create-pmos 0.66.0 → 0.67.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-pmos",
-  "version": "0.66.0",
+  "version": "0.67.1",
   "description": "Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with all state as git-versioned files. Includes `workflow-sweep`, which audits the state every board derives from and separates real defects from work you simply have not done. `create-pmos workspace` also installs + launches the local Terminal Workspace GUI. No database, no network, no telemetry.",
   "license": "MIT",
   "bin": {

package/payload/KIT-VERSION

@@ -1,3 +1,3 @@
-kernel-source: pmos@c6198fe
+kernel-source: pmos@7fc2d3a
 assembled: 2026-10-07
 mode: vendor

package/payload/planning/evals/eval-calibration.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Eval calibration log"
 description: "Append-only record of every PM override of an evaluator verdict."
-generated: {by: process:create-pmos, at: "2026-10-07T01:43:50Z"}
+generated: {by: process:create-pmos, at: "2026-10-07T02:28:54Z"}
 status: stable
 ---
 

package/payload/planning/okrs/health-budgets.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Health budgets"
 description: "Closed registry of health-budget anchors (D59), edited only by the PM."
-generated: {by: process:create-pmos, at: "2026-10-07T01:43:50Z"}
+generated: {by: process:create-pmos, at: "2026-10-07T02:28:54Z"}
 status: stable
 ---
 

package/payload/state/discoveries.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Discoveries and friction log"
 description: "Append-only record of what runs discovered and where the process rubbed."
-generated: {by: process:create-pmos, at: "2026-10-07T01:43:50Z"}
+generated: {by: process:create-pmos, at: "2026-10-07T02:28:54Z"}
 status: stable
 ---
 

package/workspace/guide/layout.md

@@ -17,7 +17,7 @@ The top bar has these parts, from left to right:
 - **Branches and sessions** is in ⌘K. It opens a sheet with every branch of the repository (main first) and how many sessions run in each. Press a branch to see its sessions, open one, end one, or start a session there. **＋ branch** makes a branch, and **＋ session** starts one with a branch, an agent and a profile. With All repositories, the sheet lists every repository.
 - **Agenda, Initiatives, Board, Reports, Docs and People** are the six places. Press one to show it. The Agenda count shows how many items need you. Docs shows whether each document is the same as its Google Docs and Confluence copy. People shows the people you work with in the repository ([People](people.md)).
 - **Search or capture ⌘K** opens the command palette. Type to find an initiative, a repository, an open tab or a command.
-- **Sync** shows only when the current repository is not in sync with its remote. Press it to fetch, bring in the work of the other machine, record your changes and push. If the repository has not fetched in the last 10 minutes, Sync also shows, because a push from another machine is not visible until a fetch. When the repository fetched recently and is in sync, Sync is not shown. If Sync stops, the message names the step that stopped.
+- **Sync** shows only when the current repository is not in sync with its remote. Press it to fetch, bring in the work of the other machine, record your changes and push. If the repository has not fetched in the last 10 minutes, Sync also shows, because a push from another machine is not visible until a fetch. When the repository fetched recently and is in sync, Sync is not shown. When two machines add lines to the same ledger (a `.jsonl` file under `pmos/` or `planning/`), Sync keeps the lines from both machines. If Sync stops, the message names the step that stopped. If both machines changed the same lines of another file, the message names the file. Keep the version you want in that file on one machine, sync it, then sync the other machine.
 - **Sync on its own.** If you forget to press Sync, the workspace syncs for you. It syncs each repository once when the workspace starts. It also syncs a repository that has records not yet pushed when no record changed for 5 minutes. In a document repository it syncs every changed file on any branch. In a code repository it syncs only on the default branch (for example `main`), and only when every commit not yet pushed changes records and no code. If you close the tab while records are not yet pushed, the browser asks you first. To turn automatic sync off, start the workspace with `PMOS_AUTO_SYNC=0`.
 - **Settings** opens the settings of the workspace.
 

package/workspace/lib/sync.js

@@ -54,6 +54,26 @@ const isRecord = (rel) => RECORD_PATHS.some((p) => rel === p || rel.startsWith(`
 // PM repositories append ledgers from several machines; `merge=union` keeps both sides' lines instead
 // of conflicting (D70). Added once, committed with the records. Never touches a product-code repository.
 const UNION_LINE = '*.jsonl merge=union';
+
+// The same rule, given to the replay itself rather than read from the repository. A committed `.gitattributes` holds
+// only for a PM-profile repository, and only once it is already on the remote: a rebase reads the attributes of the
+// tree it replays ONTO, so a union line arriving in the very commit being replayed does not apply to it. A code
+// repository never carries the line at all, so two machines appending pmos/state/runs.jsonl stopped Sync at
+// integrate every time. `core.attributesFile` is the lowest-precedence attribute source, so a repository's own
+// `.gitattributes` still wins; it is set for this one rebase and written to no tracked file.
+// A code repository unions its record ledgers only; a document repository every ledger.
+function unionAttributesFor(root) {
+  const lines = profileOf(root) === 'pm-artifacts' ? [UNION_LINE]
+    : RECORD_PATHS.filter((p) => !p.startsWith('.')).map((p) => `${p}/**/*.jsonl merge=union`);
+  const f = path.join(os.tmpdir(), `pmos-sync-attributes-${profileOf(root)}`);
+  const text = `${lines.join('\n')}\n`;
+  try {
+    // written only when it differs, so a second repository's sync never reads it half-written
+    if ((fs.existsSync(f) ? fs.readFileSync(f, 'utf8') : '') !== text) fs.writeFileSync(f, text);
+    return f;
+  } catch { return null; }
+}
+
 function ensureUnionAttribute(root) {
   try {
     const prof = fs.readFileSync(path.join(root, '.pmos-profile'), 'utf8').split('\n').map((l) => l.replace(/#.*$/, '').trim()).find(Boolean);
@@ -136,11 +156,19 @@ async function sync(root, { label } = {}) {
   const s2 = await status(root);
   if (s2.behind) {
     // Fast-forward when we have nothing of our own; otherwise replay OUR unpushed commits on top.
-    const verb = s2.ahead ? ['rebase', '--autostash', s2.upstream] : ['merge', '--ff-only', s2.upstream];
+    const attrs = s2.ahead ? unionAttributesFor(root) : null;
+    const verb = s2.ahead ? [...(attrs ? ['-c', `core.attributesFile=${attrs}`] : []), 'rebase', '--autostash', s2.upstream]
+      : ['merge', '--ff-only', s2.upstream];
     const r = await run(root, verb);
     if (!r.ok) {
-      if (s2.ahead) await run(root, ['rebase', '--abort']);
-      return stop('integrate', `${s2.ahead ? 'the two machines changed the same lines — rebase aborted, nothing changed' : 'cannot fast-forward'} — ${r.err.split('\n')[0] || 'see git'}`);
+      if (!s2.ahead) return stop('integrate', `cannot fast-forward — ${r.err.split('\n')[0] || 'see git'}`);
+      // Name the files before the abort clears them: the PM has to open these, and "the same lines" alone says not where.
+      const u = await run(root, ['diff', '--name-only', '--diff-filter=U']);
+      const files = u.ok && u.out ? u.out.split('\n').filter(Boolean) : [];
+      await run(root, ['rebase', '--abort']);
+      return stop('integrate', files.length
+        ? `both machines changed ${files.join(', ')} — rebase aborted, nothing changed; keep the version you want in each file on one machine, sync it, then sync the other`
+        : `the two machines changed the same lines — rebase aborted, nothing changed — ${r.err.split('\n')[0] || 'see git'}`);
     }
     done('integrate', s2.ahead ? `replayed ${s2.ahead} local commit(s) on the remote` : `fast-forwarded ${s2.behind} commit(s)`);
   } else done('integrate', 'nothing to bring in');
@@ -183,5 +211,5 @@ async function defaultBranchOf(root, remote) {
   return null;
 }
 
-module.exports = { status, sync, ensureUnionAttribute, RECORD_PATHS, isRecord, REMOTE_FRESH_MS,
+module.exports = { status, sync, ensureUnionAttribute, unionAttributesFor, RECORD_PATHS, isRecord, REMOTE_FRESH_MS,
   unpushedPaths, newestDirtyRecordMs, defaultBranchOf, profileOf };

package/workspace/package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "pmos-workspace",
-  "version": "0.66.0",
+  "version": "0.67.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {

package/workspace/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pmos-workspace",
-  "version": "0.66.0",
+  "version": "0.67.1",
   "private": true,
   "description": "PMOS Terminal Workspace — local companion hosting real PTYs beside the library and gates (D62)",
   "license": "MIT",

package/workspace/run-tests.js

@@ -2,8 +2,9 @@
 'use strict';
 /* run-tests.js — run the workspace suites side by side.
  *
- *   node run-tests.js <group> [--jobs=N] [--shard=I/N] [--changed[=REF]] [--list] [--verbose]
+ *   node run-tests.js <group> [--jobs=N] [--shard=I/N] [--changed[=REF]] [--timings-out=FILE] [--list] [--verbose]
  *   node run-tests.js --check
+ *   node run-tests.js --merge-timings=DIR
  *
  * Groups come from test-files.json: unit (test.js + modules), modules, panels, ui, browser
  * (panels + ui), all. The npm scripts call this file, so `npm test` and CI run the same lists.
@@ -31,6 +32,14 @@
  * test-files.json, plus `helpers` (a -test.js file that is a helper, not a suite, with the reason, as
  * in ELSEWHERE). This file merges every fragment into the lists before it does anything else, so
  * --check, --shard and every group see one list. A fragment that is not valid fails every command.
+ *
+ * Timings. --shard balances the shards by each suite's time, and the shards only finish together when
+ * those times are the CI runner's. test-timings.json holds times measured on CI; the `seconds` keys in
+ * test-files.json and the fragments are the fallback for a suite it does not name yet, and a suite in
+ * neither counts as 10. The `seconds` numbers were measured on a 4-CPU sandbox and were off by up to
+ * 4x on the 2-CPU runners, which left one shard running 280s while two others finished in 130s.
+ * Every CI job writes its times with --timings-out and uploads them; --merge-timings=DIR folds a
+ * downloaded set into test-timings.json. A stale time never skips a suite: it only moves it.
  */
 const fs = require('fs');
 const os = require('os');
@@ -98,7 +107,10 @@ const args = process.argv.slice(2);
 const flag = (name) => { const a = args.find((x) => x === `--${name}` || x.startsWith(`--${name}=`)); return a === undefined ? undefined : (a.includes('=') ? a.slice(a.indexOf('=') + 1) : true); };
 const group = args.find((a) => !a.startsWith('--'));
 
-const secs = (f) => Number((FILES.seconds || {})[f]) || 10;
+const TIMINGS_FILE = path.join(DIR, 'test-timings.json');
+let TIMINGS = {};
+try { TIMINGS = JSON.parse(fs.readFileSync(TIMINGS_FILE, 'utf8')).seconds || {}; } catch { /* no CI timings yet: the seconds keys decide */ }
+const secs = (f) => Number(TIMINGS[f]) || Number((FILES.seconds || {})[f]) || 10;
 // Slowest first, so a long suite never starts last and holds the run open on its own.
 const bySlowest = (list) => list.map((f, k) => ({ f, k })).sort((a, b) => secs(b.f) - secs(a.f) || a.k - b.k).map((x) => x.f);
 
@@ -155,6 +167,7 @@ function changedSuites(list, ref) {
   for (const f of files) {
     if (source.has(f)) { picked.add(f); continue; }
     if (/^(guide|docs)\/|\.md$/.test(f)) continue; // prose: no suite asserts on it except guide.test.js, a unit suite
+    if (f === 'test-timings.json') continue; // run order only: no suite reads it
     const stem = path.basename(f).replace(/\.[^.]+$/, '');
     const key = stem.replace(/^(panel|view|tab)-/, '');
     const hits = list.filter((s) => source.get(s).includes(stem) || s.includes(`-${key}-`) || s.includes(`-${key}.`));
@@ -207,8 +220,30 @@ function runOne(file, verbose) {
   });
 }
 
+// Fold the --timings-out files a CI run uploaded (one per job, in DIR) into test-timings.json. A suite
+// the run did not reach keeps its old time; a time under one second is recorded as one.
+function mergeTimings(dir) {
+  const old = fs.existsSync(TIMINGS_FILE) ? JSON.parse(fs.readFileSync(TIMINGS_FILE, 'utf8')) : {};
+  const seconds = { ...(old.seconds || {}) };
+  let n = 0;
+  for (const name of fs.readdirSync(dir, { recursive: true }).filter((x) => String(x).endsWith('.json'))) {
+    for (const [f, v] of Object.entries(JSON.parse(fs.readFileSync(path.join(dir, String(name)), 'utf8')))) {
+      if (typeof v === 'number' && GROUPS.all.includes(f)) { seconds[f] = Math.max(1, Math.round(v)); n++; }
+    }
+  }
+  const sorted = Object.fromEntries(Object.keys(seconds).filter((f) => GROUPS.all.includes(f)).sort().map((f) => [f, seconds[f]]));
+  const out = {
+    _comment: old._comment || 'Wall time of each suite on the Workspace CI runners, in seconds. run-tests.js --shard balances the shards with these numbers. Refresh: download the timings-* artifacts of a green Workspace CI run into one directory, then run `node run-tests.js --merge-timings=DIR`.',
+    measured: new Date().toISOString().slice(0, 10),
+    seconds: sorted,
+  };
+  fs.writeFileSync(TIMINGS_FILE, `${JSON.stringify(out, null, 2)}\n`);
+  console.log(`run-tests: ${n} times merged into test-timings.json (${Object.keys(sorted).length} suites).`);
+}
+
 async function main() {
   if (flag('check')) return check();
+  if (flag('merge-timings')) return mergeTimings(flag('merge-timings'));
   if (fragProblems.length) { for (const p of fragProblems) console.error(`✗ ${p}`); process.exitCode = 2; return; }
   if (!group || !GROUPS[group]) {
     console.error(`usage: node run-tests.js <${Object.keys(GROUPS).join('|')}> [--jobs=N] [--shard=I/N] [--list] [--verbose]\n       node run-tests.js --check`);
@@ -250,6 +285,8 @@ async function main() {
 
   const failed = results.filter((r) => !r.ok);
   const slowest = [...results].sort((a, b) => b.secs - a.secs).slice(0, 5).map((r) => `${r.file} ${r.secs}s`).join(', ');
+  const timingsOut = flag('timings-out');
+  if (timingsOut && timingsOut !== true) fs.writeFileSync(timingsOut, JSON.stringify(Object.fromEntries(results.map((r) => [r.file, r.secs])), null, 2));
   console.log(`\nrun-tests: ${results.length - failed.length}/${results.length} suites passed in ${((Date.now() - t0) / 1000).toFixed(1)}s wall. Slowest: ${slowest}.`);
   // exitCode, never process.exit(): stdout to a pipe is asynchronous, and exiting here cut the CI log
   // off mid-suite, before the summary that names what failed.

package/workspace/test-timings.json

@@ -0,0 +1,172 @@
+{
+  "_comment": "Wall time of each suite on the Workspace CI runners, in seconds. run-tests.js --shard balances the shards with these numbers. Refresh: download the timings-* artifacts of a green Workspace CI run into one directory, then run `node run-tests.js --merge-timings=DIR`.",
+  "measured": "2026-10-07",
+  "seconds": {
+    "agenda.test.js": 1,
+    "auto-sync.test.js": 2,
+    "board-cli.test.js": 3,
+    "capture.test.js": 1,
+    "claims.test.js": 2,
+    "cuts.test.js": 1,
+    "d86-seams.test.js": 1,
+    "day-run.test.js": 21,
+    "doc-category-corrections.test.js": 1,
+    "doc-category.test.js": 1,
+    "doc-library.test.js": 1,
+    "doc-sync.test.js": 1,
+    "docs-cli.test.js": 5,
+    "external-linking.test.js": 1,
+    "factory-join.test.js": 1,
+    "first-paint-board.test.js": 8,
+    "first-paint-count.test.js": 23,
+    "first-paint-initiatives.test.js": 12,
+    "first-paint-reports.test.js": 8,
+    "first-paint-today.test.js": 26,
+    "fixture-parity.test.mjs": 1,
+    "focus.test.js": 1,
+    "glossary.test.js": 1,
+    "goals.test.js": 1,
+    "grant-mint.test.js": 1,
+    "guide.test.js": 1,
+    "handoff.test.js": 1,
+    "health.test.js": 1,
+    "initiative-cli.test.js": 8,
+    "initiative-needs.test.js": 2,
+    "initiative-surface.test.js": 3,
+    "initiative-writer.test.js": 1,
+    "issues.test.js": 1,
+    "item-cli.test.js": 7,
+    "item-spans.test.js": 1,
+    "jev-categorize.test.js": 1,
+    "jev-claims.test.js": 1,
+    "jev-route.test.js": 1,
+    "jev-status.test.js": 1,
+    "jira-wbs.test.js": 1,
+    "kg.test.js": 2,
+    "kit-update.test.js": 1,
+    "launcher.test.js": 1,
+    "learn.test.js": 4,
+    "live-notes.test.js": 5,
+    "markdown.test.mjs": 1,
+    "measurements.test.js": 1,
+    "next-step-actions.test.js": 11,
+    "no-network.test.js": 1,
+    "notes-listen.test.js": 2,
+    "notes.test.js": 5,
+    "online-mode.test.js": 1,
+    "people.test.js": 2,
+    "phone-access.test.js": 1,
+    "phone-command.test.js": 4,
+    "placements.test.js": 1,
+    "plan-items-stage-parity.test.js": 1,
+    "plan-items.test.js": 1,
+    "plan-routes.test.js": 11,
+    "plan-tree.test.js": 6,
+    "pm-board-dest-phone-test.js": 14,
+    "pm-board-dest-test.js": 27,
+    "pm-breakdown-phone-test.js": 33,
+    "pm-breakdown-test.js": 68,
+    "pm-breakdown-timeline-test.js": 25,
+    "pm-cuts-test.js": 16,
+    "pm-detail-test.js": 18,
+    "pm-doc-category-test.js": 6,
+    "pm-docs-test.js": 37,
+    "pm-frame-phone-test.js": 14,
+    "pm-frame-test.js": 21,
+    "pm-initiatives-dest-phone-test.js": 9,
+    "pm-initiatives-dest-test.js": 28,
+    "pm-initiatives-test.js": 19,
+    "pm-initiatives-timeline-test.js": 39,
+    "pm-jira-test.js": 6,
+    "pm-lines-needs.test.js": 1,
+    "pm-live-notes-test.js": 25,
+    "pm-modes-test.js": 11,
+    "pm-nonce-test.js": 14,
+    "pm-notes-test.js": 40,
+    "pm-palette-test.js": 29,
+    "pm-people-test.js": 12,
+    "pm-r1-test.js": 10,
+    "pm-r10-test.js": 1,
+    "pm-r11-test.js": 2,
+    "pm-r12-test.js": 17,
+    "pm-r13-test.js": 12,
+    "pm-r14-test.js": 7,
+    "pm-r15-test.js": 7,
+    "pm-r16-test.js": 16,
+    "pm-r17-test.js": 7,
+    "pm-r18-test.js": 11,
+    "pm-r19-test.js": 20,
+    "pm-r2-test.js": 7,
+    "pm-r20-test.js": 19,
+    "pm-r21-test.js": 29,
+    "pm-r22-test.js": 2,
+    "pm-r23-test.js": 17,
+    "pm-r24-test.js": 15,
+    "pm-r25-test.js": 1,
+    "pm-r26-test.js": 1,
+    "pm-r27-test.js": 26,
+    "pm-r28-test.js": 1,
+    "pm-r29-filespad-test.js": 1,
+    "pm-r29-knowledge-test.js": 1,
+    "pm-r29-memory-test.js": 1,
+    "pm-r29-newsession-alignment-test.js": 1,
+    "pm-r29-portfolio-test.js": 1,
+    "pm-r29-reports-addrepo-test.js": 1,
+    "pm-r29-skills-scheduled-test.js": 1,
+    "pm-r29-today-test.js": 12,
+    "pm-r29-validate-guide-test.js": 1,
+    "pm-r3-test.js": 11,
+    "pm-r30-test.js": 13,
+    "pm-r4-test.js": 4,
+    "pm-r5-test.js": 6,
+    "pm-r6-test.js": 5,
+    "pm-r7-test.js": 1,
+    "pm-r8-test.js": 1,
+    "pm-r9-test.js": 10,
+    "pm-report-slides-test.js": 6,
+    "pm-reports-phone-test.js": 9,
+    "pm-reports-test.js": 20,
+    "pm-repos-test.js": 10,
+    "pm-seams-test.js": 16,
+    "pm-shell-test.js": 6,
+    "pm-tabs-test.js": 55,
+    "pm-term-test.js": 38,
+    "pm-today-goals-test.js": 30,
+    "pm-today-phone-test.js": 27,
+    "pm-today-test.js": 60,
+    "pm-updates-test.js": 16,
+    "proactive-prepare.test.js": 12,
+    "proactive.test.js": 17,
+    "profiles.test.js": 1,
+    "public-host.test.js": 1,
+    "r25-guards.test.js": 9,
+    "r3-display.test.js": 4,
+    "replaced-tests.test.js": 17,
+    "repo-scan.test.js": 1,
+    "repo-watch.test.js": 1,
+    "report-cli.test.js": 2,
+    "report-draft.test.js": 4,
+    "report-needs.test.js": 1,
+    "report-slides-data.test.js": 1,
+    "routes-board.test.js": 1,
+    "routes-capture.test.js": 1,
+    "routes-initiatives.test.js": 3,
+    "routes-reports.test.js": 1,
+    "routes-timeline.test.js": 1,
+    "routes-today.test.js": 6,
+    "scan-consistency.test.js": 1,
+    "schedule-cli.test.js": 3,
+    "session-flag.test.js": 1,
+    "start-policy.test.js": 1,
+    "state-isolation.test.js": 37,
+    "status-facts-panel.test.js": 1,
+    "story-artifacts.test.js": 1,
+    "sync.test.js": 4,
+    "test.js": 65,
+    "today.test.js": 5,
+    "tracker-refresh.test.js": 1,
+    "typesafe-validation.test.js": 1,
+    "ui-test.js": 43,
+    "work-check-needs.test.js": 1
+  }
+}