create-pmos 0.126.0 → 0.128.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-pmos",
-  "version": "0.126.0",
+  "version": "0.128.0",
   "description": "Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with all state as git-versioned files. Includes `workflow-sweep`, which audits the state every board derives from and separates real defects from work you simply have not done. `create-pmos workspace` also installs + launches the local Terminal Workspace GUI. No database, no network, no telemetry.",
   "license": "MIT",
   "bin": {

package/payload/KIT-VERSION

@@ -1,3 +1,3 @@
-kernel-source: pmos@ef9256d
+kernel-source: pmos@337d695
 assembled: 2026-10-11
 mode: vendor

package/payload/planning/evals/eval-calibration.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Eval calibration log"
 description: "Append-only record of every PM override of an evaluator verdict."
-generated: {by: process:create-pmos, at: "2026-10-11T02:44:29Z"}
+generated: {by: process:create-pmos, at: "2026-10-11T03:06:09Z"}
 status: stable
 ---
 

package/payload/planning/okrs/health-budgets.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Health budgets"
 description: "Closed registry of health-budget anchors (D59), edited only by the PM."
-generated: {by: process:create-pmos, at: "2026-10-11T02:44:29Z"}
+generated: {by: process:create-pmos, at: "2026-10-11T03:06:09Z"}
 status: stable
 ---
 

package/payload/state/discoveries.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Discoveries and friction log"
 description: "Append-only record of what runs discovered and where the process rubbed."
-generated: {by: process:create-pmos, at: "2026-10-11T02:44:29Z"}
+generated: {by: process:create-pmos, at: "2026-10-11T03:06:09Z"}
 status: stable
 ---
 

package/workspace/c3-reports-test.js

@@ -0,0 +1,314 @@
+#!/usr/bin/env node
+'use strict';
+/* c3-reports-test.js — the console3 Reports dashboards in a browser, demo mode (initiative console3-reports, PRD R1 to R7).
+ *
+ * WHERE. The suite first loads /c3.html?demo=1&tab=rep. When the shell mounts the dashboards there ([data-rp3] in the Reports pane),
+ * it runs against the shell. Until c3-shell.js has the mount line, it serves a small harness page from this process (page.route, no
+ * file in public/) that installs demo mode and mounts mountReports with the same ctx the shell passes ({ ws, pmGet, drafts }, drafts
+ * doing what repTab does). The suite prints which one it used.
+ *
+ *   tabs       Dashboards, Library and Drafts; Dashboards first
+ *   scopes     Portfolio draws its seven default reports from the Calendar's builders; Board and Initiative show a chooser, and a
+ *              report shows only the rows of the chosen board or initiative; a scope's add list holds only reports that fit it
+ *   cache      the data route is read once per scope (switching back reads nothing)
+ *   edit       up and down, Remove with Undo, Add from the report library, Reset to default; each change POSTs { key, reports }
+ *              and a failed POST is toasted while the page keeps the change
+ *   reload     a stored layout is there after a reload
+ *   share      the frame (Headline, Sections, Needs your call, Sources) for Leadership and for Team; Save as draft POSTs ONE draft;
+ *              the schedule control is disabled and says why
+ *   library    one row per report with data-home, never on the dashboard; a widget carries data-ref-row and opens its case in place
+ *   drafts     the Drafts tab shows the report families
+ *   phone      400px: one column, no horizontal page scroll
+ *   errors     no script error and no console error
+ */
+const path = require('path');
+const { spawn } = require('child_process');
+const { findBrowser } = require('./lib/find-browser');
+const T = require('./test-run').configure({ name: 'c3-reports' });
+
+const BASE = T.BASE;
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+const until = async (fn, ms = 10000, step = 100) => {
+  const t0 = Date.now();
+  for (;;) { const v = await fn(); if (v) return v; if (Date.now() - t0 > ms) return v; await sleep(step); }
+};
+const results = [];
+const ok = (name, cond, extra = '') => { results.push({ name, cond: !!cond }); console.log(`${cond ? '✓' : '✗'} ${name}${!cond && extra !== '' ? ' — ' + extra : ''}`); };
+let srv = null; let browser = null;
+const finish = async (code) => {
+  if (browser) await browser.close().catch(() => {});
+  if (srv) { try { srv.kill('SIGKILL'); } catch { /* gone */ } }
+  T.killTmux();
+  const bad = results.filter((x) => !x.cond).length;
+  console.log(`\n${results.length - bad}/${results.length} c3-reports assertions passed`);
+  process.exit(code !== undefined ? code : (bad ? 1 : 0));
+};
+process.on('unhandledRejection', (e) => { console.error(e); finish(1); });
+
+const HARNESS = '/__c3-reports-harness.html';
+const HARNESS_HTML = `<!doctype html><html lang="en" data-pm-page-theme="light"><head><meta charset="utf-8" />
+<meta name="viewport" content="width=device-width, initial-scale=1" /><meta name="pmos-nonce" content="" />
+<title>Reports harness</title><link rel="stylesheet" href="/pm/tokens.css" />
+<style>html,body{margin:0;background:var(--background);color:var(--foreground)} #c3-root{padding:16px}</style></head>
+<body><div id="c3-root" class="c3 c3pg" data-pm-theme="light"><div data-c3-pane="rep" id="host"></div></div>
+<script type="module">
+const demo = await import('/pm/c3-demo.js');
+demo.installDemo(); if (window.__c3demoReady) await window.__c3demoReady;
+const { el } = await import('/pm/dom.js');
+const { ensureC3Css, c3Phone } = await import('/pm/pm-work-view.js');
+const { pmGet } = await import('/pm/http.js');
+const { mountReports } = await import('/pm/c3-reports.js');
+const { mountReportFamilies } = await import('/pm/report-families-view.js');
+const { mountOutbox } = await import('/pm/outbox-panel.js');
+ensureC3Css(); c3Phone(document.getElementById('c3-root'));
+const ws = demo.DEMO_WS;
+const drafts = (pane) => {
+  const fam = el('div', { 'data-c3pg': 'families-host' }); const out = el('div', { class: 'brief', 'data-c3pg': 'outbox-host' });
+  pane.append(fam, out);
+  pmGet('/api/report-families/facts?ws=' + encodeURIComponent(ws)).then((j) => {
+    mountReportFamilies(fam, { reportFacts: j && j.ok ? j.facts : {}, plan: null, portfolio: null });
+    mountOutbox(out, {});
+    const sync = () => { out.hidden = !fam.querySelector('[data-family="communications"][aria-pressed="true"]'); };
+    sync(); new MutationObserver(sync).observe(fam, { subtree: true, attributes: true, attributeFilter: ['aria-pressed'] });
+  });
+};
+mountReports(document.getElementById('host'), { ws, pmGet, drafts });
+document.getElementById('c3-root').setAttribute('data-c3-demo', '1');
+</script></body></html>`;
+
+const D = '[data-rp3-pane="dash"]';
+const order = (page) => page.$$eval(D + ' [data-rp3-w]', (a) => a.map((n) => n.getAttribute('data-rp3-w')));
+const DEF_P = ['north', 'outcomes', 'signals', 'delivery', 'bets', 'synergy', 'maturity'];
+
+(async () => {
+  const exe = findBrowser();
+  if (!exe) { console.log('✗ no Chrome/Chromium on this machine — the c3-reports suite cannot run'); return finish(1); }
+  let chromium;
+  try { ({ chromium } = require('playwright-core')); } catch { console.log('✗ playwright-core is not installed — the c3-reports suite cannot run'); return finish(1); }
+
+  srv = spawn(process.execPath, [path.join(__dirname, 'server.js')], { cwd: __dirname, stdio: 'ignore', env: T.env({ PMOS_WS_PORT: String(T.PORT) }) });
+  await T.waitForServer(BASE);
+  browser = await chromium.launch({ executablePath: exe });
+
+  const errors = [];
+  const watch = (page) => {
+    page.on('pageerror', (e) => errors.push('pageerror: ' + String((e && e.message) || e)));
+    page.on('console', (m) => { if (m.type() === 'error') errors.push('console: ' + m.text()); });
+    page.on('dialog', (d) => d.dismiss().catch(() => {}));
+  };
+  /* the shell when it mounts the dashboards, else the harness (see the header) */
+  let mode = null;
+  const open = async (page) => {
+    await page.route(BASE + HARNESS, (r) => r.fulfill({ status: 200, contentType: 'text/html', body: HARNESS_HTML }));
+    if (mode !== 'harness') {
+      await page.goto(BASE + '/c3.html?demo=1&tab=rep');
+      const inShell = await until(() => page.$('[data-c3-pane="rep"] [data-rp3]'), mode === 'shell' ? 15000 : 4000);
+      if (inShell) { mode = 'shell'; return true; }
+    }
+    mode = 'harness';
+    await page.goto(BASE + HARNESS);
+    return !!(await until(() => page.$('[data-c3-pane="rep"] [data-rp3]'), 15000));
+  };
+  const loaded = (page, n) => until(() => page.$$eval(D + ' [data-rp3-w]', (a, k) => a.length === k && a.every((w) => w.querySelector('section.card') && !w.querySelector('[data-rp3-loading]')), n));
+  /* counts this page's reads of the data route and its POSTs, from the outermost fetch wrapper (demo answers never reach the network) */
+  const spy = (page) => page.evaluate(() => {
+    if (window.__rp3spy) { window.__rp3spy.reads = []; window.__rp3spy.posts = []; return; }
+    const S = window.__rp3spy = { reads: [], posts: [], fail: null };
+    const f = window.fetch;
+    window.fetch = (input, init) => {
+      const u = new URL(typeof input === 'string' ? input : input.url, location.origin);
+      const m = String((init && init.method) || 'GET').toUpperCase();
+      if (m === 'GET' && u.pathname === '/api/report-dashboards/data') S.reads.push(u.searchParams.get('scope') + '|' + (u.searchParams.get('id') || ''));
+      if (m === 'POST') { let b = null; try { b = JSON.parse(init.body); } catch { b = null; } S.posts.push({ path: u.pathname, body: b }); if (S.fail && u.pathname === S.fail) return Promise.resolve(new Response(JSON.stringify({ ok: false, error: 'the store is read-only' }), { status: 500, headers: { 'content-type': 'application/json' } })); }
+      return f(input, init);
+    };
+  });
+  const posts = (page, p) => page.evaluate((x) => window.__rp3spy.posts.filter((q) => q.path === x), p);
+
+  const ctx = await browser.newContext({ viewport: { width: 1440, height: 1000 } });
+  const page = await ctx.newPage();
+  watch(page);
+  const up = await open(page);
+  ok('the Reports dashboards come up in demo mode (' + mode + ')', up);
+  if (!up) return finish(1);
+
+  /* ── tabs ── */
+  const tabs = await page.$$eval('[data-rp3] [role="tab"]', (a) => a.map((b) => [b.getAttribute('data-rp3-tab'), b.textContent.trim(), b.getAttribute('aria-selected')]));
+  ok('three tabs: Dashboards, Library, Drafts, with Dashboards selected', tabs.length === 3 && tabs[0][0] === 'dash' && /^Dashboards/.test(tabs[0][1]) && tabs[0][2] === 'true' && /^Library/.test(tabs[1][1]) && /^Drafts/.test(tabs[2][1]), JSON.stringify(tabs));
+
+  /* ── portfolio ── */
+  ok('Portfolio draws its seven default reports, each a builder card', !!(await loaded(page, 7)), JSON.stringify(await order(page)));
+  ok('the portfolio order is the default order', JSON.stringify(await order(page)) === JSON.stringify(DEF_P), JSON.stringify(await order(page)));
+  const kinds = await page.$$eval(D + ' [data-rp3-w]', (a) => a.map((w) => { const c = w.querySelector('section.card'); return w.getAttribute('data-rp3-w') + ':' + (c && c.getAttribute('data-cs')); }));
+  ok('each widget is the Calendar builder of its report (data-cs matches, delivery included)', kinds.every((k) => { const [a, b] = k.split(':'); return a === b; }), JSON.stringify(kinds));
+  ok('no widget failed to draw', !(await page.$(D + ' [data-rp3-fail]')));
+  ok('the dashboard says it shows the default layout', /7 reports, the default layout/.test(await page.textContent(D + ' [data-rp3-count]')));
+  const pRows = await page.$$eval(D + ' [data-rp3-w="delivery"] [data-cs-row]', (a) => a.map((g) => g.getAttribute('data-cs-row')));
+  ok('portfolio delivery holds initiatives and tasks', pRows.includes('checkout') && pRows.includes('sso') && pRows.some((r) => r.startsWith('t-')), JSON.stringify(pRows));
+  ok('no scope chooser on Portfolio', !(await page.$(D + ' [data-rp3-pick]')));
+
+  /* ── scopes, the chooser, and one read per scope ── */
+  await spy(page);
+  await page.click(D + ' [data-rp3-scope="board"]');
+  ok('Board shows a chooser of the boards', !!(await until(async () => (await page.$$eval(D + ' [data-rp3-pick="board"] option', (a) => a.map((o) => o.value))).join(',') === 'shop,enterprise')));
+  ok('Board draws its five default reports', !!(await loaded(page, 5)), JSON.stringify(await order(page)));
+  const bRows = await page.$$eval(D + ' [data-rp3-w="delivery"] [data-cs-row]', (a) => a.map((g) => g.getAttribute('data-cs-row')));
+  ok('Board Shop: delivery shows only the Shop initiatives', bRows.length > 0 && bRows.every((r) => ['checkout', 'search', 'returns', 'onb'].includes(r)), JSON.stringify(bRows));
+  ok('the title names the board', /Board: Shop/.test(await page.textContent(D + ' [data-rp3-title]')));
+  await page.selectOption(D + ' [data-rp3-pick="board"]', 'enterprise');
+  await until(async () => /Enterprise/.test(await page.textContent(D + ' [data-rp3-title]')));
+  await loaded(page, 5);
+  const eRows = await page.$$eval(D + ' [data-rp3-w="delivery"] [data-cs-row]', (a) => a.map((g) => g.getAttribute('data-cs-row')));
+  ok('Board Enterprise: delivery shows only SSO', JSON.stringify(eRows) === '["sso"]', JSON.stringify(eRows));
+  await page.click(D + ' [data-rp3-scope="initiative"]');
+  ok('Initiative shows a chooser of the five initiatives', !!(await until(async () => (await page.$$(D + ' [data-rp3-pick="initiative"] option')).length === 5)));
+  await page.selectOption(D + ' [data-rp3-pick="initiative"]', 'sso');
+  await until(async () => /Initiative: SSO/.test(await page.textContent(D + ' [data-rp3-title]')));
+  ok('Initiative draws its four default reports', !!(await loaded(page, 4)), JSON.stringify(await order(page)));
+  const sigs = await page.$$eval(D + ' [data-rp3-w="signals"] [data-cs-sig]', (a) => a.map((g) => g.getAttribute('data-cs-sig')).sort());
+  ok('Initiative SSO: early signals are only the ones about SSO', JSON.stringify(sigs) === '["dep","ent"]', JSON.stringify(sigs));
+  await page.selectOption(D + ' [data-rp3-pick="initiative"]', 'onb');
+  await until(async () => /onboarding/.test(await page.textContent(D + ' [data-rp3-title]')));
+  await loaded(page, 4);
+  ok('a scope with nothing for a report draws that report\'s own empty card', !!(await page.$(D + ' [data-rp3-w="signals"] [data-cs-empty="true"]')));
+  await page.click(D + ' [data-rp3-scope="portfolio"]'); await loaded(page, 7);
+  await page.click(D + ' [data-rp3-scope="board"]'); await loaded(page, 5);
+  const reads = await page.evaluate(() => window.__rp3spy.reads);
+  ok('the data route is read once per scope and id, and not again within the minute', JSON.stringify(reads) === JSON.stringify(['board|shop', 'board|enterprise', 'initiative|checkout', 'initiative|sso', 'initiative|onb']), JSON.stringify(reads));
+  await page.click(D + ' [data-rp3-edit]');
+  const freeB = await page.$$eval(D + ' [data-rp3-free]', (a) => a.map((n) => n.getAttribute('data-rp3-free')));
+  ok('the Board add list holds only reports that fit a board (no north star, no maturity)', !freeB.includes('north') && !freeB.includes('maturity'), JSON.stringify(freeB));
+  await page.click(D + ' [data-rp3-edit]');
+  await page.click(D + ' [data-rp3-scope="portfolio"]'); await loaded(page, 7);
+
+  /* ── edit ── */
+  await spy(page);
+  await page.click(D + ' [data-rp3-edit]');
+  ok('Edit dashboard turns edit mode on, with arrows and Remove on each widget', await page.getAttribute(D + ' [data-rp3-edit]', 'aria-pressed') === 'true' && (await page.$$(D + ' [data-rp3-rm]')).length === 7 && (await page.$$(D + ' [data-rp3-up]')).length === 7);
+  ok('the first widget cannot move up, the last cannot move down', await page.$eval(D + ' [data-rp3-up="north"]', (b) => b.disabled) && await page.$eval(D + ' [data-rp3-down="maturity"]', (b) => b.disabled));
+  ok('Reset to default is off while the scope shows its default', await page.$eval(D + ' [data-rp3-reset]', (b) => b.disabled));
+  await page.click(D + ' [data-rp3-up="outcomes"]');
+  ok('up moves a report up', !!(await until(async () => JSON.stringify(await order(page)) === JSON.stringify(['outcomes', 'north', 'signals', 'delivery', 'bets', 'synergy', 'maturity']))), JSON.stringify(await order(page)));
+  let P = await posts(page, '/api/report-dashboards/layout');
+  ok('the move POSTs { key: portfolio, reports } with the new order', P.length === 1 && P[0].body.key === 'portfolio' && JSON.stringify(P[0].body.reports) === JSON.stringify(['outcomes', 'north', 'signals', 'delivery', 'bets', 'synergy', 'maturity']), JSON.stringify(P));
+  await page.click(D + ' [data-rp3-down="north"]');
+  ok('down moves a report down', !!(await until(async () => (await order(page)).join(',') === 'outcomes,signals,north,delivery,bets,synergy,maturity')), JSON.stringify(await order(page)));
+  ok('the dashboard now says it shows your layout', /your layout/.test(await page.textContent(D + ' [data-rp3-count]')));
+  await page.click(D + ' [data-rp3-rm="signals"]');
+  ok('Remove takes the report off the dashboard', !!(await until(async () => !(await order(page)).includes('signals'))));
+  const tt = await until(() => page.$('[data-c3-toast]'));
+  ok('Remove shows a toast that says the report stays in the library, with Undo', !!tt && /stays in the library/.test(await tt.textContent()) && !!(await tt.$('[data-c3-toast-action]')));
+  ok('the removed report is offered under Add from the report library', !!(await until(() => page.$(D + ' [data-rp3-add="signals"]'))));
+  await page.click('[data-c3-toast-action]');
+  ok('Undo puts the report back where it was', !!(await until(async () => (await order(page)).join(',') === 'outcomes,signals,north,delivery,bets,synergy,maturity')), JSON.stringify(await order(page)));
+  await page.click(D + ' [data-rp3-rm="maturity"]');
+  await until(async () => !(await order(page)).includes('maturity'));
+  await page.click(D + ' [data-rp3-add="maturity"]');
+  ok('Add puts a library report at the end of the dashboard', !!(await until(async () => (await order(page)).slice(-1)[0] === 'maturity')));
+  P = await posts(page, '/api/report-dashboards/layout');
+  ok('every change POSTed its layout (move, move, remove, undo, remove, add)', P.length === 6 && P.every((q) => q.body.key === 'portfolio' && Array.isArray(q.body.reports)), String(P.length));
+  ok('Reset to default is on once the scope has its own layout', !(await page.$eval(D + ' [data-rp3-reset]', (b) => b.disabled)));
+  // a failed POST: the page keeps the change and says why
+  await page.evaluate(() => { window.__rp3spy.fail = '/api/report-dashboards/layout'; });
+  await page.click(D + ' [data-rp3-down="outcomes"]');
+  ok('a failed POST keeps the change on the page', !!(await until(async () => (await order(page)).join(',') === 'signals,outcomes,north,delivery,bets,synergy,maturity')), JSON.stringify(await order(page)));
+  ok('a failed POST is toasted with its reason', !!(await until(async () => { const t = await page.$('[data-c3-toast]'); return t && /not saved: the store is read-only/.test(await t.textContent()); })));
+  await page.evaluate(() => { window.__rp3spy.fail = null; });
+  await page.click(D + ' [data-rp3-up="outcomes"]');
+  await until(async () => (await order(page)).join(',') === 'outcomes,signals,north,delivery,bets,synergy,maturity');
+  await page.click(D + ' [data-rp3-edit]');
+  ok('Done editing leaves edit mode', await page.getAttribute(D + ' [data-rp3-edit]', 'aria-pressed') === 'false' && !(await page.$(D + ' [data-rp3-rm]')));
+
+  /* ── the layout survives a reload ── */
+  await open(page); await loaded(page, 7);
+  ok('a stored layout is there after a reload', (await order(page)).join(',') === 'outcomes,signals,north,delivery,bets,synergy,maturity', JSON.stringify(await order(page)));
+  await spy(page);
+  await page.click(D + ' [data-rp3-edit]'); await page.click(D + ' [data-rp3-reset]');
+  ok('Reset to default returns the default order', !!(await until(async () => JSON.stringify(await order(page)) === JSON.stringify(DEF_P))), JSON.stringify(await order(page)));
+  P = await posts(page, '/api/report-dashboards/layout');
+  ok('Reset POSTs reports: null', P.length === 1 && P[0].body.reports === null && P[0].body.key === 'portfolio', JSON.stringify(P));
+  await page.click(D + ' [data-rp3-edit]');
+  // a board layout is kept per key
+  await page.click(D + ' [data-rp3-scope="board"]'); await loaded(page, 5);
+  await page.click(D + ' [data-rp3-edit]'); await page.click(D + ' [data-rp3-rm="synergy"]'); await until(async () => (await order(page)).length === 4);
+  await page.click(D + ' [data-rp3-edit]');
+  P = await posts(page, '/api/report-dashboards/layout');
+  ok('a board layout is POSTed under board:<id>', P.length === 2 && P[1].body.key === 'board:shop', JSON.stringify(P.map((q) => q.body.key)));
+  await page.click(D + ' [data-rp3-scope="portfolio"]'); await loaded(page, 7);
+  ok('the portfolio keeps its own layout when a board changes', JSON.stringify(await order(page)) === JSON.stringify(DEF_P));
+
+  /* ── share ── */
+  await spy(page);
+  await page.click(D + ' [data-rp3-share]');
+  const sheet = await until(() => page.$('[data-rp3-sheet] [data-rp3-frame="Headline"]'));
+  ok('Share opens a sheet with the report frame', !!sheet);
+  const frames = await page.$$eval('[data-rp3-sheet] [data-rp3-frame] h4', (a) => a.map((h) => h.textContent));
+  ok('the frame has Headline, Sections, Needs your call, Sources', JSON.stringify(frames) === JSON.stringify(['Headline', 'Sections', 'Needs your call', 'Sources']), JSON.stringify(frames));
+  ok('Leadership: one sentence per report, no numbers', await page.$eval('[data-rp3-sheet] [data-rp3-aud]', (n) => n.getAttribute('data-rp3-aud')) === 'Leadership'
+    && (await page.$$('[data-rp3-sheet] [data-rp3-frame="Sections"] h5')).length === 7 && !(await page.$('[data-rp3-sheet] [data-rp3-nums]')));
+  const need = await page.textContent('[data-rp3-sheet] [data-rp3-frame="Needs your call"]');
+  ok('Needs your call lists what the reports flag', /Conversion is off course/.test(need) && /Checkout v2 is delayed/.test(need), need.slice(0, 200));
+  await page.click('[data-rp3-sheet] [data-rp3-audbtn="Team"]');
+  ok('Team adds the numbers behind each sentence', !!(await until(async () => (await page.$$('[data-rp3-sheet] [data-rp3-nums]')).length >= 5)));
+  ok('the Team numbers come from the records (Conversion now 3.1%)', /Conversion: now 3\.1%, should be 3\.75%, target 4%/.test(await page.textContent('[data-rp3-sheet] [data-rp3-nums="outcomes"]')));
+  const sched = await page.$('[data-rp3-sheet] [data-rp3-sched]');
+  ok('the schedule control is disabled', !!sched && await sched.evaluate((s) => s.disabled));
+  ok('the schedule says sending on a schedule is not available, and why', /not available yet, because nothing is sent outward/.test(await page.textContent('[data-rp3-sheet] [data-rp3-schedule]')));
+  await page.click('[data-rp3-sheet] [data-rp3-draft]');
+  ok('Save as draft says one draft is in the outbox and nothing was sent', !!(await until(async () => /one draft in the outbox\. Nothing was sent/.test(await page.textContent('[data-rp3-sheet] [data-rp3-share-msg]')))));
+  ok('Save as draft is off once the draft is saved', await page.$eval('[data-rp3-sheet] [data-rp3-draft]', (b) => b.disabled));
+  P = await posts(page, '/api/outbox/draft');
+  const B = P[0] && P[0].body;
+  ok('ONE draft POST, to a known channel, for the chosen audience, its claim lines labelled', P.length === 1 && B.channel === 'customer-note' && B.recipient === 'Team' && /^Portfolio for Team/.test(B.body)
+    && B.body.split('\n').filter((l) => /^- /.test(l)).every((l) => /\[reported\]$/.test(l)), JSON.stringify(B).slice(0, 300));
+  ok('nothing else was POSTed from the sheet (no send, no schedule)', (await page.evaluate(() => window.__rp3spy.posts.length)) === 1);
+  await page.keyboard.press('Escape');
+  ok('Escape closes the sheet', !!(await until(async () => !(await page.$('[data-rp3-sheet]')))));
+
+  /* ── library and one home ── */
+  ok('the dashboard has no data-home row; every widget carries data-ref-row', !(await page.$(D + ' [data-home]')) && (await page.$$(D + ' article[data-ref-row]')).length === 7);
+  await page.click(D + ' [data-rp3-about="outcomes"]');
+  ok('a widget opens its case in place (question, source, where used)', !!(await until(async () => { const x = await page.$(D + ' [data-rp3-w="outcomes"] .xp.open'); return x && /Used on: Portfolio/.test(await x.textContent()); })));
+  await page.click(D + ' [data-rp3-golib="outcomes"]');
+  ok('Open in the library goes to the Library tab', !!(await until(async () => await page.getAttribute('[data-rp3-tab="lib"]', 'aria-selected') === 'true')));
+  const L = '[data-rp3-pane="lib"]';
+  const libRows = await page.$$eval(L + ' [data-home]', (a) => a.map((r) => r.getAttribute('data-home')));
+  ok('the library has one row per report, each its home', libRows.length === 7 && new Set(libRows).size === 7, JSON.stringify(libRows));
+  ok('library rows are not references', !(await page.$(L + ' [data-ref-row]')));
+  const lrow = await page.textContent(L + ' [data-home="maturity"]');
+  ok('a library row shows the question, the source and where it is used', /Where does each pillar stand/.test(lrow) && /Pillar maturity records/.test(lrow) && /Used on: Portfolio/.test(lrow), lrow.slice(0, 200));
+  ok('the row opened from the widget is open, with its card', !!(await until(() => page.$(L + ' [data-home="outcomes"][aria-expanded="true"] [data-cs="outcomes"]'))));
+  await page.click(L + ' [data-home="bets"]');
+  ok('a library row opens the report\'s card in place', !!(await until(() => page.$(L + ' [data-home="bets"] .xp.open [data-cs="bets"]'))));
+  ok('a board layout shows in where it is used', /Board dashboards by default/.test(await page.textContent(L + ' [data-home="synergy"]')));
+
+  /* ── drafts ── */
+  await page.click('[data-rp3-tab="drafts"]');
+  ok('the Drafts tab shows the report families', !!(await until(() => page.$('[data-rp3-pane="drafts"] [data-report-families] [data-family]'), 15000)));
+  ok('the dashboards are hidden while Drafts is open', await page.$eval(D, (n) => n.hidden));
+  await page.click('[data-rp3-tab="dash"]');
+
+  /* ── phone ── */
+  const ph = await browser.newContext({ viewport: { width: 400, height: 860 }, hasTouch: true, isMobile: true });
+  const pp = await ph.newPage(); watch(pp);
+  await open(pp); await loaded(pp, 7);
+  const noScroll = (pg) => pg.evaluate(() => document.documentElement.scrollWidth <= document.documentElement.clientWidth + 1);
+  ok('400px: no horizontal page scroll on the dashboard', await noScroll(pp), String(await pp.evaluate(() => document.documentElement.scrollWidth)));
+  const lefts = await pp.$$eval(D + ' [data-rp3-w]', (a) => [...new Set(a.map((w) => Math.round(w.getBoundingClientRect().left)))]);
+  ok('400px: the widgets stack in one column', lefts.length === 1, JSON.stringify(lefts));
+  await pp.click(D + ' [data-rp3-scope="initiative"]'); await loaded(pp, 4);
+  await pp.click(D + ' [data-rp3-edit]');
+  ok('400px: Initiative scope in edit mode has no horizontal scroll', await noScroll(pp));
+  await pp.click(D + ' [data-rp3-edit]');
+  await pp.click(D + ' [data-rp3-share]'); await until(() => pp.$('[data-rp3-sheet] [data-rp3-frame]'));
+  ok('400px: the share sheet has no horizontal scroll', await noScroll(pp));
+  await pp.keyboard.press('Escape');
+  await pp.click('[data-rp3-tab="lib"]'); await pp.click('[data-rp3-pane="lib"] [data-home="delivery"]');
+  await until(() => pp.$('[data-rp3-pane="lib"] [data-home="delivery"] .xp.open [data-cs="delivery"]'));
+  ok('400px: the library with an open row has no horizontal scroll', await noScroll(pp));
+  await ph.close();
+
+  await sleep(300);   // a late error from a closing view would land here
+  ok('no script error and no console error', errors.length === 0, errors.slice(0, 4).join(' | '));
+  return finish();
+})();

package/workspace/fixtures/one-home-baseline.json

@@ -36,6 +36,20 @@
         "work"
       ]
     },
+    {
+      "title": "cut to 3 flows and hold 24 oct",
+      "tabs": [
+        "init",
+        "rep"
+      ]
+    },
+    {
+      "title": "freeze scope after today's decision",
+      "tabs": [
+        "init",
+        "rep"
+      ]
+    },
     {
       "title": "pick interview slots with 3 customers",
       "tabs": [
@@ -43,6 +57,13 @@
         "work"
       ]
     },
+    {
+      "title": "pull returns forward a quarter if interview 5 agrees",
+      "tabs": [
+        "init",
+        "rep"
+      ]
+    },
     {
       "title": "review the 13:00 interview guide",
       "tabs": [
@@ -50,6 +71,13 @@
         "work"
       ]
     },
+    {
+      "title": "run the address-step experiment, freeze scope",
+      "tabs": [
+        "init",
+        "rep"
+      ]
+    },
     {
       "title": "say yes to sam: ship the logging change",
       "tabs": [
@@ -68,15 +96,7 @@
       "title": "sso is live with 3 customers",
       "tabs": [
         "brief",
-        "init",
-        "rep"
-      ]
-    },
-    {
-      "title": "the board update is 70% ready",
-      "tabs": [
-        "init",
-        "rep"
+        "init"
       ]
     }
   ]

package/workspace/guide/index.md

@@ -62,3 +62,4 @@ On a desktop the workspace is one frame. [Layout](layout.md) explains each part.
 - [Board](board.md): one Kanban for the items of every initiative, its filters, Release, and `pmos board`.
 - [Integrated work](integrated-work.md): how `pmos verify-work` turns a merged commit into Done, and what "Done · your call · not merged" means.
 - [Report slides](report-slides.md): how the Reports page shows a report as the PM-OS biweekly slides, Present and Print / PDF, and how your notes become the words on the slides.
+- [Reports: dashboards of reports](reports-dashboards.md): the console Reports page, its dashboards at portfolio, board and initiative scope, how to edit and share one as a draft, and the Drafts tab.

package/workspace/guide/layout.md

@@ -2,7 +2,7 @@
 type: Guide
 title: "Guide: layout"
 description: "The frame: one top bar, the place on screen, the detail and the agent dock; the phone tabs and lists; the keys; and the older layout."
-timestamp: 2026-10-08
+timestamp: 2026-10-11
 ---
 
 # Guide: layout
@@ -51,7 +51,7 @@ The dock holds your terminals, documents, conversations, skills and web pages. I
 
 - Press ⌘J (Ctrl-J), or the button on the rail, to open the dock. Press ⌘J again, or the fold button in the dock, to fold it to the rail.
 - The dock never opens by itself. A tab that opens while the dock is a rail waits in the dock until you open it.
-- The dock lists the sessions of the repository by initiative. A session is in the group of the initiative it is recorded on, or of its `initiative/<id>` branch. Then come **Not linked** (no initiative) and **Automatic** (anything you did not start yourself, for example a schedule, the day run, a note's summary or bullets, or a Jira push). **Automatic** is hidden until you press **Show automatic** at the foot of the list (or beside the group select in the strip). A session in front, or one held on a permission question, is always shown. An agent that has finished and reads "needs you" is hidden like the rest. Finished automatic sessions remove themselves a minute after a clean exit, and one with no output for 60 minutes is ended and removed. A failed one stays. When a session has been removed, its terminal tab closes too, also when the workspace was stopped for an update, so the tab does not come back as a row under **Open**. The setting is in `state/session-policy.json`: `finish` (true or false) and `idleMinutes` (5 or more, or 0 for off). Then **Open** lists the tabs that are not sessions, for example documents and skills. Each one shows its title, what it is (for example PRD, Document or Web page) and its branch when it is not main. **✕** on an Open row closes the tab only. A terminal keeps running.
+- The dock lists the sessions of the repository by initiative. A session is in the group of the initiative it is recorded on, or of its `initiative/<id>` branch. Then come **Not linked** (no initiative) and **Automatic** (anything you did not start yourself, for example a schedule, the day run, a note's summary or bullets, or a Jira push). **Automatic** is hidden until you press **Show automatic** at the foot of the list (or beside the group select in the strip). A session in front, or one held on a permission question, is always shown. An agent that has finished and reads "needs you" is hidden like the rest. Finished automatic sessions remove themselves a minute after a clean exit, and one with no output for 60 minutes is ended and removed. A failed one stays for a day. When a schedule starts a new run, it ends its previous run first, unless that run is still working or waits for your answer. Any session that has ended, also one you started, is removed after 7 days. Its conversation is kept when it ends. A session you started is never ended for you. When a session has been removed, its terminal tab closes too, also when the workspace was stopped for an update, so the tab does not come back as a row under **Open**. The setting is in `state/session-policy.json`: `finish` (true or false), `idleMinutes` (5 or more, or 0 for off) and `keepExitedDays` (1 to 365, or 0 to keep ended sessions). Then **Open** lists the tabs that are not sessions, for example documents and skills. Each one shows its title, what it is (for example PRD, Document or Web page) and its branch when it is not main. **✕** on an Open row closes the tab only. A terminal keeps running.
 - Each session row starts with a mark for its state: ● working, ◼ quiet, ◆ needs you, ◇ maybe blocked, ○ ended. Under the name, the row shows the state when the session is not working, the type of work when one is set, and the branch when it is not main and not the initiative's own branch. Running sessions come first and ended sessions last. Press the row to bring the session to the front.
 - Press the name of a group to fold it or open it. The number beside it counts its sessions. **Automatic** is folded while none of its sessions is running, because each run leaves an ended session. The group of the session in front always stays open, and the workspace keeps your choice for each group.
 - **⋯** and **✕** show on the row in front, on the row under the pointer and on the row with the keyboard focus. On a touch screen they always show.

package/workspace/guide/reports-dashboards.md

@@ -0,0 +1,57 @@
+---
+type: Guide
+title: "Reports: dashboards of reports"
+description: "How the console Reports page shows dashboards at portfolio, board and initiative scope, how to edit one, how to share one as a draft, and where the report drafts went."
+timestamp: 2026-10-11
+---
+
+# Reports: dashboards of reports
+
+A report answers one question. A dashboard is a set of reports for one scope. Open the Reports tab of the console to see them.
+
+## The three tabs
+
+- **Dashboards.** The reports of one scope, drawn from the repository's records.
+- **Library.** Every report the workspace can draw, with the question it answers and where it is used.
+- **Drafts.** The four report families, the claims check and the outbox. They work as before.
+
+## Choose a scope
+
+Press **Portfolio**, **Board** or **Initiative**.
+
+- **Portfolio** covers every initiative.
+- **Board** covers the initiatives of one board. A board is a domain. Choose it from the list beside the scope.
+- **Initiative** covers one initiative. Choose it from the list.
+
+A report shows only the rows that belong to the scope. A report with no rows in the scope shows an empty card. The card says what is missing and what fills it. The workspace never invents a number.
+
+## The reports
+
+| Report | The question it answers |
+|---|---|
+| North star | Is the north-star metric on its plan? |
+| Quarter outcomes | Where is each key result, where should it be, and where will it land? |
+| Early signals | What is drifting before the numbers say so? |
+| Delivery against promise | Which promised dates will hold? |
+| Maturity by pillar | Where does each pillar stand against its target? |
+| Bets and their checkpoints | When does each bet persevere or pivot? |
+| Synergy and coverage | Do the bets add up to the key results? |
+
+The Calendar page no longer carries these. They moved here.
+
+## Edit a dashboard
+
+1. Press **Edit dashboard**.
+2. Use the arrows to move a report. Press **Remove** to take one off. The report stays in the library, and **Undo** brings it back.
+3. Choose a report under **Add from the report library**.
+4. Press **Done editing**.
+
+The workspace keeps your layout for each scope in its runtime state. It does not write to the repository. **Reset to default** returns a scope to its first layout.
+
+## Share a dashboard
+
+Press **Share**. A sheet shows the dashboard as a report: a headline, one section per report, what needs your call, and the sources. Choose **Leadership** for one sentence per report. Choose **Team** to add the numbers behind each sentence.
+
+**Save as draft** puts one draft in the outbox. Nothing is sent. With no channel connected, the outbox says so.
+
+Scheduled sending is not available yet. The schedule control is off, and the sheet says why.

package/workspace/lib/git-info.js

@@ -251,6 +251,24 @@ function removeWorktree(root, dir) {
   return { ok: true, dir: target.dir, branch: target.branch, pruned: false };
 }
 
+// { ok, current, detached } — only the HEAD half of branchInfo, with the same failure codes. The
+// workspace list and the session heartbeat need the branch name and nothing else; branchInfo also
+// lists every branch, runs `git status --porcelain` and lists the worktrees, which on a large repo
+// is most of the cost and was paid for every workspace every 15 seconds. `top` may be passed when
+// the caller already resolved the repo root, saving one more shell-out.
+function headInfo(root, top) {
+  const t = top === undefined ? repoRoot(root) : top;
+  if (!t) {
+    if (!isRepo(root)) return { ok: false, code: 'no-git', error: 'not a git repository' };
+    return { ok: false, code: 'git-error', error: 'git not available' };
+  }
+  const head = git(root, ['rev-parse', '--abbrev-ref', 'HEAD']);
+  if (head.failed) return { ok: false, code: 'git-error', error: 'git not available' };
+  if (head.code !== 0) return { ok: false, code: 'git-error', error: head.err || 'could not read HEAD' };
+  const detached = head.out === 'HEAD';
+  return { ok: true, current: detached ? null : head.out, detached };
+}
+
 // { ok, current, branches[], detached, dirty, repoRoot, subdir, linked, worktrees[] }. A non-repo
 // or a failed git returns ok:false with a reason — NEVER a fabricated branch (a wrong branch chip
 // is worse than none; anti-drift). `subdir` is the workspace's path INSIDE the repo ('' at the
@@ -284,5 +302,5 @@ function branchInfo(root) {
   };
 }
 
-module.exports = { isRepo, repoRoot, validBranchName, branchInfo, checkout, worktrees, worktreePath,
+module.exports = { isRepo, repoRoot, validBranchName, branchInfo, headInfo, checkout, worktrees, worktreePath,
   addWorktree, worktreeSafety, removeWorktree, originUrl, isGithubRemote };