create-pmos 0.197.0 → 0.198.0

package/workspace/lib/headless.js

@@ -3,8 +3,8 @@
  * (initiative workspace-headless-jobs; PM decision 2026-10-11: keep Jev, no direct Claude API, background
  * jobs that need no human run headless).
  *
- *   kindFor({ agent, origin, skill, env })        → 'notes' | 'skill' | 'ask' | 'drive' | 'scan-web' | 'scan-repo' | 'scan-research-web' | 'scan-research-repo' | 'report-setup' | 'report-find' | 'core-doc' | null   (null: open a pane, as before)
- *   argsFor(kind, { modelArgs, addDirs })          → the argv after `claude`
+ *   kindFor({ agent, origin, skill, env })        → 'notes' | 'skill' | 'ask' | 'drive' | 'scan-web' | 'scan-repo' | 'scan-research-web' | 'scan-research-repo' | 'report-setup' | 'report-find' | 'core-doc' | 'report-design' | null   (null: open a pane, as before)
+ *   argsFor(kind, { modelArgs, addDirs, writePaths }) → the argv after `claude` (writePaths: the one render file a report-design job may write)
  *   parseResult(stdout)                            → { ok, text, isError, turns, durationMs, costUsd, denied[] }
  *   streamLines(line)                              → { log: [lines], result: object|null }   one stream-json event, for the live log
  *   logLines(result, exitCode)                     → the lines the read-only log pane shows at the end
@@ -44,6 +44,10 @@
  * The `core-doc` kind drafts ONE core document (initiative core-documents): origin `core-doc:<scope>:<key>`. It reads and searches the repository,
  * and its only write is `pmos coredoc write`, which writes a draft and nothing else (the server pins the scope and key in the run's environment).
  * No Write, no Edit, no web, nothing that sends. The draft waits for the PM, who issues it. It never runs in a pane.
+ * The `report-design` kind is the report design studio (initiative report-design-studio): origin `report-design:<cadence>`. It reads the report's folder
+ * (the cycle document, the samples, the earlier versions and the brief) and writes ONE file: the render at the pending path the server gives it, named in
+ * its tool list as `Write(//<path>)` and `Edit(//<path>)`. It has no web tool, no Bash and no connector tool, and nothing that sends. The server sanitizes
+ * the render before anything shows it. It never runs in a pane.
  */
 
 // The skills whose every start runs headless: they read, file a result for PMOS, and send nothing out.
@@ -74,6 +78,9 @@ const REPORT_SETUP_ORIGINS = Object.freeze(['report-setup:']);
 const REPORT_FIND_ORIGINS = Object.freeze(['report-find:']);
 // core-documents: one run drafts one core document of a portfolio, a board or an initiative (origin `core-doc:<scope>:<key>`).
 const CORE_DOC_ORIGINS = Object.freeze(['core-doc:']);
+// report-design-studio: a studio turn, a cycle render or a re-render to match (origin `report-design:<cadence>`).
+const REPORT_DESIGN_ORIGINS = Object.freeze(['report-design:']);
+const WRITE_PATH_KINDS = Object.freeze(['report-design']);   // kinds whose one writable file the caller names (argsFor writePaths)
 
 // What each kind may use. Read-only search is always allowed. The notes passes write their JSON (and rename the .tmp
 // file) in their notes folder, which --add-dir opens to them; the skills also run `pmos` verbs and repository scripts.
@@ -101,6 +108,8 @@ const TOOLS = Object.freeze({
   'report-find': Object.freeze(['Read', 'Glob', 'Grep', 'Bash(pmos report propose *)']),
   // The core-doc run: read and search, and the one verb that writes a draft. No Write, no Edit, no web, nothing that sends.
   'core-doc': Object.freeze(['Read', 'Glob', 'Grep', 'Bash(pmos coredoc write *)']),
+  // The design run: read and search only. Its one write, the render file, is added per run by argsFor (writePaths). No Bash, no web, nothing that sends.
+  'report-design': Object.freeze(['Read', 'Glob', 'Grep']),
   skill: Object.freeze(['Read', 'Write', 'Edit', 'Glob', 'Grep', 'Bash(pmos *)', 'Bash(node *)',
     'Bash(git log *)', 'Bash(git status *)', 'Bash(git diff *)', 'Bash(ls *)', 'Bash(date *)']),
 });
@@ -124,13 +133,22 @@ function kindFor({ agent, origin, skill, env } = {}) {
   if (REPORT_SETUP_ORIGINS.some((p) => o.startsWith(p))) return 'report-setup';
   if (REPORT_FIND_ORIGINS.some((p) => o.startsWith(p))) return 'report-find';
   if (CORE_DOC_ORIGINS.some((p) => o.startsWith(p))) return 'core-doc';
+  if (REPORT_DESIGN_ORIGINS.some((p) => o.startsWith(p))) return 'report-design';
   if (skill && HEADLESS_SKILLS.includes(String(skill))) return 'skill';
   return null;
 }
 
-function argsFor(kind, { modelArgs = [], addDirs = [] } = {}) {
-  const tools = TOOLS[kind];
-  if (!tools) throw new Error('unknown headless kind: ' + kind);
+function argsFor(kind, { modelArgs = [], addDirs = [], writePaths = [] } = {}) {
+  if (!TOOLS[kind]) throw new Error('unknown headless kind: ' + kind);
+  const tools = TOOLS[kind].slice();
+  // A report-design run may write its render file and nothing else: one absolute path, no wildcard, no comma.
+  if (WRITE_PATH_KINDS.includes(kind)) {
+    for (const p of Array.isArray(writePaths) ? writePaths : []) {
+      const s = String(p || '');
+      if (!s.startsWith('/') || /[\s,*?()\[\]{}]/.test(s) || s.includes('..')) continue;
+      tools.push(`Write(/${s})`, `Edit(/${s})`);
+    }
+  }
   // stream-json needs --verbose in print mode; it adds the step events, and the last line is the same result object as `json`.
   const argv = ['-p', '--output-format', 'stream-json', '--verbose', '--no-session-persistence', ...modelArgs, '--allowedTools', tools.join(',')];
   // A web run gets no directory at all, whatever the caller passes: it must not be able to read the repository.
@@ -242,4 +260,4 @@ function logLines(r, exitCode) {
   return out;
 }
 
-module.exports = { HEADLESS_SKILLS, HEADLESS_ORIGINS, ASK_ORIGINS, DRIVE_ORIGINS, SCAN_WEB_ORIGINS, SCAN_REPO_ORIGINS, SCAN_RESEARCH_WEB_ORIGINS, SCAN_RESEARCH_REPO_ORIGINS, WEB_KINDS, REPORT_SETUP_ORIGINS, REPORT_FIND_ORIGINS, CORE_DOC_ORIGINS, TOOLS, DEFAULT_TIMEOUT_MS, kindFor, argsFor, timeoutMs, parseResult, streamLines, outcomeOf, logLines, switchedOff };
+module.exports = { HEADLESS_SKILLS, HEADLESS_ORIGINS, ASK_ORIGINS, DRIVE_ORIGINS, SCAN_WEB_ORIGINS, SCAN_REPO_ORIGINS, SCAN_RESEARCH_WEB_ORIGINS, SCAN_RESEARCH_REPO_ORIGINS, WEB_KINDS, REPORT_SETUP_ORIGINS, REPORT_FIND_ORIGINS, CORE_DOC_ORIGINS, REPORT_DESIGN_ORIGINS, TOOLS, DEFAULT_TIMEOUT_MS, kindFor, argsFor, timeoutMs, parseResult, streamLines, outcomeOf, logLines, switchedOff };