create-pmos 0.67.0 → 0.68.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-pmos",
-  "version": "0.67.0",
+  "version": "0.68.0",
   "description": "Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with all state as git-versioned files. Includes `workflow-sweep`, which audits the state every board derives from and separates real defects from work you simply have not done. `create-pmos workspace` also installs + launches the local Terminal Workspace GUI. No database, no network, no telemetry.",
   "license": "MIT",
   "bin": {

package/payload/KIT-VERSION

@@ -1,3 +1,3 @@
-kernel-source: pmos@5233c8c
+kernel-source: pmos@0cc8c83
 assembled: 2026-10-07
 mode: vendor

package/payload/planning/evals/eval-calibration.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Eval calibration log"
 description: "Append-only record of every PM override of an evaluator verdict."
-generated: {by: process:create-pmos, at: "2026-10-07T02:01:39Z"}
+generated: {by: process:create-pmos, at: "2026-10-07T02:38:51Z"}
 status: stable
 ---
 

package/payload/planning/okrs/health-budgets.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Health budgets"
 description: "Closed registry of health-budget anchors (D59), edited only by the PM."
-generated: {by: process:create-pmos, at: "2026-10-07T02:01:39Z"}
+generated: {by: process:create-pmos, at: "2026-10-07T02:38:51Z"}
 status: stable
 ---
 

package/payload/state/discoveries.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Discoveries and friction log"
 description: "Append-only record of what runs discovered and where the process rubbed."
-generated: {by: process:create-pmos, at: "2026-10-07T02:01:39Z"}
+generated: {by: process:create-pmos, at: "2026-10-07T02:38:51Z"}
 status: stable
 ---
 

package/workspace/guide/command-palette.md

@@ -67,7 +67,7 @@ The palette reads the lists of all three scopes when it opens. When a list canno
 
 The palette opens as a sheet from the bottom edge. Each row is at least 48 pixels high, and the rows are reached by touch.
 
-On a phone, the scratchpad is the **compose line** at the bottom of a terminal tab. (On a desktop, open it with **▲ scratchpad** under the dock's tabs.) Type a message there and press **Send**. The text is typed into the session and the line clears. The line keeps your text for each session until you send it, so a message you did not finish is still there when you come back.
+On a phone, the scratchpad is the **compose line** at the bottom of a terminal tab. (On a desktop, open it with **Scratchpad** in the bar at the bottom of the dock.) Type a message there and press **Send**. The text is typed into the session and the line clears. The line keeps your text for each session until you send it, so a message you did not finish is still there when you come back.
 
 ## Related
 

package/workspace/guide/layout.md

@@ -2,7 +2,7 @@
 type: Guide
 title: "Guide: layout"
 description: "The frame: one top bar, the place on screen, the detail and the agent dock; the phone tabs and decks; the keys; and the older layout."
-timestamp: 2026-10-06
+timestamp: 2026-10-07
 ---
 
 # Guide: layout
@@ -17,7 +17,7 @@ The top bar has these parts, from left to right:
 - **Branches and sessions** is in ⌘K. It opens a sheet with every branch of the repository (main first) and how many sessions run in each. Press a branch to see its sessions, open one, end one, or start a session there. **＋ branch** makes a branch, and **＋ session** starts one with a branch, an agent and a profile. With All repositories, the sheet lists every repository.
 - **Agenda, Initiatives, Board, Reports, Docs and People** are the six places. Press one to show it. The Agenda count shows how many items need you. Docs shows whether each document is the same as its Google Docs and Confluence copy. People shows the people you work with in the repository ([People](people.md)).
 - **Search or capture ⌘K** opens the command palette. Type to find an initiative, a repository, an open tab or a command.
-- **Sync** shows only when the current repository is not in sync with its remote. Press it to fetch, bring in the work of the other machine, record your changes and push. If the repository has not fetched in the last 10 minutes, Sync also shows, because a push from another machine is not visible until a fetch. When the repository fetched recently and is in sync, Sync is not shown. If Sync stops, the message names the step that stopped.
+- **Sync** shows only when the current repository is not in sync with its remote. Press it to fetch, bring in the work of the other machine, record your changes and push. If the repository has not fetched in the last 10 minutes, Sync also shows, because a push from another machine is not visible until a fetch. When the repository fetched recently and is in sync, Sync is not shown. When two machines add lines to the same ledger (a `.jsonl` file under `pmos/` or `planning/`), Sync keeps the lines from both machines. If Sync stops, the message names the step that stopped. If both machines changed the same lines of another file, the message names the file. Keep the version you want in that file on one machine, sync it, then sync the other machine.
 - **Sync on its own.** If you forget to press Sync, the workspace syncs for you. It syncs each repository once when the workspace starts. It also syncs a repository that has records not yet pushed when no record changed for 5 minutes. In a document repository it syncs every changed file on any branch. In a code repository it syncs only on the default branch (for example `main`), and only when every commit not yet pushed changes records and no code. If you close the tab while records are not yet pushed, the browser asks you first. To turn automatic sync off, start the workspace with `PMOS_AUTO_SYNC=0`.
 - **Settings** opens the settings of the workspace.
 
@@ -48,18 +48,45 @@ The dock holds your terminals, documents, conversations, skills and web pages. I
 
 - Press ⌘J (Ctrl-J), or the button on the rail, to open the dock. Press ⌘J again, or the fold button in the dock, to fold it to the rail.
 - The dock never opens by itself. A tab that opens while the dock is a rail waits in the dock until you open it.
-- The dock lists the sessions of the repository by initiative. A session is in the group of the initiative it is recorded on, or of its `initiative/<id>` branch. Then come **Not linked** (no initiative) and **Scheduled** (started by a schedule). Then **Open** lists the tabs that are not sessions, for example documents and skills.
-- Each session row shows the name, the type of work, and the branch when it is not main and not the initiative's own branch. Press the row to bring the session to the front.
+- The dock lists the sessions of the repository by initiative. A session is in the group of the initiative it is recorded on, or of its `initiative/<id>` branch. Then come **Not linked** (no initiative) and **Scheduled** (started by a schedule). Then **Open** lists the tabs that are not sessions, for example documents and skills. Each one shows its title, what it is (for example PRD, Document or Web page) and its branch when it is not main. **✕** on an Open row closes the tab only. A terminal keeps running.
+- Each session row starts with a mark for its state: ● working, ◼ quiet, ◆ needs you, ◇ maybe blocked, ○ ended. Under the name, the row shows the state when the session is not working, the type of work when one is set, and the branch when it is not main and not the initiative's own branch. Running sessions come first and ended sessions last. Press the row to bring the session to the front.
+- Press the name of a group to fold it or open it. The number beside it counts its sessions. **Scheduled** is folded while none of its runs is running, because each run leaves an ended session. The group of the session in front always stays open, and the workspace keeps your choice for each group.
+- **⋯** and **✕** show on the row in front, on the row under the pointer and on the row with the keyboard focus. On a touch screen they always show.
 - Press **⋯** on a row to change the name, the initiative or the type of work.
 - Press **✕** on a row to end the session. The row asks "End “name”?". Press **End** or **Cancel**. When you end the last running session on its own working copy, the message offers **Remove working copy**. This removes the folder only. The branch stays. If the folder has unsaved work, the workspace keeps it and tells you why.
 - **＋ Session** at the top of the dock, or **＋** on an initiative, opens one sheet. Type a name, or leave it empty to name the session after the skill and the initiative. **For** is the initiative. **On** is where the session runs. **Automatic** uses the initiative's own working copy on `initiative/<id>` (made the first time), or the main tree when there is no initiative. You can also choose a branch that has a working copy, or **New branch…**. Then press **Blank session** (the CLI and model from Settings) or a skill. The session starts at once.
 - The icons at the bottom of the dock show the sessions as a strip on top, give the dock the whole window (Focus), and fold the dock. On top, a select chooses the group, and each session of the group is a button. **＋** starts a session, and **✕** ends the session in front.
 - To make the dock wider or narrower, drag its left edge. With the edge focused, the left and right arrow keys change the width in steps. Double-click the edge to go back to the default width. The width is kept in this browser.
 - **Focus** in the dock gives the dock the whole window. The place and the detail are hidden, and the dock stays full width on every place. Press Focus again, or ⌘⇧J (Ctrl-Shift-J), to show the place again. Folding the dock also ends Focus.
-- **▲ scratchpad** in the bar under the tabs opens the scratchpad. The pad keeps one note for each terminal session, and one for the repository when no terminal is in front. **Send to terminal** types the note into the session in front.
+- **Scratchpad** in the bar at the bottom of the dock opens and closes the scratchpad. The pad keeps one note for each terminal session, and one for the repository when no terminal is in front. **Send to terminal** types the note into the session in front and presses Enter. It is available only when a terminal is in front. **Copy** and **Clear** act on the note.
+- The same bottom bar shows the title of the tab in front and a copy button that names what it copies: **Copy document** for a document, **Copy attach command** for a terminal.
+- A document tab has one bar. The words at its start say whether the file is saved on disk or has unsaved changes. The copy button beside them shows the file's Confluence or Google Docs copy (see [Edit a document in place](#edit-a-document-in-place)). **Changes**, **Revert** and **Save** show when there are unsaved changes. **Markdown** shows the whole file as markdown in one box; press it again to go back. A file that you cannot edit has **Source** in its place. **⋯** holds the rest: the reading width (full width, or lines of 72 characters), **Normalize line breaks** (it joins hard-wrapped paragraphs into one line each in the buffer; read the result in Changes, then save) and **Hide the outline and connections**. **Run scripts** shows on the bar for an HTML page that can run its own scripts.
 
 Folding the dock, or going to another place, does not touch your terminals.
 
+## Edit a document in place
+
+A markdown document is edited where you read it. The layout does not change when you edit.
+
+- Press a paragraph, a heading, a list or a table to edit it. That block shows as markdown, with the cursor where you pressed. The other blocks stay as they are.
+- **Esc** finishes the block. **Enter** at the end of a block starts a new block, and continues a list. **Backspace** at the start of a block joins it to the block above. The arrow keys move to the block above or below.
+- **Ctrl** or **⌘** with **B**, **I**, **E** or **K** makes the selection bold, italic, code or a link. The same four buttons show above the block. **Ctrl** or **⌘** with **S** saves.
+- Type `/` in an empty block to make it a heading, a list, a checklist, a quote or code.
+- Press a checklist box to tick it.
+- The frontmatter shows as **Properties**. Change a one-line value in its box. To change any other value, press **Markdown** and edit the file as text.
+- **+ Add a block** at the end of the document adds a paragraph.
+
+A block that you did not edit is saved exactly as it was. Nothing is saved until you press **Save**. **Changes** shows what will change, and **Revert** removes all unsaved changes.
+
+The rail on the right has two tabs:
+
+- **Outline** lists the headings. Press one to go to it.
+- **Connections** shows the files that this document is tied to, as a graph and as a list. A tie is a link, a frontmatter path, the initiative, the anchor or a decision id. Nothing is guessed from words. Press a file to open it. The list also shows the document's copies, and the findings of the last consistency check that name the document.
+
+To hide the rail, use **Hide the outline and connections** in the **⋯** menu.
+
+The copy button on the bar shows the document's Confluence (or Google Docs) copy, from the same record as the [Docs page](docs.md). It says which side is newer. Press it to see both sides and the first difference. **Use PMOS version** writes the document to the copy, and **Use Confluence version** writes the copy to the document. Each waits 5 seconds, during which you can press **Undo**. **Compare again** reads every copy and changes nothing. A copy never changes by itself. If the document has no copy, the button says **Add a copy**: paste the address of a Confluence page or a Google Doc. Save your edits before you sync, because a sync uses the saved file.
+
 ## The detail
 
 The detail shows one item in full, for example an initiative or the profiles. It opens as a column between the place and the dock when you open an item. Press × at its top, or press Esc, to close it.
@@ -141,7 +168,7 @@ The `+` tile on the rail opens Add repository as a tab. The tab shows the scan o
 
 The list has a switch for Initiatives and Files. Choose Files to see the files of the current repository. Type in the filter to find a file. Press a file to open it in a tab.
 
-Under a terminal tab, the scratchpad holds a note that you can send to the terminal, copy or clear. The `+` session button opens a chooser for the new session. In a document tab, the Alignment button opens a drawer on the right. It shows the consistency findings for the document and lists only the documents that have a concrete tie to it.
+Under a terminal tab, the scratchpad holds a note that you can send to the terminal, copy or clear. The `+` session button opens a chooser for the new session. In a document tab, the rail on the right shows the document's outline and its connections.
 
 The list has a switch for Work, Today and All repos, a filter, and the groups Needs you, In progress and Done. The badge on a row names the step where the initiative is, for example `review`, `accept` or `build`.
 
@@ -171,13 +198,13 @@ The third column holds your terminals, documents, conversations and guide pages.
 
 Press a file anywhere in the workspace to open it in a tab. Any text file opens, whatever its extension.
 
-- **Markdown** opens as a document. You can edit it and save it.
+- **Markdown** opens as a document that you edit in place. See [Edit a document in place](#edit-a-document-in-place).
 - **JSON** opens pretty-printed. If the file is not valid JSON, the tab shows the text as written and says why.
 - **JSONL** opens as numbered records, one for each line. The tab marks a line that is not valid JSON.
-- **HTML** opens in `view` as the page it is. Use `raw` to see its source. The page cannot run scripts and cannot load anything from the network. To run the page's own scripts, press `run scripts`. This grant is for this tab only. The page can then run the scripts written inside it, but it still cannot load anything from the network, cannot load a script from another location, and cannot read the workspace. Press `scripts running — stop` to stop the scripts. Closing the tab also removes the grant.
+- **HTML** opens as the page it is. Press **Source** to see its source. The page cannot run scripts and cannot load anything from the network. To run the page's own scripts, press `run scripts`. This grant is for this tab only. The page can then run the scripts written inside it, but it still cannot load anything from the network, cannot load a script from another location, and cannot read the workspace. Press `scripts running — stop` to stop the scripts. Closing the tab also removes the grant.
 - **Other text** opens as numbered source lines. Spreadsheets, PDFs and images open in their own views.
 
-A tab for a file that is not markdown is read-only. It has no edit, diff or save control, because the workspace saves only markdown.
+A tab for a file that is not markdown is read-only. It has no Markdown, Changes or save control, because the workspace saves only markdown.
 
 If a file cannot be shown, the tab says why. The reasons are: the file is binary, it is larger than 2 MB, it is not valid text, or it is outside the workspace.
 

package/workspace/lib/sync.js

@@ -54,6 +54,26 @@ const isRecord = (rel) => RECORD_PATHS.some((p) => rel === p || rel.startsWith(`
 // PM repositories append ledgers from several machines; `merge=union` keeps both sides' lines instead
 // of conflicting (D70). Added once, committed with the records. Never touches a product-code repository.
 const UNION_LINE = '*.jsonl merge=union';
+
+// The same rule, given to the replay itself rather than read from the repository. A committed `.gitattributes` holds
+// only for a PM-profile repository, and only once it is already on the remote: a rebase reads the attributes of the
+// tree it replays ONTO, so a union line arriving in the very commit being replayed does not apply to it. A code
+// repository never carries the line at all, so two machines appending pmos/state/runs.jsonl stopped Sync at
+// integrate every time. `core.attributesFile` is the lowest-precedence attribute source, so a repository's own
+// `.gitattributes` still wins; it is set for this one rebase and written to no tracked file.
+// A code repository unions its record ledgers only; a document repository every ledger.
+function unionAttributesFor(root) {
+  const lines = profileOf(root) === 'pm-artifacts' ? [UNION_LINE]
+    : RECORD_PATHS.filter((p) => !p.startsWith('.')).map((p) => `${p}/**/*.jsonl merge=union`);
+  const f = path.join(os.tmpdir(), `pmos-sync-attributes-${profileOf(root)}`);
+  const text = `${lines.join('\n')}\n`;
+  try {
+    // written only when it differs, so a second repository's sync never reads it half-written
+    if ((fs.existsSync(f) ? fs.readFileSync(f, 'utf8') : '') !== text) fs.writeFileSync(f, text);
+    return f;
+  } catch { return null; }
+}
+
 function ensureUnionAttribute(root) {
   try {
     const prof = fs.readFileSync(path.join(root, '.pmos-profile'), 'utf8').split('\n').map((l) => l.replace(/#.*$/, '').trim()).find(Boolean);
@@ -136,11 +156,19 @@ async function sync(root, { label } = {}) {
   const s2 = await status(root);
   if (s2.behind) {
     // Fast-forward when we have nothing of our own; otherwise replay OUR unpushed commits on top.
-    const verb = s2.ahead ? ['rebase', '--autostash', s2.upstream] : ['merge', '--ff-only', s2.upstream];
+    const attrs = s2.ahead ? unionAttributesFor(root) : null;
+    const verb = s2.ahead ? [...(attrs ? ['-c', `core.attributesFile=${attrs}`] : []), 'rebase', '--autostash', s2.upstream]
+      : ['merge', '--ff-only', s2.upstream];
     const r = await run(root, verb);
     if (!r.ok) {
-      if (s2.ahead) await run(root, ['rebase', '--abort']);
-      return stop('integrate', `${s2.ahead ? 'the two machines changed the same lines — rebase aborted, nothing changed' : 'cannot fast-forward'} — ${r.err.split('\n')[0] || 'see git'}`);
+      if (!s2.ahead) return stop('integrate', `cannot fast-forward — ${r.err.split('\n')[0] || 'see git'}`);
+      // Name the files before the abort clears them: the PM has to open these, and "the same lines" alone says not where.
+      const u = await run(root, ['diff', '--name-only', '--diff-filter=U']);
+      const files = u.ok && u.out ? u.out.split('\n').filter(Boolean) : [];
+      await run(root, ['rebase', '--abort']);
+      return stop('integrate', files.length
+        ? `both machines changed ${files.join(', ')} — rebase aborted, nothing changed; keep the version you want in each file on one machine, sync it, then sync the other`
+        : `the two machines changed the same lines — rebase aborted, nothing changed — ${r.err.split('\n')[0] || 'see git'}`);
     }
     done('integrate', s2.ahead ? `replayed ${s2.ahead} local commit(s) on the remote` : `fast-forwarded ${s2.behind} commit(s)`);
   } else done('integrate', 'nothing to bring in');
@@ -183,5 +211,5 @@ async function defaultBranchOf(root, remote) {
   return null;
 }
 
-module.exports = { status, sync, ensureUnionAttribute, RECORD_PATHS, isRecord, REMOTE_FRESH_MS,
+module.exports = { status, sync, ensureUnionAttribute, unionAttributesFor, RECORD_PATHS, isRecord, REMOTE_FRESH_MS,
   unpushedPaths, newestDirtyRecordMs, defaultBranchOf, profileOf };

package/workspace/package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "pmos-workspace",
-  "version": "0.67.0",
+  "version": "0.68.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {

package/workspace/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pmos-workspace",
-  "version": "0.67.0",
+  "version": "0.68.0",
   "private": true,
   "description": "PMOS Terminal Workspace — local companion hosting real PTYs beside the library and gates (D62)",
   "license": "MIT",