create-pmos 0.522.0 → 0.523.0

package/bin/create-pmos.js

@@ -316,12 +316,37 @@ function installWorkspaceGlobal() {
       { encoding: 'utf8', shell, ...hide() });
     const tgz = pack.status === 0 ? (pack.stdout || '').trim().split('\n').pop() : '';
     if (!tgz) { console.error(`create-pmos: could not pack the workspace app${pack.stderr ? ' — ' + pack.stderr.trim() : ''}`); return 1; }
-    return cp.spawnSync(npmCmd, ['install', '-g', path.join(tmp, tgz), '--no-audit', '--no-fund'],
+    const status = cp.spawnSync(npmCmd, ['install', '-g', path.join(tmp, tgz), '--no-audit', '--no-fund'],
       { stdio: 'inherit', shell, ...hide() }).status;
+    if (status === 0) shipKitWithApp(npmCmd, shell);
+    return status;
   } finally {
     try { fs.rmSync(tmp, { recursive: true, force: true }); } catch {}
   }
 }
+// The installed app sets up new projects ("Set up PMOS in <folder>"), so it needs the kit. Only this temporary npx bundle has
+// payload/ beside workspace/; the global copy got workspace/ alone and every setup failed "This PMOS install has no kit to add"
+// (onboarding grill, 2026-11-04). Copy the kit into the installed app as <app>/payload, where lib/project-onboard.js looks first.
+// It is copied after `npm install -g` and not packed into the tarball: the workspace's .gitignore patterns (state/acceptances.jsonl)
+// would drop kit files from an `npm pack`. Best-effort: without it setup falls back to `npx create-pmos`.
+function shipKitWithApp(npmCmd, shell) {
+  if (!fs.existsSync(path.join(PAYLOAD, 'AGENTS.md'))) return false;
+  const root = cp.spawnSync(npmCmd, ['root', '-g'], { encoding: 'utf8', shell, ...hide() });
+  const app = path.join(String(root.stdout || '').trim(), 'pmos-workspace');
+  if (root.status !== 0 || !fs.existsSync(path.join(app, 'package.json'))) {
+    console.log('   (the kit was not copied into the installed app; project setup will download it when needed)');
+    return false;
+  }
+  try {
+    const dest = path.join(app, 'payload');
+    fs.rmSync(dest, { recursive: true, force: true });
+    fs.cpSync(PAYLOAD, dest, { recursive: true });
+    return true;
+  } catch (e) {
+    console.log(`   (the kit was not copied into the installed app: ${e.message}; project setup will download it when needed)`);
+    return false;
+  }
+}
 // A persistent server started by the OLD code keeps serving OLD assets after an upgrade — stop it so
 // the next launch brings the server up on the freshly installed code. Best-effort; ignore failures.
 function stopWorkspaceServer() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-pmos",
-  "version": "0.522.0",
+  "version": "0.523.0",
   "description": "Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with all state as git-versioned files. Includes `workflow-sweep`, which audits the state every board derives from and separates real defects from work you simply have not done. `create-pmos workspace` also installs + launches the local Terminal Workspace GUI. No database, no network, no telemetry.",
   "license": "MIT",
   "bin": {
@@ -32,6 +32,19 @@
     "audit"
   ],
   "pmosChanges": [
+    {
+      "v": "0.523.0",
+      "at": "2026-11-04T08:06:51.586Z",
+      "f": 4,
+      "prs": [
+        {
+          "n": 1221,
+          "t": "The installed app carries the kit, and ~/PMOS holds one product",
+          "s": "The installed app carries the kit, and ~/PMOS holds one product",
+          "k": "fix"
+        }
+      ]
+    },
     {
       "v": "0.522.0",
       "at": "2026-11-04T07:22:01.639Z",
@@ -373,37 +386,6 @@
           "d": "The Working card could keep counting after Claude had answered. Now it goes away when the answer ends."
         }
       ]
-    },
-    {
-      "v": "0.503.0",
-      "at": "2026-11-03T05:48:42.979Z",
-      "f": 4,
-      "prs": [
-        {
-          "n": 1186,
-          "t": "A timeline end ◇ names the initiative's own workflow, never a fixed Deliver",
-          "s": "A timeline end ◇ names the initiative's own workflow, never a fixed Deliver",
-          "k": "fix",
-          "h": "Timelines end at the right step",
-          "d": "A timeline always ended at Deliver, whatever the workflow. Now it ends at the initiative's own last step."
-        },
-        {
-          "n": 1187,
-          "t": "Working card leads with the todo or turn goal, not the raw command",
-          "s": "Working card leads with the todo or turn goal, not the raw command",
-          "k": "new",
-          "h": "A calmer Working card",
-          "d": "While Claude worked, a card showed the raw command. Now it leads with the to-do or goal it is working on."
-        },
-        {
-          "n": 1188,
-          "t": "New meeting recording view, word fix in place",
-          "s": "New meeting recording view, word fix in place",
-          "k": "new",
-          "h": "A new meeting recording view",
-          "d": "A recording showed everything at once. Now it opens on a short summary, each point has one check, and you can fix a misheard word in place."
-        }
-      ]
     }
   ]
 }

package/payload/KIT-VERSION

@@ -1,3 +1,3 @@
-kernel-source: pmos@60230431
+kernel-source: pmos@45be2110
 assembled: 2026-11-04
 mode: vendor

package/payload/planning/evals/eval-calibration.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Eval calibration log"
 description: "Append-only record of every PM override of an evaluator verdict."
-generated: {by: process:create-pmos, at: "2026-11-04T07:21:58Z"}
+generated: {by: process:create-pmos, at: "2026-11-04T08:06:47Z"}
 status: stable
 ---
 

package/payload/planning/okrs/health-budgets.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Health budgets"
 description: "Closed registry of health-budget anchors (D59), edited only by the PM."
-generated: {by: process:create-pmos, at: "2026-11-04T07:21:58Z"}
+generated: {by: process:create-pmos, at: "2026-11-04T08:06:47Z"}
 status: stable
 ---
 

package/payload/state/discoveries.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Discoveries and friction log"
 description: "Append-only record of what runs discovered and where the process rubbed."
-generated: {by: process:create-pmos, at: "2026-11-04T07:21:58Z"}
+generated: {by: process:create-pmos, at: "2026-11-04T08:06:47Z"}
 status: stable
 ---
 

package/workspace/changelog.json

@@ -1,4 +1,17 @@
 [
+ {
+  "v": "0.523.0",
+  "at": "2026-11-04T08:06:51.586Z",
+  "f": 4,
+  "prs": [
+   {
+    "n": 1221,
+    "t": "The installed app carries the kit, and ~/PMOS holds one product",
+    "s": "The installed app carries the kit, and ~/PMOS holds one product",
+    "k": "fix"
+   }
+  ]
+ },
  {
   "v": "0.522.0",
   "at": "2026-11-04T07:22:01.639Z",

package/workspace/lib/connector-read.js

@@ -0,0 +1,19 @@
+'use strict';
+/* connector-read.js — which connector tools are read-shaped. Shared by project setup (lib/project-onboard.js) and background runs
+ * (lib/headless.js connectorReads). Kept in its own file so a change to project setup does not reach every suite that uses headless runs. */
+const READ_VERBS = new Set(['search', 'get', 'list', 'read', 'fetch', 'find', 'query', 'lookup', 'view', 'describe', 'retrieve', 'browse', 'resolve']);
+const WRITE_VERBS = new Set(['create', 'update', 'delete', 'add', 'post', 'send', 'write', 'edit', 'move', 'transition', 'comment', 'assign', 'upload',
+  'remove', 'set', 'merge', 'close', 'archive', 'share', 'copy', 'trash', 'label', 'mark', 'apply', 'schedule', 'reply', 'forward', 'draft', 'respond',
+  'invite', 'publish', 'run', 'execute', 'trigger', 'link', 'unlink', 'approve', 'submit', 'save', 'log', 'record', 'register', 'insert', 'append',
+  'clear', 'fork', 'enable', 'disable', 'untrash', 'unmark', 'unlabel', 'cancel', 'install', 'import', 'export', 'generate', 'use', 'push', 'request', 'rename']);
+const words = (s) => String(s).replace(/([a-z0-9])([A-Z])/g, '$1 $2').split(/[^A-Za-z0-9]+/).filter(Boolean).map((w) => w.toLowerCase());
+
+/** A tool may be granted only when its own name (after the server prefix) leads with a read verb and holds no write verb. */
+function readTool(toolName, prefix) {
+  const own = prefix && toolName.startsWith(prefix) ? toolName.slice(prefix.length) : toolName.replace(/^mcp__[^_]+(?:_[^_]+)*?__/, '');
+  const w = words(own);
+  if (!w.length || w.some((x) => WRITE_VERBS.has(x))) return false;
+  return w.slice(0, 3).some((x) => READ_VERBS.has(x));
+}
+
+module.exports = { readTool, READ_VERBS, WRITE_VERBS };

package/workspace/lib/headless.js

@@ -215,7 +215,7 @@ const TOOLS = Object.freeze({
 // without a prompt. The kinds below read the PM's sources through connectors (Jira, Confluence, Slack, the calendar, mail, Drive), and before
 // dontAsk they relied on the PM's default mode letting a read-only connector tool run. Now the server names those tools: the read-shaped tools
 // of the PM's connected servers (CONNECTOR_READ_SEED, plus what each run's init line reports, server.js), filtered by the same read-verb rule the
-// onboarding search uses (lib/project-onboard.js readTool). A connector WRITE is never named, so it is still denied. The other kinds read no
+// onboarding search uses (lib/connector-read.js readTool). A connector WRITE is never named, so it is still denied. The other kinds read no
 // connector and get none.
 const CONNECTOR_READ_KINDS = Object.freeze(['skill', 'report-setup', 'report-find', 'ms-review', 'propose', 'metric-draft', 'impact', 'metric-read',
   'report-sample-fetch', 'report-structure', 'report-structure-dry', 'report-structure-pull']);
@@ -235,7 +235,7 @@ const CONNECTOR_READ_SEED = Object.freeze([
 const MCP_TOOL_RE = /^mcp__[\w-]+__[\w.-]+$/;   // one exact tool: Claude Code's rule syntax, no server-wide or wildcard rule
 /** The read-shaped connector tools among `names` (a run's init line, or a cached list): exact names only, never a write verb. */
 function connectorReads(names) {
-  const { readTool } = require('./project-onboard.js');
+  const { readTool } = require('./connector-read.js');
   const out = [];
   for (const n of Array.isArray(names) ? names : []) {
     const t = String(n || '');

package/workspace/lib/project-onboard.js

@@ -24,11 +24,7 @@ const os = require('os');
 const crypto = require('crypto');
 const cp = require('child_process');
 
-const READ_VERBS = new Set(['search', 'get', 'list', 'read', 'fetch', 'find', 'query', 'lookup', 'view', 'describe', 'retrieve', 'browse', 'resolve']);
-const WRITE_VERBS = new Set(['create', 'update', 'delete', 'add', 'post', 'send', 'write', 'edit', 'move', 'transition', 'comment', 'assign', 'upload',
-  'remove', 'set', 'merge', 'close', 'archive', 'share', 'copy', 'trash', 'label', 'mark', 'apply', 'schedule', 'reply', 'forward', 'draft', 'respond',
-  'invite', 'publish', 'run', 'execute', 'trigger', 'link', 'unlink', 'approve', 'submit', 'save', 'log', 'record', 'register', 'insert', 'append',
-  'clear', 'fork', 'enable', 'disable', 'untrash', 'unmark', 'unlabel', 'cancel', 'install', 'import', 'export', 'generate', 'use', 'push', 'request', 'rename']);
+const { readTool } = require('./connector-read.js');
 const HOOKS_OFF = JSON.stringify({ disableAllHooks: true });
 const MAX_FINDINGS = 40;
 const FIELDS = ['purpose', 'team', 'owner', 'timeline', 'goals'];
@@ -37,15 +33,6 @@ const clean = (v, n = 300) => String(v == null ? '' : v).replace(/[\u0000-\u001f
 const httpsOnly = (u) => { try { const x = new URL(String(u)); return x.protocol === 'https:' ? x.href.slice(0, 500) : null; } catch { return null; } };
 /** Claude Code's tool prefix for a server name: `mcp__<name with every other character as _>__`. */
 const prefixOf = (name) => 'mcp__' + String(name).replace(/[^A-Za-z0-9_-]/g, '_') + '__';
-const words = (s) => String(s).replace(/([a-z0-9])([A-Z])/g, '$1 $2').split(/[^A-Za-z0-9]+/).filter(Boolean).map((w) => w.toLowerCase());
-
-/** A tool may be granted only when its own name (after the server prefix) leads with a read verb and holds no write verb. */
-function readTool(toolName, prefix) {
-  const own = prefix && toolName.startsWith(prefix) ? toolName.slice(prefix.length) : toolName.replace(/^mcp__[^_]+(?:_[^_]+)*?__/, '');
-  const w = words(own);
-  if (!w.length || w.some((x) => WRITE_VERBS.has(x))) return false;
-  return w.slice(0, 3).some((x) => READ_VERBS.has(x));
-}
 
 function parseMcpList(stdout) {
   const out = [];
@@ -282,7 +269,9 @@ function installKit(root, kit) {
   if (fs.existsSync(dest)) throw new Error('A pmos folder is already there. PMOS will not replace it.');
   if (kit.payload) { fs.cpSync(kit.payload, dest, { recursive: true }); }
   else if (kit.buildScript) { cp.execFileSync('bash', [kit.buildScript, root], { stdio: 'ignore', timeout: 300000 }); }
-  else throw new Error('This PMOS install has no kit to add.');
+  // No npm fallback here: only lib/kit-update.js reaches the registry (no-network.test.js). An app installed before the kit shipped with
+  // it gets the kit with its next update.
+  else throw new Error('This PMOS install has no kit to add. Update PMOS in Settings › Updates, then try again.');
   if (!fs.existsSync(path.join(dest, 'AGENTS.md'))) throw new Error('The kit did not install completely.');
   const profile = path.join(root, '.pmos-profile');
   if (!fs.existsSync(profile)) fs.writeFileSync(profile, 'pm-artifacts\n# PMOS repository profile (D68): pm-artifacts | product-code\n');
@@ -290,8 +279,10 @@ function installKit(root, kit) {
   const cur = fs.existsSync(ga) ? fs.readFileSync(ga, 'utf8') : '';
   if (!cur.split('\n').some((l) => l.trim() === '*.jsonl merge=union')) fs.writeFileSync(ga, `${cur}${cur && !cur.endsWith('\n') ? '\n' : ''}*.jsonl merge=union\n`);
 }
+/** Where the kit comes from: the installed app's own payload/ (create-pmos copies it there), the npx bundle's, a PMOS checkout's
+ *  build script. */
 function kitSource(here = __dirname, env = process.env) {
-  const candidates = [env.PMOS_KIT_PAYLOAD, path.join(here, '..', '..', 'payload'), path.join(here, '..', '..', 'npm-pkg', 'payload')].filter(Boolean);
+  const candidates = [env.PMOS_KIT_PAYLOAD, path.join(here, '..', 'payload'), path.join(here, '..', '..', 'payload'), path.join(here, '..', '..', 'npm-pkg', 'payload')].filter(Boolean);
   const payload = candidates.find((p) => fs.existsSync(path.join(p, 'AGENTS.md')));
   if (payload) return { payload };
   const buildScript = path.join(here, '..', '..', 'kit', 'build-kit.sh');

package/workspace/lib/refresh-run.js

@@ -236,7 +236,8 @@ function create(host) {
       }
       start(src, ws, { trigger: d.trigger, slot: d.slot, note: d.note });
     }
-    try { healTick(t, set); } catch (e) { warn('source repair', e); }
+    // PMOS_SOURCE_HEAL=off stops the repairs (a suite about pressed and scheduled runs sets it, so no repair run races them)
+    if (process.env.PMOS_SOURCE_HEAL !== 'off') { try { healTick(t, set); } catch (e) { warn('source repair', e); } }
     if (t - lastPrune > PRUNE_EVERY_MS) {
       lastPrune = t;
       try { const p = R.prune(dir, rules.keep, t); if (p.lines || p.copies) warn('refresh log', { message: `removed ${p.lines} lines and ${p.copies} copies older than ${rules.keep} days` }); } catch (e) { warn('refresh log prune', e); }

package/workspace/lib/routes-onboard.js

@@ -62,6 +62,14 @@ function hasWork(root) {
   return INITIATIVE_DIRS.some((d) => ls(d).some((n) => n.endsWith('.md') && !/^README|template/i.test(n)))
     || RECORD_DIRS.some((d) => ls(d).some((n) => n.endsWith('.jsonl') && filled(d, n)));
 }
+/** The installer's home folder while it is still an empty kit (PMOS in it, no work yet), as folder facts; otherwise null. */
+function installerKit(ctx) {
+  if (!ctx.homeRoot || !(ctx.workspaceList ? ctx.workspaceList() : []).some((w) => w && w.root && path.resolve(w.root) === path.resolve(ctx.homeRoot))) return null;
+  const pm = P.pmosIn(ctx.homeRoot);
+  if (!pm || !pm.kit || hasWork(ctx.homeRoot)) return null;
+  const facts = P.folderFacts(ctx.homeRoot);
+  return facts.ok && facts.exists && !facts.inside_other_git ? facts : null;
+}
 function view(ctx) {
   const { st, bound } = fresh(ctx, read(ctx));
   const ws = st.done && st.done.ws && ctx.getWs(st.done.ws);
@@ -123,6 +131,15 @@ async function handle(req, res, url, ctx) {
         if (r.cancelled || !r.path) return send({ ok: false, cancelled: true });
         if (b.mode === 'new') parent = r.path; else root = r.path;
       }
+      // One folder per product: the one-line installer already made ~/PMOS a Git repository with an empty kit and opened it as the home
+      // product. The first proposal is that folder, so setup fills it (and renames it to the product) instead of nesting a second
+      // repository inside it and leaving an empty "PMOS" product behind (onboarding grill, 2026-11-04). Choosing "Make a new folder"
+      // afterwards still proposes a new one.
+      const reuse = b.mode === 'new' && !parent && !st.folder && installerKit(ctx);
+      if (reuse) {
+        write(ctx, { ...st, folder: { mode: 'existing', root: reuse.root, facts: reuse, chosen: false, reused: true } });
+        return send(view(ctx));
+      }
       if (b.mode === 'new') {
         const pr = P.proposeFolder(parent, st.project.name);
         if (!pr.ok) return send(pr, 400);

package/workspace/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "pmos-workspace",
-  "version": "0.522.0",
+  "version": "0.523.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "pmos-workspace",
-      "version": "0.522.0",
+      "version": "0.523.0",
       "license": "MIT",
       "dependencies": {
         "@anthropic-ai/sdk": "^1.3.0",

package/workspace/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pmos-workspace",
-  "version": "0.522.0",
+  "version": "0.523.0",
   "private": true,
   "description": "PMOS Terminal Workspace — local companion hosting real PTYs beside the library and gates (D62)",
   "license": "MIT",