create-pmos 0.43.0 → 0.44.0

package/payload/scripts/pmos-log.sh

@@ -3,18 +3,29 @@
 # Appends ONE validated JSON line to the right pmos/state/ file. Mirrors the hosted rules:
 # verdict enum (save_eval), pm_label enum (record_acceptance), disposition enum + the D57
 # evidence-required-for-terminal rule (record_outcome_check). Append-only by construction — this
-# script only ever `>>`s; a correction is a NEW record. No dependencies beyond POSIX + python3
+# script only ever appends; a correction is a NEW record. Parity with PMOS's own writers
+# (pmos-cockpit-mod, D81): an acceptance needs a note and a run that exists, and a ledger that is a
+# symlink or has another hard link is refused (the same rule as scripts/lib/sink.js, applied at the
+# moment of the write; it does not defend against a process racing the open). No dependencies beyond POSIX + python3
 # (used solely for safe JSON string escaping).
 #
 #   pmos-log.sh run      <run_id> <initiative_id> [human_corrections] [model]
 #   pmos-log.sh eval     <run_id> <initiative_id> <score 0..1> <PASS|PASS-WITH-FINDINGS|FAIL> <rubric_path> [evaluator_model]
-#   pmos-log.sh accept   <run_id> <initiative_id> <pass|fail> [note]
+#   pmos-log.sh accept   <run_id> <initiative_id> <pass|fail> <note>
 #   pmos-log.sh outcome  <initiative_id> <validated|refuted|inconclusive> [evidence]
 #   pmos-log.sh friction <note...>
+#   pmos-log.sh grant    <merge:<PR or branch>|publish:<artifact>> <pm> <instruction> [ttl_minutes]
+#   pmos-log.sh grant-use <grant_id> <action>
+#
+# `grant` and `grant-use` belong to the cockpit mod (D81). A grant is the PM's typed permission for
+# ONE action: single use, 120 minutes unless a shorter time is given (24 hours at most), one target. A
+# standing scope (docs-sync, outward:*) and any other scope is refused. The mod mints a grant only from
+# the PM's typed /pmos-grant or a press, and denies a model that runs either subcommand.
+# PMOS_STATE_DIR names the folder of the ledgers when it is not <kit>/state (PMOS's own repository).
 set -euo pipefail
 
 KIT="${KIT_ROOT:-$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)}"
-STATE="$KIT/state"
+STATE="${PMOS_STATE_DIR:-$KIT/state}"
 fail() { echo "pmos-log: ERROR — $*" >&2; exit 1; }
 [ -d "$STATE" ] || fail "state dir not found at $STATE (run from a vendored kit, or set KIT_ROOT)."
 
@@ -24,8 +35,54 @@ nonempty() { # nonempty <label> <value> — ids must not be blank (hosted tools
 }
 today="$(date -u +%Y-%m-%d)"
 
+# safe_append <file under state/> <line> — open with O_NOFOLLOW, then refuse anything that is not a
+# regular file with a single link, and write to the descriptor that was vetted (python3 is already a
+# dependency of this script). Nothing is written when it refuses.
+safe_append() {
+  python3 - "$STATE/$1" "$2" <<'PY' || exit 1
+import os, stat, sys
+path, line = sys.argv[1], sys.argv[2]
+flags = os.O_WRONLY | os.O_APPEND | os.O_CREAT | getattr(os, "O_NOFOLLOW", 0) | getattr(os, "O_NONBLOCK", 0)
+try:
+    fd = os.open(path, flags, 0o644)
+except OSError as e:
+    sys.stderr.write("pmos-log: ERROR — refusing to write %s: %s\n" % (path, e.strerror)); sys.exit(1)
+try:
+    st = os.fstat(fd)
+    if not stat.S_ISREG(st.st_mode) or st.st_nlink != 1:
+        sys.stderr.write("pmos-log: ERROR — refusing to write %s: it is not a regular file with a single link (a symlink, a hard link or a special file).\n" % path); sys.exit(1)
+    os.write(fd, (line + "\n").encode("utf-8"))
+finally:
+    os.close(fd)
+PY
+}
+
+# run_exists <run_id> — true when state/runs.jsonl holds a run with that id. Lines that are not JSON
+# are skipped; the checkers report them.
+run_exists() {
+  python3 - "$STATE/runs.jsonl" "$1" <<'PY'
+import json, sys
+path, rid = sys.argv[1], sys.argv[2]
+try:
+    lines = open(path, encoding="utf-8").read().splitlines()
+except OSError:
+    sys.exit(1)
+for l in lines:
+    l = l.strip()
+    if not l:
+        continue
+    try:
+        r = json.loads(l)
+    except ValueError:
+        continue
+    if isinstance(r, dict) and str(r.get("run_id", "")) == rid:
+        sys.exit(0)
+sys.exit(1)
+PY
+}
+
 append() { # append <file> <json-line>
-  printf '%s\n' "$2" >> "$STATE/$1"
+  safe_append "$1" "$2"
   echo "✅ appended to state/$1:"
   echo "   $2"
 }
@@ -86,9 +143,11 @@ case "$cmd" in
     append evals.jsonl "{\"run_id\":$(js "$1"),\"initiative_id\":$(js "$2"),\"score\":$score,\"verdict\":$(js "$4"),\"rubric_path\":$(js "$5"),\"date\":\"$today\"$emodel_field}"
     ;;
   accept)
-    [ $# -ge 3 ] || fail "usage: accept <run_id> <initiative_id> <pass|fail> [note]"
+    [ $# -ge 4 ] || fail "usage: accept <run_id> <initiative_id> <pass|fail> <note> — the note is required: an acceptance with no reasoning is the rubber stamp D12 exists to prevent."
     nonempty run_id "$1"; nonempty initiative_id "$2"
     case "$3" in pass|fail) ;; *) fail "pm_label must be pass | fail, got '$3'." ;; esac
+    nonempty note "$4"
+    run_exists "$1" || fail "run_id '$1' is not in state/runs.jsonl — log the run first (pmos-log.sh run ...), then accept it."
     acc=true; [ "$3" = fail ] && acc=false
     append acceptances.jsonl "{\"run_id\":$(js "$1"),\"initiative_id\":$(js "$2"),\"accepted\":$acc,\"pm_label\":$(js "$3"),\"note\":$(js "${4:-}"),\"date\":\"$today\"}"
     ;;
@@ -104,10 +163,63 @@ case "$cmd" in
     ;;
   friction)
     [ $# -ge 1 ] || fail "usage: friction <note...>"
-    printf -- '- %s %s #friction\n' "$today" "$*" >> "$STATE/discoveries.md"
+    safe_append discoveries.md "- $today $* #friction"
     echo "✅ appended to state/discoveries.md: - $today $* #friction"
     ;;
+  grant)
+    [ $# -ge 3 ] || fail "usage: grant <merge:<PR or branch>|publish:<artifact>> <pm> <instruction> [ttl_minutes]"
+    nonempty pm "$2"; nonempty instruction "$3"
+    row="$(python3 - "$1" "$2" "$3" "${4:-120}" <<'PY'
+import datetime, json, re, secrets, sys
+scope, pm, instruction, ttl = sys.argv[1:5]
+def die(m):
+    sys.stderr.write("pmos-log: ERROR — %s\n" % m); sys.exit(1)
+if re.match(r"^(docs-sync|outward)(:|$)", scope):
+    die('"%s" is a standing scope. Standing grants are not allowed in this release (D81). Mint one single-use grant per action.' % scope)
+kind, sep, target = scope.partition(":")
+if not sep or kind not in ("merge", "publish"):
+    die('unknown scope "%s". Use merge:<PR number or branch> or publish:<artifact>.' % scope)
+pat = r"^(?:[0-9]{1,9}|[A-Za-z0-9][A-Za-z0-9._/-]{0,79})$" if kind == "merge" else r"^[A-Za-z0-9@][A-Za-z0-9@._/-]{0,99}$"
+if not re.match(pat, target) or "*" in target or ".." in target:
+    die('"%s" is not a single %s. A grant names one target; a wildcard is refused.' % (target, "PR number or branch name" if kind == "merge" else "artifact name"))
+if not re.match(r"^[0-9]{1,4}$", ttl) or not (1 <= int(ttl) <= 1440):
+    die("ttl_minutes must be a whole number from 1 to 1440, got '%s'." % ttl)
+now = datetime.datetime.now(datetime.timezone.utc).replace(microsecond=0)
+fmt = lambda d: d.strftime("%Y-%m-%dT%H:%M:%SZ")
+print(json.dumps({"type": "grant", "id": "g-%d-%s" % (int(now.timestamp()), secrets.token_hex(3)), "scope": kind, "target": target,
+                  "pm": pm, "at": fmt(now), "expires_at": fmt(now + datetime.timedelta(minutes=int(ttl))), "uses": 1, "instruction": instruction}, separators=(",", ":")))
+PY
+)" || exit 1
+    append grants.jsonl "$row"
+    ;;
+  grant-use)
+    [ $# -ge 2 ] || fail "usage: grant-use <grant_id> <action>"
+    nonempty grant_id "$1"; nonempty action "$2"
+    python3 - "$STATE/grants.jsonl" "$1" <<'PY' || exit 1
+import json, sys
+path, gid = sys.argv[1], sys.argv[2]
+found = used = False
+try:
+    lines = open(path, encoding="utf-8").read().splitlines()
+except OSError:
+    lines = []
+for l in lines:
+    try:
+        r = json.loads(l)
+    except ValueError:
+        continue
+    if isinstance(r, dict) and r.get("type") == "grant" and r.get("id") == gid:
+        found = True
+    if isinstance(r, dict) and r.get("type") == "use" and r.get("grant_id") == gid:
+        used = True
+if not found:
+    sys.stderr.write("pmos-log: ERROR — grant_id '%s' is not in state/grants.jsonl.\n" % gid); sys.exit(1)
+if used:
+    sys.stderr.write("pmos-log: ERROR — grant '%s' was already used. A grant is single use.\n" % gid); sys.exit(1)
+PY
+    append grants.jsonl "{\"type\":\"use\",\"grant_id\":$(js "$1"),\"at\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"action\":$(js "$2")}"
+    ;;
   *)
-    fail "unknown command '${cmd:-}' — one of: run | eval | accept | outcome | friction (see AGENTS-HUMAN.md)."
+    fail "unknown command '${cmd:-}' — one of: run | eval | accept | outcome | friction | grant | grant-use (see AGENTS-HUMAN.md)."
     ;;
 esac

package/payload/skills/pmos-router.skill

@@ -26,7 +26,7 @@ router is the bug (fix it via the weekly harness scan).
 1. **Sharpness (the fog/ticket test):** *can the PM state the question or idea precisely now — not
    answer it, state it?* If not, it is **fog**: not ready for intake. Name what would sharpen it
    (a conversation, a datum, a spike) and stop — do not open an initiative to hold fog.
-2. **Prior rejection:** check [planning/out-of-scope/](/README.md) for the
+2. **Prior rejection:** check [planning/out-of-scope/](/planning/out-of-scope/README.md) for the
    concept. If a file exists, **read it first** and surface it to the PM — the concept returns only
    if the PM overrides the recorded reasoning, and the file is updated either way.
 3. **The specimen test — ASK it, do not wait to be told** (D60 as amended 2026-07-24):

package/payload/skills/prototype.skill

@@ -131,7 +131,7 @@ system, a convention set, or a prototype to validate an idea.
      work has a surface, then runs inside that initiative's Build.
    - **iterate** → back to step 5 with the PM's reaction folded in.
    - **kill** → record one honest line on the initiative, **file the concept into
-     [planning/out-of-scope/](/README.md)** (decision, reasoning, what would
+     [planning/out-of-scope/](/planning/out-of-scope/README.md)** (decision, reasoning, what would
      reopen it) so it is not re-prototyped from scratch, and close. A cheap kill is this lane
      *succeeding*.
 8. **Log.** `log_agent_run` with the disposition; friction to discoveries.md (`#friction`).

package/payload/skills/strategic-brief.skill

@@ -49,7 +49,7 @@ volume where informal prioritization strains) are now met.
 
 - `planning/briefs/<initiative-id>-brief.md` — operational instance, never in the OKF bundle.
 - An accepted brief becomes the PRD's parent rationale (the PRD links it). A **no-go** files the
-  concept into [planning/out-of-scope/](/README.md) so it is not re-litigated.
+  concept into [planning/out-of-scope/](/planning/out-of-scope/README.md) so it is not re-litigated.
 
 ## Level 3 sub-cases
 

package/payload/skills-native/harness-refine/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: harness-refine
-description: >
+description: "Turn PMOS's own run evidence into concrete, evidence-cited edits to the harness. Read the eval defects, recurring friction, run transcripts, and the calibration log; cluster them into specific proposed edits \u2014 each mapped to ONE artifact (an MCP tool description, a skill body, an OKF concept, or an AGENTS.md heuristic) and citing the run/friction/eval that motivates it \u2014 including prunes of scaffolding the model now handles natively. Emit a proposals report and open a PR for the PM. Use on demand: when the PM invokes it, at the D23 quarterly harness review, or when v_friction_recurrence / recurring eval defects show a harness gap. Never merges, never self-approves, never auto-applies."
 license: MIT
 metadata:
   pmos-maturity_mode: active

package/payload/skills-native/pmos-router/SKILL.md

@@ -28,7 +28,7 @@ router is the bug (fix it via the weekly harness scan).
 1. **Sharpness (the fog/ticket test):** *can the PM state the question or idea precisely now — not
    answer it, state it?* If not, it is **fog**: not ready for intake. Name what would sharpen it
    (a conversation, a datum, a spike) and stop — do not open an initiative to hold fog.
-2. **Prior rejection:** check [planning/out-of-scope/](/README.md) for the
+2. **Prior rejection:** check [planning/out-of-scope/](/planning/out-of-scope/README.md) for the
    concept. If a file exists, **read it first** and surface it to the PM — the concept returns only
    if the PM overrides the recorded reasoning, and the file is updated either way.
 3. **The specimen test — ASK it, do not wait to be told** (D60 as amended 2026-07-24):

package/payload/skills-native/prototype/SKILL.md

@@ -133,7 +133,7 @@ system, a convention set, or a prototype to validate an idea.
      work has a surface, then runs inside that initiative's Build.
    - **iterate** → back to step 5 with the PM's reaction folded in.
    - **kill** → record one honest line on the initiative, **file the concept into
-     [planning/out-of-scope/](/README.md)** (decision, reasoning, what would
+     [planning/out-of-scope/](/planning/out-of-scope/README.md)** (decision, reasoning, what would
      reopen it) so it is not re-prototyped from scratch, and close. A cheap kill is this lane
      *succeeding*.
 8. **Log.** `log_agent_run` with the disposition; friction to discoveries.md (`#friction`).

package/payload/skills-native/strategic-brief/SKILL.md

@@ -51,7 +51,7 @@ volume where informal prioritization strains) are now met.
 
 - `planning/briefs/<initiative-id>-brief.md` — operational instance, never in the OKF bundle.
 - An accepted brief becomes the PRD's parent rationale (the PRD links it). A **no-go** files the
-  concept into [planning/out-of-scope/](/README.md) so it is not re-litigated.
+  concept into [planning/out-of-scope/](/planning/out-of-scope/README.md) so it is not re-litigated.
 
 ## Level 3 sub-cases
 

package/payload/state/discoveries.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Discoveries and friction log"
 description: "Append-only record of what runs discovered and where the process rubbed."
-generated: {by: process:create-pmos, at: "2026-10-04T02:41:17Z"}
+generated: {by: process:create-pmos, at: "2026-10-04T08:22:32Z"}
 status: stable
 ---
 

package/workspace/package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "pmos-workspace",
-  "version": "0.43.0",
+  "version": "0.44.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {

package/workspace/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pmos-workspace",
-  "version": "0.43.0",
+  "version": "0.44.0",
   "private": true,
   "description": "PMOS Terminal Workspace — local companion hosting real PTYs beside the library and gates (D62)",
   "license": "MIT",