create-pmos 0.38.1 → 0.38.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-pmos",
-  "version": "0.38.1",
+  "version": "0.38.3",
   "description": "Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with all state as git-versioned files. Includes `workflow-sweep`, which audits the state every board derives from and separates real defects from work you simply have not done. `create-pmos workspace` also installs + launches the local Terminal Workspace GUI. No database, no network, no telemetry.",
   "license": "MIT",
   "bin": {

package/payload/KIT-VERSION

@@ -1,3 +1,3 @@
-kernel-source: pmos@d1d47bf
+kernel-source: pmos@58c817d
 assembled: 2026-10-02
 mode: vendor

package/payload/planning/evals/eval-calibration.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Eval calibration log"
 description: "Append-only record of every PM override of an evaluator verdict."
-generated: {by: process:create-pmos, at: "2026-10-02T01:57:56Z"}
+generated: {by: process:create-pmos, at: "2026-10-02T06:19:09Z"}
 status: stable
 ---
 

package/payload/planning/okrs/health-budgets.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Health budgets"
 description: "Closed registry of health-budget anchors (D59), edited only by the PM."
-generated: {by: process:create-pmos, at: "2026-10-02T01:57:56Z"}
+generated: {by: process:create-pmos, at: "2026-10-02T06:19:09Z"}
 status: stable
 ---
 

package/payload/scripts/workflow-state.js

@@ -543,6 +543,12 @@ function profileOf(root) {
   } catch { return 'product-code'; }
 }
 
+/** The lanes a repository's initiatives may declare — what the lane picker offers and the lane write accepts. */
+function lanesFor(root) {
+  const profile = profileOf(path.resolve(root || process.cwd()));
+  return { profile, lanes: profile === 'pm-artifacts' ? PM_LANES.slice() : ['feature', 'discovery', 'chore', 'incident', 'content', 'prototype'] };
+}
+
 // ── Step model ─────────────────────────────────────────────────────────────────────────────────
 // status ∈ done | current | blocked | pending | na | unknown
 // `blocking` marks a step whose failure fails CI. O5/O6/O7 are deliberately NOT blocking: none can
@@ -1499,6 +1505,7 @@ module.exports = {
   // under BOTH ranges, and `in this change` is false under the trunk one.
   historyRange,
   ENFORCED_FROM,
+  lanesFor,
 };
 
 /*

package/payload/state/discoveries.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Discoveries and friction log"
 description: "Append-only record of what runs discovered and where the process rubbed."
-generated: {by: process:create-pmos, at: "2026-10-02T01:57:56Z"}
+generated: {by: process:create-pmos, at: "2026-10-02T06:19:09Z"}
 status: stable
 ---
 

package/workspace/lib/engine/workflow-state.js

@@ -543,6 +543,12 @@ function profileOf(root) {
   } catch { return 'product-code'; }
 }
 
+/** The lanes a repository's initiatives may declare — what the lane picker offers and the lane write accepts. */
+function lanesFor(root) {
+  const profile = profileOf(path.resolve(root || process.cwd()));
+  return { profile, lanes: profile === 'pm-artifacts' ? PM_LANES.slice() : ['feature', 'discovery', 'chore', 'incident', 'content', 'prototype'] };
+}
+
 // ── Step model ─────────────────────────────────────────────────────────────────────────────────
 // status ∈ done | current | blocked | pending | na | unknown
 // `blocking` marks a step whose failure fails CI. O5/O6/O7 are deliberately NOT blocking: none can
@@ -1499,6 +1505,7 @@ module.exports = {
   // under BOTH ranges, and `in this change` is false under the trunk one.
   historyRange,
   ENFORCED_FROM,
+  lanesFor,
 };
 
 /*

package/workspace/lib/git-info.js

@@ -123,14 +123,30 @@ function worktreePath(root, branch) {
   return path.join(path.dirname(top), path.basename(top) + '-worktrees', branch.replace(/\//g, '-'));
 }
 
+// The start point of a NEW branch: an existing branch name or a commit id, nothing else. A name that
+// passes validBranchName cannot begin with `-`, so it cannot be read by git as an option; it must
+// also resolve to a commit, so a typo is refused here with a reason and not by git's own message.
+// No base means "where this tree is now" — git's default.
+function baseRef(root, from) {
+  if (from === null || from === undefined || from === '') return { ok: true, ref: null };
+  const ref = String(from);
+  if (!validBranchName(ref) && !/^[0-9a-f]{7,40}$/i.test(ref)) return { ok: false, error: 'invalid base' };
+  const r = git(root, ['rev-parse', '--verify', '--quiet', ref + '^{commit}']);
+  if (r.failed) return { ok: false, error: 'git not available' };
+  if (r.code !== 0) return { ok: false, error: `base '${ref}' does not exist` };
+  return { ok: true, ref };
+}
+
 // Check out an existing branch, or create one with -b. THIS MOVES THE WHOLE REPO — every session
 // in every workspace under it. Confined to `root` by cwd; the name is validated first so nothing
 // malformed reaches git. On any failure returns { ok:false, error } and leaves the caller to NOT
 // spawn a session on the wrong branch (a failed checkout must never spawn).
-function checkout(root, branch, { create = false } = {}) {
+function checkout(root, branch, { create = false, from = null } = {}) {
   if (!isRepo(root)) return { ok: false, error: 'not a git repository' };
   if (!validBranchName(branch)) return { ok: false, error: 'invalid branch name' };
-  const args = create ? ['checkout', '-b', branch, '--'] : ['checkout', branch, '--'];
+  const base = baseRef(root, from);
+  if (!base.ok) return base;
+  const args = create ? ['checkout', '-b', branch, ...(base.ref ? [base.ref] : []), '--'] : ['checkout', branch, '--'];
   const r = git(root, args);
   if (r.failed) return { ok: false, error: 'git not available' };
   if (r.code !== 0) return { ok: false, error: (r.err || r.out || 'checkout failed').split('\n')[0].slice(0, 200) };
@@ -142,10 +158,12 @@ function checkout(root, branch, { create = false } = {}) {
 // session stays untouched. `create` makes the branch (`-b`); otherwise the branch must exist and
 // must not already be checked out somewhere else (git refuses — we return that plainly).
 // Returns { ok, dir, branch, reused } or { ok:false, error }.
-function addWorktree(root, branch, { create = false } = {}) {
+function addWorktree(root, branch, { create = false, from = null } = {}) {
   const top = repoRoot(root);
   if (!top) return { ok: false, error: 'not a git repository' };
   if (!validBranchName(branch)) return { ok: false, error: 'invalid branch name' };
+  const base = baseRef(top, from);
+  if (!base.ok) return base;
 
   // Already checked out somewhere? Say where, rather than letting git's message be the first the
   // PM sees — and if it is exactly the worktree we would have made, reuse it instead of failing.
@@ -161,7 +179,7 @@ function addWorktree(root, branch, { create = false } = {}) {
   try { fs.mkdirSync(path.dirname(dir), { recursive: true }); }
   catch (e) { return { ok: false, error: `cannot create ${path.dirname(dir)}: ${e.code || e.message}` }; }
 
-  const args = create ? ['worktree', 'add', '-b', branch, dir] : ['worktree', 'add', dir, branch];
+  const args = create ? ['worktree', 'add', '-b', branch, dir, ...(base.ref ? [base.ref] : [])] : ['worktree', 'add', dir, branch];
   const r = git(top, args);
   if (r.failed) return { ok: false, error: 'git not available' };
   if (r.code !== 0) {

package/workspace/package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "pmos-workspace",
-  "version": "0.38.1",
+  "version": "0.38.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {

package/workspace/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pmos-workspace",
-  "version": "0.38.1",
+  "version": "0.38.3",
   "private": true,
   "description": "PMOS Terminal Workspace — local companion hosting real PTYs beside the library and gates (D62)",
   "license": "MIT",
@@ -15,7 +15,7 @@
     "test:parity": "node design-parity.js --states",
     "test:all": "npm test && npm run test:panels && npm run test:ui && npm run test:parity && npm run test:offline",
     "doctor": "node doctor.js",
-    "test:panels": "node pm-shell-test.js && node pm-repos-test.js && node pm-initiatives-test.js && node pm-detail-test.js && node pm-tabs-test.js && node pm-term-test.js && node pm-modes-test.js && node pm-r1-test.js && node pm-r2-test.js && node pm-r3-test.js && node pm-r4-test.js && node pm-r5-test.js && node pm-r6-test.js && node pm-r7-test.js && node pm-r8-test.js && node pm-r9-test.js && node pm-r10-test.js && node pm-r11-test.js && node pm-r12-test.js && node pm-r13-test.js",
+    "test:panels": "node pm-shell-test.js && node pm-repos-test.js && node pm-initiatives-test.js && node pm-detail-test.js && node pm-tabs-test.js && node pm-term-test.js && node pm-modes-test.js && node pm-r1-test.js && node pm-r2-test.js && node pm-r3-test.js && node pm-r4-test.js && node pm-r5-test.js && node pm-r6-test.js && node pm-r7-test.js && node pm-r8-test.js && node pm-r9-test.js && node pm-r10-test.js && node pm-r11-test.js && node pm-r12-test.js && node pm-r13-test.js && node pm-r14-test.js && node pm-r15-test.js",
     "test:offline": "node offline-tarball.test.js"
   },
   "engines": {

package/workspace/public/pm/app.js

@@ -44,11 +44,39 @@ const DETAIL_TITLE = {
 const modeTitle = () => MODE_TITLE[state.mode] || 'initiatives';
 const detailTitle = () => DETAIL_TITLE[(state.detail && state.detail.kind) || ''] || 'detail';
 
+/* Panels 1 and 2 are resizable: a drag handle on each right edge. The width is clamped, remembered
+ * (state.js PERSIST) and reset by a double-click. Before this the columns were a fixed 210px / 280px and a
+ * long repository or branch name was simply cut off. */
+const W0 = { min: 180, max: 520, def: 210 };
+const W1 = { min: 220, max: 560, def: 280 };
+const clampW = (v, r) => (typeof v === 'number' && Number.isFinite(v) ? Math.min(r.max, Math.max(r.min, Math.round(v))) : r.def);
+const col0w = () => clampW(state.col0W, W0);
+const col1w = () => clampW(state.col1W, W1);
+
 const gridCols = () =>
-  (state.col0 ? '210px' : '36px') + ' ' +
-  (state.col1 ? '280px' : '36px') + ' ' +
+  (state.col0 ? col0w() + 'px' : '36px') + ' ' +
+  (state.col1 ? col1w() + 'px' : '36px') + ' ' +
   (state.col2 ? 'minmax(420px,560px)' : '36px') + ' minmax(0,1fr)';
 
+/** The right-hand 7px of a column is its drag handle. It is a hit-test on the host, not an extra element:
+ * the body grid is exactly four tracks and the panels repaint their own children. `key` is the state
+ * field holding the width. */
+const EDGE = 7;
+function makeEdgeDrag(host, key, range, getW) {
+  const onEdge = (e) => { const r = host.getBoundingClientRect(); return e.clientX >= r.right - EDGE && e.clientX <= r.right + 2; };
+  host.addEventListener('mousemove', (e) => { host.style.cursor = onEdge(e) ? 'col-resize' : ''; });
+  host.addEventListener('dblclick', (e) => { if (onEdge(e)) setState({ [key]: range.def }); });
+  host.addEventListener('mousedown', (e) => {
+    if (e.button !== 0 || !onEdge(e)) return;
+    e.preventDefault();
+    const x0 = e.clientX; const w0 = getW();
+    const move = (ev) => setState({ [key]: clampW(w0 + (ev.clientX - x0), range) });
+    const up = () => { document.removeEventListener('mousemove', move); document.removeEventListener('mouseup', up); document.body.style.userSelect = ''; };
+    document.body.style.userSelect = 'none';
+    document.addEventListener('mousemove', move); document.addEventListener('mouseup', up);
+  });
+}
+
 /* ── running-session count for the status bar ───────────────────────────────────────────────
  * The count is over every session of every initiative in every repository, seeded plus started
  * (`extraSess`), whose state is `working` or `needs`, skipping records that failed to read. That
@@ -181,6 +209,8 @@ const rail0Host = el('div', {
  * "this one is safe because of a rule elsewhere in the same line" is how the next edit breaks it. */
 const hostRepos = el('div', { style: 'background:var(--sidebar);border-right:1px solid var(--border);display:flex;flex-direction:column;min-width:0;min-height:0;overflow-y:auto' });
 const hostInits = el('div', { style: 'background:var(--sidebar);border-right:1px solid var(--border);overflow-y:auto;min-width:0;min-height:0' });
+makeEdgeDrag(hostRepos, 'col0W', W0, col0w);
+makeEdgeDrag(hostInits, 'col1W', W1, col1w);
 const hostDetail = el('div', { style: 'background:var(--sidebar);border-right:1px solid var(--border);overflow-y:auto;min-width:0;min-height:0;display:flex;flex-direction:column' });
 const hostTabs = el('div', { style: 'background:var(--term-bg);display:flex;flex-direction:column;min-width:0;min-height:0;overflow:hidden' });
 

package/workspace/public/pm/data.js

@@ -403,6 +403,9 @@ function recordFrom(payload) {
   }
   const rec = {
     tag: fm.title || (row && row.title) || '',
+    // the lane this record declares, and the lanes this repository allows — what the header's lane picker offers
+    lane: lane || null,
+    lanes: payload.lanes && Array.isArray(payload.lanes.lanes) ? payload.lanes.lanes : null,
     stage: row ? row.stage : null,
     flow: fm.flow || null,
     pills: pillsFor({ lane, anchor: payload.anchor, flow: fm.flow || null }),
@@ -584,6 +587,7 @@ function foldWorkspaces(rows) {
       p.ws = w.id;
       // the PM's own name for the repository (overhaul-r1 R3.1) lives on the main tree's row
       if (w.label) p.name = w.label;
+      p.initials = w.initials || null;
       p.kind = w.kind === 'github' ? 'github' : 'local';
       p.remote = w.remote || null;
     }
@@ -724,6 +728,19 @@ function readStamp() {
   return `${p(d.getHours())}:${p(d.getMinutes())}:${p(d.getSeconds())}`;
 }
 
+/** Change an existing initiative's lane (the ladder re-derives from it), then re-read the record and its board. */
+export async function setInitiativeLane(slug, lane) {
+  if (FIXTURE) return { ok: false, error: 'fixture mode has no records to edit' };
+  const prod = products.get(currentProductName());
+  const out = await postJson('/api/initiative/lane', { ws: prod ? prod.ws : null, id: slug, lane });
+  if (out && out.ok && out.changed !== false) {
+    delete hydrated[slug];
+    await hydrate(slug);
+    if (prod) { try { await loadBoard(prod); publishBoards(); } catch { /* the record read above already shows the new ladder */ } }
+  }
+  return out || { ok: false, error: 'the workspace server did not answer' };
+}
+
 async function hydrate(slug) {
   if (FIXTURE || !slug || inFlight.has(slug)) return null;
   const prod = products.get(currentProductName());
@@ -997,7 +1014,7 @@ export function productTrees(name) {
   const key = p.root;
   return p.trees.map((t) => {
     const m = /^initiative\/(.+)$/.exec(t.branch || '');
-    return { ws: t.id, branch: t.branch || null, main: t.root === key, sessions: t.sessions || 0,
+    return { ws: t.id, dir: t.tree || t.root, branch: t.branch || null, main: t.root === key, sessions: t.sessions || 0,
       initiative: m ? m[1] : null, by: m ? 'branch' : null };
   }).sort((a, b) => (b.main - a.main));
 }
@@ -1037,12 +1054,15 @@ export async function removeRepository(name) {
   return res || { ok: false, error: 'the workspace server did not answer' };
 }
 
+/** The PM's own abbreviation for the rail, or null (the rail derives one from the name). */
+export function repoInitials(name) { const p = products.get(name); return (p && p.initials) || null; }
+
 /** panel-repos.js — `renameRepository(name, label)`. A display name only (R3.1). */
-export async function renameRepository(name, label) {
+export async function renameRepository(name, label, initials) {
   if (FIXTURE) return { ok: false, error: 'fixture mode — nothing is registered' };
   const p = products.get(name);
   if (!p) return { ok: false, reason: 'unknown', error: 'unknown repository' };
-  return (await postJson('/api/workspaces/rename', { id: p.ws, name: label })) || { ok: false, error: 'the workspace server did not answer' };
+  return (await postJson('/api/workspaces/rename', { id: p.ws, name: label, ...(initials !== undefined ? { initials } : {}) })) || { ok: false, error: 'the workspace server did not answer' };
 }
 
 /**
@@ -1202,6 +1222,36 @@ export async function preferProfile(agent, profile) {
   return postJson('/api/profiles/prefer', { agent, profile });
 }
 
+/** Re-read the registered trees only — no boards. A worktree created or removed anywhere (a spawn, the
+ * branch form, a terminal) reaches panel 1 through this, instead of waiting for a reload. */
+export async function refreshTrees() {
+  if (FIXTURE) return;
+  const out = await getJson('/api/workspaces');
+  if (!out || !Array.isArray(out.workspaces)) return;
+  const rows = foldWorkspaces(out.workspaces);
+  for (const r of rows) products.set(r.name, Object.assign(products.get(r.name) || {}, r));
+  publishBoards();
+}
+
+/** Create a branch with no session. `worktree` false = a checkout in the shared tree (the server
+ * refuses it while sessions run there). */
+export async function createBranch({ ws, name, from, worktree }) {
+  if (FIXTURE) return { ok: false, error: 'fixture mode creates no branch' };
+  return postJson('/api/git/branch', { ws, name, from: from || null, worktree: worktree !== false });
+}
+
+/** End a session and remove it, with an answer. */
+export async function removeSessionById(id) {
+  if (FIXTURE) return { ok: false, error: 'fixture mode has no sessions' };
+  return postJson('/api/session/remove', { id });
+}
+
+/** Remove a linked worktree folder. The server refuses a busy or unsaved one and says why. */
+export async function removeWorktree(ws, dir) {
+  if (FIXTURE) return { ok: false, error: 'fixture mode has no worktrees' };
+  return postJson('/api/git/worktrees/remove', { ws, dir });
+}
+
 /** Every working tree of this workspace's repo. The pre-flight reads it for ONE purpose: a branch
  * checked out elsewhere is a branch git will refuse, and the PM should read that in the picker
  * rather than as an error after the click. */

package/workspace/public/pm/modes-live.js

@@ -14,7 +14,7 @@
  * Every list states its read: loading, failed (with the reason), or a successful read of nothing.
  * Fixture mode never reaches this module (modes.js routes here only when !FIXTURE).
  */
-import { el } from './dom.js';
+import { el, setChildren } from './dom.js';
 import { state, setState } from './state.js';
 
 const iv = (v) => el('span', null, v === null || v === undefined ? '' : String(v));
@@ -108,7 +108,18 @@ export function portfolioList() {
   const st = status(r, 'the portfolio');
   if (st) return [...kids, st];
   const pf = r.data || { repos: [], rows: [] };
-  if (!pf.hub) kids.push(el('div', { style: NOTE }, iv('No hub yet — reports need a portfolio.yaml in your PM repository (D-3).')));
+  if (!pf.hub) {
+    const here = state.product;
+    kids.push(el('div', { style: NOTE, 'data-r15': 'no-hub' }, iv('No hub yet — reports need a portfolio.yaml in a registered repository (D-3). A report is never written to a guessed place.')));
+    if (here) kids.push(el('div', { style: 'padding:0 14px 6px' }, el('button', { style: BTN, hover: 'color:var(--foreground)', 'data-r15': 'make-hub',
+      title: 'writes a starter portfolio.yaml in ' + here + ' listing your registered repositories; edit the domains afterwards',
+      onClick: async () => {
+        const w = dataMod ? dataMod.wsOf(here) : null;
+        const out = w ? await post('/api/portfolio/init', { ws: w }) : null;
+        reportNote = out && out.ok ? { tone: 'ok', text: 'wrote portfolio.yaml in ' + out.hub + ' — it is now the hub; edit the domains there' } : { tone: 'bad', text: (out && out.error) || 'the hub was not created' };
+        reload('portfolio'); setState({});
+      } }, 'make “' + here + '” the hub')));
+  }
   const q = String(state.q || '').trim().toLowerCase();
   const rows = (pf.rows || []).filter((x) => !q || [x.id, x.title, x.group, x.repo, x.domain].some((v) => v && String(v).toLowerCase().includes(q)));
   // coverage first: what was read, how fresh, and what was NOT read
@@ -188,6 +199,25 @@ function specialRow() {
     specialNote ? el('span', { 'data-r11': 'special-note', style: 'display:block;font-size:11px;color:var(--muted-foreground);margin-top:4px' }, iv(specialNote)) : null);
 }
 
+/* Run a schedule now and SAY what happened. The handlers used to discard the answer, so a session that
+ * failed to start (no agent binary, a refused model, a missing schedule) looked like a button that did nothing. */
+let runNote = null;
+async function runSchedule(s, name) {
+  runNote = { tone: 'mut', text: 'starting ' + (name || 'the task') + ' …' };
+  setState({});
+  const out = await post('/api/schedules/run', { id: s.id });
+  const r = out && out.result;
+  if (!out || out.ok === false) runNote = { tone: 'bad', text: (out && out.error) || 'the workspace server did not answer — nothing was started' };
+  else if (r && r.ok === false) runNote = { tone: 'bad', text: 'did not start — ' + (r.reason || 'the server gave no reason') };
+  else if (r && r.sessionId) {
+    runNote = { tone: 'ok', text: (name || 'task') + ' started as a session — opened in the tabs' };
+    try { const ini = await import('./panel-initiatives.js'); ini.openTerm(null, { id: r.sessionId, name: name || 'scheduled run', st: 'working', profile: null }); } catch {}
+  } else runNote = { tone: 'ok', text: (name || 'task') + ' ran — the result is in needs-you' };
+  reload('schedules');
+  setState({});
+}
+const runNoteEl = () => (runNote ? el('div', { 'data-r4': 'run-note', style: NOTE + ';color:' + (runNote.tone === 'bad' ? 'var(--destructive)' : 'var(--muted-foreground)') }, iv(runNote.text)) : null);
+
 /* ── scheduled ──────────────────────────────────────────────────────────────────────────────── */
 export function scheduledLive() {
   const r = read('schedules', '/api/schedules?all=1');
@@ -198,7 +228,7 @@ export function scheduledLive() {
     seedRow('reports', 'set up report drafts (daily · weekly · bi-weekly · monthly)', 'schedules the four report skills for the selected repository; each follows your own definition and files a draft in that repository. A special report is run on demand.'),
     seedRow('skills', 'set up weekly skill discovery', 'schedules the skill-discover skill weekly (Wednesday 09:00) for the selected repository; it files candidates for you to read and never approves them'),
     seedRow('memory', 'set up weekly memory grooming', 'schedules the memory-groom skill weekly (Monday 08:00) for the selected repository; it proposes changes and never makes them'),
-    specialRow()];
+    specialRow(), runNoteEl()];
   for (const s of list) {
     const name = s.label || s.name || s.task || s.skill || s.id;
     const cadence = (s.cadence || '') + (s.day ? ' ' + s.day : '') + (s.time ? ' at ' + s.time : '');
@@ -209,7 +239,7 @@ export function scheduledLive() {
       el('span', { style: 'display:block;font-family:var(--mono);font-size:10.5px;color:var(--muted-foreground)' },
         iv('next ' + (s.next ? String(s.next).slice(0, 16).replace('T', ' ') : '—') + ' · last ' + (s.lastRun ? String(s.lastRun).slice(0, 16).replace('T', ' ') : 'never'))),
       el('span', { style: 'display:flex;gap:4px;margin-top:4px' },
-        el('button', { onClick: async () => { await post('/api/schedules/run', { id: s.id }); reload('schedules'); setState({}); }, style: BTN, hover: 'color:var(--foreground)', 'data-r4': 'run' }, 'run now'),
+        el('button', { onClick: () => runSchedule(s, name), style: BTN, hover: 'color:var(--foreground)', 'data-r4': 'run' }, 'run now'),
         el('button', { onClick: async () => {
           if (typeof window !== 'undefined' && window.confirm && !window.confirm('Delete the schedule "' + name + '"?')) return;
           await post('/api/schedules/delete', { id: s.id }); reload('schedules'); setState({});
@@ -257,7 +287,9 @@ export function memoryLive() {
     const u = (d.usage || {})[t] || { used: 0, limit: 0, percent: 0 };
     kids.push(el('div', { style: LABEL, 'data-r9': 'usage-' + t }, iv((t === 'memory' ? 'repository memory' : 'about you') + ' · ' + u.percent + '% · ' + u.used + '/' + u.limit)));
     const es = (d.entries || []).filter((e) => e.target === t);
-    if (!es.length) kids.push(el('div', { style: NOTE }, iv('Nothing recorded yet.')));
+    if (!es.length) kids.push(el('div', { style: NOTE, 'data-r9': 'empty' }, iv(t === 'memory' && !d.wired
+      ? 'Nothing recorded yet. Sessions read this memory — and agents add to it — only once the repository is wired: press “wire into CLAUDE.md”. Nothing is added automatically; an agent’s fact stays unconfirmed until you confirm it.'
+      : 'Nothing recorded yet.')));
     for (const e of es) {
       kids.push(el('div', { style: ROW, 'data-r9': 'entry', 'data-id': e.id },
         el('span', { style: 'display:block;font-size:12px;line-height:1.45' }, iv(e.text)),
@@ -269,6 +301,15 @@ export function memoryLive() {
           el('button', { style: BTN, hover: 'color:var(--destructive)', 'data-r9': 'remove', onClick: () => { if (window.confirm && !window.confirm('Remove this entry?')) return; memDo({ op: 'remove', target: t, old: e.text }); } }, 'remove'))));
     }
   }
+  if ((d.elsewhere || []).length) {
+    kids.push(el('div', { style: LABEL + ';color:var(--foreground)', 'data-r9': 'elsewhere-label', title: 'the ledger lives in each checkout; these arrive in this tree when their branch merges' }, iv('recorded on other branches · ' + d.elsewhere.length + ' · read only')));
+    for (const e of d.elsewhere) {
+      kids.push(el('div', { style: ROW, 'data-r9': 'elsewhere', 'data-id': e.id },
+        el('span', { style: 'display:block;font-size:12px;line-height:1.45' }, iv(e.text)),
+        el('span', { style: 'display:block;font-family:var(--mono);font-size:10px;color:var(--muted-foreground);margin-top:2px' },
+          iv([e.target === 'user' ? 'about you' : null, e.confidence, e.branch ? '⑂ ' + e.branch : null, e.by, String(e.at).slice(0, 10)].filter(Boolean).join(' · ')))));
+    }
+  }
   if ((d.pending || []).length) {
     kids.push(el('div', { style: LABEL + ';color:var(--foreground)', 'data-r9': 'pending-label' }, iv('waiting for your approval · ' + d.pending.length)));
     for (const p of d.pending) {
@@ -341,10 +382,21 @@ function discoveryBlock(wsId) {
   const kids = [el('div', { style: LABEL + ';color:var(--foreground)', 'data-r13': 'discovery-label' }, iv('skill discovery')),
     el('div', { style: NOTE }, iv('Finds skills in your own repository and from sources you name. Nothing it finds runs until you read it and approve it.')),
     el('div', { style: 'display:flex;gap:4px;flex-wrap:wrap;padding:0 14px 6px' },
-      mine ? el('button', { style: BTN, hover: 'color:var(--foreground)', 'data-r13': 'discover-now', onClick: async () => { await post('/api/schedules/run', { id: mine.id }); reload('schedules'); setState({}); } }, 'find skills now') : null,
+      mine ? el('button', { style: BTN, hover: 'color:var(--foreground)', 'data-r13': 'discover-now', onClick: () => runSchedule(mine, 'skill discovery') }, 'find skills now') : null,
       mine ? el('span', { style: 'font-family:var(--mono);font-size:10.5px;color:var(--muted-foreground);align-self:center' }, iv('weekly · next ' + (mine.next ? String(mine.next).slice(0, 16).replace('T', ' ') : '—')))
         : seedRow('skills', 'set up weekly skill discovery', 'schedules the skill-discover skill weekly (Wednesday 09:00) for the selected repository; it files candidates for you to read and never approves them'))];
-  return [...kids, ...candidatesBlock(wsId)];
+  return [...kids, runNoteEl(), ...candidatesBlock(wsId)];
+}
+/** A skill opens in a tab, like a Markdown file: it sits beside the terminals and survives a mode switch. */
+async function openSkillTab(sk) {
+  const ini = await import('./panel-initiatives.js');
+  ini.openTab({ id: 'skill:' + sk.id, kind: 'skill', title: sk.label || sk.skill || sk.id, skillId: sk.id, repo: state.product || null, slug: null, role: 'SKILL' });
+}
+/** The body of a skill tab (panel 4). Rebuilt on each paint, like the task tab; the draft lives in `skillDraft`. */
+export function mountSkillTab(host, tab) {
+  const body = el('div', { style: 'flex:1;min-height:0;overflow-y:auto;background:var(--background);color:var(--foreground)' }, skillDetailLive({ kind: 'skill', id: tab.skillId, tab: true }));
+  setChildren(host, [body]);
+  return host;
 }
 export function skillsLive() {
   const wsId = dataMod && state.product ? dataMod.wsOf(state.product) : null;
@@ -353,9 +405,8 @@ export function skillsLive() {
   const head = discoveryBlock(wsId);
   if (st) return [el('div', { style: 'padding:6px 0' }, [...head, st])];
   const list = (r.data && r.data.skills) || [];
-  const open = state.detail && state.detail.kind === 'skill' ? state.detail.id : null;
-  const kids = list.map((sk) => el('button', { style: ROW + (open === sk.id ? ';background:var(--accent)' : ''), hover: 'background:var(--accent)', 'data-r4': 'skill', 'data-id': sk.id,
-    onClick: () => setState({ detail: { kind: 'skill', id: sk.id } }) },
+  const kids = list.map((sk) => el('button', { style: ROW + (state.active === 'skill:' + sk.id ? ';background:var(--accent)' : ''), hover: 'background:var(--accent)', 'data-r4': 'skill', 'data-id': sk.id,
+    onClick: () => openSkillTab(sk) },
     el('span', { style: 'display:flex;gap:8px;align-items:baseline' },
       el('span', { style: 'font-family:var(--mono);font-size:12px' }, iv(sk.label || sk.skill || sk.id)),
       el('span', { style: 'margin-left:auto;font-family:var(--mono);font-size:10px;color:var(--muted-foreground)' }, iv(sk.source))),
@@ -394,7 +445,10 @@ export function skillDetailLive(det) {
       setState({});
     } }, 'save') : el('button', { style: BTN, hover: 'color:var(--foreground)', 'data-r13': 'skill-copy', onClick: async () => {
       const res = await post('/api/skills/copy', { id, ws: wsId });
-      if (res && res.ok) { skillNote = 'copied as ' + res.id + ' — it is yours to edit'; reload('skills:' + (wsId || '')); setState({ detail: { kind: 'skill', id: res.id } }); }
+      if (res && res.ok) {
+        skillNote = 'copied as ' + res.id + ' — it is yours to edit'; reload('skills:' + (wsId || ''));
+        if (det && det.tab) openSkillTab({ id: res.id, label: res.id }); else setState({ detail: { kind: 'skill', id: res.id } });
+      }
       else { skillNote = (res && res.error) || 'not copied'; setState({}); }
     } }, 'make my own copy to edit'),
     dirty ? el('span', { style: 'font-size:11px;color:var(--muted-foreground)' }, 'unsaved changes') : null,

package/workspace/public/pm/panel-detail.js

@@ -289,7 +289,32 @@ function crumbBlock(c) {
   );
 }
 
-function headerBlock(name, tag, pills, crumb) {
+/* The lane picker: an existing initiative's workflow. The ladder is derived from the record's `lane:`, so this
+ * edits that line (POST /api/initiative/lane) after a confirm, and the rungs re-derive. Live mode only. */
+let laneNote = null;
+function lanePicker(slug, rec) {
+  if (FIXTURE || !rec || !rec.lane || !Array.isArray(rec.lanes) || !rec.lanes.length) return null;
+  const opts = rec.lanes.includes(rec.lane) ? rec.lanes : [rec.lane, ...rec.lanes];
+  return el('div', { 'data-r15': 'lane-bar', style: 'display:flex;gap:6px;align-items:center;flex-wrap:wrap;margin-top:8px;font-family:var(--mono);font-size:10.5px;color:var(--muted-foreground)' },
+    el('span', null, 'workflow'),
+    el('select', { 'data-r15': 'lane-pick', title: 'change this initiative’s workflow (lane); the ladder re-derives from it',
+      style: 'font-family:var(--mono);font-size:10.5px;background:var(--secondary);border:1px solid var(--border);color:var(--foreground);padding:2px 4px;min-height:24px',
+      onChange: async (e) => {
+        const next = e.target.value;
+        if (next === rec.lane) return;
+        const ok = typeof window === 'undefined' || !window.confirm ? true
+          : window.confirm('Change “' + slug + '” from the ' + rec.lane + ' lane to the ' + next + ' lane?\n\nThe lane decides which steps the workflow ladder requires (spec, rubric, explainer, …). Only the lane: line of the record changes; the steps are re-derived and some may show as missing.');
+        if (!ok) { e.target.value = rec.lane; return; }
+        const data = sibling('data', './data.js');
+        const out = data && data.setInitiativeLane ? await data.setInitiativeLane(slug, next) : null;
+        laneNote = out && out.ok ? 'lane is now ' + next : 'not changed — ' + ((out && out.error) || 'the server did not answer');
+        setState({});
+      } },
+    opts.map((l) => el('option', { value: l, selected: l === rec.lane ? 'selected' : null }, l))),
+    laneNote ? el('span', { 'data-r15': 'lane-note', style: 'color:var(--muted-foreground)' }, iv(laneNote)) : null);
+}
+
+function headerBlock(name, tag, pills, crumb, lane) {
   return el('div', { style: 'padding:13px 14px 11px;border-bottom:1px solid var(--border)' },
     el('div', { style: 'font-family:var(--mono);font-size:15px;font-weight:600;letter-spacing:-.01em;overflow:hidden;text-overflow:ellipsis;white-space:nowrap' }, iv(name)),
     el('div', { style: 'font-size:12px;color:var(--muted-foreground);margin-top:2px' }, iv(tag)),
@@ -298,6 +323,7 @@ function headerBlock(name, tag, pills, crumb) {
         style: 'font-family:var(--mono);font-size:10px;padding:2px 6px;background:var(--secondary);border:1px solid var(--border);color:' + pl.c,
       }, iv(pl.t)))),
     crumbBlock(crumb),
+    lane || null,
   );
 }
 
@@ -1001,7 +1027,7 @@ function initBody(slug) {
     return out;
   }
 
-  out.push(headerBlock(slug, rec.tag || '', rec.pills || [], rec.crumb || null));
+  out.push(headerBlock(slug, rec.tag || '', rec.pills || [], rec.crumb || null, lanePicker(slug, rec)));
   { const lc = lifecycleRow(repoOf(slug), slug); if (lc) out.push(lc); }
 
   if (rec.noLadder) {

package/workspace/public/pm/panel-initiatives.js

@@ -412,7 +412,7 @@ function orphanRows(rows) {
       style: 'display:flex;align-items:center;gap:7px;width:100%;padding:5px 12px 5px 27px;min-height:32px;border-left:2px solid transparent;background:transparent',
       hover: 'background:var(--accent)',
       title: (s.name || s.id) + ' — ' + (s.label || s.shown || '')
-        + '\nPMOS was never told what this session is for. ＋ bind records it.',
+        + '\nPMOS was never told what this session is for. ＋ bind records it. A session maps to one initiative or none.',
     },
       el('span', { style: 'flex:none;font-size:12px;color:' + (st && ss ? ss.COLOR[st] : 'var(--muted-foreground)') },
         st && ss ? ss.GLYPH[st] : '·'),

package/workspace/public/pm/panel-newsess.js

@@ -33,6 +33,7 @@ import { el } from './dom.js';
 import { state, setState, FIXTURE } from './state.js';
 import * as FX from './fixture.js';
 import { openTerm as openTermTab } from './panel-initiatives.js';
+import { startHere } from './panel-trees.js';
 
 /* Both are another module's file, loaded lazily for the reason panel-tabs.js gives: a static import
  * of a file that fails to load takes this whole module down with it, and a panel that cannot draw
@@ -214,7 +215,7 @@ function branchSection() {
     return out;
   }
 
-  const current = info.branch || null;
+  const current = info.current || info.branch || null;
   const branches = Array.isArray(info.branches) ? info.branches : [];
   /* A branch checked out in ANOTHER working tree is a branch git will refuse to check out here.
    * Offering it and letting the server say no would be technically honest and practically rude:
@@ -237,11 +238,22 @@ function branchSection() {
   for (const b of branches) {
     if (b === current) continue;
     const taken = elsewhere.get(b);
+    /* A branch already open in another working tree cannot be checked out twice, but it CAN be worked
+     * in: the chip starts a session in that tree. It used to be a disabled chip, so the folder the PM
+     * already had was the one place they could not start. */
+    const treeOf = taken && dataMod && typeof dataMod.productTrees === 'function'
+      ? dataMod.productTrees(state.product).find((t) => t.branch === b && !t.main) : null;
     chips.push(taken
-      ? el('button', {
-          disabled: true, title: 'git will not check this out twice — it is already in ' + taken,
-          style: CHIP_DEAD,
-        }, iv(b + ' — in ' + shortPath(taken)))
+      ? (treeOf
+        ? el('button', {
+            onClick: () => { closeNewSession(); startHere(state.product, treeOf); },
+            title: 'this branch is already open in ' + taken + ' — start the session there',
+            style: CHIP, hover: HOVER, 'data-r14': 'open-worktree',
+          }, iv(b + ' — open that worktree'))
+        : el('button', {
+            disabled: true, title: 'git will not check this out twice — it is already in ' + taken,
+            style: CHIP_DEAD,
+          }, iv(b + ' — in ' + shortPath(taken))))
       : el('button', {
           onClick: () => pick(b),
           style: state.newSessBranch === b && !state.newSessBranchMode ? CHIP_ON : CHIP, hover: HOVER,
@@ -435,6 +447,7 @@ async function onStart() {
     name,
     agent: state.newSessAgent || 'shell',
     ws: state.wsId || null,
+    initiative: slug || undefined,
     branch: branch || null,
     createBranch,
     // Sent explicitly, ALWAYS, and only when a branch is in play — the server defaults an omitted

package/workspace/public/pm/panel-repos.js

@@ -25,6 +25,7 @@
 
 import { el, setChildren } from './dom.js';
 import { syncButton } from './lifecycle.js';
+import { treesBlock, branchForm, openBranchForm, treeNoteFor } from './panel-trees.js';
 import { state, setState, FIXTURE } from './state.js';
 import {
   productsList, repoRow, firstSlugOf, MODE_META, SETTINGS_GROUPS, ADDABLE_PRODUCTS,
@@ -259,9 +260,15 @@ function treesOf(name) {
 }
 
 async function renameRepo(name) {
-  const label = typeof window !== 'undefined' && window.prompt ? window.prompt('Rename “' + name + '” to:', name) : null;
-  if (label === null || !String(label).trim() || String(label).trim() === name) return;
-  const out = await dataMod.renameRepository(name, String(label).trim());
+  const win = typeof window !== 'undefined' && window.prompt ? window : null;
+  const label = win ? win.prompt('Rename “' + name + '” to:', name) : null;
+  if (label === null || !String(label).trim()) return;
+  // the collapsed rail shows an abbreviation; empty keeps (or restores) the one derived from the name
+  const cur = dataMod.repoInitials ? dataMod.repoInitials(name) : null;
+  const ini = win.prompt('Abbreviation on the collapsed rail (up to 3 letters or digits; empty = derived from the name):', cur || '');
+  if (ini === null) return;
+  if (String(label).trim() === name && String(ini).trim() === (cur || '')) return;
+  const out = await dataMod.renameRepository(name, String(label).trim(), String(ini).trim());
   if (!out || out.ok === false) { setState({ repoNotice: { name, tone: 'bad', text: (out && out.error) || 'rename refused' } }); return; }
   await connectData();
   setState({ product: String(label).trim(), repoNotice: null });
@@ -282,17 +289,18 @@ function repoEntry(tuple, product) {
   if (FIXTURE || !dataMod) return row;
   const name = tuple[0];
   const trees = treesOf(name);
-  const linked = trees.filter((t) => !t.main);
-  const open = !!(state.treesOpen || {})[name];
+  /* The trees list is always available — the main tree is a line of work too, and a repository with
+   * one tree still has branches to create. The active repository opens it by default; others on a
+   * click of the chip. */
+  const stored = (state.treesOpen || {})[name];
+  const open = stored === undefined ? product === name : !!stored;
   const tools = [];
-  if (linked.length) {
-    tools.push(el('button', {
-      onClick: () => setState((s) => ({ treesOpen: { ...(s.treesOpen || {}), [name]: !open } })),
-      style: chipStyle, hover: 'color:var(--foreground)',
-      title: linked.length + ' linked worktree' + (linked.length === 1 ? '' : 's') + ' — show the lines of work',
-      'data-r1': 'trees-chip',
-    }, ip('⑂ ' + linked.length)));
-  }
+  tools.push(el('button', {
+    onClick: () => setState((s) => ({ treesOpen: { ...(s.treesOpen || {}), [name]: !open } })),
+    style: chipStyle, hover: 'color:var(--foreground)',
+    title: trees.length + ' working tree' + (trees.length === 1 ? '' : 's') + ' — show the lines of work, their sessions and branches',
+    'data-r1': 'trees-chip', 'data-repo': name,
+  }, ip('⑂ ' + trees.length)));
   if (product === name) {
     { const sb = syncButton(name); if (sb) tools.push(sb); }
     tools.push(el('button', { onClick: () => renameRepo(name), style: actStyle, hover: 'color:var(--foreground)', title: 'rename this repository', 'data-r1': 'rename' }, '✎'));
@@ -301,18 +309,9 @@ function repoEntry(tuple, product) {
   const kids = [el('div', { style: 'display:flex;align-items:center' },
     el('div', { style: 'flex:1;min-width:0' }, row),
     tools.length ? el('div', { style: 'display:flex;align-items:center;gap:2px;padding-right:8px' }, tools) : null)];
-  if (open && trees.length) {
-    kids.push(el('div', { style: 'padding:2px 14px 8px 39px', 'data-r1': 'trees' },
-      trees.map((t) => el('div', {
-        style: 'display:flex;gap:8px;font-family:var(--mono);font-size:10.5px;color:var(--muted-foreground);padding:2px 0',
-        title: t.initiative ? 'initiative read from the branch name (initiative/<id>) — not a recorded attribution' : '',
-      },
-        el('span', { style: 'color:var(--foreground)' }, ip((t.main ? '⎇ ' : '⑂ ') + (t.branch || '(detached)'))),
-        el('span', null, ip(t.sessions + ' session' + (t.sessions === 1 ? '' : 's'))),
-        t.initiative ? el('span', null, ip('#' + t.initiative)) : null,
-      )),
-    ));
-  }
+  { const bf = branchForm(name); if (bf) kids.push(bf); }
+  if (open && trees.length) kids.push(treesBlock(name, trees, product === name));
+  { const tn = treeNoteFor(name); if (tn) kids.push(tn); }
   const n = state.repoNotice;
   if (n && n.name === name) {
     kids.push(el('div', {
@@ -340,12 +339,14 @@ export function railGlyphs() {
     const wss = new Set(treesOf(name).map((x) => x.ws));
     const needs = sess.some((x) => x && wss.has(x.ws) && x.shown === 'needs');
     const active = product === name;
-    const ini = (String(name).replace(/[^A-Za-z0-9]+/g, ' ').trim().split(' ').filter(Boolean).slice(0, 2)
+    const ini = (dataMod && dataMod.repoInitials && dataMod.repoInitials(name)) || (String(name).replace(/[^A-Za-z0-9]+/g, ' ').trim().split(' ').filter(Boolean).slice(0, 2)
       .map((w) => w[0]).join('') || String(name).slice(0, 2)).toUpperCase();
     const said = name + ' — ' + rp.kindLabel + ' repository' + (needs ? ' · a session needs you' : '');
     return el('button', {
       onClick: (e) => { if (e && e.stopPropagation) e.stopPropagation(); selectRepo(name); },
-      title: said, 'aria-label': said,
+      // right-click renames from the rail, where the abbreviation is shown
+      onContextmenu: (e) => { if (e && e.preventDefault) e.preventDefault(); renameRepo(name); },
+      title: said + ' · right-click to rename', 'aria-label': said,
       'data-r1': 'rail-glyph', 'data-repo': name, 'data-active': active ? '1' : '0',
       'data-ini': ini, 'data-kind': rp.kindGlyph,
       style: 'position:relative;flex:none;width:28px;height:28px;margin:3px auto;display:flex;align-items:center;justify-content:center;'

package/workspace/public/pm/panel-tabs.js

@@ -40,6 +40,9 @@ import { boardOf, currentProduct } from './board-read.js';
  * file that is not on disk yet takes the whole panel down with it, and an empty terminal pane is a
  * far smaller failure than a dead panel 4. When it lands, the panel repaints itself. */
 let termMod = null;
+let liveMod = null;
+/* Loaded lazily; a repaint is asked for only when a skill tab is already open (restored on reload) and waiting for it. */
+import('./modes-live.js').then((m) => { liveMod = m; if ((state.tabs || []).some((t) => t.kind === 'skill')) setState({}); }).catch(() => { liveMod = null; });
 import('./tab-term.js')
   .then((m) => { termMod = m; setState({}); })
   .catch(() => { termMod = null; });
@@ -792,6 +795,8 @@ function paneFor(tab) {
     if (termMod && typeof termMod.mountTerm === 'function') termMod.mountTerm(host, tab);
   } else if (tab.kind === 'task') {
     mountTask(host, tab);
+  } else if (tab.kind === 'skill') {
+    if (liveMod && typeof liveMod.mountSkillTab === 'function') liveMod.mountSkillTab(host, tab);
   } else if (tab.kind === 'web') {
     mountWeb(host, tab);              // overhaul-r5 — never falls through to an empty doc tab
   } else {
@@ -908,7 +913,7 @@ function tabNode(t, act, splitTab) {
    * fixture render keeps the design's literal — the comparator reads this text node. */
   const meta = t.kind === 'term'
     ? ((!FIXTURE && t.sessionId) ? 'session ' + t.sessionId : 'session')
-    : (t.kind === 'task' ? 'task' : t.kind === 'web' ? 'web' : t.role);
+    : (t.kind === 'task' ? 'task' : t.kind === 'web' ? 'web' : t.kind === 'skill' ? 'skill' : t.role);
 
   return el('div', {
     style: 'flex:none;display:flex;align-items:center;gap:8px;padding:0 10px;background:' + bg

package/workspace/public/pm/panel-trees.js

@@ -0,0 +1,191 @@
+/* panel-trees.js — the working trees of a repository, as things you can use (workspace-branch-sessions).
+ *
+ * Panel 1 used to list a repository's trees as plain text behind a chip that existed only when a
+ * linked worktree did. A branch could not be clicked, its sessions could not be seen, a session
+ * could not be started in it, and a branch could not be made without starting a session. This module
+ * is that surface:
+ *
+ *   treesBlock(name)    every tree, main first. A row opens to show that tree's sessions and its
+ *                       actions: start a session HERE, remove the folder (linked trees only).
+ *   branchForm(name)    `＋ branch` — a name, a base and an own-folder toggle. Creates the branch and
+ *                       starts nothing; then offers a session on it.
+ *
+ * Every action states its outcome in the panel. A refusal says why and the repository is unchanged.
+ * Live mode only: the fixture has no server, and panel-repos.js never calls this there.
+ */
+import { el } from './dom.js';
+import { state, setState, subscribe } from './state.js';
+import { boardOf } from './board-read.js';
+import { openNewSession } from './panel-newsess.js';
+
+const ip = (v) => el('span', null, v);
+const MONO = 'font-family:var(--mono);font-size:10.5px';
+const BTN = MONO + ';padding:2px 8px;border:1px solid var(--border);color:var(--muted-foreground);min-height:24px';
+const MUTED = 'color:var(--muted-foreground)';
+
+let dataMod = null; let termMod = null; let iniMod = null;
+import('./data.js').then((m) => { dataMod = m; }).catch(() => { dataMod = null; });
+import('./tab-term.js').then((m) => { termMod = m; }).catch(() => { termMod = null; });
+import('./panel-initiatives.js').then((m) => { iniMod = m; }).catch(() => { iniMod = null; });
+
+const note = (name, text, tone) => setState({ treeNote: { name, text, tone: tone || null } });
+const refresh = () => (dataMod && dataMod.refreshTrees ? dataMod.refreshTrees() : Promise.resolve());
+
+/* A tree was registered, removed or renamed somewhere (the server's `workspaces` push, a branch
+ * change in a terminal): re-read the tree list. Guarded by the push stamp so the repaint this causes
+ * does not ask again. */
+let lastPush = 0;
+subscribe(() => {
+  if (state.treesPush && state.treesPush !== lastPush) { lastPush = state.treesPush; refresh(); }
+});
+
+/** The server's sessions that run in this tree, from the list the page already polls. */
+export function sessionsIn(ws) {
+  return (Array.isArray(state.sessions) ? state.sessions : []).filter((s) => s && s.ws === ws);
+}
+const isEnded = (s) => s.state === 'exited' || s.shown === 'exited';
+
+/** Open a session's terminal. The row carries the server's id, so the tab attaches to that exact PTY. */
+function openSession(s) {
+  if (!iniMod) return;
+  iniMod.openTerm(null, { id: s.id, name: s.name, st: isEnded(s) ? 'exited' : 'working', profile: s.profile_id || null });
+}
+
+/** Start a session in THIS tree: the workspace id is the tree's, so the server runs it in that folder. */
+export async function startHere(name, t) {
+  if (!termMod || !iniMod) { note(name, 'the terminal module has not loaded — nothing was started', 'bad'); return; }
+  const label = (t.branch || 'tree').replace(/^initiative\//, '');
+  const res = await termMod.requestSpawn({ name: 'shell · ' + label, agent: 'shell', ws: t.ws, branch: null, createBranch: false, isolate: null, profile: null });
+  if (!res || !res.ok) { note(name, (res && res.error) || 'the workspace server refused, without saying why', 'bad'); return; }
+  note(name, 'started in ' + (t.branch || 'this tree'));
+  openSession({ id: res.id, name: 'shell · ' + label, profile_id: null });
+}
+
+async function endSession(name, s) {
+  const out = dataMod ? await dataMod.removeSessionById(s.id) : null;
+  setState({ treeConfirm: null });
+  if (!out || out.ok === false) { note(name, (out && out.error) || 'the session could not be removed', 'bad'); return; }
+  note(name, out.removed === false ? (out.note || 'asked it to end') : 'session removed');
+}
+
+async function removeTree(name, t) {
+  const ok = typeof window === 'undefined' || !window.confirm ? true
+    : window.confirm('Remove the folder for “' + t.branch + '”?\n\n' + t.dir + '\n\nThis only removes the folder (git worktree remove). The branch is kept and nothing is merged into main — merge through a pull request. A folder with unsaved work, or a running session, is refused: end the session first.');
+  if (!ok) return;
+  const out = dataMod ? await dataMod.removeWorktree(t.ws, t.dir) : null;
+  if (!out || out.ok === false) { note(name, (out && out.error) || 'the folder could not be removed', 'bad'); return; }
+  setState((s) => ({ treeSel: { ...(s.treeSel || {}), [name]: null } }));
+  note(name, 'removed the folder for ' + t.branch + ' — the branch is kept, nothing was merged' + (out.note ? '. ' + out.note : ''));
+  refresh();
+}
+
+function sessionRow(name, s) {
+  const armed = state.treeConfirm === s.id;
+  return el('div', { style: 'display:flex;align-items:center;gap:6px;padding:1px 0', 'data-r14': 'tree-session', 'data-id': s.id },
+    el('button', { onClick: () => openSession(s), style: MONO + ';flex:1;min-width:0;text-align:left;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;color:var(--foreground)', hover: 'text-decoration:underline', title: s.initiative ? 'open this session — recorded on initiative ' + s.initiative : 'open this session — it is on no initiative; a session maps to one initiative or none (bind it from the initiatives list)' },
+      ip(s.name + ' · ' + (isEnded(s) ? 'ended' : (s.shown || s.state || 'running')) + (s.initiative ? ' · #' + s.initiative : ' · no initiative'))),
+    el('button', {
+      onClick: () => (armed ? endSession(name, s) : setState({ treeConfirm: s.id })),
+      style: BTN + (armed ? ';color:var(--destructive);border-color:var(--destructive)' : ''), hover: 'color:var(--destructive)',
+      title: isEnded(s) ? 'remove this ended session' : 'end this session and remove it', 'data-r14': 'tree-end',
+    }, armed ? 'sure?' : (isEnded(s) ? 'remove' : 'end')));
+}
+
+function treeRow(name, t) {
+  const sel = (state.treeSel || {})[name] === t.ws;
+  const sess = sessionsIn(t.ws);
+  const live = sess.filter((s) => !isEnded(s)).length;
+  const head = el('button', {
+    onClick: () => setState((s) => ({ treeSel: { ...(s.treeSel || {}), [name]: sel ? null : t.ws }, treeConfirm: null })),
+    style: MONO + ';display:flex;gap:8px;width:100%;text-align:left;padding:3px 0;min-height:26px;align-items:baseline', hover: 'background:var(--accent)',
+    title: t.initiative ? 'initiative read from the branch name (initiative/<id>) — not a recorded attribution' : 'show this tree’s sessions',
+    'data-r14': 'tree', 'data-ws': t.ws,
+  },
+    el('span', { style: MUTED }, ip(sel ? '▾' : '▸')),
+    el('span', { style: 'color:var(--foreground);flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap', title: t.branch || '(detached)' }, ip((t.main ? '⎇ ' : '⑂ ') + (t.branch || '(detached)'))),
+    el('span', { style: MUTED + ';flex:none' }, ip(live + ' live' + (sess.length > live ? ' · ' + (sess.length - live) + ' ended' : ''))),
+    t.initiative ? el('span', { style: MUTED }, ip('#' + t.initiative)) : null);
+  if (!sel) return head;
+  return el('div', null, head, el('div', { style: 'padding:2px 0 6px 14px', 'data-r14': 'tree-open' },
+    sess.length ? sess.map((s) => sessionRow(name, s)) : el('div', { style: MONO + ';' + MUTED + ';padding:2px 0' }, 'no sessions in this tree'),
+    el('div', { style: 'display:flex;gap:6px;padding-top:4px;flex-wrap:wrap' },
+      el('button', { onClick: () => startHere(name, t), style: BTN, hover: 'color:var(--foreground)', title: 'start a shell session in ' + (t.dir || 'this tree'), 'data-r14': 'tree-start' }, '＋ session here'),
+      t.main ? null : el('button', { onClick: () => removeTree(name, t), style: BTN, hover: 'color:var(--destructive)', title: 'remove this worktree folder (the branch is kept)', 'data-r14': 'tree-remove' }, 'remove folder'))));
+}
+
+/** `＋ session` on the repository: the pre-flight form (branch, agent, profile) on an initiative of THIS
+ * repository — the one selected, else the first on its board. A repository with no initiative has nothing
+ * to attach the form to, so the session starts in its main tree and the panel says so. */
+export function newSessionHere(name, trees) {
+  const slugs = (boardOf()[name] || []).flatMap((g) => g.slugs || []);
+  const slug = slugs.includes(state.sel) ? state.sel : slugs[0];
+  if (slug) { openNewSession(slug); return; }
+  const main = (trees || []).find((t) => t.main) || (trees || [])[0];
+  if (main) { note(name, 'no initiative here to attach the form to — started a shell in the main tree'); startHere(name, main); }
+}
+
+/** The trees of one repository, main first. `name` is the repository's name in the data layer. */
+export function treesBlock(name, trees, addable) {
+  return el('div', { style: 'padding:2px 14px 8px 39px', 'data-r1': 'trees', 'data-repo': name }, trees.map((t) => treeRow(name, t)),
+    addable ? el('button', { onClick: () => openBranchForm(name, trees), style: BTN + ';margin-top:4px', hover: 'color:var(--foreground)',
+      title: 'create a branch — with or without its own folder — without starting a session', 'data-r14': 'branch-add' }, '＋ branch') : null,
+    addable ? el('button', { onClick: () => newSessionHere(name, trees), style: BTN + ';margin-top:4px;margin-left:6px', hover: 'color:var(--foreground)',
+      title: 'start a session — choose the branch, the agent and the profile first', 'data-r15': 'session-add' }, '＋ session') : null);
+}
+
+/* ── ＋ branch ───────────────────────────────────────────────────────────────────────────────── */
+const INPUT = MONO + ';width:100%;padding:4px 6px;background:var(--secondary);border:1px solid var(--border);color:var(--foreground);min-height:26px';
+
+export function openBranchForm(name, trees) {
+  const main = (trees || []).find((t) => t.main) || (trees || [])[0];
+  setState({ branchForm: { repo: name, name: '', from: '', folder: true, busy: false, error: null, ws: main ? main.ws : null, current: main ? main.branch : null } });
+}
+
+async function submitBranch() {
+  const f = state.branchForm;
+  if (!f || f.busy || !dataMod) return;
+  const name = String(f.name || '').trim();
+  if (!name) { setState({ branchForm: { ...f, error: 'name the new branch' } }); return; }
+  setState({ branchForm: { ...f, busy: true, error: null } });
+  const out = await dataMod.createBranch({ ws: f.ws, name, from: String(f.from || '').trim() || null, worktree: f.folder });
+  if (!out || out.ok === false) { setState({ branchForm: { ...f, busy: false, error: (out && out.error) || 'the server refused, without saying why' } }); return; }
+  setState((s) => ({ branchForm: null, treesOpen: { ...(s.treesOpen || {}), [f.repo]: true }, treeSel: { ...(s.treeSel || {}), [f.repo]: out.ws }, treeNote: { name: f.repo, text: '“' + name + '” created' + (f.folder ? ' in its own folder — ' + out.dir : ' in the shared folder'), tone: null } }));
+  refresh();
+}
+
+/* The panel repaints on every state change, which replaces the input the PM is typing in. The value
+ * survives (it lives on the form record); the focus and caret are restored here so typing is not cut. */
+function keepFocus(f, which) {
+  return (n) => {
+    if ((f.focus || 'name') !== which) return;
+    setTimeout(() => { try { n.focus(); n.setSelectionRange(n.value.length, n.value.length); } catch { /* detached */ } }, 0);
+  };
+}
+
+/** The `＋ branch` form for the repository it was opened on, or null. */
+export function branchForm(name) {
+  const f = state.branchForm;
+  if (!f || f.repo !== name) return null;
+  const upd = (patch) => setState((s) => ({ branchForm: { ...s.branchForm, ...patch } }));
+  return el('div', { style: 'padding:6px 14px 10px 39px;display:grid;gap:5px', 'data-r14': 'branch-form' },
+    el('input', { value: f.name, placeholder: 'initiative/my-branch', style: INPUT, 'data-r14': 'branch-name',
+      ref: keepFocus(f, 'name'), onFocus: () => { f.focus = 'name'; },
+      onInput: (e) => { f.name = e.target.value; }, onKeydown: (e) => { if (e.key === 'Enter') submitBranch(); if (e.key === 'Escape') setState({ branchForm: null }); } }),
+    el('input', { value: f.from, placeholder: 'start from: ' + (f.current || 'the current branch') + ' (or another branch)', style: INPUT, 'data-r14': 'branch-from',
+      ref: keepFocus(f, 'from'), onFocus: () => { f.focus = 'from'; },
+      onInput: (e) => { f.from = e.target.value; }, onKeydown: (e) => { if (e.key === 'Enter') submitBranch(); } }),
+    el('button', { onClick: () => upd({ folder: !f.folder }), style: MONO + ';text-align:left;' + MUTED, hover: 'color:var(--foreground)', 'data-r14': 'branch-folder',
+      title: f.folder ? 'the branch gets its own folder; sessions already running are untouched' : 'the branch is checked out in the shared folder; refused while a session runs there' },
+    ip((f.folder ? '☑' : '☐') + ' its own folder (worktree)')),
+    f.error ? el('div', { style: 'font-size:11px;color:var(--destructive)', 'data-r14': 'branch-error' }, ip(f.error)) : null,
+    el('div', { style: 'display:flex;gap:6px' },
+      el('button', { onClick: submitBranch, disabled: f.busy ? 'disabled' : null, style: BTN, hover: 'color:var(--foreground)', 'data-r14': 'branch-create' }, f.busy ? 'creating…' : 'create branch'),
+      el('button', { onClick: () => setState({ branchForm: null }), style: BTN, hover: 'color:var(--foreground)' }, 'cancel')));
+}
+
+/** The outcome line of the last tree action for this repository. */
+export function treeNoteFor(name) {
+  const n = state.treeNote;
+  if (!n || n.name !== name) return null;
+  return el('div', { style: 'padding:4px 14px 8px 39px;font-size:11px;overflow-wrap:anywhere;color:' + (n.tone === 'bad' ? 'var(--destructive)' : 'var(--muted-foreground)'), 'data-r14': 'tree-note' }, ip(n.text));
+}

package/workspace/public/pm/state.js

@@ -151,7 +151,9 @@ const TAB_FIELDS = ['id', 'kind', 'title', 'slug', 'repo', 'sess', 'sessionId',
   // reading the branch-only file from ITS tree, not fall back to the main tree
   'ws', 'branch',
   // a web tab's address (overhaul-r5, D69) — restored, re-validated, and loaded only on a PM press
-  'url'];
+  'url',
+  // a skill tab's skill id — a reload reopens the same skill
+  'skillId'];
 const MAX_TABS = 40;
 
 function packTab(t) {
@@ -172,6 +174,9 @@ const isTabList = (v) =>
 const PERSIST = {
   theme: (v) => v === 'dark' || v === 'light',
   col0: isBool, col1: isBool, col2: isBool,
+  // the dragged widths of panels 1 and 2 (clamped again by app.js on the way out)
+  col0W: (v) => typeof v === 'number' && Number.isFinite(v) && v >= 100 && v <= 1200,
+  col1W: (v) => typeof v === 'number' && Number.isFinite(v) && v >= 100 && v <= 1200,
   settingsOpen: isBool,
   product: isSlug,
   sel: isSlug,

package/workspace/public/pm/tab-term.js

@@ -244,6 +244,9 @@ export function requestSpawn(opts) {
         name: o.name,
         agent: o.agent || 'shell',
         ws: o.ws,
+        // The initiative the session is FOR, when the caller knows it (workspace-branch-sessions R8):
+        // the `⋯ options` path used to drop it, so a session started with a branch carried none.
+        ...(o.initiative ? { initiative: o.initiative } : {}),
         /* Sent even when the PM chose nothing, and that is deliberate on two of them. `isolate` has
          * a server-side default (`server.js` liveSessionCount) whose own comment says the client
          * should state what the PM actually saw; `profile: null` is a DELIBERATE "no profile",
@@ -429,9 +432,12 @@ function handle(m) {
      * cache of the server's last word about a workspace, and a reader that is not open ignores it.
      * The `ws` is carried so a reader can tell whether the news is about the repository it is
      * asking about. */
-    setState({ branchInfo: { ...m, at: Date.now() } });
+    setState({ branchInfo: { ...m, at: Date.now() }, treesPush: Date.now() });
     return;
   }
+  /* A tree was registered, removed or renamed. Panel 1 re-reads the tree list on `treesPush`
+   * (panel-repos.js); without this the new folder appeared only after a reload. */
+  if (m.t === 'workspaces') { setState({ treesPush: Date.now() }); return; }
 }
 
 const recFor = (sessionId) => {

package/workspace/server.js

@@ -360,7 +360,7 @@ function loadWorkspaces() {
       if (!w || !w.root) continue;
       const root = path.resolve(w.root);
       if (!isDir(root)) continue;                       // a moved/deleted repo drops out quietly
-      workspaces.set(wsId(root), { id: wsId(root), name: w.name || path.basename(root), root, addedAt: w.addedAt || nowISO(), ...(w.label ? { label: String(w.label) } : {}) });
+      workspaces.set(wsId(root), { id: wsId(root), name: w.name || path.basename(root), root, addedAt: w.addedAt || nowISO(), ...(w.label ? { label: String(w.label) } : {}), ...(w.initials ? { initials: String(w.initials) } : {}) });
     }
   }
 }
@@ -588,7 +588,7 @@ function wsList() {
   return [...workspaces.values()].map((w) => {
     const rid = repoIdentity(w.root);
     return {
-      id: w.id, name: w.name, label: w.label || null, root: w.root, home: HOME_ENABLED && w.root === SELF_ROOT,
+      id: w.id, name: w.name, label: w.label || null, initials: w.initials || null, root: w.root, home: HOME_ENABLED && w.root === SELF_ROOT,
       shape: wsShape(w.root), addedAt: w.addedAt,
       sessions: [...sessions.values()].filter((s) => s.ws === w.id).length,
       // the repository this working tree belongs to, and the branch it is on. `branch_code`
@@ -3044,6 +3044,40 @@ function spawnWithBranch({ name, agent, cwd, ws, branch, createBranch, isolate,
   return { ok: true, session: s, notice: treeShare.joinNotices(notice, shared) };
 }
 
+// Create a branch WITHOUT starting a session (workspace-branch-sessions R5). Two shapes, as in the
+// spawn path: its own folder (a worktree, registered as a workspace so the page can start sessions in
+// it) or a checkout in the shared tree. The shared checkout moves every session in that tree, so it is
+// refused while any are running — the spawn path may do that on a PM's explicit choice, but a control
+// that only creates a branch must not move other people's work as a side effect.
+function createBranchOnly({ ws, name, from, worktree }) {
+  const w = ws ? workspaces.get(ws) : null;
+  if (!w) return { ok: false, error: 'no such workspace' };
+  if (!gitInfo.isRepo(w.root)) return { ok: false, error: `“${w.name}” is not a git repository` };
+  const branch = String(name == null ? '' : name).trim();
+  if (!branch) return { ok: false, error: 'name the new branch' };
+  if (worktree) {
+    const r = gitInfo.addWorktree(w.root, branch, { create: true, from });
+    if (!r.ok) return { ok: false, error: r.error };
+    const info = gitInfo.branchInfo(w.root);
+    const mirrored = info.ok && info.subdir ? path.join(r.dir, info.subdir) : r.dir;
+    const dir = isDir(mirrored) ? mirrored : r.dir;
+    const nw = registerWorkspace(dir, `${w.name} ⑂ ${branch}`);
+    if (!nw) return { ok: false, error: `worktree created at ${r.dir} but could not be registered as a workspace` };
+    broadcast({ t: 'branch', ws: nw.id, ...gitInfo.branchInfo(nw.root) });
+    pushWorkspaces();
+    return { ok: true, ws: nw.id, dir: r.dir, branch };
+  }
+  const live = treeTenants(treeForWs(w.id), null).length;
+  if (live > 0) {
+    return { ok: false, error: `${live} session${live === 1 ? ' is' : 's are'} running in this folder, and a checkout would move ${live === 1 ? 'it' : 'them'} — create the branch in its own folder instead` };
+  }
+  const r = gitInfo.checkout(w.root, branch, { create: true, from });
+  if (!r.ok) return { ok: false, error: r.error };
+  broadcast({ t: 'branch', ws: w.id, ...gitInfo.branchInfo(w.root) });
+  pushWorkspaces();
+  return { ok: true, ws: w.id, dir: w.root, branch };
+}
+
 /* ── workspace-repo-first · start work in one click (PRD R1 · R3) ───────────────────────────────
  * The composer asked six questions to open a terminal, and the one question the PM actually has —
  * "which initiative am I working on?" — was not among them. It asked for a BRANCH instead, plus an
@@ -4287,8 +4321,36 @@ async function handleRequest(req, res) {
     if (!name) return json(res, { ok: false, error: 'a name is required' }, 400);
     // `label` is the PM's name for the REPOSITORY. The client names a product after its folder
     // (`repo_name`), so changing `name` alone would never show; `label` wins over both.
-    w.label = name; saveWorkspaces(); pushWorkspaces();
-    return json(res, { ok: true, workspace: { id: w.id, name, label: name } });
+    w.label = name;
+    // The rail's abbreviation. Optional: undefined leaves it alone, '' clears it back to the derived initials.
+    if (body.initials !== undefined) {
+      const ini = String(body.initials || '').replace(/[^A-Za-z0-9]/g, '').slice(0, 3).toUpperCase();
+      if (String(body.initials || '').trim() && !ini) return json(res, { ok: false, error: 'the abbreviation takes letters and digits, up to three' }, 400);
+      if (ini) w.initials = ini; else delete w.initials;
+    }
+    saveWorkspaces(); pushWorkspaces();
+    return json(res, { ok: true, workspace: { id: w.id, name, label: name, initials: w.initials || null } });
+  }
+  if (p === '/api/git/branch' && req.method === 'POST') {
+    let body = {};
+    try { body = JSON.parse((await readBody(req)) || '{}'); } catch { return json(res, { ok: false, error: 'invalid JSON body' }, 400); }
+    const out = createBranchOnly({ ws: body.ws, name: body.name, from: body.from || null, worktree: body.worktree !== false });
+    return json(res, out, out.ok ? 200 : 400);
+  }
+  // End a session and remove it, with an answer. The WebSocket kill/remove messages return nothing,
+  // so a refusal or a slow exit left the PM clicking a control that seemed to do nothing.
+  if (p === '/api/session/remove' && req.method === 'POST') {
+    let body = {};
+    try { body = JSON.parse((await readBody(req)) || '{}'); } catch { return json(res, { ok: false, error: 'invalid JSON body' }, 400); }
+    const sess = sessions.get(String(body.id || ''));
+    if (!sess) return json(res, { ok: false, error: 'no such session' }, 404);
+    if (sess.pty) {
+      if (sess.tmux) tmuxKillSession(sess.tmux);
+      try { sess.pty.kill(); } catch {}
+      for (let i = 0; i < 30 && sess.pty; i++) await new Promise((r) => setTimeout(r, 100));
+      if (sess.pty) return json(res, { ok: true, removed: false, note: 'asked it to end; it has not exited yet — press again to remove it' });
+    }
+    return json(res, { ok: removeSession(sess.id), removed: true });
   }
   if (p === '/api/git/worktrees/remove' && req.method === 'POST') {
     // Reclaim a worktree's folder. `dir` comes from a client, so it is checked against git's own
@@ -4308,9 +4370,13 @@ async function handleRequest(req, res) {
     // the workspace entry goes with the folder; forgetWorkspace never touches a repo, and it
     // refuses while sessions remain, so a race here fails closed rather than orphaning scrollback
     const owner = [...workspaces.values()].find((x) => path.resolve(x.root) === path.resolve(row.dir));
-    if (owner) forgetWorkspace(owner.id);
+    // forgetWorkspace refuses while ANY session (ended ones included) still names the row. Say so: the folder
+    // is gone, and the row stays until those ended sessions are removed — it used to stay without a word.
+    const forgotten = owner ? forgetWorkspace(owner.id) : true;
+    const blocker = owner && !forgotten ? forgetBlocker(owner.id) : null;
     broadcast({ t: 'branch', ws: w.id, ...gitInfo.branchInfo(w.root) });
-    return json(res, { ok: true, dir: r.dir, pruned: !!r.pruned });
+    return json(res, { ok: true, dir: r.dir, pruned: !!r.pruned, row_kept: !!blocker,
+      note: blocker ? `the folder is removed; the repository row stays until its ended session${blocker.sessions.length === 1 ? '' : 's'} (${blocker.sessions.join(', ')}) ${blocker.sessions.length === 1 ? 'is' : 'are'} removed` : null });
   }
   if (p === '/api/pick-folder' && req.method === 'POST') {
     let body = {};
@@ -5082,7 +5148,40 @@ async function handleRequest(req, res) {
       homeDir: os.homedir(),
     });
     // Discriminated READ results stay 200 — the body carries the reason, the transport code cannot.
-    return json(res, { ws: w ? w.id : null, ...out });
+    let lanes = null;
+    try { if (typeof engine.engine.lanesFor === 'function') lanes = engine.engine.lanesFor(root); } catch { lanes = null; }
+    return json(res, { ws: w ? w.id : null, ...out, lanes });
+  }
+  if (p === '/api/initiative/lane' && req.method === 'POST') {
+    /* Change an existing initiative's lane — the PM's word. The ladder is DERIVED from `lane:` (workflow-state.js),
+     * so this edits that one frontmatter line and nothing else; the next read re-derives the rungs. It never
+     * touches `flow:` (a label the engine ignores), the PRD, the rubric or any run. An unknown lane is refused
+     * and nothing is written. */
+    let body = {}; try { body = JSON.parse((await readBody(req)) || '{}'); } catch { return json(res, { ok: false, error: 'invalid JSON body' }, 400); }
+    const w = getWs(body.ws);
+    const root = w ? w.root : SELF_ROOT;
+    const id = String(body.id || '');
+    if (!fourPanel.validId(id)) return json(res, { ok: false, error: 'an initiative id is required, and it must be a record name' }, 400);
+    const engine = consoleState.loadEngine();
+    if (!engine.ok || typeof engine.engine.lanesFor !== 'function') return json(res, { ok: false, error: 'the workflow engine is not available here' }, 500);
+    const allowed = engine.engine.lanesFor(root).lanes;
+    const lane = String(body.lane || '').trim();
+    if (!allowed.includes(lane)) return json(res, { ok: false, error: `“${lane || '(none)'}” is not a lane of this repository — one of: ${allowed.join(', ')}` }, 400);
+    const file = path.join(engine.engine.layout(root).initiatives, `${id}.md`);
+    let text; try { text = fs.readFileSync(file, 'utf8'); } catch { return json(res, { ok: false, error: `no initiative record for ${id}` }, 404); }
+    const m = /^---\r?\n([\s\S]*?)\r?\n---(\r?\n|$)/.exec(text);
+    if (!m) return json(res, { ok: false, error: 'the record has no frontmatter block to edit — nothing was changed' }, 409);
+    const fmLines = m[1].split(/\r?\n/);
+    const at = fmLines.findIndex((l) => /^lane\s*:/.test(l));
+    const before = at >= 0 ? fmLines[at].replace(/^lane\s*:\s*/, '').replace(/^["']|["']$/g, '').trim() : null;
+    if (before === lane) return json(res, { ok: true, id, lane, previous: before, changed: false });
+    if (at >= 0) fmLines[at] = `lane: ${lane}`;
+    else { const idAt = fmLines.findIndex((l) => /^id\s*:/.test(l)); fmLines.splice(idAt >= 0 ? idAt + 1 : fmLines.length, 0, `lane: ${lane}`); }
+    const next = text.slice(0, m.index) + '---\n' + fmLines.join('\n') + '\n---' + text.slice(m.index + m[0].length - (m[2] === '' ? 0 : m[2].length));
+    try { fs.writeFileSync(file + '.tmp', next); fs.renameSync(file + '.tmp', file); }
+    catch (e) { return json(res, { ok: false, error: 'could not write the record — ' + String((e && e.message) || e).slice(0, 120) }, 500); }
+    boardCache.invalidate(root);
+    return json(res, { ok: true, id, lane, previous: before, changed: true });
   }
   if (p === '/api/session/initiative' && req.method === 'POST') {
     /* Bind a RUNNING session to an initiative — the PM's own word about work already in flight
@@ -5198,6 +5297,23 @@ async function handleRequest(req, res) {
   // search scrubs secrets out of text an agent typed, and the file search reports a walk bound.
   // Collapsing them into one payload would mean one of the two lying about what it looked at.
   if (p === '/api/portfolio' && req.method === 'GET') return json(res, portfolio());
+  if (p === '/api/portfolio/init' && req.method === 'POST') {
+    // The PM presses "make this repository the hub": write a starter portfolio.yaml there. Never guessed — the
+    // PM names the repository, an existing hub is never overwritten, and only a registered repository qualifies.
+    let body = {}; try { body = JSON.parse((await readBody(req)) || '{}'); } catch { return json(res, { ok: false, error: 'invalid JSON body' }, 400); }
+    const leads = repoLeads();
+    if (portfolioHub(leads)) return json(res, { ok: false, reason: 'has-hub', error: 'a hub already exists — edit its portfolio.yaml instead' }, 409);
+    const lead = leads.find((r) => r.ws === body.ws || r.ids.has(body.ws));
+    if (!lead) return json(res, { ok: false, reason: 'unknown', error: 'that repository is not registered' }, 400);
+    if (!isDir(lead.root)) return json(res, { ok: false, error: 'the repository folder is missing' }, 400);
+    const file = path.join(lead.root, 'portfolio.yaml');
+    const lines = ['# The portfolio hub (D-3): this repository holds the weekly / OKR / query reports.',
+      '# `repos:` maps each registered repository to its domain — edit the domains to match how you group your work.',
+      'repos:', ...leads.map((r) => `  ${r.name.replace(/[:"'\n]/g, '')}: general`), ''];
+    try { fs.writeFileSync(file, lines.join('\n'), { flag: 'wx' }); }
+    catch (e) { return json(res, { ok: false, error: 'could not write portfolio.yaml — ' + String((e && e.message) || e).slice(0, 120) }, 500); }
+    return json(res, { ok: true, hub: lead.name, ws: lead.ws, path: 'portfolio.yaml', repos: leads.length });
+  }
   if (p === '/api/reports' && req.method === 'POST') {
     let body = {};
     try { body = JSON.parse((await readBody(req)) || '{}'); } catch { return json(res, { ok: false, error: 'invalid JSON body' }, 400); }
@@ -5332,7 +5448,23 @@ async function handleRequest(req, res) {
     const c = memoryLib.core();
     if (!c.ok) return json(res, { ok: false, error: c.error });
     const cur = c.core.load(w.root);
-    return json(res, { ok: true, ws: w.id, name: w.name, entries: cur.state.entries, pending: cur.state.pending, blocked: cur.state.blocked,
+    // Entries recorded in the repository's OTHER working trees. The ledger lives in each checkout, so a fact an
+    // agent saved on an initiative branch is invisible here until that branch merges (merge=union). Listed, read
+    // only, and never copied into this ledger: the tool is the only writer (D72).
+    const here = new Set(cur.state.entries.map((e) => e.target + '\u0000' + e.text));
+    const elsewhere = [];
+    try {
+      for (const t of (worktreeReport(w).worktrees || [])) {
+        if (path.resolve(t.dir) === path.resolve(w.root)) continue;
+        for (const e of c.core.load(t.dir).state.entries) {
+          const k = e.target + '\u0000' + e.text;
+          if (here.has(k)) continue;
+          here.add(k);
+          elsewhere.push({ ...e, branch: t.branch || null, dir: t.dir });
+        }
+      }
+    } catch { /* an unreadable tree is simply not listed */ }
+    return json(res, { ok: true, ws: w.id, name: w.name, entries: cur.state.entries, elsewhere, pending: cur.state.pending, blocked: cur.state.blocked,
       usage: cur.usage, torn: cur.torn, config: { write_approval: !!cur.cfg.write_approval }, wired: memoryLib.wired(w.root),
       has_state_dir: !!c.core.stateDir(w.root, false) });
   }