Fixed
- Allow canonical JSON/TOON encoding on mutations 条目 pm-1rta7z
- Omit redundant read receipts when canonical output flags do not compact results 条目 pm-g8oh0f
- Keep the largest list prefix that fits the output budget 条目 pm-15yuly
- Reject ambiguous event durations with explicit minute and month units 条目 pm-jkjt
- Packed telemetry acceptance must await completion across delivery batches 条目 pm-07m41m
- GH-1264: enforce next ready-queue token budgets and disclose omitted recommendations 条目 pm-v53h9j
- Reject malformed linked-test JSON paths instead of silently normalizing assertions 条目 pm-czr31p
Security
- Reject inherited array elements in linked-test assertions 条目 pm-1skc
- Read linked-test JSON assertions without invoking accessors 条目 pm-xxrq
- Prevent prototype traversal in nested settings reads and writes 条目 pm-3kk6
- Share secret and private-context detection between mutation preflight and repository scanning 条目 pm-wwooxx
Other
- Serialize the complete build pipeline so overlapping validation cannot consume partially rewritten dist artifacts 条目 pm-cxc4jc
- Released-artifact acceptance: the exact published tarball is installed clean and driven through a scripted agent session before the release is advertised 条目 pm-ygli86
- Verify explicit calendar duration in package-first dogfood 条目 pm-d9bg0i
- ADR: Require explicit minute and month units for event durations 条目 pm-j1vw3a
- Context judgment corpus: small, real-shaped, scale, and returning-agent continuity scenarios for pm context/next 条目 pm-lixy
- Refresh Sentry 10.75 and CLI 3.8 with Unicorn 75 compatibility proof 条目 pm-1wypwu
Fixed
- Keep merge driver launchers usable after runtime upgrades 条目 pm-rcjyft
Fixed
- Preserve oversized standard item reads with a brief projection and explicit omission receipts 条目 pm-8eclqf
Other
- As an agent on a minutes-old scratch project, pm init, quick-capture create, and next are near-zero ceremony and token-cheap at three-item scale 条目 pm-z436
Fixed
- Preserve telemetry identity and runtime acceptance across Node and npm versions 条目 pm-7msh7k
- Automatically bound high-frequency read-only telemetry volume 条目 pm-um3teu
- Prevent stale cleanup from reclaiming a lock during owner metadata initialization 条目 pm-v2pg4f
Other
- Adopt PR 1257 pnpm setup and CodeQL action updates 条目 pm-b01nb3
Changed
- Update marked to 18.0.13 for documentation parser fixes 条目 pm-t9qgf1
- Refresh Node types 26.5.1, YAML 2.9.1, and fast-check 4.10.0 条目 pm-7ej0mh
Fixed
- Preserve telemetry events across concurrent queue rewrites 条目 pm-utxk3h
- Honor revoked telemetry consent across capture and identity initialization 条目 pm-yjq2x0
- Explain rejected telemetry source-context overrides without leaking raw values 条目 pm-bw8lsb
- Destination census rows cite terminal consolidation owners for five live commands, so the grammar gate certifies consolidations no open item will deliver 条目 pm-3ig9b6
- Package-declared internal commands leak into default runtime contracts 条目 pm-34xisz
- Allow non-colliding extension leaves beneath core command groups 条目 pm-bwkmp4
- Compact default list receipts and avoid repeated recovery argument echoes 条目 pm-4f86c4
- Canonicalize unknown-command recovery with replacement flags 条目 pm-zsic8h
Other
- Give assurance a declared noun placement and history-author-acknowledge a history leaf: the two live commands whose consolidation owners closed without moving them 条目 pm-djyvbk
Fixed
- Suppress inferred test telemetry before identity creation and export 条目 pm-745epp
- Honor DO_NOT_TRACK across telemetry capture flush and diagnostics 条目 pm-ikgitf
- Expose privacy-bounded agent harness and CI telemetry dimensions 条目 pm-nnn9nf
- Published-package verification gives up before npm metadata propagates: two consecutive scheduled cuts were recorded as failed and re-run by hand while the artifact was already live 条目 pm-wzmbvn
Deprecated
- Permanent hot-path aliases print the migration hint reserved for deprecated spellings on every human-readable call, so the project's own skills cost an extra stderr line per invocation 条目 pm-crd6bf
Other
- Expose explicit paired sampling for core-only telemetry reads 条目 pm-wrdctq
- Consolidate item annotation facets: comments/notes/learnings/files/docs/deps/append/test become one facet grammar (old spellings aliased) 条目 pm-yql1
- Hide runtime completion helper entrypoints from the default agent-facing command surface 条目 pm-szdc
- Hide internal test-runs-worker from default help/contracts and route it under the test execution plumbing 条目 pm-lp4j
Changed
- Verify complete merge documents across branch permutations and merge directions 条目 pm-1tns7o
Fixed
- Two items created independently on two branches with the same id merge into one document carrying two create entries, and storage integrity only notices when the types differ 条目 pm-qx95lz
- Isolate merge reconciliation receipt discovery from unrelated invocation workspaces 条目 pm-q5grv5
- The immutable history op vocabulary is ungoverned: 71 op literals across five naming conventions, with the same operation spelled two ways in one file, are written permanently with no enum, no contract, and no gate 条目 pm-0elqjj
- Read surfaces give no tombstone signal for a deleted id: pm get returns a bare not-found, so an agent cannot tell never-existed from deleted-and-recoverable 条目 pm-nb4zwz
- CI assurance receipts must explicitly request complete evidence beyond interactive output ceilings 条目 pm-yrio0m
- GH-1231: Expose non-vacuous lifecycle completeness evidence 条目 pm-khd2fd
- GH-1232: Normalize policy authoring ids with actionable mismatch recovery 条目 pm-ycv2cz
- GH-1233: Make strict ownership recovery executable for annotation writes 条目 pm-nrkjik
Other
- Streamline agent triage and schema command discovery 条目 pm-gdi7
- Compact compound lifecycle receipts without losing SDK results 条目 pm-r1f9f1
Added
- Portable integrity attestation: compare recorded history with independently retained proof bundles 条目 pm-3z0k
Fixed
- The history integrity chain hard-codes SHA-256 with no algorithm identifier, so the proof it produces has no migration path across the decades it claims to cover 条目 pm-bbk8we
- Optional undefined result fields silently drop telemetry completion events 条目 pm-rqaqfp
- GH-1229: preserve bounded HTTP process-tree cleanup when POSIX liveness returns EPERM 条目 pm-qn9zxu
Other
- Refresh jscpd 5.2 and MCP Apps 2 development contracts 条目 pm-qs5iiq
- Register advanced retrieval as a search facet 条目 pm-wfskfn
- Consolidate duplicate governance under item operations 条目 pm-fmy9ih
- Declare item copy and workspace merge command destinations 条目 pm-m6g87m
- Refresh Sentry 10.74 with history attestation consumer verification 条目 pm-2us1yv
Changed
- Fold bulk and destructive lifecycle variants into their base nouns: update-many into update, close-many into close, delete/restore placement per ADR 条目 pm-ik19
Fixed
- Isolate CodSpeed dependency setup from unrelated Chrome APT index failures 条目 pm-zvy31w
Other
- Fold lifecycle sugar start-task/pause-task/close-task into claim/release/close flags (hidden aliases) 条目 pm-eq4x
- Native pm ops stats, health, validate, gc, telemetry, eval and test-all with compatible root commands 条目 pm-6apl
- Native pm context next and pm context focus with permanent navigation aliases 条目 pm-kcs4
- Native pm ops normalize, pm ops reindex and pm history events with compatibility aliases 条目 pm-3i9q8g
Added
- Lifecycle field-completeness contract: each item type declares the fields required at each status transition, machine-checked by pm validate 条目 pm-htbetn
- Declarative policy engine: item-level transition, approval, and authorship rules declared as data and enforced consistently at the SDK layer 条目 pm-mj42og
Fixed
- Explain binding token budgets beside read-output alias migration hints 条目 pm-8kzfc4
- Preserve dependency kind constraints in rendered enum errors 条目 pm-lk0qhn
- pm search defaults to keyword on a workspace whose vector index is complete, so the shipped Ollama semantic default never reaches the default query path 条目 pm-n8a6e7
Security
- GHSA-crvj-82cr-hjcx: Hono: Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentials 条目 pm-vnv467
- GHSA-g6gw-c38x-mqfc: Hono: Unbounded dot-notation nesting in
parseBody() can cause memory exhaustion 条目 pm-gxt0mx - GHSA-gqvv-2mrq-wpjv: Hono: Incomplete fix for CVE-2026-39408:
toSSG() still writes files outside the output directory 条目 pm-rc8708