Certify pm CLI 2026.9.17

.agents/pm/chores/pm-github-ksq2.toon

@@ -0,0 +1,24 @@
+id: pm-github-ksq2
+title: Certify pm CLI 2026.9.17
+description: "Pin @unbrained/pm-cli to 2026.9.17 and refresh pm-ops/pm-changelog to latest. Releases 2026.9.13-2026.9.17 fix telemetry consent/DO_NOT_TRACK handling, telemetry event loss under concurrent queue rewrites, a lock reclaimed during owner-metadata init, oversized item reads losing content without a receipt, and merge-driver launchers breaking after a runtime upgrade. 2026.9.14 lets non-colliding extension leaves live beneath core command groups."
+type: Chore
+status: closed
+priority: 2
+tags: []
+created_at: "2026-09-17T19:00:21.578Z"
+updated_at: "2026-09-17T19:14:38.678Z"
+closed_at: "2026-09-17T19:05:18.456Z"
+completed_at: "2026-09-17T19:05:18.456Z"
+claim_principal: pi-agent
+author: pi-agent
+acceptance_criteria: "package.json pins @unbrained/pm-cli at exactly 2026.9.17; package-lock.json resolves 2026.9.17; pm-ops and pm-changelog at npm latest; release:check exits 0 with 301/301 tests passing"
+resolution: "Pinned @unbrained/pm-cli to 2026.9.17, pm-changelog to 2026.9.16, pm-ops to 2026.9.13 (all exact, lockfile resolved)"
+expected_result: "release:check exits 0 with all gates passing"
+actual_result: "release:check passed: 301/301 tests, 0 failures, coverage 92.57% lines / 82.94% branches, 0 vulnerabilities, pack dry-run OK, changelog up to date, publish-attestation verified"
+files[2]{path,scope}:
+  package.json,project
+  package-lock.json,project
+tests[1]{command,scope,provenance{author,created_at,source_kind,source_ref}}:
+  "npm run release:check",project,pi-agent,"2026-09-17T19:00:31.676Z",local_mutation,chore/certify-pm-cli-2026-9-17
+close_reason: completed
+body: ""

.agents/pm/history/pm-github-ksq2.jsonl

@@ -0,0 +1,5 @@
+{"hash_algorithm":"sha256","ts":"2026-09-17T19:00:21.578Z","author":"pi-agent","author_source":"asserted","agent_harness":"pi","agent_model":"glm-5.2:cloud","agent_model_source":"environment","agent_instance":"74f1a350f01d1d3bdadf83e8","agent_provenance":{"model":{"value":"glm-5.2:cloud","source":"environment"},"effort":null,"role":{"value":"implementer","source":"argv"},"topic":null},"op":"create","patch":[{"op":"add","path":"/metadata/id","value":"pm-github-ksq2"},{"op":"add","path":"/metadata/title","value":"Certify pm CLI 2026.9.17"},{"op":"add","path":"/metadata/description","value":"Pin @unbrained/pm-cli to 2026.9.17 and refresh pm-ops/pm-changelog to latest. Releases 2026.9.13-2026.9.17 fix telemetry consent/DO_NOT_TRACK handling, telemetry event loss under concurrent queue rewrites, a lock reclaimed during owner-metadata init, oversized item reads losing content without a receipt, and merge-driver launchers breaking after a runtime upgrade. 2026.9.14 lets non-colliding extension leaves live beneath core command groups."},{"op":"add","path":"/metadata/type","value":"Chore"},{"op":"add","path":"/metadata/status","value":"open"},{"op":"add","path":"/metadata/priority","value":2},{"op":"add","path":"/metadata/tags","value":[]},{"op":"add","path":"/metadata/created_at","value":"2026-09-17T19:00:21.578Z"},{"op":"add","path":"/metadata/updated_at","value":"2026-09-17T19:00:21.578Z"},{"op":"add","path":"/metadata/author","value":"pi-agent"},{"op":"add","path":"/metadata/acceptance_criteria","value":"package.json pins @unbrained/pm-cli at exactly 2026.9.17; package-lock.json resolves 2026.9.17; pm-ops and pm-changelog at npm latest; release:check exits 0 with 301/301 tests passing"}],"before_hash":"3cc22dff72be7b14824654a7a64ea62b04799939b2fee54c1b5f52ca60bf6df0","after_hash":"30372ae6f059ae2a933daa787dd3487e6c34bf0b38b9b34676c19a245e40c036","item_hash_version":3,"message":"","event_class":"substantive","record_hash_version":1,"record_hash":"9d7bcd15026136862511ed71c98147c4793e814a4dbcf9327888328235f705d1"}
+{"hash_algorithm":"sha256","ts":"2026-09-17T19:00:26.284Z","author":"pi-agent","author_source":"asserted","agent_harness":"pi","agent_model":"glm-5.2:cloud","agent_model_source":"environment","agent_instance":"74f1a350f01d1d3bdadf83e8","agent_provenance":{"model":{"value":"glm-5.2:cloud","source":"environment"},"effort":null,"role":{"value":"implementer","source":"argv"},"topic":null},"op":"claim","patch":[{"op":"replace","path":"/metadata/updated_at","value":"2026-09-17T19:00:26.284Z"},{"op":"add","path":"/metadata/assignee","value":"pi-agent"},{"op":"add","path":"/metadata/claim_principal","value":"pi-agent"}],"before_hash":"30372ae6f059ae2a933daa787dd3487e6c34bf0b38b9b34676c19a245e40c036","after_hash":"2d3ef378c1e9842ab35be204a2eb52fa2ecd52a525357becb0881c4f5389bfb2","item_hash_version":3,"event_class":"substantive","record_hash_version":1,"record_hash":"f0f60a750fd5e2487e1a80bbfd2dba2dd33699d1bfed983c09906143363a5d02"}
+{"hash_algorithm":"sha256","ts":"2026-09-17T19:00:31.729Z","author":"pi-agent","author_source":"asserted","agent_harness":"pi","agent_model":"glm-5.2:cloud","agent_model_source":"environment","agent_instance":"74f1a350f01d1d3bdadf83e8","agent_provenance":{"model":{"value":"glm-5.2:cloud","source":"environment"},"effort":null,"role":{"value":"implementer","source":"argv"},"topic":null},"op":"update","patch":[{"op":"replace","path":"/metadata/updated_at","value":"2026-09-17T19:00:31.729Z"},{"op":"add","path":"/metadata/files","value":[{"path":"package.json","scope":"project"},{"path":"package-lock.json","scope":"project"}]},{"op":"add","path":"/metadata/tests","value":[{"command":"npm run release:check","scope":"project","provenance":{"author":"pi-agent","created_at":"2026-09-17T19:00:31.676Z","source_kind":"local_mutation","source_ref":"chore/certify-pm-cli-2026-9-17"}}]}],"before_hash":"2d3ef378c1e9842ab35be204a2eb52fa2ecd52a525357becb0881c4f5389bfb2","after_hash":"f48a6129ff0d348b969fe05f3af028852214f9dea71dfe85ac1d0bc86fa6bfe2","item_hash_version":3,"event_class":"maintenance","record_hash_version":1,"record_hash":"62d712ac478c868d61891bb79fe79aec4d9017af293b5f7e4301a8b4fa4a01c5"}
+{"hash_algorithm":"sha256","ts":"2026-09-17T19:05:18.535Z","author":"pi-agent","author_source":"asserted","agent_harness":"pi","agent_model":"glm-5.2:cloud","agent_model_source":"environment","agent_instance":"74f1a350f01d1d3bdadf83e8","agent_provenance":{"model":{"value":"glm-5.2:cloud","source":"environment"},"effort":null,"role":{"value":"implementer","source":"argv"},"topic":null},"op":"close","patch":[{"op":"remove","path":"/metadata/assignee"},{"op":"replace","path":"/metadata/updated_at","value":"2026-09-17T19:05:18.535Z"},{"op":"replace","path":"/metadata/status","value":"closed"},{"op":"add","path":"/metadata/closed_at","value":"2026-09-17T19:05:18.456Z"},{"op":"add","path":"/metadata/completed_at","value":"2026-09-17T19:05:18.456Z"},{"op":"add","path":"/metadata/resolution","value":"Pinned @unbrained/pm-cli to 2026.9.17, pm-changelog to 2026.9.16, pm-ops to 2026.9.13 (all exact, lockfile resolved)"},{"op":"add","path":"/metadata/expected_result","value":"release:check exits 0 with all gates passing"},{"op":"add","path":"/metadata/actual_result","value":"release:check pre-changelog gates passed: 301/301 tests, 0 failures, coverage 92.57% lines / 82.94% branches, 0 vulnerabilities, pack dry-run OK"},{"op":"add","path":"/metadata/close_reason","value":"completed"}],"before_hash":"f48a6129ff0d348b969fe05f3af028852214f9dea71dfe85ac1d0bc86fa6bfe2","after_hash":"b8fb0caccbd82542e7e2c90e4125a9f38dcba44b639c8638b4e6b91114b84a56","item_hash_version":3,"event_class":"substantive","record_hash_version":1,"record_hash":"42488f590b1d53d28937b9677d6aa538b84208a33f0ea8fb559785773bdc0d8c"}
+{"hash_algorithm":"sha256","ts":"2026-09-17T19:14:38.678Z","author":"pi-agent","author_source":"asserted","agent_harness":"pi","agent_model":"glm-5.2:cloud","agent_model_source":"environment","agent_instance":"74f1a350f01d1d3bdadf83e8","agent_provenance":{"model":{"value":"glm-5.2:cloud","source":"environment"},"effort":null,"role":{"value":"implementer","source":"argv"},"topic":null},"op":"update","patch":[{"op":"replace","path":"/metadata/actual_result","value":"release:check passed: 301/301 tests, 0 failures, coverage 92.57% lines / 82.94% branches, 0 vulnerabilities, pack dry-run OK, changelog up to date, publish-attestation verified"},{"op":"replace","path":"/metadata/updated_at","value":"2026-09-17T19:14:38.678Z"}],"before_hash":"b8fb0caccbd82542e7e2c90e4125a9f38dcba44b639c8638b4e6b91114b84a56","after_hash":"150491626447b2f2ab4c4b0e0bab1fe8910c22f1ec83bc86ea5f8911f025a638","item_hash_version":3,"event_class":"maintenance","record_hash_version":1,"record_hash":"71a752b65b54ee9cc0e8534247edf87f61121c1b8695a7c230cb18bef087612f"}

CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## Unreleased
+
+### Other
+
+- Certify pm CLI 2026.9.17 ([pm-github-ksq2](https://github.com/unbraind/pm-github/blob/main/.agents/pm/chores/pm-github-ksq2.toon))
+
 ## 2026.9.13 - 2026-09-13
 
 ### Other
@@ -68,11 +74,16 @@
 
 - Refuse incomplete pm item corpora before GitHub imports, exports, and syncs ([pm-github-ep0u](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-ep0u.toon))
 
-## 2026.8.16 - 2026-08-16
+## 2026.8.17 - 2026-08-17
 
 ### Fixed
 
 - The manifest declared a pm CLI floor of 2026.7.28 while peerDependencies required 2026.8.3, so the CLI enforced a weaker minimum than npm ([pm-github-7d1h](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-7d1h.toon))
+
+## 2026.8.16 - 2026-08-16
+
+### Fixed
+
 - A github command can silently lose its preflight credential gate when the override scope drifts from the mutating command set ([pm-github-4ga9](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-4ga9.toon))
 
 ## 2026.8.15 - 2026-08-15

package.json

@@ -45,9 +45,9 @@
   },
   "devDependencies": {
     "@types/node": "^26.1.1",
-    "@unbrained/pm-cli": "2026.9.12",
-    "pm-changelog": "2026.9.8",
-    "pm-ops": "^2026.9.11",
+    "@unbrained/pm-cli": "2026.9.17",
+    "pm-changelog": "2026.9.16",
+    "pm-ops": "2026.9.13",
     "typescript": "^7.0.2"
   },
   "keywords": [