create-pmos 0.521.0 → 0.522.0

package/workspace/lib/boards-host.js

@@ -51,8 +51,8 @@ function hostOrigin(env = process.env) {
 }
 
 function readState(dir) {
-  try { const s = JSON.parse(fs.readFileSync(fileOf(dir), 'utf8')); return { key: typeof s.key === 'string' ? s.key : null, host: typeof s.host === 'string' ? s.host : '', teams: Array.isArray(s.teams) ? s.teams : [], links: Array.isArray(s.links) ? s.links : [] }; }
-  catch { return { key: null, host: '', teams: [], links: [] }; }
+  try { const s = JSON.parse(fs.readFileSync(fileOf(dir), 'utf8')); return { key: typeof s.key === 'string' ? s.key : null, host: typeof s.host === 'string' ? s.host : '', teams: Array.isArray(s.teams) ? s.teams : [], links: Array.isArray(s.links) ? s.links : [], received: Array.isArray(s.received) ? s.received : [] }; }
+  catch { return { key: null, host: '', teams: [], links: [], received: [] }; }
 }
 /** The address the PM saved on the Publish popover ('' when none). The environment variable PMOS_BOARDS_HOST wins over it (see addressOf). */
 function savedHost(dir) {
@@ -124,7 +124,7 @@ async function publish(dir, o, opts = {}) {
   const now = new Date(opts.now || Date.now()).toISOString();
   const cur = readState(dir);
   cur.key = st.key;
-  cur.links = cur.links.filter((l) => l.id !== b.id).concat([{ id: b.id, url: b.url, team, name: String(o.name || ''), kind: o.kind, selection: o.selection || [], ws: o.ws || '', board: o.board || '', by: String(o.by || ''), made: now, ends: b.ends || null, views: 0 }]);
+  cur.links = cur.links.filter((l) => l.id !== b.id).concat([{ id: b.id, url: b.url, team, name: String(o.name || ''), kind: o.kind, selection: o.selection || [], parts: Array.isArray(o.parts) ? o.parts : undefined, ws: o.ws || '', board: o.board || '', by: String(o.by || ''), made: now, ends: b.ends || null, views: 0 }]);
   writeState(dir, cur);
   return { ok: true, id: b.id, url: b.url, ends: b.ends || null };
 }

package/workspace/lib/boards-received.js

@@ -0,0 +1,105 @@
+'use strict';
+/* boards-received.js — boards other people shared with you, kept in your PMOS (batch 27 item 3, ShX X2 and X3; initiative board-share-several).
+ *
+ * A RECEIVED board is { id, host, url, password, name, by, kind, ends, added }, kept in <runtime state>/board-publish/state.json under `received`
+ * (lib/boards-host.js writeState: mode 0600). The password is a secret on this computer: never returned to the page, never logged (D08), like a
+ * team password. Every function takes the state folder.
+ *
+ * THE CONTRACT with the host (board-host/src/core.js):
+ *   GET  <host>/api/links/<id>/about   X-Link-Password   -> { ok, id, name, kind, by, made, ends }
+ *   POST <host>/api/links/<id>/visit   X-Link-Password   -> { ok, url }   one-time, 5 minutes
+ *   403 is a wrong password, 429 a lockout (the sentence names the minutes), 404 a link that ended or was turned off.
+ *
+ *   parseLink(text)                          -> { host, id, url } | { error }    "<host>/b/<id>" (a copy of the address bar works too)
+ *   add(dir, { link, password }, { fetch })  -> { ok, board } | { ok: false, kind, error }   checked with the host before anything is kept
+ *   forget(dir, id)                          -> { ok }
+ *   readAll(dir, { fetch, now })             -> [{ id, host, url, name, by, kind, ends, state }]   state: open | ended | off | password | locked | unreachable
+ *   visit(dir, id, { fetch })                -> { ok, url } | { ok: false, error }
+ * Ended and turned-off links stay as one quiet row until the PM forgets them: the host deletes both, so the end date kept here tells them apart. */
+const Host = require('./boards-host.js');
+
+const TIMEOUT_MS = 15000;
+const MAX = 50;
+const LINK_ID = /^[A-Za-z0-9_-]{8,64}$/;
+
+function parseLink(text) {
+  const bad = { error: 'This is not a shared board link. It looks like https://boards.pm-os.app/b/…' };
+  let u; try { u = new URL(String(text || '').trim()); } catch { return bad; }
+  if (u.username || u.password) return bad;
+  const host = Host.hostOrigin({ PMOS_BOARDS_HOST: u.origin });
+  const m = /^\/b\/([A-Za-z0-9_-]+)\/?$/.exec(u.pathname);
+  if (!host || !m || !LINK_ID.test(m[1])) return bad;
+  return { host, id: m[1], url: host + '/b/' + m[1] };
+}
+
+async function call(host, method, p, password, fetchFn) {
+  const f = fetchFn || (typeof fetch === 'function' ? fetch : null);
+  if (!f) return { ok: false, kind: 'unreachable', error: 'This computer cannot reach the host (no network client).' };
+  const ctl = typeof AbortController === 'function' ? new AbortController() : null; const timer = ctl ? setTimeout(() => ctl.abort(), TIMEOUT_MS) : null;
+  try {
+    const headers = { Accept: 'application/json' }; if (password) headers['X-Link-Password'] = password;
+    const res = await f(host + p, { method, redirect: 'error', signal: ctl ? ctl.signal : undefined, headers });
+    let j = null; try { j = await res.json(); } catch { /* not JSON */ }
+    if (res.ok && j && j.ok !== false) return { ok: true, body: j };
+    const say = (j && typeof j.error === 'string' && j.error.slice(0, 240)) || '';
+    if (res.status === 403) return { ok: false, kind: 'password', error: 'That password does not work. Ask the person who shared it.' };
+    if (res.status === 429) return { ok: false, kind: 'locked', error: say || 'Too many wrong tries. Try again in a few minutes.' };
+    if (res.status === 404) return { ok: false, kind: 'gone', error: 'This link has ended or was turned off.' };
+    return { ok: false, kind: 'other', error: say || 'The host refused the request (' + res.status + ').' };
+  } catch (e) {
+    return { ok: false, kind: 'unreachable', error: e && e.name === 'AbortError' ? 'The host did not answer in time. Try again.' : 'The host could not be reached. Check the connection.' };
+  } finally { if (timer) clearTimeout(timer); }
+}
+const path = (id, what) => '/api/links/' + encodeURIComponent(id) + '/' + what;
+const listOf = (st) => (Array.isArray(st.received) ? st.received : []);
+const str = (v, n) => String(v == null ? '' : v).slice(0, n);
+const about = (b) => ({ name: str(b.name, 120), by: str(b.by, 60), kind: str(b.kind, 20), ends: str(b.ends, 40) });
+
+async function add(dir, o, opts = {}) {
+  const L = parseLink(o.link); if (L.error) return { ok: false, kind: 'link', error: L.error };
+  const password = o.password == null ? '' : String(o.password);
+  if (password.length > 100) return { ok: false, kind: 'password', error: 'A password is at most 100 characters.' };
+  const st = Host.readState(dir);
+  if (!listOf(st).some((r) => r.id === L.id) && listOf(st).length >= MAX) return { ok: false, kind: 'other', error: 'This computer keeps ' + MAX + ' shared boards. Forget one first.' };
+  const kept = listOf(st).find((r) => r.id === L.id && r.host === L.host);
+  const r = await call(L.host, 'GET', path(L.id, 'about'), password || (kept && kept.password) || '', opts.fetch);
+  if (!r.ok) return { ok: false, kind: r.kind, error: r.kind === 'password' && !password ? 'This board needs its password.' : r.error };
+  const cur = Host.readState(dir);
+  const row = Object.assign({ id: L.id, host: L.host, url: L.url, password: password || (kept && kept.password) || '', added: new Date(opts.now || Date.now()).toISOString() }, about(r.body));
+  cur.received = listOf(cur).filter((x) => x.id !== L.id).concat([row]);
+  Host.writeState(dir, cur);
+  return { ok: true, board: { id: row.id, name: row.name, by: row.by, ends: row.ends } };
+}
+
+function forget(dir, id) {
+  const st = Host.readState(dir); const had = listOf(st).some((r) => r.id === id);
+  st.received = listOf(st).filter((r) => r.id !== id); Host.writeState(dir, st); return { ok: had };
+}
+
+async function readAll(dir, opts = {}) {
+  const now = opts.now || Date.now();
+  const list = listOf(Host.readState(dir));
+  const rows = await Promise.all(list.map(async (x) => {
+    const base = { id: x.id, host: new URL(x.host).host, url: x.url, name: x.name, by: x.by, kind: x.kind, ends: x.ends };
+    const r = await call(x.host, 'GET', path(x.id, 'about'), x.password, opts.fetch);
+    if (r.ok) return Object.assign(base, about(r.body), { state: 'open' });
+    if (r.kind === 'gone') return Object.assign(base, { state: x.ends && Date.parse(x.ends) <= now ? 'ended' : 'off' });
+    return Object.assign(base, { state: r.kind === 'password' || r.kind === 'locked' ? r.kind : 'unreachable', error: r.error });
+  }));
+  // what the host said is kept (the name and end date can change on a republish), so an ended row still says when it ended
+  const cur = Host.readState(dir); let changed = false;
+  for (const row of rows) { const k = listOf(cur).find((x) => x.id === row.id); if (k && row.state === 'open' && (k.name !== row.name || k.ends !== row.ends || k.by !== row.by)) { Object.assign(k, { name: row.name, ends: row.ends, by: row.by }); changed = true; } }
+  if (changed) Host.writeState(dir, cur);
+  return rows;
+}
+
+async function visit(dir, id, opts = {}) {
+  const x = listOf(Host.readState(dir)).find((r) => r.id === id);
+  if (!x) return { ok: false, error: 'This board is not kept on this computer.' };
+  const r = await call(x.host, 'POST', path(x.id, 'visit'), x.password, opts.fetch);
+  if (!r.ok) return { ok: false, kind: r.kind, error: r.error };
+  const url = r.body.url; if (typeof url !== 'string' || !url.startsWith(x.host + '/b/' + x.id)) return { ok: false, error: 'The host sent an address this workspace does not accept.' };
+  return { ok: true, url };
+}
+
+module.exports = { MAX, parseLink, add, forget, readAll, visit };

package/workspace/lib/kit-update.js

@@ -15,8 +15,8 @@
  *
  * The page does what the terminal does, and nothing more. Each action runs the command the README tells the PM to type:
  *   check        npm view create-pmos version
- *   kit          npx -y create-pmos@<version> --update <repo>            (the kernel only; state/ and planning/ untouched)
- *   app          npx -y create-pmos@<version> workspace --reinstall <repo> (what `pmos upgrade` runs)
+ *   kit          npx -y --prefer-online create-pmos@<version> --update <repo> (the kernel only; state/ and planning/ untouched)
+ *   app          npx -y --prefer-online create-pmos@<version> workspace --reinstall <repo> (what `pmos upgrade` runs)
  * LOCAL SOURCE. PMOS_UPDATE_SOURCE names a built create-pmos package on this computer: its folder (with package.json, bin/
  * and payload/ or workspace/) or its .tgz from `npm pack`. The check then reads that package's version instead of asking
  * the registry, and the update runs `npx -y --package=<that path> -- create-pmos ...` in place of `npx -y create-pmos@<version> ...`. Nothing
@@ -116,11 +116,12 @@ function source(env = process.env) {
 
 /**
  * The npx arguments that run create-pmos: the registry package at a version, or the local path. A bare path is not
- * enough: npx would try to run it as a command, so a local package goes in with --package.
+ * enough: npx would try to run it as a command, so a local package goes in with --package. --prefer-online makes npm ask
+ * the registry about the pinned version even when it has an older answer cached, which a cache clean used to force.
  */
 const npxArgs = (src, version, rest) => (src && src.kind === 'local'
   ? ['-y', `--package=${src.path}`, '--', PKG_NAME, ...rest]
-  : ['-y', `${PKG_NAME}@${version}`, ...rest]);
+  : ['-y', '--prefer-online', `${PKG_NAME}@${version}`, ...rest]);
 
 /** One changelog entry as the page may show it, or null: a version, a time, and PRs with a number, a summary, from
  *  kit-changelog format 2 a title, and from format 3 a kind (k: new, imp, fix or x), which decides New, Improved or Fixed.
@@ -266,10 +267,6 @@ function whereFrom({ desktop = false, onlineHost = false, tokenKept = false } =
   return { ok: false, error: 'This page signed in with a token that changes when the workspace restarts, so it could not come back. Update the workspace on the computer it runs on, or at its Online address' };
 }
 
-/**
- * Start the app reinstall and return at once. The child is detached from this server, because create-pmos stops this
- * server before it reinstalls, and it starts the new one after. Its output goes to `logFile`.
- */
 /**
  * The environment of the app update. A server started by a login item or a desktop shortcut can have a PATH without
  * the node that runs it, and then neither npx nor the pmos launcher is found. The folder of this node is added at the
@@ -282,26 +279,59 @@ function updateEnv(env = process.env, nodePath = process.execPath) {
   return parts.includes(dir) ? { ...env } : { ...env, [key]: [...parts, dir].join(path.delimiter) };
 }
 
-function upgradeApp(root, { version, logFile, spawn = cp.spawn, env = updateEnv(), source: src = source() } = {}) {
+/**
+ * On Windows the update runs through this hop, so no step of it opens a console window (batch 27 item 7).
+ * A DETACHED child has no console at all, and then every console program it starts (cmd, npm, node, node-gyp) gets a
+ * new, VISIBLE console of its own: npm starts create-pmos without windowsHide, so the server cannot hide those. The hop
+ * is a detached node with no console. It starts the update once with windowsHide, which gives that child a console with
+ * no window, and every program under it shares that hidden console. The hop waits for the update and passes on its exit
+ * code. argv: ['direct', cmd, ...args] runs cmd itself; ['shell', cmd, ...args] runs it through cmd.exe (npx.cmd needs
+ * a shell), each argument quoted, so a repository path with a space stays one argument.
+ */
+function windowsHop(argv, spawnSync) {
+  const [mode, cmd, ...args] = argv;
+  const q = (s) => (/[\s"&|<>^()]/.test(s) ? '"' + String(s).replace(/"/g, '""') + '"' : String(s));
+  const r = mode === 'shell'
+    ? spawnSync([cmd, ...args].map(q).join(' '), { stdio: 'inherit', windowsHide: true, shell: true })
+    : spawnSync(cmd, args, { stdio: 'inherit', windowsHide: true });
+  if (r.error) console.error('The update could not start: ' + r.error.message);
+  return r.status == null ? 1 : r.status;
+}
+const HOP = `process.exit((${windowsHop.toString()})(process.argv.slice(1), require('child_process').spawnSync))`;
+
+/**
+ * The command that starts the app update: { cmd, args }. On macOS and Linux it is npx. On Windows it is this node
+ * running the hop above, and the hop runs npm's own npx-cli.js with this node when it is beside it (the usual Node
+ * install and nvm-windows), else npx.cmd through a shell.
+ */
+function appUpdateCommand(npx, { platform = process.platform, execPath = process.execPath, exists = fs.existsSync } = {}) {
+  if (platform !== 'win32') return { cmd: 'npx', args: npx };
+  const cli = path.win32.join(path.win32.dirname(String(execPath)), 'node_modules', 'npm', 'bin', 'npx-cli.js');
+  const run = exists(cli) ? ['direct', String(execPath), cli] : ['shell', 'npx.cmd'];
+  return { cmd: String(execPath), args: ['-e', HOP, ...run, ...npx] };
+}
+
+/**
+ * Start the app reinstall and return at once. The child is detached from this server, because create-pmos stops this
+ * server before it reinstalls, and it starts the new one after. Its output goes to `logFile`.
+ * No npm cache clean: the version is pinned and npx runs with --prefer-online, so npm asks the registry for that
+ * version's details again and downloads the version if it is not in the cache. A clean took the whole cache, so every
+ * update downloaded every dependency again and built node-pty again (batch 27 item 7).
+ */
+function upgradeApp(root, { version, logFile, spawn = cp.spawn, env = updateEnv(), source: src = source(),
+  platform = process.platform, execPath = process.execPath, exists = fs.existsSync } = {}) {
   if (!validVersion(version)) return { ok: false, error: 'Check for updates first' };
   if (src.kind === 'local' && src.error) return { ok: false, error: src.error };
+  const npx = npxArgs(src, version, ['workspace', '--reinstall', '--no-open', String(root)]);
+  const c = appUpdateCommand(npx, { platform, execPath, exists });
   let fd;
   try {
     fs.mkdirSync(path.dirname(logFile), { recursive: true });
     fd = fs.openSync(logFile, 'w');
-    fs.writeSync(fd, `${new Date().toISOString()} clearing npm cache…\n`);
-    fs.writeSync(fd, `${new Date().toISOString()} ${NPM} cache clean --force\n`);
-    fs.writeSync(fd, `${new Date().toISOString()} ${NPX} ${npxArgs(src, version, ['workspace', '--reinstall', '--no-open', String(root)]).join(' ')}\n`);
+    fs.writeSync(fd, `${new Date().toISOString()} ${platform === 'win32' ? 'npx.cmd' : 'npx'} ${npx.join(' ')}\n`);
   } catch (e) { return { ok: false, error: `Could not write the log file: ${e.message}` }; }
   try {
-    // Clear npm cache synchronously before spawning the update, so npx downloads the fresh version
-    cp.execSync(`${NPM} cache clean --force`, { cwd: String(root), env, stdio: ['ignore', fd, fd] });
-  } catch (e) {
-    try { fs.appendFileSync(logFile, `Note: cache clear had an issue, but continuing: ${e.message}\n`); } catch { /* silent */ }
-  }
-  try {
-    const child = spawn(NPX, npxArgs(src, version, ['workspace', '--reinstall', '--no-open', String(root)]),
-      { cwd: String(root), env, detached: true, stdio: ['ignore', fd, fd], windowsHide: true, shell: IS_WIN });
+    const child = spawn(c.cmd, c.args, { cwd: String(root), env, detached: true, stdio: ['ignore', fd, fd], windowsHide: true });
     // A child that could not start writes nothing itself: say why in the log, which the page names when it gives up.
     if (child && typeof child.on === 'function') {
       child.on('error', (e) => { try { fs.appendFileSync(logFile, `The update could not start: ${e.message}\n`); } catch { /* the page times out */ } });
@@ -315,4 +345,4 @@ function upgradeApp(root, { version, logFile, spawn = cp.spawn, env = updateEnv(
   }
 }
 
-module.exports = { PKG_NAME, cmpVer, readChanges, readLastCheck, writeLastCheck, notServedYet, validVersion, source, npxArgs, readKit, fromCheckout, status, compare, latest, updateKit, updateEnv, upgradeApp, whereFrom };
+module.exports = { PKG_NAME, windowsHop, appUpdateCommand, cmpVer, readChanges, readLastCheck, writeLastCheck, notServedYet, validVersion, source, npxArgs, readKit, fromCheckout, status, compare, latest, updateKit, updateEnv, upgradeApp, whereFrom };

package/workspace/lib/routes-board-publish.js

@@ -2,7 +2,8 @@
 /* routes-board-publish.js — publish a board to the central host from the workspace (initiative board-publish, slice 2; D103; PRD P1 to P5).
  *
  *   GET  /api/board-publish                                  -> { ok, host, days, links }       a read: whether a host is set, the choices, the open links (never the key)
- *   POST /api/board-publish          { ws, board, select, team, password, days, shared_by }  -> { ok, id, url, ends }
+ *   POST /api/board-publish          { ws, board, select | parts, name?, team, password, days, shared_by }  -> { ok, id, url, ends, name }
+ *                                    parts (batch 27 item 1): several products and programs in one link, one tab per pick (lib/board-publish-parts.js)
  *   POST /api/board-publish/republish { id }                 -> { ok, ends }     the same selection, as the board is now; same link, same password
  *   POST /api/board-publish/off      { id }                  -> { ok }           the host deletes the copy at once
  *   POST /api/board-publish/password { id }                  -> { ok, password } a new link password from the host, shown once; the old one stops
@@ -11,6 +12,10 @@
  *   POST /api/board-publish/join     { invite } or { host, team, password } -> { ok, team }   verified with the host first; the password stays on this computer
  *   POST /api/board-publish/leave    { team }                -> { ok }          forgets the team here
  *   POST /api/board-publish/open     { team, id }            -> { ok, url }     a one-time address for a team member, opened in a browser tab
+ *   POST /api/board-publish/receive  { link, password? }     -> { ok, board }   a board shared with you, kept here (batch 27 item 3; lib/boards-received.js)
+ *   POST /api/board-publish/forget   { id }                  -> { ok }          forgets it here
+ *   POST /api/board-publish/visit    { id }                  -> { ok, url }     its one-time address, opened in a browser tab
+ *   GET  /api/board-publish/shared also answers withYou: [{ id, host, url, name, by, kind, ends, state }]   (no password, ever)
  *
  * EVERY POST IS A PAGE PRESS (pm-guard requirePagePress): only a press on the page publishes, not a request an agent session makes (PRD P2, D97 S3).
  * THE SECRET SCAN runs on the finished pack before anything leaves (P3): a hit blocks the publish and the answer names the rule, never the text (D08).
@@ -24,6 +29,8 @@ const Host = require('./boards-host.js');
 const shareStore = require('./share-store.js');
 const secretScan = require('./secret-scan.js');
 const Teams = require('./boards-teams.js');
+const Parts = require('./board-publish-parts.js');
+const Received = require('./boards-received.js');
 
 const PUBLIC = path.join(__dirname, '..', 'public');
 let versionMemo = null;
@@ -74,7 +81,7 @@ module.exports = {
   prefixes: ['/api/board-publish'],
   handle: async (req, res, url, ctx) => {
     const p = url.pathname;
-    if (!/^\/api\/board-publish(\/(republish|off|password|host|shared|join|leave|open))?$/.test(p)) return false;
+    if (!/^\/api\/board-publish(\/(republish|off|password|host|shared|join|leave|open|receive|forget|visit))?$/.test(p)) return false;
     const send = (obj, code) => { ctx.json(res, obj, code); return true; };
     const dir = stateDir(ctx);
     if (!dir) return send({ ok: false, error: 'No state folder.' }, 500);
@@ -88,8 +95,8 @@ module.exports = {
     }
     // the Shared view's read (slice 4): your own links and every joined team's list, read now from each host. Nothing is kept from the read.
     if (req.method === 'GET' && p === '/api/board-publish/shared') {
-      const teams = await Teams.readAll(dir);
-      return send({ ok: true, readAt: new Date().toISOString(), yours: Host.links(dir).map((l) => ({ id: l.id, url: l.url, team: l.team, name: l.name, kind: l.kind, by: l.by, made: l.made, ends: l.ends, views: l.views })), teams });
+      const [teams, withYou] = await Promise.all([Teams.readAll(dir), Received.readAll(dir)]);
+      return send({ ok: true, readAt: new Date().toISOString(), withYou, yours: Host.links(dir).map((l) => ({ id: l.id, url: l.url, team: l.team, name: l.name, kind: l.kind, by: l.by, made: l.made, ends: l.ends, views: l.views })), teams });
     }
     if (req.method !== 'POST') return send({ ok: false, error: 'GET or POST only' }, 405);
 
@@ -104,6 +111,16 @@ module.exports = {
       const r = await Teams.join(dir, { invite: body.invite, host: body.host, team: body.team, password: body.password });
       return send(r.ok ? { ok: true, team: r.team } : { ok: false, error: r.error, kind: r.kind }, r.ok ? 200 : (r.kind === 'locked' ? 429 : 400));
     }
+    // a board someone shared with you (batch 27 item 3, ShX): checked with its host first; the password stays on this computer (D08)
+    if (p === '/api/board-publish/receive') {
+      const r = await Received.add(dir, { link: body.link, password: body.password });
+      return send(r.ok ? { ok: true, board: r.board } : { ok: false, error: r.error, kind: r.kind }, r.ok ? 200 : (r.kind === 'locked' ? 429 : r.kind === 'unreachable' ? 502 : 400));
+    }
+    if (p === '/api/board-publish/forget') { const r = Received.forget(dir, String(body.id || '')); return send(r.ok ? { ok: true } : { ok: false, error: 'This board is not kept on this computer.' }, r.ok ? 200 : 404); }
+    if (p === '/api/board-publish/visit') {
+      const r = await Received.visit(dir, String(body.id || ''));
+      return send(r.ok ? { ok: true, url: r.url } : { ok: false, error: r.error, kind: r.kind }, r.ok ? 200 : 502);
+    }
     if (p === '/api/board-publish/leave') { const r = Teams.leave(dir, String(body.team || '')); return send(r.ok ? { ok: true } : { ok: false, error: 'This computer has not joined that team.' }, r.ok ? 200 : 404); }
     if (p === '/api/board-publish/open') {   // the one-time address of a team's board, to open in a browser tab
       const r = await Teams.open(dir, String(body.team || ''), String(body.id || ''));
@@ -124,28 +141,41 @@ module.exports = {
 
     // publish and republish both make a pack, scan it, then send it
     const now = Date.now();
-    let sel; let meta;
+    let sel; let meta; let parts = null;
     if (p === '/api/board-publish/republish') {
       const l = Host.readState(dir).links.find((x) => x.id === String(body.id || ''));
       if (!l) return send({ ok: false, error: 'This link is not one of yours.' }, 404);
       sel = { ws: l.ws, board: l.board, select: (l.selection || []).map((s) => s.kind + ':' + s.id).join(','), by: l.by, ends: l.ends };
-      meta = l;
+      meta = l; parts = Array.isArray(l.parts) && l.parts.length ? Parts.parseParts(l.parts) : null;
     } else {
       const days = Number(body.days);
       if (!Host.DAYS.includes(days)) return send({ ok: false, error: 'Ends in 1, 7 or 30 days.' }, 400);
       sel = { ws: body.ws, board: body.board || body.ws, select: Array.isArray(body.select) ? body.select.map((s) => s.kind + ':' + s.id).join(',') : String(body.select || ''), by: String(body.shared_by || '').slice(0, 60) || sharedBy(), ends: new Date(now + days * 86400000).toISOString() };
+      if (body.parts != null) { parts = Parts.parseParts(body.parts); if (!parts) return send({ ok: false, error: 'Pick up to ' + Parts.MAX_PARTS + ' products, programs or initiatives to publish.' }, 400); }
+    }
+    const base = { at: new Date(now).toISOString(), viewer: viewerVersion(), view: body.view || (meta && meta.view) };
+    let pack; let name; let kind;
+    if (parts) {
+      // several picks (batch 27 item 1, ShA): a pack per product, each made and swept as today, joined into one pack with a tab per pick
+      const c = await require('./board-publish-choices.js').contextOf(req, ctx, sel.ws, sel.board);
+      if (!c) return send({ ok: false, error: 'The board is still being read. Try again in a moment.' }, 202);
+      const r = await Parts.packOf(parts, { programs: c.programs, boards: c.boards, name: meta ? meta.name : String(body.name || '').slice(0, 120), make: (g) => makePack(req, ctx, Object.assign({ by: sel.by, ends: sel.ends }, base, { ws: g.ws, board: g.board, select: g.select })) });
+      if (!r.ok) return send({ ok: false, error: r.error }, r.status || 502);
+      pack = r.pack; name = r.label; kind = r.kind;
+    } else {
+      const pk = await makePack(req, ctx, Object.assign({}, sel, base));
+      if (!pk.ok) return send({ ok: false, error: pk.error }, pk.status || 502);
+      pack = pk.pack; name = pack.scope.label; kind = kindOf(pack);
     }
-    const pk = await makePack(req, ctx, Object.assign({}, sel, { at: new Date(now).toISOString(), viewer: viewerVersion(), view: body.view }));
-    if (!pk.ok) return send({ ok: false, error: pk.error }, pk.status || 502);
-    const hits = secretScan.scan(JSON.stringify(pk.pack));
+    const hits = secretScan.scan(JSON.stringify(pack));
     if (hits.length) return send({ ok: false, error: 'This board holds what looks like a secret (' + hits.join(', ') + '). Remove it, then publish again.', secrets: hits }, 422);
 
     if (p === '/api/board-publish/republish') {
-      const r = await Host.republish(dir, meta.id, pk.pack, { env });
+      const r = await Host.republish(dir, meta.id, pack, { env });
       return send(r.ok ? { ok: true, ends: r.ends } : { ok: false, error: r.error }, r.ok ? 200 : (r.status || 502));
     }
     const selection = Array.isArray(body.select) ? body.select.map((s) => ({ kind: String(s.kind), id: String(s.id) })) : String(body.select || '').split(',').filter(Boolean).map((s) => ({ kind: s.slice(0, s.indexOf(':')), id: s.slice(s.indexOf(':') + 1) }));
-    const r = await Host.publish(dir, { pack: pk.pack, team: body.team, name: pk.pack.scope.label, kind: kindOf(pk.pack), by: sel.by, days: Number(body.days), password: body.password == null ? '' : body.password, selection, ws: sel.ws, board: sel.board }, { env });
-    return send(r.ok ? { ok: true, id: r.id, url: r.url, ends: r.ends } : { ok: false, error: r.error }, r.ok ? 200 : (r.status || 502));
+    const r = await Host.publish(dir, { pack, team: body.team, name, kind, by: sel.by, days: Number(body.days), password: body.password == null ? '' : body.password, selection, parts, ws: sel.ws, board: sel.board }, { env });
+    return send(r.ok ? { ok: true, id: r.id, url: r.url, ends: r.ends, name } : { ok: false, error: r.error }, r.ok ? 200 : (r.status || 502));
   },
 };

package/workspace/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "pmos-workspace",
-  "version": "0.521.0",
+  "version": "0.522.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "pmos-workspace",
-      "version": "0.521.0",
+      "version": "0.522.0",
       "license": "MIT",
       "dependencies": {
         "@anthropic-ai/sdk": "^1.3.0",

package/workspace/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pmos-workspace",
-  "version": "0.521.0",
+  "version": "0.522.0",
   "private": true,
   "description": "PMOS Terminal Workspace — local companion hosting real PTYs beside the library and gates (D62)",
   "license": "MIT",

package/workspace/public/pm/bd-publish.css

@@ -47,3 +47,6 @@
 .bppop :focus-visible{outline:2px solid var(--ember);outline-offset:2px}
 #bdPublish{position:relative}#bdPublish .bpn{position:absolute;top:2px;right:0;min-width:16px;padding:0 5px;border-radius:99px;background:var(--solid);color:var(--on-solid);font:var(--fw-strong) var(--fs-badge)/var(--lh-badge) var(--mono);text-align:center;line-height:16px}
 @media (max-width:640px){.bppop{left:0 !important;right:0;bottom:0;top:auto !important;width:auto;max-width:none;border-radius:16px 16px 0 0;border-width:1px 0 0;box-shadow:0 -8px 30px rgb(0 0 0 / .18)}.bppop .bpbody{max-height:85vh;padding:12px 12px calc(18px + env(safe-area-inset-bottom,0px))}.bppop .bpcaret{display:none}}
+/* several picks (batch 27 item 1, ShA): Products and Programs as chip groups, and the link's name made from the picks */
+.bppop .bpcap{font:var(--fw-strong) var(--fs-meta)/var(--lh-meta) var(--sans,inherit);color:var(--ink-3);padding:6px 8px 0}
+.bppop .bpname{font-weight:var(--fw-strong);color:var(--ink);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}

package/workspace/public/pm/bd-publish.js

@@ -4,7 +4,8 @@
  * POST /api/board-publish, which is a page press: only a press here publishes, never an agent session.
  *
  *   No host        "Add the board host": one field and a save icon. Nothing is sent before that.
- *   Ready          What to share (chips) · Team (optional) · Password (on by default, generated; a new one, or off) · Ends in 1, 7 or 30 days
+ *   Ready          What to share: Products (the board on screen first) and Programs (each says which products it reaches) as chips, in pick
+ *                  order; several picks are one link with a tab per pick and a name made from the picks, the pencil renames it (batch 27 item 1) · Team (optional) · Password (on by default, generated; a new one, or off) · Ends in 1, 7 or 30 days
  *                  · the host with a pencil to change it · the send-up icon publishes
  *   Link ready     the link and the password, one copy icon, shown once (the workspace does not keep the password)
  *   Open links     not listed here any more: one row "N open links" opens the Shared tab, where they are managed. Zero is silence.
@@ -27,13 +28,32 @@ const OK = svg('<path d="M5 12l5 5 9-10"/>');
 const UP = svg('<path d="M12 15V4M7.5 8.5L12 4l4.5 4.5M5 14v5h14v-5"/>');
 const COPY = svg('<rect x="9" y="9" width="11" height="11" rx="2"/><path d="M5 15V6a2 2 0 0 1 2-2h9"/>');
 const MORE = svg('<path d="M9 6l6 6-6 6"/>');
+const TAG = svg('<path d="M3 12V4h8l10 10-8 8zM7.5 8.5h.01"/>');
 /** An icon-only button: the word is its tooltip and its label. */
 const ib = (icon, label, attrs, cls = '') => `<button type="button" class="bpib${cls ? ' ' + cls : ''}" aria-label="${esc(label)}" title="${esc(label)}" ${attrs}>${icon}</button>`;
 const SOON_MS = 36 * 3600 * 1000;
 
 export const COUNT = (links) => (Array.isArray(links) ? links.length : 0);
 const keyOf = (k, id) => k + ':' + id;
-const chip = (S, kind, c, extra = '') => `<button type="button" class="bpchip" data-bp-sel="${esc(keyOf(kind, c.id))}" aria-pressed="${S.sel.has(keyOf(kind, c.id))}">${esc(c.label)} <small>${extra || kind}</small></button>`;
+/** A product's key holds its ws and board (batch 27 item 1): a pick of another product publishes that product's board. */
+const prodKey = (p) => (p.ws ? p.ws + '|' + p.id : p.id);
+const chipKey = (kind, c) => keyOf(kind, kind === 'product' ? prodKey(c) : c.id);
+const chip = (S, kind, c, extra = '') => `<button type="button" class="bpchip" data-bp-sel="${esc(chipKey(kind, c))}" aria-pressed="${S.sel.has(chipKey(kind, c))}">${esc(c.label)}${extra ? ` <small>${esc(extra)}</small>` : ''}</button>`;
+/** The link's name made from the picks, in pick order: three names, then "+ N more" (lib/board-pack.js nameOf). */
+export function autoName(S) {
+  const c = S.choices || { products: [], programs: [], initiatives: [] };
+  const labels = [...S.sel].map((k) => { const i = k.indexOf(':'); const kind = k.slice(0, i), id = k.slice(i + 1);
+    const list = kind === 'product' ? c.products : kind === 'program' ? c.programs : c.initiatives;
+    const x = (list || []).find((y) => (kind === 'product' ? prodKey(y) : y.id) === id); return x ? x.label : id; });
+  return labels.length > 3 ? labels.slice(0, 3).join(' + ') + ' + ' + (labels.length - 3) + ' more' : labels.join(' + ');
+}
+/** The picks as the publish route takes them, in pick order (lib/board-publish-parts.js). */
+export function partsOf(S, ctx) {
+  return [...S.sel].map((k) => { const i = k.indexOf(':'); const kind = k.slice(0, i), id = k.slice(i + 1);
+    if (kind === 'product') { const j = id.indexOf('|'); return j < 0 ? { kind, ws: ctx.ws, board: id } : { kind, ws: id.slice(0, j), board: id.slice(j + 1) }; }
+    if (kind === 'program') return { kind, id };
+    return { kind, id, ws: ctx.ws, board: ctx.board || ctx.ws }; });
+}
 
 /** The popover's inside. S = { phase, host, days, choices, sel:Set, team, pw, pass, err, busy, made, links, iniOpen, copied, now } */
 export function publishHtml(S) {
@@ -55,10 +75,17 @@ export function publishHtml(S) {
   }
   const c = S.choices || { products: [], programs: [], initiatives: [] };
   const picked = c.initiatives.filter((i) => S.sel.has(keyOf('initiative', i.id)));
-  const chips = c.products.map((p) => chip(S, 'product', p)).join('') + c.programs.map((p) => chip(S, 'program', p)).join('') + picked.map((i) => chip(S, 'initiative', i)).join('')
+  const prods = c.products.map((p) => chip(S, 'product', p, p.n ? String(p.n) : '')).join('');
+  const progs = c.programs.map((p) => chip(S, 'program', p, p.reach || '')).join('');
+  const inis = picked.map((i) => chip(S, 'initiative', i, 'initiative')).join('')
     + (c.initiatives.length ? `<button type="button" class="bpchip add" data-bp="ini" aria-expanded="${!!S.iniOpen}">${PLUS}Initiative</button>` : '');
   const menu = S.iniOpen ? `<div class="bpmenu" role="menu">${c.initiatives.filter((i) => !S.sel.has(keyOf('initiative', i.id))).map((i) => `<button type="button" role="menuitem" data-bp-add="${esc(i.id)}">${esc(i.label)}</button>`).join('') || '<p class="bpnote">Every initiative is picked.</p>'}</div>` : '';
-  return `<div class="bpeye">What to share</div><div class="bpchips">${chips}</div>${menu}`
+  // several picks: one link, one tab per pick; its name is made from the picks, and the pencil renames it (batch 27 item 1, ShA)
+  const name = S.sel.size > 1 ? (S.naming
+    ? `<div class="bpfield"><div class="bpinp2">${TAG}<input id="bpName" type="text" maxlength="120" autocomplete="off" aria-label="The link's name" value="${esc(S.name || autoName(S))}">${ib(OK, 'Keep this name', 'data-bp="named"', 'gh sm')}</div></div>`
+    : `<div class="bpfield"><div class="bpinp2" title="The link's name. Made from your picks; the pencil changes it.">${TAG}<span class="bpg bpname">${esc(S.name || autoName(S))}</span>${ib(PEN, 'Rename the link', 'data-bp="rename"', 'gh sm')}</div></div>`) : '';
+  return `<div class="bpeye">What to share</div>${c.products.length > 1 || c.programs.length ? '<div class="bpcap">Products</div>' : ''}<div class="bpchips">${prods}</div>`
+    + (progs ? `<div class="bpcap">Programs</div><div class="bpchips">${progs}</div>` : '') + `<div class="bpchips">${inis}</div>${menu}` + name
     + `<div class="bpfield"><div class="bpinp2">${TEAM}<input id="bpTeam" type="text" maxlength="40" autocomplete="off" aria-label="Team" placeholder="Team (optional)" value="${esc(S.team)}"></div></div>`
     + `<div class="bpfield"><div class="bpinp2">${LOCK}${S.pw ? `<input id="bpPass" type="text" spellcheck="false" autocomplete="off" aria-label="Password" value="${esc(S.pass)}">${ib(DICE, 'New password', 'data-bp="newpw"', 'gh sm')}` : '<span class="bpg bpoff">No password</span>'}<button type="button" class="bpsw" role="switch" aria-checked="${S.pw}" aria-label="Password" title="Password" data-bp="pw"></button></div></div>`
     + `<div class="bpline2"><span class="bpnote">Ends in</span><div class="bpseg" role="group" aria-label="Link ends after (days)">${[1, 7, 30].map((d) => `<button type="button" data-bp-days="${d}" aria-pressed="${S.days === d}" aria-label="${d === 1 ? '1 day' : d + ' days'}">${d}</button>`).join('')}</div><span class="bpnote">days</span></div>`
@@ -110,7 +137,8 @@ export function open(btn, ctx) {
   const onKey = (e) => { if (e.key === 'Escape' && m.isConnected) { e.stopPropagation(); close(true); } };
   const onOut = (e) => { if (m.isConnected && !m.contains(e.target) && !btn.contains(e.target)) close(false); };
   const draw = (focus) => {
-    const keep = { team: m.querySelector('#bpTeam'), pass: m.querySelector('#bpPass'), host: m.querySelector('#bpHost') };
+    const keep = { team: m.querySelector('#bpTeam'), pass: m.querySelector('#bpPass'), host: m.querySelector('#bpHost'), name: m.querySelector('#bpName') };
+    if (keep.name) S.name = keep.name.value.trim() === autoName(S) ? '' : keep.name.value.trim();
     if (keep.team) S.team = keep.team.value; if (keep.pass) S.pass = keep.pass.value; if (keep.host) S.hostIn = keep.host.value;
     body.innerHTML = publishHtml(S); place();
     const f = focus && m.querySelector(focus); if (f) f.focus();
@@ -120,7 +148,7 @@ export function open(btn, ctx) {
     const r = await pmGet(q).catch(() => null);
     if (!r || !r.ok) { S.phase = 'form'; S.err = (r && r.error) || 'The workspace did not answer. Try again.'; return draw(); }
     S.phase = 'form'; S.host = r.host; S.links = r.links || []; S.choices = r.choices; if (!S.pass) S.pass = r.password || ''; S.now = Date.now();
-    if (!S.sel.size && S.choices && S.choices.products[0]) S.sel.add(keyOf('product', S.choices.products[0].id));
+    if (!S.sel.size && S.choices && S.choices.products[0]) S.sel.add(chipKey('product', S.choices.products[0]));
     draw(); refreshCount(btn);
   };
   m.onclick = async (e) => {
@@ -138,6 +166,8 @@ export function open(btn, ctx) {
       if (!r || !r.ok) { S.err = (r && r.error) || 'The address was not saved.'; return draw('#bpHost'); }
       S.phase = 'loading'; draw(); return load();
     }
+    if (act === 'rename') { S.naming = true; return draw('#bpName'); }
+    if (act === 'named') { S.naming = false; return draw('[data-bp="rename"]'); }
     if (act === 'ini') { S.iniOpen = !S.iniOpen; return draw('[data-bp="ini"]'); }
     if (act === 'pw') { S.pw = !S.pw; return draw('[data-bp="pw"]'); }
     if (act === 'newpw') { const r = await pmGet('/api/board-publish').catch(() => null); if (r && r.ok) S.pass = r.password; return draw('#bpPass'); }
@@ -148,10 +178,10 @@ export function open(btn, ctx) {
     }
     if (act === 'make') {
       draw(); if (S.busy) return; S.busy = true; S.err = ''; draw();
-      const select = [...S.sel].map((k) => { const i = k.indexOf(':'); return { kind: k.slice(0, i), id: k.slice(i + 1) }; });
-      const r = await pmPost('/api/board-publish', { ws: ctx.ws, board: ctx.board || ctx.ws, select, team: S.team.trim(), password: S.pw ? S.pass : '', days: S.days, view: ctx.view }).catch(() => null);
+      const parts = partsOf(S, ctx); const several = S.sel.size > 1;
+      const r = await pmPost('/api/board-publish', { ws: ctx.ws, board: ctx.board || ctx.ws, parts, name: several ? S.name || '' : '', team: S.team.trim(), password: S.pw ? S.pass : '', days: S.days, view: ctx.view }).catch(() => null);
       S.busy = false;
-      if (r && r.ok) { const l = (await pmGet('/api/board-publish').catch(() => null)) || {}; S.links = l.links || S.links; S.made = { url: r.url, pass: S.pw ? S.pass : '', ends: r.ends, team: S.team.trim(), name: (S.links.find((x) => x.id === r.id) || {}).name || 'Board' }; S.pass = ''; S.err = ''; draw('[data-bp="copy"]'); return refreshCount(btn); }
+      if (r && r.ok) { const l = (await pmGet('/api/board-publish').catch(() => null)) || {}; S.links = l.links || S.links; S.made = { url: r.url, pass: S.pw ? S.pass : '', ends: r.ends, team: S.team.trim(), name: r.name || (S.links.find((x) => x.id === r.id) || {}).name || 'Board' }; S.pass = ''; S.err = ''; draw('[data-bp="copy"]'); return refreshCount(btn); }
       S.err = (r && r.error) || 'The workspace did not answer. Try again.'; return draw();
     }
   };

package/workspace/public/pm/bd-shared.css

@@ -92,3 +92,8 @@
   #cShared .bdsh-pwpop::before { display: none; }
   #cShared .bdsh-first { margin: 8px auto; }
 }
+/* Shared with you (batch 27 item 3, ShX X2 and X3): the paste field on top, then one quiet row per board someone shared with you */
+#cShared .bdsh-paste { display: grid; gap: 8px; margin-bottom: 12px; }
+#cShared .bdsh-col > .bdsh-cap { display: block; margin: 12px 0 4px; }
+#cShared .bdsh-pill { display: inline-flex; align-items: center; height: 22px; padding: 0 9px; border-radius: 999px; background: var(--cz-well); font-size: var(--fs-badge); font-weight: var(--fw-strong); color: var(--cz-ink2); flex: none; }
+#cShared .bdsh-pill.w { background: var(--cz-riskbg); color: var(--cz-risk); }