2026.8.30

Other

  • Adopt eslint-plugin-unicorn 74 with strict lint and packed-consumer proof elemento pm-6f66vu

2026.8.29

Fixed

  • GH-1144: hash-only merge receipts contradict report output and cannot reconcile truthfully elemento pm-z1z96w
  • GH-1146/1147: external blockers remain stale and validation recommends deleting them elemento pm-yhle2e
  • GH-1140: reject ambiguous bare comma tuples for linked file and test mutations elemento pm-nc94mk
  • GH-1148: cached drift mismatch can falsely report tracker corruption elemento pm-sxg7wl
  • GH-1138: linked test name filters can pass after executing zero tests elemento pm-ntnv4k
  • GH-1136: npm 12 object-form npm pack receipts break registry package installs elemento pm-xrjy8o
  • The annotation key=value grammar has three divergent comma behaviours, two of which silently corrupt the evidence text before it is made immutable elemento pm-hu92i3
  • GH-1150: health remediation for pending merge receipts must perform the repair elemento pm-r0p3at
  • GH-1134: required collection recovery omits truthful --clear-\* intent elemento pm-t7wl00
  • GH-1143: Claude session-file provenance resolver ignores real nested stream fields elemento pm-f60039
  • GH-1137: linked docs writes silently persist nonexistent workspace paths elemento pm-hiqlkh
  • Sentry release gate aborts valid API queries at a fixed 15-second deadline elemento pm-b9g2cs

Other

  • Close the jscpd/CodeFactor sensitivity gap: minTokens 115 misses low-token table clones the CodeFactor bot still files elemento pm-xspd
  • Refresh @sentry/node 10.72 with packed SDK and release proof elemento pm-mwhv33
  • Refresh compatible 2026-08-29 dependency releases elemento pm-vwuidf

2026.8.28

Fixed

  • Repository test runner inherits production Sentry and turns negative CLI fixtures into release-blocking incidents elemento pm-5ug5xq
  • Broad squash commits overflow hosted-analysis tree lookup and falsely lose reviewed PR provenance elemento pm-gactwj
  • Golden agent-transcript replay: measure tokens-per-completed-task as a CI-visible DX regression gate elemento pm-8pnj
  • Unknown-option refusal textual flags bypass structured global-option filtering elemento pm-x4wbui
  • Agent-task transcript recovery accepts a refusal as a successful retry elemento pm-o360q6
  • Close lifecycle bypasses reproducible process clock elemento pm-hmpu4p
  • GH-1132: opt-in idempotent annotation append (ifAbsent/--if-absent) prevents retry-driven context duplication; duplicate appends remain available by default elemento pm-ea1yh2
  • Agent-task transcripts accept declared no-effect and partial-effect successful exits elemento pm-wanwyc
  • Agent-task baselines accept missing task and composite token ceilings elemento pm-aksavu
  • Agent-task closeout claims lack linked full-verification commands elemento pm-ervmsc
  • CLI transport-floor RSS admission false-fails on single-sample page noise elemento pm-pz49xc
  • Unknown-option refusals identify the actual rejected flag and fail closed at delimiters elemento pm-fo8g7j
  • Agent-task gate accepts incidental substrings as required-field completeness elemento pm-o7u08u
  • Completed-task transcripts require terminal success, exclusive refusal metadata, and complete recovery elemento pm-wa39rl
  • Agent-task token replay trusts missing or incorrect accounting estimates elemento pm-ok2kdn

Security

  • GH-1131: macOS Node 24 nightly cannot create the Skills-over-MCP special-file socket fixture elemento pm-k23c4c

2026.8.27

Added

  • Tiered contract-driven help: one-screen core help, full surface via pm help --all, generated from the contract table elemento pm-e2bq
  • Skills over MCP: discoverable version-coherent pm workflows with progressive disclosure, capability requirements, and token budgets elemento pm-8nzivt
  • MCP Apps for pm: interactive graph, context, plan, assurance, and long-operation views with consent-safe action boundaries elemento pm-pznhee

Fixed

  • GH-859: pm-beads source export can omit Beads comment bodies and events elemento pm-tpwde6
  • pm get silently discards --output-include field names because entity reads bind the flag to sections while collection reads bind it to fields, and the omission receipt reports no omissions either way elemento pm-0k19l7
  • GH-860: pm-beads --preserve-source-ids changes source ID casing elemento pm-f7jj9b
  • GH-862: pm-beads must map Beads close reasons into native resolution metadata elemento pm-gus5ft
  • GH-1118: natural-language word-number titles trigger duplicate issue-code false positives elemento pm-blvfye
  • Published-artifact verification rejects the new pm-mcp-http bin before executing its healthy published entrypoint elemento pm-fpdne3

Other

  • Consolidate package lifecycle: extension/package/install/upgrade under a single pm package namespace elemento pm-tnud
  • Refresh compatible ESLint 10.9.1 and Node type 26.3 patches elemento pm-crkmmr
  • MCP 2026-07-28 conformance and release gate: official schema matrix, protocol-era adapters, real transports, adversarial cases, and published consumers elemento pm-55yf1t

2026.8.26

Added

  • MCP subscriptions and transports: subscriptions/listen, request-scoped streams, Streamable HTTP headers, retry semantics, and stdio parity elemento pm-v7e337
  • MCP server surface and cache contracts: deterministic tools, prompts, resources, JSON Schema 2020-12, ttlMs, cacheScope, and change coherence elemento pm-hv1x1x
  • Official MCP tasks extension for pm: asynchronous long operations, tasks/get polling, tasks/update input, durable handles, and lifecycle convergence elemento pm-rzs24j
  • MCP multi round-trip requests: input_required results, elicitation, retry state, and removal of server-initiated request assumptions elemento pm-rz9gep
  • Stateless MCP core: request-local version and capabilities, mandatory server/discover, typed result envelopes, and deterministic identity elemento pm-vae5ec

Changed

  • SDK-first architecture: pm CLI (and MCP) become thin layers over a complete public pm SDK elemento pm-usfg

Fixed

  • GH-1091: surface extension manifest schema lint separately from version compatibility elemento pm-gh1091
  • GH-1109: tracker-context seeding writes an empty settings history document elemento pm-2ga1g7
  • GH-1112: Windows Node 24 merge-receipt boundary test relies on POSIX name-length failure elemento pm-v3umtp

Security

  • MCP remote authorization and observability: issuer-bound credentials, client metadata documents, consent, header security, and OpenTelemetry propagation elemento pm-3zh9s4

Deprecated

  • MCP 2026-07-28 deprecation and removal migration: roots, sampling, logging, dynamic registration, HTTP+SSE, includeContext, ping, and legacy sessions elemento pm-vzcisw
  • ADR: MCP 2026-07-28 is canonical and legacy interoperability is a bounded stateless adapter, not connection-local session state elemento pm-sqvshj

Other

  • Refresh Sentry 10.71 and TypeScript-ESLint 8.68 with packed-consumer proof elemento pm-7xfndr

2026.8.25

Fixed

  • Dynamic-read continuation cursors are born stale: pm health emits a cursor that its next invocation rejects elemento pm-oahhyc
  • GH-1105: contracts must declare each command projection vocabulary before invocation elemento pm-q4isdq
  • The outcome-milestone ladder is a sibling set rather than a layer: 1,024 terminal items reach the roadmap apex through 154 typed roots without traversing any outcome milestone elemento pm-h6b73t

Security

2026.8.24

Fixed

  • Structured release-failure causes are preserved in blocked-release alerts elemento pm-x63izf
  • Bulk writes accept newline/comma IDs from argv, stdin, and @path with effect-aware exits elemento pm-3oq022
  • update-many --dry-run allows filter-only preview for review and bulk-selection workflows elemento pm-kexu

Other

  • Uniform stdin convention: body-file and annotation --file flags accept '-' for stdin elemento pm-iktj
  • Single source of surface tiering: one contract-declared tier per command drives CLI help, MCP tool profiles, completions, and docs together elemento pm-kxci8x

2026.8.23

Added

  • Every instruction the product emits about its own next command is an unexecuted claim: the recovery vocabulary is generated, asserted as text, and run by nothing elemento pm-h8tpeh

Changed

Fixed

  • Allow linked tests to opt out of source-workspace injection for self-sandboxing repo-wide gates elemento pm-efkvdy
  • Linked-test schema context changes non-PM repository checks, so commands that pass directly fail when recorded and run through pm test elemento pm-e97jyf
  • GH-1089: expose reproducible execution through supported CLI and MCP process configuration elemento pm-gh1089
  • Budget recovery can recommend a smaller ceiling than the request that already truncated elemento pm-xam9bt

Security

  • Linked-test commands are merge-unioned workspace data executed with shell:true — no provenance, allowlist, or confirmation boundary elemento pm-ed28wi
  • Cross-harness provenance adapters: automatically resolve native model, version, and effort signals beyond Claude without identity flags elemento pm-c0lrdm

Other

  • Expose agent probe controls and versioned legacy-author vocabulary through pm config and SDK mutation APIs elemento pm-yds9dt
  • Diagnostic output budget: errors, warnings, and recovery bundles are the output an agent reads most and the only output with no declared ceiling elemento pm-cha95z

2026.8.22

Fixed

  • GH-1078: Complete-list certification accepts absent or contradictory truth receipts and emits stale recovery elemento pm-gh1078
  • GH-1076: read-only duplicates rejects universal JSON output controls elemento pm-gh1076
  • GH-1074: package doctor cannot distinguish a safe declining service override from a global interceptor elemento pm-gh1074
  • GH-1073: pm init accepts a whitespace id prefix that makes later creates fail elemento pm-gh1073
  • GH-1075: Windows Node 24 nightly validation failed at main 3e7ac007 elemento pm-gh1075
  • The child hierarchy kind has an unenforced direction and cardinality: 7 of 15 rows are inverted against the registry's own declaration and no channel, validator, or audit finding notices elemento pm-vk7zek
  • Hierarchy-canonicalizing dependency kinds bypass every cycle detector: mutual child_of edges leave the graph provably inconsistent while validate, health, and graph analyze all report acyclic elemento pm-rggtvd

Security

  • GH-1072: pm install leaks user allow-scripts config into isolated package installs elemento pm-gh1072

2026.8.21

Added

  • Prose-asserted relationships are unmeasured: 1,750 identifier pairs named in item text carry no edge in any direction, and nothing counts the gap elemento pm-ob9z4y

Changed

  • Provide consistent tracker preflight and executable recovery across SDK, CLI, and MCP elemento pm-6qiwan

Fixed

  • The blocks ceiling counts fabricated and evidence-cited ordering edges identically, so the historical ordering reconstruction another item mandates cannot land elemento pm-c90tfh
  • The dependency remove flag accepts a value its own add flag refuses and reports success on a zero-match, so a mistyped graph repair exits 0 having changed nothing elemento pm-gos426
  • All four graph traversal verbs reject the semantic edge kinds the ontology exists to express, so 'what implements this milestone' returns the ordering-kind answer with no sign a semantic one exists elemento pm-3dyec2
  • Typed-outcome reachability admits three of ten edge kinds, so the four semantic kinds the ontology exists to express contribute nothing to the invariant they were minted to satisfy elemento pm-ayg31c
  • The graph audit raises duplicate dependency rows at warning severity and the only remediation available deletes every copy, so collapsing a duplicate means briefly destroying a real edge elemento pm-flnefm

Other

  • ADR: Ordering assurance partitions evidence-cited blocks from uncited blocks elemento pm-jhpby4