create-pmos 0.70.0 → 0.70.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-pmos",
-  "version": "0.70.0",
+  "version": "0.70.1",
   "description": "Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with all state as git-versioned files. Includes `workflow-sweep`, which audits the state every board derives from and separates real defects from work you simply have not done. `create-pmos workspace` also installs + launches the local Terminal Workspace GUI. No database, no network, no telemetry.",
   "license": "MIT",
   "bin": {

package/payload/KIT-VERSION

@@ -1,3 +1,3 @@
-kernel-source: pmos@9bbf3fc
+kernel-source: pmos@9413354
 assembled: 2026-10-07
 mode: vendor

package/payload/planning/evals/eval-calibration.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Eval calibration log"
 description: "Append-only record of every PM override of an evaluator verdict."
-generated: {by: process:create-pmos, at: "2026-10-07T03:58:26Z"}
+generated: {by: process:create-pmos, at: "2026-10-07T04:11:36Z"}
 status: stable
 ---
 

package/payload/planning/okrs/health-budgets.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Health budgets"
 description: "Closed registry of health-budget anchors (D59), edited only by the PM."
-generated: {by: process:create-pmos, at: "2026-10-07T03:58:26Z"}
+generated: {by: process:create-pmos, at: "2026-10-07T04:11:36Z"}
 status: stable
 ---
 

package/payload/state/discoveries.md

@@ -2,7 +2,7 @@
 type: Reference
 title: "Discoveries and friction log"
 description: "Append-only record of what runs discovered and where the process rubbed."
-generated: {by: process:create-pmos, at: "2026-10-07T03:58:26Z"}
+generated: {by: process:create-pmos, at: "2026-10-07T04:11:36Z"}
 status: stable
 ---
 

package/workspace/lib/kit-update.js

@@ -125,11 +125,22 @@ async function latest({ exec = cp.execFile } = {}) {
   return { ok: true, version: v };
 }
 
+/**
+ * npm lists a new version in the check a moment before its download is served everywhere. A download asked for in that
+ * gap answers 404, and npm's CDN keeps the 404 for up to five minutes (Cache-Control max-age=300), so the same press
+ * a few minutes later works. Seen with 0.67.0, two minutes after its publish (workspace-kit-update).
+ */
+function notServedYet(text, version) {
+  return /\bE404\b/.test(String(text)) && String(text).includes(`${PKG_NAME}-${version}.tgz`);
+}
+const notServedYetError = (version) => `npm lists ${PKG_NAME} ${version}, but its download is not available yet. A version this new can take up to five minutes to reach every npm server. Press Update again in five minutes`;
+
 async function updateKit(root, { version, exec = cp.execFile } = {}) {
   if (!validVersion(version)) return { ok: false, error: 'Check for updates first' };
   if (!readKit(root).present) return { ok: false, error: 'This repository has no PMOS kit folder (pmos/KIT-VERSION)' };
   const r = await run(exec, NPX, ['-y', `${PKG_NAME}@${version}`, '--update', String(root)], { timeout: UPDATE_TIMEOUT_MS, cwd: String(root) });
   const output = tail(r.stdout + (r.stderr ? '\n' + r.stderr : ''));
+  if (r.err && notServedYet(r.stdout + r.stderr, version)) return { ok: false, error: notServedYetError(version), output };
   const bad = why(r, 'The kit update');
   if (bad) return { ok: false, error: bad, output };
   return { ok: true, output, kit: readKit(root) };
@@ -188,4 +199,4 @@ function upgradeApp(root, { version, logFile, spawn = cp.spawn, env = updateEnv(
   }
 }
 
-module.exports = { PKG_NAME, cmpVer, validVersion, readKit, fromCheckout, status, compare, latest, updateKit, updateEnv, upgradeApp, whereFrom };
+module.exports = { PKG_NAME, cmpVer, notServedYet, validVersion, readKit, fromCheckout, status, compare, latest, updateKit, updateEnv, upgradeApp, whereFrom };

package/workspace/package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "pmos-workspace",
-  "version": "0.70.0",
+  "version": "0.70.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {

package/workspace/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pmos-workspace",
-  "version": "0.70.0",
+  "version": "0.70.1",
   "private": true,
   "description": "PMOS Terminal Workspace — local companion hosting real PTYs beside the library and gates (D62)",
   "license": "MIT",

package/workspace/server.js

@@ -5186,7 +5186,10 @@ function serveFile(res, file, type, noCache) {
     // The app SHELL (index.html + the /pm/ module graph) must revalidate every load: without this a tab left open
     // across a `git merge` + server restart keeps running the pre-merge JS, so a fix that IS being
     // served never reaches the screen. `no-cache` = "always revalidate", not "never store".
-    if (noCache) headers['Cache-Control'] = 'no-cache';
+    // Every script and stylesheet revalidates too, not only /pm/: a /lib/ module served with no header was kept by the
+    // browser's heuristic cache, and at the Online address by Cloudflare's edge, so an updated workspace still drew
+    // the old labels (workspace-kit-update). Images and fonts keep the default.
+    if (noCache || /\.(js|mjs|css)$/.test(file)) headers['Cache-Control'] = 'no-cache';
     res.writeHead(200, headers);
     res.end(buf);
   });