create-pmos 0.120.0 → 0.122.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-pmos",
-  "version": "0.120.0",
+  "version": "0.122.0",
   "description": "Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with all state as git-versioned files. Includes `workflow-sweep`, which audits the state every board derives from and separates real defects from work you simply have not done. `create-pmos workspace` also installs + launches the local Terminal Workspace GUI. No database, no network, no telemetry.",
   "license": "MIT",
   "bin": {

package/payload/KIT-VERSION

@@ -1,3 +1,3 @@
-kernel-source: pmos@aed5805
-assembled: 2026-10-08
+kernel-source: pmos@7af87c4
+assembled: 2026-10-09
 mode: vendor

package/payload/planning/evals/eval-calibration.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Eval calibration log"
 description: "Append-only record of every PM override of an evaluator verdict."
-generated: {by: process:create-pmos, at: "2026-10-08T09:05:35Z"}
+generated: {by: process:create-pmos, at: "2026-10-09T01:31:23Z"}
 status: stable
 ---
 

package/payload/planning/okrs/health-budgets.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Health budgets"
 description: "Closed registry of health-budget anchors (D59), edited only by the PM."
-generated: {by: process:create-pmos, at: "2026-10-08T09:05:35Z"}
+generated: {by: process:create-pmos, at: "2026-10-09T01:31:23Z"}
 status: stable
 ---
 

package/payload/state/discoveries.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Discoveries and friction log"
 description: "Append-only record of what runs discovered and where the process rubbed."
-generated: {by: process:create-pmos, at: "2026-10-08T09:05:35Z"}
+generated: {by: process:create-pmos, at: "2026-10-09T01:31:23Z"}
 status: stable
 ---
 

package/payload/state/log.md

@@ -2,6 +2,6 @@
 
 Newest first, ISO dates.
 
-## 2026-10-08
+## 2026-10-09
 
 - Adopted OKF v0.2 (D73).

package/workspace/guide/initiatives-and-next-steps.md

@@ -2,7 +2,7 @@
 type: Guide
 title: "Guide: initiatives and next steps"
 description: "What the initiative detail shows, top to bottom: status, lifecycle control, and the next step the workspace proposes."
-timestamp: 2026-10-04
+timestamp: 2026-10-08
 ---
 
 # Guide: initiatives and next steps
@@ -73,7 +73,7 @@ At most 3 prepared sessions run at once and 8 start each day. Go refuses a start
 
 ### Sources and the typed judgment option
 
-Choose a profile in the plan. The session may read only the sources that profile declares and that suit the step: Wispr Flow notes, Gmail, Google Calendar, Confluence, Jira and Slack. They are read-only.
+The plan starts with your default Claude profile from Settings. Choose another profile, or none, in the plan. Prepare again and Hand to agent start under the same default. The session may read only the sources that profile declares and that suit the step: Wispr Flow notes, Gmail, Google Calendar, Confluence, Jira and Slack. They are read-only.
 
 You can turn on the Typesafe skill for a run. It helps the session categorise, score and decide yes or no with a typed answer. It sends the question text to an outside service and needs `TYPESAFE_API_KEY` in the session. It is off by default. The session prints each answer as a `JUDGMENT` line, and the review checks its shape.
 

package/workspace/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "pmos-workspace",
-  "version": "0.120.0",
+  "version": "0.122.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "pmos-workspace",
-      "version": "0.120.0",
+      "version": "0.122.0",
       "license": "MIT",
       "dependencies": {
         "@xterm/addon-fit": "^0.11.0",

package/workspace/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pmos-workspace",
-  "version": "0.120.0",
+  "version": "0.122.0",
   "private": true,
   "description": "PMOS Terminal Workspace — local companion hosting real PTYs beside the library and gates (D62)",
   "license": "MIT",

package/workspace/public/pm/next-step-ui.js

@@ -15,6 +15,7 @@
 import { el } from './dom.js';
 import { state, setState, FIXTURE } from './state.js';
 import { askText } from './dialogs.js';
+import { adoptProfileDefault } from './dock.js';
 
 let dataMod = null;
 const dataReady = import('./data.js').then((m) => { dataMod = m; }).catch(() => { dataMod = null; });
@@ -30,14 +31,17 @@ const iv = (t) => el('span', null, t == null ? '' : String(t));
 const ui = Object.create(null);
 let profileList = null;
 const touch = () => setState((s) => ({ nsTick: (s.nsTick || 0) + 1 }));
-const slot = (id) => (ui[id] = ui[id] || { judgment: false, profile: '' });
+const slot = (id) => (ui[id] = ui[id] || { judgment: false, profile: undefined });
 
 async function prepare(slug, it) {
   const u = slot(it.id);
   u.loading = true; u.note = null; touch();
   await dataReady;
-  if (profileList === null) { const r = await dataMod.nextStepProfiles(); profileList = (r && r.profiles) || []; }
-  const out = await dataMod.nextStepPost('prepare', { initiative_id: slug, item_id: it.id, agent: 'claude', profile: u.profile || undefined, judgment: u.judgment });
+  // Read every time: the default profile is the server's, and the list can change while the page is open.
+  const rd = await dataMod.nextStepProfiles(); profileList = (rd && rd.profiles) || [];
+  // Until the PM picks one here, the step starts under the default Claude profile (Settings). 'none' is a choice, sent as null.
+  if (u.profile === undefined) u.profile = adoptProfileDefault(rd) || '';
+  const out = await dataMod.nextStepPost('prepare', { initiative_id: slug, item_id: it.id, agent: 'claude', profile: u.profile || null, judgment: u.judgment });
   u.loading = false;
   u.plan = out && out.ok ? out : null;
   if (!out || out.ok === false) u.note = { tone: 'bad', text: (out && out.error) || 'could not prepare' };
@@ -47,7 +51,7 @@ async function go(slug, it) {
   const u = slot(it.id); const pl = u.plan;
   if (!pl || !pl.prompt_sha) return;
   u.loading = true; u.note = null; touch();
-  const out = await dataMod.nextStepPost('go', { initiative_id: slug, item_id: it.id, agent: 'claude', profile: u.profile || undefined, judgment: u.judgment, confirm: true, prompt_sha: pl.prompt_sha });
+  const out = await dataMod.nextStepPost('go', { initiative_id: slug, item_id: it.id, agent: 'claude', profile: u.profile || null, judgment: u.judgment, confirm: true, prompt_sha: pl.prompt_sha });
   u.loading = false;
   if (!out || out.ok === false) { u.note = { tone: 'bad', text: (out && out.error) || 'nothing was started' }; if (out && out.prompt_sha) u.plan = null; touch(); return; }
   u.plan = null; u.note = { tone: 'ok', text: 'started — ' + (out.notice || out.plan.why || 'the session is running') };

package/workspace/server.js

@@ -462,6 +462,13 @@ function writePrefs(prefs) {
   try { fs.writeFileSync(PREFS_FILE, JSON.stringify(prefs)); return null; }
   catch (e) { warnWriteFail('prefs.json (profile preselection)', e); return `the preference could not be saved — ${String((e && e.code) || 'write failed')}`; }
 }
+// The default profile for an agent, for a start the PM pressed that named no profile at all (`undefined`). An explicit
+// null means "no profile" and is never replaced. A remembered id that no longer reads yields undefined: the start then
+// runs with no profile and says nothing it did not do, rather than failing on a preference the PM did not just choose.
+function defaultProfileFor(agent) {
+  const id = readPrefs()[agent];
+  return typeof id === 'string' && id && resolveProfileForSpawn(id).ok ? id : undefined;
+}
 // The merged environment a session actually runs under. The overlay goes ON TOP of sessionEnv(),
 // AFTER the marker-stripping (R3) — never instead of it, or a profile would silently re-enable the
 // nested-session markers sessionEnv exists to remove.
@@ -3335,6 +3342,9 @@ function spawnSession({ name, agent, cwd, ws, origin, initialInput, profile, ini
   // `pres.id` is null whenever the overlay was not applied — including when a profile was asked for
   // and could not be read — so the pane line can never name a profile that did nothing (R3/R9).
   // `profileRefusal` is server-internal: callers that can refuse read it and say why.
+  // A start that names no profile (`undefined`) gets the agent's default Claude profile, whoever started it: a skill, a
+  // schedule, a note, a doc check. Only the composer used to apply it, so every other start ran under Claude's own config.
+  if (profile === undefined && !isShell) profile = defaultProfileFor(agent);
   const pres = resolveProfileForSpawn(profile);
   const penv = sessionEnvWithProfile(pres.profile);
   // sessionEnvWithProfile returns a fresh object (sessionEnv copies process.env), so these touch this session only.
@@ -3486,6 +3496,8 @@ function spawnWithBranch({ name, agent, cwd, ws, branch, createBranch, isolate,
   // The profile is checked BEFORE any git operation. A composer that picked a profile PMOS cannot
   // read must not leave a branch checked out and a session running under the wrong environment —
   // and a session that claims a profile it never got is the quietest failure this feature has.
+  // `undefined` is "not asked", so it takes the agent's default; the resolved id below is explicit, so spawnSession adds none.
+  if (profile === undefined && agent && agent !== 'shell') profile = defaultProfileFor(agent);
   const pres = resolveProfileForSpawn(profile);
   if (!pres.ok) return { ok: false, error: pres.error };
   // The model choice is checked on the same terms (D75): a refused choice starts nothing, and leaves no branch moved.
@@ -3738,6 +3750,8 @@ function nextStepsFor(w, id) {
 }
 // Everything a prepare shows, computed WITHOUT creating or writing anything. `go` recomputes it and compares the hash.
 function prepareNextStep(body) {
+  // A request that names no profile gets the default Claude profile; `profile: null` is the PM choosing none.
+  if (body.profile === undefined) { const d = defaultProfileFor(body.agent || 'claude'); if (d) body = { ...body, profile: d }; }
   const w = getWs(body.ws);
   if (!w) return { ok: false, status: 400, error: 'no workspace' };
   const id = String(body.initiative_id || '');
@@ -7446,7 +7460,7 @@ async function handleRequest(req, res) {
     const budget = handoffBudget();
     if (!budget.allowed) return json(res, { ok: false, error: budget.reason, budget }, 409);
     const started = startWork({ initiative: r.initiative, ws: r.ws, agent: r.agent, name: r.details.session_name,
-      origin: 'plan-item', initialInput: r.prompt + '\r', planItem: r.item });
+      origin: 'plan-item', initialInput: r.prompt + '\r', planItem: r.item, profile: defaultProfileFor(r.agent) });
     if (!started.ok) return json(res, { ok: false, error: started.error }, 409);
     // The session's token is never projected; the page gets where it runs and the item it is bound to.
     return json(res, { ok: true, session: { id: started.session.id, name: started.session.name, ws: started.session.ws, plan_item: started.session.plan_item || null },