Expose static extension inventory for safe SDK and CLI reads

.agents/pm/extensions/.managed-extensions.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "updated_at": "2026-09-26T16:33:16.667Z",
+  "updated_at": "2026-09-26T22:20:41.276Z",
   "entries": [
     {
       "name": "pm-changelog",

.agents/pm/history/pm-t05d8d.jsonl

@@ -0,0 +1,8 @@
+{"hash_algorithm":"sha256","ts":"2026-09-26T20:34:16.625Z","author":"harness:codex","author_source":"detected","agent_harness":"codex","agent_model":"gpt-6-sol","agent_model_source":"probe","agent_instance":"1988a47670c5b401cd591f8d","agent_provenance":{"model":{"value":"gpt-6-sol","source":"probe"},"effort":{"value":"high","source":"probe"},"role":{"value":"implementer","source":"inferred","confidence":"medium","rule_version":"v2","evidence":["claim:pm-lhhnx9","lineage:pm-lhhnx9","lineage:pm-grst","lineage:pm-m9jc"]},"topic":{"value":"pm-lhhnx9","source":"inferred","confidence":"medium","rule_version":"v2","evidence":["claim:pm-lhhnx9","lineage:pm-lhhnx9","lineage:pm-grst","lineage:pm-m9jc"]}},"op":"create","patch":[{"op":"add","path":"/metadata/id","value":"pm-t05d8d"},{"op":"add","path":"/metadata/title","value":"Allow self-isolating linked package tests without inherited PM_PATH"},{"op":"add","path":"/metadata/description","value":"A non-PM linked package test that initializes disposable SDK workspaces inherits the runner sandbox PM_PATH, so explicit cwd still resolves to a shared tracker and later fixtures fail. Provide a safe explicit context mode that omits inherited PM_PATH for self-isolating commands while keeping source workspace trust and default sandbox policy."},{"op":"add","path":"/metadata/type","value":"Issue"},{"op":"add","path":"/metadata/status","value":"open"},{"op":"add","path":"/metadata/priority","value":1},{"op":"add","path":"/metadata/tags","value":["area:sdk","area:test","context-management","gh-1318","packages"]},{"op":"add","path":"/metadata/created_at","value":"2026-09-26T20:34:16.625Z"},{"op":"add","path":"/metadata/updated_at","value":"2026-09-26T20:34:16.625Z"},{"op":"add","path":"/metadata/author","value":"harness:codex"},{"op":"add","path":"/metadata/acceptance_criteria","value":"An explicit linked-test context mode lets non-PM package commands create independent disposable SDK workspaces; default linked tests retain isolated PM_PATH; PM commands cannot bypass tracker isolation; source workspace trust remains enforced; CLI/SDK metadata and execution receipts expose requested and effective mode; focused, full coverage, and temporary package acceptance pass."},{"op":"add","path":"/metadata/parent","value":"pm-ugqx"},{"op":"add","path":"/metadata/dependencies","value":[{"id":"pm-954h0o","kind":"verifies","created_at":"2026-09-26T20:34:16.625Z","author":"harness:codex","source_kind":"cli:create:dep","author_source":"detected"},{"id":"pm-alhqbz","kind":"verifies","created_at":"2026-09-26T20:34:16.625Z","author":"harness:codex","source_kind":"cli:create:dep","author_source":"detected"},{"id":"pm-e97jyf","kind":"discovered_from","created_at":"2026-09-26T20:34:16.625Z","author":"harness:codex","source_kind":"cli:create:dep","author_source":"detected"}]},{"op":"add","path":"/metadata/comments","value":[{"created_at":"2026-09-26T20:34:16.625Z","author":"harness:codex","text":"Duplicate check 2026-09-26: all-status PM searches for GH-1318, inherited PM_PATH, self-isolating linked tests, and context mode found closed pm-e97jyf, pm-alhqbz, pm-954h0o, and pm-6pij. Those delivered source/tracker parity and nested-write protection but do not provide a no-inherited-PM_PATH mode. GitHub report: https://github.com/unbraind/pm-cli/issues/1318."}]}],"before_hash":"3cc22dff72be7b14824654a7a64ea62b04799939b2fee54c1b5f52ca60bf6df0","after_hash":"61f149ea687e6c6708b7bd2a25f688b6dfa21b8fb2c0432aef08d8cacdaaff82","item_hash_version":3,"message":"","context":{"agent_provenance_outcomes":{"model":{"status":"resolved","resolver":"codex_session_file","rule_version":"v1"},"effort":{"status":"resolved","resolver":"codex_session_file","rule_version":"v1"},"version":{"status":"unavailable","reason":"harness_unavailable","resolver":"ai_agent_version","rule_version":"v1"}}},"event_class":"substantive","record_hash_version":1,"record_hash":"b06a76db63a97145926816be9b1e1db6b46ddb9eeebd3ff74c1c6f6c10ff6918"}
+{"hash_algorithm":"sha256","ts":"2026-09-26T20:35:18.342Z","author":"harness:codex","author_source":"detected","agent_harness":"codex","agent_model":"gpt-6-sol","agent_model_source":"probe","agent_instance":"1988a47670c5b401cd591f8d","agent_provenance":{"model":{"value":"gpt-6-sol","source":"probe"},"effort":{"value":"high","source":"probe"},"role":{"value":"implementer","source":"inferred","confidence":"medium","rule_version":"v2","evidence":["claim:pm-lhhnx9","lineage:pm-lhhnx9","lineage:pm-grst","lineage:pm-m9jc"]},"topic":{"value":"pm-lhhnx9","source":"inferred","confidence":"medium","rule_version":"v2","evidence":["claim:pm-lhhnx9","lineage:pm-lhhnx9","lineage:pm-grst","lineage:pm-m9jc"]}},"op":"claim","patch":[{"op":"replace","path":"/metadata/updated_at","value":"2026-09-26T20:35:18.342Z"},{"op":"add","path":"/metadata/assignee","value":"harness:codex"},{"op":"add","path":"/metadata/claim_principal","value":"harness:codex#1988a47670c5b401cd591f8d"}],"before_hash":"61f149ea687e6c6708b7bd2a25f688b6dfa21b8fb2c0432aef08d8cacdaaff82","after_hash":"c54a64632bc5fe9b0e4cb6e6629fe35a7faa1c0a54cf602a817ae8abb4c977af","item_hash_version":3,"context":{"agent_provenance_outcomes":{"model":{"status":"resolved","resolver":"codex_session_file","rule_version":"v1"},"effort":{"status":"resolved","resolver":"codex_session_file","rule_version":"v1"},"version":{"status":"unavailable","reason":"harness_unavailable","resolver":"ai_agent_version","rule_version":"v1"}}},"event_class":"substantive","record_hash_version":1,"record_hash":"e53e2782d7cf37ec7bc4c2b4f9d848a1fdad6f1d5718207a03b0ad6e5f64d0a1"}
+{"hash_algorithm":"sha256","ts":"2026-09-26T20:35:19.292Z","author":"harness:codex","author_source":"detected","agent_harness":"codex","agent_model":"gpt-6-sol","agent_model_source":"probe","agent_instance":"1988a47670c5b401cd591f8d","agent_provenance":{"model":{"value":"gpt-6-sol","source":"probe"},"effort":{"value":"high","source":"probe"},"role":{"value":"implementer","source":"inferred","confidence":"medium","rule_version":"v2","evidence":["claim:pm-lhhnx9","claim:pm-t05d8d","lineage:pm-t05d8d","lineage:pm-ugqx","lineage:pm-doxj"]},"topic":{"value":"workset:pm-lhhnx9+pm-t05d8d","source":"inferred","confidence":"medium","rule_version":"v2","evidence":["claim:pm-lhhnx9","claim:pm-t05d8d","lineage:pm-t05d8d","lineage:pm-ugqx","lineage:pm-doxj"]}},"op":"update","patch":[{"op":"replace","path":"/metadata/updated_at","value":"2026-09-26T20:35:19.292Z"},{"op":"replace","path":"/metadata/status","value":"in_progress"}],"before_hash":"c54a64632bc5fe9b0e4cb6e6629fe35a7faa1c0a54cf602a817ae8abb4c977af","after_hash":"9e1d9ef25240c1165dc2eb7db3f8bb7dabca3d65279c5949626aa2ebfb85b3c6","item_hash_version":3,"context":{"agent_provenance_outcomes":{"model":{"status":"resolved","resolver":"codex_session_file","rule_version":"v1"},"effort":{"status":"resolved","resolver":"codex_session_file","rule_version":"v1"},"version":{"status":"unavailable","reason":"harness_unavailable","resolver":"ai_agent_version","rule_version":"v1"}}},"event_class":"substantive","record_hash_version":1,"record_hash":"aef0e8b584f9ea92f6dcc49fd28d6392c8aae07a3839f49e39e093eeb7e0984f"}
+{"hash_algorithm":"sha256","ts":"2026-09-26T20:39:23.664Z","author":"harness:codex","author_source":"detected","agent_harness":"codex","agent_model":"gpt-6-sol","agent_model_source":"probe","agent_instance":"1988a47670c5b401cd591f8d","agent_provenance":{"model":{"value":"gpt-6-sol","source":"probe"},"effort":{"value":"high","source":"probe"},"role":{"value":"implementer","source":"inferred","confidence":"medium","rule_version":"v2","evidence":["claim:pm-lhhnx9","claim:pm-t05d8d","lineage:pm-t05d8d","lineage:pm-ugqx","lineage:pm-doxj"]},"topic":{"value":"workset:pm-lhhnx9+pm-t05d8d","source":"inferred","confidence":"medium","rule_version":"v2","evidence":["claim:pm-lhhnx9","claim:pm-t05d8d","lineage:pm-t05d8d","lineage:pm-ugqx","lineage:pm-doxj"]}},"op":"note_add","patch":[{"op":"replace","path":"/metadata/updated_at","value":"2026-09-26T20:39:23.664Z"},{"op":"add","path":"/metadata/notes","value":[{"created_at":"2026-09-26T20:39:23.664Z","author":"harness:codex","text":"Investigation 2026-09-26: linked-test runner currently injects sandbox PM_PATH for every child; parser, item serialization, import normalization, SDK/CLI help, and execution receipts all model schema|tracker|auto. A no-inherited-PM_PATH mode must refuse source working-directory execution: nested pm commands would otherwise rediscover the real source tracker. Safer design is an explicit mode paired with a disposable snapshot or isolated working directory; snapshot retains package files and binds .agents/pm to a sandbox tracker while explicit SDK init cwd can select a new temp tracker. Preserve protected env keys and clone trust checks. No source implementation or acceptance proof yet."}]}],"before_hash":"9e1d9ef25240c1165dc2eb7db3f8bb7dabca3d65279c5949626aa2ebfb85b3c6","after_hash":"f8dbe1196b5c4c9105bace5c062e25cdbb1f32e3b95067e3b159d09fbf4e3a29","item_hash_version":3,"context":{"agent_provenance_outcomes":{"model":{"status":"resolved","resolver":"codex_session_file","rule_version":"v1"},"effort":{"status":"resolved","resolver":"codex_session_file","rule_version":"v1"},"version":{"status":"unavailable","reason":"harness_unavailable","resolver":"ai_agent_version","rule_version":"v1"}}},"event_class":"substantive","record_hash_version":1,"record_hash":"de1688d15b020dc489e5b1975b180e8a87ee2571c8a99a65eb2bca7926be8e88"}
+{"hash_algorithm":"sha256","ts":"2026-09-26T20:39:25.507Z","author":"harness:codex","author_source":"detected","agent_harness":"codex","agent_model":"gpt-6-sol","agent_model_source":"probe","agent_instance":"1988a47670c5b401cd591f8d","agent_provenance":{"model":{"value":"gpt-6-sol","source":"probe"},"effort":{"value":"high","source":"probe"},"role":{"value":"implementer","source":"inferred","confidence":"medium","rule_version":"v2","evidence":["claim:pm-lhhnx9","claim:pm-t05d8d","lineage:pm-t05d8d","lineage:pm-ugqx","lineage:pm-doxj"]},"topic":{"value":"workset:pm-lhhnx9+pm-t05d8d","source":"inferred","confidence":"medium","rule_version":"v2","evidence":["claim:pm-lhhnx9","claim:pm-t05d8d","lineage:pm-t05d8d","lineage:pm-ugqx","lineage:pm-doxj"]}},"op":"release","patch":[{"op":"remove","path":"/metadata/claim_principal"},{"op":"remove","path":"/metadata/assignee"},{"op":"replace","path":"/metadata/updated_at","value":"2026-09-26T20:39:25.507Z"}],"before_hash":"f8dbe1196b5c4c9105bace5c062e25cdbb1f32e3b95067e3b159d09fbf4e3a29","after_hash":"d8eeaab575ece66f2dae09999dbf3596448cb41cf3a6268c5d3101bc0c72bc12","item_hash_version":3,"context":{"agent_provenance_outcomes":{"model":{"status":"resolved","resolver":"codex_session_file","rule_version":"v1"},"effort":{"status":"resolved","resolver":"codex_session_file","rule_version":"v1"},"version":{"status":"unavailable","reason":"harness_unavailable","resolver":"ai_agent_version","rule_version":"v1"}}},"event_class":"maintenance","record_hash_version":1,"record_hash":"65602a7fff291f439774eb70d4dc6d9dbe060e7a10b6167d3df2c723124ba716"}
+{"hash_algorithm":"sha256","ts":"2026-09-26T20:39:34.483Z","author":"harness:codex","author_source":"detected","agent_harness":"codex","agent_model":"gpt-6-sol","agent_model_source":"probe","agent_instance":"1988a47670c5b401cd591f8d","agent_provenance":{"model":{"value":"gpt-6-sol","source":"probe"},"effort":{"value":"high","source":"probe"},"role":{"value":"release-operator","source":"inferred","confidence":"medium","rule_version":"v2","evidence":["claim:pm-lhhnx9","release:pm-t05d8d"]},"topic":{"value":"pm-lhhnx9","source":"inferred","confidence":"medium","rule_version":"v2","evidence":["claim:pm-lhhnx9","release:pm-t05d8d"]}},"op":"update","patch":[{"op":"replace","path":"/metadata/updated_at","value":"2026-09-26T20:39:34.483Z"},{"op":"replace","path":"/metadata/status","value":"open"}],"before_hash":"d8eeaab575ece66f2dae09999dbf3596448cb41cf3a6268c5d3101bc0c72bc12","after_hash":"f722b292e2b1ebb98beb9096fd7917512ada80124b068e0499590d81cbd34d06","item_hash_version":3,"context":{"agent_provenance_outcomes":{"model":{"status":"resolved","resolver":"codex_session_file","rule_version":"v1"},"effort":{"status":"resolved","resolver":"codex_session_file","rule_version":"v1"},"version":{"status":"unavailable","reason":"harness_unavailable","resolver":"ai_agent_version","rule_version":"v1"}}},"event_class":"substantive","record_hash_version":1,"record_hash":"fc7c39e2a19410b15a936ae08df8720e9d7235bda24e3e46a2f74e3c4b7cf567"}
+{"hash_algorithm":"sha256","ts":"2026-09-26T20:39:34.589Z","author":"harness:codex","author_source":"detected","agent_harness":"codex","agent_model":"gpt-6-sol","agent_model_source":"probe","agent_instance":"1988a47670c5b401cd591f8d","agent_provenance":{"model":{"value":"gpt-6-sol","source":"probe"},"effort":{"value":"high","source":"probe"},"role":{"value":"release-operator","source":"inferred","confidence":"medium","rule_version":"v2","evidence":["claim:pm-lhhnx9","release:pm-t05d8d"]},"topic":{"value":"pm-lhhnx9","source":"inferred","confidence":"medium","rule_version":"v2","evidence":["claim:pm-lhhnx9","release:pm-t05d8d"]}},"op":"release","patch":[{"op":"replace","path":"/metadata/updated_at","value":"2026-09-26T20:39:34.589Z"}],"before_hash":"f722b292e2b1ebb98beb9096fd7917512ada80124b068e0499590d81cbd34d06","after_hash":"9aa0e42e1a39322ef1231943c6116df4509d9f32e6744eadb57c99ae13bcaf91","item_hash_version":3,"context":{"agent_provenance_outcomes":{"model":{"status":"resolved","resolver":"codex_session_file","rule_version":"v1"},"effort":{"status":"resolved","resolver":"codex_session_file","rule_version":"v1"},"version":{"status":"unavailable","reason":"harness_unavailable","resolver":"ai_agent_version","rule_version":"v1"}}},"event_class":"maintenance","record_hash_version":1,"record_hash":"26a328f7d82603c54a571a9f7b76e4a7d400110e566504fc028c7f547a7d78f8"}
+{"hash_algorithm":"sha256","ts":"2026-09-26T22:18:49.678Z","author":"harness:codex","author_source":"detected","agent_harness":"codex","agent_model":"gpt-6-sol","agent_model_source":"probe","agent_instance":"1988a47670c5b401cd591f8d","agent_provenance":{"model":{"value":"gpt-6-sol","source":"probe"},"effort":{"value":"high","source":"probe"},"role":{"value":"implementer","source":"argv"},"topic":null},"op":"update","patch":[{"op":"add","path":"/metadata/dependencies/3","value":{"id":"pm-6pij","kind":"verifies","created_at":"2026-09-26T22:18:49.388Z","author":"harness:codex","source_kind":"cli:update:dep","author_source":"detected"}},{"op":"replace","path":"/metadata/updated_at","value":"2026-09-26T22:18:49.678Z"}],"before_hash":"9aa0e42e1a39322ef1231943c6116df4509d9f32e6744eadb57c99ae13bcaf91","after_hash":"10862d51e188543f721c1ad49fe4ddc5c9f5f7368a2931447e3a9f88df024a5c","item_hash_version":3,"message":"Link historical linked-test dataset parity guardrail cited by duplicate check","context":{"agent_provenance_outcomes":{"model":{"status":"resolved","resolver":"codex_session_file","rule_version":"v1"},"effort":{"status":"resolved","resolver":"codex_session_file","rule_version":"v1"},"version":{"status":"unavailable","reason":"harness_unavailable","resolver":"ai_agent_version","rule_version":"v1"}}},"event_class":"maintenance","record_hash_version":1,"record_hash":"14a1ceaa05d3209122af3705e20920fe2afc1e6b25ac2b537e7a5ba05d448db4"}