Fixed
- Allow canonical JSON/TOON encoding on mutations elemento pm-1rta7z
- Omit redundant read receipts when canonical output flags do not compact results elemento pm-g8oh0f
- Keep the largest list prefix that fits the output budget elemento pm-15yuly
- Reject ambiguous event durations with explicit minute and month units elemento pm-jkjt
- Packed telemetry acceptance must await completion across delivery batches elemento pm-07m41m
- GH-1264: enforce next ready-queue token budgets and disclose omitted recommendations elemento pm-v53h9j
- Reject malformed linked-test JSON paths instead of silently normalizing assertions elemento pm-czr31p
Security
- Reject inherited array elements in linked-test assertions elemento pm-1skc
- Read linked-test JSON assertions without invoking accessors elemento pm-xxrq
- Prevent prototype traversal in nested settings reads and writes elemento pm-3kk6
- Share secret and private-context detection between mutation preflight and repository scanning elemento pm-wwooxx
Other
- Serialize the complete build pipeline so overlapping validation cannot consume partially rewritten dist artifacts elemento pm-cxc4jc
- Released-artifact acceptance: the exact published tarball is installed clean and driven through a scripted agent session before the release is advertised elemento pm-ygli86
- Verify explicit calendar duration in package-first dogfood elemento pm-d9bg0i
- ADR: Require explicit minute and month units for event durations elemento pm-j1vw3a
- Context judgment corpus: small, real-shaped, scale, and returning-agent continuity scenarios for pm context/next elemento pm-lixy
- Refresh Sentry 10.75 and CLI 3.8 with Unicorn 75 compatibility proof elemento pm-1wypwu
Fixed
- Preserve oversized standard item reads with a brief projection and explicit omission receipts elemento pm-8eclqf
Other
- As an agent on a minutes-old scratch project, pm init, quick-capture create, and next are near-zero ceremony and token-cheap at three-item scale elemento pm-z436
Fixed
- Preserve telemetry identity and runtime acceptance across Node and npm versions elemento pm-7msh7k
- Automatically bound high-frequency read-only telemetry volume elemento pm-um3teu
- Prevent stale cleanup from reclaiming a lock during owner metadata initialization elemento pm-v2pg4f
Fixed
- Preserve telemetry events across concurrent queue rewrites elemento pm-utxk3h
- Honor revoked telemetry consent across capture and identity initialization elemento pm-yjq2x0
- Explain rejected telemetry source-context overrides without leaking raw values elemento pm-bw8lsb
- Destination census rows cite terminal consolidation owners for five live commands, so the grammar gate certifies consolidations no open item will deliver elemento pm-3ig9b6
- Package-declared internal commands leak into default runtime contracts elemento pm-34xisz
- Allow non-colliding extension leaves beneath core command groups elemento pm-bwkmp4
- Compact default list receipts and avoid repeated recovery argument echoes elemento pm-4f86c4
- Canonicalize unknown-command recovery with replacement flags elemento pm-zsic8h
Other
- Give assurance a declared noun placement and history-author-acknowledge a history leaf: the two live commands whose consolidation owners closed without moving them elemento pm-djyvbk
Fixed
- Suppress inferred test telemetry before identity creation and export elemento pm-745epp
- Honor DO_NOT_TRACK across telemetry capture flush and diagnostics elemento pm-ikgitf
- Expose privacy-bounded agent harness and CI telemetry dimensions elemento pm-nnn9nf
- Published-package verification gives up before npm metadata propagates: two consecutive scheduled cuts were recorded as failed and re-run by hand while the artifact was already live elemento pm-wzmbvn
Deprecated
- Permanent hot-path aliases print the migration hint reserved for deprecated spellings on every human-readable call, so the project's own skills cost an extra stderr line per invocation elemento pm-crd6bf
Other
- Expose explicit paired sampling for core-only telemetry reads elemento pm-wrdctq
- Consolidate item annotation facets: comments/notes/learnings/files/docs/deps/append/test become one facet grammar (old spellings aliased) elemento pm-yql1
- Hide runtime completion helper entrypoints from the default agent-facing command surface elemento pm-szdc
- Hide internal test-runs-worker from default help/contracts and route it under the test execution plumbing elemento pm-lp4j
Changed
- Verify complete merge documents across branch permutations and merge directions elemento pm-1tns7o
Fixed
- Two items created independently on two branches with the same id merge into one document carrying two create entries, and storage integrity only notices when the types differ elemento pm-qx95lz
- Isolate merge reconciliation receipt discovery from unrelated invocation workspaces elemento pm-q5grv5
- The immutable history op vocabulary is ungoverned: 71 op literals across five naming conventions, with the same operation spelled two ways in one file, are written permanently with no enum, no contract, and no gate elemento pm-0elqjj
- Read surfaces give no tombstone signal for a deleted id: pm get returns a bare not-found, so an agent cannot tell never-existed from deleted-and-recoverable elemento pm-nb4zwz
- CI assurance receipts must explicitly request complete evidence beyond interactive output ceilings elemento pm-yrio0m
- GH-1231: Expose non-vacuous lifecycle completeness evidence elemento pm-khd2fd
- GH-1232: Normalize policy authoring ids with actionable mismatch recovery elemento pm-ycv2cz
- GH-1233: Make strict ownership recovery executable for annotation writes elemento pm-nrkjik
Added
- Portable integrity attestation: compare recorded history with independently retained proof bundles elemento pm-3z0k
Fixed
- The history integrity chain hard-codes SHA-256 with no algorithm identifier, so the proof it produces has no migration path across the decades it claims to cover elemento pm-bbk8we
- Optional undefined result fields silently drop telemetry completion events elemento pm-rqaqfp
- GH-1229: preserve bounded HTTP process-tree cleanup when POSIX liveness returns EPERM elemento pm-qn9zxu
Changed
- Fold bulk and destructive lifecycle variants into their base nouns: update-many into update, close-many into close, delete/restore placement per ADR elemento pm-ik19
Fixed
- Isolate CodSpeed dependency setup from unrelated Chrome APT index failures elemento pm-zvy31w
Other
- Fold lifecycle sugar start-task/pause-task/close-task into claim/release/close flags (hidden aliases) elemento pm-eq4x
- Native pm ops stats, health, validate, gc, telemetry, eval and test-all with compatible root commands elemento pm-6apl
- Native pm context next and pm context focus with permanent navigation aliases elemento pm-kcs4
- Native pm ops normalize, pm ops reindex and pm history events with compatibility aliases elemento pm-3i9q8g
Added
- Lifecycle field-completeness contract: each item type declares the fields required at each status transition, machine-checked by pm validate elemento pm-htbetn
- Declarative policy engine: item-level transition, approval, and authorship rules declared as data and enforced consistently at the SDK layer elemento pm-mj42og
Fixed
- Explain binding token budgets beside read-output alias migration hints elemento pm-8kzfc4
- Preserve dependency kind constraints in rendered enum errors elemento pm-lk0qhn
- pm search defaults to keyword on a workspace whose vector index is complete, so the shipped Ollama semantic default never reaches the default query path elemento pm-n8a6e7
Security
- GHSA-crvj-82cr-hjcx: Hono: Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentials elemento pm-vnv467
- GHSA-g6gw-c38x-mqfc: Hono: Unbounded dot-notation nesting in
parseBody() can cause memory exhaustion elemento pm-gxt0mx - GHSA-gqvv-2mrq-wpjv: Hono: Incomplete fix for CVE-2026-39408:
toSSG() still writes files outside the output directory elemento pm-rc8708