Certify pm CLI 2026.9.12 and the pm-ops 2026.9.11 auditor

[unbraind]

What changes

• @unbrained/pm-cli 2026.9.10 → 2026.9.12 (exact)
• pm-ops 2026.9.9 → 2026.9.11, resolved in the lockfile

CI runs this repository's pinned pm binary, so the pin decides what the gates exercise. 2026.9.11 and 2026.9.12 fix the multi-writer merge cases agents hit when working on branches in parallel: same-id items created on two branches, and merge receipt isolation. History digests are now algorithm-named.

Verification

npm run release:check exits 0 on the new pins with PM_FLEET_ROOT set to the fleet root: 228 of 228 tests pass. Steps run: typecheck, verify:release-workflow, build, lint, duplicates, docstring, coverage, audit:prod, pack:dry-run, accept:packed, changelog:check, verify:release-publish-attestation, verify:release-changelog-date.

pm items

• pm-csv-umrv: this certification

Summary by Sourcery

Certify the project with the latest PM CLI and pm-ops auditor pins.

Enhancements:

• Certify the repository against the updated PM CLI and pm-ops auditor versions.
• Record the certification work in project tracking history and the unreleased changelog.

Build:

• Update the pinned @unbrained/pm-cli dependency to 2026.9.12 and pm-ops to 2026.9.11.

---

Summary by cubic

Advances the pinned pm tooling so CI gates run the multi-writer merge fixes: @unbrained/pm-cli 2026.9.10 → 2026.9.12 (exact) and pm-ops 2026.9.9 → 2026.9.11 in the lockfile. Same-id items created on two branches now merge into one document, merge receipt discovery no longer reaches into unrelated workspaces, and history digests are algorithm-named.

• Adds the pm-csv-umrv certification item; closes pm-csv-lwj2 as superseded.
• Adds both items to the unreleased changelog.
• npm run release:check passes on the new pins with 228 of 228 tests.
• Lockfile transitives such as @sentry/* and import-in-the-middle update with the resolution.

^{Written for commit 613a72f. Summary will update on new commits.}

[sourcery-ai]

Sorry @unbraind, you've used your own review budget of 250,000 diff characters for the last 7 days.

You can request another review in 1 day and 15 hours by commenting @sourcery-ai review. Upgrade to get a review now.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: d75b2028-2f5b-41f1-ab2e-23a4e84b81ee

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[sourcery-ai]

Reviewer's guide (collapsed on small PRs)

Reviewer's Guide

Updates the repository’s pinned PM CLI and pm-ops auditor to the certified releases, refreshes dependency metadata, and records the certification with a passing 228-test release check.

File-Level Changes

Change	Details	Files
Certify the repository against updated PM tooling pins that exercise multi-writer merge fixes.	Pin @unbrained/pm-cli to exact version 2026.9.12. Upgrade pm-ops to ^2026.9.11 and refresh its lockfile resolution. Record the certification work in PM chore/history metadata and the unreleased changelog. Verify the pinned toolchain with the complete 228-test release check.	package.json package-lock.json .agents/pm/chores/pm-csv-umrv.toon .agents/pm/history/pm-csv-umrv.jsonl .agents/pm/chores/pm-csv-lwj2.toon .agents/pm/history/pm-csv-lwj2.jsonl CHANGELOG.md

---

Tips and commands

Interacting with Sourcery

• Trigger a new review: Comment @sourcery-ai review on the pull request.
• Continue discussions: Reply directly to Sourcery's review comments.
• Generate a GitHub issue from a review comment: Ask Sourcery to create an
  issue from a review comment by replying to it. You can also reply to a
  review comment with @sourcery-ai issue to create an issue from it.
• Generate a pull request title: Write @sourcery-ai anywhere in the pull
  request title to generate a title at any time. You can also comment
  @sourcery-ai title on the pull request to (re-)generate the title at any time.
• Generate a pull request summary: Write @sourcery-ai summary anywhere in
  the pull request body to generate a PR summary at any time exactly where you
  want it. You can also comment @sourcery-ai summary on the pull request to
  (re-)generate the summary at any time.
• Generate reviewer's guide: Comment @sourcery-ai guide on the pull
  request to (re-)generate the reviewer's guide at any time.
• Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
  pull request to resolve all Sourcery comments. Useful if you've already
  addressed all the comments and don't want to see them anymore.
• Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
  request to dismiss all existing Sourcery reviews. Especially useful if you
  want to start fresh with a new review - don't forget to comment
  @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

• Enable or disable review features such as the Sourcery-generated pull request
  summary, the reviewer's guide, and others.
• Change the review language.
• Add, remove or edit custom review instructions.
• Adjust other review settings.

Getting Help

• Contact our support team for questions or feedback.
• Visit our documentation for detailed guides and information.
• Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

[greptile-apps]

Greptile Summary

This PR certifies updated repository tooling by advancing the exact pm CLI pin to 2026.9.12 and resolving pm-ops 2026.9.11.

• Updates the manifest and lockfile, including transitive Sentry and module-lexer dependencies.
• Adds and closes the certification tracking item, supersedes the older certification item, and records algorithm-named history hashes.
• Adds both completed tracking items to the Unreleased changelog section.

Confidence Score: 5/5

The PR appears safe to merge with no actionable correctness, security, or repository-rule violations identified.

The updated manifest and lockfile consistently select the certified tooling, controlled workflows use lockfile-enforced installs, and the tracking histories remain internally continuous and lifecycle-consistent.

Important Files Changed

Filename	Overview
package.json	Advances the exact pm CLI development pin and the minimum pm-ops range.
package-lock.json	Resolves the certified CLI and auditor versions with corresponding transitive dependency updates.
.agents/pm/history/pm-csv-umrv.jsonl	Records the certification item lifecycle with continuous algorithm-named SHA-256 history hashes.
.agents/pm/chores/pm-csv-umrv.toon	Adds the completed certification item and records the successful release-gate result.
CHANGELOG.md	Adds the certification and superseded predecessor under Unreleased.

_{Reviews (1): Last reviewed commit: "Certify pm CLI 2026.9.12 and the pm-ops ..." | Re-trigger Greptile}

[unbraind]

Review round for 613a72f. Every check on this head is complete and none failed, no review thread is unresolved, and every bot comment has been read and voted on.

• @coderabbitai: auto-review is skipped on repositories with fewer than 10 stars. The plan allows about one explicit review per hour across the org, and this session spent those on the hosted-runtime and pm-web PRs, so no review ran here. That is not counted as approval.
• @greptile-apps: the summary was read. 0 inline finding(s), each answered in its thread and resolved only after a fix or an explained refusal.
• @sourcery-ai: the weekly 250k-diff review budget is exhausted, so no review ran. The reviewer's guide summary is correct; the missing review is not counted as approval.

[coderabbitai]

@unbraind: I will review the changes in commit 613a72f.

⚠️ Action not completed

Pull request is closed.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.