create-pmos 0.22.0 → 0.23.0

package/workspace/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "pmos-workspace",
-  "version": "0.22.0",
+  "version": "0.23.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "pmos-workspace",
-      "version": "0.22.0",
+      "version": "0.23.0",
       "license": "MIT",
       "dependencies": {
         "@xterm/addon-fit": "^0.11.0",

package/workspace/package.json

@@ -1,8 +1,8 @@
 {
   "name": "pmos-workspace",
-  "version": "0.22.0",
+  "version": "0.23.0",
   "private": true,
-  "description": "PMOS Terminal Workspace \u2014 local companion hosting real PTYs beside the library and gates (D62)",
+  "description": "PMOS Terminal Workspace — local companion hosting real PTYs beside the library and gates (D62)",
   "license": "MIT",
   "bin": {
     "pmos": "bin/pmos.js"
@@ -29,7 +29,7 @@
     "playwright-core": "^1.61.1",
     "ws": "^8.18.0"
   },
-  "//devDependencies": "design-parity's pixel axis only. Kept OUT of dependencies deliberately: `create-pmos workspace` installs this package with `npm install -g`, which takes dependencies and not devDependencies, so an adopter installing a local PM tool does not also install a screenshot differ. design-parity.js requires both optionally and degrades to text+style+geometry when they are absent, so the parity check still runs \u2014 it just stops measuring pixels, and says so.",
+  "//devDependencies": "design-parity's pixel axis only. Kept OUT of dependencies deliberately: `create-pmos workspace` installs this package with `npm install -g`, which takes dependencies and not devDependencies, so an adopter installing a local PM tool does not also install a screenshot differ. design-parity.js requires both optionally and degrades to text+style+geometry when they are absent, so the parity check still runs — it just stops measuring pixels, and says so.",
   "devDependencies": {
     "pixelmatch": "^7.1.0",
     "pngjs": "^7.0.0"

package/workspace/server.js

@@ -922,71 +922,58 @@ function library(root) {
 // ("— not tracked"), never invented (D14/D40 honesty).
 const PHASE_OF = { planning: 'plan', building: 'deliver', blocked: 'deliver', delivered: 'report', accepted: 'report', unknown: 'plan' };
 
-// ── Delivery evidence (board-delivery-truth R-2/R-3). ──────────────────────────────────────────
+// ── Delivery evidence (board-delivery-truth R-2/R-3; shared reader, workflow-status-sweep R-1). ──
 // "Has this shipped?" answered from the trunk's own history rather than from anything anyone typed.
 //
-// ONE `git log` per trunk head, memoised on that sha — ~0.3s and ~800 KB on this repo's 1,214
-// commits, paid once and reused by every surface until the trunk moves. Local only: git reads the
-// object store on disk, so the suite's "no network" guarantee (K. Surfaces) is untouched.
+// THIS DERIVATION NO LONGER LIVES HERE. It was module-private to this file, which meant the GUI's
+// initiative board answered the question with attribution while the engine's ladder
+// (`scripts/workflow-state.js`) answered it without any — `buildCommits` counted every build commit
+// in a range with no idea which initiative it was answering about, and over the trunk reported the
+// same 488 commits as evidence for all 177 initiatives. Two readers, one repository, different
+// answers to "did this ship". `scripts/delivery-index.js` is now the single reader, in the same
+// shape and for the same reason as `scripts/anchor-resolve.js`; its header carries the two-signal
+// rationale that used to be written here.
 //
-// TWO signals, because one is not enough. The branch convention (`initiative/<id>`) is precise but
-// incomplete: 31% of this repo's merged PRs shipped on `claude/*` branches, which match no id. So a
-// commit that MENTIONS the id and TOUCHES a build path counts too. The build-path requirement is
-// what keeps the mention signal honest — `feat(planning): add <id> PRD` mentions the id while
-// delivering nothing, and without the path test every specified initiative would read as shipped.
-const BUILD_EXCLUDE = /^(planning|okf|prototype)\//;
-function isDeliveryPath(f) {
-  if (!f) return false;
-  if (BUILD_EXCLUDE.test(f)) return false;
-  return !/^[^/]+\.md$/.test(f);      // root governance prose (DECISIONS.md, CLAUDE.md…) is not a build
-}
-const deliveryCache = new Map();      // root -> { head, index }
-function trunkRef(root) {
-  for (const c of ['origin/main', 'main', 'origin/master', 'master']) {
-    const r = gitCap(root, ['rev-parse', '--verify', '--quiet', c]);
-    if (r.ok && r.out.trim()) return { ref: c, head: r.out.trim() };
+// Resolution follows the ANCHOR_LIB_PATHS pattern below: a repo checkout first (so a dev surface and
+// CI cannot disagree), then the copy `scripts/vendor-workspace-engine.js` vendors into the bundle.
+// The engine requires this module, so it is already inside the vendored closure — an adopter's
+// install carries it without a second packaging step to remember.
+const DELIVERY_LIB_PATHS = [
+  path.join(__dirname, '..', 'scripts', 'delivery-index.js'),
+  path.join(__dirname, 'lib', 'engine', 'delivery-index.js'),
+];
+function deliveryLib() {
+  for (const p of DELIVERY_LIB_PATHS) {
+    if (!fs.existsSync(p)) continue;
+    try { return require(p); } catch { return null; }
   }
   return null;
 }
-function gitCap(root, args) {
-  try {
-    const r = spawnSync('git', args, { cwd: root, encoding: 'utf8', maxBuffer: 64 * 1024 * 1024 });
-    if (r.error || r.status !== 0) return { ok: false, out: '', err: (r.stderr || (r.error && r.error.message) || '').trim() };
-    return { ok: true, out: r.stdout || '' };
-  } catch (e) { return { ok: false, out: '', err: String((e && e.message) || e) }; }
+function isDeliveryPath(f) {
+  const D = deliveryLib();
+  // Absent library → no path can be CONFIRMED as a delivery path. Returning `true` here would let
+  // every commit count as delivery evidence in exactly the install where the evidence cannot be
+  // read, which is the false-green direction. `deliveryIndex` below reports the absence out loud.
+  return D ? D.isDeliveryPath(f) : false;
 }
 /**
  * → { ok, reason?, byBranch:Set<id>, byMention:Set<id> }
  * `ok:false` is a REAL answer and never degrades into "nothing was delivered" — the caller renders
  * it red and marks every initiative's delivery `unknown` (R-3). A board that cannot read the
  * history must say so; silently reporting `planning` for 110 shipped initiatives is the failure
- * this whole initiative exists to remove.
+ * this whole initiative exists to remove. A missing library is the same class of answer as an
+ * unreadable history and takes the same `ok:false` path.
  */
 function deliveryIndex(root, ids) {
-  const t = trunkRef(root);
-  if (!t) return { ok: false, reason: 'no trunk branch (main/master) is reachable from this repository — delivery cannot be derived', byBranch: new Set(), byMention: new Set() };
-  const hit = deliveryCache.get(root);
-  if (hit && hit.head === t.head) return hit.index;
-
-  // %x1e separates commits, %x1f separates the message from --name-only's file list.
-  const r = gitCap(root, ['log', '--format=%x1e%s %b%x1f', '--name-only', t.head]);
-  if (!r.ok) {
-    return { ok: false, reason: `git could not read the history at ${t.ref}${r.err ? ` — ${r.err}` : ''}`, byBranch: new Set(), byMention: new Set() };
-  }
-  const byBranch = new Set(), byMention = new Set();
-  const known = Array.isArray(ids) ? ids : [...ids];
-  for (const chunk of r.out.split('\x1e')) {
-    if (!chunk.trim()) continue;
-    const cut = chunk.indexOf('\x1f');
-    const msg = cut < 0 ? chunk : chunk.slice(0, cut);
-    const files = cut < 0 ? [] : chunk.slice(cut + 1).split('\n').map((s) => s.trim()).filter(Boolean);
-    for (const m of msg.matchAll(/initiative\/([A-Za-z0-9][\w.-]*)/g)) byBranch.add(m[1]);
-    if (!files.some(isDeliveryPath)) continue;
-    for (const id of known) if (id.length > 3 && msg.includes(id)) byMention.add(id);
-  }
-  const index = { ok: true, byBranch, byMention };
-  deliveryCache.set(root, { head: t.head, index });
-  return index;
+  const D = deliveryLib();
+  if (!D) {
+    return {
+      ok: false,
+      reason: 'the delivery reader (scripts/delivery-index.js) is not present in this install — delivery cannot be derived here',
+      byBranch: new Set(), byMention: new Set(),
+    };
+  }
+  return D.deliveryIndex(root, ids);
 }
 /**
  * The five states, in precedence order. Every one of them names the artifact it was read from, so