create-pmos 0.139.0 → 0.140.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-pmos",
-  "version": "0.139.0",
+  "version": "0.140.0",
   "description": "Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with all state as git-versioned files. Includes `workflow-sweep`, which audits the state every board derives from and separates real defects from work you simply have not done. `create-pmos workspace` also installs + launches the local Terminal Workspace GUI. No database, no network, no telemetry.",
   "license": "MIT",
   "bin": {

package/payload/KIT-VERSION

@@ -1,3 +1,3 @@
-kernel-source: pmos@aa6731f
+kernel-source: pmos@86ccd34
 assembled: 2026-10-12
 mode: vendor

package/payload/planning/evals/eval-calibration.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Eval calibration log"
 description: "Append-only record of every PM override of an evaluator verdict."
-generated: {by: process:create-pmos, at: "2026-10-12T01:17:12Z"}
+generated: {by: process:create-pmos, at: "2026-10-12T01:22:45Z"}
 status: stable
 ---
 

package/payload/planning/okrs/health-budgets.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Health budgets"
 description: "Closed registry of health-budget anchors (D59), edited only by the PM."
-generated: {by: process:create-pmos, at: "2026-10-12T01:17:12Z"}
+generated: {by: process:create-pmos, at: "2026-10-12T01:22:45Z"}
 status: stable
 ---
 

package/payload/state/discoveries.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Discoveries and friction log"
 description: "Append-only record of what runs discovered and where the process rubbed."
-generated: {by: process:create-pmos, at: "2026-10-12T01:17:12Z"}
+generated: {by: process:create-pmos, at: "2026-10-12T01:22:45Z"}
 status: stable
 ---
 

package/workspace/c3-foundation-test.js

@@ -92,12 +92,15 @@ process.on('unhandledRejection', (e) => { console.error(e); finish(1); });
   const h0 = await p.evaluate((s) => document.querySelector(s).offsetHeight, card);
   await p.evaluate((s) => document.querySelector(s).click(), card);
   ok('R4 the card flips', await until(() => p.evaluate((s) => document.querySelector(s).classList.contains('back'), card), 4000));
-  await sleep(500);
-  const fit = await p.evaluate((s) => {
+  /* The back grows over a transition; a slow runner is still mid-grow after a fixed wait, so poll until it settles. */
+  const measure = () => p.evaluate((s) => {
     const c = document.querySelector(s); const cb = c.getBoundingClientRect(); const fb = c.querySelector('.fb');
     const inside = (e) => !e || e.getBoundingClientRect().bottom <= cb.bottom + 1;
     return { grew: c.offsetHeight, noClip: fb.scrollHeight <= fb.clientHeight + 1, opts: inside(c.querySelector('.opts')), conf: inside(c.querySelector('.c3slide, .c3hold')), foot: inside(c.querySelector('.cft')), hasOpts: !!c.querySelector('.opt') };
   }, card);
+  await sleep(500);
+  let fit = await measure();
+  await until(async () => { fit = await measure(); return fit.grew >= h0 && fit.noClip && fit.opts && fit.conf && fit.foot && fit.hasOpts; }, 4000);
   ok('R4 the flipped back grows to fit its content', fit.grew >= h0 && fit.noClip && fit.opts && fit.conf && fit.foot && fit.hasOpts, JSON.stringify({ h0, fit }));
   /* decide: a hold button (fine pointer) or a click; the slide where the pointer is coarse */
   const act = await p.evaluate((s) => { const c = document.querySelector(s); const hb = c.querySelector('.c3hold .hb'); if (hb) { const r = hb.getBoundingClientRect(); return { x: r.left + r.width / 2, y: r.top + r.height / 2, mode: hb.getAttribute('data-hold') }; } return null; }, card);

package/workspace/lib/calendar-events.js

@@ -0,0 +1,64 @@
+'use strict';
+/* lib/calendar-events.js — every calendar event the workspace holds, in one list (incident calendar-one-event-source).
+ *
+ *   readAll(runtimeDir, { now }) → [event]   the shape of routes-calendar-import.js readEvents: { id, at, end, title, attendees, ... }
+ *
+ * The workspace keeps meetings in three places:
+ *   1. <runtime>/calendar-import/events.jsonl   the import ledger (Settings › Import now, `pmos calendar import`);
+ *   2. <runtime>/calendar-memory.json           the calendar the morning brief submits (lib/calendar-memory.js), 90 days back and 31 ahead;
+ *   3. <runtime>/briefs/<today>.json            today's brief, whose calendar is today's meetings with their plan.
+ * The Agenda and the Record menu read 2 and 3 (GET /api/proactive/agenda). Calendar and the Briefing's Today read 1 only, so a PM whose
+ * meetings came in with the morning brief saw them under Record and nowhere else. This reader joins the three. An imported event wins
+ * over a remembered one with the same start minute and title, because it carries the PM's notes; today's brief replaces the remembered
+ * events of today, as agendaMonth does.
+ *
+ * `at` and `end` of a remembered event are local date-times with the offset (2026-10-12T10:45:00+08:00), so a reader that takes the
+ * first ten characters as the day (calendar-model.js bucketEvents) gets the local day. READ ONLY; a file that cannot be read gives nothing. */
+const fs = require('fs');
+const path = require('path');
+const calMem = require('./calendar-memory.js');
+
+const pad = (n) => String(n).padStart(2, '0');
+const localDate = (ms) => { const d = new Date(ms); return `${d.getFullYear()}-${pad(d.getMonth() + 1)}-${pad(d.getDate())}`; };
+/** A local date-time with its offset: the same instant, with the local day in its first ten characters. */
+function localIso(ms) {
+  const d = new Date(ms);
+  const off = -d.getTimezoneOffset();
+  const sign = off >= 0 ? '+' : '-';
+  const a = Math.abs(off);
+  return `${localDate(ms)}T${pad(d.getHours())}:${pad(d.getMinutes())}:${pad(d.getSeconds())}${sign}${pad(Math.floor(a / 60))}:${pad(a % 60)}`;
+}
+const readJson = (f) => { try { return JSON.parse(fs.readFileSync(f, 'utf8')); } catch { return null; } };
+const minuteKey = (ms, title) => Math.floor(ms / 60000) + '|' + calMem.normTitle(title);
+
+/** A remembered or briefed event as an imported one. `src` says where it came from. */
+function asEvent(e, src) {
+  const s = Date.parse(e.start);
+  if (!e || !e.title || Number.isNaN(s)) return null;
+  const f = e.end && !Number.isNaN(Date.parse(e.end)) ? Date.parse(e.end) : s + 30 * 60000;
+  const people = e.with ? String(e.with).split(/\s*,\s*/).filter(Boolean) : [];
+  return { id: String(e.id || calMem.seriesKey(e) + '@' + s), at: localIso(s), end: localIso(f), title: String(e.title), attendees: people.slice(0, 12),
+    initiative: e.initiative || null, agent_prep_notes: typeof e.prep === 'string' ? e.prep : '', pm_notes: [], src, label: 'reported', trust: 'untrusted' };
+}
+
+function readAll(runtimeDir, { now = Date.now() } = {}) {
+  if (!runtimeDir) return [];
+  let imported = [];
+  try { imported = require('./routes-calendar-import.js').readEvents(runtimeDir).map((e) => ({ ...e, src: e.src || 'import' })); } catch { imported = []; }
+  const today = localDate(now);
+  const mem = readJson(path.join(runtimeDir, 'calendar-memory.json'));
+  const brief = readJson(path.join(runtimeDir, 'briefs', today + '.json'));
+  const briefed = brief && brief.date === today && Array.isArray(brief.calendar) ? brief.calendar.map((e) => asEvent(e, 'brief')).filter(Boolean) : null;
+  let remembered = (mem && Array.isArray(mem.events) ? mem.events : []).map((e) => asEvent(e, 'memory')).filter(Boolean);
+  if (briefed) remembered = remembered.filter((e) => e.at.slice(0, 10) !== today).concat(briefed);
+  const seen = new Set(imported.filter((e) => e && e.at && !Number.isNaN(Date.parse(e.at))).map((e) => minuteKey(Date.parse(e.at), e.title)));
+  const out = imported.slice();
+  for (const e of remembered) {
+    const k = minuteKey(Date.parse(e.at), e.title);
+    if (seen.has(k)) continue;
+    seen.add(k); out.push(e);
+  }
+  return out.sort((a, b) => (Date.parse(a.at) || 0) - (Date.parse(b.at) || 0));
+}
+
+module.exports = { readAll, asEvent, localIso };

package/workspace/lib/four-panel.js

@@ -168,7 +168,7 @@ function connectors(homeDir) {
   }
 
   let read;
-  try { read = require('./profiles').readProfiles(home); }
+  try { read = require('./profiles').readProfiles(home, { detect: true }); }
   catch { return empty('the profile reader is unavailable — PMOS cannot say what is resolvable, so it says nothing.'); }
 
   // ABSENT and BROKEN are different facts here for the same reason they are in the profile reader:
@@ -186,7 +186,9 @@ function connectors(homeDir) {
     const names = MCP_FOR_KIND[kind] || [];
     for (const prof of read.profiles) {
       const mcp = Array.isArray(prof.mcp) ? prof.mcp : [];
-      const hit = mcp.find((s) => names.includes(String(s).toLowerCase()));
+      // a claude.ai connector is listed as "claude.ai Google Drive": compare it as "google-drive"
+      const key = (s) => String(s).toLowerCase().replace(/^claude\.ai\s+/, '').trim().replace(/\s+/g, '-');
+      const hit = mcp.find((s) => names.includes(key(s)));
       if (!hit) continue;
       configured.push({ kind, profile: prof.id, server: hit, declared: true });
       break;                                  // one profile per kind is enough to offer the lookup

package/workspace/lib/profile-discovery.js

@@ -24,6 +24,12 @@
  * variable an alias sets (a key, a proxy) is left alone, and the surface says only one variable is applied.
  *
  * A descriptor under `~/.claude/profiles` always wins over a detected profile of the same id (see profiles.js).
+ *
+ * A detected profile's connectors come from the config directory's own `.claude.json`: the names of the MCP servers
+ * added with `claude mcp add --scope user` (`mcpServers`) and of the claude.ai connectors that account has used
+ * (`claudeAiMcpEverConnected`). Only the NAMES are kept. A server's command, URL and environment are never read into
+ * the result, so nothing secret leaves this module. Before this, a detected profile always carried `mcp: []`, and
+ * console3 Settings said "This profile lists no connectors" for a profile with many.
  */
 const fs = require('fs');
 const path = require('path');
@@ -37,6 +43,7 @@ const FISH_FUNCTIONS = '.config/fish/functions';
 const BIN_DIRS = ['.local/bin', 'bin', '.bin', '.config/claude/bin'];
 const MAX_TEXT = 256 * 1024;       // a start-up file larger than this is not read
 const MAX_SCRIPT = 16 * 1024;      // a launcher script larger than this is a binary or something else
+const MAX_CONFIG = 32 * 1024 * 1024;   // Claude's .claude.json keeps project history and can be large
 
 const safeRead = (file, max) => {
   try {
@@ -142,7 +149,24 @@ function fromConfigDirs(home) {
 }
 
 /**
- * detectProfiles(homeDir) → [{ id, label, account:null, mcp:[], env:{CLAUDE_CONFIG_DIR}, path, detected:{source, from, line} }]
+ * connectorsIn(dir) → the connector names Claude's config directory `dir` lists, or [] when it lists none or the file
+ * cannot be read. User-scope MCP servers first, then claude.ai connectors, each sorted, no repeats. Names only.
+ */
+function connectorsIn(dir) {
+  if (typeof dir !== 'string' || !dir) return [];
+  const text = safeRead(path.join(dir, '.claude.json'), MAX_CONFIG);
+  if (!text) return [];
+  let cfg;
+  try { cfg = JSON.parse(text); } catch { return []; }
+  if (!cfg || typeof cfg !== 'object' || Array.isArray(cfg)) return [];
+  const servers = cfg.mcpServers && typeof cfg.mcpServers === 'object' && !Array.isArray(cfg.mcpServers) ? Object.keys(cfg.mcpServers) : [];
+  const cloud = Array.isArray(cfg.claudeAiMcpEverConnected) ? cfg.claudeAiMcpEverConnected.filter((x) => typeof x === 'string') : [];
+  const clean = (xs) => xs.map((x) => x.trim()).filter((x) => x && x.length <= 120).sort((a, b) => a.localeCompare(b));
+  return [...new Set([...clean(servers), ...clean(cloud)])];
+}
+
+/**
+ * detectProfiles(homeDir) → [{ id, label, account:null, mcp:[names from connectorsIn], env:{CLAUDE_CONFIG_DIR}, path, detected:{source, from, line} }]
  * Sorted by id. When one id turns up in several places the shell definition wins over a launcher, a launcher over a bare
  * directory: the command is what the PM types, so its directory is the one that is meant. A profile whose directory does
  * not exist is dropped (the command would start Claude on an empty home, which is a new login, not a profile).
@@ -187,7 +211,7 @@ function detectProfiles(homeDir) {
     if (!cur || rank[f.source] < rank[cur.source]) byId.set(f.id, f);
   }
   return [...byId.values()].sort((a, b) => (a.id < b.id ? -1 : a.id > b.id ? 1 : 0)).map((f) => ({
-    id: f.id, label: f.id, account: null, mcp: [], env: { CLAUDE_CONFIG_DIR: f.dir },
+    id: f.id, label: f.id, account: null, mcp: connectorsIn(f.dir), env: { CLAUDE_CONFIG_DIR: f.dir },
     path: f.from, detected: { source: f.source, from: f.from, line: f.line },
   }));
 }
@@ -217,4 +241,4 @@ function searched(homeDir) {
   return out;
 }
 
-module.exports = { detectProfiles, searched, resolveDir, configDirOf, fromShellText, ID_RE };
+module.exports = { detectProfiles, connectorsIn, searched, resolveDir, configDirOf, fromShellText, ID_RE };

package/workspace/lib/routes-brief-page.js

@@ -4,7 +4,7 @@
  *   → { ok, date, me?, today: [meeting], needs: [row], decisions_error? }   me: the PM's first name from git config user.name, or null
  *
  * READ ONLY, and built only from what PMOS already holds. Nothing is invented.
- *   today   one row per meeting of the local day, in time order, from the cached calendar events (routes-calendar-import.js readEvents,
+ *   today   one row per meeting of the local day, in time order, from every calendar event the workspace holds (calendar-events.js readAll,
  *           the same source as /api/calendar-views): { id, title, start, end, minutes, people, initiative, prepared, before, state }.
  *           prepared: [{ kind: 'prep'|'pm-note'|'note'|'last-note', text, id? }] what PMOS holds for the meeting (the agent's prep note,
  *           the PM's notes on the event, the note linked to it, the last note of an earlier occurrence). before: [{ id, title, due,
@@ -173,7 +173,7 @@ module.exports = {
     if (Number.isNaN(now.getTime())) now = new Date();
     try {
       const dir = ctx.runtimeDir;
-      const events = dir ? require('./routes-calendar-import.js').readEvents(dir) : [];
+      const events = dir ? require('./calendar-events.js').readAll(dir, { now: now.getTime() }) : [];
       const items = dir ? pmItems.fold(pmItems.readLines(path.join(dir, 'pm-items', 'items.jsonl'))) : [];
       // The decisions come from the signal engine, whose repository read is slow. The page already holds them (GET /api/briefing feeds its deck), so the
       // read is made only when the caller asks (?decisions=1); the items and the agenda never wait for it.

package/workspace/lib/routes-calendar-views.js

@@ -10,8 +10,8 @@
  * the planned end is the promised date, the planned start is that date minus planned_days; no forecast is invented, so an
  * initiative without one shows as 'no plan' (or 'overdue' past its promise).
  *
- * EVENTS: lib/calendar-memory.js has validate, merge and month functions only; no reader of the stored calendar is exported.
- * Until one is, events = [] and events_source is 'none'. KRS: no KR metric series is stored in the repo, so the strategy lens
+ * EVENTS: lib/calendar-events.js readAll, the imported events joined with the calendar the morning brief remembers and today's
+ * brief (the same meetings the Agenda and the Record menu show). With no reader, events = [] and events_source is 'none'. KRS: no KR metric series is stored in the repo, so the strategy lens
  * gets none and says so. */
 const path = require('path');
 const { repoScript } = require('./repo-script.js');
@@ -166,7 +166,7 @@ module.exports = {
     catch (e) { ctx.json(res, { ok: false, error: 'the calendar could not read the repository: ' + (e && e.message ? e.message : String(e)) }, 500); return true; }
     const out = handle({ view: url.searchParams.get('view') || undefined, date: url.searchParams.get('date') || undefined }, {
       readFacts: () => facts,
-      readEvents: () => require('./routes-calendar-import.js').readEvents(ctx.runtimeDir),
+      readEvents: () => require('./calendar-events.js').readAll(ctx.runtimeDir),
       ...readers(root, ctx.runtimeDir),
     });
     ctx.json(res, out.body, out.status);

package/workspace/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "pmos-workspace",
-  "version": "0.139.0",
+  "version": "0.140.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "pmos-workspace",
-      "version": "0.139.0",
+      "version": "0.140.0",
       "license": "MIT",
       "dependencies": {
         "@xterm/addon-fit": "^0.11.0",

package/workspace/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pmos-workspace",
-  "version": "0.139.0",
+  "version": "0.140.0",
   "private": true,
   "description": "PMOS Terminal Workspace — local companion hosting real PTYs beside the library and gates (D62)",
   "license": "MIT",

package/workspace/test-files.json

@@ -29,6 +29,7 @@
     "work-focus.test.js",
     "work-evidence.test.js",
     "brief-page.test.js",
+    "calendar-events.test.js",
     "item-steps.test.js",
     "status-facts-panel.test.js",
     "jev-claims.test.js",
@@ -157,6 +158,7 @@
     "work-focus.test.js": 1,
     "work-evidence.test.js": 1,
     "brief-page.test.js": 1,
+    "calendar-events.test.js": 1,
     "pm-brief-page-test.js": 30,
     "item-steps.test.js": 1,
     "status-facts-panel.test.js": 1,