create-pmos 0.135.0 → 0.136.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-pmos",
-  "version": "0.135.0",
+  "version": "0.136.0",
   "description": "Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with all state as git-versioned files. Includes `workflow-sweep`, which audits the state every board derives from and separates real defects from work you simply have not done. `create-pmos workspace` also installs + launches the local Terminal Workspace GUI. No database, no network, no telemetry.",
   "license": "MIT",
   "bin": {

package/payload/KIT-VERSION

@@ -1,3 +1,3 @@
-kernel-source: pmos@62ceee4
-assembled: 2026-10-11
+kernel-source: pmos@2bbc680
+assembled: 2026-10-12
 mode: vendor

package/payload/planning/evals/eval-calibration.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Eval calibration log"
 description: "Append-only record of every PM override of an evaluator verdict."
-generated: {by: process:create-pmos, at: "2026-10-11T23:50:45Z"}
+generated: {by: process:create-pmos, at: "2026-10-12T00:52:51Z"}
 status: stable
 ---
 

package/payload/planning/okrs/health-budgets.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Health budgets"
 description: "Closed registry of health-budget anchors (D59), edited only by the PM."
-generated: {by: process:create-pmos, at: "2026-10-11T23:50:45Z"}
+generated: {by: process:create-pmos, at: "2026-10-12T00:52:51Z"}
 status: stable
 ---
 

package/payload/state/discoveries.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Discoveries and friction log"
 description: "Append-only record of what runs discovered and where the process rubbed."
-generated: {by: process:create-pmos, at: "2026-10-11T23:50:45Z"}
+generated: {by: process:create-pmos, at: "2026-10-12T00:52:51Z"}
 status: stable
 ---
 

package/payload/state/log.md

@@ -2,6 +2,6 @@
 
 Newest first, ISO dates.
 
-## 2026-10-11
+## 2026-10-12
 
 - Adopted OKF v0.2 (D73).

package/workspace/lib/records-dir.js

@@ -0,0 +1,29 @@
+'use strict';
+/* records-dir.js — the records folder (planning/records/<kind>.jsonl, scripts/records) of the workspace a request is about.
+ *
+ *   recordsDirFor(ctx, ws) → an absolute path
+ *
+ * Order: ctx.recordsDir (a test's folder) → the workspace's own folder, from scripts/signals/layout-paths.js (a kit tenant keeps
+ * its records in pmos/state/records, the PMOS repo in planning/records) → the PMOS checkout this server runs from, the old
+ * default, for a server with no registered workspace. `ws` is the ?ws= id; null is the home workspace (server.js getWs).
+ *
+ * Before this, every records route read the PMOS checkout's planning/records whatever the workspace, so a tenant's Reports and
+ * Signals showed nothing (initiative reports-tenant-records).
+ */
+const path = require('path');
+const { repoScript } = require('./repo-script.js');
+
+const CHECKOUT_RECORDS = path.join(__dirname, '..', '..', 'planning', 'records');
+
+function recordsDirFor(ctx, ws) {
+  if (ctx && ctx.recordsDir) return ctx.recordsDir;
+  if (ctx && ctx.repoRoot) return path.join(ctx.repoRoot, 'planning', 'records');
+  let w = null;
+  try { w = ctx && typeof ctx.getWs === 'function' ? ctx.getWs(ws || null) : null; } catch { w = null; }
+  if (w && w.root) {
+    try { return require(repoScript('signals/layout-paths.js')).pathsFor(w.root).recordsDir; } catch { /* fall through */ }
+  }
+  return CHECKOUT_RECORDS;
+}
+
+module.exports = { recordsDirFor, CHECKOUT_RECORDS };

package/workspace/lib/routes-c3-init.js

@@ -22,16 +22,16 @@ function readPeople(runtimeDir) {
   } catch { return []; }
 }
 
-function roadmapRead(ctx) {
-  const root = roadmapOps.rootOf(ctx);
+function roadmapRead(ctx, ws) {
+  const root = roadmapOps.rootOf(ctx, ws);
   const bets = records.list(root, 'bets');
   const people = readPeople(ctx.runtimeDir);
   const krs = records.list(root, 'kr-metrics').map((k) => ({ id: k.rid, title: k.metric }));
   return { status: 200, body: { ok: true, bets, capacity: roadmap.capacityLine(bets, people), people, krs } };
 }
 
-function breakdownRead(ctx) {
-  const root = roadmapOps.rootOf(ctx);
+function breakdownRead(ctx, ws) {
+  const root = roadmapOps.rootOf(ctx, ws);
   const items = breakdown.list(root);
   const people = readPeople(ctx.runtimeDir);
   const events = breakdown.readLines(root).filter((e) => ['add', 'edit', 'delete', 'dependency'].includes(e.kind))
@@ -46,7 +46,7 @@ module.exports = {
   handle: async (req, res, url, ctx) => {
     if (req.method !== 'GET') return false;
     const sub = url.pathname.slice('/api/c3-init'.length);
-    const r = sub === '/roadmap' ? roadmapRead(ctx) : sub === '/breakdown' ? breakdownRead(ctx) : null;
+    const r = sub === '/roadmap' ? roadmapRead(ctx, url.searchParams.get('ws')) : sub === '/breakdown' ? breakdownRead(ctx, url.searchParams.get('ws')) : null;
     if (!r) return false;
     ctx.json(res, r.body, r.status);
     return true;

package/workspace/lib/routes-c3-reports.js

@@ -124,7 +124,7 @@ async function runDue(ctx, now = new Date()) {
         if (!w) throw new Error('no workspace is registered');
         const slug = w.id || (w.root ? path.basename(path.resolve(w.root)) : null);
         const facts = await (ctx.readFacts || readFacts)(w);
-        const root = rootOf(ctx);
+        const root = rootOf(ctx, s.ws || null);
         let hypotheses = [];
         try { hypotheses = require(repoScript('records/index.js')).list(root, 'hypotheses'); } catch { hypotheses = []; }
         out = runOne(s, { facts, slug, hypotheses, runtimeDir: ctx.runtimeDir, today: ctx.today,
@@ -137,7 +137,8 @@ async function runDue(ctx, now = new Date()) {
   return done;
 }
 
-const rootOf = (ctx) => (ctx && ctx.recordsDir) || path.join((ctx && ctx.repoRoot) || path.join(__dirname, '..', '..'), 'planning', 'records');
+const { recordsDirFor } = require('./records-dir.js');
+const rootOf = (ctx, ws) => recordsDirFor(ctx, ws);   // the workspace's records (lib/records-dir.js)
 
 async function readFacts(w) {
   return require('./facts-async.js').readFactsAsync(path.resolve(w.root));
@@ -166,7 +167,7 @@ module.exports = {
       let index = null;   // the Initiatives board model; without it (no module, or a read error) boardOf decides
       try { index = require('./routes-boards.js').boardIndex(ctx, w); } catch { index = null; }
       if (p === '/api/report-dashboards') return send(list({ facts, runtimeDir: ctx.runtimeDir, slug, index }));
-      const root = rootOf(ctx);
+      const root = rootOf(ctx, url.searchParams.get('ws'));
       let hypotheses = [];
       try { hypotheses = require(repoScript('records/index.js')).list(root, 'hypotheses'); } catch { hypotheses = []; }
       return send(data({ scope: url.searchParams.get('scope'), id: url.searchParams.get('id') }, {

package/workspace/lib/routes-c3-strategy.js

@@ -30,7 +30,8 @@ const isDate = (s) => typeof s === 'string' && /^\d{4}-\d{2}-\d{2}/.test(s) && !
 const ms = (s) => Date.parse(String(s).slice(0, 10) + 'T00:00:00Z');
 const fin = (v) => typeof v === 'number' && Number.isFinite(v);
 const r2 = (v) => (fin(v) ? Math.round(v * 100) / 100 : null);
-const rootOf = (ctx) => (ctx && ctx.recordsDir) || path.join((ctx && ctx.repoRoot) || path.join(__dirname, '..', '..'), 'planning', 'records');
+const { recordsDirFor } = require('./records-dir.js');
+const rootOf = (ctx, ws) => recordsDirFor(ctx, ws);   // the workspace's records (lib/records-dir.js)
 const monthKey = (t) => { const d = new Date(t); return d.getUTCFullYear() + '-' + pad(d.getUTCMonth() + 1); };
 const monthIdx = (k) => Number(k.slice(0, 4)) * 12 + Number(k.slice(5, 7)) - 1;
 const keyOfIdx = (i) => Math.floor(i / 12) + '-' + pad((i % 12) + 1);
@@ -162,7 +163,7 @@ module.exports = {
     if (url.pathname !== '/api/c3-strategy') return false;
     if (req.method !== 'GET') { ctx.json(res, { ok: false, error: 'GET only' }, 405); return true; }
     try {
-      const body = build(rootOf(ctx), path.join(ctx.runtimeDir || '.', 'signals', 'signals.jsonl'), todayStr());
+      const body = build(rootOf(ctx, url.searchParams.get('ws')), path.join(ctx.runtimeDir || '.', 'signals', 'signals.jsonl'), todayStr());
       ctx.json(res, body, 200);
     } catch (e) { ctx.json(res, { ok: false, error: String(e && e.message || e) }, 500); }
     return true;

package/workspace/lib/routes-records.js

@@ -15,7 +15,9 @@ const { repoScript } = require('./repo-script.js');
 const records = require(repoScript('records/index.js'));
 const ledger = require(repoScript('trust/ledger.js'));
 
-const rootOf = (ctx) => (ctx && ctx.recordsDir) || path.join(ctx.repoRoot || path.join(__dirname, '..', '..'), 'planning', 'records');
+const { recordsDirFor } = require('./records-dir.js');
+const rootOf = (ctx, ws) => recordsDirFor(ctx, ws);   // the workspace's records (lib/records-dir.js)
+const writeRootOf = (ctx, body) => recordsDirFor(ctx, body && body.ws);   // writes: the same folder the reads use
 const UI = () => ledger.actorFrom({ ui: true });
 const bad = (status, error, reasons) => ({ status, body: { ok: false, error, reasons } });
 
@@ -46,16 +48,16 @@ module.exports = {
     const m = url.pathname.match(/^\/api\/records\/([a-z-]+)(?:\/(add|edit|reading))?$/);
     if (!m) return false;
     const [, kind, verb] = m;
-    if (req.method === 'GET' && !verb) { const r = listRecords(rootOf(ctx), kind); ctx.json(res, r.body, r.status); return true; }
+    if (req.method === 'GET' && !verb) { const r = listRecords(rootOf(ctx, url.searchParams.get('ws')), kind); ctx.json(res, r.body, r.status); return true; }
     if (req.method !== 'POST' || !verb) return false;
     const got = await ctx.readJson(req);
     if (!got.ok) { ctx.json(res, { ok: false, error: 'invalid JSON body' }, 400); return true; }
     const body = got.body || {};
     const g = guard.requirePagePress(req, body);
     if (!g.ok) { ctx.json(res, { ok: false, error: g.error }, g.status); return true; }
-    const r = verb === 'add' ? addRecord(rootOf(ctx), kind, body)
-      : verb === 'edit' ? editRecord(rootOf(ctx), kind, body)
-      : kind === 'kr-metrics' ? readingRecord(rootOf(ctx), body) : bad(404, 'readings belong to kr-metrics');
+    const r = verb === 'add' ? addRecord(writeRootOf(ctx, body), kind, body)
+      : verb === 'edit' ? editRecord(writeRootOf(ctx, body), kind, body)
+      : kind === 'kr-metrics' ? readingRecord(writeRootOf(ctx, body), body) : bad(404, 'readings belong to kr-metrics');
     ctx.json(res, r.body, r.status);
     return true;
   },

package/workspace/lib/routes-roadmap-ops.js

@@ -26,7 +26,9 @@ const roadmap = require(repoScript('roadmap-ops.js'));
 const breakdown = require(repoScript('breakdown-ops.js'));
 
 const REPO = path.join(__dirname, '..', '..');
-const rootOf = (ctx) => (ctx && ctx.recordsDir) || path.join((ctx && ctx.repoRoot) || REPO, 'planning', 'records');
+const { recordsDirFor } = require('./records-dir.js');
+const rootOf = (ctx, ws) => recordsDirFor(ctx, ws);   // the workspace's records (lib/records-dir.js)
+const writeRootOf = (ctx, body) => recordsDirFor(ctx, body && body.ws);   // writes: the same folder the reads use
 const UI = () => ledger.actorFrom({ ui: true });
 const out = (status, body) => ({ status, body });
 const refusal = (r, status = 400) => out(status, { ok: false, error: r.error, ...Object.fromEntries(Object.entries(r).filter(([k]) => !['ok', 'error'].includes(k))) });
@@ -108,14 +110,14 @@ function setPeople(runtimeDir, body) {
 }
 
 const POSTS = {
-  '/bet/add': (c, b) => betAdd(rootOf(c), b, c),
-  '/bet/move': (c, b) => betMove(rootOf(c), b, c),
-  '/bet/take-off': (c, b) => betTakeOff(rootOf(c), b),
-  '/breakdown/add': (c, b) => breakdownAdd(rootOf(c), b),
-  '/breakdown/edit': (c, b) => breakdownEdit(rootOf(c), b),
-  '/breakdown/delete': (c, b) => breakdownDelete(rootOf(c), b),
-  '/breakdown/undo': (c, b) => breakdownUndo(rootOf(c), b),
-  '/breakdown/dependency': (c, b) => breakdownDependency(rootOf(c), b),
+  '/bet/add': (c, b) => betAdd(writeRootOf(c, b), b, c),
+  '/bet/move': (c, b) => betMove(writeRootOf(c, b), b, c),
+  '/bet/take-off': (c, b) => betTakeOff(writeRootOf(c, b), b),
+  '/breakdown/add': (c, b) => breakdownAdd(writeRootOf(c, b), b),
+  '/breakdown/edit': (c, b) => breakdownEdit(writeRootOf(c, b), b),
+  '/breakdown/delete': (c, b) => breakdownDelete(writeRootOf(c, b), b),
+  '/breakdown/undo': (c, b) => breakdownUndo(writeRootOf(c, b), b),
+  '/breakdown/dependency': (c, b) => breakdownDependency(writeRootOf(c, b), b),
   '/people': (c, b) => setPeople(c.runtimeDir, b),
 };
 
@@ -125,7 +127,7 @@ module.exports = {
   handle: async (req, res, url, ctx) => {
     const sub = url.pathname.slice('/api/roadmap-ops'.length);
     if (req.method === 'GET' && sub === '/bet/anchor-suggestions') {
-      const r = betAnchorSuggestions(rootOf(ctx), { id: url.searchParams.get('id') }, ctx);
+      const r = betAnchorSuggestions(rootOf(ctx, url.searchParams.get('ws')), { id: url.searchParams.get('id') }, ctx);
       ctx.json(res, r.body, r.status);
       return true;
     }

package/workspace/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "pmos-workspace",
-  "version": "0.135.0",
+  "version": "0.136.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "pmos-workspace",
-      "version": "0.135.0",
+      "version": "0.136.0",
       "license": "MIT",
       "dependencies": {
         "@xterm/addon-fit": "^0.11.0",

package/workspace/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pmos-workspace",
-  "version": "0.135.0",
+  "version": "0.136.0",
   "private": true,
   "description": "PMOS Terminal Workspace — local companion hosting real PTYs beside the library and gates (D62)",
   "license": "MIT",