create-pmos 0.108.0 → 0.109.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-pmos",
-  "version": "0.108.0",
+  "version": "0.109.0",
   "description": "Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with all state as git-versioned files. Includes `workflow-sweep`, which audits the state every board derives from and separates real defects from work you simply have not done. `create-pmos workspace` also installs + launches the local Terminal Workspace GUI. No database, no network, no telemetry.",
   "license": "MIT",
   "bin": {

package/payload/KIT-VERSION

@@ -1,3 +1,3 @@
-kernel-source: pmos@709789c
+kernel-source: pmos@3e0aefb
 assembled: 2026-10-08
 mode: vendor

package/payload/planning/evals/eval-calibration.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Eval calibration log"
 description: "Append-only record of every PM override of an evaluator verdict."
-generated: {by: process:create-pmos, at: "2026-10-08T03:03:28Z"}
+generated: {by: process:create-pmos, at: "2026-10-08T03:57:21Z"}
 status: stable
 ---
 

package/payload/planning/okrs/health-budgets.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Health budgets"
 description: "Closed registry of health-budget anchors (D59), edited only by the PM."
-generated: {by: process:create-pmos, at: "2026-10-08T03:03:28Z"}
+generated: {by: process:create-pmos, at: "2026-10-08T03:57:21Z"}
 status: stable
 ---
 

package/payload/state/discoveries.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Discoveries and friction log"
 description: "Append-only record of what runs discovered and where the process rubbed."
-generated: {by: process:create-pmos, at: "2026-10-08T03:03:28Z"}
+generated: {by: process:create-pmos, at: "2026-10-08T03:57:21Z"}
 status: stable
 ---
 

package/workspace/guide/layout.md

@@ -2,7 +2,7 @@
 type: Guide
 title: "Guide: layout"
 description: "The frame: one top bar, the place on screen, the detail and the agent dock; the phone tabs and lists; the keys; and the older layout."
-timestamp: 2026-10-07
+timestamp: 2026-10-08
 ---
 
 # Guide: layout
@@ -31,7 +31,7 @@ Settings holds settings only, in eight sections. On a wide screen they are cards
 
 - **Repositories**: every registered repository. Press a repository to make it the current one. Press its ⋯ for **Rename** or **Remove from PMOS**. Each asks in a sheet, and a remove asks you to confirm. **Add repository** shows the scan of a folder before you add it.
 - **Profiles**: the Claude profiles a session can start with. These are the descriptors in `~/.claude/profiles`, and also the profiles you already run: a shell command that sets `CLAUDE_CONFIG_DIR` (for example `alias claude-work='CLAUDE_CONFIG_DIR=~/.claude-work claude'`), a launcher script named `claude-*`, or a config folder such as `~/.claude-work`. Each profile is a row with a **Detected** badge when PMOS found it rather than wrote it, and a **Default** badge when it is the default. Its ⋯ menu has **Use as default**. A profile found this way says where it was found, and a session under it sets only `CLAUDE_CONFIG_DIR`. The list reads again every few seconds while Settings is open, and **Look again** in the Claude profiles menu reads it at once. When nothing is found, the note names the start-up files and folders PMOS looked at. Press **New profile** to make one. This writes `~/.claude/profiles/<id>.json`. Account secrets are never shown in the browser.
-- **New sessions**: the default CLI, the default model, the default Claude profile and the default launch flags for a new session. The flags come from `claude --help`, for example `--chrome`. A flag that needs a value lists the values it accepts.
+- **New sessions**: the default CLI, the default model, the default Claude profile and the default launch flags for a new session. The flags come from `claude --help`, for example `--chrome`. A flag that needs a value lists the values it accepts. The default profile is one setting for the whole workspace. PMOS keeps it on the server, so every browser, port and device starts a Claude session with the same profile. Choose it here or with "make … the default" in the New session form. Both change the same setting.
 - **Validate consent**: the consent of the current repository. Use its switch to turn it on or off. **Open Validate** opens the Validate page as a tab.
 - **People**: whether the morning brief keeps attendee names from the calendar for the current repository. It is off until you turn it on. Turning it off also hides the names recorded before.
 - **Online**: puts this workspace at your own address, such as `pmos.pm-os.app`, through a Cloudflare tunnel. Enter the public address, the tunnel name, your Cloudflare team domain, the Access audience (AUD) tag and your email, then turn on the **Online** switch. The workspace runs the tunnel and remembers the switch when it restarts. On your phone, open the address and sign in with Cloudflare Access (Google or an email code). The workspace does not ask for its token there. Only the computer that runs the workspace can change this section. A phone sees whether it is on. When a sign-in at the address is refused, this section names the check that failed, such as the email or the AUD tag. [REMOTE.md](../REMOTE.md) has the one-time Cloudflare steps.

package/workspace/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "pmos-workspace",
-  "version": "0.108.0",
+  "version": "0.109.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "pmos-workspace",
-      "version": "0.108.0",
+      "version": "0.109.0",
       "license": "MIT",
       "dependencies": {
         "@xterm/addon-fit": "^0.11.0",

package/workspace/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pmos-workspace",
-  "version": "0.108.0",
+  "version": "0.109.0",
   "private": true,
   "description": "PMOS Terminal Workspace — local companion hosting real PTYs beside the library and gates (D62)",
   "license": "MIT",

package/workspace/public/pm/dest-settings.js

@@ -28,7 +28,7 @@ import { pmGet, pmPost } from './http.js';
 import { button, iconButton, field, badge, row, tabs, menu, empty } from './primitives.js';
 import { repoTuples, activeProduct, renameRepo, removeRepo } from './panel-repos.js';
 import { repoRow } from './fixture.js';
-import { sessionDefaults, setSessionDefaults } from './dock.js';
+import { sessionDefaults, setSessionDefaults, adoptProfileDefault } from './dock.js';
 import { COPY } from './frame-copy.js';
 import { askConfirm } from './dialogs.js';
 import { icon } from './icons.js';
@@ -219,8 +219,13 @@ function profilesSection() {
 /** The default Claude profile, from a row or the select: kept for the dock, and remembered by the server for the New session form. */
 function chooseDefaultProfile(id) {
   setSessionDefaults({ profile: id || null });
-  pmPost('/api/profiles/prefer', { agent: 'claude', profile: id || null });
   setState({});
+  // the server's answer is the default: a refusal reads the profiles again, so the select goes back to what is stored
+  pmPost('/api/profiles/prefer', { agent: 'claude', profile: id || null }).then((j) => {
+    if (j && j.ok && j.prefs) { adoptProfileDefault({ prefs: j.prefs }); if (sess.profiles) sess.profiles = { ...sess.profiles, prefs: j.prefs }; }
+    else { sess.msg = (j && j.error) || P.profileDefaultFailed; readProfilesAgain(); }
+    setState({});
+  });
 }
 
 /* ── the Claude profile and launch flags a new session starts with (workspace-launch-flags) ───────────────────────── */
@@ -244,6 +249,8 @@ function readProfilesAgain() {
   pmGet('/api/profiles').then((j) => {
     sess.reading = false; sess.readAt = Date.now();
     sess.profiles = j || { ok: false, error: 'no answer', profiles: [] };
+    // the server's default wins over this browser's copy, so every browser and port shows and starts with the same one
+    adoptProfileDefault(sess.profiles);
     // the detail column and the New session form read the same answer
     state.profiles = sess.profiles;
     setState({});

package/workspace/public/pm/dock-sessions.js

@@ -24,7 +24,7 @@ import { state, setState } from './state.js';
 import { boardOf } from './board-read.js';
 import { button, iconButton, row, field, sheet, toast } from './primitives.js';
 import { COPY } from './frame-copy.js';
-import { sessionDefaults, loadSkills } from './dock.js';
+import { sessionDefaults, adoptProfileDefault, loadSkills } from './dock.js';
 
 let dataMod = null; let termMod = null; let iniMod = null; let tabsMod = null;
 import('./data.js').then((m) => { dataMod = m; }).catch(() => { dataMod = null; });
@@ -298,10 +298,17 @@ export function openNewSessionSheet(repo, preset) {
     const typed = nameF.control.value.trim();
     const base = (sk ? (sk.label || sk.skill || sk.id) : (d.cli === 'claude' ? 'Claude' : 'Shell')) + (m.initiative ? ' · ' + m.initiative : '');
     const name = typed || uniqueName(base);
+    // The default profile is the server's. This browser's copy can be empty or old (another browser, port or host name),
+    // so a Claude start reads it first; if the read fails, the copy is used.
+    const claudeStart = !!sk || d.cli === 'claude';
+    m.busy = true;   // one start per press, while the read is out too
+    const profile = claudeStart && dataMod && typeof dataMod.loadProfiles === 'function'
+      ? adoptProfileDefault(await dataMod.loadProfiles().catch(() => null)) : d.profile;
+    m.busy = false;
     const common = {
       name, agent: sk ? 'claude' : d.cli, initiative: m.initiative || null,
       // the Settings defaults for a Claude session (workspace-launch-flags); a shell takes neither
-      profile: (sk || d.cli === 'claude') ? d.profile : null,
+      profile: claudeStart ? profile : null,
       flags: !sk && d.cli === 'claude' && d.flags.length ? d.flags.map((x) => ({ flag: x.flag, ...(x.value ? { value: x.value } : {}) })) : undefined,
       skill: sk ? sk.id : null, workType: sk ? typeOfSkill(sk) : 'general',
       tier: !sk && d.cli === 'claude' && d.tier !== 'auto' ? d.tier : null,

package/workspace/public/pm/dock.js

@@ -47,6 +47,17 @@ export function sessionDefaults() {
   return { cli: CLIS.includes(r.cli) ? r.cli : 'shell', tier: TIERS.includes(r.tier) ? r.tier : 'auto', profile: cleanProfile(r.profile), flags: cleanFlags(r.flags) };
 }
 
+/* The default Claude profile is the SERVER's (prefs.json, `prefs.claude`), not this browser's. The copy above is a cache: it
+ * lives per browser origin, so another browser, a phone, or the workspace on another port or host name starts with an
+ * empty or old copy. A dock start then sent no profile, or an old one, and the session opened under a different Claude
+ * profile than the one set as the default. Every profiles read carries `prefs`; this makes the cache follow it. */
+export function adoptProfileDefault(read) {
+  if (!read || read.ok === false || !read.prefs || typeof read.prefs !== 'object') return sessionDefaults().profile;
+  const want = cleanProfile(read.prefs.claude);
+  if (sessionDefaults().profile !== want) setSessionDefaults({ profile: want });
+  return want;
+}
+
 export function setSessionDefaults(patch) {
   const next = { ...sessionDefaults(), ...(patch || {}) };
   const clean = { cli: CLIS.includes(next.cli) ? next.cli : 'shell', tier: TIERS.includes(next.tier) ? next.tier : 'auto', profile: cleanProfile(next.profile), flags: cleanFlags(next.flags) };

package/workspace/public/pm/frame-copy.js

@@ -175,6 +175,7 @@ export const COPY = {
     modelDeep: 'Deep',
     sessionsNote: 'The dock starts new sessions with these defaults. A model, a profile and launch flags apply only to a Claude session. The New session form can change them for one session.',
     profileDefault: 'Default Claude profile',
+    profileDefaultFailed: 'The default profile could not be saved.',
     noProfile: 'No profile',
     profileMissing: (id) => id + ' (not found now)',
     flagsDefault: 'Default launch flags',

package/workspace/public/pm/panel-newsess.js

@@ -34,7 +34,7 @@ import { state, setState, FIXTURE } from './state.js';
 import * as FX from './fixture.js';
 import { openTerm as openTermTab } from './panel-initiatives.js';
 import { startHere } from './panel-trees.js';
-import { sessionDefaults } from './dock.js';
+import { sessionDefaults, setSessionDefaults, adoptProfileDefault } from './dock.js';
 import { button } from './primitives.js';
 import { flagPicker, flagsLine, flagsMissingValue, flagsWire } from './flag-picker.js';
 
@@ -184,6 +184,8 @@ function refreshReads() {
   }
   if (typeof dataMod.loadProfiles === 'function') {
     dataMod.loadProfiles().then((r) => {
+      // the server's Claude default wins over this browser's copy (dock.js adoptProfileDefault)
+      adoptProfileDefault(r);
       setState({ profiles: r || null });
       // Preselect from the server's remembered preference — never from a hardcoded name. A
       // preference naming a descriptor that no longer reads preselects NOTHING rather than
@@ -414,6 +416,8 @@ async function setDefault() {
   if (!dataMod || typeof dataMod.preferProfile !== 'function') return;
   const r = await dataMod.preferProfile(state.newSessAgent || 'shell', state.preflightProfile === undefined ? null : state.preflightProfile);
   if (!r || !r.ok) { setState({ newSessError: (r && r.error) || 'the default could not be saved' }); return; }
+  // the Claude default is one default: Settings and a dock start read it too, so they follow this choice
+  if ((state.newSessAgent || 'shell') === 'claude') setSessionDefaults({ profile: state.preflightProfile || null });
   setState((s) => ({ newSessError: null, profiles: s.profiles ? { ...s.profiles, prefs: r.prefs || {} } : s.profiles }));
 }