create-pmos 0.233.0 → 0.235.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-pmos",
-  "version": "0.233.0",
+  "version": "0.235.0",
   "description": "Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with all state as git-versioned files. Includes `workflow-sweep`, which audits the state every board derives from and separates real defects from work you simply have not done. `create-pmos workspace` also installs + launches the local Terminal Workspace GUI. No database, no network, no telemetry.",
   "license": "MIT",
   "bin": {

package/payload/KIT-VERSION

@@ -1,3 +1,3 @@
-kernel-source: pmos@c113f92
+kernel-source: pmos@a744ae0
 assembled: 2026-10-14
 mode: vendor

package/payload/planning/evals/eval-calibration.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Eval calibration log"
 description: "Append-only record of every PM override of an evaluator verdict."
-generated: {by: process:create-pmos, at: "2026-10-14T09:17:36Z"}
+generated: {by: process:create-pmos, at: "2026-10-14T09:56:46Z"}
 status: stable
 ---
 

package/payload/planning/okrs/health-budgets.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Health budgets"
 description: "Closed registry of health-budget anchors (D59), edited only by the PM."
-generated: {by: process:create-pmos, at: "2026-10-14T09:17:36Z"}
+generated: {by: process:create-pmos, at: "2026-10-14T09:56:46Z"}
 status: stable
 ---
 

package/payload/state/discoveries.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Discoveries and friction log"
 description: "Append-only record of what runs discovered and where the process rubbed."
-generated: {by: process:create-pmos, at: "2026-10-14T09:17:36Z"}
+generated: {by: process:create-pmos, at: "2026-10-14T09:56:46Z"}
 status: stable
 ---
 

package/workspace/bin/pmos.js

@@ -27,6 +27,7 @@ const http = require('http');
 const net = require('net');
 const fs = require('fs');
 const path = require('path');
+const os = require('os');
 const { spawn, spawnSync } = require('child_process');
 const D = require('../lib/server-discovery');
 const stateRoot = require('../lib/state-root');
@@ -164,6 +165,17 @@ function repoRootOf(dir) {
   return top && fs.existsSync(top) ? top : path.resolve(dir);
 }
 
+// `pmos` typed in a new terminal runs in the home folder. Registering the home folder as a workspace made PMOS start
+// its background jobs over every file the PM has. The setup's PMOS folder (PMOS_DIR, else ~/PMOS) is opened instead;
+// with no such folder, `pmos` says where to run it and registers nothing.
+function workspaceDir(dir) {
+  const home = path.resolve(os.homedir());
+  if (path.resolve(repoRootOf(dir)) !== home) return { dir };
+  const pmosDir = process.env.PMOS_DIR ? path.resolve(process.env.PMOS_DIR) : path.join(home, 'PMOS');
+  if (pmosDir !== home && fs.existsSync(pmosDir)) return { dir: pmosDir, note: `note: this is your home folder, so PMOS opens your PMOS folder, ${pmosDir}.` };
+  return { refused: 'this is your home folder. Run `pmos` inside a project folder, or `pmos <folder>`.' };
+}
+
 function openBrowser(url) {
   if (NO_OPEN) return;
   const cmd = process.platform === 'darwin' ? ['open', [url]]
@@ -283,6 +295,12 @@ async function servesTailnet(port) {
 // `remote` starts a NEW server in tailnet mode (pmos phone); a server that is already running is reused as it is.
 // `open: false` registers the repo without opening the desktop browser.
 async function up(dir, { remote = false, open = true, waited = false } = {}) {
+  if (!waited) {
+    const where = workspaceDir(dir);
+    if (where.refused) { say(`✗ ${where.refused}`); return 1; }
+    if (where.note) say(where.note);
+    dir = where.dir;
+  }
   // 1. Is a workspace already running — on ANY port it recorded, not just the one this shell guesses?
   let live = await discover();
   // A server that predates this install is running OLD code under NEW files (or the reverse). Reusing

package/workspace/lib/calendar-events.js

@@ -11,7 +11,8 @@
  * meetings came in with the morning brief saw them under Record and nowhere else. This reader joins the three. The Record menu reads it
  * too (todayOf, GET /api/calendar-today): it read the Agenda once, so an imported meeting was on the Calendar and missing under Record. An imported event wins
  * over a remembered one with the same start minute and title, because it carries the PM's notes; today's brief replaces the remembered
- * events of today, as agendaMonth does.
+ * events of today, as agendaMonth does. Two imported copies of one meeting (same start minute and title, different ids) are one
+ * event (oneEach), so the Calendar does not draw a meeting twice side by side.
  *
  * `at` and `end` of a remembered event are local date-times with the offset (2026-10-12T10:45:00+08:00), so a reader that takes the
  * first ten characters as the day (calendar-model.js bucketEvents) gets the local day. READ ONLY; a file that cannot be read gives nothing. */
@@ -52,6 +53,32 @@ function asEvent(e, src) {
     ...(e.series ? { series: String(e.series) } : {}) };
 }
 
+/** One imported event per meeting. The ledger folds by event id, and the id is whatever the agent session that read the calendar
+ * gave (calendar-sync.skill): one run can give the calendar's event id and the next its iCal UID, or the same meeting can come in
+ * from two calendars. Each copy was then a meeting of its own, and the Calendar drew the two side by side. Copies with the same
+ * start minute and title are one meeting: the copy read last is kept (its title and times are the newest), and the PM's notes of
+ * every copy stay on it. Events with no readable start are kept as they are. Pure. */
+function oneEach(imported) {
+  const by = new Map();
+  const loose = [];
+  imported.forEach((e, i) => {
+    const s = e && e.at ? Date.parse(e.at) : NaN;
+    if (!e || Number.isNaN(s)) { if (e) loose.push(e); return; }
+    const k = minuteKey(s, e.title);
+    const prev = by.get(k);
+    if (!prev) { by.set(k, { e, i }); return; }
+    const newer = String(e.fetched_at || '') > String(prev.e.fetched_at || '') || (String(e.fetched_at || '') === String(prev.e.fetched_at || '') && i > prev.i);
+    const keep = newer ? e : prev.e;
+    const other = newer ? prev.e : e;
+    const notes = [].concat(prev.e.pm_notes || [], e.pm_notes || []);
+    const ids = new Set();
+    const pm = notes.filter((x) => { const id = x && (x.id || x.at + '|' + x.text); if (ids.has(id)) return false; ids.add(id); return true; })
+      .sort((a, b) => String(a && a.at).localeCompare(String(b && b.at)));
+    by.set(k, { e: { ...keep, pm_notes: pm, agent_prep_notes: keep.agent_prep_notes || other.agent_prep_notes || '', initiative: keep.initiative || other.initiative || null }, i: newer ? i : prev.i });
+  });
+  return [...by.values()].map((x) => x.e).concat(loose);
+}
+
 function readAll(runtimeDir, { now = Date.now() } = {}) {
   if (!runtimeDir) return [];
   let imported = [];
@@ -62,8 +89,8 @@ function readAll(runtimeDir, { now = Date.now() } = {}) {
   const briefed = brief && brief.date === today && Array.isArray(brief.calendar) ? brief.calendar.map((e) => asEvent(e, 'brief')).filter(Boolean) : null;
   let remembered = (mem && Array.isArray(mem.events) ? mem.events : []).map((e) => asEvent(e, 'memory')).filter(Boolean);
   if (briefed) remembered = remembered.filter((e) => e.at.slice(0, 10) !== today).concat(briefed);
-  const seen = new Set(imported.filter((e) => e && e.at && !Number.isNaN(Date.parse(e.at))).map((e) => minuteKey(Date.parse(e.at), e.title)));
-  const out = imported.slice();
+  const out = oneEach(imported);
+  const seen = new Set(out.filter((e) => e && e.at && !Number.isNaN(Date.parse(e.at))).map((e) => minuteKey(Date.parse(e.at), e.title)));
   for (const e of remembered) {
     const k = minuteKey(Date.parse(e.at), e.title);
     if (seen.has(k)) continue;
@@ -92,4 +119,4 @@ const eventsOn = (events, day) => listOf(events).filter((e) => e.date === day);
 /** Today's meetings (the Record menu): eventsOn the local day of `now`. */
 const todayOf = (events, now = Date.now()) => eventsOn(events, localDate(now));
 
-module.exports = { readAll, asEvent, localIso, todayOf, eventsOn, listOf, menuShape };
+module.exports = { readAll, oneEach, asEvent, localIso, todayOf, eventsOn, listOf, menuShape };

package/workspace/lib/win-command.js

@@ -0,0 +1,54 @@
+'use strict';
+/* lib/win-command.js — how to start a command such as `claude` on Windows.
+ *
+ * On Windows, Node starts a program by name only when it is an .exe or .com file. A command that npm installed
+ * (`npm install -g @anthropic-ai/claude-code`) is a `claude.cmd` file, so `spawn('claude')` fails with ENOENT
+ * (-4058), even though the same `claude` works in a terminal. Since Node 20, Node also refuses to start a .cmd
+ * file without a shell.
+ *
+ * resolve() finds the file on PATH the way a terminal does (PATHEXT) and returns what to start instead:
+ *   - an .exe or .com file: its full path;
+ *   - an npm .cmd shim: node and the script the shim points to, so no shell quoting is involved;
+ *   - any other .cmd or .bat file: cmd.exe /d /s /c with the file, as a last resort.
+ * On other platforms, and when nothing is found, the command is returned unchanged, so the caller's own
+ * "not found" handling still applies.
+ *
+ * Pure apart from the injected `exists` and `read`, so every case is testable on any platform.
+ */
+const fs = require('fs');
+const path = require('path');
+
+function resolve(cmd, {
+  platform = process.platform, env = process.env, execPath = process.execPath,
+  exists = (f) => { try { return fs.statSync(f).isFile(); } catch { return false; } },
+  read = (f) => { try { return fs.readFileSync(f, 'utf8'); } catch { return null; } },
+} = {}) {
+  const same = { file: cmd, prefix: [] };
+  if (platform !== 'win32' || !cmd) return same;
+  const P = path.win32;
+  const exts = String(env.PATHEXT || '.COM;.EXE;.BAT;.CMD').split(';').filter(Boolean).map((e) => e.toLowerCase());
+  const hasExt = exts.includes(P.extname(cmd).toLowerCase());
+  const names = hasExt ? [cmd] : exts.map((e) => cmd + e);
+  const dirs = /[\\/]/.test(cmd) ? [''] : String(env.PATH || env.Path || '').split(';').filter(Boolean);
+  let found = null;
+  for (const d of dirs) {
+    for (const n of names) { const f = d ? P.join(d, n) : n; if (exists(f)) { found = f; break; } }
+    if (found) break;
+  }
+  if (!found) return same;
+  const ext = P.extname(found).toLowerCase();
+  if (ext === '.exe' || ext === '.com') return { file: found, prefix: [] };
+  if (ext === '.cmd' || ext === '.bat') {
+    // npm's cmd-shim names its target relative to the shim's folder: "%dp0%\node_modules\…\cli.js" (or "%~dp0\…").
+    const text = read(found) || '';
+    const m = /"%~?dp0%?\\([^"%]+\.(js|cjs|mjs|exe))"/i.exec(text);
+    if (m) {
+      const target = P.join(P.dirname(found), m[1]);
+      if (exists(target)) return m[2].toLowerCase() === 'exe' ? { file: target, prefix: [] } : { file: execPath, prefix: [target] };
+    }
+    return { file: env.ComSpec || 'cmd.exe', prefix: ['/d', '/s', '/c', found] };
+  }
+  return same;
+}
+
+module.exports = { resolve };

package/workspace/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "pmos-workspace",
-  "version": "0.233.0",
+  "version": "0.235.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "pmos-workspace",
-      "version": "0.233.0",
+      "version": "0.235.0",
       "license": "MIT",
       "dependencies": {
         "@xterm/addon-fit": "^0.11.0",

package/workspace/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pmos-workspace",
-  "version": "0.233.0",
+  "version": "0.235.0",
   "private": true,
   "description": "PMOS Terminal Workspace — local companion hosting real PTYs beside the library and gates (D62)",
   "license": "MIT",

package/workspace/replaced-tests.json

@@ -3061,6 +3061,20 @@
       "names": [
         "hand to agent: no drop on any column started a session or called a /handoff/ route"
       ]
+    },
+    {
+      "id": "E75",
+      "group": "E",
+      "file": "workspace/pm-r12-test.js",
+      "section": "T3: the two spawn paths",
+      "change": "rewritten",
+      "slice": "one-line-setup",
+      "reason": "On Windows, Node cannot start npm's claude.cmd by name (spawn claude ENOENT, -4058). The direct-PTY spawn now starts the file lib/win-command.js resolves (unchanged on macOS and Linux). The assertion read the old line of server.js literally.",
+      "replacement": "The assertion stays under the same name; it now matches pty.spawn(run.file, [...run.prefix, ...launchArgs], …), which still passes the launch args as an argv.",
+      "pm_approval": null,
+      "names": [
+        "T3: both spawn paths take the launch args — tmux joins plain tokens, the direct PTY passes an argv"
+      ]
     }
   ]
 }

package/workspace/server.js

@@ -1957,6 +1957,7 @@ const autoSync = require('./lib/auto-sync').createAutoSync({
 // workspace starts the board and facts rebuilds when the repository changes, so nothing is re-read on a clock. The board
 // keeps its last value while it rebuilds (stale while revalidate): dropping it would show a blank Board on every change.
 const factsAsync = require('./lib/facts-async.js');
+const winCommand = require('./lib/win-command');
 factsAsync.configure({ stateDir: STATE });
 const freshness = require('./lib/freshness.js').create({
   stateDir: STATE,
@@ -3611,7 +3612,9 @@ function startHeadless(base, workdir, kind, launchArgs, env, initialInput, addDi
   let child;
   // detached: its own process group, so stopping it also stops what it started (an MCP server, a script) and no
   // grandchild keeps the output pipes open after the run is stopped.
-  try { child = spawn(base.agent, args, { cwd: workdir, env, stdio: ['pipe', 'pipe', 'pipe'], detached: true }); }
+  // Windows: `claude` installed by npm is claude.cmd, which spawn() cannot start by name (lib/win-command.js).
+  const run = winCommand.resolve(base.agent, { env });
+  try { child = spawn(run.file, [...run.prefix, ...args], { cwd: workdir, env, stdio: ['pipe', 'pipe', 'pipe'], detached: true }); }
   catch (e) {
     s.state = 'exited'; s.note = spawnFailureAdvice(e, base.agent, false);
     say(`\x1b[38;5;203m✗ ${s.note}\x1b[0m\n`); persist(s); pushSessions(); pushWorkspaces(); return s;
@@ -3862,7 +3865,7 @@ function spawnSessionInner({ name, agent, cwd, ws, origin, initialInput, profile
   let p, usedCmd = cmd;
   try {
     if (isShell) { const r = spawnPty(cmd, workdir, penv); p = r.pty; usedCmd = r.cmd; }
-    else p = pty.spawn(cmd, launchArgs, { name: 'xterm-256color', cols: 80, rows: 24, cwd: workdir, env: penv });
+    else { const run = winCommand.resolve(cmd, { env: penv }); p = pty.spawn(run.file, [...run.prefix, ...launchArgs], { name: 'xterm-256color', cols: 80, rows: 24, cwd: workdir, env: penv }); }
   } catch (e) {
     return exitedSession(base, workdir, spawnFailureAdvice(e, cmd, isShell));
   }

package/workspace/skills/calendar-sync.skill

@@ -24,6 +24,7 @@ Procedure:
 1. List the PM's events from the start of today to the end of the 14th day after today, from the primary calendar. Fetch every page. Skip an event the PM declined.
 2. Write the events as JSON in the scratch folder, for example `<scratch>/calendar.json`, as a list with one object per event:
    `{"id", "title", "start", "end", "attendees": ["Display Name", …], "initiative": "<initiative id or null>"}`
+   `id` is the calendar's own id for that event (for a repeating meeting, the id of that one occurrence). Use the same id on every run, never a made-up one: PMOS keeps one copy per id.
    `start` and `end` are ISO times with the offset, for example `2026-10-12T09:00:00+07:00`. An all-day event has the date only.
 3. Run `pmos calendar import --from <scratch>/calendar.json --sensitivity internal`. If it refuses the file, fix what it names and run it once more.
 4. Delete the scratch file.

package/workspace/test-lists/one-line-setup.json

@@ -1,5 +1,5 @@
 {
-  "_comment": "one-line-setup: on Windows the background server hides the console window of every command it runs (lib/win-hide.js); `pmos` waits for its own busy server instead of starting a second one (busy-server.test.js).",
-  "modules": ["win-hide.test.js", "busy-server.test.js"],
-  "seconds": { "win-hide.test.js": 1, "busy-server.test.js": 12 }
+  "_comment": "one-line-setup: on Windows the server hides command windows (win-hide), starts npm's claude.cmd (win-command), and `pmos` waits for its own busy server (busy-server) and never registers the home folder (windows-start).",
+  "modules": ["win-hide.test.js", "busy-server.test.js", "windows-start.test.js"],
+  "seconds": { "win-hide.test.js": 1, "busy-server.test.js": 12, "windows-start.test.js": 3 }
 }