Certify pm-rl on PM SDK 2026.9.29 and enable GitHub issue sync

.agents/pm/chores/pm-rl-1bpz.toon

@@ -0,0 +1,20 @@
+id: pm-rl-1bpz
+title: Enable pm-github issue sync in the pm-rl tracker
+description: "Install the published pm-github extension into this repository-owned PM tracker, verify activation, run a repository-scoped GitHub issue dry run, and record the companion rollout link pm-cli-website-377e. No public user data is imported."
+type: Chore
+status: in_progress
+priority: 1
+tags: []
+created_at: "2026-09-26T20:12:06.225Z"
+updated_at: "2026-09-28T20:07:04.497Z"
+author: codex
+acceptance_criteria: Managed extension manifest tracks pm-github without vendored source; pm github sync dry run targets unbraind/pm-rl and repeats idempotently; strict tracker health remains ok; any GitHub import is checked for duplicate provenance before mutation.
+notes[4]{created_at,author,text}:
+  "2026-09-26T20:13:07.666Z",codex,"Installed pm-github 2026.9.26 in project scope; activation status ok. GitHub issue list for unbraind/pm-rl has zero issues, so pm github import --dry-run --atomic planned 0 creates/0 updates and pm github sync --dry-run planned 0. Strict PM health ok=true with one existing historical provenance warning. Companion rollout owner: pm-cli-website-377e."
+  "2026-09-26T20:15:35.418Z",codex,"2026-09-26: Managed manifest is the only tracked extension file; installed code stays ignored. npm:pm-github@2026.9.26 activated nine GitHub commands. Import dry-run atomic found 0 issues; sync dry-run planned 0 writes. No GitHub issue mutation was made."
+  "2026-09-26T20:16:51.178Z",codex,"PR https://github.com/unbraind/pm-rl/pull/54 proposes the managed pm-github manifest. Nonempty issue import acceptance remains part of the fleet rollout because unbraind/pm-rl currently has zero issues."
+  "2026-09-28T20:07:04.479Z","harness:codex",2026-09-28 CodeRabbit on PR 54 correctly found that tracked managed-extension metadata alone cannot restore ignored pm-github code after a fresh checkout. README Development now installs exact published pm-github 2026.9.26 with the repository-pinned CLI and shows atomic import and sync dry runs. Actual issue-body import and scheduled push remain behind privacy and provenance review.
+files[2]{path,scope,note}:
+  .agents/pm/extensions/.managed-extensions.json,project,Managed pm-github extension metadata
+  README.md,project,Fresh-checkout pm-github install and privacy-reviewed sync preview
+body: ""

.agents/pm/chores/pm-rl-hncb.toon

@@ -0,0 +1,93 @@
+id: pm-rl-hncb
+title: Certify pm-rl against published PM CLI SDK 2026.9.29
+description: "Upgrade the development CLI and SDK to published 2026.9.29 while retaining published pm-ops 2026.9.28 and pm-changelog 2026.9.25. Certify direct release gates, packed npm/Bun behavior, and strict tracker health. The durable recursive LLM controller remains separately open under pm-rl-apvf."
+type: Chore
+status: in_progress
+priority: 1
+tags: []
+created_at: "2026-09-26T19:59:42.997Z"
+updated_at: "2026-10-02T23:43:10.577Z"
+author: codex
+acceptance_criteria: "Package and lockfile pin published PM CLI 2026.9.29; full direct release:check and strict tracker health pass on installed dependencies; packed npm and Bun extension acceptance with CLI 2026.9.29 is measured; PR links this item and records independent review, publication and recursive-training limitations."
+parent: pm-rl-apvf
+actual_result: "npm ci and direct npm run release:check PASS: 329/329 tests, zero skipped; independently measured statements/lines/branches/functions 100/100/100/100 across 20 sources; 136 documented declarations. Lint/duplicates/publish-attestation/identity audit/production audit/pack/changelog pass. Strict CI health, pm validate, Bun install and focused linked launcher test 6/6 pass. Red all-dependency audit found one high brace-expansion advisory; npm lock patch 5.0.9 to 5.0.12 now matches existing Bun lock, final audit zero and exact PM tool pins unchanged. Full gate ran directly because pm-cli#1318 affects PM full-suite sandbox; focused linked tests use PM. Durable controller remains unshipped in pm-rl-apvf. History prefixes preserved; exact-head CI and substantive review remain separate, item released in_progress, no closure or publication."
+comments[5]{created_at,author,text}:
+  "2026-09-28T06:51:05.996Z",claude-hub,"2026-09-28: pinned pm-ops 2026.9.28 and re-copied its templates/prepare-merge-driver.ts in 29e11d7 (pm-ops#124: the omit-dev skip now checks every Node resolution path for an incomplete hoisted pm-ops). release:check and changelog:check pass on this branch. Acceptance criteria and the launcher link note now name pm-ops 2026.9.28; the dated 2026.9.26 notes above stay as historical results."
+  "2026-10-02T18:22:43.959Z",pi-land-a,"Merge-readiness verification pass by pi-land-a (fleet PR landing session): exact head 9fe6606 is mergeable and CLEAN against origin/main; Node 22/26, CodeQL CI green; all five review threads resolved; re-requested the bot review window because CodeRabbit's prior full-review attempt on this head failed with an internal error (issuecomment-5891308945) and Greptile/Gemini are not active on this repository."
+  "2026-10-02T18:52:29.433Z",pi-land-a,"Cubic review (new head 9a2b201) findings on this candidate: (1) valid - the tracked bun.lock still resolved @unbrained/pm-cli, pm-changelog and pm-ops at 2026.8.1; regenerated with bun 1.3.5 so it now resolves the exact pins 2026.9.29/2026.9.25/2026.9.28. (2) valid - the v2026.9.28 release link was mislabeled 'used by this candidate'; relabeled as the earlier heads' SDK, superseded by 2026.9.29. Refused with reasons in their threads: the lstatSync/require.resolve.paths launcher probes are the byte-identical published pm-ops template (upstream pm-ops issue filed), and the npm pack final-line parse uses --ignore-scripts so prepare output cannot follow the archive name, with an exact-regex assertion that fails loudly otherwise. Full npm run release:check after the changes passed 329/329 with 100/100/100/100 measured coverage over 20 sources and zero production audit findings."
+  "2026-10-02T23:37:38.478Z",codex-sol,"Restart codex-sol: retained c8a640a is pushed/clean; current REST PR/comment/review/inline read shows no new bot artifact. Revalidate direct full release:check on published CLI 2026.9.29 and canonical pm-ops 2026.9.28; strict health, Bun and bounded audit patch checks. Keep full suite outside PM linked sandbox (pm-cli#1318); link/run focused launcher test. Durable recursive controller remains open under pm-rl-apvf. Earlier review dispositions and histories are preserved."
+  "2026-10-02T23:43:09.924Z",codex-sol,"npm ci and direct npm run release:check PASS: 329/329 tests, zero skipped; independently measured statements/lines/branches/functions 100/100/100/100 across 20 sources; 136 documented declarations. Lint/duplicates/publish-attestation/identity audit/production audit/pack/changelog pass. Strict CI health, pm validate, Bun install and focused linked launcher test 6/6 pass. Red all-dependency audit found one high brace-expansion advisory; npm lock patch 5.0.9 to 5.0.12 now matches existing Bun lock, final audit zero and exact PM tool pins unchanged. Full gate ran directly because pm-cli#1318 affects PM full-suite sandbox; focused linked tests use PM. Durable controller remains unshipped in pm-rl-apvf. History prefixes preserved; exact-head CI and substantive review remain separate, item released in_progress, no closure or publication."
+notes[9]{created_at,author,text}:
+  "2026-09-26T20:06:25.026Z",codex,"Initial pm test linked release gate failed because the default schema sandbox injected PM_PATH into npm tests that initialize their own temporary trackers; direct release:check reached a real canonical-launcher mismatch with pm-ops 2026.9.26. Updated the launcher from the installed canonical template. Both observations are distinct; revalidation follows."
+  "2026-09-26T20:15:33.662Z",codex,"2026-09-26: Direct npm run release:check on installed PM CLI/SDK 2026.9.26, pm-ops 2026.9.26 and pm-changelog 2026.9.25 passed 329/329 tests, 0 failures, 100.00% statements/lines/branches/functions over 20 authored source files, 136/136 documented declarations, zero duplication and zero npm production vulnerabilities. Packed pm-rl tarball installed and imported under npm/Node and Bun 1.3.5. PM linked bandit acceptance passed 14/14. Strict PM health ok=true with an existing provenance-value warning. Full linked npm test context limitation is upstream pm-cli#1318; direct full gate is the valid package result."
+  "2026-09-26T20:16:50.259Z",codex,"PR https://github.com/unbraind/pm-rl/pull/54 proposes the SDK and canonical launcher update. Exact-head CI, bot review, merge and publication remain pending independently of the passed local release gate."
+  "2026-09-28T19:51:00.569Z","harness:codex","2026-09-28 red-first CLI 2026.9.28 gate: one real host-bound test failed because pm install pointed at the whole checkout and the current CLI refused an incomplete 10000-entry source scan. Replaced that one-use fixture with npm pack archive installation through pm package install. Focused compiled test passed 1/1. The CLI refusal is expected upstream behavior; this is a package test correction."
+  "2026-09-28T19:57:12.452Z","harness:codex","2026-09-28 final local CLI 2026.9.28 candidate: direct release:check passed 329/329 tests with 0 failures or skips. Coverage gate measured 100.00% statements lines branches and functions over 20 authored source files; docstrings 136/136 declarations; duplication zero; production npm audit zero vulnerabilities; package pack and changelog check passed. A red-first host-bound test failed on the now-correct 10000-entry local source scan refusal and passed after installing the packed archive. Fresh npm/Node and Bun 1.3.5 projects imported the tarball and npx/bunx ran pm 2026.9.28. A linked snapshot workspace run of the focused packed mutation test passed 1/1; initial linked none/source and isolated attempts failed on context and absent test file, respectively. Strict PM health passes with one historical provenance advisory. pm-github public issue import and sync dry runs planned zero writes because the repo currently has zero GitHub issues. This does not certify a nonempty import, recursive controller, hosted service or external reviews."
+  "2026-09-28T20:07:05.169Z","harness:codex","2026-09-28 exact-head df2dcbc Node 22 CI failed one of 329 tests because npm 10 printed prepare-script output before the tarball filename; Node 26 and local npm 11 passed. The test now selects the final archive-name line and was red-first verified against the CI failure. Focused Node 22.23.1/npm 10.9.8 test passed 1/1; full Node 22 release:check passed 329/329 with 100/100/100/100 measured coverage and remaining release gates. CodeRabbit also found a separate fresh-clone pm-github setup gap, fixed in README and tracked on pm-rl-1bpz. This is pre-push evidence; a new exact-head CI and review round is required."
+  "2026-09-29T13:23:14.871Z",codex,"Fresh synthetic npm/npx and Bun/bunx projects installed the packed pm-rl 2026.7.31 archive alongside published CLI 2026.9.29, completed package install with copy.complete=true and activation, registered Grid World 3 from the packed example, listed it, and passed strict PM health with zero warnings. Direct release:check passed before the pin edit at code head 29c8242; rerunning it on the new exact dependency head follows."
+  "2026-09-29T13:28:17.437Z",codex,"On installed repository-local @unbrained/pm-cli 2026.9.29, direct npm run release:check passed 329/329 tests with zero failures and skips, 20 reported authored sources at 100.00% statements/lines/branches/functions, 136 documented declarations, zero clones, zero production vulnerabilities, packed artifact, changelog and publish-attestation checks. This is source and toolchain certification only; pm-rl-apvf still owns the unshipped durable LLM controller. A new exact-head packed artifact and PR review follow after commit."
+  "2026-09-29T13:29:25.687Z",codex,"Exact pushed head 4027888 was packed to a fresh archive. Independent npm/npx and Bun/bunx workspaces each installed published CLI 2026.9.29 and that archive, initialized a tracker, completed pm package install with copy.complete=true and activation, registered the packed Grid World 3 example with identical content hash, and passed strict PM health with zero warnings. The full direct release gate already passed on this same head before this evidence-only note. Review and pm-rl-apvf execution-controller gates remain open."
+files[6]:
+  - path: package-lock.json
+    scope: project
+    note: Resolved PM toolchain lock
+  - path: package.json
+    scope: project
+    note: Exact PM toolchain pins
+  - path: README.md
+    scope: project
+    note: Current CLI floor and fresh-checkout GitHub extension setup
+  - path: scripts/prepare-merge-driver.ts
+    scope: project
+    note: Canonical pm-ops 2026.9.28 launcher
+  - path: test/index.test.ts
+    scope: project
+    note: Packed extension host-bound mutation acceptance
+  - path: test/prepare-merge-driver.test.ts
+    scope: project
+tests[3]:
+  - command: node --test test/bandit.test.ts
+    path: test/bandit.test.ts
+    scope: project
+    timeout_seconds: 120
+    provenance:
+      author: codex
+      created_at: "2026-09-26T20:13:30.835Z"
+      source_kind: local_mutation
+      source_ref: chore/pm-rl-cli-sdk-2026-9-26
+    note: Bounded recursive training adapter acceptance
+  - command: "node --test --test-name-pattern=\"a referenced environment is refused\" test/index.test.ts"
+    path: test/index.test.ts
+    scope: project
+    timeout_seconds: 120
+    pm_context_mode: none
+    workspace_context_mode: snapshot
+    provenance:
+      author: "harness:codex"
+      created_at: "2026-09-28T19:56:55.002Z"
+      source_kind: local_mutation
+      source_ref: chore/pm-rl-cli-sdk-2026-9-26
+    note: Packed extension host-bound mutation acceptance on the installed CLI
+  - command: node --test test/prepare-merge-driver.test.ts
+    scope: project
+    provenance:
+      author: codex-sol
+      created_at: "2026-10-02T23:37:40.129Z"
+      source_kind: local_mutation
+      source_ref: land-54
+docs[5]:
+  - path: "https://github.com/unbraind/pm-cli/releases/tag/v2026.9.28"
+    scope: global
+    note: "Published CLI and SDK used by the earlier heads of this candidate, superseded by 2026.9.29"
+  - path: "https://github.com/unbraind/pm-cli/releases/tag/v2026.9.29"
+    scope: global
+    note: Published CLI SDK used by the refreshed candidate
+  - path: "https://github.com/unbraind/pm-cli/issues/1318"
+    scope: project
+    note: Linked test sandbox issue
+  - path: README.md
+    scope: project
+  - path: RECURSIVE_TRAINING.md
+    scope: project
+    note: Controller scope remains open
+body: ""

.agents/pm/extensions/.managed-extensions.json

@@ -0,0 +1,107 @@
+{
+  "version": 1,
+  "updated_at": "2026-09-26T20:12:08.474Z",
+  "entries": [
+    {
+      "name": "pm-github",
+      "directory": "pm-github",
+      "scope": "project",
+      "manifest_version": "2026.9.26",
+      "manifest_entry": "./dist/index.js",
+      "capabilities": [
+        "commands",
+        "hooks",
+        "importers",
+        "preflight",
+        "schema",
+        "search"
+      ],
+      "contributions": {
+        "schema_version": 1,
+        "commands": [
+          "gh-issues import",
+          "github export",
+          "github import",
+          "github project fields",
+          "github project import",
+          "github project list",
+          "github project sync",
+          "github sync",
+          "github validate"
+        ],
+        "command_overrides": [],
+        "command_handlers": [
+          "gh-issues import",
+          "github export",
+          "github import",
+          "github project fields",
+          "github project import",
+          "github project list",
+          "github project sync",
+          "github sync",
+          "github validate"
+        ],
+        "hooks": [
+          "after_command"
+        ],
+        "flag_commands": [
+          "gh-issues import",
+          "github export",
+          "github import",
+          "github project fields",
+          "github project import",
+          "github project list",
+          "github project sync",
+          "github sync",
+          "github validate"
+        ],
+        "item_types": [],
+        "item_fields": [
+          "github_author",
+          "github_created_at",
+          "github_number",
+          "github_state",
+          "github_updated_at",
+          "github_url"
+        ],
+        "migrations": [],
+        "profiles": [],
+        "importers": [
+          "github"
+        ],
+        "exporters": [
+          "github"
+        ],
+        "search_providers": [
+          "github"
+        ],
+        "vector_store_adapters": [],
+        "parser_overrides": [],
+        "service_overrides": [],
+        "renderer_overrides": [],
+        "preflight_overrides": 1,
+        "preflight_ownership": [
+          {
+            "commands": [
+              "github sync",
+              "github export",
+              "github import",
+              "gh-issues import",
+              "github project import",
+              "github project sync"
+            ]
+          }
+        ]
+      },
+      "installed_at": "2026-09-26T20:12:08.355Z",
+      "updated_at": "2026-09-26T20:12:08.355Z",
+      "source": {
+        "kind": "npm",
+        "input": "npm:pm-github@2026.9.26",
+        "location": "package",
+        "package": "pm-github",
+        "version": "2026.9.26"
+      }
+    }
+  ]
+}