create-pmos 0.246.0 → 0.248.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-pmos",
-  "version": "0.246.0",
+  "version": "0.248.0",
   "description": "Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with all state as git-versioned files. Includes `workflow-sweep`, which audits the state every board derives from and separates real defects from work you simply have not done. `create-pmos workspace` also installs + launches the local Terminal Workspace GUI. No database, no network, no telemetry.",
   "license": "MIT",
   "bin": {

package/payload/KIT-VERSION

@@ -1,3 +1,3 @@
-kernel-source: pmos@0e2738a
+kernel-source: pmos@3aea5ef
 assembled: 2026-10-15
 mode: vendor

package/payload/planning/evals/eval-calibration.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Eval calibration log"
 description: "Append-only record of every PM override of an evaluator verdict."
-generated: {by: process:create-pmos, at: "2026-10-15T05:12:16Z"}
+generated: {by: process:create-pmos, at: "2026-10-15T07:57:22Z"}
 status: stable
 ---
 

package/payload/planning/okrs/health-budgets.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Health budgets"
 description: "Closed registry of health-budget anchors (D59), edited only by the PM."
-generated: {by: process:create-pmos, at: "2026-10-15T05:12:16Z"}
+generated: {by: process:create-pmos, at: "2026-10-15T07:57:22Z"}
 status: stable
 ---
 

package/payload/state/discoveries.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Discoveries and friction log"
 description: "Append-only record of what runs discovered and where the process rubbed."
-generated: {by: process:create-pmos, at: "2026-10-15T05:12:16Z"}
+generated: {by: process:create-pmos, at: "2026-10-15T07:57:22Z"}
 status: stable
 ---
 

package/workspace/lib/calendar-cli.js

@@ -1,7 +1,7 @@
 'use strict';
 /* calendar-cli.js — `pmos calendar …`: the calendar events an agent session read, saved for Briefing and Calendar
  * (workspace-data-freshness R8).
- *   pmos calendar import --from <file|-> --sensitivity public|internal|confidential|private [--dry-run] [--json]
+ *   pmos calendar import --from <file|-> --sensitivity public|internal|confidential|private [--window <from>..<to>] [--dry-run] [--json]
  *   pmos calendar status [--json]
  * This command never talks to a calendar. The calendar-sync skill reads it in an agent session, with the PM's own
  * connection, and hands the events to `import`. The import goes through scripts/calendar-import.js unchanged: hidden text
@@ -18,13 +18,14 @@ const L = require(repoScript('trust/ledger.js'));
 const COMMANDS = { calendar: ['import', 'status'] };
 const USAGE = [
   'usage: pmos calendar import|status — the calendar events an agent session read for Briefing and Calendar',
-  '  pmos calendar import --from <file|-> --sensitivity <label> [--dry-run]   save the events (the calendar-sync skill runs this)',
+  '  pmos calendar import --from <file|-> --sensitivity <label> [--window YYYY-MM-DD..YYYY-MM-DD] [--dry-run]   save the events (the calendar-sync skill runs this)',
+  '    --window: the days the events cover. Saved events in those days that are not in the file are removed (moved, declined, cancelled).',
   '  pmos calendar status                                   how many events are saved, and when they were read',
   '  every command: [--json]',
   'This command never calls a calendar. Your agent reads it with your own connection.',
 ];
 const BOOL = new Set(['json', 'dry-run', 'help']);
-const VALUE = new Set(['from', 'sensitivity']);
+const VALUE = new Set(['from', 'sensitivity', 'window']);
 
 function parseArgs(argv) {
   const out = { _: [] };
@@ -69,16 +70,25 @@ async function run(argv, { say = console.log, env = process.env, stateDir, stdin
   try { raw = JSON.parse(readInput(a.from, stdin)); } catch (e) { say(`✗ the events file is not JSON: ${String(e.message).slice(0, 160)}`); return 1; }
   const list = Array.isArray(raw) ? raw : raw && Array.isArray(raw.events) ? raw.events : null;
   if (!list) { say('✗ the file must hold a list of events, or { "events": [ … ] }'); return 1; }
+  let window;
+  if (a.window) {
+    const m = /^(\d{4}-\d{2}-\d{2})\.\.(\d{4}-\d{2}-\d{2})$/.exec(a.window);
+    if (!m) { say('✗ --window must look like 2026-10-15..2026-10-29'); return 2; }
+    window = { from: m[1], to: m[2] };
+    try { CI.checkWindow(window); } catch (e) { say(`✗ ${e.message}`); return 2; }
+  }
   const at = now().toISOString();
   let evs;
   try { evs = CI.importEvents(list, { fetchedAt: at, sensitivity: a.sensitivity }); }
   catch (e) { say(`✗ ${e.message}`); return 1; }
   if (a['dry-run']) { out({ ok: true, dryRun: true, count: evs.length }, `would save ${evs.length} events (dry run, nothing written)`); return 0; }
   const actor = L.actorFrom({ env, isTTY: isTTY == null ? !!(process.stdin.isTTY && process.stdout.isTTY) : isTTY });
-  try { CI.appendImport(file, evs, actor, at); }
+  let lines;
+  try { lines = CI.appendImport(file, evs, actor, at, { window }); }
   catch (e) { say(`✗ the events could not be saved: ${String(e.message).slice(0, 160)}`); return 1; }
+  const removed = lines.length - evs.length;
   const flagged = evs.filter((e) => e.findings && e.findings.length).length;
-  out({ ok: true, count: evs.length, flagged, read_at: at }, `✓ saved ${evs.length} calendar events${flagged ? ` (${flagged} carried hidden or suspicious text, marked)` : ''}`);
+  out({ ok: true, count: evs.length, removed, flagged, read_at: at }, `✓ saved ${evs.length} calendar events${removed ? `, removed ${removed} that the calendar no longer holds in those days` : ''}${flagged ? ` (${flagged} carried hidden or suspicious text, marked)` : ''}`);
   return 0;
 }
 

package/workspace/lib/engine/calendar-import.js

@@ -7,7 +7,7 @@
  *
  *   importEvents(rawEvents, { fetchedAt, sensitivity }) → [event]   pure; a missing or unknown sensitivity is refused
  *   foldEvents(lines)                                   → [event]   current events; the PM's notes survive a refresh
- *   appendImport(file, events, actor, now)              → lines     ledger append (scripts/trust/ledger.js)
+ *   appendImport(file, events, actor, now, {window})    → lines     ledger append (scripts/trust/ledger.js); a window removes the saved events of its days the import no longer holds
  *   appendNote(file, eventId, text, actor, now)         → line      a PM note on one event
  *   readLines(file) · cacheMarkdown(events, dir, now)   the Markdown cache is the PM's trust/import-calendar.js, unchanged
  */
@@ -52,6 +52,7 @@ function foldEvents(lines) {
   const by = new Map();
   for (const l of lines || []) {
     if (!l) continue;
+    if (l.kind === 'calendar_event_removed') { by.delete(l.event_id); continue; }
     if (l.kind === 'calendar_event' && l.event && l.event.id) {
       const prev = by.get(l.event.id);
       by.set(l.event.id, { ...l.event, agent_prep_notes: prev ? prev.agent_prep_notes : l.event.agent_prep_notes || '', pm_notes: prev ? prev.pm_notes : [] });
@@ -64,9 +65,33 @@ function foldEvents(lines) {
 
 const readLines = (file) => L.read(file);
 
-function appendImport(file, events, actor, now) {
+const DAY = /^\d{4}-\d{2}-\d{2}$/;
+/** A window is { from, to }, local days YYYY-MM-DD, from <= to. Throws on anything else. */
+function checkWindow(w) {
+  if (!w || !DAY.test(String(w.from)) || !DAY.test(String(w.to)) || String(w.from) > String(w.to)) throw new Error('window needs from and to as YYYY-MM-DD, from not after to');
+  return { from: String(w.from), to: String(w.to) };
+}
+/** The saved events a windowed import replaces: those that start inside the window (the day written in their `at`) and are not in the import. Pure. */
+function supersededIds(saved, imported, window) {
+  const w = checkWindow(window);
+  const keep = new Set((imported || []).map((e) => e.id));
+  return (saved || []).filter((e) => { const d = String(e.at || '').slice(0, 10); return d >= w.from && d <= w.to && !keep.has(e.id); }).map((e) => e.id);
+}
+
+// opts.window: the days this import covers. Saved events in those days that the import does not hold are removed (calendar_event_removed),
+// so a rescheduled, declined or cancelled meeting leaves the ledger. The ledger itself stays append only.
+function appendImport(file, events, actor, now, opts = {}) {
+  let gone = [];
+  if (opts.window) {
+    const w = checkWindow(opts.window);
+    if (!events.length) throw new Error('a window import needs at least one event: an empty read is not a calendar with no meetings');
+    gone = supersededIds(foldEvents(readLines(file)), events, w);
+  }
   fs.mkdirSync(path.dirname(file), { recursive: true });
-  return events.map((event) => L.append(file, { id: L.newId(), kind: 'calendar_event', why: 'calendar import (reported, untrusted)', at: now || new Date().toISOString(), event }, actor));
+  const at = now || new Date().toISOString();
+  const lines = events.map((event) => L.append(file, { id: L.newId(), kind: 'calendar_event', why: 'calendar import (reported, untrusted)', at, event }, actor));
+  for (const event_id of gone) lines.push(L.append(file, { id: L.newId(), kind: 'calendar_event_removed', why: 'not in the import for its days (rescheduled, declined or cancelled)', at, event_id }, actor));
+  return lines;
 }
 
 function appendNote(file, eventId, text, actor, now) {
@@ -81,4 +106,4 @@ function cacheMarkdown(events, dir, now) {
   return sampleCache.importEvents(events.map((e) => ({ id: e.id, title: e.title, start: e.at, end: e.end || e.at, attendees: e.attendees, initiative: e.initiative })), dir, now);
 }
 
-module.exports = { SENSITIVITY, importEvents, foldEvents, appendImport, appendNote, readLines, cacheMarkdown };
+module.exports = { SENSITIVITY, importEvents, foldEvents, appendImport, supersededIds, checkWindow, appendNote, readLines, cacheMarkdown };

package/workspace/lib/find-browser.js

@@ -26,13 +26,21 @@ const path = require('path');
 // matching (which is the same skip-looks-like-pass failure, arriving later).
 function playwrightCandidates() {
   const roots = [process.env.PLAYWRIGHT_BROWSERS_PATH, '/opt/pw-browsers',
-    path.join(process.env.HOME || '', '.cache', 'ms-playwright')].filter(Boolean);
+    path.join(process.env.HOME || '', '.cache', 'ms-playwright'),
+    path.join(process.env.HOME || '', 'Library', 'Caches', 'ms-playwright')].filter(Boolean);
   const out = [];
   for (const root of roots) {
     let entries = [];
     try { entries = fs.readdirSync(root); } catch { continue; }
     for (const dir of entries.sort().reverse()) {          // newest version first
       if (!/^chromium/.test(dir)) continue;
+      // On a Mac or Windows PC a full Chromium shows in the Dock or taskbar, so a headless shell goes first there. Linux
+      // keeps its order: CI runs the browser suites on the browser it always picked.
+      if (process.platform !== 'linux') out.push(
+        path.join(root, dir, 'chrome-headless-shell-mac-arm64', 'chrome-headless-shell'),
+        path.join(root, dir, 'chrome-headless-shell-mac-x64', 'chrome-headless-shell'),
+        path.join(root, dir, 'chrome-headless-shell-win64', 'chrome-headless-shell.exe'),
+      );
       out.push(
         path.join(root, dir, 'chrome-linux', 'chrome'),
         path.join(root, dir, 'chrome-linux', 'headless_shell'),
@@ -44,15 +52,22 @@ function playwrightCandidates() {
   return out;
 }
 
+/* THE PM'S OWN CHROME IS NOT A TEST BROWSER. A suite that launches /Applications/Google Chrome.app opens a second Chrome
+ * that shows in the Dock and the taskbar for a few seconds, so a parallel run makes Chrome icons flicker on the PM's screen
+ * (and they cannot be opened). Only a headless browser is picked unless PMOS_CHROME / PMOS_CHROMIUM names one, or
+ * PMOS_ALLOW_SYSTEM_CHROME=1 says the visible app is fine (initiative chrome-dock-flicker). */
 function findBrowser() {
+  const visible = process.env.PMOS_ALLOW_SYSTEM_CHROME === '1' ? [
+    '/Applications/Google Chrome.app/Contents/MacOS/Google Chrome',
+    '/Applications/Chromium.app/Contents/MacOS/Chromium',
+    'C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe',
+  ] : [];
   const cands = [
     process.env.PMOS_CHROME,
     process.env.PMOS_CHROMIUM,
     ...playwrightCandidates(),
-    '/Applications/Google Chrome.app/Contents/MacOS/Google Chrome',
-    '/Applications/Chromium.app/Contents/MacOS/Chromium',
     '/usr/bin/google-chrome', '/usr/bin/chromium', '/usr/bin/chromium-browser',
-    'C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe',
+    ...visible,
   ].filter(Boolean);
   return cands.find((c) => { try { fs.accessSync(c, fs.constants.X_OK); return true; } catch { return false; } });
 }

package/workspace/lib/routes-calendar-import.js

@@ -2,7 +2,8 @@
 /* routes-calendar-import.js — cached calendar events, supplied by a session (console3 wave E2a).
  *
  *   GET  /api/calendar-import/events → { ok, events }           the folded cache
- *   POST /api/calendar-import/events { events, sensitivity }    → { ok, count }   page press; sensitivity is required
+ *   POST /api/calendar-import/events { events, sensitivity, window? } → { ok, count, removed }   page press; sensitivity is required;
+ *                                      window { from, to } (local days) removes the saved events of those days the import does not hold
  *   POST /api/calendar-import/note   { event_id, text }         → { ok }          the PM's note on an event
  *
  * Nothing here fetches a calendar: PMOS holds no credentials. Events come in the body. Imports are untrusted data
@@ -28,9 +29,11 @@ function importRoute(req, body, runtimeDir, now = new Date()) {
   let evs;
   try { evs = CI.importEvents(body.events, { fetchedAt: now.toISOString(), sensitivity: body.sensitivity }); }
   catch (e) { return fail(400, e.message); }
-  try { CI.appendImport(fileOf(runtimeDir), evs, L.actorFrom({ ui: true }), now.toISOString()); }
+  let removed = 0;
+  if (body.window) { try { CI.checkWindow(body.window); } catch (e) { return fail(400, e.message); } if (!evs.length) return fail(400, 'a window import needs at least one event'); }
+  try { removed = CI.appendImport(fileOf(runtimeDir), evs, L.actorFrom({ ui: true }), now.toISOString(), { window: body.window }).length - evs.length; }
   catch (e) { return fail(500, e.message); }
-  return { status: 200, body: { ok: true, count: evs.length } };
+  return { status: 200, body: { ok: true, count: evs.length, removed } };
 }
 
 function noteRoute(req, body, runtimeDir, now = new Date()) {

package/workspace/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "pmos-workspace",
-  "version": "0.246.0",
+  "version": "0.248.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "pmos-workspace",
-      "version": "0.246.0",
+      "version": "0.248.0",
       "license": "MIT",
       "dependencies": {
         "@xterm/addon-fit": "^0.11.0",

package/workspace/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pmos-workspace",
-  "version": "0.246.0",
+  "version": "0.248.0",
   "private": true,
   "description": "PMOS Terminal Workspace — local companion hosting real PTYs beside the library and gates (D62)",
   "license": "MIT",

package/workspace/skills/calendar-sync.skill

@@ -24,8 +24,8 @@ Procedure:
 1. List the PM's events from the start of today to the end of the 14th day after today, from the primary calendar. Fetch every page. Skip an event the PM declined.
 2. Write the events as JSON in the scratch folder, for example `<scratch>/calendar.json`, as a list with one object per event:
    `{"id", "title", "start", "end", "attendees": ["Display Name", …], "initiative": "<initiative id or null>"}`
-   `id` is the calendar's own id for that event (for a repeating meeting, the id of that one occurrence). Use the same id on every run, never a made-up one: PMOS keeps one copy per id.
+   `id` is the calendar's own id for that event (for a repeating meeting, the id of that one occurrence). Use the same id on every run, never a made-up one: PMOS keeps one copy per id. If an id changes anyway, the window import removes the old copy.
    `start` and `end` are ISO times with the offset, for example `2026-10-12T09:00:00+07:00`. An all-day event has the date only.
-3. Run `pmos calendar import --from <scratch>/calendar.json --sensitivity internal`. If it refuses the file, fix what it names and run it once more.
+3. Run `pmos calendar import --from <scratch>/calendar.json --sensitivity internal --window <today>..<day 14>`, with both days as `YYYY-MM-DD`. The window makes PMOS drop a saved event in those days that is not in the file, so a meeting that moved, was declined or was cancelled leaves its old slot. If it refuses the file, fix what it names and run it once more.
 4. Delete the scratch file.
 5. Report in four short lists: Imported (the count, and the first and last day), Left out (the count of private events), Not reached, and Needs you (only when something blocked the pull).

package/workspace/test-files.json

@@ -8,6 +8,7 @@
     "test.js"
   ],
   "modules": [
+    "find-browser.test.js",
     "own-profile.test.js",
     "stage-tools.test.js",
     "report-template-cadence.test.js",
@@ -35,6 +36,7 @@
     "work-assigned.test.js",
     "briefing-real-data.test.js",
     "calendar-events.test.js",
+    "calendar-supersede.test.js",
     "tracker-read.test.js",
     "item-steps.test.js",
     "status-facts-panel.test.js",
@@ -186,6 +188,7 @@
     "work-assigned.test.js": 1,
     "briefing-real-data.test.js": 1,
     "calendar-events.test.js": 1,
+    "calendar-supersede.test.js": 1,
     "tracker-read.test.js": 1,
     "pm-brief-page-test.js": 30,
     "item-steps.test.js": 1,