create-pmos 0.240.0 → 0.241.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-pmos",
-  "version": "0.240.0",
+  "version": "0.241.0",
   "description": "Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with all state as git-versioned files. Includes `workflow-sweep`, which audits the state every board derives from and separates real defects from work you simply have not done. `create-pmos workspace` also installs + launches the local Terminal Workspace GUI. No database, no network, no telemetry.",
   "license": "MIT",
   "bin": {

package/payload/KIT-VERSION

@@ -1,3 +1,3 @@
-kernel-source: pmos@c7f4eb5
+kernel-source: pmos@05129df
 assembled: 2026-10-14
 mode: vendor

package/payload/planning/evals/eval-calibration.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Eval calibration log"
 description: "Append-only record of every PM override of an evaluator verdict."
-generated: {by: process:create-pmos, at: "2026-10-14T12:42:25Z"}
+generated: {by: process:create-pmos, at: "2026-10-14T14:33:36Z"}
 status: stable
 ---
 

package/payload/planning/okrs/health-budgets.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Health budgets"
 description: "Closed registry of health-budget anchors (D59), edited only by the PM."
-generated: {by: process:create-pmos, at: "2026-10-14T12:42:25Z"}
+generated: {by: process:create-pmos, at: "2026-10-14T14:33:36Z"}
 status: stable
 ---
 

package/payload/state/discoveries.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Discoveries and friction log"
 description: "Append-only record of what runs discovered and where the process rubbed."
-generated: {by: process:create-pmos, at: "2026-10-14T12:42:25Z"}
+generated: {by: process:create-pmos, at: "2026-10-14T14:33:36Z"}
 status: stable
 ---
 

package/workspace/c3-report-structure-real-test.js

@@ -0,0 +1,211 @@
+#!/usr/bin/env node
+'use strict';
+/* c3-report-structure-real-test.js — the Structure step of the report studio against the REAL backend (initiative report-structure, PRD done-criterion 10).
+ * Not demo mode and no route interception: a real server on a scratch repository, with a stub `claude` that plays the report-structure and
+ * report-structure-dry jobs (as report-structure-server.test.js does) and a stub for the source check (PMOS_REPORT_CHECK_STUB), and a real
+ * Chromium on /c3.html. It proves the page and the server agree on the API contract end to end.
+ *
+ *   setup     a work-sourced report set up through the API
+ *   turn      the Structure step opens from the set-up row (Shape the report); a purpose and one turn land S1 with sources, charts and outline;
+ *             a second turn lands S2; the strip lists both; going back to S1 works
+ *   dry       Try it with real data shows the headline and the values
+ *   source    a Chrome source is added with the check stubbed to pass: the check view shows its steps
+ *   accept    Use this structure: the setup sheet shows the saved structure, brief.md is on disk, charts.jsonl holds the new charts
+ *   charts    the Charts tab lists a data chart with its source and Used in naming the report
+ * No page error and no failed request may be raised. Synthetic repositories only; the stub is the only "model"; nothing reaches the network. */
+const fs = require('fs');
+const path = require('path');
+const { spawn } = require('child_process');
+const { findBrowser } = require('./lib/find-browser');
+const T = require('./test-run').configure({ name: 'c3-report-structure-real' });
+const { makeRepos, codeRepo, write, git } = require('./plan-test-repos');
+const RS = require('./lib/report-setups.js');
+const S = require('./lib/report-structure.js');
+const CS = require('./lib/charts-store.js');
+
+const BASE = T.BASE;
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+const until = async (fn, ms = 15000, step = 150) => { const t0 = Date.now(); for (;;) { let v; try { v = await fn(); } catch { v = null; } if (v) return v; if (Date.now() - t0 > ms) return v; await sleep(step); } };
+const results = [];
+const ok = (name, cond, extra = '') => { results.push({ name, cond: !!cond }); console.log(`${cond ? '✓' : '✗'} ${name}${!cond && extra !== '' ? ' — ' + String(extra).slice(0, 600) : ''}`); };
+
+/* ── the scratch repository, the stub `claude` and the check stub ── */
+const R = makeRepos('c3-report-structure-real');
+const team = codeRepo(path.join(R.base, 'team'));
+fs.mkdirSync(path.join(team, 'pmos', 'state'), { recursive: true });
+write(team, 'pmos/state/.keep', '');
+git(team, ['add', '-A']); git(team, ['commit', '-q', '-m', 'state']);
+const fakeBin = path.join(R.base, 'bin'); fs.mkdirSync(fakeBin, { recursive: true });
+const fakeHome = path.join(R.base, 'home'); fs.mkdirSync(path.join(fakeHome, '.claude'), { recursive: true });
+const stubFile = path.join(R.base, 'check-stub.json');
+fs.writeFileSync(stubFile, JSON.stringify({ default: 'pass' }));
+/* The stub plays the structure runs: it reads the job block, writes the plan (or the dry result) to the output path and prints the JSON result.
+ * The first turn builds the plan with its questions; a turn with "refine" in it adds the retention chart; a later turn builds on the previous file. */
+fs.writeFileSync(path.join(fakeBin, 'claude'), `#!/usr/bin/env node
+const fs = require('fs');
+let input = ''; process.stdin.on('data', (d) => { input += d; }); process.stdin.on('end', () => {
+  const line = (k) => { const m = new RegExp('^- ' + k + ': (.*)$', 'm').exec(input); return m ? m[1].trim() : null; };
+  const mode = line('Mode'); const out = line('Output path'); const turn = line('Turn') || '';
+  const done = (o) => { process.stdout.write(JSON.stringify({ type: 'result', subtype: 'success', is_error: false, result: typeof o === 'string' ? o : JSON.stringify(o), num_turns: 2, duration_ms: 500, permission_denials: [] })); process.exit(0); };
+  if (!mode || !out) return done('Drafted.');
+  const base = () => ({
+    purpose: { readers: 'Leadership', decision: 'Where to invest next quarter', scope: 'The app', cadence: 'monthly', questions: ['Are we growing?'] },
+    sources: [{ id: 'ga', kind: 'connector', name: 'Google Analytics', via: 'Supermetrics', ref: '', use: 'Users and events', state: 'reached' }, { id: 'board', kind: 'pmos-level', name: 'Board: MySPH', ref: 'mysph', use: 'Releases', state: 'reached' }],
+    charts: [{ id: 'users', chart: null, name: 'New users', source: 'ga', from: 'GA4 newUsers', how: 'Month total', compare: 'Previous month', flag: 'Down 10%', question: 'Are we growing?', query: 'newUsers', why: 'Top of funnel' },
+      { id: 'releases', chart: null, name: 'Releases', source: 'board', from: 'PMOS releases', how: 'Count in the month', compare: '', flag: '', question: 'What changed?', query: '', why: '' }],
+    outline: [{ id: 'headline', title: 'Headline', fixed: true, charts: [], notes: '', show: 'Text' }, { id: 'funnel', title: 'The funnel', charts: ['users'], notes: '', show: 'Chart' },
+      { id: 'changes', title: 'What changed', charts: ['releases'], notes: '', show: 'List' }, { id: 'needs', title: 'Needs your call', fixed: true, charts: [], notes: '', show: 'List' }, { id: 'sources', title: 'Sources', fixed: true, charts: [], notes: '', show: 'List' }],
+    options: [{ name: 'Funnel first', sections: ['The funnel'], good: 'Shows drops', misses: 'Revenue', recommended: true }, { name: 'By channel', sections: ['Channels'], good: 'Spend', misses: 'Retention' }, { name: 'By release', sections: ['Releases'], good: 'Cause', misses: 'Money' }],
+  });
+  if (mode === 'dry') {
+    const m = /Version to try: S(\\d+) \\((.*)\\)/.exec(input);
+    const plan = JSON.parse(fs.readFileSync(m[2], 'utf8'));
+    fs.writeFileSync(out, JSON.stringify({ n: Number(m[1]), period: '2026-09', headline: 'New users fell 9%.', values: plan.charts.slice(0, 1).map((c) => ({ chart: c.id, value: '48,210', was: '52,930', delta: '-8.9%', flag: true, note: 'Paid paused' })),
+      missing: plan.sources.filter((s) => s.kind === 'chrome').map((s) => ({ source: s.id, reason: 'Needs Chrome' })), options: ['Fund retention'] }));
+    return done({ ok: true, note: '1 chart returned a value' });
+  }
+  const prev = line('Previous version');
+  const plan = prev && prev.startsWith('/') ? JSON.parse(fs.readFileSync(prev, 'utf8')) : base();
+  if (/refine/.test(turn)) {
+    plan.charts.push({ id: 'ret', chart: null, name: 'D30 retention', source: 'ga', from: 'GA4 cohorts', how: 'Share active on day 30', compare: 'Last 3 cohorts', flag: 'Below 25%', question: 'Do they stay?', query: 'cohortActiveUsers', why: 'You asked' });
+    plan.outline.find((o) => o.id === 'funnel').charts.push('ret');
+  }
+  fs.writeFileSync(out, JSON.stringify(plan));
+  const res = { answer: /refine/.test(turn) ? 'S2: D30 retention added.' : 'Built the first version from your answers.' };
+  if (!prev || !prev.startsWith('/')) { res.questions = [{ q: 'Who reads it?', chips: ['Leadership', 'Product team', 'Both'] }]; res.options = plan.options; }
+  setTimeout(() => done(res), 1500);
+});
+`, { mode: 0o755 });
+
+let srv = null; let browser = null;
+const finish = async (code) => {
+  if (browser) await browser.close().catch(() => {});
+  if (srv) { try { srv.kill('SIGKILL'); } catch { /* gone */ } }
+  T.killTmux();
+  R.cleanup();
+  const bad = results.filter((x) => !x.cond).length;
+  console.log(`\n${results.length - bad}/${results.length} c3-report-structure-real assertions passed`);
+  process.exit(code !== undefined ? code : (bad ? 1 : 0));
+};
+process.on('unhandledRejection', (e) => { console.error(e); finish(1); });
+
+(async () => {
+  const exe = findBrowser();
+  if (!exe) { console.log('✗ no Chrome/Chromium on this machine, c3-report-structure-real cannot run'); return finish(1); }
+  let chromium;
+  try { ({ chromium } = require('playwright-core')); } catch { console.log('✗ playwright-core is not installed, c3-report-structure-real cannot run'); return finish(1); }
+
+  srv = spawn(process.execPath, [path.join(__dirname, 'server.js')], { cwd: __dirname, stdio: 'ignore',
+    env: T.env({ PMOS_WS_PORT: String(T.PORT), PMOS_SELF_ROOT: team, PMOS_NO_OPEN: '1', PMOS_TICK_MS: '300', PMOS_REPORT_FIND: 'off', PMOS_CORE_DOCS: 'off', HOME: fakeHome,
+      PMOS_REPORT_CHECK_STUB: stubFile, PMOS_REPORT_CHECK_STUB_MS: '120', PMOS_REPORT_CHECK_PLATFORM: 'darwin', PATH: fakeBin + path.delimiter + process.env.PATH }) });
+  await T.waitForServer(BASE);
+  const press = await T.pressHeaders(BASE);
+  const call = async (method, p, body) => { const r = await fetch(BASE + p, { method, headers: method === 'POST' ? press : {}, body: body === undefined ? undefined : JSON.stringify(body) }); const t = await r.text(); let j = null; try { j = JSON.parse(t); } catch { /* not JSON */ } return { status: r.status, body: j, raw: t }; };
+
+  /* ── setup: a work-sourced report, through the API ── */
+  const ws = (await call('POST', '/api/workspaces', { root: team, focus: true })).body.workspace.id;
+  const proposal = { name: 'MySPH app performance', purpose: 'Monthly product performance for leadership.', audience: 'Leadership', source: 'work', output: 'google-slides',
+    schedule: { cadence: 'monthly', dayOfMonth: 3, time: '09:00' }, sources: ['The local ledgers'], sections: RS.FRAME.slice(), learned_from: 'The June copy.', fixes: [] };
+  const made = await call('POST', '/api/report-setups/setup', { ws, proposal });
+  const id = made.body && made.body.setup && made.body.setup.id;
+  ok('setup: a work-sourced report is set up through the API', !!ws && !!id, made.raw);
+  if (!id) return finish(1);
+  const P = S.paths(team, id);
+
+  browser = await chromium.launch({ executablePath: exe });
+  const ctx = await browser.newContext({ viewport: { width: 1440, height: 1000 } });
+  const page = await ctx.newPage();
+  const errors = [];
+  page.on('pageerror', (e) => errors.push('pageerror: ' + String((e && e.message) || e)));
+  page.on('requestfailed', (r) => { const f = r.failure(); if (!/ERR_ABORTED/.test((f && f.errorText) || '')) errors.push('failed ' + r.url() + ' ' + ((f && f.errorText) || '')); });
+  page.on('response', (r) => { if (r.status() >= 400) errors.push('http ' + r.status() + ' ' + r.request().method() + ' ' + r.url()); });
+  page.on('dialog', (d) => d.dismiss().catch(() => {}));
+  const text = (sel) => page.textContent(sel).catch(() => '');
+  const idle = () => page.waitForFunction(() => { const b = document.querySelector('[data-st-act="send"]'); return b && !b.disabled && !document.querySelector('[data-st-running]'); }, null, { timeout: 20000 });
+  const verOn = async (n) => await page.getAttribute('[data-st-v="' + n + '"]', 'aria-pressed') === 'true';
+  const goReports = async () => { await page.goto(BASE + '/c3.html?tab=rep'); await page.waitForSelector('[data-rp3]'); await page.click('[data-rp3-tab="reports"]'); await page.waitForSelector('[data-rs-reg="' + id + '"]', { timeout: 15000 }); };
+
+  /* ── the Structure step from the set-up row ── */
+  await goReports();
+  ok('the set-up row has Shape the report', !!(await page.$('[data-rs-reg="' + id + '"] [data-rs-act="shape"]')));
+  await page.click('[data-rs-reg="' + id + '"] [data-rs-act="shape"]');
+  await page.waitForSelector('[data-st-studio]');
+  ok('the Structure step opens with nothing saved yet and the Use button waiting', /Not saved yet/.test(await text('[data-st-studio]')) && await page.$eval('[data-st-act="save"]', (b) => b.disabled));
+
+  /* ── a purpose and the first turn: S1 ── */
+  await page.fill('[data-st-in]', 'Monthly product performance for leadership, numbers from Google Analytics.');
+  await page.click('[data-st-act="send"]');
+  ok('while the job runs the conversation says PMOS is working', !!(await until(() => page.$('[data-st-running]'), 8000)));
+  await page.waitForSelector('[data-st-v="1"]', { timeout: 30000 });
+  ok('the turn lands S1 as the current version', await verOn(1));
+  await page.waitForSelector('[data-st-purpose]');
+  ok('the plan shows what it answers', /Where to invest next quarter/.test(await text('[data-st-purpose]')) && /Are we growing/.test(await text('[data-st-purpose]')));
+  ok('the plan lists the sources, the charts and the outline', (await page.$$('[data-st-src]')).length === 2 && !!(await page.$('[data-st-chart="users"]')) && !!(await page.$('[data-st-chart="releases"]'))
+    && JSON.stringify(await page.$$eval('[data-st-section]', (a) => a.map((x) => x.getAttribute('data-st-section')))) === '["headline","funnel","changes","needs","sources"]');
+  ok('PMOS asks its question with answer chips', (await page.$$('[data-st-question] [data-st-act="chip"]')).length === 3);
+  await idle();
+
+  /* ── a second turn: S2; the strip; back to S1 ── */
+  await page.fill('[data-st-in]', 'Please refine: add D30 retention.');
+  await page.click('[data-st-act="send"]');
+  await page.waitForSelector('[data-st-v="2"]', { timeout: 30000 });
+  ok('the second turn lands S2 and the strip lists both', (await page.$$('[data-st-v]')).length === 2 && await verOn(2));
+  await page.waitForSelector('[data-st-chart="ret"]');
+  ok('S2 has the retention chart', !!(await page.$('[data-st-chart="ret"]')));
+  await idle();
+  await page.click('[data-st-v="1"]');
+  ok('S1 shows again without the retention chart', !!(await until(async () => await verOn(1) && !(await page.$('[data-st-chart="ret"]')))));
+  await page.click('[data-st-act="revert"]');
+  ok('Go back to S1 makes S1 current on the server', !!(await until(async () => (await call('GET', `/api/report-structure?ws=${ws}&id=${id}`)).body.structure.current === 1)));
+  await until(async () => !(await page.$('[data-st-act="revert"]')));
+
+  /* ── a Chrome source, the check stubbed to pass ── */
+  await page.click('[data-st-act="panel"][aria-expanded]');
+  await page.waitForSelector('[data-st-panel]');
+  await page.click('[data-st-panel] [data-st-act="opt"][data-v="chrome"]');
+  await page.waitForSelector('[data-st-form="chrome"]');
+  await page.fill('[data-st-form="chrome"] [data-st-field="name"]', 'Looker Studio: Paid acquisition');
+  await page.fill('[data-st-form="chrome"] [data-st-field="ref"]', 'https://lookerstudio.google.com/reporting/abc');
+  await page.fill('[data-st-form="chrome"] [data-st-field="use"]', 'Spend by campaign').catch(() => {});
+  await page.click('[data-st-form="chrome"] [data-st-act="add"]');
+  await page.waitForSelector('[data-st-v="3"]', { timeout: 15000 });
+  await page.waitForSelector('[data-st-check]', { timeout: 15000 });
+  ok('the Chrome source makes S3 and the check view shows its five steps', (await page.$$('[data-st-check] [data-st-step]')).length === 5, await text('[data-st-check]'));
+  ok('the check ends with every step Works and the source Reached', !!(await until(async () => /All steps work/.test(await text('[data-st-check-state]')) && (await page.$$eval('[data-st-check] [data-st-step-state="works"]', (a) => a.length)) === 5, 20000))
+    && !!(await until(async () => /Reached/.test(await text('[data-st-src="looker-studio-paid-acquisition"] [data-st-state]')))));
+
+  /* ── Try it with real data ── */
+  await page.click('[data-st-view="dry"]');
+  await page.waitForSelector('[data-st-nodry]');
+  await page.click('[data-st-act="dryrun"]');
+  await page.waitForSelector('[data-st-dry-headline]', { timeout: 30000 });
+  ok('the dry-run view shows the headline', /New users fell 9%/.test(await text('[data-st-dry-headline]')));
+  ok('the dry-run view shows the values with their comparison', /48,210/.test(await text('[data-st-dry-values]')) && /52,930/.test(await text('[data-st-dry-values]')) && /Flagged/.test(await text('[data-st-dry-values]')));
+  ok('what it could not get names the Chrome source', /Looker Studio/.test(await text('[data-st-dry-missing]')) && /Needs Chrome/.test(await text('[data-st-dry-missing]')));
+  await page.click('[data-st-view="plan"]');
+
+  /* ── Use this structure ── */
+  await idle();
+  await page.click('[data-st-act="save"]');
+  await page.waitForSelector('[data-rd-brief]', { timeout: 15000 });
+  await page.waitForSelector('[data-st-saved-wrap]');
+  ok('the setup sheet shows the saved structure', /Structure S3/.test(await text('[data-st-saved-tag]')) && /Where to invest next quarter/.test(await text('[data-st-answers]')) && /New users/.test(await text('[data-st-brief]')) && /Looker Studio/.test(await text('[data-st-brief]')));
+  ok('brief.md exists on disk', fs.existsSync(P.brief) && /type: Reference/.test(fs.readFileSync(P.brief, 'utf8')));
+  const lines = CS.readEvents(team);
+  ok('charts.jsonl has the new charts (New users, Releases)', lines.length === 2 && lines.every((l) => l.ev === 'add') && lines.map((l) => l.chart.name).sort().join() === 'New users,Releases', JSON.stringify(lines));
+  const saved = (await call('GET', `/api/report-structure?ws=${ws}&id=${id}`)).body;
+  ok('the server holds S3 as saved', saved.structure.saved === 3 && saved.structure.current === 3);
+  await page.keyboard.press('Escape'); await sleep(250);
+
+  /* ── the Charts tab ── */
+  await goReports();
+  await page.click('[data-rp3-tab="charts"]');
+  const newUsersId = (lines.find((l) => l.chart.name === 'New users') || {}).id;
+  await page.waitForSelector('[data-rp3-data-chart="' + newUsersId + '"]', { timeout: 15000 });
+  ok('the Charts tab lists a data chart beside the built-in ones', !!(await page.$('[data-rp3-lib] [data-home="north"]')) && /Data chart/.test(await text('[data-rp3-data-chart="' + newUsersId + '"]')));
+  ok('the data chart shows its source and Used in naming the report', /Google Analytics/.test(await text('[data-rp3-source="' + newUsersId + '"]')) && /Used in: .*MySPH app performance/.test(await text('[data-rp3-data-chart="' + newUsersId + '"] [data-rp3-used]')), await text('[data-rp3-data-chart="' + newUsersId + '"]'));
+
+  await sleep(400);
+  ok('no page error and no failed request', errors.length === 0, errors.slice(0, 6).join(' | '));
+  return finish();
+})().catch((e) => { console.error(e); finish(1); });