[unbraind]

Summary

• Enrich item-related onWrite hook contexts with item_id, item_type, before, after, and changed_fields for create/update/delete/restore/import writes while preserving existing minimal non-item write events.
• Add structured missing-capability activation traces and extension_capability_missing doctor remediation so package authors can fix manifest/API drift before publishing.
• Harden package-first dogfood with activation/blocking/missing-capability assertions and add a first-party manifest/API capability guard.
• Update commander to 15.0.0, refresh managed pm-changelog to 2026.6.3, and regenerate CHANGELOG.md.

Fixes #103.
Fixes #104.

Tracker: pm-e9ut

Verification

• pnpm build
• node scripts/run-tests.mjs test -- tests/unit/contracts-command.spec.ts tests/unit/help-runtime.spec.ts tests/unit/config-positional-value.spec.ts tests/unit/item-store.spec.ts tests/unit/extension-command.spec.ts tests/unit/package-manifest.spec.ts
• node scripts/run-tests.mjs test -- tests/unit/item-store.spec.ts tests/unit/extension-command.spec.ts tests/unit/package-manifest.spec.ts
• npm run dogfood:package-first
• pnpm audit --audit-level moderate && pnpm outdated --format json
• pnpm security:scan
• pnpm changelog:pm:check

Notes

• Auto Release run 26870058549 failed before release gates because SENTRY_PERSONAL_ADMIN_TOKEN is not configured for the scheduled push path; this is separate from the SDK/package fixes here.
• pm-changelog@2026.6.3 is the latest available package and owns the generated changelog path.