create-pmos 0.134.0 → 0.135.0

package/workspace/public/pm/c3-demo-boards.js

@@ -0,0 +1,649 @@
+/* pm/c3-demo-boards.js — DEMO ONLY (/c3.html?demo=1): the Initiatives boards fixture (PRD c3-initiative-boards, S3, widened by
+ * console3-initiatives-parity). It answers every /api/boards GET and POST with the response shapes of routes-boards.js, from 5 boards
+ * and about 310 initiatives:
+ *   IDPF (Build and deliver on, Jira IDPF) · Payments (on, Jira PAY) · Growth (on, Jira GRO) · Office move (off, Project) ·
+ *   Hiring Q4 (off, Simple).
+ * Each initiative runs its own workflow: most run their board's, some picked another template (IDPF-21 Research only, GRO-02 Content
+ * and launch, and a share of the generated rows Quick fix or Research only). The work items are Jira items (on the Build and deliver
+ * boards; the demo gives them dates and owners, which the real mirror does not have) and PMOS epics and tasks.
+ * The rows are generated the way the restructure mockup's 10-data.js does it (the same seed, word lists and weights). Filtering,
+ * sorting, paging and facets are done here the way the server does them. A write changes the in-memory state only (a move, a
+ * workflow, board settings, a new board, an ask, a task): nothing reaches the server, and a reload starts again.
+ *
+ * Wiring: c3-demo.js imports installBoards and calls it in installDemo(), after its own wrapper, so this wrapper sits outermost and
+ * answers the POSTs before c3-demo.js's catch-all "{ ok: true }". Real mode never loads this file.
+ * Pure parts (exported for a Node test): createStore(), handle(store, method, path, params, body). */
+import { WS_ID, TODAY } from './c3-demo-data.js';
+
+const DAY = 86400000;
+const CATS = ['Discover', 'Plan', 'Do', 'Learn'];
+const st = (name, cat, hint) => ({ name, cat, hint: hint || '' });
+/** The workflow templates an initiative can run (scripts/boards.js INI_TEMPLATES). */
+export const INI_TEMPLATES = {
+  product: { name: 'Product', kind: 'product', use: 'Product work that ships: discovery through to evaluating what shipped.', stages: [st('Discover', 'Discover', 'Discovery and ideation'), st('Plan', 'Plan', 'Strategize, then prioritize, then plan'), st('Build & Deliver', 'Do', 'Tickets, risks, release'), st('Monitor & Evaluate', 'Learn', 'Metrics, outcome check, learnings')] },
+  fix: { name: 'Quick fix', kind: 'product', use: 'A small, known change: plan it, build it, ship it, check it.', stages: [st('Plan', 'Plan'), st('Build & Deliver', 'Do'), st('Evaluate', 'Learn')] },
+  research: { name: 'Research only', kind: 'product', use: 'Learn before committing. Nothing gets built in this initiative.', stages: [st('Discover', 'Discover'), st('Plan', 'Plan'), st('Evaluate', 'Learn')] },
+  content: { name: 'Content and launch', kind: 'project', use: 'Pages, campaigns and launches that a team or an agency produces.', stages: [st('Discover', 'Discover'), st('Plan', 'Plan'), st('Produce', 'Do'), st('Launch', 'Do'), st('Evaluate', 'Learn')] },
+  project: { name: 'Project', kind: 'project', use: 'Someone who only manages a project: plan it, run it, close it.', stages: [st('Plan', 'Plan', 'Scope, milestones, owners'), st('Execute', 'Do', 'Progress, risks, blockers'), st('Close', 'Learn', 'Outcome and retro')] },
+  simple: { name: 'Simple', kind: 'simple', use: 'A plain to-do flow for small or personal work.', stages: [st('To do', 'Plan'), st('Doing', 'Do'), st('Done', 'Learn')] },
+};
+const tplStages = (t) => INI_TEMPLATES[t].stages.map((s) => ({ ...s }));
+const isBuildStage = (s) => /^(build|deliver)/i.test(String((s && s.name) || s || ''));
+const templateBuilds = (k) => !!INI_TEMPLATES[k] && INI_TEMPLATES[k].stages.some(isBuildStage);
+const T = (id, label) => ({ id, label });
+/** The stage tools per template kind and category (scripts/boards.js TOOLS). */
+const TOOLS = {
+  product: { Discover: [T('ideas', 'Ideas'), T('hypotheses', 'Hypotheses'), T('notes', 'Notes')], Plan: [T('prd', 'PRD'), T('rubric', 'Done-criteria'), T('breakdown', 'Breakdown'), T('placement', 'Roadmap place')], Do: [T('breakdown', 'Breakdown'), T('tickets', 'Tickets'), T('releases', 'Releases')], Learn: [T('measurements', 'Measurements'), T('evaluation', 'Evaluation'), T('history', 'History')] },
+  project: { Discover: [T('notes', 'Notes')], Plan: [T('brief', 'Brief'), T('breakdown', 'Breakdown'), T('timeline', 'Timeline')], Do: [T('breakdown', 'Breakdown'), T('tickets', 'Tickets'), T('timeline', 'Timeline')], Learn: [T('notes', 'Notes'), T('history', 'History')] },
+  simple: { Discover: [T('notes', 'Notes')], Plan: [T('notes', 'Notes')], Do: [T('breakdown', 'Breakdown')], Learn: [T('history', 'History')] },
+};
+const TASK_STATES = ['To do', 'In progress', 'In review', 'Done'];
+const PROG = { 'To do': 0, 'In progress': 0.45, 'In review': 0.8, Done: 1 };
+const KR = { '1.1': 'API p95 latency under 300 ms', '1.2': 'No Sev1 incidents', '1.3': 'Partner uptime 99.9%', '2.1': 'Activation to 45%', '2.2': 'First API call within one day', '2.3': 'WAU partners +20%', '3.1': 'Payments revenue +18%', '3.2': 'Net revenue retention 115%', '4.1': 'PCI scope reduced', '4.2': 'Chargebacks under 0.4%', '4.3': 'Payouts within 24 hours' };
+const TITLE_WORDS = {
+  idpf: ['Audit log', 'SSO', 'Webhooks', 'Sandbox', 'Docs search', 'Key rotation', 'Org roles', 'Status page', 'SDK', 'Quota alerts', 'Data export', 'CLI', 'API versioning', 'Usage dashboard'],
+  pay: ['Invoices', 'Refunds', 'Payouts', 'Fraud rules', 'Retry policy', 'Rate cards', 'Chargeback flow', 'Settlement reports', '3DS', 'Wallets'],
+  growth: ['Onboarding emails', 'Referral', 'Trial limits', 'Pricing page', 'Activation checklist', 'In-app tips', 'Win-back emails', 'Mobile app'],
+  office: ['Desk plan', 'Network', 'Furniture', 'Movers', 'Signage', 'Parking', 'Security badges', 'Meeting rooms', 'Pantry'],
+  hiring: ['Recruiter', 'Interview loop', 'Offer process', 'Referral bonus', 'New-hire onboarding', 'Job posts', 'Sourcing'],
+};
+const hash = (s) => [...String(s)].reduce((a, c) => (a * 31 + c.charCodeAt(0)) % 1000003, 7);
+const base = (() => { const [y, m, d] = TODAY.split('-').map(Number); return new Date(y, m - 1, d).getTime(); })();
+const iso = (t) => { const d = new Date(t); return d.getFullYear() + '-' + String(d.getMonth() + 1).padStart(2, '0') + '-' + String(d.getDate()).padStart(2, '0'); };
+const D = (n) => iso(base + n * DAY);
+const at = (n, h) => D(n) + 'T' + String(h || 9).padStart(2, '0') + ':00:00';
+const shiftDay = (day, n) => { const m = /^(\d{4})-(\d{2})-(\d{2})$/.exec(String(day || '')); if (!m) return null; return iso(new Date(Number(m[1]), Number(m[2]) - 1, Number(m[3])).getTime() + n * DAY); };
+const sameFlow = (a, b) => a.length === b.length && a.every((s, k) => s.name === b[k].name && s.cat === b[k].cat);
+
+/** A fresh, deterministic store: boards, initiatives, asks, releases, work items and the ledger of events. */
+export function createStore() {
+  const B = (id, name, full, template, owner, health, prefix, jira, offer, defTpl) => ({ ws: WS_ID, id, name, full, domain: id, template, workflow: tplStages(template), self: false,
+    build: !!jira, jira, tracker: jira ? 'Jira · ' + jira : null, sprints: !!jira, offer, defTpl, owner, health, prefix });
+  const BUILD_OFFER = ['product', 'fix', 'research', 'content'];
+  const boards = [
+    B('idpf', 'IDPF', 'Identity & Developer Platform', 'product', 'You', 'warn', 'IDPF', 'IDPF', BUILD_OFFER, 'product'),
+    B('pay', 'Payments', 'Payments platform', 'product', 'Eko Prasetyo', 'ok', 'PAY', 'PAY', BUILD_OFFER, 'product'),
+    B('growth', 'Growth', 'Activation and retention', 'product', 'You', 'ok', 'GRO', 'GRO', BUILD_OFFER, 'product'),
+    B('office', 'Office move', 'Jakarta office move 2027', 'project', 'Gita Rahma', 'bad', 'OFF', null, ['content', 'project', 'research', 'simple'], 'project'),
+    B('hiring', 'Hiring Q4', 'Q4 hiring plan', 'simple', 'You', 'ok', 'HIR', null, ['simple', 'project'], 'simple'),
+  ];
+  const I = (id, board, title, stage, owner, anchor, horizon, status, s, e, progress, lane, spec, template) => ({ id, board, title, stage, owner, anchor, horizon, status, start: D(s), end: D(e), progress, lane, spec: !!spec, warnings: [], featured: true, template: template || null, workflow: template ? tplStages(template) : null });
+  const rows = [
+    I('IDPF-12', 'idpf', 'Self-serve onboarding v2', 'Build & Deliver', 'You', 'KR 2.1 Activation to 45%', 'now', 'at risk', -40, 18, 0.62, 'feature', true),
+    I('IDPF-07', 'idpf', 'Partner API rate limits', 'Plan', 'You', 'KR 1.3 Partner uptime 99.9%', 'now', 'on track', -12, 45, 0.25, 'feature', false),
+    I('IDPF-21', 'idpf', 'Usage-based billing', 'Discover', 'You', 'KR 3.2 Net revenue retention 115%', 'next', 'on track', -5, 90, 0.1, 'discovery', false, 'research'),
+    I('PAY-03', 'pay', 'Card tokenisation', 'Build & Deliver', 'Eko Prasetyo', 'KR 4.1 PCI scope reduced', 'now', 'on track', -70, 3, 0.9, 'feature', true),
+    I('GRO-02', 'growth', 'Weekly partner digest', 'Discover', 'You', 'KR 2.3 WAU partners +20%', 'next', 'on track', 2, 60, 0, 'discovery', false, 'content'),
+    I('OFF-01', 'office', 'Fit-out contractor selection', 'Execute', 'Gita Rahma', 'Project milestone: lease signed', 'now', 'late', -30, -2, 0.7, 'chore', false),
+    I('HIR-04', 'hiring', 'Senior backend engineer', 'Doing', 'You', 'Hiring plan Q4', 'now', 'on track', -20, 30, 0.4, 'chore', false),
+  ];
+  rows.find((r) => r.id === 'IDPF-12').warnings = ['Skipped Plan'];
+  /* the mockup's generator (10-data.js): the same seed, weights and draws, so the boards hold the same mix */
+  const owners = ['You', 'Ana Putri', 'Eko Prasetyo', 'Budi Santoso', 'Chen Wei', 'Gita Rahma', ''];
+  const horizons = ['now', 'next', 'later', 'later', 'next'];
+  const statuses = ['on track', 'on track', 'on track', 'at risk', 'late', 'done'];
+  const weights = ['idpf', 'idpf', 'idpf', 'idpf', 'pay', 'pay', 'pay', 'growth', 'growth', 'office', 'hiring'];
+  const counters = { idpf: 30, pay: 10, growth: 5, office: 2, hiring: 5 };
+  const suffix = ['v2', 'cleanup', 'pilot', 'for enterprise', 'migration', 'phase 2', 'redesign', 'MVP', 'hardening', 'GA'];
+  const pools = { idpf: ['1.1', '1.2', '1.3', '2.1', '2.2', '3.2'], pay: ['3.1', '3.2', '4.1', '4.2', '4.3', '1.2'], growth: ['2.1', '2.2', '2.3', '3.2'] };
+  const lanes = ['feature', 'feature', 'feature', 'discovery', 'chore', 'incident'];
+  let seed = 7; const r = () => (seed = (seed * 16807) % 2147483647) / 2147483647;
+  for (let i = 0; i < 305; i++) {
+    const pick = weights[Math.floor(r() * weights.length)];
+    const b = boards.find((x) => x.id === pick);
+    let st0 = b.workflow[Math.floor(r() * b.workflow.length)].name;
+    const s = Math.floor(r() * 200) - 120; const len = 20 + Math.floor(r() * 90);
+    const status = st0 === b.workflow[b.workflow.length - 1].name && r() > 0.5 ? 'done' : statuses[Math.floor(r() * statuses.length)];
+    const id = b.prefix + '-' + (++counters[b.id]);
+    r(); const sx = suffix[Math.floor(r() * suffix.length)];
+    const owner = owners[Math.floor(r() * owners.length)]; r(); r();
+    const horizon = horizons[Math.floor(r() * horizons.length)];
+    const progress = status === 'done' ? 1 : Math.round(r() * 100) / 100;
+    const x = hash(id);
+    const words = TITLE_WORDS[b.id];
+    const title = words[x % words.length] + ' ' + (['office', 'hiring'].includes(b.id) ? ['phase 1', 'phase 2', 'vendor', 'plan', 'review'][x % 5] : sx);
+    let anchor = pools[b.id] ? (() => { const k = pools[b.id][x % pools[b.id].length]; return 'KR ' + k + ' ' + KR[k]; })() : b.id === 'office' ? 'Project milestone: ' + ['Lease signed', 'Fit-out complete', 'Move weekend'][x % 3] : 'Hiring plan Q4';
+    if (x % 29 === 0) anchor = '';
+    const lane = ['office', 'hiring'].includes(b.id) ? 'chore' : lanes[x % lanes.length];
+    let start = s; let end = s + len;
+    let stat = status;
+    if (horizon !== 'now' && stat !== 'done' && stat !== 'on track') stat = x % 3 ? 'on track' : 'at risk';
+    /* dates that agree with the horizon (the mockup's shapeInitiatives): Now spans today, Next starts soon, Later starts later */
+    if (stat !== 'done' && stat !== 'late') {
+      if (horizon === 'now' && (end < 0 || start > 10)) { start = -(x % Math.max(1, len - 10)); end = start + len; }
+      else if (horizon === 'next' && (start < 5 || start > 80)) { start = 5 + (x % 60); end = start + len; }
+      else if (horizon === 'later' && start < 50) { start = 50 + (x % 90); end = start + len; }
+    }
+    if (stat === 'late' && end > 0) { end = -1 - (x % 9); start = end - len; }
+    if (stat === 'done' && end > 0) { end = -(x % 40) - 1; start = end - len; }
+    /* a share of the product-board rows picked another workflow (the mockup's perInitiativeWorkflows) */
+    let template = null;
+    if (b.build && x % 9 === 0) template = 'fix'; else if (b.build && x % 13 === 0) template = 'research';
+    if (template === 'fix') { if (st0 === 'Discover') st0 = 'Plan'; if (st0 === 'Monitor & Evaluate') st0 = 'Evaluate'; }
+    if (template === 'research') { if (st0 === 'Build & Deliver') st0 = 'Plan'; if (st0 === 'Monitor & Evaluate') st0 = 'Evaluate'; }
+    rows.push({ id, board: b.id, title, stage: st0, owner, anchor, horizon, status: stat, start: D(start), end: D(end), progress, lane, spec: lane === 'feature' && x % 3 !== 0, warnings: [], featured: false, template, workflow: template ? tplStages(template) : null });
+  }
+  const asks = [
+    { id: 'ask-1', board: 'idpf', line: 'SSO for enterprise trials', source: 'Lina Kusuma (Sales), Slack #sales-asks', at: at(-1, 16), state: 'open', draft: { lane: 'feature', confidence: 0.72, anchor_suggestion: 'KR 2.1 Activation to 45%', prior_rejections: [{ id: 'IDPF-5', title: 'SSO in trial', why: 'security review cost' }] } },
+    { id: 'ask-2', board: 'pay', line: 'Bulk CSV export of invoices', source: 'Sari Wijaya (Support), Jira Service Desk', at: at(-2, 9), state: 'open', draft: { lane: 'feature', confidence: 0.81, anchor_suggestion: 'KR 3.1 Payments revenue +18%', prior_rejections: [] } },
+    { id: 'ask-3', board: 'idpf', line: 'Webhook retries for Partner X', source: 'Raj Mehta (Partner), email', at: at(-4, 11), state: 'open', needMore: true, moreNote: 'Which webhooks fail, and how often?', draft: { lane: 'incident', confidence: 0.55, anchor_suggestion: 'KR 1.3 Partner uptime 99.9%', prior_rejections: [] } },
+    { id: 'ask-4', board: 'office', line: 'Parking for 40 cars at the new office', source: 'Gita Rahma (Ops), meeting note', at: at(-4, 15), state: 'open', draft: { lane: 'chore', confidence: 0.64, anchor_suggestion: 'Project milestone: Move weekend', prior_rejections: [] } },
+  ];
+  const releases = [
+    { id: 'rel-pay-14', board: 'pay', name: 'Tokenisation 1.4', date: D(7), status: 'Ready', scope: ['PAY-03'] },
+    { id: 'rel-idpf-31', board: 'idpf', name: 'IDPF 3.1 · Onboarding beta', date: D(22), status: 'At risk', scope: ['IDPF-12'] },
+    { id: 'rel-idpf-32', board: 'idpf', name: 'IDPF 3.2 · Rate limits', date: D(56), status: 'Planned', scope: ['IDPF-07'] },
+    { id: 'rel-idpf-30', board: 'idpf', name: 'IDPF 3.0 · Partner keys', date: D(-21), status: 'Released', scope: ['IDPF-07', 'IDPF-12'] },
+  ];
+  const events = [
+    { at: at(-5, 10), by: 'You', kind: 'move', board: 'idpf', id: 'IDPF-07', from: 'Discover', to: 'Plan', why: '', warnings: [] },
+    { at: at(-4, 9), by: 'You', kind: 'workflow', board: 'idpf', id: 'IDPF-21', template: 'research', stages: INI_TEMPLATES.research.stages.map((s) => s.name) },
+    { at: at(-3, 14), by: 'You', kind: 'move', board: 'idpf', id: 'IDPF-12', from: 'Discover', to: 'Build & Deliver', why: 'Beta needs a build now', warnings: ['Skipped Plan'] },
+    { at: at(-2, 11), by: 'Eko Prasetyo', kind: 'move', board: 'pay', id: 'PAY-03', from: 'Plan', to: 'Build & Deliver', why: '', warnings: [] },
+    { at: at(-1, 15), by: 'Gita Rahma', kind: 'move', board: 'office', id: 'OFF-01', from: 'Plan', to: 'Execute', why: '', warnings: [] },
+    { at: at(-1, 17), by: 'You', kind: 'move', board: 'hiring', id: 'HIR-04', from: 'To do', to: 'Doing', why: 'Two candidates at final round', warnings: [] },
+  ];
+  /* Jira items mirrored from the board's Jira project (Build and deliver boards). The real mirror has no dates or people; the demo
+   * gives them both so the Timeline has something to draw. s and e are day offsets from today. */
+  const J = (key, kind, ini, epic, title, status, owner, s, e) => ({ key, kind, ini, epic, title, status, owner, start: s == null ? null : D(s), end: e == null ? null : D(e) });
+  const jira = [
+    J('IDPF-1160', 'Epic', 'IDPF-12', null, 'Guided setup flow', 'In progress', 'Budi Santoso'),
+    J('IDPF-1170', 'Story', 'IDPF-12', 'IDPF-1160', 'Setup step 1: workspace name', 'Done', 'Budi Santoso', -38, -26),
+    J('IDPF-1175', 'Story', 'IDPF-12', 'IDPF-1160', 'Setup step 2: first API key', 'Done', 'Budi Santoso', -24, -10),
+    J('IDPF-1161', 'Epic', 'IDPF-12', null, 'Provisioning and beta', 'In progress', 'Ana Putri'),
+    J('IDPF-1182', 'Story', 'IDPF-12', 'IDPF-1161', 'Workspace provisioning API', 'In progress', 'Ana Putri', -12, 4),
+    J('IDPF-1186', 'Bug', 'IDPF-12', 'IDPF-1161', 'Provisioning retries on timeout', 'In review', 'Ana Putri', -6, 3),
+    J('IDPF-1190', 'Task', 'IDPF-12', 'IDPF-1161', 'QA test plan for beta', 'Blocked', 'Ana Putri', -5, 2),
+    J('IDPF-1201', 'Story', 'IDPF-12', 'IDPF-1161', 'Beta invite emails', 'To do', 'Chen Wei', 5, 12),
+    J('IDPF-1209', 'Epic', 'IDPF-07', null, 'Partner rate limiting', 'To do', 'Ana Putri'),
+    J('IDPF-1210', 'Task', 'IDPF-07', 'IDPF-1209', 'Spike: token bucket per partner', 'Done', 'Ana Putri', -14, -5),
+    J('IDPF-1214', 'Story', 'IDPF-07', 'IDPF-1209', '429 response with a Retry-After header', 'To do', 'Ana Putri', 14, 30),
+    J('IDPF-1215', 'Story', 'IDPF-07', 'IDPF-1209', 'Rate-limit dashboard for partners', 'To do', 'Budi Santoso', 20, 40),
+    J('PAY-400', 'Epic', 'PAY-03', null, 'Network tokens', 'In progress', 'Eko Prasetyo'),
+    J('PAY-401', 'Story', 'PAY-03', 'PAY-400', 'Network token provisioning', 'Done', 'Eko Prasetyo', -60, -30),
+    J('PAY-405', 'Story', 'PAY-03', 'PAY-400', 'Migrate stored cards', 'Done', 'Eko Prasetyo', -35, -8),
+    J('PAY-410', 'Task', 'PAY-03', 'PAY-400', 'Release notes 1.4', 'To do', 'You', 0, 3),
+    J('PAY-412', 'Bug', 'PAY-03', 'PAY-400', 'Remove card digits from a log line', 'In progress', 'Eko Prasetyo', -2, 2),
+  ];
+  /* PMOS epics and tasks (the team's tasks; home: Initiative · Breakdown). A task's epic may be a Jira epic or a PMOS epic. */
+  const K = (id, board, ini, title, owner, state, s, e, epic, kind) => ({ id, board, initiative: ini, title, owner, state: state || 'To do', start: D(s), due: D(e), epic: epic || null, kind: kind || 'Task', history: [] });
+  const tasks = [
+    K('t-idpf-1', 'idpf', 'IDPF-12', 'Agree the beta invite list with Sales', 'You', 'In progress', -4, 3, 'IDPF-1161'),
+    K('t-idpf-2', 'idpf', 'IDPF-12', 'Brief Support on the new setup flow', 'Sari Wijaya', 'To do', 6, 12),
+    K('t-idpf-3', 'idpf', 'IDPF-21', 'Write the interview guide for billing calls', 'You', 'In progress', -3, 4),
+    K('t-idpf-4', 'idpf', 'IDPF-21', 'Book five interviews with large API users', 'You', 'To do', 2, 14),
+    K('t-gro-1', 'growth', 'GRO-02', 'Pull partner admin login data', 'Chen Wei', 'To do', 3, 10),
+    K('t-gro-2', 'growth', 'GRO-02', 'Draft the first digest email', 'You', 'To do', 9, 16),
+    K('e-off-1', 'office', 'OFF-01', 'Bids and selection', 'Gita Rahma', 'To do', -30, -2, null, 'Epic'),
+    K('e-off-2', 'office', 'OFF-01', 'Contract', 'Tom Hartono', 'To do', -4, 10, null, 'Epic'),
+    K('t-off-1', 'office', 'OFF-01', 'Compare the three fit-out bids', 'Gita Rahma', 'Done', -25, -10, 'e-off-1'),
+    K('t-off-2', 'office', 'OFF-01', 'Site visits with two contractors', 'Gita Rahma', 'Done', -12, -4, 'e-off-1'),
+    K('t-off-3', 'office', 'OFF-01', 'Legal review of the contract', 'Tom Hartono', 'In progress', -3, 4, 'e-off-2'),
+    K('t-off-4', 'office', 'OFF-01', 'Sign the contract', 'Gita Rahma', 'To do', 4, 8, 'e-off-2'),
+    K('t-hir-1', 'hiring', 'HIR-04', 'Schedule the two final rounds', 'You', 'In progress', -4, 2),
+    K('t-hir-2', 'hiring', 'HIR-04', 'Reference checks for the finalists', 'Ana Putri', 'To do', 3, 10),
+    K('t-hir-3', 'hiring', 'HIR-04', 'Write the offer letter', 'You', 'To do', 9, 13),
+  ];
+  /* stage records (the stage-records routes' shapes: /api/stage-tools/records, rice, burndown), keyed initiative -> tool -> { data, at, by } */
+  const R = (data, n) => ({ data, at: at(n, 10), by: 'You' });
+  const records = {
+    'IDPF-12': { problem: R({ text: 'New workspaces wait two days for a sales-assisted setup, and 38% of trials never make a first API call.' }, -30), rice: R({ reach: 1400, impact: 2, confidence: 80, effort: 4 }, -20),
+      launch: R({ items: [{ id: 'l1', text: 'Beta invite list agreed with Sales', done: true }, { id: 'l2', text: 'Support briefed on the new setup flow', done: false }, { id: 'l3', text: 'Rollback plan for provisioning', done: false }, { id: 'l4', text: 'Status page entry drafted', done: false }] }, -2),
+      kill: R({ items: [{ id: 'k1', text: 'Activation below 35% four weeks after beta', status: 'watching' }] }, -10) },
+    'IDPF-07': { rice: R({ reach: 600, impact: 3, confidence: 70, effort: 3 }, -6) },
+    'IDPF-21': { problem: R({ text: 'Large API users pay a flat fee and small ones overpay, so neither group expands. We do not yet know how they forecast spend.' }, -4) },
+    'PAY-03': { rice: R({ reach: 900, impact: 2, confidence: 90, effort: 6 }, -50), launch: R({ items: [{ id: 'l1', text: 'PCI assessor sign-off', done: true }, { id: 'l2', text: 'Release notes 1.4', done: false }, { id: 'l3', text: 'Card digits removed from logs', done: false }] }, -1) },
+    'GRO-02': { problem: R({ text: 'Partner admins only log in when something breaks, so they miss new features and usage trends.' }, -1) },
+    'OFF-01': { launch: R({ items: [{ id: 'l1', text: 'Three bids compared', done: true }, { id: 'l2', text: 'Legal review of the contract', done: false }, { id: 'l3', text: 'Contract signed', done: false }] }, -3), learnings: R({ items: [{ id: 'n1', text: 'Ask for fixed-price bids first: two of three changed their price after the site visit.', date: D(-6) }] }, -6) },
+  };
+  return { boards, rows, asks, releases, events, jira, tasks, records, seq: 0 };
+}
+
+/* ── reads ── */
+const boardOf = (S, id) => S.boards.find((x) => x.id === id);
+const wfOf = (S, r) => r.workflow || boardOf(S, r.board).workflow;
+const catIn = (wf, stage) => ((wf.find((s) => s.name === stage) || {}).cat) || 'Plan';
+const catOfRow = (S, r) => catIn(wfOf(S, r), r.stage);
+const tplEdited = (b) => !INI_TEMPLATES[b.template] || !sameFlow(tplStages(b.template), b.workflow);
+const isOpen = (r) => r.status !== 'done';
+const nextRelease = (S, bid) => S.releases.filter((x) => x.board === bid && x.date >= TODAY).sort((a, c) => (a.date < c.date ? -1 : 1))[0] || null;
+const openAsks = (S, bid) => S.asks.filter((a) => a.board === bid && a.state === 'open').length;
+function rowOut(S, r) {
+  const wf = wfOf(S, r);
+  return { id: r.id, title: r.title, lane: r.lane, stage: r.stage, cat: catIn(wf, r.stage), owner: r.owner || null, anchor: r.anchor, horizon: r.horizon, status: r.status, start: r.start, end: r.end, progress: r.progress,
+    warnings: r.warnings.slice(), template: r.template || null, workflow: wf.map((s) => ({ name: s.name, cat: s.cat })) };
+}
+function boardOut(S, b) {
+  const list = S.rows.filter((r) => r.board === b.id);
+  const byCat = Object.fromEntries(CATS.map((c) => [c, 0]));
+  for (const r of list) byCat[catOfRow(S, r)]++;
+  const rel = nextRelease(S, b.id);
+  return { ws: b.ws, id: b.id, name: b.name, full: b.full, domain: b.domain, template: b.template, templateEdited: tplEdited(b), workflow: b.workflow.map((s) => ({ ...s })), self: b.self, tracker: b.tracker, sprints: b.sprints,
+    build: b.build, buildDeliver: b.build, jira: b.jira, offer: b.offer.slice(), defTpl: b.defTpl, owner: b.owner, health: b.health,
+    counts: { total: list.length, open: list.filter(isOpen).length, byCat, risk: list.filter((r) => r.status === 'at risk').length, late: list.filter((r) => r.status === 'late').length },
+    asks: openAsks(S, b.id), nextRelease: rel ? { id: rel.id, name: rel.name, at: rel.date, date: rel.date, status: rel.status } : null };
+}
+const H = { now: 0, next: 1, later: 2 };
+const SS = { late: 0, 'at risk': 1, 'on track': 2, done: 3 };
+/** The saved view and the search, as the server applies them (the base the facets count). */
+function viewRows(S, b, p) {
+  const q = String(p.q || '').trim().toLowerCase();
+  const view = p.view || 'now';
+  return S.rows.filter((r) => {
+    if (r.board !== b.id) return false;
+    if (view === 'now' && (!['now', 'next'].includes(r.horizon) || !isOpen(r))) return false;
+    if (view === 'mine' && (r.owner !== 'You' || !isOpen(r))) return false;
+    if (view === 'risk' && !['at risk', 'late'].includes(r.status)) return false;
+    if (view === 'noowner' && (r.owner || !isOpen(r))) return false;
+    if (q && !(r.id + ' ' + r.title + ' ' + r.anchor + ' ' + r.owner).toLowerCase().includes(q)) return false;
+    return true;
+  });
+}
+/** Then each named filter (a value or a comma list; 'none' for an empty owner or anchor), as scripts/boards.js filterRows does. */
+function filterRows(S, b, p) {
+  return viewRows(S, b, p).filter((r) => {
+    const has = (want, v) => !want || String(want).split(',').map((x) => x.trim().toLowerCase()).includes(String(v || 'none').toLowerCase());
+    return has(p.stage, r.stage) && has(p.cat, catOfRow(S, r)) && has(p.status, r.status) && has(p.owner, r.owner) && has(p.horizon, r.horizon) && has(p.anchor, r.anchor);
+  });
+}
+function sortRows(S, list, sort) {
+  const desc = String(sort || '').startsWith('-'); const key = String(sort || 'horizon').replace(/^-/, '');
+  const num = (id) => Number(String(id).split('-').pop()) || 0;
+  const stageAt = (r) => { const wf = wfOf(S, r); return wf.findIndex((s) => s.name === r.stage) / Math.max(1, wf.length - 1); };
+  const val = { id: (r) => num(r.id), title: (r) => r.title.toLowerCase(), stage: stageAt, status: (r) => SS[r.status] ?? 9, progress: (r) => r.progress,
+    owner: (r) => (r.owner ? r.owner.toLowerCase() : '~'), horizon: (r) => (H[r.horizon] ?? 9) * 1e9 + Number(r.end.replace(/-/g, '')), rank: (r) => (H[r.horizon] ?? 9) * 1e9 + Number(r.end.replace(/-/g, '')), end: (r) => r.end, start: (r) => r.start }[key] || ((r) => num(r.id));
+  return list.slice().sort((a, c) => { const x = val(a); const y = val(c); return ((x < y ? -1 : x > y ? 1 : 0) * (desc ? -1 : 1)) || (c.featured - a.featured) || (num(a.id) - num(c.id)); });
+}
+const tally = (list, f) => { const o = {}; for (const r of list) { const k = f(r); o[k] = (o[k] || 0) + 1; } return o; };
+
+/* ── work items: Jira items (Build and deliver boards) and PMOS tasks, epics rolled up ── */
+const itemStatus = (s) => (/review/i.test(s) ? 'In review' : /progress|block/i.test(s) ? 'In progress' : /done|closed/i.test(s) ? 'Done' : 'To do');
+const taskItem = (t) => ({ uid: t.id, key: '', kind: t.kind === 'Epic' ? 'Epic' : 'Task', src: 'pmos', title: t.title, status: t.state, blocked: false, owner: t.owner || null, ini: t.initiative, epic: t.epic || null, start: t.start || null, end: t.due || null, ref: t.id, board: t.board });
+function rollup(items) {
+  for (const w of items) w.progress = PROG[w.status] || 0;
+  for (const e of items.filter((w) => w.kind === 'Epic')) {
+    const kids = items.filter((w) => w.epic && w.epic === e.uid);
+    if (!kids.length) continue;
+    e.progress = Math.round((kids.reduce((n, w) => n + w.progress, 0) / kids.length) * 100) / 100;
+    e.status = kids.every((w) => w.status === 'Done') ? 'Done' : kids.some((w) => w.status !== 'To do') ? 'In progress' : 'To do';
+    e.blocked = kids.some((w) => w.blocked);
+    const ds = kids.map((w) => w.start).filter(Boolean).sort(); const de = kids.map((w) => w.end).filter(Boolean).sort();
+    if (!e.start && ds.length) e.start = ds[0];
+    if (!e.end && de.length) e.end = de[de.length - 1];
+  }
+  return items;
+}
+function itemsOf(S, b) {
+  const ids = new Set(S.rows.filter((r) => r.board === b.id).map((r) => r.id));
+  const out = [];
+  if (b.build) for (const j of S.jira) if (ids.has(j.ini)) out.push({ uid: j.key, key: j.key, kind: j.kind, src: 'jira', title: j.title, status: itemStatus(j.status), blocked: /block/i.test(j.status), owner: j.owner, ini: j.ini, epic: j.epic, start: j.start, end: j.end, ref: null, board: b.id });
+  for (const t of S.tasks) if (t.board === b.id && ids.has(t.initiative)) out.push(taskItem(t));
+  return rollup(out);
+}
+
+/* ── the order rules: warnings, never a block (scripts/boards.js moveWarnings, on the initiative's own workflow) ── */
+function orderWarnings(wf, r, from, to) {
+  const out = []; const fi = wf.findIndex((s) => s.name === from); const ti = wf.findIndex((s) => s.name === to);
+  if (fi >= 0 && ti > fi + 1) for (const s of wf.slice(fi + 1, ti)) out.push('Skipped ' + s.name);
+  if (catIn(wf, to) === 'Do' && r.lane === 'feature' && !r.spec) out.push('No spec yet');
+  if (!r.anchor) out.push('No anchor');
+  return out;
+}
+/** A workflow edit (names, categories, was): { ok, workflow, renamed } or { ok: false, error }. */
+function checkStages(stagesIn) {
+  const stages = Array.isArray(stagesIn) ? stagesIn.map((s) => ({ name: String((s && s.name) || '').trim(), cat: s && s.cat, hint: (s && s.hint) || '', was: (s && s.was) || null })) : [];
+  if (!stages.length) return { ok: false, error: 'A workflow needs at least one stage.' };
+  if (stages.some((s) => !s.name)) return { ok: false, error: 'Every stage needs a name.' };
+  if (new Set(stages.map((s) => s.name.toLowerCase())).size !== stages.length) return { ok: false, error: 'Two stages have the same name.' };
+  if (stages.some((s) => !CATS.includes(s.cat))) return { ok: false, error: 'Each stage needs a category: Discover, Plan, Do or Learn.' };
+  return { ok: true, stages };
+}
+
+const fail = (status, error) => ({ status, body: { ok: false, error } });
+const okb = (body) => ({ status: 200, body: { ok: true, ...body } });
+
+/** One request. Returns { status, body } or undefined when the path is not a boards route. */
+export function handle(S, method, path, p, body) {
+  if (path.startsWith('/api/stage-tools')) return handleTools(S, method, path, p, body || {});
+  if (!path.startsWith('/api/boards')) return handleMore(S, method, path, p);
+  const findBoard = (ws, id) => { const b = S.boards.find((x) => x.id === id); return b && (!ws || ws === b.ws) ? b : null; };
+  if (method === 'GET') {
+    if (path === '/api/boards') return okb({ today: TODAY, boards: S.boards.map((b) => boardOut(S, b)) });
+    const b = findBoard(p.ws, p.board);
+    if (!b && path !== '/api/boards/asks') return fail(404, 'No board "' + (p.board || '') + '" in this workspace.');
+    if (path === '/api/boards/board') {
+      const list = S.rows.filter((r) => r.board === b.id);
+      const byStage = {};
+      for (const r of list) byStage[r.stage] = (byStage[r.stage] || 0) + 1;
+      const rel = nextRelease(S, b.id);
+      const recent = S.events.filter((e) => e.board === b.id && e.kind === 'move').slice(-10).reverse().map((e) => ({ ...e, title: (S.rows.find((r) => r.id === e.id) || {}).title || '' }));
+      const bo = boardOut(S, b);
+      return okb({ board: bo, counts: { total: list.length, open: bo.counts.open, byStage, byStatus: tally(list, (r) => r.status), byCat: bo.counts.byCat }, asks: openAsks(S, b.id), nextRelease: bo.nextRelease, recent, release: rel });
+    }
+    if (path === '/api/boards/backlog') {
+      const list = sortRows(S, filterRows(S, b, p), p.sort);
+      const base0 = viewRows(S, b, p);
+      const offset = Math.max(0, Number(p.offset) || 0); const limit = Math.min(100, Math.max(1, Number(p.limit) || 25));
+      return okb({ view: p.view || 'now', total: list.length, offset, limit, rows: list.slice(offset, offset + limit).map((r) => rowOut(S, r)),
+        facets: { stage: tally(base0, (r) => r.stage), status: tally(base0, (r) => r.status), owner: tally(base0, (r) => r.owner || 'none'), horizon: tally(base0, (r) => r.horizon),
+          anchor: tally(base0, (r) => r.anchor || 'none'), cat: tally(base0, (r) => catOfRow(S, r)) } });
+    }
+    if (path === '/api/boards/initiative') {
+      const r = S.rows.find((x) => x.id === p.id && x.board === b.id);
+      if (!r) return fail(404, 'No initiative "' + (p.id || '') + '" on ' + b.name + '.');
+      const row = rowOut(S, r);
+      const kind = r.template ? INI_TEMPLATES[r.template].kind : (TOOLS[b.template] ? b.template : 'product');
+      const byCat = TOOLS[kind] || TOOLS.product;
+      const history = S.events.filter((e) => e.id === r.id).slice().reverse();
+      return okb({ row, board: boardOut(S, b), history, tools: byCat[row.cat] || [], toolsByCat: byCat });
+    }
+    if (path === '/api/boards/asks') {
+      const state = p.state || 'open';
+      return okb({ asks: S.asks.filter((a) => (!b || a.board === b.id) && (state === 'all' || a.state === state)).map((a) => ({ ...a })) });
+    }
+    if (path === '/api/boards/items') {
+      const list = S.rows.filter((r) => r.board === b.id);
+      return okb({ board: b.id, build: b.build, jira: b.jira, items: itemsOf(S, b),
+        initiatives: list.map((r) => { const o = rowOut(S, r); return { id: o.id, title: o.title, stage: o.stage, cat: o.cat, status: o.status, owner: o.owner, horizon: o.horizon, start: o.start, end: o.end, progress: o.progress, template: o.template, featured: r.featured }; }) });
+    }
+    if (path === '/api/boards/sprints') {
+      if (!b.tracker || !b.sprints) return okb({ source: 'none', readAt: null, sprints: [] });
+      const key = b.prefix;
+      const own = S.rows.filter((r) => r.board === b.id && catOfRow(S, r) === 'Do' && isOpen(r)).slice(0, 6);
+      const ST = [['To Do', 'todo'], ['In Progress', 'doing'], ['In Review', 'doing'], ['Done', 'done']];
+      const mirrored = S.jira.filter((j) => j.kind !== 'Epic' && own.concat(S.rows.filter((r) => r.featured)).some((r) => r.id === j.ini) && S.rows.find((r) => r.id === j.ini).board === b.id);
+      const fromJira = mirrored.map((j) => ({ key: j.key, summary: j.title, status: j.status, category: /done/i.test(j.status) ? 'done' : /to do/i.test(j.status) ? 'todo' : 'doing', initiative: j.ini }));
+      const issues = fromJira.concat(Array.from({ length: Math.max(0, 12 - fromJira.length) }, (_, k) => { const s = ST[hash(key + k) % 4]; const ini = own[k % Math.max(1, own.length)]; return { key: key + '-' + (1370 + k), summary: (ini ? ini.title : 'Sprint work') + ': part ' + (k + 1), status: s[0], category: s[1], initiative: ini ? ini.id : null }; }));
+      const counts = { todo: issues.filter((i) => i.category === 'todo').length, doing: issues.filter((i) => i.category === 'doing').length, done: issues.filter((i) => i.category === 'done').length };
+      const num = key === 'IDPF' ? 42 : 19;
+      const extra = (k, state, name, cat, n) => { const is = Array.from({ length: n }, (_, i) => ({ key: key + '-' + (1100 + k * 20 + i), summary: (own[i % Math.max(1, own.length)] || { title: 'Sprint work' }).title + ': part ' + (i + 1), status: cat === 'done' ? 'Done' : 'To Do', category: cat, initiative: (own[i % Math.max(1, own.length)] || {}).id || null })); return { name, state, issues: is, counts: { todo: cat === 'todo' ? n : 0, doing: 0, done: cat === 'done' ? n : 0 } }; };
+      return okb({ source: 'jira', readAt: TODAY + 'T08:10:00', sprints: [{ name: key + ' Sprint ' + num, state: 'active', issues, counts }, extra(1, 'future', key + ' Sprint ' + (num + 1), 'todo', 3), extra(0, 'closed', key + ' Sprint ' + (num - 1), 'done', 5)] });
+    }
+    return fail(404, 'No route ' + path);
+  }
+  /* POST */
+  const ws = body.ws;
+  if (path === '/api/boards/create') {
+    const name = String(body.name || '').trim();
+    if (!name) return fail(400, 'A board needs a name.');
+    if (!['product', 'project', 'simple'].includes(body.template)) return fail(400, 'Pick a template: product, project or simple.');
+    if (S.boards.some((x) => x.name.toLowerCase() === name.toLowerCase())) return fail(409, 'A board named "' + name + '" exists already in this workspace.');
+    let id = (body.domain || name).toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-|-$/g, '') || 'board';
+    while (S.boards.some((x) => x.id === id)) id += '-2';
+    const bd = body.buildDeliver != null ? body.buildDeliver : body.build;
+    const build = typeof bd === 'boolean' ? bd : true;
+    const allowed = Object.keys(INI_TEMPLATES).filter((k) => build || !templateBuilds(k));
+    const jira = build && body.jira ? String(body.jira).trim().toUpperCase() : null;
+    if (jira && !/^[A-Z][A-Z0-9_]{0,19}$/.test(jira)) return fail(400, 'jira is a Jira project key: a letter, then letters, digits or _ (at most 20)');
+    const defTpl = allowed.includes(body.defTpl) ? body.defTpl : allowed.includes(body.template) ? body.template : allowed[0];
+    const b = { ws: ws || WS_ID, id, name, full: name, domain: body.domain || id, template: body.template, workflow: tplStages(body.template), self: false, build, jira, tracker: jira ? 'Jira · ' + jira : null, sprints: !!jira,
+      offer: allowed, defTpl, owner: 'You', health: 'ok', prefix: name.replace(/[^A-Za-z]/g, '').slice(0, 3).toUpperCase() || 'NEW' };
+    S.boards.push(b);
+    S.events.push({ at: at(0, 8), by: 'You', kind: 'board', board: id, name, template: body.template });
+    return okb({ board: boardOut(S, b) });
+  }
+  const b = findBoard(ws, body.board);
+  if (path === '/api/boards/assign') {
+    const r = S.rows.find((x) => x.id === body.id); const to = findBoard(ws, body.to);
+    if (!r || !to) return fail(404, !r ? 'No initiative "' + body.id + '".' : 'No board "' + body.to + '".');
+    r.board = to.id; r.template = null; r.workflow = null; if (!to.workflow.some((s) => s.name === r.stage)) r.stage = to.workflow[0].name;
+    S.events.push({ at: at(0, 8), by: 'You', kind: 'assign', board: to.id, id: r.id, to: to.id });
+    return okb({});
+  }
+  if (!b) return fail(404, 'No board "' + (body.board || '') + '" in this workspace.');
+  if (path === '/api/boards/settings') {
+    if (b.self) return fail(409, 'The PMOS board follows the ladder its records derive.');
+    const v = {};
+    const bd = body.buildDeliver != null ? body.buildDeliver : body.build;
+    if (bd != null) { if (typeof bd !== 'boolean') return fail(400, 'buildDeliver is true or false'); v.build = bd; }
+    if (body.jira != null && body.jira !== '') { const j = String(body.jira).trim(); if (!/^[A-Za-z][A-Za-z0-9_]{0,19}$/.test(j)) return fail(400, 'jira is a Jira project key: a letter, then letters, digits or _ (at most 20)'); v.jira = j.toUpperCase(); }
+    const build = 'build' in v ? v.build : b.build;
+    if (body.offer != null) {
+      if (!Array.isArray(body.offer) || !body.offer.length || body.offer.some((k) => !INI_TEMPLATES[k])) return fail(400, 'offer is a list of templates: ' + Object.keys(INI_TEMPLATES).join(', '));
+      const blocked = body.offer.filter((k) => !build && templateBuilds(k));
+      if (blocked.length) return fail(400, blocked.join(', ') + ' need Build and deliver on');
+      v.offer = [...new Set(body.offer)];
+    }
+    if (body.defTpl != null) {
+      const offer = v.offer || b.offer.filter((k) => build || !templateBuilds(k));
+      if (!offer.includes(body.defTpl)) return fail(400, 'defTpl must be a template the board offers (' + offer.join(', ') + ')');
+      v.defTpl = body.defTpl;
+    }
+    if (!Object.keys(v).length) return fail(400, 'say what changes: buildDeliver, jira, offer or defTpl');
+    Object.assign(b, v);
+    if (!b.build) { b.offer = b.offer.filter((k) => !templateBuilds(k)); if (!b.offer.length) b.offer = ['simple']; if (!b.offer.includes(b.defTpl)) b.defTpl = b.offer[0]; }
+    if (b.build && !b.jira) b.jira = b.prefix;
+    b.tracker = b.build && b.jira ? 'Jira · ' + b.jira : null; b.sprints = !!(b.build && b.jira);
+    S.events.push({ at: at(0, 8), by: 'You', kind: 'board', op: 'settings', board: b.id, ...v });
+    return okb({ board: boardOut(S, b) });
+  }
+  if (path === '/api/boards/workflow') {
+    if (b.self) return fail(409, 'The PMOS board follows the ladder its records derive. Its stages cannot be edited.');
+    const ck = checkStages(body.stages); if (!ck.ok) return fail(400, ck.error);
+    const stages = ck.stages;
+    if (!b.build && stages.some(isBuildStage)) return fail(400, 'Build and Deliver stages need a board with Build and deliver on; ' + b.name + ' has it off');
+    const kept = new Map(stages.filter((s) => s.was && b.workflow.some((o) => o.name === s.was)).map((s) => [s.was, s.name]));
+    const removed = b.workflow.filter((o) => !kept.has(o.name)).map((o) => o.name);
+    const mr = body.moveRemoved || {};
+    const own = (r) => r.board === b.id && !r.workflow;
+    for (const name of removed) {
+      const n = S.rows.filter((r) => own(r) && r.stage === name).length;
+      if (n && !stages.some((s) => s.name === mr[name])) return fail(400, name + ' holds ' + n + ' initiatives. Say which stage they move to.');
+    }
+    let moved = 0;
+    for (const r of S.rows) {
+      if (!own(r)) continue;
+      if (kept.has(r.stage)) { r.stage = kept.get(r.stage); continue; }
+      if (removed.includes(r.stage)) { const to = mr[r.stage]; S.events.push({ at: at(0, 8), by: 'You', kind: 'move', board: b.id, id: r.id, from: r.stage, to, why: r.stage + ' was removed from the workflow', warnings: [] }); r.stage = to; moved++; }
+    }
+    b.workflow = stages.map((s) => ({ name: s.name, cat: s.cat, hint: s.hint }));
+    if (['product', 'project', 'simple'].includes(body.template)) b.template = body.template;
+    S.events.push({ at: at(0, 8), by: 'You', kind: 'board-workflow', board: b.id, stages: b.workflow, moved: mr });
+    return okb({ board: boardOut(S, b), moved });
+  }
+  if (path === '/api/boards/ini-workflow') {
+    if (b.self) return fail(409, 'The PMOS board follows the ladder its records derive.');
+    const r = S.rows.find((x) => x.id === body.id && x.board === b.id);
+    if (!r) return fail(404, 'no initiative ' + (body.id || '') + ' on this board');
+    if (body.template != null && body.template !== '' && !b.offer.includes(body.template)) return fail(400, b.name + ' does not offer the template "' + body.template + '" (it offers ' + b.offer.join(', ') + ')');
+    const ck = checkStages(body.stages); if (!ck.ok) return fail(400, ck.error);
+    if (!b.build && ck.stages.some(isBuildStage)) return fail(400, 'Build and Deliver stages need a board with Build and deliver on; ' + b.name + ' has it off');
+    const now = wfOf(S, r);
+    const renamed = Object.fromEntries(ck.stages.filter((s) => s.was && now.some((o) => o.name === s.was) && s.was !== s.name).map((s) => [s.was, s.name]));
+    const keptCur = ck.stages.find((s) => s.was === r.stage) || (ck.stages.some((s) => s.name === r.stage && !s.was) ? null : null);
+    let moved = null; const from = r.stage;
+    if (keptCur) r.stage = keptCur.name;
+    else if (ck.stages.some((s) => s.name === r.stage)) { /* the same name again */ }
+    else {
+      if (!ck.stages.some((s) => s.name === body.moveTo)) return fail(400, 'the initiative is in "' + r.stage + '", which the new workflow removes: say which stage it moves to (moveTo)');
+      moved = { from, to: body.moveTo }; r.stage = body.moveTo;
+    }
+    r.workflow = ck.stages.map((s) => ({ name: s.name, cat: s.cat, hint: s.hint }));
+    r.template = body.template || null;
+    S.events.push({ at: at(0, 8), by: 'You', kind: 'workflow', board: b.id, id: r.id, template: r.template, stages: r.workflow.map((s) => s.name), renamed });
+    if (moved) S.events.push({ at: at(0, 8), by: 'You', kind: 'move', board: b.id, id: r.id, from: moved.from, to: moved.to, why: moved.from + ' was removed from its workflow', warnings: [] });
+    r.warnings = orderWarnings(r.workflow, r, null, r.stage).filter((w) => !/^Skipped/.test(w));
+    return okb({ row: rowOut(S, r), moved });
+  }
+  if (path === '/api/boards/move') {
+    if (b.self) return fail(409, 'The PMOS board derives each stage from the records. A move is not recorded here.');
+    const r = S.rows.find((x) => x.id === body.id && x.board === b.id);
+    if (!r) return fail(404, 'No initiative "' + (body.id || '') + '" on ' + b.name + '.');
+    const wf = wfOf(S, r);
+    if (!wf.some((s) => s.name === body.to)) return fail(400, 'No stage "' + (body.to || '') + '" in the workflow of ' + r.id + '.');
+    const from = r.stage; const warnings = from === body.to ? [] : orderWarnings(wf, r, from, body.to);
+    r.stage = body.to; r.warnings = warnings;
+    S.events.push({ at: at(0, 8), by: 'You', kind: 'move', board: b.id, id: r.id, from, to: body.to, why: body.why || '', warnings });
+    return okb({ row: rowOut(S, r), warnings });
+  }
+  if (path === '/api/boards/asks/add') {
+    const line = String(body.line || '').trim(); if (!line) return fail(400, 'Write the ask in one line.');
+    const words = line.toLowerCase().split(/\s+/).filter((w) => w.length > 3);
+    const similar = S.rows.find((r) => r.board === b.id && words.some((w) => r.title.toLowerCase().includes(w)));
+    const draft = { title: line, lane: /bug|error|fail|broken|retr/i.test(line) ? 'incident' : 'feature', confidence: 0.5, anchor_suggestion: null, prior_rejections: [], refused: false, refused_reason: null, stage: 'discover',
+      ...(similar ? { similar: { id: similar.id, title: similar.title, stage: similar.stage } } : {}) };
+    const ask = { id: 'ask-demo' + (++S.seq), board: b.id, line, source: body.source || 'Typed by you', at: at(0, 8), state: 'open', draft };
+    S.asks.push(ask);
+    return okb({ ask: { ...ask }, draft });
+  }
+  if (path === '/api/boards/asks/more') {
+    const a = S.asks.find((x) => x.id === body.ask && x.board === b.id && x.state === 'open');
+    if (!a) return fail(404, 'No open ask "' + (body.ask || '') + '" on ' + b.name + '.');
+    a.needMore = true; a.moreNote = String(body.note || '').trim();
+    S.events.push({ at: at(0, 8), by: 'You', kind: 'ask-more', board: b.id, ask: a.id, note: a.moreNote });
+    return okb({});
+  }
+  if (path === '/api/boards/asks/accept') {
+    const a = S.asks.find((x) => x.id === body.ask && x.board === b.id && x.state === 'open');
+    if (!a) return fail(404, 'No open ask "' + (body.ask || '') + '" on ' + b.name + '.');
+    if (!String(body.anchor || '').trim()) return fail(400, 'An initiative needs an anchor: a key result or a health budget.');
+    const max = S.rows.filter((r) => r.board === b.id).reduce((m, r) => Math.max(m, Number(r.id.split('-').pop()) || 0), 0);
+    const tpl = b.defTpl;
+    const own = sameFlow(tplStages(tpl), b.workflow) ? null : tplStages(tpl);
+    const stage = (own || b.workflow)[0].name;
+    const r = { id: b.prefix + '-' + (max + 1), board: b.id, title: String(body.title || a.line).trim(), stage, owner: 'You', anchor: String(body.anchor).trim(), horizon: 'next', status: 'on track', start: TODAY, end: D(60), progress: 0,
+      lane: body.lane || 'feature', spec: false, warnings: [], featured: false, template: own ? tpl : null, workflow: own };
+    S.rows.push(r); a.state = 'accepted'; a.initiative = r.id;
+    S.events.push({ at: at(0, 8), by: 'You', kind: 'ask-accept', board: b.id, ask: a.id, id: r.id, stage, to: stage });
+    return okb({ initiative: rowOut(S, r), stage });
+  }
+  if (path === '/api/boards/asks/decline') {
+    const a = S.asks.find((x) => x.id === body.ask && x.board === b.id && x.state === 'open');
+    if (!a) return fail(404, 'No open ask "' + (body.ask || '') + '" on ' + b.name + '.');
+    if (!String(body.why || '').trim()) return fail(400, 'Say why you decline it.');
+    a.state = 'declined'; a.why = String(body.why).trim();
+    S.events.push({ at: at(0, 8), by: 'You', kind: 'ask-decline', board: b.id, ask: a.id, why: a.why });
+    return okb({});
+  }
+  if (path === '/api/boards/tasks/add') {
+    const title = String(body.title || '').trim();
+    if (!title) return fail(400, 'title is one line of 1 to 200 characters');
+    const r = S.rows.find((x) => x.id === body.initiative && x.board === b.id);
+    if (!r) return fail(404, 'no initiative ' + (body.initiative || '') + ' on this board');
+    const start = body.start || shiftDay(TODAY, 1); const due = body.due || shiftDay(start, 7);
+    const t = { id: 'task-demo' + (++S.seq), board: b.id, initiative: r.id, title, owner: body.owner || 'You', state: 'To do', start, due, epic: body.epic || null, kind: body.type === 'Epic' ? 'Epic' : 'Task', history: [] };
+    S.tasks.push(t);
+    return okb({ item: rollup([taskItem(t)])[0] });
+  }
+  if (path === '/api/boards/tasks/state' || path === '/api/boards/tasks/reschedule') {
+    const t = S.tasks.find((x) => x.id === body.task && x.board === b.id);
+    if (!t) return fail(404, 'no PMOS task ' + (body.task || '') + ' on this board');
+    if (path.endsWith('/state')) {
+      if (!TASK_STATES.includes(body.state)) return fail(400, 'state is one of ' + TASK_STATES.join(', '));
+      t.history.push({ at: at(0, 8), from: t.state, to: body.state }); t.state = body.state;
+    } else {
+      const n = Number(body.days);
+      if (!Number.isInteger(n) || n === 0 || Math.abs(n) > 730) return fail(400, 'days is a whole number of days, not 0, at most 730 either way');
+      t.history.push({ at: at(0, 8), start: t.start, due: t.due }); t.start = shiftDay(t.start, n); t.due = shiftDay(t.due, n);
+    }
+    return okb({ item: rollup([taskItem(t)])[0] });
+  }
+  return fail(404, 'No route ' + path);
+}
+
+/* ── views of other routes, for the Releases, Docs and initiative tabs (c3-ib-releases.js, c3-ib-docs.js, c3-ii-tabs.js) ──
+ * These answer only a request that carries `board=` (the tabs add it; the old page never does), so the old demo fixtures keep answering
+ * everything else: GET /api/releases, /api/docs/library, /api/my-work, /api/c3-init/breakdown, /api/doc and /api/doc-sheet/revisions.
+ * The rows are made from the boards' featured initiatives. IDPF-07 gets no documents on purpose, so the empty state can be seen. */
+function handleMore(S, method, path, p) {
+  if (method !== 'GET') return undefined;
+  const feat = (bid) => S.rows.filter((r) => r.featured && (!bid || r.board === bid) && !['IDPF-07'].includes(r.id));
+  if (path === '/api/doc' || path === '/api/doc-sheet/revisions') {
+    if (!/^planning\/ib\//.test(p.path || '')) return undefined;
+    const id = (p.path.match(/ib\/([a-z]+-\d+)/i) || [])[1] || '';
+    const text = '## Summary\nA short demo document for ' + id.toUpperCase() + '.\n\n## Details\nThe detail lives in the source tool.\n';
+    if (path === '/api/doc') return { status: 200, text };
+    return okb({ path: p.path, revisions: [{ rev: 1, by: 'human:wawan', at: at(-3, 9) + '.000Z', why: 'First version', before_hash: '', after_hash: '' }] });
+  }
+  if (!p.board) return undefined;
+  if (path === '/api/releases') {
+    return okb({ board: { name: 'Demo board' }, releases: S.releases.filter((x) => x.board === p.board).map((x) => ({ id: x.id, name: x.name, type: 'both', initiative_ids: x.scope.slice(), deploy_at: x.date + 'T11:00:00', release_at: x.date + 'T12:00:00', accepted_at: x.status === 'Released' ? x.date + 'T12:30:00' : null, gapFlags: [], tags: { detected: [], reason: null }, summary: [], status: x.status, board: x.board })) });
+  }
+  if (path === '/api/docs/library') {
+    const files = [];
+    for (const r of feat(p.board)) {
+      const h = hash(r.id); const slug = r.id.toLowerCase();
+      if (r.spec) files.push({ path: 'planning/ib/' + slug + '-prd.md', title: r.title + ' PRD', category: 'spec', date: D(-(h % 20) - 1), initiative: r.id });
+      files.push({ path: 'planning/ib/' + slug + '-research.md', title: r.title + ' research', category: 'res', date: D(-(h % 50) - 5), initiative: r.id });
+      if (catOfRow(S, r) === 'Do') files.push({ path: 'planning/ib/' + slug + '-rubric.md', title: r.title + ' rubric', category: 'eval', date: D(-(h % 9) - 1), initiative: r.id });
+    }
+    return okb({ key: 'demo', files, edges: [], kinds: [], categories: [{ key: 'spec', name: 'Specs' }, { key: 'eval', name: 'Evals' }, { key: 'res', name: 'Research & plans' }], initiatives: {} });
+  }
+  return undefined;
+}
+
+/* ── the stage records (route contract of the stage-records change; demo answers only) ── */
+const RICE_IMPACT = [0.25, 0.5, 1, 2, 3];
+const riceScore = (d) => Math.round((d.reach * d.impact * (d.confidence / 100)) / Math.max(0.25, d.effort) * 10) / 10;
+function checkRecord(tool, d) {
+  if (!d || typeof d !== 'object') return 'data is an object';
+  if (tool === 'problem') return typeof d.text === 'string' && d.text.length <= 4000 ? '' : 'text is at most 4000 characters';
+  if (tool === 'rice') return [d.reach, d.confidence, d.effort].every((n) => typeof n === 'number' && Number.isFinite(n)) && RICE_IMPACT.includes(d.impact) && d.effort > 0 && d.confidence >= 0 && d.confidence <= 100 ? '' : 'reach, impact (0.25, 0.5, 1, 2 or 3), confidence 0 to 100 and effort > 0';
+  const max = { launch: 40, kill: 20, learnings: 60 }[tool];
+  if (!max) return 'tool is problem, rice, launch, kill or learnings';
+  return Array.isArray(d.items) && d.items.length <= max && d.items.every((x) => x && typeof x.text === 'string') ? '' : 'items is a list of at most ' + max;
+}
+function handleTools(S, method, path, p, body) {
+  const known = (id) => S.rows.some((r) => r.id === id);
+  if (path === '/api/stage-tools/records') {
+    if (method === 'POST') {
+      if (!known(body.id)) return fail(404, 'No initiative "' + (body.id || '') + '".');
+      const e = checkRecord(body.tool, body.data);
+      if (e) return fail(400, e);
+      const rec = { data: JSON.parse(JSON.stringify(body.data)), at: new Date().toISOString(), by: 'You' };
+      (S.records[body.id] = S.records[body.id] || {})[body.tool] = rec;
+      return okb({ record: rec });
+    }
+    const own = S.records[p.id] || {};
+    const out = {};
+    for (const k of ['problem', 'rice', 'launch', 'kill', 'learnings']) {
+      const r = own[k];
+      out[k] = r ? { ...r, data: k === 'rice' ? { ...r.data, score: riceScore(r.data) } : r.data } : null;
+    }
+    return okb({ ws: p.ws || WS_ID, id: p.id, records: out });
+  }
+  if (path === '/api/stage-tools/rice' && method === 'GET') {
+    const ids = p.ids ? String(p.ids).split(',') : Object.keys(S.records);
+    const rows = ids.filter((id) => S.records[id] && S.records[id].rice).map((id) => ({ id, ...S.records[id].rice.data, score: riceScore(S.records[id].rice.data), at: S.records[id].rice.at }))
+      .sort((a, c) => c.score - a.score).map((r, k) => ({ ...r, rank: k + 1 }));
+    return okb({ rows });
+  }
+  if (path === '/api/stage-tools/burndown' && method === 'GET') {
+    const ids = String(p.ids || '').split(',').filter(Boolean);
+    const b = p.board ? S.boards.find((x) => x.id === p.board) : S.boards.find((x) => ids.some((id) => S.rows.some((r) => r.id === id && r.board === x.id)));
+    if (!b) return okb({ available: false, reason: 'No Jira sprint covers these initiatives.' });
+    if (!b.build) return okb({ available: false, reason: 'Jira not enabled on this board' });
+    const committed = b.id === 'idpf' ? 34 : b.id === 'pay' ? 21 : 18; const len = 14; const passed = 7;
+    const drop = [0, 2, 3, 3, 6, 8, 11, 13];
+    const series = Array.from({ length: len + 1 }, (_, k) => ({ date: D(k - passed), remaining: k <= passed ? committed - drop[k] : null, ideal: Math.round((committed * (1 - k / len)) * 10) / 10 }));
+    const left = committed - drop[passed];
+    return okb({ available: true, sprint: { name: b.prefix + ' Sprint ' + (b.id === 'idpf' ? 42 : 19), state: 'active', start: D(-passed), end: D(len - passed) }, committed, done: committed - left, left, daysLeft: len - passed,
+      needPerDay: Math.round((left / (len - passed)) * 10) / 10, series, tickets: 12, unpointed: 1, readAt: TODAY + 'T08:10:00' });
+  }
+  return fail(404, 'No route ' + path);
+}
+
+let installed = false;
+/** Wrap window.fetch once: a /api/boards request is answered from the store; anything else goes on unchanged. */
+export function installBoards() {
+  if (installed || typeof window === 'undefined') return;
+  installed = true;
+  const S = createStore();
+  window.__c3boards = S;   // the browser suites read the store to check what a write changed
+  const prev = window.fetch;
+  window.fetch = (input, init) => {
+    try {
+      const raw = typeof input === 'string' ? input : input instanceof URL ? input.href : input && input.url;
+      const method = String((init && init.method) || (input && input.method) || 'GET').toUpperCase();
+      const u = new URL(raw, location.origin);
+      if (u.origin === location.origin && (u.pathname.startsWith('/api/boards') || u.pathname.startsWith('/api/stage-tools') || u.searchParams.has('board') || u.pathname.startsWith('/api/doc'))) {
+        let b = {};
+        if (method !== 'GET') { try { b = init && init.body ? JSON.parse(init.body) : {}; } catch { b = {}; } }
+        const out = handle(S, method, u.pathname, Object.fromEntries(u.searchParams), b);
+        if (out && out.text != null) return Promise.resolve(new Response(out.text, { status: out.status, headers: { 'content-type': 'text/markdown; charset=utf-8' } }));
+        if (out) return Promise.resolve(new Response(JSON.stringify(out.body), { status: out.status, headers: { 'content-type': 'application/json' } }));
+      }
+    } catch { /* an unreadable request goes on as it is */ }
+    return prev(input, init);
+  };
+}