create-pmos 0.498.0 → 0.499.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-pmos",
-  "version": "0.498.0",
+  "version": "0.499.0",
   "description": "Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with all state as git-versioned files. Includes `workflow-sweep`, which audits the state every board derives from and separates real defects from work you simply have not done. `create-pmos workspace` also installs + launches the local Terminal Workspace GUI. No database, no network, no telemetry.",
   "license": "MIT",
   "bin": {
@@ -32,6 +32,31 @@
     "audit"
   ],
   "pmosChanges": [
+    {
+      "v": "0.499.0",
+      "at": "2026-11-03T03:25:28.533Z",
+      "f": 3,
+      "prs": [
+        {
+          "n": 1180,
+          "t": "The context meter knows the default model is 1M",
+          "s": "The context meter knows the default model is 1M",
+          "k": "fix"
+        },
+        {
+          "n": 1181,
+          "t": "`pmos initiative list` names records on a document lane",
+          "s": "Pmos initiative list names records on a document lane",
+          "k": "fix"
+        },
+        {
+          "n": 1182,
+          "t": "Claude login test passes for a signed-in new user; picker shows each login once",
+          "s": "Claude login test passes for a signed-in new user; picker shows each login once",
+          "k": "fix"
+        }
+      ]
+    },
     {
       "v": "0.498.0",
       "at": "2026-11-03T02:50:09.805Z",
@@ -397,18 +422,6 @@
           "k": "fix"
         }
       ]
-    },
-    {
-      "v": "0.479.0",
-      "at": "2026-11-01T10:19:06.142Z",
-      "f": 3,
-      "prs": [
-        {
-          "n": 1137,
-          "t": "Batch 21: feedback fixes (held for one merge)",
-          "s": "Batch 21: feedback fixes (held for one merge)"
-        }
-      ]
     }
   ]
 }

package/payload/KIT-VERSION

@@ -1,3 +1,3 @@
-kernel-source: pmos@1a05518b
+kernel-source: pmos@02cdbcfc
 assembled: 2026-11-03
 mode: vendor

package/payload/planning/evals/eval-calibration.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Eval calibration log"
 description: "Append-only record of every PM override of an evaluator verdict."
-generated: {by: process:create-pmos, at: "2026-11-03T02:50:05Z"}
+generated: {by: process:create-pmos, at: "2026-11-03T03:25:24Z"}
 status: stable
 ---
 

package/payload/planning/okrs/health-budgets.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Health budgets"
 description: "Closed registry of health-budget anchors (D59), edited only by the PM."
-generated: {by: process:create-pmos, at: "2026-11-03T02:50:05Z"}
+generated: {by: process:create-pmos, at: "2026-11-03T03:25:24Z"}
 status: stable
 ---
 

package/payload/state/discoveries.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Discoveries and friction log"
 description: "Append-only record of what runs discovered and where the process rubbed."
-generated: {by: process:create-pmos, at: "2026-11-03T02:50:05Z"}
+generated: {by: process:create-pmos, at: "2026-11-03T03:25:24Z"}
 status: stable
 ---
 

package/workspace/changelog.json

@@ -1,4 +1,29 @@
 [
+ {
+  "v": "0.499.0",
+  "at": "2026-11-03T03:25:28.533Z",
+  "f": 3,
+  "prs": [
+   {
+    "n": 1180,
+    "t": "The context meter knows the default model is 1M",
+    "s": "The context meter knows the default model is 1M",
+    "k": "fix"
+   },
+   {
+    "n": 1181,
+    "t": "`pmos initiative list` names records on a document lane",
+    "s": "Pmos initiative list names records on a document lane",
+    "k": "fix"
+   },
+   {
+    "n": 1182,
+    "t": "Claude login test passes for a signed-in new user; picker shows each login once",
+    "s": "Claude login test passes for a signed-in new user; picker shows each login once",
+    "k": "fix"
+   }
+  ]
+ },
  {
   "v": "0.498.0",
   "at": "2026-11-03T02:50:09.805Z",

package/workspace/guide/claude-proposes.md

@@ -53,7 +53,7 @@ Press the ✦ to open "Claude proposes" in the Viewer. The groups come in this o
 
 In the pill menu on an initiative's row, a session that is idle and safe to close is light blue. Its line starts with ✦ and says why, and its ✓ closes it. An idle session that is not safe has no ✦ and no ✓. Its line says what holds it, such as "3 files not committed".
 
-Each session shows how full its context window is, as a small pie in the pill list, the chat header, the phone top bar and the Live pill. The pie shows from 50% (grey). It turns amber from 70% and red from 90%. Hover it to see the tokens used, such as "156k of 200k used · last turn 10:12". The window is 1M when the session runs a 1M model, else 200k. From 70%, when it is your turn, Claude proposes Compact: the row's ✦ line says so, and its ✓ types /compact into the session. The chat shows the same offer as a chip. A session that is safe to close shows that ✦ instead. ✕ hides the Compact offer until the context is 10 points fuller.
+Each session shows how full its context window is, as a small pie in the pill list, the chat header, the phone top bar and the Live pill. The pie shows from 50% (grey). It turns amber from 70% and red from 90%. Hover it to see the tokens used, such as "156k of 200k used · last turn 10:12". The window is 1M when the session runs a 1M model, else 200k. Claude Code's default model, Opus 5.5, is a 1M model, so a session you start without choosing a model has a 1M window. If CLAUDE_CODE_DISABLE_1M_CONTEXT is set, the window is 200k. From 70%, when it is your turn, Claude proposes Compact: the row's ✦ line says so, and its ✓ types /compact into the session. The chat shows the same offer as a chip. A session that is safe to close shows that ✦ instead. ✕ hides the Compact offer until the context is 10 points fuller.
 
 ✓ in the header keeps everything shown. Each proposal has its own ✓ and ✕, and ⌄ shows its rows. ✕ on a row leaves it out of that group for good, with Undo on the row. One toast says what was placed, with Undo. History lists each approval with its own Undo. An initiative that was started stays when you undo: close it on the Board.
 

package/workspace/guide/home.md

@@ -182,7 +182,7 @@ There is no My work page. The list on Home is your list:
 - **One chat box.** Every conversation has the same box: **+** (attach a file, notes, the terminal, and **Link to an initiative** for a loose chat), **/** for commands, **@** inside an initiative, the To or In chip, the mic, and Send. A chat opens at its newest message.
 - **A session's terminal.** **Watch its terminal** in **+**, or a session row such as **Claude sign-in**, opens the session's terminal in the Viewer. While the session runs, it is a real terminal: type in it to answer Claude or paste a code. When the session has ended, the Viewer shows it read only and says so.
 - **Setting up your first project opens by itself** until a registered folder holds an initiative or setup has finished. The `PMOS` folder that the one-line installer makes holds no initiative yet, so a new user who opens PMOS from the Start menu or the Dock still gets the setup conversation, not an empty Home.
-- **Signing in to Claude when you set up your first project.** If the login you choose is signed in already, PMOS does not open a terminal. It tests the login at once. Otherwise PMOS runs `claude auth login`: Claude opens your browser to sign in, and the terminal under the question shows only Claude's request for a code, if it needs one. Claude's theme and trust-this-folder screens do not appear. When the sign-in ends, PMOS tests the login by itself. **The Claude login on this computer** is the login your usual terminal uses (`~/.claude.json`); PMOS no longer points it at a different file.
+- **Signing in to Claude when you set up your first project.** If the login you choose is signed in already, PMOS does not open a terminal. It tests the login at once. Otherwise PMOS runs `claude auth login`: Claude opens your browser to sign in, and the terminal under the question shows only Claude's request for a code, if it needs one. Claude's theme and trust-this-folder screens do not appear. When the sign-in ends, PMOS tests the login by itself. **The Claude login on this computer** is the login your usual terminal uses (`~/.claude.json`); PMOS no longer points it at a different file. You choose between two logins only: **The Claude login on this computer** and **A separate login just for PMOS**. The test passes for a login that works in your terminal. Claude updates its own files when it runs, and the test does not count that as a changed setup.
 - **Documents not written yet.** A document that does not exist yet shows **Draft it**, in its stage or ahead of it. The agent writes a draft. Nothing is issued until you read it.
 - **Meeting notes.** A decision, to-do or question that the notes caught is not a fact until you confirm it in the meeting's Replay. Home, Your day and the evening recap do not count unconfirmed points.
 

package/workspace/lib/claude-readiness.js

@@ -8,6 +8,7 @@ const cp = require('child_process');
 const win = require('./win-command');
 const claudeHome = require('./claude-home');
 const DEFAULT = '__default__';
+const OWN_ID = require('./own-profile').ID;   // PMOS's separate login (lib/own-profile.js)
 const PROMPT = 'Reply with exactly PMOS_READY. Do not use tools.';
 const FLAGS = ['--safe-mode', '--tools', '--strict-mcp-config', '--mcp-config', '--disable-slash-commands', '--no-session-persistence', '--output-format'];
 const MESSAGES = {
@@ -38,7 +39,15 @@ function executable(env) {
   const file = String(env.PATH || '').split(path.delimiter).map(d => path.join(d, 'claude')).find(f => { try { fs.accessSync(f, fs.constants.X_OK); return fs.statSync(f).isFile(); } catch { return false; } });
   return { file: file || 'claude', prefix: [] };
 }
-function stamp(f) { try { const s = fs.statSync(f); return [s.mtimeMs, s.size]; } catch { return null; } }
+// The parts of settings.json that decide which account Claude uses: only these are fingerprinted, as a hash, never returned.
+const AUTH_ENV = ['ANTHROPIC_API_KEY', 'ANTHROPIC_AUTH_TOKEN', 'ANTHROPIC_BASE_URL', 'CLAUDE_CODE_USE_BEDROCK', 'CLAUDE_CODE_USE_VERTEX', 'CLAUDE_CODE_USE_FOUNDRY'];
+function settingsAuth(f) {
+  let j; try { j = JSON.parse(fs.readFileSync(f, 'utf8')); } catch (e) { return e && e.code === 'ENOENT' ? null : 'unreadable'; }
+  if (!j || typeof j !== 'object') return 'unreadable';
+  const env = j.env && typeof j.env === 'object' ? j.env : {};
+  const picked = { apiKeyHelper: j.apiKeyHelper || '', forceLoginMethod: j.forceLoginMethod || '', forceLoginOrgUUID: j.forceLoginOrgUUID || '', env: AUTH_ENV.map(k => [k, env[k] || '']) };
+  return crypto.createHash('sha256').update(JSON.stringify(picked)).digest('hex');
+}
 function atomic(file, value) {
   fs.mkdirSync(path.dirname(file), { recursive: true, mode: 0o700 });
   if (fs.existsSync(file) && fs.lstatSync(file).isSymbolicLink()) throw new Error('symlink');
@@ -56,18 +65,20 @@ function create({ stateDir, home = os.homedir(), readProfiles, readPrefs, savePr
     if (typeof id !== 'string' || !/^[a-zA-Z0-9_.-]{1,80}$/.test(id)) return null;
     // The usual login is Claude with no CLAUDE_CONFIG_DIR at all, unless the PM's own environment sets one. Naming ~/.claude
     // here made Claude read ~/.claude/.claude.json and miss the login in ~/.claude.json (lib/claude-home.js).
-    if (id === DEFAULT) { const inherited = envFor(null).CLAUDE_CONFIG_DIR; return { id, label: 'My usual Claude login', env: inherited ? { CLAUDE_CONFIG_DIR: path.resolve(inherited) } : {} }; }
+    if (id === DEFAULT) { const inherited = envFor(null).CLAUDE_CONFIG_DIR; return { id, label: 'The Claude login on this computer', env: inherited ? { CLAUDE_CONFIG_DIR: path.resolve(inherited) } : {} }; }
     return (readProfiles().profiles || []).find(p => p.id === id) || null;
   }
   function binding(p) {
     const env = envFor(p);
     const command = resolveExecutable(env);
     const dir = path.resolve(env.CLAUDE_CONFIG_DIR || path.join(home, '.claude'));
-    const authNames = ['ANTHROPIC_API_KEY', 'ANTHROPIC_AUTH_TOKEN', 'ANTHROPIC_BASE_URL', 'CLAUDE_CODE_USE_BEDROCK', 'CLAUDE_CODE_USE_VERTEX', 'CLAUDE_CODE_USE_FOUNDRY'];
     // the env as it is applied (a CLAUDE_CONFIG_DIR that names only ~/.claude sets nothing), so an old descriptor and a new one match
     const applied = claudeHome.overlay(p.env, { home, inherited: envFor(null).CLAUDE_CONFIG_DIR || '' });
-    const input = { command, executable: stamp(command.file), env: Object.entries(applied).sort(), dir,
-      auth: authNames.map(k => [k, env[k] || '']), config: [path.join(dir, 'settings.json'), claudeHome.configFile(env, home), path.join(dir, '.credentials.json')].map(stamp) };
+    // Only what decides the login: the command, the env, the folder and the auth settings. NOT the timestamps of ~/.claude.json,
+    // .credentials.json or the executable: every `claude -p` rewrites ~/.claude.json and may refresh its token, and Claude Code
+    // updates itself, so those made every check end "The Claude setup changed during the check" (bug 2026-11-03, new user).
+    const input = { command: { file: command.file, prefix: command.prefix }, env: Object.entries(applied).sort(), dir,
+      auth: AUTH_ENV.map(k => [k, env[k] || '']), settings: settingsAuth(path.join(dir, 'settings.json')) };
     return { env, command, fingerprint: crypto.createHash('sha256').update(JSON.stringify(input)).digest('hex') };
   }
   // The sentence for a state. A signed-out or unverified login names the login it checked and its folder, because signing in to another
@@ -88,9 +99,21 @@ function create({ stateDir, home = os.homedir(), readProfiles, readPrefs, savePr
     const state = valid ? r.state : 'unchecked';
     return { state, message: say(state, p), profile: id, label: p.label || id, checked_at: r && r.checked_at || null, ready: state === 'ready' && selected() === id };
   }
+  /** The logins to choose from, one row per login that really differs (bug 2026-11-03: "My usual Claude login" and "PMOS"
+   *  showed beside the two options they repeat). A profile with the same binding as the login on this computer is that login,
+   *  so it folds into it; PMOS's own profile is the "separate login" option, so it is named `own` and not listed again.
+   *  `alias` maps a folded id to the row that shows it. */
   function list() {
     const read = readProfiles();
-    return { ok: true, selected: selected(), status: status(), profiles: [candidate(DEFAULT), ...(read.profiles || [])].map(p => ({ id: p.id, label: p.label || p.id })), broken: (read.broken || []).map(b => ({ file: b.file })), discovery_failed: read.ok === false };
+    const usual = candidate(DEFAULT), usualPrint = binding(usual).fingerprint;
+    const alias = {}, rows = [{ id: DEFAULT, label: usual.label }];
+    let own = null;
+    for (const p of read.profiles || []) {
+      if (p.id === OWN_ID) { own = p.id; continue; }
+      let same = false; try { same = binding(p).fingerprint === usualPrint; } catch {}
+      if (same) alias[p.id] = DEFAULT; else rows.push({ id: p.id, label: p.label || p.id });
+    }
+    return { ok: true, selected: selected(), status: status(), profiles: rows, alias, own, broken: (read.broken || []).map(b => ({ file: b.file })), discovery_failed: read.ok === false };
   }
   function pinDefault(p) {
     if (p.id !== DEFAULT) return p.id;

package/workspace/lib/context-use.js

@@ -5,26 +5,55 @@ const path = require('path');
 /* context-use.js — how full a session's context window is, and whether Claude proposes to compact it (batch 13 item 8, canvas XctxA1Desk).
  *
  *   of(seen, hints) → { used, window, pct, level, at } | null
- *     seen  = transcript-read's `context`: { used, peak, at } of the newest real (not subagent) model turn, or null
- *     hints = model ids that can name the window: the model PMOS started the session with, the CLI's own setting
+ *     seen  = transcript-read's `context`: { used, peak, at, model } of the newest real (not subagent) model turn, or null
+ *     hints = model ids that can name the window: the model PMOS started the session with, the CLI's own setting (cliHints, which
+ *             also carries OFF_HINT when CLAUDE_CODE_DISABLE_1M_CONTEXT is set)
+ *   native1M(model) → true for a model whose window is 1M with no [1m] suffix
  *   advise(ctx, shown) → 'compact' | null
- *   cliHints(root, home?) → the model the CLI itself is set to: `model` in ~/.claude and <root>/.claude settings, and ANTHROPIC_MODEL
+ *   cliHints(root, home?) → the model the CLI itself is set to: `model` in ~/.claude and <root>/.claude settings, and ANTHROPIC_MODEL;
+ *                           OFF_HINT last when CLAUDE_CODE_DISABLE_1M_CONTEXT is set in the environment or in a settings file's `env`
  * The words under the wedge ("116k of 200k used · last turn 10:12") are drawn by pm/ctx-wedge.js, in the PM's own clock.
  *
  * THE NUMBER is what the next turn starts from: the newest reply's input + cache-read + cache-write tokens (what the model was sent) plus
- * its output. It is not a running total, so it drops after a compact. THE WINDOW is 1M when a hint names a [1m] model or a turn already
- * went past 200k, else 200k (the CLI's default). With no turn read, or an agent that is not Claude, there is nothing: no %, no advice.
+ * its output. It is not a running total, so it drops after a compact. THE WINDOW is 1M when a turn already went past 200k, when a hint
+ * names a [1m] model, or when the model is one the CLI runs with 1M by itself (batch 25 item 8: Claude Code's model docs list Fable,
+ * Opus 4.7 and later, Sonnet 5 and later and Haiku 5.5; the CLI's default model, Opus 5.5, is one of them). The model of the newest turn
+ * in the transcript decides; with none read, the first hint does. CLAUDE_CODE_DISABLE_1M_CONTEXT makes the CLI treat every model as 200k, so it does
+ * here too. An unknown model is 200k. With no turn read, or an agent that is not Claude, there is nothing: no %, no advice.
  * Advice only on the PM's turn (a session that works is never told to compact), and only from 70%. */
 
 const BASE = 200000;
 const LONG = 1000000;
 const LEVELS = [[90, 'crit'], [70, 'warn'], [50, 'quiet']];
 
+const OFF_HINT = '[no-1m]';   // not a model: cliHints' word for CLAUDE_CODE_DISABLE_1M_CONTEXT, so a caller passes one list
 const isLong = (m) => /\[1m\]/i.test(String(m || ''));
 
+/* The release a model id names: claude-opus-4-8 → [4, 8], claude-sonnet-5-20260101 → [5, 0], opus → null (an alias: the latest). */
+function versionOf(model, family) {
+  const m = String(model).match(new RegExp(`${family}-(\\d+)(?:[-.](\\d{1,2}))?(?!\\d)`, 'i'));
+  return m ? [Number(m[1]), Number(m[2] || 0)] : null;
+}
+const atLeast = (v, major, minor) => v[0] > major || (v[0] === major && v[1] >= minor);
+function native1M(model) {
+  const s = String(model || '').toLowerCase();
+  if (!s) return false;
+  if (isLong(s)) return true;
+  if (/claude-\d/.test(s)) return false;                      // the old naming (claude-3-5-sonnet): all 200k
+  if (/fable/.test(s)) return true;
+  for (const [family, major, minor] of [['opus', 4, 7], ['sonnet', 5, 0], ['haiku', 5, 5]]) {
+    if (!new RegExp(`(^|[^a-z])${family}([^a-z]|$)`).test(s)) continue;
+    const v = versionOf(s, family);
+    return v ? atLeast(v, major, minor) : true;                  // a bare alias names the latest release
+  }
+  return false;
+}
+
 function of(seen, hints = []) {
   if (!seen || !(seen.used > 0)) return null;
-  const window = hints.some(isLong) || (seen.peak || 0) > BASE ? LONG : BASE;
+  const models = hints.filter((h) => h && h !== OFF_HINT);
+  const long = !hints.includes(OFF_HINT) && (models.some(isLong) || native1M(seen.model || models[0]));
+  const window = long || (seen.peak || 0) > BASE ? LONG : BASE;
   const pct = Math.min(100, Math.floor((seen.used / window) * 100));   // floor: 69.6% is not yet 70%
   const lv = LEVELS.find(([n]) => pct >= n);
   return { used: seen.used, window, pct, level: lv ? lv[1] : null, at: seen.at || null };
@@ -37,18 +66,31 @@ function advise(ctx, shown) {
 
 /* The CLI's own model setting. A session PMOS started with no model choice runs the CLI's default, and that setting is what can make it a
  * [1m] model. Read again only when a settings file changes (sessionList runs on every broadcast). */
-const memo = new Map();   // file → { stamp, model }
-function modelIn(file) {
+const memo = new Map();   // file → { stamp, model, off }
+const OFF = 'CLAUDE_CODE_DISABLE_1M_CONTEXT';
+const isOn = (v) => v != null && v !== '' && !/^(0|false|no)$/i.test(String(v));
+function settingsIn(file) {
   let stamp = null; try { const st = fs.statSync(file); stamp = st.size + ':' + st.mtimeMs; } catch { return null; }
-  const m = memo.get(file); if (m && m.stamp === stamp) return m.model;
-  let model = null; try { const j = JSON.parse(fs.readFileSync(file, 'utf8')); model = typeof j.model === 'string' ? j.model : null; } catch { model = null; }
-  memo.set(file, { stamp, model });
-  return model;
+  const m = memo.get(file); if (m && m.stamp === stamp) return m;
+  let model = null, off = false;
+  try {
+    const j = JSON.parse(fs.readFileSync(file, 'utf8'));
+    model = typeof j.model === 'string' ? j.model : null;
+    off = !!(j.env && typeof j.env === 'object' && isOn(j.env[OFF]));
+  } catch { model = null; off = false; }
+  const out = { stamp, model, off };
+  memo.set(file, out);
+  return out;
 }
-function cliHints(root, home = os.homedir()) {
+function settingsFiles(root, home) {
   const files = [path.join(home, '.claude', 'settings.json')];
   if (root) files.push(path.join(String(root), '.claude', 'settings.json'), path.join(String(root), '.claude', 'settings.local.json'));
-  return files.map(modelIn).concat(process.env.ANTHROPIC_MODEL || null).filter(Boolean);
+  return files;
+}
+function cliHints(root, home = os.homedir()) {
+  const read = settingsFiles(root, home).map((f) => settingsIn(f) || {});
+  const off = isOn(process.env[OFF]) || read.some((x) => x.off);
+  return read.map((x) => x.model || null).concat(process.env.ANTHROPIC_MODEL || null, off ? OFF_HINT : null).filter(Boolean);
 }
 
-module.exports = { of, advise, cliHints, BASE, LONG };
+module.exports = { of, advise, cliHints, native1M, OFF_HINT, BASE, LONG };

package/workspace/lib/initiative-cli.js

@@ -18,7 +18,9 @@
  * PM types the confirmation at a terminal, and an agent session passes with its own actor (D98); every other command
  * takes lib/actor.js fromCli: the PM at a terminal, the bound agent session from
  * PMOS_SESSION, `agent:unknown` otherwise. An agent's placement applies at once and its line names the agent (D98).
- * Work lanes only (D86 point 4): `list` and `export` leave document-lane initiatives out.
+ * Work lanes only (D86 point 4): `list` and `export` leave document-lane initiatives out. `list` names them in one closing
+ * line, because a record on a document lane is never on Home, the Board or the Roadmap: a feature record written by hand on
+ * the `prd` lane otherwise disappears with no word (batch 25 item 7). `new` refuses a document lane already (the writer).
  * D105 retired Now / Next / Later: `now`, `next` and `later` answer with what to use instead and change nothing.
  * Exit codes: 0 done, 1 refused, 2 usage.
  */
@@ -47,6 +49,16 @@ function startOnDefault(root, r, actor) {
   } catch { /* the initiative is made; it runs Product feature */ }
 }
 
+/** The records on a document lane (D86 point 4): never on the Roadmap, Home or the Board. Stopped and accepted ones are left out. */
+const documentsOf = (rows) => (rows || []).filter((r) => r && r.ok !== false && r.group && r.group !== 'work' && !r.accepted && !r.stopped)
+  .map((r) => ({ id: r.id, lane: r.lane || null }));
+const WORK_LANES = 'new-feature, improvement, bug-fix, discovery or chore';
+/** One line: what is not on the Roadmap, and what to do when it is work and not a document. */
+function docNote(docs) {
+  const names = docs.map((d) => `${d.id} (${d.lane || 'document'})`).join(', ');
+  return `Not on the Roadmap · ${docs.length} on a document lane: ${names}. A document lane does not show on Home or the Board. If it is work, set lane: in its record to ${WORK_LANES}.`;
+}
+
 const COMMANDS = { initiative: ['new', 'top', 'up', 'down', 'bottom', 'after', 'check-by', 'adopt', 'drop', 'list', 'export'] };
 /** The horizon verbs D105 retired: they answer with what to use instead. */
 const RETIRED = Object.freeze(['now', 'next', 'later']);
@@ -147,7 +159,7 @@ async function run(argv, { say = (s) => console.log(s), cwd = process.cwd(), isT
     const stage = (id) => lifecycle.labelOf(byRow.get(id));
     if (json) {
       say(JSON.stringify({ ok: true, ranked: o.placed.ranked, byInit: o.placed.byInit, stages: Object.fromEntries(o.placed.ranked.map((id) => [id, stage(id)])),
-        proposals: o.placed.proposals.map((p) => ({ ...p, by: actorLib.pageName(p.by) })) }));
+        proposals: o.placed.proposals.map((p) => ({ ...p, by: actorLib.pageName(p.by) })), documents: documentsOf(o.rows) }));
       return 0;
     }
     const ids = o.placed.ranked;
@@ -163,6 +175,8 @@ async function run(argv, { say = (s) => console.log(s), cwd = process.cwd(), isT
       say(`  ${p.rank + 1}. ${id} — ${(byRow.get(id) || {}).title || id}${bits.length ? ' · ' + bits.join(' · ') : ''}`);
     }
     for (const p of o.placed.proposals) say(`proposal ${p.eid}: ${p.init} ${p.after ? `after ${p.after}` : 'to the top'} · ${actorLib.pageName(p.by)}`);
+    const docs = documentsOf(o.rows);
+    if (docs.length) say(docNote(docs));
     return 0;
   }
 

package/workspace/lib/routes-onboard.js

@@ -100,7 +100,7 @@ async function handle(req, res, url, ctx) {
       const bound = r.ok && ctx.claudeSetup.bound(r.profile);
       // A new check of another login, or a failed check, drops everything bound to the old one.
       const keep = bound && st.profile === r.profile && st.fingerprint === bound.fingerprint;
-      write(ctx, { ...(keep ? st : { project: st.project, folder: st.folder }), profile: r.profile || b.profile, fingerprint: bound ? bound.fingerprint : null, checked: { state: r.state, at: r.checked_at || null } });
+      write(ctx, { ...(keep ? st : { project: st.project, folder: st.folder }), profile: r.profile || b.profile, fingerprint: bound ? bound.fingerprint : null, checked: { state: r.state, at: r.checked_at || null, message: r.message || null } });
       return send({ ...view(ctx), ...r });
     }
     const bound = verified(ctx, st);

package/workspace/lib/transcript-read.js

@@ -290,7 +290,7 @@ function feedHarness(acc, raw, clean) {
       // context use (batch 13 item 8): the NEWEST real turn's size, not the sum. A subagent's turn has its own context and is left out.
       if (m.model && m.model !== SYNTHETIC && !r.isSidechain) {
         const used = (u.input_tokens || 0) + (u.cache_read_input_tokens || 0) + (u.cache_creation_input_tokens || 0) + (u.output_tokens || 0);
-        if (used > 0) { acc.ctx = { used, at: r.timestamp || null }; if (used > acc.peak) acc.peak = used; }
+        if (used > 0) { acc.ctx = { used, at: r.timestamp || null, model: clean(m.model) }; if (used > acc.peak) acc.peak = used; }   // model: lib/context-use.js names the window from it
       }
     }
     for (const c of (m.content || [])) {

package/workspace/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "pmos-workspace",
-  "version": "0.498.0",
+  "version": "0.499.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "pmos-workspace",
-      "version": "0.498.0",
+      "version": "0.499.0",
       "license": "MIT",
       "dependencies": {
         "@anthropic-ai/sdk": "^1.3.0",

package/workspace/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pmos-workspace",
-  "version": "0.498.0",
+  "version": "0.499.0",
   "private": true,
   "description": "PMOS Terminal Workspace — local companion hosting real PTYs beside the library and gates (D62)",
   "license": "MIT",

package/workspace/public/pm/cozy-onboard.js

@@ -43,21 +43,26 @@ export function mountOnboard(host, { ws = '', done = false } = {}) {
   function turns() {
     const p = P(), c = (S.data && S.data.claude) || { profiles: [] }, out = [];
     // 1. connect and test
-    const profiles = c.profiles || [];
-    const pick = S.profile || p.profile || c.selected || (profiles[0] && profiles[0].id);
+    // One row per login that really differs: a pinned copy of the login on this computer shows as that login, and PMOS's own
+    // profile is the "separate login" row (bug 2026-11-03: "My usual Claude login" and "PMOS" repeated the other two rows).
+    const profiles = c.profiles || [], ownId = c.own || '__own__';
+    const row = (id) => (id === '__own__' || (id && id === c.own) ? ownId : (c.alias && c.alias[id]) || id);
+    const pick = row(S.profile || p.profile || c.selected || (profiles[0] && profiles[0].id));
     if (!p.verified) {
-      const failed = p.checked && p.checked.state && p.checked.state !== 'ready' && p.profile === pick;
-      const opts = profiles.map((x) => `<label class="ob-opt${x.id === pick ? ' on' : ''}"><input type="radio" name="ob-login" value="${esc(x.id)}"${x.id === pick ? ' checked' : ''}><span><b>${esc(x.id === '__default__' ? 'The Claude login on this computer' : x.label)}</b>${x.id === '__default__' ? '<em>Whatever account Claude Code uses in your usual terminal</em>' : ''}</span></label>`).join('');
+      const failed = p.checked && p.checked.state && p.checked.state !== 'ready' && row(p.profile) === pick;
+      const opt = (id, label, note) => `<label class="ob-opt${id === pick ? ' on' : ''}"><input type="radio" name="ob-login" value="${esc(id)}"${id === pick ? ' checked' : ''}><span><b>${esc(label)}</b>${note ? `<em>${esc(note)}</em>` : ''}</span></label>`;
+      const opts = profiles.map((x) => opt(x.id, x.id === '__default__' ? 'The Claude login on this computer' : x.label, x.id === '__default__' ? 'Whatever account Claude Code uses in your usual terminal' : '')).join('')
+        + opt(ownId, 'A separate login just for PMOS', 'Keeps PMOS on its own account. You sign in once.');
       out.push({ mood: failed ? 'honest' : 'needs-you', body: `<p>${failed ? '' : 'Let’s set up a product or project. First, which Claude login should PMOS use? I’ll run one short check on exactly that login.'}</p>`
-        + (failed ? `<div class="ob-bad" role="alert"><b>${esc(S.data.claude.status && S.data.claude.status.profile === p.profile ? S.data.claude.status.message : (p.checked.state === 'signed_out' ? 'This login needs signing in again.' : 'This login did not pass the check.'))}</b><span>I won’t switch to a different account on my own. Sign this one in, or pick another login.</span></div>` : '')
-        + `<div class="ut-card ob-card" role="radiogroup" aria-label="Claude login">${opts}<label class="ob-opt${pick === '__own__' ? ' on' : ''}"><input type="radio" name="ob-login" value="__own__"${pick === '__own__' ? ' checked' : ''}><span><b>A separate login just for PMOS</b><em>Keeps PMOS on its own account. You sign in once.</em></span></label>`
+        + (failed ? `<div class="ob-bad" role="alert"><b>${esc(p.checked.message || (p.checked.state === 'signed_out' ? 'This login needs signing in again.' : 'This login did not pass the check.'))}</b><span>I won’t switch to a different account on my own. Sign this one in, or pick another login.</span></div>` : '')
+        + `<div class="ut-card ob-card" role="radiogroup" aria-label="Claude login">${opts}`
         + `<div class="ob-row">${btn('check', 'Test this login', 'pri')}${btn('login', 'Sign in to it', '')}</div>`
         + `<p class="ob-note">The test sends one short message to Claude with no tools. It uses a little of this account’s usage.</p>`
         + (S.session ? '<p class="ob-note">Finish signing in in the browser window Claude opened. If it asks for a code, paste it below. I test the login as soon as you are done.</p><div class="cs-term ob-term" aria-label="Claude sign-in terminal"></div>' : '')
         + `</div>` });
       return out;
     }
-    const label = (profiles.find((x) => x.id === p.profile) || {}).label || p.profile;
+    const label = row(p.profile) === ownId ? 'A separate login just for PMOS' : (profiles.find((x) => x.id === row(p.profile)) || {}).label || p.profile;
     out.push({ mood: 'handled', body: `<div class="ob-good">${CHECK}<b>Login works · ${esc(label)}</b><span>Tested ${p.checked && p.checked.at ? new Date(p.checked.at).toLocaleTimeString([], { hour: '2-digit', minute: '2-digit' }) : 'just now'} · one test message, no tools</span></div>`
       + (p.project ? '' : `<p>What product or project is this for? Its name is enough to start.</p><p class="ob-sub">If you have them, add the team, a Jira key, a link or the folder where it lives. They help me find the right sources, not a same-name one.</p><div class="ob-row"><button type="button" class="hm-chip loose" data-ob="relogin">Use another login</button></div>`) });
     if (!p.project) return out;
@@ -151,7 +156,9 @@ export function mountOnboard(host, { ws = '', done = false } = {}) {
     S.busy = a; S.note = ''; draw();
     try {
       if (a === 'check' || a === 'login') {
-        let profile = S.profile || p.profile || (S.data.claude && S.data.claude.selected);
+        const cl = S.data.claude || {};
+        let profile = S.profile || p.profile || cl.selected;
+        if (cl.alias && cl.alias[profile]) profile = cl.alias[profile];   // a pinned copy of the usual login is tested as that login
         if (profile === '__own__') { const own = await post('own'); if (!own.ok) throw new Error(own.error || 'The PMOS login could not be made.'); profile = own.id; S.profile = profile; await load(); }
         const r = await post(a, { profile });
         if (a === 'login') {