create-pmos 0.102.0 → 0.104.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-pmos",
-  "version": "0.102.0",
+  "version": "0.104.0",
   "description": "Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with all state as git-versioned files. Includes `workflow-sweep`, which audits the state every board derives from and separates real defects from work you simply have not done. `create-pmos workspace` also installs + launches the local Terminal Workspace GUI. No database, no network, no telemetry.",
   "license": "MIT",
   "bin": {

package/payload/KIT-VERSION

@@ -1,3 +1,3 @@
-kernel-source: pmos@6b369e8
+kernel-source: pmos@dd22f56
 assembled: 2026-10-08
 mode: vendor

package/payload/planning/evals/eval-calibration.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Eval calibration log"
 description: "Append-only record of every PM override of an evaluator verdict."
-generated: {by: process:create-pmos, at: "2026-10-08T00:36:21Z"}
+generated: {by: process:create-pmos, at: "2026-10-08T00:58:10Z"}
 status: stable
 ---
 

package/payload/planning/okrs/health-budgets.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Health budgets"
 description: "Closed registry of health-budget anchors (D59), edited only by the PM."
-generated: {by: process:create-pmos, at: "2026-10-08T00:36:21Z"}
+generated: {by: process:create-pmos, at: "2026-10-08T00:58:10Z"}
 status: stable
 ---
 

package/payload/state/discoveries.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Discoveries and friction log"
 description: "Append-only record of what runs discovered and where the process rubbed."
-generated: {by: process:create-pmos, at: "2026-10-08T00:36:21Z"}
+generated: {by: process:create-pmos, at: "2026-10-08T00:58:10Z"}
 status: stable
 ---
 

package/workspace/guide/layout.md

@@ -39,7 +39,7 @@ Settings holds settings only, in eight sections. On a wide screen they are cards
 - **Updates**: the version of the workspace app and the version of the kit in the current repository. Press **Check for updates** at the top of the page to compare them with the latest published version of PMOS. This is the only time the workspace asks the internet for a version, and it asks only when you press. When a newer version is available, one button shows: **Update to** and the version. It updates every part that is older, in this order:
   - **The kit** in the current repository, when it is older. This does what `npx create-pmos@latest --update` does in a terminal. It changes only the kit's own files under `pmos/` (skills, scripts, templates and guides). Your records in `state/`, `planning/` and `okf/product/` do not change. The last lines of the output show under the button. The changed files are under `pmos/`, which Sync treats as records, so Sync (or automatic sync) sends them with your other records. To read them first, look at `git diff pmos/` before you sync.
   - **The workspace app**, when it is older. This does what `pmos upgrade` does in a terminal. The button asks you first. The workspace stops, installs the new version and starts again, and the page reloads when the new version starts. The reloaded page runs the new version's code: each start gives the page files a new address, so neither the browser nor the Online address's tunnel can keep the old ones. You do not need a terminal or a hard refresh. Sessions keep running in tmux. It works on the computer that runs the workspace and at its Online address, because the page comes back there after the restart. It also works on a phone or public address that signs in with a token set in `PMOS_TOKEN`, which the workspace keeps. When the workspace made its own token at start, the token changes on the restart, so the page refuses and says where to press it. When the workspace runs from a PMOS checkout, update it with `git pull` instead.
-  - **Testing an update before it is published.** In a PMOS checkout, run `bash scripts/build-local-package.sh`. It builds the package that a publish would build, in `~/.pmos-local-package`, with a version newer than the published one, and prints the command that starts the workspace on it. That command sets `PMOS_UPDATE_SOURCE` to the package on the same computer: its folder, or the `.tgz` that `npm pack` makes. Then **Check for updates** reads that package's version and does not ask npm, and both updates install that package. The Updates card names the package it checks. A checkout may update the app this way. When the path is wrong, the card says why and does not fall back to npm. Unset the variable, or set it to `npm`, to use the registry again.
+  - **Testing an update before it is published.** In a PMOS checkout, run `bash scripts/build-local-package.sh`. It builds the package that a publish would build, in `~/.pmos-local-package`, with a version newer than the published one, and prints the command that starts the workspace on it. That command sets `PMOS_UPDATE_SOURCE` to the package on the same computer: its folder, or the `.tgz` that `npm pack` makes. Then **Check for updates** reads that package's version and does not ask npm, and both updates install that package. The Updates card names the package it checks, and the line under the buttons says "from the local package" after a check. There is no checkbox for this; the variable is the only switch. A checkout may update the app this way. When the path is wrong, the card says why and does not fall back to npm. Unset the variable, or set it to `npm`, to use the registry again.
 
   A new screen or a renamed menu comes with the workspace app, not with the kit.
 

package/workspace/lib/kit-update.js

@@ -166,20 +166,6 @@ async function latest({ exec = cp.execFile, source: src = source() } = {}) {
   return { ok: true, version: v };
 }
 
-/** Check the local repository's package version (for dev/testing without npm). Reads npm-pkg/package.json for kit. */
-function latestLocal({ repoRoot = null } = {}) {
-  try {
-    const pkgPath = path.join(String(repoRoot || ''), 'npm-pkg', 'package.json');
-    const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));
-    if (!pkg.version || !validVersion(pkg.version)) {
-      return { ok: false, error: 'Local package.json has no valid version' };
-    }
-    return { ok: true, version: pkg.version, source: 'local-git' };
-  } catch (e) {
-    return { ok: false, error: `Could not read local version: ${e.message}` };
-  }
-}
-
 /**
  * npm lists a new version in the check a moment before its download is served everywhere. A download asked for in that
  * gap answers 404, and npm's CDN keeps the 404 for up to five minutes (Cache-Control max-age=300), so the same press
@@ -264,4 +250,4 @@ function upgradeApp(root, { version, logFile, spawn = cp.spawn, env = updateEnv(
   }
 }
 
-module.exports = { PKG_NAME, cmpVer, notServedYet, validVersion, source, npxArgs, readKit, fromCheckout, status, compare, latest, latestLocal, updateKit, updateEnv, upgradeApp, whereFrom };
+module.exports = { PKG_NAME, cmpVer, notServedYet, validVersion, source, npxArgs, readKit, fromCheckout, status, compare, latest, updateKit, updateEnv, upgradeApp, whereFrom };

package/workspace/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "pmos-workspace",
-  "version": "0.102.0",
+  "version": "0.104.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "pmos-workspace",
-      "version": "0.102.0",
+      "version": "0.104.0",
       "license": "MIT",
       "dependencies": {
         "@xterm/addon-fit": "^0.11.0",

package/workspace/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pmos-workspace",
-  "version": "0.102.0",
+  "version": "0.104.0",
   "private": true,
   "description": "PMOS Terminal Workspace — local companion hosting real PTYs beside the library and gates (D62)",
   "license": "MIT",

package/workspace/public/pm/app.js

@@ -38,7 +38,6 @@ import { state, setState, subscribe, flush, FIXTURE, LEGACY_LAYOUT_FLAG } from '
 import { isMobile, mountMobile, applyMobile } from './mobile.js';
 /* The frame's parts (Run 3, slice 3A). Small modules with no effect at import: a fixture page loads them and calls none. */
 import { createTopbar, unsyncedOf } from './topbar.js';
-import { openView } from './panel-cockpit.js';
 import { createDockRail } from './dock.js';
 import { SEL, ensureComponentsCss, iconButton, menu, toast, sheet, button } from './primitives.js';
 import { ensureSprite } from './icons.js';
@@ -608,6 +607,8 @@ const frEnd = el('span', { class: 'fr-end', 'aria-hidden': 'true' });
 function setupFrame() {
   ensureComponentsCss();
   ensureSprite();
+  // panel-cockpit.js loads on first use: importing it statically here broke the legacy detail column's fold control (ui-test AC1)
+  const openView = (v) => import('./panel-cockpit.js').then((m) => m.openView(v));
   bar = createTopbar({ go, openPalette, openView, repoMenu, sync: runSync });
   document.addEventListener('pointerdown', (e) => { fr.downAt = e.target; }, true);
   dockRail = createDockRail({ open: openDock, resize: dockWidth });

package/workspace/public/pm/components.css

@@ -7421,7 +7421,7 @@
   margin-bottom: 16px;
   padding: 12px;
   background: var(--secondary);
-  border-radius: 4px;
+  border-radius: 8px;
   font-size: 13px;
 }
 .nt-detail-summary pre {
@@ -7444,7 +7444,7 @@
   padding: 12px;
   margin-bottom: 8px;
   background: var(--secondary);
-  border-radius: 4px;
+  border-radius: 8px;
   border-left: 3px solid var(--primary);
 }
 .nt-detail-action-text {

package/workspace/public/pm/dest-settings.js

@@ -395,9 +395,9 @@ function readKitStatus(ws, force) {
 
 const say = (fields) => { Object.assign(upd, fields); setState({}); };
 
-async function checkUpdates(ws, local) {
+async function checkUpdates(ws) {
   say({ phase: 'check', message: '', error: '', output: '' });
-  const j = await pmPost('/api/kit/check', { ws, local });
+  const j = await pmPost('/api/kit/check', { ws });
   if (j && j.ok !== false) {
     kitByWs.set(ws, { st: j, at: Date.now() });
     say({ phase: null, latest: j.latest, compare: { appBehind: !!j.appBehind, kitBehind: !!j.kitBehind }, source: j.source });
@@ -480,13 +480,9 @@ function updatesSection(scope) {
       onClick: () => updateAll(ws, app, { appBehind: !!cmp.appBehind, kitBehind: !!cmp.kitBehind && kitPresent }),
     })));
   }
-  kids.push(el('div', { class: 'fr-set__line' }, el('label', { class: 'fr-set__checkbox' },
-    el('input', { type: 'checkbox', checked: !!upd.checkLocal, onChange: (e) => { upd.checkLocal = e.target.checked; setState({}); } }),
-    el('span', null, 'Check local git version')
-  )));
   const line = upd.phase === 'check' ? P.updatesChecking : upd.phase === 'kit' ? P.updateKitBusy
     : upd.message ? upd.message : upd.latest ? (cmp.appBehind || cmp.kitBehind ? P.updatesLatest(upd.latest) : P.updatesCurrent(upd.latest)) : P.updatesNever;
-  const sourceNote = upd.source === 'local-git' ? ' (from local git)' : upd.source ? ` (from ${upd.source})` : '';
+  const sourceNote = upd.source === 'local' ? ' (from the local package)' : '';
   kids.push(el('p', { class: 'fr-set__note', role: 'status', 'aria-live': 'polite', 'data-fr': 'update-state' }, line + sourceNote));
   if (upd.error) kids.push(el('p', { class: 'fr-set__note fr-set__error', role: 'alert', 'data-fr': 'update-error' }, upd.error));
   if (upd.output) kids.push(el('pre', { class: 'fr-set__output', 'data-fr': 'update-output' }, upd.output));
@@ -500,7 +496,7 @@ function checkButton(scope) {
   const ws = wsOfRepo(repo) || wsOfRepo(activeProduct());
   return button({
     label: P.updatesCheck, variant: 'outline', size: 'sm', icon: 'refresh-cw', disabled: !!upd.phase || !ws,
-    attrs: { 'data-fr': 'check-updates' }, onClick: () => checkUpdates(ws, upd.checkLocal),
+    attrs: { 'data-fr': 'check-updates' }, onClick: () => checkUpdates(ws),
   });
 }
 

package/workspace/public/pm/panel-cockpit.js

@@ -124,12 +124,9 @@ export function mountView(host, tab) {
   if (!v) inner.appendChild(el('div', { style: 'color:var(--muted-foreground);font-size:12px' }, 'this view is not known to this version'));
   else if (board) {
     inner.style.maxWidth = 'none';
-    const ctx = { tab, view: tab.view, renderMode, ready: !v.mode || !!m, el, setChildren, state, setState, FIXTURE, openView, repo: currentProduct() };
-    board.renderBoard(inner, ctx)
-      .then((boardEl) => {
-        if (boardEl) setChildren(inner, [boardEl]);
-      })
-      .catch((e) => { console.error('[pm] board ' + tab.view + ' failed:', e); renderMode(inner); });
+    // a board draws into `inner` and returns nothing (view-notes.js, view-today.js …); calling .then on that threw
+    try { board.renderBoard(inner, { tab, view: tab.view, renderMode, ready: !v.mode || !!m, el, setChildren, state, setState, FIXTURE, openView, repo: currentProduct() }); }
+    catch (e) { console.error('[pm] board ' + tab.view + ' failed:', e); renderMode(inner); }
   } else if (boardMods[tab.view] === null) {
     // the board module is still loading: draw nothing rather than flash the old list
   } else if (m && typeof m.renderMode === 'function') {

package/workspace/public/pm/topbar.js

@@ -89,7 +89,7 @@ export function createTopbar({ go, openPalette, openView, repoMenu, sync } = {})
 
   const notes = button({
     label: 'Notes', variant: 'outline', icon: 'notebook-pen',
-    attrs: { class: 'fr-notes', 'data-fr-view': 'notes', title: 'Open notes menu (all notes by initiative)' },
+    attrs: { class: 'fr-notes', 'data-fr': 'notes', 'data-fr-view': 'notes', title: 'Open notes menu (all notes by initiative)' },
     onClick: () => openView && openView('notesmenu'),
   });
 

package/workspace/public/pm/view-notes-menu.js

@@ -42,7 +42,8 @@ async function loadNote(id) {
 function groupByInitiative(notes) {
   const groups = {};
   notes.forEach((n) => {
-    const key = n.initiative || '(no initiative)';
+    // a note's initiative is a link object ({ id, title, by }), never a bare string
+    const key = n.initiative ? (n.initiative.title || n.initiative.id) : '(no initiative)';
     if (!groups[key]) groups[key] = [];
     groups[key].push(n);
   });
@@ -54,11 +55,8 @@ function groupByInitiative(notes) {
 }
 
 function renderNoteRow(note, isSelected, onClick) {
-  const summaryLines = (note.summary_lines || []);
-  const summaryText = summaryLines
-    .slice(0, 2)
-    .join(' ')
-    .substring(0, 60);
+  // the list row carries summary_lines (up to three plain lines); its `summary` is only a has-a-summary flag
+  const summaryText = (note.summary_lines || []).slice(0, 2).join(' ').substring(0, 60);
 
   return el('div', {
     class: 'nt-menu-row' + (isSelected ? ' nt-menu-row--selected' : ''),
@@ -71,6 +69,13 @@ function renderNoteRow(note, isSelected, onClick) {
   );
 }
 
+/** The note's summary as plain text: the agent's markdown, else the local overview lines. */
+function summaryOf(note) {
+  if (note.agent && note.agent.markdown) return String(note.agent.markdown);
+  const ov = note.summary && note.summary.sections && note.summary.sections.overview;
+  return Array.isArray(ov) ? ov.map((x) => String((x && x.text) || '')).filter(Boolean).join('\n') : '';
+}
+
 function renderLeftPanel(notes, selectedId, onSelectNote, onToggleInitiative) {
   const groups = groupByInitiative(notes);
 
@@ -95,9 +100,11 @@ function renderLeftPanel(notes, selectedId, onSelectNote, onToggleInitiative) {
   );
 }
 
-export async function renderBoard(inner, ctx) {
+// the cockpit calls renderBoard(inner, ctx) and ignores what it returns: the view draws into `inner`
+export function renderBoard(inner, ctx) {
   ensureComponentsCss();
   const root = el('div', { class: 'nt-menu' });
+  inner.appendChild(root);
 
   async function render() {
     if (!list) await loadList();
@@ -139,7 +146,7 @@ export async function renderBoard(inner, ctx) {
                 el('div', { class: 'nt-detail-date' }, new Date(note.updated_at).toLocaleDateString()),
               ),
               el('div', { class: 'nt-detail-summary' },
-                note.summary ? el('pre', {}, note.summary) : el('p', { class: 'nt-hint' }, 'No summary yet'),
+                summaryOf(note) ? el('pre', {}, summaryOf(note)) : el('p', { class: 'nt-hint' }, 'No summary yet'),
               ),
               actions.length > 0 && el('div', { class: 'nt-detail-actions' },
                 el('div', { class: 'nt-detail-actions-title' }, 'Next steps'),
@@ -181,7 +188,5 @@ export async function renderBoard(inner, ctx) {
     setChildren(root, [leftPanel, rightPanel]);
   }
 
-  await render();
-  ctx.setState = (state) => { render(); };
-  return root;
+  render();
 }

package/workspace/run-tests.js

@@ -23,6 +23,11 @@
  * CI for the browser group on a PR (ci-browser-after-merge): every browser suite still runs after the
  * merge on main, and kit-publish waits for that run. See changedSuites() for the rule.
  *
+ * --skip-passed=FILE|DIR --since=SHA skips a suite FILE (or any file in DIR) lists as passed (an earlier run of the same PR wrote it with
+ * --passed-out) when the diff SHA..HEAD cannot reach it, by the same rule as --changed. So the next push of a PR runs
+ * the suites that failed and the suites its new commits reach, not the whole group again. A suite it skips is written
+ * to --passed-out too, so a pass carries forward to the run after. An empty or unknown SHA skips nothing.
+ *
  * Output: a suite's own output is buffered and printed whole when it finishes, so lines from two
  * suites never interleave. A passing suite prints its last lines; --verbose prints all of it.
  *
@@ -143,14 +148,15 @@ const WIDE = new Set([
  * name carries the changed file's stem with any panel-/view-/tab- prefix removed (view-memory.js ->
  * pm-r29-memory-test.js). It errs toward running MORE: a WIDE file, or a changed workspace file that
  * no suite can be traced to, selects the whole list. Returns { files, suites, why }. */
-function changedSuites(list, ref) {
+function changedSuites(list, ref, { exact = false } = {}) {
   const git = (...a) => {
     const r = require('child_process').spawnSync('git', a, { cwd: DIR, encoding: 'utf8' });
     return r.status === 0 ? r.stdout : null;
   };
   const top = (git('rev-parse', '--show-toplevel') || '').trim();
   if (!top) return { files: [], suites: list, why: 'not a git checkout, so every suite runs' };
-  const base = (git('merge-base', 'HEAD', ref) || '').trim();
+  // exact: diff from `ref` itself (an earlier head of this branch), not from its merge base
+  const base = exact ? ((git('rev-parse', '--verify', '--quiet', `${ref}^{commit}`) || '').trim()) : (git('merge-base', 'HEAD', ref) || '').trim();
   if (!base) return { files: [], suites: list, why: `no merge base with ${ref} (fetch it first), so every suite runs` };
   const prefix = path.relative(top, DIR).split(path.sep).join('/') + '/';
   const names = [
@@ -260,6 +266,24 @@ async function main() {
     list = pick.suites;
     if (!list.length) return;
   }
+  // --skip-passed / --since: suites that passed on an earlier head of this PR and that the new commits cannot reach
+  let carried = [];
+  const passedIn = flag('skip-passed'); const since = flag('since');
+  if (passedIn && passedIn !== true && since && since !== true) {
+    let before = [];
+    // a file, or a directory of the files every job of the earlier run wrote (CI downloads them into one)
+    const read = (f) => { try { return fs.readFileSync(f, 'utf8').split('\n').map((x) => x.trim()).filter(Boolean); } catch { return []; } };
+    try { before = fs.statSync(passedIn).isDirectory() ? fs.readdirSync(passedIn).flatMap((n) => read(path.join(passedIn, n))) : read(passedIn); } catch { /* no earlier run: skip nothing */ }
+    const reach = changedSuites(list, since, { exact: true });
+    const reached = new Set(reach.suites);
+    const known = !/no merge base|not a git checkout/.test(reach.why);
+    carried = known ? list.filter((f) => before.includes(f) && !reached.has(f)) : [];
+    console.log(`run-tests: --skip-passed since ${since.slice(0, 12)}: ${known ? reach.why : 'that commit is not in this checkout, so nothing is skipped'}. ${carried.length} suite(s) passed before and are not reached; ${list.length - carried.length} run.`);
+    list = list.filter((f) => !carried.includes(f));
+  }
+  const passedOut = flag('passed-out');
+  const writePassed = (ran) => { if (passedOut && passedOut !== true) fs.writeFileSync(passedOut, [...carried, ...ran.filter((r) => r.ok).map((r) => r.file)].join('\n') + '\n'); };
+  if (!list.length) { writePassed([]); console.log('run-tests: nothing left to run.'); return; }
   if (flag('list')) { console.log(list.join('\n')); return; }
   const cpus = typeof os.availableParallelism === 'function' ? os.availableParallelism() : os.cpus().length;
   // A browser suite runs a server, a tmux daemon and a Chromium of its own, and several of them assert
@@ -286,6 +310,7 @@ async function main() {
   const failed = results.filter((r) => !r.ok);
   const slowest = [...results].sort((a, b) => b.secs - a.secs).slice(0, 5).map((r) => `${r.file} ${r.secs}s`).join(', ');
   const timingsOut = flag('timings-out');
+  writePassed(results);
   if (timingsOut && timingsOut !== true) fs.writeFileSync(timingsOut, JSON.stringify(Object.fromEntries(results.map((r) => [r.file, r.secs])), null, 2));
   console.log(`\nrun-tests: ${results.length - failed.length}/${results.length} suites passed in ${((Date.now() - t0) / 1000).toFixed(1)}s wall. Slowest: ${slowest}.`);
   // exitCode, never process.exit(): stdout to a pipe is asynchronous, and exiting here cut the CI log

package/workspace/server.js

@@ -7334,7 +7334,7 @@ async function handleRequest(req, res) {
       const r = await kitUpdate.latest({ source: kitUpdate.source() });
       const now = st();
       if (!r.ok) return json(res, { ok: false, error: r.error, ws: w.id, ...now }, 502);
-      return json(res, { ok: true, ws: w.id, ...now, latest: r.version, source: r.source || 'npm', ...kitUpdate.compare(now, r.version) });
+      return json(res, { ok: true, ws: w.id, ...now, latest: r.version, source: r.source || 'registry', ...kitUpdate.compare(now, r.version) });
     }
     if (kitBusy) return json(res, { ok: false, error: kitBusy === 'app' ? 'The workspace is already updating' : 'A kit update is already running' }, 409);
     if (p === '/api/kit/update') {