fix: use TOON 0.6.1 quoting and certify PM CLI 2026.10.9

Merged
UN
12d ago
+361-59

toon-format 0.6.1 compiles but changes numeric decoding, causing all six Rust gates on dependency PR #70 to fail. Replace the decoder-based quote probe with the supported needs_quoting API: numeric-looking strings such as 05 keep their quotes, while 0. remains an unquoted string as measured in the published codec.

Pin the locked oracle and compatibility/release tooling to published latest @unbrained/pm-cli@2026.10.9. The original golden list and mutation fixtures remain unchanged. The new real-CLI regression compares complete item and history bytes across scalar fields, tag creation and a numeric-looking tabular comment. Strict document decoding remains enforced.

Owner: pm-rust-guou. Companion session pm-cli-website-session-2026-10-10 is linked through the companion tracker; the supplied session item was not on remote main during inspection.

Main roadmap: pm-rust-u4al. The new owner record is also reviewable at the candidate head; its canonical main link resolves after merge.

Validation:

  • PM-linked required mutation differential: both tests pass against the locked 2026.10.9 oracle.
  • Native-only fail-on-revert proof: restoring the decoder probe compiles, then the unchanged numeric-string differential fails at runtime with exit 101. Fixed source restored byte-for-byte.
  • Windows GNU all-target/all-feature cross-compilation passes.
  • PM-linked just release-check passes 208 ordinary and 208 instrumented tests, formatting, strict Clippy, private-item rustdoc, Cargo audit and changelog verification. Coverage is exactly 3050 lines, 4612 regions, 274 functions and 610 branches, all 100%; no exclusions or thresholds changed.
  • Changelog regenerated with the pinned policy; its bytes are unchanged. Strict check-only health with required merge drivers and separate PM validation pass with existing advisories.

This is the primary codec repair candidate. #68's Windows aggregate has a separate diagnostic-read coverage gap and retains its own branch/oracle. #67 has six green Rust gates but is behind main and lacks substantive exact-head review evidence; it remains open.

New synthetic findings remain separate follow-ups: pm-rust-mttg owns punctuation-bearing tag order and replacement patches; pm-rust-2ucz owns equal-timestamp comment ordering. Full CLI parity is not claimed. PM items remain open for orchestrator verification. No merge, bot request, tag, release or publication is performed.

Exact-head CI receipt: at 820025276e70e3c4c9509a4912ade21a0398b41f, run 38020461991 passes all six Rust gates across Ubuntu, macOS and Windows, plus CodeQL. The native Windows aggregate covers 3046/3046 lines, 4609/4609 regions, 274/274 functions and 610/610 branches. These are the four required 100% metrics; this receipt does not establish review approval or full CLI parity. The PR remains draft for orchestrator verification.