create-pmos 0.144.0 → 0.145.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-pmos",
-  "version": "0.144.0",
+  "version": "0.145.0",
   "description": "Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with all state as git-versioned files. Includes `workflow-sweep`, which audits the state every board derives from and separates real defects from work you simply have not done. `create-pmos workspace` also installs + launches the local Terminal Workspace GUI. No database, no network, no telemetry.",
   "license": "MIT",
   "bin": {

package/payload/KIT-VERSION

@@ -1,3 +1,3 @@
-kernel-source: pmos@9f8623c
+kernel-source: pmos@e7517fc
 assembled: 2026-10-12
 mode: vendor

package/payload/planning/evals/eval-calibration.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Eval calibration log"
 description: "Append-only record of every PM override of an evaluator verdict."
-generated: {by: process:create-pmos, at: "2026-10-12T01:54:19Z"}
+generated: {by: process:create-pmos, at: "2026-10-12T01:59:40Z"}
 status: stable
 ---
 

package/payload/planning/okrs/health-budgets.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Health budgets"
 description: "Closed registry of health-budget anchors (D59), edited only by the PM."
-generated: {by: process:create-pmos, at: "2026-10-12T01:54:19Z"}
+generated: {by: process:create-pmos, at: "2026-10-12T01:59:40Z"}
 status: stable
 ---
 

package/payload/state/discoveries.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Discoveries and friction log"
 description: "Append-only record of what runs discovered and where the process rubbed."
-generated: {by: process:create-pmos, at: "2026-10-12T01:54:19Z"}
+generated: {by: process:create-pmos, at: "2026-10-12T01:59:40Z"}
 status: stable
 ---
 

package/workspace/c3-ib-triage-backlog-test.js

@@ -37,6 +37,7 @@ const { harness } = require('./c3-ini-harness');
   await page.fill('[data-ibt="f-more"]', 'Which trials need SSO first?');
   await page.click('[data-ibt="more-go"]');
   await until(() => store(() => window.__c3boards.asks.find((a) => a.id === 'ask-1').needMore === true));
+  await until(async () => /prompted for more detail/.test(await toast()));
   ok('T6 Ask for more records the question; the ask stays open', await store(() => { const a = window.__c3boards.asks.find((x) => x.id === 'ask-1'); return a.state === 'open' && a.moreNote === 'Which trials need SSO first?'; }) && /prompted for more detail/.test(await toast()));
 
   await page.click('[data-ibt-ask="ask-1"] .tt').catch(() => {});

package/workspace/c3-updates-test.js

@@ -0,0 +1,131 @@
+#!/usr/bin/env node
+'use strict';
+/* c3-updates-test.js — console3 Settings › Updates runs the app update itself, and the kit Update sends the checked version
+ * (initiative c3-app-update).
+ *
+ * The page used to say "run it from the main app" and link to /, and its kit Update posted no version, which the server
+ * refuses with "Check for updates first". Against a real server; the kit routes and /api/sessions are stood in by the
+ * page's route table, so nothing is installed and npm is never asked. Hooks only (data-c3set-*).
+ */
+const path = require('path');
+const { spawn } = require('child_process');
+const { findBrowser } = require('./lib/find-browser');
+const T = require('./test-run').configure({ name: 'c3-updates' });
+
+const BASE = T.BASE;
+const results = [];
+const ok = (name, cond, extra = '') => { results.push({ name, cond: !!cond }); console.log(`${cond ? '✓' : '✗'} ${name}${!cond && extra !== '' ? ' — ' + extra : ''}`); };
+let srv = null; let browser = null;
+const finish = async (code) => {
+  if (browser) await browser.close().catch(() => {});
+  if (srv) { try { srv.kill('SIGKILL'); } catch { /* gone */ } }
+  T.killTmux();
+  const bad = results.filter((x) => !x.cond).length;
+  console.log(`\n${results.length - bad}/${results.length} c3-updates assertions passed`);
+  process.exit(code !== undefined ? code : (bad ? 1 : 0));
+};
+process.on('unhandledRejection', (e) => { console.error(e); finish(1); });
+
+async function waitFor(page, fn, arg, ms = 8000) {
+  try { await page.waitForFunction(fn, arg, { timeout: ms }); return true; } catch { return false; }
+}
+
+(async () => {
+  const exe = findBrowser();
+  if (!exe) { console.log('✗ no Chrome/Chromium on this machine — the c3-updates suite cannot run'); return finish(1); }
+  let chromium;
+  try { ({ chromium } = require('playwright-core')); } catch { console.log('✗ playwright-core is not installed — the c3-updates suite cannot run'); return finish(1); }
+
+  srv = spawn(process.execPath, [path.join(__dirname, 'server.js')], { cwd: __dirname, stdio: 'ignore', env: T.env({ PMOS_WS_PORT: String(T.PORT) }) });
+  await T.waitForServer(BASE);
+  browser = await chromium.launch({ executablePath: exe });
+  const ctx = await browser.newContext({ viewport: { width: 1440, height: 1000 } });
+  const page = await ctx.newPage();
+  const errors = [];
+  page.on('pageerror', (e) => errors.push(String(e && e.message || e)));
+
+  // The stand-ins: an installed app 0.1.0 and a kit 0.1.0 in every workspace, both behind 0.2.0.
+  const S = { app: '0.1.0', kit: '0.1.0', checkout: false, upgrade: { ok: true }, down: 0 };
+  const calls = [];
+  const body = (ws) => ({ ok: true, ws, app: { version: S.app, fromCheckout: S.checkout }, kit: { present: true, version: S.kit }, source: { kind: 'npm' } });
+  const wsOf = (route) => { try { return JSON.parse(route.request().postData() || '{}'); } catch { return {}; } };
+  await page.route((u) => u.pathname === '/api/kit/status', (route) => route.fulfill({ json: { ...body(new URL(route.request().url()).searchParams.get('ws')), busy: null } }));
+  await page.route((u) => u.pathname === '/api/kit/check', (route) => { const b = wsOf(route); calls.push(['check', b]); route.fulfill({ json: { ...body(b.ws), latest: '0.2.0', appBehind: S.app !== '0.2.0', kitBehind: S.kit !== '0.2.0' } }); });
+  await page.route((u) => u.pathname === '/api/kit/update', (route) => {
+    const b = wsOf(route); calls.push(['kit', b]);
+    if (b.version !== '0.2.0') return route.fulfill({ status: 502, json: { ok: false, error: 'Check for updates first' } });
+    route.fulfill({ json: { ...body(b.ws), kit: { present: true, version: '0.2.0' }, output: 'kit updated' } });
+  });
+  await page.route((u) => u.pathname === '/api/kit/upgrade-app', (route) => {
+    const b = wsOf(route); calls.push(['app', b]);
+    if (!S.upgrade.ok) return route.fulfill({ status: 403, json: S.upgrade });
+    S.down = 2;   // the server is away for two polls, then answers on the new version
+    route.fulfill({ json: { ok: true, ws: b.ws, from: '0.1.0', to: b.version, log: '/tmp/app-update.log' } });
+  });
+  let reloaded = false;
+  await page.route((u) => u.pathname === '/api/sessions', async (route) => {
+    if (!calls.some((c) => c[0] === 'app' && S.upgrade.ok)) return route.continue();
+    if (S.down > 0) { S.down -= 1; return route.abort('connectionrefused'); }
+    S.app = '0.2.0';
+    const r = await route.fetch(); const j = await r.json().catch(() => ({}));
+    return route.fulfill({ json: { ...j, version: S.app } });
+  });
+  page.on('framenavigated', (f) => { if (f === page.mainFrame() && calls.some((c) => c[0] === 'app')) reloaded = true; });
+  const named = (kind) => calls.filter((c) => c[0] === kind);
+
+  const open = async () => {
+    await page.goto(BASE + '/c3.html?tab=settings');
+    await waitFor(page, () => !!document.querySelector('[data-c3set-nav] [data-c3set-sec="updates"]'));
+    await page.click('[data-c3set-nav] [data-c3set-sec="updates"]');
+    return waitFor(page, () => !!document.querySelector('[data-c3set-section="updates"] [data-c3set-check]:not([disabled])'));
+  };
+
+  /* ── A: before a check, nothing is offered and npm is not asked ── */
+  ok('A1 Updates opens with Check now', await open());
+  ok('A2 no app Update and no Open the main app before a check', await page.evaluate(() => !document.querySelector('[data-c3set-app-update]') && !/Open the main app/.test(document.querySelector('[data-c3set-section="updates"]').textContent)));
+  ok('A3 nothing was asked of npm before the press', calls.length === 0, JSON.stringify(calls));
+
+  /* ── B: the kit Update sends the version the check found ── */
+  await page.click('[data-c3set-check]');
+  ok('B1 after the check, the app row offers Update to 0.2.0', await waitFor(page, () => { const b = document.querySelector('[data-c3set-app-update]'); return !!b && /Update to 0\.2\.0/.test(b.textContent); }));
+  ok('B2 the page no longer sends you to the main app', await page.evaluate(() => !/Open the main app/.test(document.querySelector('[data-c3set-section="updates"]').textContent)));
+  ok('B3 each workspace row offers a kit Update', await waitFor(page, () => !!document.querySelector('[data-c3set-kit-update]')));
+  const kitWs = await page.getAttribute('[data-c3set-kit-update]', 'data-c3set-kit-update');
+  await page.click(`[data-c3set-kit-update="${kitWs}"]`);
+  ok('B4 kit Update posts that workspace and the checked version', await waitFor(page, () => !!document.querySelector('[data-c3-toast]') && /Updated the kit/.test(document.querySelector('[data-c3-toast]').textContent)) && named('kit').length === 1 && named('kit')[0][1].ws === kitWs && named('kit')[0][1].version === '0.2.0', JSON.stringify(named('kit')));
+  ok('B5 that row no longer offers Update', await waitFor(page, (w) => !document.querySelector(`[data-c3set-kit-update="${w}"]`), kitWs));
+
+  /* ── C: the app update asks first, then runs, waits for the restart and reloads ── */
+  await page.click('[data-c3set-app-update]');
+  ok('C1 it asks first, and says PMOS stops while the new version installs', await waitFor(page, () => { const c = document.querySelector('[data-c3set-app-confirm]'); return !!c && /stops/.test(c.textContent) && !!document.querySelector('[data-c3set-app-go]'); }));
+  ok('C2 nothing runs before the answer', named('app').length === 0);
+  await page.click('[data-c3set-app-cancel]');
+  ok('C3 Cancel puts the Update button back', await waitFor(page, () => !document.querySelector('[data-c3set-app-confirm]') && !!document.querySelector('[data-c3set-app-update]')) && named('app').length === 0);
+  await page.click('[data-c3set-app-update]');
+  await page.click('[data-c3set-app-go]');
+  for (let i = 0; i < 40 && !named('app').length; i++) await new Promise((r) => setTimeout(r, 100));
+  ok('C4 the update posts the checked version', named('app').length === 1 && named('app')[0][1].version === '0.2.0', JSON.stringify(named('app')));
+  ok('C5 the row says it is updating and that the page reloads', await waitFor(page, () => { const b = document.querySelector('[data-c3set-app-busy]'); return !!b && /reloads/.test(b.textContent); }, null, 3000) || reloaded);
+  for (let i = 0; i < 200 && !reloaded; i++) await new Promise((r) => setTimeout(r, 100));
+  ok('C6 the page reloads by itself when the new version answers', reloaded);
+
+  /* ── D: a refusal is shown on the row ── */
+  S.app = '0.1.0'; S.upgrade = { ok: false, error: 'This page signed in with a token that changes when the workspace restarts' };
+  calls.length = 0; reloaded = false;
+  await open();
+  await page.click('[data-c3set-check]');
+  await waitFor(page, () => !!document.querySelector('[data-c3set-app-update]'));
+  await page.click('[data-c3set-app-update]');
+  await page.click('[data-c3set-app-go]');
+  ok('D1 a refused update says why, on the app row', await waitFor(page, () => { const r = document.querySelector('[data-c3set-row="upd.app"]'); return !!r && /token that changes/.test(r.textContent); }));
+  ok('D2 a refused update does not reload the page', !reloaded);
+
+  /* ── E: a checkout updates with git ── */
+  S.checkout = true; S.upgrade = { ok: true }; calls.length = 0;
+  await open();
+  await page.click('[data-c3set-check]');
+  ok('E1 a checkout says git pull and offers no app Update', await waitFor(page, () => /git pull/.test(document.querySelector('[data-c3set-row="upd.app"]').textContent)) && !(await page.$('[data-c3set-app-update]')));
+
+  ok('F1 the page throws no error', errors.length === 0, errors.slice(0, 3).join(' | '));
+  finish();
+})();

package/workspace/guide/settings.md

@@ -2,7 +2,7 @@
 type: Guide
 title: "Settings in console3: one home for each setting"
 description: "How to open Settings in console3, what each section holds, what the scope tags and the environment notes mean, and where the settings are kept."
-timestamp: 2026-10-11
+timestamp: 2026-10-12
 ---
 
 # Settings in console3: one home for each setting
@@ -55,6 +55,14 @@ When a section has changed settings, **Reset section** at the top of the section
 
 Some rows show a feature that PMOS does not have yet, such as choosing calendars, mapping Jira projects, pairing a phone, the device list, and export or reset of every setting. The control on these rows is off, and the row says why.
 
+## Update PMOS and the kit
+
+Open **Updates** and press **Check now**. PMOS asks the npm registry for the latest version only when you press it.
+
+- **Update to** a version on the **PMOS app** row updates the app. The row asks first: press **Restart and update**, or **Cancel**. PMOS stops, installs the new version, and starts again. Open terminals keep running. The page reloads when the new version starts. If the update is refused, or PMOS starts again on the old version, or PMOS does not come back, the row says so and names the update log.
+- When PMOS runs from a PMOS checkout, the row says to update it with `git pull`. There is no Update button.
+- **Update** on a workspace row updates the kit in that repository. It replaces the kit files in its `pmos/` folder (AGENTS.md, skills, scripts, templates, `okf/core`, the mod and KIT-VERSION). It does not change `state/`, `planning/` or `okf/product/`, and it does not commit. Review the change in the repository as a normal pull request.
+
 ## Where the settings are kept
 
 The settings that had a home before this page keep it. For example, the recording engine is kept by the notes engine, Validate consent by the validate route, and the theme and the new-session defaults in this browser.

package/workspace/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "pmos-workspace",
-  "version": "0.144.0",
+  "version": "0.145.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "pmos-workspace",
-      "version": "0.144.0",
+      "version": "0.145.0",
       "license": "MIT",
       "dependencies": {
         "@xterm/addon-fit": "^0.11.0",

package/workspace/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pmos-workspace",
-  "version": "0.144.0",
+  "version": "0.145.0",
   "private": true,
   "description": "PMOS Terminal Workspace — local companion hosting real PTYs beside the library and gates (D62)",
   "license": "MIT",

package/workspace/public/pm/c3-settings.js

@@ -15,7 +15,7 @@
  *   TypeSafe key      GET /api/typesafe (present or not; the key is never read)
  *   about you         GET and POST /api/proactive/settings {name, about:{role, work, duties}} (the Welcome page writes the same)
  *   running sessions  GET /api/sessions                         calendar import  POST /api/sources/refresh {source:'calendar'}
- *   versions          GET /api/kit/status · POST /api/kit/check, /api/kit/update
+ *   versions          GET /api/kit/status · POST /api/kit/check, /api/kit/update, /api/kit/upgrade-app (then GET /api/sessions until the new version)
  * Every other setting is in the settings store: GET /api/settings and POST /api/settings (lib/settings-store.js).
  * A board's own workflow is edited on the board; here are only the templates new boards start from.
  * Nothing here asks for or shows a key or a password. */
@@ -161,7 +161,7 @@ export function mountSettings(host, ctx = {}) {
   ensureCss();
   const M = {
     sec: SECTIONS.some((s) => s[0] === ctx.section) ? ctx.section : 'about', q: '', ws: ctx.ws || '', data: null, err: {},
-    engine: null, people: null, consent: null, online: null, profiles: null, typesafe: null, kits: {}, about: null, running: null,
+    engine: null, people: null, consent: null, online: null, profiles: null, typesafe: null, kits: {}, kitBusy: null, app: { phase: null, error: '' }, about: null, running: null,
     tplEdit: null, wsEdit: null, wsDrop: null, addPath: '',
   };
   const root = el('div', { class: 'brief c3set', 'data-c3set': '' });
@@ -607,6 +607,28 @@ export function mountSettings(host, ctx = {}) {
       lockedRow('look.icons', 'Card icons', 'Chosen from the built-in icon set by the card kind (D7).', 'Chosen by code rules', 'computer')], 'eye')];
   }
 
+  /* ── the app update (workspace-kit-update): the server stops, reinstalls and starts again, so the page waits for it ── */
+  const pause = (ms) => new Promise((r) => setTimeout(r, ms));
+  async function updateApp(ws, from, to) {
+    M.app = { phase: 'busy', error: '', to }; draw();
+    const r = await pmPost('/api/kit/upgrade-app', { ws, version: to });
+    if (!r || r.ok === false) { M.app = { phase: null, error: (r && r.error) || 'The update did not start.' }; draw(); return; }
+    await waitForRestart(r.from || from, r.log || '');
+  }
+  /** Reload when the server is back on a new version; otherwise say what happened and name the log. */
+  async function waitForRestart(from, log) {
+    let sawDown = false;
+    const until = Date.now() + 5 * 60000;
+    while (Date.now() < until) {
+      await pause(2000);
+      const j = await pmGet('/api/sessions');
+      if (!j || j.ok === false || !j.version) { sawDown = true; continue; }
+      if (j.version !== from) { location.reload(); return; }
+      if (sawDown) { M.app = { phase: null, error: 'PMOS started again on ' + j.version + ', so the update did not finish. The update log is ' + log + '.' }; draw(); return; }
+    }
+    M.app = { phase: null, error: 'PMOS did not come back on this address. Type pmos in a terminal to open it. The update log is ' + log + '.' }; draw();
+  }
+
   function updatesSec() {
     const rows = (ctx.workspaces || []).map((w) => {
       const k = M.kits[w.id];
@@ -616,20 +638,31 @@ export function mountSettings(host, ctx = {}) {
           el('div', { class: 'chips' }, chip(!k ? 'Reading' : k.error ? k.error : kit && kit.present ? 'kit ' + (kit.version || 'vendored by hand') : 'no kit in this workspace', 'mono'),
             k && k.latest ? (behind ? tag(k.latest + ' available', 'warn') : tag('Up to date', 'ok')) : null),
           M.err['kit:' + w.id] ? fold('alert', M.err['kit:' + w.id], 'w') : null),
-        el('div', { class: 'acts' }, behind ? btn('Update', { variant: 'primary', onclick: async () => { const r = await pmPost('/api/kit/update', { ws: w.id }); if (r && r.ok) { M.kits[w.id] = { ...M.kits[w.id], ...r, kitBehind: false }; toast('Updated the kit in ' + (w.label || w.name || w.id)); } else M.err['kit:' + w.id] = (r && r.error) || 'Not updated.'; draw(); } }) : null));
+        el('div', { class: 'acts' }, behind ? btn('Update', { variant: 'primary', disabled: !!M.kitBusy, attrs: { 'data-c3set-kit-update': w.id }, onclick: async () => { M.kitBusy = w.id; delete M.err['kit:' + w.id]; draw(); const r = await pmPost('/api/kit/update', { ws: w.id, version: k.latest }); M.kitBusy = null; if (r && r.ok) { M.kits[w.id] = { ...M.kits[w.id], ...r, kitBehind: false }; toast('Updated the kit in ' + (w.label || w.name || w.id)); } else M.err['kit:' + w.id] = (r && r.error) || 'Not updated.'; draw(); } }) : null));
     });
     const first = (ctx.workspaces || [])[0];
     const st = first && M.kits[first.id];
     const app = st && st.app; const appBehind = st && st.appBehind;
-    const appRow = frame({ key: 'upd.app', label: 'PMOS app ' + ((app && app.version) || ''),
-      help: appBehind ? 'The app update restarts PMOS. Run it from the main app\'s Settings, Updates, which waits for the restart.' : 'Press Check now to ask the npm registry for the latest version.',
-      control: [st && st.latest ? tag(appBehind ? st.latest + ' available' : 'Up to date', appBehind ? 'acc' : 'ok') : null,
-        btn('Check now', { ic: 'undo', disabled: !first, attrs: { 'data-c3set-check': '' }, onclick: async () => {
+    // A checkout updates with git, unless PMOS_UPDATE_SOURCE names a local package (server.js /api/kit/upgrade-app).
+    const gitOnly = !!(app && app.fromCheckout && !(st.source && st.source.kind === 'local'));
+    const U = M.app; const busy = U.phase === 'busy';
+    const appHelp = !appBehind ? 'Press Check now to ask the npm registry for the latest version.'
+      : gitOnly ? 'This workspace runs from a PMOS checkout. Update it with git pull.'
+      : 'The update stops PMOS, installs ' + st.latest + ' in place of ' + ((app && app.version) || '?') + ', and starts it again. Sessions keep running in tmux. This page reloads when the new version starts.';
+    const asking = appBehind && !gitOnly && U.phase === 'confirm';
+    const appRow = frame({ key: 'upd.app', label: 'PMOS app ' + ((app && app.version) || ''), help: appHelp, err: U.error || null,
+      note: asking ? el('span', { 'data-c3set-app-confirm': '' }, fold('alert', 'PMOS stops for about a minute while ' + st.latest + ' installs. Open terminals keep running.', 'w'))
+        : busy ? el('span', { 'data-c3set-app-busy': '', role: 'status', 'aria-live': 'polite' }, fold('cloud', 'Updating PMOS to ' + U.to + '. This page reloads when the new version starts.')) : null,
+      control: asking ? [btn('Cancel', { variant: 'ghost', attrs: { 'data-c3set-app-cancel': '' }, onclick: () => { M.app = { phase: null, error: '' }; draw(); } }),
+        btn('Restart and update', { variant: 'primary', attrs: { 'data-c3set-app-go': '' }, onclick: () => updateApp(first.id, (app && app.version) || '', st.latest) })]
+      : [st && st.latest ? tag(appBehind ? st.latest + ' available' : 'Up to date', appBehind ? 'acc' : 'ok') : null,
+        btn('Check now', { ic: 'undo', disabled: !first || busy, attrs: { 'data-c3set-check': '' }, onclick: async () => {
+          M.app = { phase: null, error: '' };
           for (const w of ctx.workspaces || []) { const r = await pmPost('/api/kit/check', { ws: w.id }); M.kits[w.id] = r && r.ok ? r : { ...(M.kits[w.id] || {}), error: (r && r.error) || 'The check failed.' }; }
           const s2 = first && M.kits[first.id]; toast(s2 && s2.appBehind ? 'PMOS ' + s2.latest + ' is available' : 'Checked. PMOS is up to date'); draw();
         } }),
-        appBehind ? btn('Open the main app', { variant: 'primary', onclick: () => { location.href = '/'; } }) : null] });
-    return [sect('PMOS app', [list([appRow])], { ic: 'cloud' }), sect('Kit in each workspace', [list(rows)], { ic: 'repo', count: rows.length }), groupOf('updates', 'When', 'cloud')];
+        appBehind && !gitOnly && !busy ? btn('Update to ' + st.latest, { variant: 'primary', attrs: { 'data-c3set-app-update': '' }, onclick: () => { M.app = { phase: 'confirm', error: '' }; draw(); } }) : null] });
+    return [sect('PMOS app', [list([appRow])], { ic: 'cloud', attrs: { 'data-c3set-app': '' } }), sect('Kit in each workspace', [list(rows)], { ic: 'repo', count: rows.length }), groupOf('updates', 'When', 'cloud')];
   }
 
   const BUILD = { about: aboutSec, workspaces: workspacesSec, boards: boardsSec, connectors: connectorsSec, recording: recordingSec, time: timeSec, sharing: sharingSec, access: accessSec, sessions: sessionsSec, privacy: privacySec, appearance: appearanceSec, updates: updatesSec };

package/workspace/test-files.json

@@ -133,7 +133,8 @@
     "pm-card-layout-test.js",
     "pm-portfolio-inline-test.js",
     "pm-brief-page-test.js",
-    "c3-settings-test.js"
+    "c3-settings-test.js",
+    "c3-updates-test.js"
   ],
   "ui": [
     "ui-test.js"
@@ -263,7 +264,8 @@
     "pm-card-layout-test.js": 20,
     "pm-portfolio-inline-test.js": 15,
     "settings-store.test.js": 1,
-    "c3-settings-test.js": 25
+    "c3-settings-test.js": 25,
+    "c3-updates-test.js": 20
   },
   "_comment_seconds": "Measured wall time of each suite run alone (4-CPU sandbox, 2026-10-05). Only the ORDER uses it: the slowest suites start first, and --shard deals suites to the least-loaded shard so the shards finish together. A wrong or missing number never skips a suite; a missing one counts as 10."
 }