Added
- One declared output-bounding dimension set on every read surface: 25 flag spellings across 19 commands collapse to include / how-much / cost / encoding, with a precedence algebra and permanent aliases 条目 pm-hb7ug8
- Intent-scoped read projections: a command returns exactly the fields the declared intent consumes, so agents stop paying for fields they discard 条目 pm-cxr0jb
Fixed
- Auto Release coverage depends on a /proc timing race in the SDK entrypoint sampler 条目 pm-q2a7hr
- The author field is an ungoverned free-text vocabulary: 477 distinct spellings across 41,021 immutable entries encode harness, model, session role, topic, and date because those dimensions had no fields, and the record cannot be rewritten 条目 pm-3yxwv5
- Recorded agent provenance is unreadable in practice: the only projection carrying it also carries every JSON Patch operation at 63.5x the compact cost, and no read surface can filter on harness, model, effort, or instance 条目 pm-v8gfi7
- Harness provenance can only be declared as environment variables, so the model the primary harness publishes in its own session record is inexpressible: 900 of 900 explicit entries still record model null while effort resolves 条目 pm-ffz0a9
- GH-867: linked files and docs no-op additions report changed and append phantom history 条目 pm-jb1ron
- GH-868: atomic replacement contract for linked files and docs 条目 pm-cstuys
- GH-865: classify linked-test lock contention as infrastructure collision 条目 pm-2irc1p
- GH-779 recurrence: history-redact must refresh item and drift projections atomically 条目 pm-wnbk2l
- GH-870: make runtime workspace path assertions portable in Windows nightly 条目 pm-rusbe4
- GH-871: preserve letter-suffixed issue codes in duplicate similarity scoring 条目 pm-sn3xor
- GH-866: telemetry flush queue-drain contract reports partial progress as fully drained 条目 pm-u5c27w
Security
- GH-864: history-redact output must never echo literal secrets 条目 pm-y3w0ld
Added
- Episode identity: a stable, labelled, nestable episode key that survives process, surface and harness boundaries so trajectory grouping and fleet aggregation have a join key 条目 pm-oqo9l2
Fixed
- Both published bin names are refused as subcommands, so npx PKG pm init and bunx PKG pm init fail while the version probe that guards them passes 条目 pm-rnl3sa
- The intent budget binds downward and is inert upward: a sevenfold budget increase buys zero rows and the field that would reveal the clamp is omitted exactly when it applies 条目 pm-prsvjh
- The MCP action vocabulary is not derived from the CLI contract table: 26 MCP-only spellings, and seven contracted capability families including merge, workspace snapshot and eval have no MCP route at all 条目 pm-0834kq
- The SDK boundary gate proves the CLI stopped importing private core and never proves the CLI only imports the published SDK, so ten private SDK modules carry our own commands 条目 pm-xpumg4
- GH-855: core mutation locators must honor extension-registered item types 条目 pm-scga6k
- GH-853: extension command test harness must inject the real host-bound SDK 条目 pm-wx2lr5
- Session-topic provenance has no descriptor keys on any harness, and effort/role are wired for only claude-code and codex, so most fleet history records harness and model but nothing about the work's shape 条目 pm-rbg1qo
- Explicit-unavailable provenance is recorded for the model dimension only, so effort and role absence is permanently indistinguishable from a legacy entry 条目 pm-9wbiye
- GH-851: compare init discovery roots by filesystem identity 条目 pm-noq46i
- GH-847: tighten managed built-in static SDK contracts and author guidance 条目 pm-ka6m65
- The MCP server never receives the harness provenance environment, so one agent session writes permanently divergent identity records depending on which surface it used 条目 pm-1zhfls
- The bounded read costs 13.8 times the unbounded read to deliver the same set, because eight metadata blocks are re-emitted per page and the page carries two rows 条目 pm-sf31yl
- Declared intent token budgets are smaller than the smallest projection their own command can emit, so three of five intents return no result at all on this tracker 条目 pm-yekkvt
- Declared read-intent token budgets are written to a flag three of five intent commands do not accept, so the shipped intent layer overruns its own declaration by up to 43.8x 条目 pm-7hbfch
- The public SDK's item-lifecycle surface re-exports CLI command modules, so lifecycle policy cannot be expressed, inspected, or overridden through the SDK 条目 pm-z5pmf8
Security
- GH-854: transactional extension mutation guards for enforceable domain invariants 条目 pm-hx23u5
- CodeQL alert 33: eliminate polynomial trailing-whitespace matching in SDK append 条目 pm-8wskoj
Other
- As a coding agent, every pm command I run costs the fewest tokens that still fully answer my question, and I can see what I spent 条目 pm-g3n00m
- Self-reported token accounting: any command can report the token cost of its own output so budget spend is attributable at runtime and in CI 条目 pm-t5dt4z
Fixed
- Mutation echo parity reversed after pm-nilh closed: the MCP surface now returns 5.2x the CLI default for an identical create 条目 pm-awe3t6
- The bunx release gate passes with an arbitrary token in the executable position, so the only Bun coverage in the pipeline cannot fail for the reason it exists 条目 pm-lpqln4
- The published-artifact gate never executes pm-mcp: two of three declared bins resolve to the same file and the third — which already shipped dead once — has zero release coverage 条目 pm-u0oz2k
- One governance rule, two terminal-transition paths, opposite answers: pm close refuses a reasonless close while pm update --status closed invents a reason and writes it into the immutable record unmarked 条目 pm-2ew0w3
- Closing an item deletes its ordering edges, so the historical ordering graph is structurally unable to exist 条目 pm-xm0id4
- GH-831: actionable unknown-author health evidence is truncated without a complete disposition selector 条目 pm-1bmeta
- GH-841: init ancestor discovery obscures the selected workspace and safe current-directory target 条目 pm-ipbwcq
- GH-840: annotation primitives lack a merge-safe structured event append and query contract 条目 pm-09rdni
- GH-839: extension field declarations accept types the persisted schema cannot validate 条目 pm-tom5xp
- Harness-detection specs inherit the ambient harness, so four tests fail under Claude Code and pass in CI on the same commit: the local verdict depends on which agent ran it 条目 pm-631t9p
- Extension-registered item types are created, stored and versioned like any other item but are invisible to the merge fence and its drift detector, which reports the fence clean 条目 pm-5rexki
- Four edge-counting conventions publish under one edge_count field: graph analyze reports 10046 and graph centrality 7351 for the same graph at the same cache fingerprint 条目 pm-jiusod
- Four read surfaces publish a jq_selector that is guaranteed to return nothing: the self-describing row contract is present, vacuous, and indistinguishable from an empty result 条目 pm-x710qm
Security
- GH-827: local package install must prevent recursive self-copy and disk exhaustion 条目 pm-0682l4
Other
- Refresh compatible Sentry 10.69 and Greptile 3.3 dependencies 条目 pm-7564ov
Fixed
- Exact-tag npm recovery must stabilize public package access before verification 条目 pm-t310hx
- GH-830: duplicate-safe creation must require explicit bypass before persistence 条目 pm-35w9l2
- GH-828: init status registries must expose one coherent alias contract 条目 pm-62n4kk
- GH-826: extension commands need structured failure results and preserved remediation 条目 pm-ye9v2t
- GH-825: restore SDK excess-property safety for extension definition metadata 条目 pm-unwsns
- GH-824: core-field recovery must name dedicated flags instead of extension activation 条目 pm-2jtbl8
- CodeFactor fixed-only success payload blocks exact-head release gate 条目 pm-xcrlkl
- Both declared context intents are unreachable because the intent applier assigns field-group names into the section value domain, and the two validators give contradictory advice 条目 pm-ai45y9
- GH-814: SDK metadata reads must distinguish missing and invalid tracker roots from an empty tracker 条目 pm-23xkss
- The runtime contract enumeration is not closed over the surface it can resolve: 14 rendered commands, including the list-open that AGENTS.md mandates, are contract-backed by name yet absent from every enumeration 条目 pm-6j7r1a
- GH-817: machine-readable flag contracts need semantic invocation metadata and stdin capability 条目 pm-11phn1
Security
- GH-827: local package install must prevent recursive self-copy and disk exhaustion 条目 pm-0682l4
Added
- Omission receipts: every bounded read shape names the field groups it withheld and the flag that restores each, with the same rigor row truncation already has 条目 pm-p258tx
Fixed
- Workspace snapshot heartbeat races atomic root activation and loses its writer lock 条目 pm-ifuysd
- GH-815: optional missing merge drivers must be advisory in default health verdicts 条目 pm-r8u2g6
- GH-814: SDK metadata reads must distinguish missing and invalid tracker roots from an empty tracker 条目 pm-23xkss
- Sentry gate misclassifies handled snapshot identifier validation as a blocking runtime error 条目 pm-k785lu
- Scale fixtures vary only in size: the sole synthetic workspace generator hardcodes population shape, so the million-item tier is eleven simulated days deep with one history entry per item 条目 pm-vv2lti
- Whole-workspace snapshot restore silently rewinds the immutable record: history streams are deleted and nothing records that a rewind happened 条目 pm-6l2mza
- GH-808: lifecycle completion resolver types and provenance lie when no timestamp exists 条目 pm-qhnq6t
- pm activity --compact --json emits an empty activity:\[\] decoy key alongside compact_activity 条目 pm-p3x4
- Mode-paired envelopes zero-fill the inactive collection instead of omitting it, so parsing the obvious key returns an empty array that is indistinguishable from a real empty result 条目 pm-cyrfjq
- GH-802: persist structured numeric measurements with test runs 条目 pm-ygerpy
- GH-806: publish and reuse the eval query-set contract across help, errors, SDK, and machine discovery 条目 pm-wd61s2
- The rendered command surface is not a subset of the contracted surface: pm workspace ships in help, runs, and exits 2 on its own contract lookup, and no gate compares the two sets 条目 pm-1jrdri
- GH-797: rank read/show/view recovery by executable intent and bounded contracts guidance 条目 pm-bex0ui
- GH-803: hoist repeated linked-test execution context and honor lean output 条目 pm-fqdmbf
- GH-807: make the default eval query set version-controllable in every initialized workspace 条目 pm-jdh1jg
Other
- The product advertises CI gates in its own help that no pipeline runs: pm eval names --fail-under a CI gate and nothing consumes it 条目 pm-b2hc4x
- Gate registry: every enforced CI and release gate has an owner item, a declared failure taxonomy, a bypass policy, and a negative-control fixture proving it fails on known-bad input 条目 pm-k6t4yb
Added
- GH-787: workspace snapshot and restore primitives for cheap reproducible evaluation episodes 条目 pm-dkrmzv
- Reproducible workspace instances: seeded identifiers, injectable clock, and byte-identical construction from a declared recipe 条目 pm-rbcvt2
Fixed
- GH-676: list tag filter must accept the CSV shape used by tag mutations 条目 pm-b1zsk9
- GH-675: lifecycle must record actual completion time separately from tracker close time 条目 pm-bwnclq
- GH-711: update must support intentional unresolved parent references under strict governance 条目 pm-cragzs
- GH-715: expose mutation-guard policies through canonical config help and output 条目 pm-5ecnar
- GH-672: pm context low_level rows omit blocked state and blocker IDs 条目 pm-r2suqb
- GH-651: pm activity bare relative windows silently return empty results 条目 pm-b0twiy
- GH-784: SDK blueprint preflight misses host-owned flag collisions and malformed long-flag tokens 条目 pm-huolbk
- GH-785: align pm health ok with warn-only exit semantics on fresh clones 条目 pm-83ov2i
- GH-792: fresh-clone health must not require ignored runtime and empty extension directories 条目 pm-0k4o8t
- GH-793: remove or disambiguate list --all so filtered output cannot claim workspace completeness 条目 pm-q7qojt
- GH-794: make copied identity output_format overrides decline instead of exposing the host envelope 条目 pm-wi301j
- Nightly static quality fails closed in shallow workflow checkouts because CodeFactor parity cannot resolve a committed base 条目 pm-1hbw4y
- GH-790/GH-791: pm merge install reports workspace_root in a different canonical form depending on which channel resolved it, so the same repository has two non-equal spellings on macOS and Windows 条目 pm-ihmfs6
- The dependency token budget is enforced against a different representation than the one emitted, so a command that reports staying inside 16k tokens delivers about 45k 条目 pm-t2t709
- pm activity has no default bound: a bare invocation returns all 40,446 history entries at 1.59M tokens, 397x the ceiling its own contract declares 条目 pm-z2j1qt
- Both token gates are structurally unable to fail: one measures only help payloads, the other measures command output against a three-item fixture, so no check anywhere compares real output to the ceiling the contract declares 条目 pm-9sui7t
- Sentry PM-CLI-2N: malformed missing tags crash normalizeItemMetadata before search can report the item 条目 pm-89neyq
- pm-governance-audit comments-audit limit contract contradicts runtime alias semantics 条目 pm-v657
- pm-governance-audit dedupe-audit rejects --status all, breaking explicit all-lifecycle duplicate sweeps 条目 pm-mp49
- GH-781: managed built-in extensions redeclare public SDK contracts locally, and the mirrors already disagree with the authoritative declarations in shipped packages 条目 pm-vnk7ob
Security
- GH-799: confine custom item-type storage folders to the tracker root 条目 pm-d30cmk
- PR \#795 exact-head review hardening: dependency budget progress, rendered fixed points, nightly credential isolation, and drift-cache diagnostics 条目 pm-jd3m6p
Other
- Refresh compatible 2026-07-29 development dependencies 条目 pm-77bmeu
- Token-budget gate corpus is unrepresentative in both scale and coverage: budgets are set on a seeded micro-workspace and the largest agent-facing payloads are not measured at all 条目 pm-z71aoy
- GH-782: guide-shell special-cases one multi-word command name and duplicates its status derivation, and calendar's throw-only validation call is unexplained, inside package-managed built-ins consumers cannot patch 条目 pm-cb8qq2
Added
- MCP tool profiles: core/standard/full/custom tiers with an allowlist override, so 31 tools are the maximum surface, not the default 条目 pm-9k90
- MCP resources and prompts surface: expose workspace context as addressable resources and canonical workflows as prompts, not only as tools 条目 pm-yf07b7
- Project live workspace schema and extension commands into MCP discovery and mutations 条目 pm-m4ikkz
- Public SDK contracts and static runtimes let extension authors reuse the CLI baseline 条目 pm-w7mqzt
Changed
- Dedupe flag-contracts.ts repetitive per-command blocks (9 internal clones, ~150 lines) 条目 pm-ueuq
Fixed
- GH-770: pending merge receipts remain invisible to validation and CI before reconciliation 条目 pm-ysqb6n
- GH-775: make fresh-clone health distinguish material tracker loss from absent empty type folders 条目 pm-xyuhh7
- GH-779: invalidate history drift cache after item and repair mutations 条目 pm-ajaskl
- The merge fence covers item documents but not tracked non-item JSON, so .managed-extensions.json line-conflicts between agents on different branches 条目 pm-gjicmx
- GH-773: install portable merge drivers without permanent checkout-path drift 条目 pm-w91mvg
- GH-776: preserve output override compatibility and export the public decision contract 条目 pm-u2tqn6
- GH-778: make lean structured reads omit caller echoes and inactive pagination metadata 条目 pm-oi4zs3
- GH-772: rejected extension command registration leaves silent partial activation and zero-exit command gaps 条目 pm-4vwcvq
- The surface-discovery contract costs 31k tokens in its brief form and still omits every flag, so the cheapest way to learn pm is the most expensive call it offers 条目 pm-gmdzaa
- Linked-test schema sandbox breaks package prepare hooks that install the PM merge driver 条目 pm-uawujr
- The list family exposes three incompatible --json projections under one flag, so an agent filtering on an unprojected field silently reads absent instead of unset 条目 pm-pjnu91
- GH-768: deduplicate public SDK provenance exports across core and root entrypoints 条目 pm-44aa4x
- GH-766: Windows nightly extension timeout and merge-safety cleanup EBUSY 条目 pm-25b7tg
- Merge-fence scope ambiguity: extension-contributed item folders make default validation disagree with the no-extensions CI baseline 条目 pm-mkzw1x
- GH-764: one host-global flag collision quarantines an entire extension and suggests reinstalling the installed package 条目 pm-gnowgi
- Recovery bundle mines flag names from usage-error prose: scope errors like '--rebuild and --clear apply only to graph index' yield missing:--clear + suggested_retry appending the other invalid flag 条目 pm-ikv6m0
- GH-755: dependency edges are written with a null author, so the relationship graph is the only recorded collection with no provenance 条目 pm-0a24f5
- GH-752: list results claim completeness while unreadable items are omitted 条目 pm-57ir3b
- GH-763: merge-decision receipt persists shell-quoted item_path that cannot resolve 条目 pm-9nfpwd
- GH-747: the bundled TOON encoder emits documents its own decoder rejects, so a valid item becomes permanently unreadable 条目 pm-avv3wx
- Identity provenance is a fixed three-dimension schema, so the reasoning level sitting in the environment right now and any session role are structurally unrepresentable 条目 pm-itsjf0
- Model capture is inert in practice: zero of 35,103 recorded entries carry a model, because the declared signal for the primary harness is an environment variable that harness does not set 条目 pm-0zcwz6
- The public harness detectors default env to an empty object, so detectAgentIdentity() and detectHarnessIdentity() silently return empty for every SDK caller 条目 pm-pwq0g5
- GH-746: the release publish step guards on a package scope that does not exist, so publish idempotence and access recovery are permanently dead code 条目 pm-2z9263
Other
- Evaluate Sentry 10.68.0 compatibility and retain 10.67.0 条目 pm-r31390
- Derive ALL MCP tool inputSchemas from \*\_FLAG_CONTRACTS — eliminate hand-declared parallel schema tables (extend the pm_copy pattern) 条目 pm-xwah
- Generate shell completions, MCP tool registrations, and command reference docs from the contracts table (single source of truth) 条目 pm-mu8m
- The agent token-surface harness from pm-a22j is wired into nothing, so output-size regressions like the 33k-token health check land undetected 条目 pm-dpqa3h
- Ecosystem review and deep-graph enrichment pass 2026-07-27: all-status census, CLI simplification + token-efficiency + long-term brainstorm, dedupe-checked gap filing 条目 pm-89qv6b
- Evaluate @toon-format/toon 4 compatibility and item-format migration 条目 pm-5cgm2z
- ADR amendment: extensible durable agent provenance dimensions and privacy boundaries 条目 pm-oskdmu
- SDK completeness is asserted by a 10-case curated array against 85 declared actions: the boundary proves the CLI reaches nothing below the SDK, nothing proves the SDK can do what the CLI does 条目 pm-te6elw
Fixed
- GH-754: the merge driver's field-level conflict report is transient stdout, so the value it discarded leaves no durable record anywhere 条目 pm-rh98vo
- Merge fence fails open: an unresolvable pm driver leaves unmarked UU files whose naive resolution silently discards the other branch's fields and history 条目 pm-c0wthb
- Merged-main Windows init package acceptance exceeds generic Vitest timeout 条目 pm-0vkmqs
- GH-739: expose duplicate-cluster discovery as a first-class CLI and SDK workflow 条目 pm-n13lzc
- PmClient activation queue serializes unrelated workspaces and extension-free actions 条目 pm-zpoyg9
- GH-741: replace reference-identity service override claiming with an explicit observable contract 条目 pm-h3ipax
- GH-740: make the documented aggregate SDK barrel complete and continuously derived 条目 pm-obbh43
- GH-738: publish the machine-readable public SDK surface snapshot with the package 条目 pm-lnswp0
- Terminal release transitions retain stale claim_principal ownership 条目 pm-bnrndo
- SDK: inject host-bound runtime into ImportExportContext 条目 pm-i7indd
- Detected agent identity is not agent-unique, so claim mutual exclusion silently degenerates across a same-harness fleet 条目 pm-z8qd4k
- GH-714: linked-test verbose child stdout still aborts with EAGAIN after bounded-drain fix 条目 pm-5sm91o
- CodeFactor 2026-07-26 SDK and digital-twin regression cluster (GH-722 through GH-732) 条目 pm-eq3ak8
- GH-733: Windows Node 24 nightly portability regressions in author, recovery, and drift tests 条目 pm-wr8utz
- Sentry PM-CLI-2M: classify workspace audit-state drift as an actionable conflict 条目 pm-o71t68
- GH-728: preserve live harness authorship across initialized multi-agent workspaces 条目 pm-si2uur
- GH-720: diagnose unbuilt GitHub extension sources and recommend resolvable npm artifacts 条目 pm-0sx3kz
- GH-719: reject or diagnose extension command flags shadowed by pm globals 条目 pm-ill9gv
Security
- Scorecard Security-Policy (4→10): enrich SECURITY.md to full scoring depth 条目 pm-2d7k
- Scorecard Fuzzing (0→10): add a fuzzing/property-based harness for the parser and codec surfaces 条目 pm-0yi7
Other
- The merge-safety gate verifies one history stream of 2,058 and never checks drift, so a clean merge that provably corrupts stream anchoring passes CI green 条目 pm-pdr8t1
- Branch merge is an unrecorded mutation: the field-aware merge produces an item state that no history entry ever produced, so the merged state is unaddressable by restore and point-in-time reads 条目 pm-9j2r3b
- Continuous multi-branch merge conformance: randomized N-branch divergence and merge property suite with a zero-conflict acceptance bar 条目 pm-76dnfg
- 2026-07-26 ecosystem review: all-status walk, graph depth enrichment, agent-ergonomics and release-pipeline verification 条目 pm-v4iypw
- Historical release attribution backfill: stamp every terminal item with the release tag that contains its close event 条目 pm-3j6it6
- Terminal relationship backfill, evidence-derived tranche: make every closed and canceled item reachable by typed graph traversal 条目 pm-qudvto
- 2026-07-26 agent-context readiness audit: full CLI, SDK, and ecosystem review and optimization plan 条目 pm-t9e3bc
- Ecosystem review and deep-graph enrichment pass 2026-07-26: all-status inspection, CLI simplification + context-algorithm brainstorm, gap filing 条目 pm-e9yevx
Added
- Immutable-tree DeepScan and CodeFactor zero-new-issues release gate 条目 pm-39cqqx
- Model-aware agent identity: detection resolves harness, model, and session so an agent never types an identity flag and history still records which model acted 条目 pm-03pq3o
Changed
- Dependabot update queue 2026-07-21: PRs \#618-\#621 条目 pm-pegcmx
- Harness signal registry: identity detection becomes declared data that a config entry or a package can extend without a code change 条目 pm-brxdct
- Public SDK surface snapshot and breaking-change gate: the exported API is a reviewed artifact, and an unintended removal or signature change cannot merge 条目 pm-e6tm5c
Fixed
- GH-716: detect npm and Slack credential shapes in mutation secret guard 条目 pm-fhhhlk
- pm package init doubles the pm- prefix and mints an unusable pm pm ... command path when given the package name every real pm package actually uses 条目 pm-c5f0gh
- pm extension --init and pm package init are divergent scaffold generators behind the same grammar; the extension path emits no tests and an unpublishable manifest 条目 pm-9smp7j
- Built-in help examples teach an explicit --author on dozens of commands, training every agent to suppress its own detected identity and pay tokens for it 条目 pm-sx52hr
- Shipped MCP manifests and MCP tool guidance hardwire a static author, overriding the automatic identity of every plugin-hosted agent 条目 pm-zqsrt5
- A configured author_default suppresses harness detection entirely, so any workspace that sets a default author records no harness and no model provenance 条目 pm-6uxhe0
- GH-677: pm-path relocation must diagnose extension discovery changes 条目 pm-qswf81
- GH-691: parseItemDocument errors need stable structured SDK classification 条目 pm-r9pudt
- First-party service collision: builtin-calendar and builtin-guide-shell both override the global output_format service 条目 pm-ixoa
- GH-680: completed Plan close must transition plan_mode terminally 条目 pm-g512pv
- GH-692: plan update-step must persist file, test, and doc evidence fields 条目 pm-z5vamp
- GH-678: linked-test sandbox must preserve freshly installed project extensions across child processes 条目 pm-jvken3
- GH-709: batch duplicate-cluster sweep with canonical precomputed similarity signals 条目 pm-2i12ti
- pm config set on one leaf key rewrites settings.json with every default materialized and silently replaces explicit stored values (validation.parent_reference warn -\> strict_error) 条目 pm-x2aplf
- GH-690: plan resume and approve must apply or reject scope changes 条目 pm-bxdlfa
- GH-688: seeded Plan creation must be atomic across ownership boundaries 条目 pm-96tter
- GH-679: linked-test output capture must not abort verbose child tools with EAGAIN 条目 pm-j36ypd
- Author-resolution bypass class: create/copy and the context, next, and usage-feedback paths re-implement author precedence without harness detection, stamping author 'unknown' on new items 条目 pm-42p9nk
- GH-706: accept bare conventional forms for create/update boolean metadata flags 条目 pm-ulb3rc
- GH-700/GH-701/GH-702: nightly Node 22 and cross-platform regression bundle 条目 pm-3x8w4m
- GH-704: make extension activation failures actionable at command and lifecycle boundaries 条目 pm-3ljt19
- GH-705: make duplicate governance discoverable and advisory by default 条目 pm-de3foa
- GH-703: populate portable workspace coordinates in extension CommandHandlerContext 条目 pm-fc9gm4
Removed
- GH-708: make retained delete tombstones discoverable and policy-controlled 条目 pm-wdrkfr
Security
- Add TruffleHog OSS verified-secret scanning to the security workflow and complete free GitHub secret-scanning toggles 条目 pm-4ris
- Refresh 2026-07-15 npm dependency updates with compatibility and release-gate proof 条目 pm-tll8
Other
- CLI transport overhead budget: gate the per-invocation bootstrap floor and the CLI-vs-SDK delta, not just absolute scale numbers 条目 pm-yse5dt
- CI/CD + test-suite performance: in-process CLI runner and dedupe redundant matrix legs 条目 pm-7rlp
- ADR: agent identity model — stable author namespace plus structured harness, model, and session provenance 条目 pm-qwuber
- Public SDK surface shape: 881 exports behind one flat entrypoint with no capability tiering and a 250ms eager import cost 条目 pm-38bskj
Added
- Harness-aware author identity: pm resolves the acting agent from its runtime harness so PM_AUTHOR is never required 条目 pm-z9x1r2
- Mutation event stream primitive: pm events --follow (NDJSON with durable cursor) + SDK subscription API for cross-process agent coordination 条目 pm-e200
- Create-time near-duplicate advisory: pm create/copy surface similar existing items before new work is filed 条目 pm-4ri6
Fixed
- GH-686: validate extension flag descriptors and support repeatable as a list alias 条目 pm-s1w0sf
- GH-683: standard get projection must expose tests_count when tests are omitted 条目 pm-1exil1
- GH-685: extension CommandContext needs portable source and tracker workspace coordinates 条目 pm-j4ac9a
- GH-682: linked-test tracker sandbox must preserve source VCS workspace identity 条目 pm-954h0o
- 10k scale gate regression: CLI create latency and create/claim peak RSS exceed fixed budgets 条目 pm-hcrmye
- PR \#673 review hardening: literal Git paths, canonical workspace identity, bounded diagnostics, and recoverable init 条目 pm-d7crwk
- GH-666/GH-667: nightly Node 22 stderr and Windows permission-contract regressions 条目 pm-lvd647
- GH-665: schema migrations need derived idempotency keys and structured recovery 条目 pm-s79kel
- GH-663: fresh init must install and surface the semantic merge fence 条目 pm-1w3ljt
- GH-514: pm init writes no .gitignore rules — runtime/search caches churn as tracked files in downstream repos 条目 pm-hous
- Stale-lock takeover race in acquireLock: two waiters can both remove the stale lock and both believe they own the item 条目 pm-zwib
- Create/copy ID allocation TOCTOU: duplicate generated id silently overwrites the other item's file; idExists misses extension type folders 条目 pm-khdq
- GH-664: published daily release fails Bun node:sqlite verification before GitHub Release 条目 pm-cedo0g
Security
- Adopt TruffleHog 3.96.0 security action update 条目 pm-ion0bp
- Semgrep 874840488: High spawn shell true in scripts/release/utils.mjs\#L38 条目 pm-a7m7
- Semgrep 874962820: High spawn shell true in plugins/pm-codex/scripts/pm-mcp-server.mjs\#L86 条目 pm-1uul
- Semgrep 874962821: High spawn shell true in plugins/pm-claude/scripts/pm-mcp-server.mjs\#L82 条目 pm-f7ik
- Dependabot alert: brace-expansion unbounded expansion denial of service (GHSA-mh99-v99m-4gvg) 条目 pm-5q81jq
- Dependabot alert \#43: PostCSS previous source-map path traversal (GHSA-r28c-9q8g-f849) 条目 pm-a24aqt
- Release pipeline permits duplicate same-day production versions 条目 pm-4s24d2
Other
- PR \#684 post-merge deferred checks and review follow-up 条目 pm-e3g0h6
- Execute and expose the unknown-author acknowledgment flow: dispose the five stranded events and give the shipped SDK primitive a CLI and MCP surface 条目 pm-zqpnte
- Holistic pm CLI, SDK, and ecosystem optimization roadmap 条目 pm-xe0c38
