create-pmos 0.10.0 → 0.10.1

package/README.md

@@ -333,6 +333,24 @@ Refreshes the skills, concepts, and scripts only. Your records — `state/`, `pl
 `okf/product/` — are yours, and an update never touches them. `pmos/KIT-VERSION` always says
 exactly what you're running.
 
+## What's new in 0.10.1
+
+**Two fixes found by installing 0.10.0 and using it, rather than by reading the code.**
+
+- **Upgrades will keep reaching you.** The launcher decides whether to reinstall the workspace by
+  comparing the app version it bundles against the one you have. 0.10.0 shipped the *kit* at 0.10.0
+  but the bundled app still labelled **0.9.1** — so the next release would have compared equal,
+  decided you were current, and **silently skipped the upgrade**. Which is precisely the failure
+  0.9.1 existed to fix. The two versions are now checked against each other by the test suite, so it
+  cannot drift again unnoticed.
+- **Alignment no longer offers to edit its own notes.** The change-context digest quotes every change
+  you make, so it matched the "quotes text this change altered" rule on the very first save in any
+  repository — and topped the list of documents to realign. A generated file proposing to realign
+  itself. Machine-written state is now excluded from alignment entirely.
+
+If you installed 0.10.0, run `npx create-pmos@latest workspace` once. Nothing was damaged by either
+bug; the first would have cost you a future upgrade, and the second a confusing first suggestion.
+
 ## What's new in 0.10.0
 
 **Editing a document now does something for the rest of them.**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-pmos",
-  "version": "0.10.0",
+  "version": "0.10.1",
   "description": "Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with all state as git-versioned files. `create-pmos workspace` also installs + launches the local Terminal Workspace GUI. No database, no network, no telemetry.",
   "license": "MIT",
   "bin": {

package/payload/KIT-VERSION

@@ -1,3 +1,3 @@
-kernel-source: pmos@1771814
+kernel-source: pmos@84f5b38
 assembled: 2026-07-28
 mode: vendor

package/workspace/lib/layout.js

@@ -163,9 +163,25 @@
     return { layouts, currentId: DEFAULT_ID };
   }
 
+  /* What a GET /api/layouts response entitles the client to DO. Split out as a pure function
+     because the original inline condition conflated two very different states — "this workspace
+     has never stored a layout" and "I could not read what it stored" — and answered both by
+     migrating and then WRITING, silently replacing a real stored document whenever a read failed.
+     A read failure must never author a write.
+
+       'migrate' — the server affirmatively says nothing is stored (first run here): R8 applies.
+       'use'     — a stored document came back: adopt it.
+       'keep'    — the answer is unusable (transport error, non-JSON, !ok, or no `stored` flag).
+                   Hold the boot defaults in memory and WRITE NOTHING. */
+  function loadAction(doc) {
+    if (!doc || doc.ok !== true || typeof doc.stored !== 'boolean') return 'keep';
+    return doc.stored ? 'use' : 'migrate';
+  }
+
   return {
     SIDE, READER, SPLIT, FOLD_KEYS, STOCK_IDS, DEFAULT_ID,
     SIDE_MIN, SIDE_MAX, READ_MIN, READ_MAX, BOTTOM_H,
     isStock, stockLayout, stockLayouts, layout, sanitize, gridFor, hasEscape, migrateLegacy,
+    loadAction,
   };
 });

package/workspace/package.json

@@ -1,17 +1,21 @@
 {
   "name": "pmos-workspace",
-  "version": "0.9.1",
+  "version": "0.10.1",
   "private": true,
   "description": "PMOS Terminal Workspace — local companion hosting real PTYs beside the library and gates (D62)",
   "license": "MIT",
-  "bin": { "pmos": "bin/pmos.js" },
+  "bin": {
+    "pmos": "bin/pmos.js"
+  },
   "scripts": {
     "start": "node server.js",
     "test": "node test.js",
     "test:ui": "node ui-test.js",
     "doctor": "node doctor.js"
   },
-  "engines": { "node": ">=18" },
+  "engines": {
+    "node": ">=18"
+  },
   "dependencies": {
     "@xterm/addon-fit": "^0.11.0",
     "@xterm/addon-web-links": "^0.12.0",

package/workspace/public/app.js

@@ -1059,7 +1059,13 @@ async function loadLayouts() {
     const r = await fetch('/api/layouts?ws=' + encodeURIComponent(state.wsId || ''));
     doc = await r.json();
   } catch { doc = null; }
-  if (!doc || !doc.ok || !Array.isArray(doc.layouts) || !doc.layouts.length) {
+  // A read failure must never author a write. loadAction() is the one place that decides, and it
+  // only says 'migrate' when the SERVER affirmatively reports nothing stored — never because the
+  // answer was unreadable. Anything unusable is 'keep': show the boot defaults, persist nothing,
+  // and leave whatever is on disk exactly as it is until a load succeeds.
+  const act = LAY.loadAction(doc);
+  if (act === 'keep') return;
+  if (act === 'migrate') {
     // R8 — a workspace with nothing stored inherits whatever the PM had already tuned by hand
     // in the pre-feature client, so the upgrade never costs them their rail width.
     const legacy = {};

package/workspace/server.js

@@ -225,6 +225,9 @@ function wsList() {
   }));
 }
 const SKIP_DIRS = new Set(['node_modules', 'dist', 'build', 'vendor', 'target', 'coverage', '.git', 'tmp', 'out']);
+// The directories stateDirFor() resolves to. Their contents are machine-written runtime and curated
+// records — never documents alignment should offer to edit.
+const STATE_DIR_NAMES = new Set(['state', '.pmos']);
 const PLAIN_MAX_DEPTH = 3;      // the curated (knowledge) view stays shallow
 const TREE_MAX_DEPTH = 6;       // the folder lens is a real explorer, but bounded on huge/slow repos
 const TREE_MAX_NODES = 4000;    // …and node-budgeted so a giant repo (or Google Drive) never hangs
@@ -317,6 +320,11 @@ function markdownDocs(root, limit = 800) {
       if (e.name.startsWith('.') || SKIP_DIRS.has(e.name)) continue;
       const full = path.join(dir, e.name);
       const r = rel ? rel + '/' + e.name : e.name;
+      // Machine-written state is not a document the PM maintains, and alignment must never propose
+      // realigning it. change-context.md in particular QUOTES every change, so it matches the
+      // quoted-text rule on the first save in any repository and would top the candidate list —
+      // a generated file suggesting itself, found by installing the published artifact and using it.
+      if (STATE_DIR_NAMES.has(e.name)) continue;
       if (e.isDirectory()) walk(full, r, depth + 1);
       else if (preview.previewKind(e.name) === 'markdown') out.push(r);
     }
@@ -1510,11 +1518,17 @@ const LAYOUT_MAX = 40_000;
 function layoutPath(w) { return w ? path.join(LAYOUT_DIR, w.id + '.json') : null; }
 // Always returns a usable document: an absent, empty, truncated or hand-mangled file yields the
 // four stock layouts rather than an error, because the alternative is a window the PM cannot use.
+// `stored` is the client's ONLY safe signal that R8's one-time migration should run. sanitize()
+// always yields the four stock layouts, so the response body alone cannot distinguish "this
+// workspace has never stored anything" from "I could not read what it stored" — and the client
+// answers those two cases very differently (one writes, one must not). A file that exists but is
+// corrupt still counts as stored: this workspace has been through the layout system, so replaying
+// the pre-feature localStorage over it would be a second loss, not a recovery.
 function readLayouts(w) {
   const f = layoutPath(w);
   let raw = null;
   if (f) { try { raw = fs.readFileSync(f, 'utf8'); } catch { raw = null; } }
-  return layoutModel.sanitize(raw);
+  return Object.assign(layoutModel.sanitize(raw), { stored: raw !== null });
 }
 function writeLayouts(w, doc) {
   const f = layoutPath(w);
@@ -2122,7 +2136,7 @@ async function handleRequest(req, res) {
     const w = getWs(url.searchParams.get('ws'));
     if (!w) return json(res, { ok: false, error: 'no workspace' }, 404);
     const doc = readLayouts(w);
-    return json(res, { ok: true, layouts: doc.layouts, currentId: doc.currentId });
+    return json(res, { ok: true, layouts: doc.layouts, currentId: doc.currentId, stored: doc.stored });
   }
   if (p === '/api/doc') {
     const w = getWs(url.searchParams.get('ws'));