpenTelemetry propagation item pm-3zh9s4

Deprecated

  • MCP 2026-07-28 deprecation and removal migration: roots, sampling, logging, dynamic registration, HTTP+SSE, includeContext, ping, and legacy sessions item pm-vzcisw
  • ADR: MCP 2026-07-28 is canonical and legacy interoperability is a bounded stateless adapter, not connection-local session state item pm-sqvshj

Other

  • Refresh Sentry 10.71 and TypeScript-ESLint 8.68 with packed-consumer proof item pm-7xfndr

2026.8.25

Fixed

  • Dynamic-read continuation cursors are born stale: pm health emits a cursor that its next invocation rejects item pm-oahhyc
  • GH-1105: contracts must declare each command projection vocabulary before invocation item pm-q4isdq
  • The outcome-milestone ladder is a sibling set rather than a layer: 1,024 terminal items reach the roadmap apex through 154 typed roots without traversing any outcome milestone item pm-h6b73t

Security

  • Adopt Dependabot PR \#1103 pinned CodeQL 4.37.8 refresh item pm-rh0z9f

2026.8.24

Fixed

  • Structured release-failure causes are preserved in blocked-release alerts item pm-x63izf
  • Bulk writes accept newline/comma IDs from argv, stdin, and @path with effect-aware exits item pm-3oq022
  • update-many --dry-run allows filter-only preview for review and bulk-selection workflows item pm-kexu

Other

  • Uniform stdin convention: body-file and annotation --file flags accept '-' for stdin item pm-iktj
  • Single source of surface tiering: one contract-declared tier per command drives CLI help, MCP tool profiles, completions, and docs together item pm-kxci8x

2026.8.23

Added

  • Every instruction the product emits about its own next command is an unexecuted claim: the recovery vocabulary is generated, asserted as text, and run by nothing item pm-h8tpeh

Changed

Fixed

  • Allow linked tests to opt out of source-workspace injection for self-sandboxing repo-wide gates item pm-efkvdy
  • Linked-test schema context changes non-PM repository checks, so commands that pass directly fail when recorded and run through pm test item pm-e97jyf
  • GH-1089: expose reproducible execution through supported CLI and MCP process configuration item pm-gh1089
  • Budget recovery can recommend a smaller ceiling than the request that already truncated item pm-xam9bt

Security

  • Linked-test commands are merge-unioned workspace data executed with shell:true — no provenance, allowlist, or confirmation boundary item pm-ed28wi
  • Cross-harness provenance adapters: automatically resolve native model, version, and effort signals beyond Claude without identity flags item pm-c0lrdm

Other

  • Expose agent probe controls and versioned legacy-author vocabulary through pm config and SDK mutation APIs item pm-yds9dt
  • Diagnostic output budget: errors, warnings, and recovery bundles are the output an agent reads most and the only output with no declared ceiling item pm-cha95z

2026.8.22

Fixed

  • GH-1078: Complete-list certification accepts absent or contradictory truth receipts and emits stale recovery item pm-gh1078
  • GH-1076: read-only duplicates rejects universal JSON output controls item pm-gh1076
  • GH-1074: package doctor cannot distinguish a safe declining service override from a global interceptor item pm-gh1074
  • GH-1073: pm init accepts a whitespace id prefix that makes later creates fail item pm-gh1073
  • GH-1075: Windows Node 24 nightly validation failed at main 3e7ac007 item pm-gh1075
  • The child hierarchy kind has an unenforced direction and cardinality: 7 of 15 rows are inverted against the registry's own declaration and no channel, validator, or audit finding notices item pm-vk7zek
  • Hierarchy-canonicalizing dependency kinds bypass every cycle detector: mutual child_of edges leave the graph provably inconsistent while validate, health, and graph analyze all report acyclic item pm-rggtvd

Security

  • GH-1072: pm install leaks user allow-scripts config into isolated package installs item pm-gh1072

2026.8.21

Added

  • Prose-asserted relationships are unmeasured: 1,750 identifier pairs named in item text carry no edge in any direction, and nothing counts the gap item pm-ob9z4y

Changed

  • Provide consistent tracker preflight and executable recovery across SDK, CLI, and MCP item pm-6qiwan

Fixed

  • The blocks ceiling counts fabricated and evidence-cited ordering edges identically, so the historical ordering reconstruction another item mandates cannot land item pm-c90tfh
  • The dependency remove flag accepts a value its own add flag refuses and reports success on a zero-match, so a mistyped graph repair exits 0 having changed nothing item pm-gos426
  • All four graph traversal verbs reject the semantic edge kinds the ontology exists to express, so 'what implements this milestone' returns the ordering-kind answer with no sign a semantic one exists item pm-3dyec2
  • Typed-outcome reachability admits three of ten edge kinds, so the four semantic kinds the ontology exists to express contribute nothing to the invariant they were minted to satisfy item pm-ayg31c
  • The graph audit raises duplicate dependency rows at warning severity and the only remediation available deletes every copy, so collapsing a duplicate means briefly destroying a real edge item pm-flnefm

Other

  • ADR: Ordering assurance partitions evidence-cited blocks from uncited blocks item pm-jhpby4