Added
- GH-472: create error for missing required custom fields lists the field names Eintrag pm-4bzq
- Provenance records distinguish unavailable configuration from resolver failures Eintrag pm-lu6sca
Fixed
- GH-959 recurrence: snapshot restore planning races lease-expiry fixture cleanup Eintrag pm-usq49n
- GH-960: structured diagnostic notices preserve machine-readable JSON envelopes Eintrag pm-embm6t
- GH-956: lossless acceptance-criteria replacement and unmatched-removal failure contract Eintrag pm-lppm6y
- GH-954: fail-fast dependency target validation with explicit forward-reference intent Eintrag pm-x3dq0l
- Preserve executable recovery semantics across terminators, nested aliases, and tracker scope Eintrag pm-szn67i
- Measure source replication against an independently discovered denominator Eintrag pm-b84irw
- GH-515: pm test --add reorders linked tests — --only-last can execute a non-newest command Eintrag pm-x2vx
- GH-490: unknown-command suggester ranks substring hits over synonyms/edit distance — pm log suggests 'extension catalog' Eintrag pm-g543
- GH-441: type-aware create help mislabels applicable flags as required (ignores create-mode) Eintrag pm-qmjx
- GH-519: close recovery bundle suggests --validate-close "<value\>" for an enum flag and hides the real resolution-fields blocker Eintrag pm-ulqu
- GH-950: item-addressing commands reject a consistent --id alias and misroute recovery Eintrag pm-mkinft
- GH-951: required-field policy can force fabricated relationship edges Eintrag pm-st7wgu
- GH-953: close recovery suggested_retry is not executable and drops supplied flags Eintrag pm-p316vn
- A sandboxed fixture records provenance from the host harness environment, so the suite is green on CI and deterministically red for any agent running it locally Eintrag pm-xgah3a
- The session-role dimension is wired to a boolean child-session flag, so every nested claude-code invocation records the role literally as "1" and fleet analytics will group real work under a meaningless label Eintrag pm-eq9dlw
- GH-921/GH-922: merge-decision receipts are not durable in fresh-clone CI Eintrag pm-1j5j21
- GH-948: version-skewed pm invocations silently rewrite the tracked merge fence during unrelated commands Eintrag pm-l56d0o
- A measurement ratchet bound stops enforcing the moment its owner reaches a terminal status, so every guarded population goes unbounded exactly when its fix ships Eintrag pm-5z9plz
- The docs tree grows one file per shipped contract, so 39 of 51 documents are stubs and the SDK's story is split across twelve files Eintrag pm-9hv1o7
- The status-token normalization rule is replicated at five sites and the replication gate covers none of them Eintrag pm-ulxdqp
- The two slowest governance commands load every item body while twenty other SDK modules use the light read path Eintrag pm-sr3xzg
- GH-946: context signal-store staleness warning has no executable remediation contract Eintrag pm-wn1jy1
- GH-943: health remediation points at validate while actionable unknown-author recovery remains undiscoverable Eintrag pm-jwmszf
- GH-942: expose the lightweight all-item metadata reader through the public SDK Eintrag pm-yrj7qr
- GH-941: pm read omits notes without declaring their omission and invites duplicate writes Eintrag pm-swfelk
Other
- Refresh pinned GitHub Actions for PR \#958 with exact-head compatibility proof Eintrag pm-obh6lo
- The measurement ratchet floors only aggregate graph totals, so converting typed semantic edges to untyped ones passes every declaration Eintrag pm-70jyvw
Fixed
- The release gate cannot classify Sentry events emitted before its own contract producer shipped, so a correct usage refusal from an older release blocks the daily cut for the whole rolling window and clears only by hand Eintrag pm-h75tjh
- Entity projections carry a collection key only when it is non-empty, so an absent key cannot be distinguished from an unprojected one and neither projection level is a superset of the other Eintrag pm-b1w8vr
- Ordering recorded as blocks is invisible to actionability: the same prerequisite schedules differently depending on which endpoint wrote it Eintrag pm-jkbqt8
- Dependency-kind lexicon: fifteen accepted spellings for roughly eight relations, canonicalized inconsistently at write time, so the stored graph vocabulary keeps fragmenting Eintrag pm-4020c5
- GH-930: duplicates --status all silently scans zero items Eintrag pm-sy24w2
- GH-920: health conflates lossless merge receipts with discarded-value decisions Eintrag pm-jtwsct
- GH-937: package list exposes alias rows as packages and overstates the catalog total Eintrag pm-fr6u17
- Post-merge guidance names history-repair, which clears drift but never settles the merge receipt, so every merged item leaves a permanent merge_decisions_unreviewed warning Eintrag pm-lwmstb
- GH-925: package manage diagnostics reject universal read-output controls Eintrag pm-479ggz
- Surface replication gate activates unrelated sets through shared required members Eintrag pm-kmnvug
- GH-924: closed completed plans still recommend pm close Eintrag pm-ltlcsw
- Merge direction decides which agent's value survives: the same two branches converge to different item state depending on which side merges, and nothing reports the divergence Eintrag pm-dlx7v7
- GH-931: linked-test detector misclassifies unrelated node dist/cli.js commands as pm Eintrag pm-u3o3ur
- Release candidate acceptance hard-codes the pre-bump CLI version and blocks the daily cut Eintrag pm-7ipajv
Added
- The CLI has 195 error codes and contracts none of them: the surface agents read when they are wrong is the only one with no enumeration, no stability promise, and no gate Eintrag pm-x4nn3z
Fixed
- PR \#935 review remediation: executable gate registry and fail-closed runtime context parsing Eintrag pm-n41vay
- GH-926: warn before a stale pm binary mutates a project pinned to a newer CLI/SDK Eintrag pm-1eted6
- PR \#935 CI: preserve dependency-free fast-version startup and regenerate runtime contracts Eintrag pm-dskxwf
- Make stale-runtime compatibility classification action-aware across mixed CLI commands Eintrag pm-zjelve
- CLI and SDK refusal contracts now preserve consistent codes and recovery semantics Eintrag pm-0xmajx
- Sentry exception capture never writes the pm.error_code and pm.exit_code tags the release gate reads, so every unexpected runtime error is unclassifiable by construction and blocks the daily cut for the full rolling window Eintrag pm-qxo5iu
- Sentry PM-CLI-2S: resource-exhausted copy reports a high handled error without actionable storage guidance Eintrag pm-4odf0c
- Sentry PM-CLI-2Q: expected snapshot-name validation is captured as a high production error Eintrag pm-qyg51h
- The release gate classifies production errors by message prose and reads none of the 236 error codes the product declares, so every waiver is a latent re-block and a broad substring is a silent waiver Eintrag pm-dqtzva
- The mandatory command-wiring replication set is enforced only by a prose checklist, and the census shows partial application is the single largest recurring defect class in the record Eintrag pm-7rrqsk
- GH-919: \_workspace author-attribution coordinates cannot be acknowledged Eintrag pm-ety1qc
- pm comments write response replays the entire accumulated history, so one append can emit hundreds of comments Eintrag pm-9stazf
- GH-457: pm health hangs during vectorization check with no output (never-block violation) Eintrag pm-tu71
Security
- GH-933: nested PM writes in non-PM linked tests can mutate the source project Eintrag pm-alhqbz
Other
- One governed verification plan now drives local preflight and maps hosted release gates Eintrag pm-ei6x66
- Every command declares its exit-code set, and the code distinguishes applied from applied-to-nothing Eintrag pm-hqa8g1
- Floor polarity for the tracker measurement ratchet, with graph edge and node floors declared Eintrag pm-z0cfor
- Refresh tsx to 4.23.11 with full release-gate proof Eintrag pm-nw1y14
Added
- Caller-carried output sessions compose token budgets across reads and suppress repeated item facts Eintrag pm-hid9g1
- Fleet attribution analytics: per-harness and per-model throughput, rework, and defect-escape rates derived from immutable history alone Eintrag pm-gw6uyq
- Improvement ledger: measured properties of pm carry a recorded time series, because a ceiling proves a number did not grow and can never prove a change made it smaller Eintrag pm-chahyq
Fixed
- Nested pm test coverage changes repository-root fixtures because outer PM_PATH sandboxing leaks into package-owned run-tests Eintrag pm-ay3l0p
- Read surfaces have no common row contract: field projection reaches 4 of 11 commands and the row collection sits under a different key on each, so no single shell or jq expression works across pm Eintrag pm-sb0tns
- Sentry PM-CLI-2W: rejected unknown-author acknowledgments are emitted as high production errors Eintrag pm-c3uru0
- Expose live bounded provenance coverage over immutable history Eintrag pm-1wiugq
- GH-915: Windows nightly Vite import portability and shared contract-fixture isolation regressions Eintrag pm-ssd7vv
- GH-914: macOS extension source identity compares non-canonical /var and /private/var paths Eintrag pm-eu46an
- The coverage gate every contributor is told to run is not a gate: run-tests.mjs coverage prints the shortfall and exits 0, so only CI can fail on coverage Eintrag pm-2qqcgl
- The one projection that promises completeness is the one that loses data: pm contracts --full drops all 76 structured command summaries, returns 160 bare name strings, and reports has_omissions false Eintrag pm-x0iv17
- GH-910: keep extension assets outside item merge-driver patterns Eintrag pm-t9qbmp
- GH-911: preserve runtime dependency resolution in post-install activation probes Eintrag pm-pg9599
- GH-912 regression: restore atomic cross-owner seeded Plan creation Eintrag pm-hxuqsa
Other
- Refresh compatible tooling dependencies: tsx 4.23.8 and pm-changelog 2026.8.6 Eintrag pm-l9fv1e
Fixed
- GH-909: executable extension migration application and remediation contract Eintrag pm-ig5cfe
- GH-908: explicit package-source identity and bare-name ambiguity diagnostics Eintrag pm-495lkc
- GH-907: preflight override ownership and statically disjoint command scopes Eintrag pm-miy5k6
- Release ratchet verdicts are a property of the working copy, not the commit: gitignored installs and clone-local git config decide three populations, so an identical commit passes locally and fails in CI Eintrag pm-fr4dg8
- Exact-tag Release recovery must bootstrap tracker gates and publish an unpublished immutable tag from its tagged source Eintrag pm-lwnifd
Other
- Refresh compatible 2026-08-05 TypeScript-ESLint and Unicorn quality tooling Eintrag pm-7gxbl8
Fixed
- GH-896: heterogeneous atomic specification batches need batch-local references and one discoverable SDK-first CLI path Eintrag pm-o8z748
- Completion is decomposed while creation is composed: create takes nine inline evidence flags, close takes none, so the prescribed finish protocol is seven invocations and seven unrelated history entries Eintrag pm-cyn0y6
- Reindex coverage test leaks semantic refresh HTTP beyond its mock lifetime Eintrag pm-cflhoj
- Sentry PM-CLI-2V: pm init surfaces raw EACCES when the managed workspace .gitignore cannot be written Eintrag pm-3gh457
- Filed defect populations grow after they are measured and nothing turns a tracker measurement into a ceiling: the maintenance passes that record the count are the writer that widens it Eintrag pm-ips23h
- Tracker-only PM governance commits cannot satisfy required CI without changing the generated changelog Eintrag pm-2x5x83
- GH-891: external blockers make graph stale_lifecycle_block impossible to resolve truthfully Eintrag pm-6sc8jq
- GH-889: merge-conflict recovery guidance hides the durable discarded-value report Eintrag pm-fbrz7p
- GH-890: extension collision diagnostics omit the effective winner and cannot distinguish safe scoped overlap Eintrag pm-6mjxgq
- GH-885: create-time close_reason_required recovery recommends an impossible different-command retry Eintrag pm-5uclvd
- GH-887: terminal create contract is non-atomic and inconsistent across importer-facing closure metadata Eintrag pm-ykdt4m
Security
- 2026-08-04 holistic pm CLI, SDK, and ecosystem manual review and optimization plan Eintrag pm-gzyt2j
Other
- Auto Release fresh clones build the CLI and install merge drivers before tracker gates Eintrag pm-xvccnm
- Tracker data-quality ratchet in CI: pm validate and pm health run against this repository's own workspace with a shrinking-only per-warning baseline Eintrag pm-kpftft
- Eliminate July static-analysis nullability, dead-code, and redundant-allocation findings Eintrag pm-cp5pbo
Added
- GH-471: pm context includes an installed package/extension health summary Eintrag pm-h85e
- Static contribution manifest: persist the install-time contribution inventory so the command registry is built from data and extension modules import only when a contribution is actually invoked Eintrag pm-021kdp
Fixed
- Uniform multi-value filter-value grammar: --status accepts CSV but --type/--priority fail fast and --tag silently matches the literal CSV string Eintrag pm-gknu
- list applies an undisclosed default lifecycle scope and reports the scoped count as the corpus total with has_more false, while search applies no such scope, so the two discovery surfaces disagree about what exists Eintrag pm-999jh7
- GH-882: unresolved extension commands must lead with the activation failure and actionable recovery Eintrag pm-4uplae
- Extension-mode is folded into the metadata-cache identity, so alternating --no-extensions with a normal invocation evicts a 4.5 MB cache and every command costs 5 seconds instead of 0.4 Eintrag pm-77okxr
- Declared activation.commands is silently overridden by the renderers/hooks/parser/preflight capability tier, so any extension beyond plain commands is eagerly imported on every invocation Eintrag pm-j0w7j9
- GH-832: package command namespace ownership and collision diagnostics are not discoverable Eintrag pm-6z0wzf
- GH-681: latest calendar ordinal must satisfy stable package peer ranges Eintrag pm-csuce0
- The model provenance resolver derives the harness session-file path with an incomplete slug encoding, so it silently resolves nothing in any workspace whose path contains an underscore - including this repository Eintrag pm-9gvazz
- GH-878: nested workspace snapshot and help paths are enumerated but not resolvable by structured help Eintrag pm-7wx1f9
- Warn when custom schema fields collide with MCP transport or tool-specific inputs Eintrag pm-yfdav2
- GH-844: local npm package archives are rejected as install sources Eintrag pm-lw6acw
- The one-release-per-day guard compares a prefix glob against unpadded date keys, so it is correct only by accident of tag creation order and silently skips a real release for any out-of-order tag Eintrag pm-ki67py
Security
- Refresh transitive brace-expansion and PostCSS patches for 2026-08-03 audit advisories Eintrag pm-2cv2o1
Other
- Scripting contract: documented and test-gated guarantees for exit codes, stdout/stderr stream discipline, and stable machine-readable field names Eintrag pm-psy1
- Published artifact weight: the npm tarball ships 20MB of inline-source sourcemaps plus duplicate tsc and bundle outputs Eintrag pm-998juj
Added
- One declared output-bounding dimension set on every read surface: 25 flag spellings across 19 commands collapse to include / how-much / cost / encoding, with a precedence algebra and permanent aliases Eintrag pm-hb7ug8
- Intent-scoped read projections: a command returns exactly the fields the declared intent consumes, so agents stop paying for fields they discard Eintrag pm-cxr0jb
Fixed
- Auto Release coverage depends on a /proc timing race in the SDK entrypoint sampler Eintrag pm-q2a7hr
- The author field is an ungoverned free-text vocabulary: 477 distinct spellings across 41,021 immutable entries encode harness, model, session role, topic, and date because those dimensions had no fields, and the record cannot be rewritten Eintrag pm-3yxwv5
- Recorded agent provenance is unreadable in practice: the only projection carrying it also carries every JSON Patch operation at 63.5x the compact cost, and no read surface can filter on harness, model, effort, or instance Eintrag pm-v8gfi7
- Harness provenance can only be declared as environment variables, so the model the primary harness publishes in its own session record is inexpressible: 900 of 900 explicit entries still record model null while effort resolves Eintrag pm-ffz0a9
- GH-867: linked files and docs no-op additions report changed and append phantom history Eintrag pm-jb1ron
- GH-868: atomic replacement contract for linked files and docs Eintrag pm-cstuys
- GH-865: classify linked-test lock contention as infrastructure collision Eintrag pm-2irc1p
- GH-779 recurrence: history-redact must refresh item and drift projections atomically Eintrag pm-wnbk2l
- GH-870: make runtime workspace path assertions portable in Windows nightly Eintrag pm-rusbe4
- GH-871: preserve letter-suffixed issue codes in duplicate similarity scoring Eintrag pm-sn3xor
- GH-866: telemetry flush queue-drain contract reports partial progress as fully drained Eintrag pm-u5c27w
Added
- Episode identity: a stable, labelled, nestable episode key that survives process, surface and harness boundaries so trajectory grouping and fleet aggregation have a join key Eintrag pm-oqo9l2
Fixed
- Both published bin names are refused as subcommands, so npx PKG pm init and bunx PKG pm init fail while the version probe that guards them passes Eintrag pm-rnl3sa
- The intent budget binds downward and is inert upward: a sevenfold budget increase buys zero rows and the field that would reveal the clamp is omitted exactly when it applies Eintrag pm-prsvjh
- The MCP action vocabulary is not derived from the CLI contract table: 26 MCP-only spellings, and seven contracted capability families including merge, workspace snapshot and eval have no MCP route at all Eintrag pm-0834kq
- The SDK boundary gate proves the CLI stopped importing private core and never proves the CLI only imports the published SDK, so ten private SDK modules carry our own commands Eintrag pm-xpumg4
- GH-855: core mutation locators must honor extension-registered item types Eintrag pm-scga6k
- GH-853: extension command test harness must inject the real host-bound SDK Eintrag pm-wx2lr5
- Session-topic provenance has no descriptor keys on any harness, and effort/role are wired for only claude-code and codex, so most fleet history records harness and model but nothing about the work's shape Eintrag pm-rbg1qo
- Explicit-unavailable provenance is recorded for the model dimension only, so effort and role absence is permanently indistinguishable from a legacy entry Eintrag pm-9wbiye
- GH-851: compare init discovery roots by filesystem identity Eintrag pm-noq46i
- GH-847: tighten managed built-in static SDK contracts and author guidance Eintrag pm-ka6m65
- The MCP server never receives the harness provenance environment, so one agent session writes permanently divergent identity records depending on which surface it used Eintrag pm-1zhfls
- The bounded read costs 13.8 times the unbounded read to deliver the same set, because eight metadata blocks are re-emitted per page and the page carries two rows Eintrag pm-sf31yl
- Declared intent token budgets are smaller than the smallest projection their own command can emit, so three of five intents return no result at all on this tracker Eintrag pm-yekkvt
- Declared read-intent token budgets are written to a flag three of five intent commands do not accept, so the shipped intent layer overruns its own declaration by up to 43.8x Eintrag pm-7hbfch
- The public SDK's item-lifecycle surface re-exports CLI command modules, so lifecycle policy cannot be expressed, inspected, or overridden through the SDK Eintrag pm-z5pmf8
Security
- GH-854: transactional extension mutation guards for enforceable domain invariants Eintrag pm-hx23u5
- CodeQL alert 33: eliminate polynomial trailing-whitespace matching in SDK append Eintrag pm-8wskoj
Other
- As a coding agent, every pm command I run costs the fewest tokens that still fully answer my question, and I can see what I spent Eintrag pm-g3n00m
- Self-reported token accounting: any command can report the token cost of its own output so budget spend is attributable at runtime and in CI Eintrag pm-t5dt4z
Fixed
- Mutation echo parity reversed after pm-nilh closed: the MCP surface now returns 5.2x the CLI default for an identical create Eintrag pm-awe3t6
- The bunx release gate passes with an arbitrary token in the executable position, so the only Bun coverage in the pipeline cannot fail for the reason it exists Eintrag pm-lpqln4
- The published-artifact gate never executes pm-mcp: two of three declared bins resolve to the same file and the third — which already shipped dead once — has zero release coverage Eintrag pm-u0oz2k
- One governance rule, two terminal-transition paths, opposite answers: pm close refuses a reasonless close while pm update --status closed invents a reason and writes it into the immutable record unmarked Eintrag pm-2ew0w3
- Closing an item deletes its ordering edges, so the historical ordering graph is structurally unable to exist Eintrag pm-xm0id4
- GH-831: actionable unknown-author health evidence is truncated without a complete disposition selector Eintrag pm-1bmeta
- GH-841: init ancestor discovery obscures the selected workspace and safe current-directory target Eintrag pm-ipbwcq
- GH-840: annotation primitives lack a merge-safe structured event append and query contract Eintrag pm-09rdni
- GH-839: extension field declarations accept types the persisted schema cannot validate Eintrag pm-tom5xp
- Harness-detection specs inherit the ambient harness, so four tests fail under Claude Code and pass in CI on the same commit: the local verdict depends on which agent ran it Eintrag pm-631t9p
- Extension-registered item types are created, stored and versioned like any other item but are invisible to the merge fence and its drift detector, which reports the fence clean Eintrag pm-5rexki
- Four edge-counting conventions publish under one edge_count field: graph analyze reports 10046 and graph centrality 7351 for the same graph at the same cache fingerprint Eintrag pm-jiusod
- Four read surfaces publish a jq_selector that is guaranteed to return nothing: the self-describing row contract is present, vacuous, and indistinguishable from an empty result Eintrag pm-x710qm
Security
- GH-827: local package install must prevent recursive self-copy and disk exhaustion Eintrag pm-0682l4