create-pmos 0.197.0 → 0.198.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-pmos",
-  "version": "0.197.0",
+  "version": "0.198.0",
   "description": "Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with all state as git-versioned files. Includes `workflow-sweep`, which audits the state every board derives from and separates real defects from work you simply have not done. `create-pmos workspace` also installs + launches the local Terminal Workspace GUI. No database, no network, no telemetry.",
   "license": "MIT",
   "bin": {

package/payload/KIT-VERSION

@@ -1,3 +1,3 @@
-kernel-source: pmos@5be70d5
+kernel-source: pmos@94c2b4f
 assembled: 2026-10-13
 mode: vendor

package/payload/planning/evals/eval-calibration.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Eval calibration log"
 description: "Append-only record of every PM override of an evaluator verdict."
-generated: {by: process:create-pmos, at: "2026-10-13T09:43:42Z"}
+generated: {by: process:create-pmos, at: "2026-10-13T10:14:18Z"}
 status: stable
 ---
 

package/payload/planning/okrs/health-budgets.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Health budgets"
 description: "Closed registry of health-budget anchors (D59), edited only by the PM."
-generated: {by: process:create-pmos, at: "2026-10-13T09:43:42Z"}
+generated: {by: process:create-pmos, at: "2026-10-13T10:14:18Z"}
 status: stable
 ---
 

package/payload/state/discoveries.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Discoveries and friction log"
 description: "Append-only record of what runs discovered and where the process rubbed."
-generated: {by: process:create-pmos, at: "2026-10-13T09:43:42Z"}
+generated: {by: process:create-pmos, at: "2026-10-13T10:14:18Z"}
 status: stable
 ---
 

package/workspace/c3-report-design-real-test.js

@@ -0,0 +1,225 @@
+#!/usr/bin/env node
+'use strict';
+/* c3-report-design-real-test.js — the report design studio and the deck of a cycle against the REAL backend (initiative report-design-studio).
+ * Not demo mode: a real server on a scratch repository, with a stub `claude` that plays the report-design job (as report-design-server.test.js
+ * does), and a real Chromium on /c3.html. It proves the page and the server agree on the API contract end to end.
+ *
+ *   setup     a recurring work-sourced report set up through the API (its first cycle drafted)
+ *   studio    Design how it looks on the set-up row; describe; upload a small .pptx; the first turn lands D1 in the strip and the preview
+ *             frame shows the render; a point-and-say marker goes with the second turn and lands D2; Compare two; This is it; the Design brief
+ *   cycle     Draft now on the report: the cycle hook renders the cycle to match the saved design
+ *   deck      the Read tab shows the deck from /api/report-design/cycle-html in frames with sandbox exactly "allow-same-origin"; a source
+ *             popover; a speaker note and a pin are saved; the pin is in the Edit log; Present answers ArrowRight and Escape
+ * No page error and no failed request may be raised. Synthetic repositories only; the stub is the only "model"; nothing reaches the network. */
+const fs = require('fs');
+const path = require('path');
+const { spawn } = require('child_process');
+const { findBrowser } = require('./lib/find-browser');
+const T = require('./test-run').configure({ name: 'c3-report-design-real' });
+const { makeRepos, codeRepo, write, git } = require('./plan-test-repos');
+const RS = require('./lib/report-setups.js');
+const D = require('./lib/report-design.js');
+const RX = require('./lib/report-export.js');
+
+const BASE = T.BASE;
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+const until = async (fn, ms = 15000, step = 150) => { const t0 = Date.now(); for (;;) { let v; try { v = await fn(); } catch { v = null; } if (v) return v; if (Date.now() - t0 > ms) return v; await sleep(step); } };
+const results = [];
+const ok = (name, cond, extra = '') => { results.push({ name, cond: !!cond }); console.log(`${cond ? '✓' : '✗'} ${name}${!cond && extra !== '' ? ' — ' + String(extra).slice(0, 600) : ''}`); };
+
+/* ── the scratch repository and the stub `claude` ── */
+const R = makeRepos('c3-report-design-real');
+const team = codeRepo(path.join(R.base, 'team'));
+fs.mkdirSync(path.join(team, 'pmos', 'state'), { recursive: true });
+write(team, 'pmos/state/.keep', '');
+git(team, ['add', '-A']); git(team, ['commit', '-q', '-m', 'state']);
+const fakeBin = path.join(R.base, 'bin'); fs.mkdirSync(fakeBin, { recursive: true });
+/* The stub plays the report-design run: it reads the job block, writes the render to the output path and prints the JSON result.
+ * A turn makes a title slide (with a data-src part when the cycle document exists) and a headline slide, plus a risks chart when a marker came. */
+fs.writeFileSync(path.join(fakeBin, 'claude'), `#!/usr/bin/env node
+const fs = require('fs');
+let input = ''; process.stdin.on('data', (d) => { input += d; }); process.stdin.on('end', () => {
+  const line = (k) => { const m = new RegExp('^- ' + k + ': (.*)$', 'm').exec(input); return m ? m[1].trim() : null; };
+  const mode = line('Mode'); const out = line('Output path');
+  const done = (o) => { process.stdout.write(JSON.stringify({ type: 'result', subtype: 'success', is_error: false, result: JSON.stringify(o), num_turns: 2, duration_ms: 500, permission_denials: [] })); process.exit(0); };
+  const sec = (id, kind, title, body) => '<section class="pmos-slide" data-slide-id="' + id + '" data-kind="' + kind + '" data-title="' + title + '">' + (body || '<h2>' + title + '</h2>') + '</section>';
+  if (mode === 'turn') {
+    const doc = line('Current cycle document');
+    const hasDoc = doc && fs.existsSync(doc);
+    const points = /Point markers:\\n {2}- 1\\./.test(input);
+    const html = '<style>.pmos-slide{width:1280px;height:720px;background:#fff}.pmos-slide h1{font-size:64px;margin:80px}</style>'
+      + sec('title', 'title', 'Report', '<h1>Report</h1>' + (hasDoc ? '<p><span data-src="doc:cycle" data-value="Read from this cycle">from the cycle</span></p>' : ''))
+      + sec('headline', 'headline', 'Headline') + (points ? sec('risks', 'chart', 'Risks') : '');
+    const took = [...input.matchAll(/^ {2}- (s-[0-9a-f]{8}) \\(NEW\\) "([^"]*)"/gm)].map((m) => ({ id: m[1], took: 'Numbered blue header band from ' + m[2], readable: true }));
+    fs.writeFileSync(out, html);
+    // The first turn takes a moment, so the page's running state can be seen on a fast runner too.
+    setTimeout(() => done({ answer: points ? 'Made the risks a chart, as you pointed.' : 'Built the first version from your description.', took, rules: { same: ['The slide order'], changes: ['The numbers'], learned: points ? ['Risks as a chart'] : [] } }), points ? 0 : 3000);
+  } else {
+    const ref = fs.readFileSync(line('Reference version'), 'utf8');
+    fs.writeFileSync(out, mode === 'match' ? ref : ref + sec('init-new', 'initiative', 'New initiative'));
+    done({ answer: 'Rendered the cycle.' });
+  }
+});
+`, { mode: 0o755 });
+/* a small .pptx with a thumbnail, as a PM's past deck */
+const jpg = Buffer.from([0xff, 0xd8, 0xff, 0xe0, 1, 2, 3, 4]);
+const PPTX = RX.zip([{ name: 'ppt/slides/slide1.xml', data: '<p:sld><a:p><a:r><a:t>Numbered blue header</a:t></a:r></a:p></p:sld>' }, { name: 'docProps/thumbnail.jpeg', data: jpg }]);
+
+let srv = null; let browser = null;
+const finish = async (code) => {
+  if (browser) await browser.close().catch(() => {});
+  if (srv) { try { srv.kill('SIGKILL'); } catch { /* gone */ } }
+  T.killTmux();
+  R.cleanup();
+  const bad = results.filter((x) => !x.cond).length;
+  console.log(`\n${results.length - bad}/${results.length} c3-report-design-real assertions passed`);
+  process.exit(code !== undefined ? code : (bad ? 1 : 0));
+};
+process.on('unhandledRejection', (e) => { console.error(e); finish(1); });
+
+(async () => {
+  const exe = findBrowser();
+  if (!exe) { console.log('✗ no Chrome/Chromium on this machine, c3-report-design-real cannot run'); return finish(1); }
+  let chromium;
+  try { ({ chromium } = require('playwright-core')); } catch { console.log('✗ playwright-core is not installed, c3-report-design-real cannot run'); return finish(1); }
+
+  srv = spawn(process.execPath, [path.join(__dirname, 'server.js')], { cwd: __dirname, stdio: 'ignore',
+    env: T.env({ PMOS_WS_PORT: String(T.PORT), PMOS_SELF_ROOT: team, PMOS_NO_OPEN: '1', PMOS_TICK_MS: '300', PMOS_REPORT_FIND: 'off', PATH: fakeBin + path.delimiter + process.env.PATH }) });
+  await T.waitForServer(BASE);
+  const press = await T.pressHeaders(BASE);
+  const call = async (method, p, body) => { const r = await fetch(BASE + p, { method, headers: method === 'POST' ? press : {}, body: body === undefined ? undefined : JSON.stringify(body) }); const t = await r.text(); let j = null; try { j = JSON.parse(t); } catch { /* not JSON */ } return { status: r.status, body: j, raw: t }; };
+
+  /* ── setup: a recurring work-sourced report, through the API ── */
+  const ws = (await call('POST', '/api/workspaces', { root: team, focus: true })).body.workspace.id;
+  const proposal = { name: 'IDPF biweekly', purpose: 'Tell the attendees what shipped.', audience: 'eShop attendees', source: 'work', output: 'google-slides',
+    schedule: { cadence: 'weekly', day: 'Wed', time: '09:00' }, sources: ['The local ledgers'], sections: RS.FRAME.slice(), learned_from: 'The June copy.', fixes: [] };
+  const made = await call('POST', '/api/report-setups/setup', { ws, proposal });
+  const id = made.body && made.body.setup && made.body.setup.id;
+  const firstPath = made.body && made.body.drafted && made.body.drafted.path;
+  ok('setup: a recurring work-sourced report is set up and its first cycle drafted', !!ws && !!id && !!firstPath, made.raw);
+  if (!id) return finish(1);
+
+  browser = await chromium.launch({ executablePath: exe });
+  const ctx = await browser.newContext({ viewport: { width: 1440, height: 1000 } });
+  const page = await ctx.newPage();
+  const errors = [];
+  page.on('pageerror', (e) => errors.push('pageerror: ' + String((e && e.message) || e)));
+  page.on('requestfailed', (r) => { const f = r.failure(); if (!/ERR_ABORTED/.test((f && f.errorText) || '')) errors.push('failed ' + r.url() + ' ' + ((f && f.errorText) || '')); });
+  page.on('response', (r) => { if (r.status() >= 400) errors.push('http ' + r.status() + ' ' + r.request().method() + ' ' + r.url()); });
+  page.on('dialog', (d) => d.dismiss().catch(() => {}));
+  const text = (sel) => page.textContent(sel).catch(() => '');
+  const clickAt = async (sel, fx, fy) => { await page.$eval(sel, (n) => n.scrollIntoView({ block: 'center' })); await sleep(150); const b = await (await page.$(sel)).boundingBox(); await page.mouse.click(b.x + b.width * fx, b.y + b.height * fy); };
+  /* a click inside a frame lands only once the frame has loaded and been wired: click again until the answer shows */
+  const clickUntil = async (sel, fx, fy, want) => { for (let i = 0; i < 6; i++) { await clickAt(sel, fx, fy); if (await until(() => page.$(want), 1500)) return true; } return false; };
+  const closeAll = async () => { for (let i = 0; i < 3 && await page.$('.sheet'); i++) { await page.keyboard.press('Escape'); await sleep(250); } };
+  const goReports = async () => { await page.goto(BASE + '/c3.html?tab=rep'); await page.waitForSelector('[data-rp3]'); await page.click('[data-rp3-tab="reports"]'); await page.waitForSelector('[data-rs-reg="' + id + '"]', { timeout: 15000 }); };
+
+  /* ── studio ── */
+  await goReports();
+  ok('the set-up row has Design how it looks', !!(await page.$('[data-rs-reg="' + id + '"] [data-rs-act="design"]')));
+  await page.click('[data-rs-reg="' + id + '"] [data-rs-act="design"]');
+  ok('the studio opens on a report with no version yet', !!(await until(() => page.$('[data-rd-studio] [data-rd-noversion]'))));
+  await page.click('[data-rd-fmt="deck"]');
+  await page.click('[data-rd-act="panel"]'); await page.waitForSelector('[data-rd-panel]');
+  await page.setInputFiles('[data-rd-file]', { name: 'Biweekly update, 26 Mar.pptx', mimeType: 'application/vnd.openxmlformats-officedocument.presentationml.presentation', buffer: PPTX });
+  ok('the uploaded sample shows in the conversation with its thumbnail', !!(await until(async () => /26 Mar\.pptx/.test(await text('[data-rd-chat]')) && !!(await page.$('[data-rd-chat] img.rd-dks-thumb')))));
+  await page.fill('[data-rd-in]', 'A biweekly deck for leadership: numbered blue header band, one slide per initiative.');
+  await page.click('[data-rd-act="send"]');
+  ok('while the job runs the conversation shows PMOS working', !!(await until(() => page.$('[data-rd-running]'), 8000)));
+  ok('D1 lands in the strip as the current version', !!(await until(async () => await page.getAttribute('[data-rd-v="1"]', 'aria-pressed') === 'true', 30000)));
+  const sframe = async () => { const h = await page.$('[data-rd-sbig] iframe'); return h ? h.contentFrame() : null; };
+  ok('the preview frame shows the render of D1', !!(await until(async () => { const f = await sframe(); return f && (await f.$$('section.pmos-slide[data-slide-id="title"]')).length === 1; })));
+  ok('the sample says what PMOS took from it', !!(await until(async () => /PMOS took: Numbered blue header band/.test(await text('[data-rd-chat]')))));
+  ok('the description and the PMOS line naming D1 are in the conversation', !!(await page.$('[data-rd-log="describe"]')) && /D1:/.test(await text('[data-rd-chat]')));
+
+  /* point and say → D2 */
+  await page.click('[data-rd-sgo="1"]');
+  await until(async () => /Slide 2 of 2/.test(await text('[data-rd-scap]')));
+  ok('clicking the preview places a marker and asks what to change there', await clickUntil('[data-rd-sbig]', 0.5, 0.45, '[data-rd-mkdraft]'));
+  await page.fill('[data-rd-mkdraft]', 'Risks as a bar chart here');
+  await page.click('[data-rd-act="mksave"]');
+  ok('the marker is listed under Point and say', !!(await until(() => page.$('[data-rd-mkrow="1"]'))));
+  await page.fill('[data-rd-in]', 'Add the risks.');
+  await page.click('[data-rd-act="send"]');
+  ok('the second turn lands D2 as the current version', !!(await until(async () => await page.getAttribute('[data-rd-v="2"]', 'aria-pressed') === 'true', 30000)));
+  const g2 = (await call('GET', `/api/report-design?ws=${ws}&id=${id}`)).body;
+  const turn2 = g2 && g2.design.log.find((l) => l.kind === 'turn' && l.points && l.points.length);
+  ok('the server got the marker with the turn (slide, x, y, text) and D2 has the risks slide', !!turn2 && turn2.points[0].slide === 'headline' && turn2.points[0].text === 'Risks as a bar chart here' && g2.design.versions[1].outline.some((o) => o.id === 'risks'), JSON.stringify(g2 && g2.design.log));
+  ok('the markers are cleared after the turn', (await page.$$('[data-rd-mkrow]')).length === 0);
+
+  /* Compare two */
+  await page.click('[data-rd-act="cmp"]');
+  ok('Compare two shows D1 and D2 side by side', !!(await until(async () => (await page.$$('[data-rd-compare] iframe')).length >= 2)) && await page.getAttribute('[data-rd-a="1"]', 'aria-pressed') === 'true');
+  ok('What changed names the added slide', !!(await until(async () => /What changed from D1 to D2/i.test(await text('[data-rd-changed]')) && /Added: Risks/.test(await text('[data-rd-changed]')))));
+  await page.click('[data-rd-act="cmp"]');
+
+  /* This is it → the Design brief */
+  await until(async () => await page.getAttribute('[data-rd-v="2"]', 'aria-pressed') === 'true');
+  await page.click('[data-rd-act="accept"]');
+  ok('This is it saves D2', !!(await until(async () => /Saved design: D2/.test(await text('[data-rd-saved]')))));
+  const P = D.paths(team, id);
+  ok('brief.md is written', fs.existsSync(P.brief));
+  await page.click('[data-rd-act="brief"]');
+  await page.waitForSelector('[data-rd-brief]');
+  ok('the Design brief shows the design, the description, the sample, the reference version and the rules',
+    !!(await until(async () => /Design D2/.test(await text('[data-rd-design]')))) && /numbered blue header band/.test(await text('[data-rd-desc]')) && (await page.$$('[data-rd-sample]')).length === 1
+    && !!(await until(() => page.$('[data-rd-ref] iframe'))) && !!(await page.$('[data-rd-rule="learned"]')));
+  ok('the brief lists the cycles drawn with the design', !!(await until(() => page.$('[data-rd-briefcycle]'))));
+  await closeAll();
+
+  /* ── Draft now: the cycle hook renders the cycle ── */
+  const nextSlot = new Date(Date.parse(D.cyclePaths(team, firstPath).slot + 'T12:00:00Z') + 7 * 86400000).toISOString().slice(0, 10);
+  const dn = await call('POST', '/api/report/draft', { ws, cadence: id, slot: nextSlot });
+  const cyc = dn.body && dn.body.path;
+  ok('Draft now writes the next cycle', dn.status === 200 && !!cyc && cyc !== firstPath, dn.raw);
+  const cy = await until(async () => { const c = (await call('GET', `/api/report-design/cycle?ws=${ws}&path=${encodeURIComponent(cyc)}`)).body; return c && c.design_version && !c.rendering ? c : null; }, 30000);
+  ok('the cycle hook renders it to match the saved design', !!cy && cy.designed && cy.design_version === 2 && cy.differences.length === 1, JSON.stringify(cy));
+
+  /* ── the report document: the deck in the Read tab ── */
+  await goReports();
+  await page.waitForSelector('[data-rs-doc="' + cyc + '"]', { timeout: 15000 });
+  await page.click('[data-rs-doc="' + cyc + '"] [data-rs-act="opendoc"] >> nth=0');
+  ok('the Read tab shows the deck of the cycle', !!(await until(() => page.$('[data-rd-deck] [data-rd-big] iframe'))));
+  const bigFrame = async () => { const h = await page.$('[data-rd-big] iframe'); return h ? h.contentFrame() : null; };
+  ok('the deck is the cycle render: four slides with the new initiative slide', (await page.$$('[data-rd-go]')).length === 4 && /Design D2/.test(await text('[data-rd-deck]')) && /Slide 1 of 4/.test(await text('[data-rd-cap]')));
+  const sbx = await page.$$eval('.sheet iframe', (a) => a.map((f) => f.getAttribute('sandbox')));
+  ok('every frame of the deck is sandbox exactly "allow-same-origin"', sbx.length >= 4 && sbx.every((s) => s === 'allow-same-origin'), JSON.stringify(sbx));
+  ok('Differs from the design names the new slide', /Differs from the design/.test(await text('[data-rd-diff]')));
+  /* the source popover: the title slide's data-src part */
+  let srcOk = false;
+  for (let i = 0; i < 6 && !srcOk; i++) {
+    const f = await until(() => bigFrame()); const n = f && await until(() => f.$('[data-src]'), 3000);
+    if (n) { await n.click().catch(() => {}); srcOk = !!(await until(async () => /Where "from the cycle" comes from/.test(await text('[data-rd-src]')), 1500)); }
+  }
+  ok('a source chip opens its popover: where the value comes from', srcOk && /Document: cycle/.test(await text('[data-rd-src]')));
+  /* a speaker note */
+  await page.fill('[data-rd-spk]', 'Open with the release.');
+  const spk = await until(async () => { const n = (await call('GET', `/api/report-notes?ws=${ws}&path=${encodeURIComponent(cyc)}`)).body; return n && n.speaker && n.speaker.title && n.speaker.title.text === 'Open with the release.' ? n : null; }, 6000);
+  ok('a speaker note saves on the server', !!spk);
+  /* a pin */
+  await page.click('[data-rd-act="place"]');
+  await until(() => page.$('[data-rd-placing]'));
+  ok('Add a note: a click on the slide asks for the note', await clickUntil('[data-rd-big]', 0.3, 0.7, '[data-rd-pindraft]'));
+  await page.fill('[data-rd-pindraft]', 'Say the outage lasted 40 minutes.');
+  await page.click('[data-rd-act="pinsave"]');
+  ok('the pin shows on the slide', !!(await until(() => page.$('[data-rd-big] [data-rd-pin]'))));
+  const pins = (await call('GET', `/api/report-notes?ws=${ws}&path=${encodeURIComponent(cyc)}`)).body;
+  ok('the pin is on the server with its slide and its place in percent', !!pins && pins.pins.length === 1 && pins.pins[0].slide === 'title' && pins.pins[0].x > 0 && pins.pins[0].x < 100 && pins.pins[0].by === 'you', JSON.stringify(pins));
+  await page.click('[data-dmode="hist"]');
+  ok('the Edit log lists the pinned note', !!(await until(async () => /Note pinned on the slide/.test(await text('.sheet')))) && /40 minutes/.test(await text('.sheet')));
+  await page.click('[data-dmode="read"]');
+  await until(() => page.$('[data-rd-big] iframe'));
+
+  /* Present */
+  await page.click('[data-rd-act="present"]');
+  await page.waitForSelector('[data-rd-ov]');
+  ok('Present opens the presenter view with the note of the slide', /1 \/ 4/.test(await text('[data-rd-pn]')) && /Open with the release/.test(await text('[data-rd-ovnote]')));
+  await page.keyboard.press('ArrowRight');
+  ok('ArrowRight goes to the next slide', !!(await until(async () => /2 \/ 4/.test(await text('[data-rd-pn]')))));
+  await page.keyboard.press('Escape');
+  ok('Escape closes the view and leaves the document open', !!(await until(async () => !(await page.$('[data-rd-ov]')))) && !!(await page.$('[data-rd-big]')));
+
+  await sleep(400);
+  ok('no page error and no failed request', errors.length === 0, errors.slice(0, 6).join(' | '));
+  return finish();
+})().catch((e) => { console.error(e); finish(1); });