create-pmos 0.234.0 → 0.235.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-pmos",
-  "version": "0.234.0",
+  "version": "0.235.0",
   "description": "Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with all state as git-versioned files. Includes `workflow-sweep`, which audits the state every board derives from and separates real defects from work you simply have not done. `create-pmos workspace` also installs + launches the local Terminal Workspace GUI. No database, no network, no telemetry.",
   "license": "MIT",
   "bin": {

package/payload/KIT-VERSION

@@ -1,3 +1,3 @@
-kernel-source: pmos@cda8b75
+kernel-source: pmos@a744ae0
 assembled: 2026-10-14
 mode: vendor

package/payload/planning/evals/eval-calibration.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Eval calibration log"
 description: "Append-only record of every PM override of an evaluator verdict."
-generated: {by: process:create-pmos, at: "2026-10-14T09:51:20Z"}
+generated: {by: process:create-pmos, at: "2026-10-14T09:56:46Z"}
 status: stable
 ---
 

package/payload/planning/okrs/health-budgets.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Health budgets"
 description: "Closed registry of health-budget anchors (D59), edited only by the PM."
-generated: {by: process:create-pmos, at: "2026-10-14T09:51:20Z"}
+generated: {by: process:create-pmos, at: "2026-10-14T09:56:46Z"}
 status: stable
 ---
 

package/payload/state/discoveries.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Discoveries and friction log"
 description: "Append-only record of what runs discovered and where the process rubbed."
-generated: {by: process:create-pmos, at: "2026-10-14T09:51:20Z"}
+generated: {by: process:create-pmos, at: "2026-10-14T09:56:46Z"}
 status: stable
 ---
 

package/workspace/bin/pmos.js

@@ -27,6 +27,7 @@ const http = require('http');
 const net = require('net');
 const fs = require('fs');
 const path = require('path');
+const os = require('os');
 const { spawn, spawnSync } = require('child_process');
 const D = require('../lib/server-discovery');
 const stateRoot = require('../lib/state-root');
@@ -164,6 +165,17 @@ function repoRootOf(dir) {
   return top && fs.existsSync(top) ? top : path.resolve(dir);
 }
 
+// `pmos` typed in a new terminal runs in the home folder. Registering the home folder as a workspace made PMOS start
+// its background jobs over every file the PM has. The setup's PMOS folder (PMOS_DIR, else ~/PMOS) is opened instead;
+// with no such folder, `pmos` says where to run it and registers nothing.
+function workspaceDir(dir) {
+  const home = path.resolve(os.homedir());
+  if (path.resolve(repoRootOf(dir)) !== home) return { dir };
+  const pmosDir = process.env.PMOS_DIR ? path.resolve(process.env.PMOS_DIR) : path.join(home, 'PMOS');
+  if (pmosDir !== home && fs.existsSync(pmosDir)) return { dir: pmosDir, note: `note: this is your home folder, so PMOS opens your PMOS folder, ${pmosDir}.` };
+  return { refused: 'this is your home folder. Run `pmos` inside a project folder, or `pmos <folder>`.' };
+}
+
 function openBrowser(url) {
   if (NO_OPEN) return;
   const cmd = process.platform === 'darwin' ? ['open', [url]]
@@ -283,6 +295,12 @@ async function servesTailnet(port) {
 // `remote` starts a NEW server in tailnet mode (pmos phone); a server that is already running is reused as it is.
 // `open: false` registers the repo without opening the desktop browser.
 async function up(dir, { remote = false, open = true, waited = false } = {}) {
+  if (!waited) {
+    const where = workspaceDir(dir);
+    if (where.refused) { say(`✗ ${where.refused}`); return 1; }
+    if (where.note) say(where.note);
+    dir = where.dir;
+  }
   // 1. Is a workspace already running — on ANY port it recorded, not just the one this shell guesses?
   let live = await discover();
   // A server that predates this install is running OLD code under NEW files (or the reverse). Reusing

package/workspace/lib/win-command.js

@@ -0,0 +1,54 @@
+'use strict';
+/* lib/win-command.js — how to start a command such as `claude` on Windows.
+ *
+ * On Windows, Node starts a program by name only when it is an .exe or .com file. A command that npm installed
+ * (`npm install -g @anthropic-ai/claude-code`) is a `claude.cmd` file, so `spawn('claude')` fails with ENOENT
+ * (-4058), even though the same `claude` works in a terminal. Since Node 20, Node also refuses to start a .cmd
+ * file without a shell.
+ *
+ * resolve() finds the file on PATH the way a terminal does (PATHEXT) and returns what to start instead:
+ *   - an .exe or .com file: its full path;
+ *   - an npm .cmd shim: node and the script the shim points to, so no shell quoting is involved;
+ *   - any other .cmd or .bat file: cmd.exe /d /s /c with the file, as a last resort.
+ * On other platforms, and when nothing is found, the command is returned unchanged, so the caller's own
+ * "not found" handling still applies.
+ *
+ * Pure apart from the injected `exists` and `read`, so every case is testable on any platform.
+ */
+const fs = require('fs');
+const path = require('path');
+
+function resolve(cmd, {
+  platform = process.platform, env = process.env, execPath = process.execPath,
+  exists = (f) => { try { return fs.statSync(f).isFile(); } catch { return false; } },
+  read = (f) => { try { return fs.readFileSync(f, 'utf8'); } catch { return null; } },
+} = {}) {
+  const same = { file: cmd, prefix: [] };
+  if (platform !== 'win32' || !cmd) return same;
+  const P = path.win32;
+  const exts = String(env.PATHEXT || '.COM;.EXE;.BAT;.CMD').split(';').filter(Boolean).map((e) => e.toLowerCase());
+  const hasExt = exts.includes(P.extname(cmd).toLowerCase());
+  const names = hasExt ? [cmd] : exts.map((e) => cmd + e);
+  const dirs = /[\\/]/.test(cmd) ? [''] : String(env.PATH || env.Path || '').split(';').filter(Boolean);
+  let found = null;
+  for (const d of dirs) {
+    for (const n of names) { const f = d ? P.join(d, n) : n; if (exists(f)) { found = f; break; } }
+    if (found) break;
+  }
+  if (!found) return same;
+  const ext = P.extname(found).toLowerCase();
+  if (ext === '.exe' || ext === '.com') return { file: found, prefix: [] };
+  if (ext === '.cmd' || ext === '.bat') {
+    // npm's cmd-shim names its target relative to the shim's folder: "%dp0%\node_modules\…\cli.js" (or "%~dp0\…").
+    const text = read(found) || '';
+    const m = /"%~?dp0%?\\([^"%]+\.(js|cjs|mjs|exe))"/i.exec(text);
+    if (m) {
+      const target = P.join(P.dirname(found), m[1]);
+      if (exists(target)) return m[2].toLowerCase() === 'exe' ? { file: target, prefix: [] } : { file: execPath, prefix: [target] };
+    }
+    return { file: env.ComSpec || 'cmd.exe', prefix: ['/d', '/s', '/c', found] };
+  }
+  return same;
+}
+
+module.exports = { resolve };

package/workspace/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "pmos-workspace",
-  "version": "0.234.0",
+  "version": "0.235.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "pmos-workspace",
-      "version": "0.234.0",
+      "version": "0.235.0",
       "license": "MIT",
       "dependencies": {
         "@xterm/addon-fit": "^0.11.0",

package/workspace/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pmos-workspace",
-  "version": "0.234.0",
+  "version": "0.235.0",
   "private": true,
   "description": "PMOS Terminal Workspace — local companion hosting real PTYs beside the library and gates (D62)",
   "license": "MIT",

package/workspace/replaced-tests.json

@@ -3061,6 +3061,20 @@
       "names": [
         "hand to agent: no drop on any column started a session or called a /handoff/ route"
       ]
+    },
+    {
+      "id": "E75",
+      "group": "E",
+      "file": "workspace/pm-r12-test.js",
+      "section": "T3: the two spawn paths",
+      "change": "rewritten",
+      "slice": "one-line-setup",
+      "reason": "On Windows, Node cannot start npm's claude.cmd by name (spawn claude ENOENT, -4058). The direct-PTY spawn now starts the file lib/win-command.js resolves (unchanged on macOS and Linux). The assertion read the old line of server.js literally.",
+      "replacement": "The assertion stays under the same name; it now matches pty.spawn(run.file, [...run.prefix, ...launchArgs], …), which still passes the launch args as an argv.",
+      "pm_approval": null,
+      "names": [
+        "T3: both spawn paths take the launch args — tmux joins plain tokens, the direct PTY passes an argv"
+      ]
     }
   ]
 }

package/workspace/server.js

@@ -1957,6 +1957,7 @@ const autoSync = require('./lib/auto-sync').createAutoSync({
 // workspace starts the board and facts rebuilds when the repository changes, so nothing is re-read on a clock. The board
 // keeps its last value while it rebuilds (stale while revalidate): dropping it would show a blank Board on every change.
 const factsAsync = require('./lib/facts-async.js');
+const winCommand = require('./lib/win-command');
 factsAsync.configure({ stateDir: STATE });
 const freshness = require('./lib/freshness.js').create({
   stateDir: STATE,
@@ -3611,7 +3612,9 @@ function startHeadless(base, workdir, kind, launchArgs, env, initialInput, addDi
   let child;
   // detached: its own process group, so stopping it also stops what it started (an MCP server, a script) and no
   // grandchild keeps the output pipes open after the run is stopped.
-  try { child = spawn(base.agent, args, { cwd: workdir, env, stdio: ['pipe', 'pipe', 'pipe'], detached: true }); }
+  // Windows: `claude` installed by npm is claude.cmd, which spawn() cannot start by name (lib/win-command.js).
+  const run = winCommand.resolve(base.agent, { env });
+  try { child = spawn(run.file, [...run.prefix, ...args], { cwd: workdir, env, stdio: ['pipe', 'pipe', 'pipe'], detached: true }); }
   catch (e) {
     s.state = 'exited'; s.note = spawnFailureAdvice(e, base.agent, false);
     say(`\x1b[38;5;203m✗ ${s.note}\x1b[0m\n`); persist(s); pushSessions(); pushWorkspaces(); return s;
@@ -3862,7 +3865,7 @@ function spawnSessionInner({ name, agent, cwd, ws, origin, initialInput, profile
   let p, usedCmd = cmd;
   try {
     if (isShell) { const r = spawnPty(cmd, workdir, penv); p = r.pty; usedCmd = r.cmd; }
-    else p = pty.spawn(cmd, launchArgs, { name: 'xterm-256color', cols: 80, rows: 24, cwd: workdir, env: penv });
+    else { const run = winCommand.resolve(cmd, { env: penv }); p = pty.spawn(run.file, [...run.prefix, ...launchArgs], { name: 'xterm-256color', cols: 80, rows: 24, cwd: workdir, env: penv }); }
   } catch (e) {
     return exitedSession(base, workdir, spawnFailureAdvice(e, cmd, isShell));
   }

package/workspace/test-lists/one-line-setup.json

@@ -1,5 +1,5 @@
 {
-  "_comment": "one-line-setup: on Windows the background server hides the console window of every command it runs (lib/win-hide.js); `pmos` waits for its own busy server instead of starting a second one (busy-server.test.js).",
-  "modules": ["win-hide.test.js", "busy-server.test.js"],
-  "seconds": { "win-hide.test.js": 1, "busy-server.test.js": 12 }
+  "_comment": "one-line-setup: on Windows the server hides command windows (win-hide), starts npm's claude.cmd (win-command), and `pmos` waits for its own busy server (busy-server) and never registers the home folder (windows-start).",
+  "modules": ["win-hide.test.js", "busy-server.test.js", "windows-start.test.js"],
+  "seconds": { "win-hide.test.js": 1, "busy-server.test.js": 12, "windows-start.test.js": 3 }
 }