create-pmos 0.101.0 → 0.103.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-pmos",
-  "version": "0.101.0",
+  "version": "0.103.0",
   "description": "Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with all state as git-versioned files. Includes `workflow-sweep`, which audits the state every board derives from and separates real defects from work you simply have not done. `create-pmos workspace` also installs + launches the local Terminal Workspace GUI. No database, no network, no telemetry.",
   "license": "MIT",
   "bin": {

package/payload/KIT-VERSION

@@ -1,3 +1,3 @@
-kernel-source: pmos@14f4c98
+kernel-source: pmos@3d2d579
 assembled: 2026-10-08
 mode: vendor

package/payload/planning/evals/eval-calibration.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Eval calibration log"
 description: "Append-only record of every PM override of an evaluator verdict."
-generated: {by: process:create-pmos, at: "2026-10-08T00:30:09Z"}
+generated: {by: process:create-pmos, at: "2026-10-08T00:46:10Z"}
 status: stable
 ---
 

package/payload/planning/okrs/health-budgets.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Health budgets"
 description: "Closed registry of health-budget anchors (D59), edited only by the PM."
-generated: {by: process:create-pmos, at: "2026-10-08T00:30:09Z"}
+generated: {by: process:create-pmos, at: "2026-10-08T00:46:10Z"}
 status: stable
 ---
 

package/payload/state/discoveries.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Discoveries and friction log"
 description: "Append-only record of what runs discovered and where the process rubbed."
-generated: {by: process:create-pmos, at: "2026-10-08T00:30:09Z"}
+generated: {by: process:create-pmos, at: "2026-10-08T00:46:10Z"}
 status: stable
 ---
 

package/workspace/lib/kit-update.js

@@ -166,6 +166,20 @@ async function latest({ exec = cp.execFile, source: src = source() } = {}) {
   return { ok: true, version: v };
 }
 
+/** Check the local repository's package version (for dev/testing without npm). Reads npm-pkg/package.json for kit. */
+function latestLocal({ repoRoot = null } = {}) {
+  try {
+    const pkgPath = path.join(String(repoRoot || ''), 'npm-pkg', 'package.json');
+    const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));
+    if (!pkg.version || !validVersion(pkg.version)) {
+      return { ok: false, error: 'Local package.json has no valid version' };
+    }
+    return { ok: true, version: pkg.version, source: 'local-git' };
+  } catch (e) {
+    return { ok: false, error: `Could not read local version: ${e.message}` };
+  }
+}
+
 /**
  * npm lists a new version in the check a moment before its download is served everywhere. A download asked for in that
  * gap answers 404, and npm's CDN keeps the 404 for up to five minutes (Cache-Control max-age=300), so the same press
@@ -250,4 +264,4 @@ function upgradeApp(root, { version, logFile, spawn = cp.spawn, env = updateEnv(
   }
 }
 
-module.exports = { PKG_NAME, cmpVer, notServedYet, validVersion, source, npxArgs, readKit, fromCheckout, status, compare, latest, updateKit, updateEnv, upgradeApp, whereFrom };
+module.exports = { PKG_NAME, cmpVer, notServedYet, validVersion, source, npxArgs, readKit, fromCheckout, status, compare, latest, latestLocal, updateKit, updateEnv, upgradeApp, whereFrom };

package/workspace/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "pmos-workspace",
-  "version": "0.101.0",
+  "version": "0.103.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "pmos-workspace",
-      "version": "0.101.0",
+      "version": "0.103.0",
       "license": "MIT",
       "dependencies": {
         "@xterm/addon-fit": "^0.11.0",

package/workspace/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pmos-workspace",
-  "version": "0.101.0",
+  "version": "0.103.0",
   "private": true,
   "description": "PMOS Terminal Workspace — local companion hosting real PTYs beside the library and gates (D62)",
   "license": "MIT",

package/workspace/public/pm/app.js

@@ -38,7 +38,6 @@ import { state, setState, subscribe, flush, FIXTURE, LEGACY_LAYOUT_FLAG } from '
 import { isMobile, mountMobile, applyMobile } from './mobile.js';
 /* The frame's parts (Run 3, slice 3A). Small modules with no effect at import: a fixture page loads them and calls none. */
 import { createTopbar, unsyncedOf } from './topbar.js';
-import { openView } from './panel-cockpit.js';
 import { createDockRail } from './dock.js';
 import { SEL, ensureComponentsCss, iconButton, menu, toast, sheet, button } from './primitives.js';
 import { ensureSprite } from './icons.js';
@@ -608,6 +607,8 @@ const frEnd = el('span', { class: 'fr-end', 'aria-hidden': 'true' });
 function setupFrame() {
   ensureComponentsCss();
   ensureSprite();
+  // panel-cockpit.js loads on first use: importing it statically here broke the legacy detail column's fold control (ui-test AC1)
+  const openView = (v) => import('./panel-cockpit.js').then((m) => m.openView(v));
   bar = createTopbar({ go, openPalette, openView, repoMenu, sync: runSync });
   document.addEventListener('pointerdown', (e) => { fr.downAt = e.target; }, true);
   dockRail = createDockRail({ open: openDock, resize: dockWidth });

package/workspace/public/pm/components.css

@@ -7421,7 +7421,7 @@
   margin-bottom: 16px;
   padding: 12px;
   background: var(--secondary);
-  border-radius: 4px;
+  border-radius: 8px;
   font-size: 13px;
 }
 .nt-detail-summary pre {
@@ -7444,7 +7444,7 @@
   padding: 12px;
   margin-bottom: 8px;
   background: var(--secondary);
-  border-radius: 4px;
+  border-radius: 8px;
   border-left: 3px solid var(--primary);
 }
 .nt-detail-action-text {

package/workspace/public/pm/dest-settings.js

@@ -395,12 +395,12 @@ function readKitStatus(ws, force) {
 
 const say = (fields) => { Object.assign(upd, fields); setState({}); };
 
-async function checkUpdates(ws) {
+async function checkUpdates(ws, local) {
   say({ phase: 'check', message: '', error: '', output: '' });
-  const j = await pmPost('/api/kit/check', { ws });
+  const j = await pmPost('/api/kit/check', { ws, local });
   if (j && j.ok !== false) {
     kitByWs.set(ws, { st: j, at: Date.now() });
-    say({ phase: null, latest: j.latest, compare: { appBehind: !!j.appBehind, kitBehind: !!j.kitBehind } });
+    say({ phase: null, latest: j.latest, compare: { appBehind: !!j.appBehind, kitBehind: !!j.kitBehind }, source: j.source });
   } else say({ phase: null, error: (j && j.error) || P.updateFailed });
 }
 
@@ -480,9 +480,14 @@ function updatesSection(scope) {
       onClick: () => updateAll(ws, app, { appBehind: !!cmp.appBehind, kitBehind: !!cmp.kitBehind && kitPresent }),
     })));
   }
+  kids.push(el('div', { class: 'fr-set__line' }, el('label', { class: 'fr-set__checkbox' },
+    el('input', { type: 'checkbox', checked: !!upd.checkLocal, onChange: (e) => { upd.checkLocal = e.target.checked; setState({}); } }),
+    el('span', null, 'Check local git version')
+  )));
   const line = upd.phase === 'check' ? P.updatesChecking : upd.phase === 'kit' ? P.updateKitBusy
     : upd.message ? upd.message : upd.latest ? (cmp.appBehind || cmp.kitBehind ? P.updatesLatest(upd.latest) : P.updatesCurrent(upd.latest)) : P.updatesNever;
-  kids.push(el('p', { class: 'fr-set__note', role: 'status', 'aria-live': 'polite', 'data-fr': 'update-state' }, line));
+  const sourceNote = upd.source === 'local-git' ? ' (from local git)' : upd.source ? ` (from ${upd.source})` : '';
+  kids.push(el('p', { class: 'fr-set__note', role: 'status', 'aria-live': 'polite', 'data-fr': 'update-state' }, line + sourceNote));
   if (upd.error) kids.push(el('p', { class: 'fr-set__note fr-set__error', role: 'alert', 'data-fr': 'update-error' }, upd.error));
   if (upd.output) kids.push(el('pre', { class: 'fr-set__output', 'data-fr': 'update-output' }, upd.output));
   kids.push(el('p', { class: 'fr-set__note' }, P.updatesNote));
@@ -495,7 +500,7 @@ function checkButton(scope) {
   const ws = wsOfRepo(repo) || wsOfRepo(activeProduct());
   return button({
     label: P.updatesCheck, variant: 'outline', size: 'sm', icon: 'refresh-cw', disabled: !!upd.phase || !ws,
-    attrs: { 'data-fr': 'check-updates' }, onClick: () => checkUpdates(ws),
+    attrs: { 'data-fr': 'check-updates' }, onClick: () => checkUpdates(ws, upd.checkLocal),
   });
 }
 

package/workspace/public/pm/panel-cockpit.js

@@ -124,6 +124,7 @@ export function mountView(host, tab) {
   if (!v) inner.appendChild(el('div', { style: 'color:var(--muted-foreground);font-size:12px' }, 'this view is not known to this version'));
   else if (board) {
     inner.style.maxWidth = 'none';
+    // a board draws into `inner` and returns nothing (view-notes.js, view-today.js …); calling .then on that threw
     try { board.renderBoard(inner, { tab, view: tab.view, renderMode, ready: !v.mode || !!m, el, setChildren, state, setState, FIXTURE, openView, repo: currentProduct() }); }
     catch (e) { console.error('[pm] board ' + tab.view + ' failed:', e); renderMode(inner); }
   } else if (boardMods[tab.view] === null) {

package/workspace/public/pm/topbar.js

@@ -89,7 +89,7 @@ export function createTopbar({ go, openPalette, openView, repoMenu, sync } = {})
 
   const notes = button({
     label: 'Notes', variant: 'outline', icon: 'notebook-pen',
-    attrs: { class: 'fr-notes', 'data-fr-view': 'notes', title: 'Open notes menu (all notes by initiative)' },
+    attrs: { class: 'fr-notes', 'data-fr': 'notes', 'data-fr-view': 'notes', title: 'Open notes menu (all notes by initiative)' },
     onClick: () => openView && openView('notesmenu'),
   });
 

package/workspace/public/pm/view-notes-menu.js

@@ -42,7 +42,8 @@ async function loadNote(id) {
 function groupByInitiative(notes) {
   const groups = {};
   notes.forEach((n) => {
-    const key = n.initiative || '(no initiative)';
+    // a note's initiative is a link object ({ id, title, by }), never a bare string
+    const key = n.initiative ? (n.initiative.title || n.initiative.id) : '(no initiative)';
     if (!groups[key]) groups[key] = [];
     groups[key].push(n);
   });
@@ -54,14 +55,8 @@ function groupByInitiative(notes) {
 }
 
 function renderNoteRow(note, isSelected, onClick) {
-  const summary = note.summary || '';
-  const summaryText = summary
-    .split('\n')
-    .slice(0, 2)
-    .map((line) => line.trim())
-    .filter(Boolean)
-    .join(' ')
-    .substring(0, 60);
+  // the list row carries summary_lines (up to three plain lines); its `summary` is only a has-a-summary flag
+  const summaryText = (note.summary_lines || []).slice(0, 2).join(' ').substring(0, 60);
 
   return el('div', {
     class: 'nt-menu-row' + (isSelected ? ' nt-menu-row--selected' : ''),
@@ -74,6 +69,13 @@ function renderNoteRow(note, isSelected, onClick) {
   );
 }
 
+/** The note's summary as plain text: the agent's markdown, else the local overview lines. */
+function summaryOf(note) {
+  if (note.agent && note.agent.markdown) return String(note.agent.markdown);
+  const ov = note.summary && note.summary.sections && note.summary.sections.overview;
+  return Array.isArray(ov) ? ov.map((x) => String((x && x.text) || '')).filter(Boolean).join('\n') : '';
+}
+
 function renderLeftPanel(notes, selectedId, onSelectNote, onToggleInitiative) {
   const groups = groupByInitiative(notes);
 
@@ -98,9 +100,11 @@ function renderLeftPanel(notes, selectedId, onSelectNote, onToggleInitiative) {
   );
 }
 
-export async function renderBoard(inner, ctx) {
+// the cockpit calls renderBoard(inner, ctx) and ignores what it returns: the view draws into `inner`
+export function renderBoard(inner, ctx) {
   ensureComponentsCss();
   const root = el('div', { class: 'nt-menu' });
+  inner.appendChild(root);
 
   async function render() {
     if (!list) await loadList();
@@ -142,7 +146,7 @@ export async function renderBoard(inner, ctx) {
                 el('div', { class: 'nt-detail-date' }, new Date(note.updated_at).toLocaleDateString()),
               ),
               el('div', { class: 'nt-detail-summary' },
-                note.summary ? el('pre', {}, note.summary) : el('p', { class: 'nt-hint' }, 'No summary yet'),
+                summaryOf(note) ? el('pre', {}, summaryOf(note)) : el('p', { class: 'nt-hint' }, 'No summary yet'),
               ),
               actions.length > 0 && el('div', { class: 'nt-detail-actions' },
                 el('div', { class: 'nt-detail-actions-title' }, 'Next steps'),
@@ -184,7 +188,5 @@ export async function renderBoard(inner, ctx) {
     setChildren(root, [leftPanel, rightPanel]);
   }
 
-  await render();
-  ctx.setState = (state) => { render(); };
-  return root;
+  render();
 }

package/workspace/run-tests.js

@@ -23,6 +23,11 @@
  * CI for the browser group on a PR (ci-browser-after-merge): every browser suite still runs after the
  * merge on main, and kit-publish waits for that run. See changedSuites() for the rule.
  *
+ * --skip-passed=FILE|DIR --since=SHA skips a suite FILE (or any file in DIR) lists as passed (an earlier run of the same PR wrote it with
+ * --passed-out) when the diff SHA..HEAD cannot reach it, by the same rule as --changed. So the next push of a PR runs
+ * the suites that failed and the suites its new commits reach, not the whole group again. A suite it skips is written
+ * to --passed-out too, so a pass carries forward to the run after. An empty or unknown SHA skips nothing.
+ *
  * Output: a suite's own output is buffered and printed whole when it finishes, so lines from two
  * suites never interleave. A passing suite prints its last lines; --verbose prints all of it.
  *
@@ -143,14 +148,15 @@ const WIDE = new Set([
  * name carries the changed file's stem with any panel-/view-/tab- prefix removed (view-memory.js ->
  * pm-r29-memory-test.js). It errs toward running MORE: a WIDE file, or a changed workspace file that
  * no suite can be traced to, selects the whole list. Returns { files, suites, why }. */
-function changedSuites(list, ref) {
+function changedSuites(list, ref, { exact = false } = {}) {
   const git = (...a) => {
     const r = require('child_process').spawnSync('git', a, { cwd: DIR, encoding: 'utf8' });
     return r.status === 0 ? r.stdout : null;
   };
   const top = (git('rev-parse', '--show-toplevel') || '').trim();
   if (!top) return { files: [], suites: list, why: 'not a git checkout, so every suite runs' };
-  const base = (git('merge-base', 'HEAD', ref) || '').trim();
+  // exact: diff from `ref` itself (an earlier head of this branch), not from its merge base
+  const base = exact ? ((git('rev-parse', '--verify', '--quiet', `${ref}^{commit}`) || '').trim()) : (git('merge-base', 'HEAD', ref) || '').trim();
   if (!base) return { files: [], suites: list, why: `no merge base with ${ref} (fetch it first), so every suite runs` };
   const prefix = path.relative(top, DIR).split(path.sep).join('/') + '/';
   const names = [
@@ -260,6 +266,24 @@ async function main() {
     list = pick.suites;
     if (!list.length) return;
   }
+  // --skip-passed / --since: suites that passed on an earlier head of this PR and that the new commits cannot reach
+  let carried = [];
+  const passedIn = flag('skip-passed'); const since = flag('since');
+  if (passedIn && passedIn !== true && since && since !== true) {
+    let before = [];
+    // a file, or a directory of the files every job of the earlier run wrote (CI downloads them into one)
+    const read = (f) => { try { return fs.readFileSync(f, 'utf8').split('\n').map((x) => x.trim()).filter(Boolean); } catch { return []; } };
+    try { before = fs.statSync(passedIn).isDirectory() ? fs.readdirSync(passedIn).flatMap((n) => read(path.join(passedIn, n))) : read(passedIn); } catch { /* no earlier run: skip nothing */ }
+    const reach = changedSuites(list, since, { exact: true });
+    const reached = new Set(reach.suites);
+    const known = !/no merge base|not a git checkout/.test(reach.why);
+    carried = known ? list.filter((f) => before.includes(f) && !reached.has(f)) : [];
+    console.log(`run-tests: --skip-passed since ${since.slice(0, 12)}: ${known ? reach.why : 'that commit is not in this checkout, so nothing is skipped'}. ${carried.length} suite(s) passed before and are not reached; ${list.length - carried.length} run.`);
+    list = list.filter((f) => !carried.includes(f));
+  }
+  const passedOut = flag('passed-out');
+  const writePassed = (ran) => { if (passedOut && passedOut !== true) fs.writeFileSync(passedOut, [...carried, ...ran.filter((r) => r.ok).map((r) => r.file)].join('\n') + '\n'); };
+  if (!list.length) { writePassed([]); console.log('run-tests: nothing left to run.'); return; }
   if (flag('list')) { console.log(list.join('\n')); return; }
   const cpus = typeof os.availableParallelism === 'function' ? os.availableParallelism() : os.cpus().length;
   // A browser suite runs a server, a tmux daemon and a Chromium of its own, and several of them assert
@@ -286,6 +310,7 @@ async function main() {
   const failed = results.filter((r) => !r.ok);
   const slowest = [...results].sort((a, b) => b.secs - a.secs).slice(0, 5).map((r) => `${r.file} ${r.secs}s`).join(', ');
   const timingsOut = flag('timings-out');
+  writePassed(results);
   if (timingsOut && timingsOut !== true) fs.writeFileSync(timingsOut, JSON.stringify(Object.fromEntries(results.map((r) => [r.file, r.secs])), null, 2));
   console.log(`\nrun-tests: ${results.length - failed.length}/${results.length} suites passed in ${((Date.now() - t0) / 1000).toFixed(1)}s wall. Slowest: ${slowest}.`);
   // exitCode, never process.exit(): stdout to a pipe is asynchronous, and exiting here cut the CI log

package/workspace/server.js

@@ -7329,12 +7329,12 @@ async function handleRequest(req, res) {
     // the page did not show.
     const w = body.ws ? workspaces.get(String(body.ws)) : null;
     if (!w) return json(res, { ok: false, error: 'no such workspace' }, 400);
-    const st = () => kitUpdate.status({ root: w.root, appVersion: APP_VERSION, appDir: __dirname });
+    const st = () => kitUpdate.status({ root: w.root, appVersion: APP_VERSION, appDir: __dirname, env: process.env });
     if (p === '/api/kit/check') {
       const r = await kitUpdate.latest({ source: kitUpdate.source() });
       const now = st();
       if (!r.ok) return json(res, { ok: false, error: r.error, ws: w.id, ...now }, 502);
-      return json(res, { ok: true, ws: w.id, ...now, latest: r.version, ...kitUpdate.compare(now, r.version) });
+      return json(res, { ok: true, ws: w.id, ...now, latest: r.version, source: r.source || 'npm', ...kitUpdate.compare(now, r.version) });
     }
     if (kitBusy) return json(res, { ok: false, error: kitBusy === 'app' ? 'The workspace is already updating' : 'A kit update is already running' }, 409);
     if (p === '/api/kit/update') {