super-backlog 0.10.1 → 1.0.3

package/README.md

@@ -71,11 +71,10 @@ sbl dashboard --serve             # live Project Dashboard on http://localhost:6
 | `.opencode/skill/<skill>/SKILL.md` (3 glue skills) | skill templates | fingerprint header line |
 | `.claude/skills/<skill>/SKILL.md` | same templates | fingerprint header line |
 | `package.json` scripts | `tasks` → `backlog task list`, `board` → `backlog board`, `browser` → `backlog browser`, `dashboard` → `super-backlog dashboard` (never overwrite existing values) | merged, add-only-if-absent |
-| `dashboard.html` | generated Project Dashboard | regenerated wholesale |
-| `.git/hooks/post-commit` | dashboard freshness block — regenerates `dashboard.html` after commits that touch `backlog/` (default; opt out with `--no-refresh-hook`) | appended marker block |
+| `dashboard.html` | generated Project Dashboard | not installed in user projects; generated on demand by `sbl dashboard` |
 | `.git/hooks/pre-commit` | integrity guard hook — only with `--guard` (opt-in) | appended marker block |
 
-Commands: `sbl init` · `sbl models` · `sbl doctor` · `sbl uninstall [--with-backlog]` · `sbl update` · `sbl dashboard [--serve] [--port <n>] [--no-open] [--out <file>]` · `sbl serve [--port <n>] [--no-open] [--out <file>]`. See `sbl help` for every flag.
+Commands: `sbl init` · `sbl models` · `sbl doctor` · `sbl uninstall [--with-backlog]` · `sbl update` · `sbl dashboard [--port <n>] [--no-open]` · `sbl serve [--port <n>] [--no-open]`. See `sbl help` for every flag.
 
 ## Model router (opt-in)
 
@@ -99,11 +98,11 @@ The router is fully owned by super-backlog and removed by `sbl uninstall`. See t
 
 ## Project Dashboard
 
-`sbl dashboard` generates a single self-contained `dashboard.html`: a dark, HTS-style cockpit rendered from your Backlog data in seven sections — Board & Quick Actions, Status (donut), Milestones, Tasks (sortable/filterable table; click a row to open a modal detail view with acceptance criteria and dependencies), Feature Cycle (pipeline stepper plus an Up Next / Blocked flow view from task dependencies), Activity (30-day sparkline), and Decisions & Docs. Glossary tooltips explain domain terms inline; extend or override them project-wide via `backlog/docs/glossary.md` (`## Term` heading plus the text below it). No CDNs, no external fonts — works offline, diffs cleanly in git, hostable anywhere. Use `sbl dashboard --serve` for live mode: it watches `backlog/`, regenerates on change, and serves on port 6428; connected browser tabs reload automatically via Server-Sent Events. `sbl serve` starts the dashboard server and the Backlog browser together.
+`sbl dashboard` starts a local server that serves a dark, HTS-style cockpit rendered from your Backlog data in seven sections — Board & Quick Actions, Status (donut), Milestones, Tasks (sortable/filterable table; click a row to open a modal detail view with acceptance criteria and dependencies), Feature Cycle (pipeline stepper plus an Up Next / Blocked flow view from task dependencies), Activity (30-day sparkline), and Decisions & Docs. Glossary tooltips explain domain terms inline; extend or override them project-wide via `backlog/docs/glossary.md` (`## Term` heading plus the text below it). No CDNs, no external fonts — works offline when served locally. The server watches `backlog/`, regenerates on change, and serves on port `6428`; connected browser tabs reload automatically via Server-Sent Events. `sbl serve` is a deprecated alias that behaves identically. `sbl dashboard` also launches the Backlog browser alongside the server so you can edit tasks while the dashboard updates.
 
 ### Keeping it fresh
 
-By default `init` installs a `post-commit` hook block that regenerates `dashboard.html` whenever the commit touched `backlog/`. The block is marker-delimited, so it composes with the guard hook and foreign hook content, `uninstall` removes exactly that block, and `update` refreshes it. It never blocks a commit: failures print a one-line stderr note and the exit status stays 0. Opt out with `--no-refresh-hook`.
+Run `sbl dashboard` whenever you want a live view of the board. The server regenerates the dashboard while it runs; stop it with `Ctrl+C`. There is no static `dashboard.html` installed in your project.
 
 ![Project Dashboard](docs/assets/dashboard.png)
 

package/dist/cli.js

@@ -19,21 +19,19 @@ Commands:
   init        Install the kit into the current project
   uninstall   Remove kit-managed files (project data kept unless --with-backlog)
   update      Refresh kit-managed files and report upstream versions
-  dashboard   Generate the single-file project dashboard (--serve for live mode)
-  serve       Start dashboard server and the Backlog browser together
+  dashboard   Start the project dashboard server (live-reload + Backlog browser)
+  serve       Deprecated alias for 'sbl dashboard'
   browser     Open the Backlog.md browser (delegates to backlog browser)
   board       Show the Backlog.md board (delegates to backlog board)
   models      Manage the model router (show, enable, disable, discover)
   doctor      Check the environment (node, PowerShell policy, backlog CLI)
 
-init options:
+  init options:
   --pm <auto|npm|pnpm|bun|skip>   Package manager to use (default: auto)
   --harness <opencode|claude>     Target harness; repeatable or comma-separated (default: both)
   --guard                         Install the integrity pre-commit hook (opt-in)
   --models                        Install the model router config during init (opt-in)
   --no-models                     Explicitly opt out of the model router
-  --no-dashboard                  Skip generating the project dashboard
-  --no-refresh-hook               Skip the post-commit dashboard freshness hook
   --fix-all                       Repair environment problems automatically (no prompts)
   --dry-run                       Show what would be done without writing anything
 
@@ -44,11 +42,9 @@ uninstall options:
 update options:
   (none)                          Refreshes injected files, skills, hook; prints upstream versions
 
-dashboard options:
-  --serve                         Live mode: watch backlog/ and regenerate on changes
-  --port <n>                      Port for --serve (default: 6428)
-  --no-open                       With --serve: do not open the browser automatically
-  --out <file>                    Output file name or path (default: dashboard.html)
+ dashboard options:
+   --port <n>                      Port for the dashboard server (default: 6428)
+   --no-open                       Do not open the dashboard browser automatically
 
 serve options:
   --port <n>                      Port for the dashboard server (default: 6428)
@@ -84,8 +80,6 @@ async function main(argv) {
                     guard: { type: 'boolean' },
                     models: { type: 'boolean' },
                     'no-models': { type: 'boolean' },
-                    'no-dashboard': { type: 'boolean' },
-                    'no-refresh-hook': { type: 'boolean' },
                     'fix-all': { type: 'boolean' },
                     'dry-run': { type: 'boolean' },
                 },
@@ -118,10 +112,8 @@ async function main(argv) {
                 args: rest,
                 allowPositionals: true,
                 options: {
-                    serve: { type: 'boolean' },
                     port: { type: 'string' },
                     'no-open': { type: 'boolean' },
-                    out: { type: 'string' },
                 },
             });
             return await runDashboard(process.cwd(), {
@@ -136,7 +128,6 @@ async function main(argv) {
                 options: {
                     port: { type: 'string' },
                     'no-open': { type: 'boolean' },
-                    out: { type: 'string' },
                 },
             });
             return await runServe(process.cwd(), {

package/dist/commands/backlog-alias.js

@@ -1,6 +1,4 @@
-// src/commands/backlog-alias.ts
-import { spawn } from 'node:child_process';
-import process from 'node:process';
+import spawn from 'cross-spawn';
 import { resolveBacklogBin } from '../lib/run.js';
 /** Run a backlog.md subcommand by delegating to the resolved backlog binary. */
 export function runBacklogSubcommand(cwd, subcommand, args = []) {
@@ -13,7 +11,6 @@ export function runBacklogSubcommand(cwd, subcommand, args = []) {
         const child = spawn(bin, [subcommand, ...args], {
             cwd,
             stdio: 'inherit',
-            shell: process.platform === 'win32',
         });
         child.on('error', () => resolve(1));
         child.on('exit', (code) => resolve(code ?? 1));

package/dist/commands/dashboard.js

@@ -1,38 +1,38 @@
-// src/commands/dashboard.ts
-import { isAbsolute, join, resolve } from 'node:path';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import spawn from 'cross-spawn';
 import { collectDashboardData } from '../dashboard/data.js';
 import { renderDashboard } from '../dashboard/render.js';
 import { DASHBOARD_PORT, startServeServer } from '../dashboard/server.js';
 import { atomicWrite } from '../lib/atomic.js';
+import { resolveBacklogBin } from '../lib/run.js';
 import { KIT_VERSION } from '../lib/version.js';
 async function regenerateInto(outPath, cwd) {
     const data = collectDashboardData(cwd, { kitVersion: KIT_VERSION });
     atomicWrite(outPath, renderDashboard(data));
 }
-/**
- * Generate dashboard.html for the project; with `{ serve: true }`, start the
- * live-reload server afterwards (the listening socket keeps the process up).
- * Called by `sbl init` with serve disabled.
- */
-export async function generateDashboard(cwd, o) {
-    const outPath = join(cwd, 'dashboard.html');
-    await regenerateInto(outPath, cwd);
-    if (o.serve) {
-        // Dynamic import keeps init resilient if the serve module is unavailable.
-        const specifier = '../dashboard/server.js';
-        const mod = (await import(specifier));
-        if (typeof mod.startServeServer !== 'function') {
-            throw new Error('serve module does not export startServeServer');
-        }
-        await mod.startServeServer(cwd, {
-            port: DASHBOARD_PORT,
-            regenerate: () => regenerateInto(outPath, cwd),
-            openBrowser: true,
+function spawnBacklogBrowser(cwd) {
+    const bin = resolveBacklogBin(cwd);
+    if (!bin) {
+        console.warn('warning: backlog CLI not found; dashboard will serve without the Backlog browser');
+        return;
+    }
+    try {
+        const child = spawn(bin, ['browser', '--no-open', '--non-interactive'], {
+            cwd,
+            detached: true,
+            stdio: 'ignore',
         });
+        child.on('error', () => { });
+        child.unref();
+        console.log('started Backlog browser (dashboard still serves if browser fails)');
+    }
+    catch {
+        console.warn('warning: failed to start Backlog browser; dashboard still serves');
     }
-    return outPath;
 }
-/** CLI entry for `sbl dashboard [--serve] [--port N] [--no-open] [--out FILE]`. */
+/** CLI entry for `sbl dashboard [--port N] [--no-open]`. Starts a local server
+ * that watches backlog/ and regenerates a temp dashboard file on changes. */
 export async function runDashboard(cwd, args) {
     const values = args.values;
     let port = DASHBOARD_PORT;
@@ -44,26 +44,24 @@ export async function runDashboard(cwd, args) {
         }
         port = parsed;
     }
-    const serve = values['serve'] === true;
     const noOpen = values['no-open'] === true;
-    const outFile = values['out'] === undefined ? 'dashboard.html' : String(values['out']);
-    const outPath = isAbsolute(outFile) ? outFile : resolve(cwd, outFile);
+    const outPath = join(tmpdir(), `sbl-dashboard-${Date.now()}.html`);
     try {
         await regenerateInto(outPath, cwd);
         console.log(`dashboard written: ${outPath}`);
-        if (serve) {
-            console.log(`serving dashboard at http://127.0.0.1:${port}/ (press Ctrl+C to stop)`);
-            await startServeServer(cwd, {
-                port,
-                file: outPath,
-                regenerate: () => regenerateInto(outPath, cwd),
-                openBrowser: !noOpen,
-            });
-        }
+        console.log(`serving dashboard at http://127.0.0.1:${port}/ (press Ctrl+C to stop)`);
+        // Start backlog browser in parallel; don't await so the dashboard server can listen immediately.
+        spawnBacklogBrowser(cwd);
+        await startServeServer(cwd, {
+            port,
+            file: outPath,
+            regenerate: () => regenerateInto(outPath, cwd),
+            openBrowser: !noOpen,
+        });
         return 0;
     }
     catch (err) {
-        console.error(`error: dashboard generation failed (${err instanceof Error ? err.message : String(err)})`);
+        console.error(`error: dashboard serve failed (${err instanceof Error ? err.message : String(err)})`);
         return 1;
     }
 }

package/dist/commands/init.js

@@ -34,10 +34,6 @@ function describeAction(action) {
             return 'install-model-router .super-backlog/models.json';
         case 'install-guard-hook':
             return 'install-guard-hook .git/hooks/pre-commit';
-        case 'install-refresh-hook':
-            return 'install-refresh-hook .git/hooks/post-commit';
-        case 'generate-dashboard':
-            return 'generate-dashboard';
         case 'write':
             return `write ${action.path}`;
     }
@@ -96,8 +92,6 @@ export async function runInit(cwd, args, deps = {}) {
     }
     const pm = rawPm;
     const guard = args.values.guard === true; // opt-in per spec D8
-    const dashboard = args.values['no-dashboard'] !== true;
-    const refreshHook = args.values['no-refresh-hook'] !== true; // default on, opt-out flag
     const dryRun = args.values['dry-run'] === true;
     const models = args.values.models === true ? true : args.values['no-models'] === true ? false : undefined;
     const projectName = args.positionals[0] ?? basename(resolve(cwd));
@@ -121,7 +115,7 @@ export async function runInit(cwd, args, deps = {}) {
         opencodeConfig,
         pkgExists: existsSync(join(cwd, 'package.json')),
     };
-    const opts = { projectName, harnesses, pm, guard, dashboard, refreshHook, skipInstall: false, models };
+    const opts = { projectName, harnesses, pm, guard, skipInstall: false, models };
     const plan = planInit(state, opts, KIT_VERSION);
     if (dryRun) {
         console.log(`dry-run for "${projectName}": ${plan.actions.length} action(s) planned, nothing written`);

package/dist/commands/serve.js

@@ -1,70 +1,3 @@
 // src/commands/serve.ts
-import { spawn } from 'node:child_process';
-import { isAbsolute, resolve } from 'node:path';
-import process from 'node:process';
-import { collectDashboardData } from '../dashboard/data.js';
-import { renderDashboard } from '../dashboard/render.js';
-import { DASHBOARD_PORT, startServeServer } from '../dashboard/server.js';
-import { atomicWrite } from '../lib/atomic.js';
-import { resolveBacklogBin } from '../lib/run.js';
-import { KIT_VERSION } from '../lib/version.js';
-async function regenerateInto(outPath, cwd) {
-    const data = collectDashboardData(cwd, { kitVersion: KIT_VERSION });
-    atomicWrite(outPath, renderDashboard(data));
-}
-function spawnBacklogBrowser(cwd, port) {
-    const bin = resolveBacklogBin(cwd);
-    if (!bin) {
-        console.warn('warning: backlog CLI not found; dashboard will serve without the Backlog browser');
-        return;
-    }
-    const url = `http://127.0.0.1:${port}/`;
-    try {
-        const child = spawn(bin, ['browser', '--no-open', '--non-interactive'], {
-            cwd,
-            detached: true,
-            stdio: 'ignore',
-            shell: process.platform === 'win32',
-        });
-        child.on('error', () => { });
-        child.unref();
-        console.log('started Backlog browser (dashboard still serves if browser fails)');
-    }
-    catch {
-        console.warn('warning: failed to start Backlog browser; dashboard still serves');
-    }
-}
-/** CLI entry for `sbl serve [--port N] [--no-open]`. */
-export async function runServe(cwd, args) {
-    const values = args.values;
-    let port = DASHBOARD_PORT;
-    if (values['port'] !== undefined) {
-        const parsed = Number(values['port']);
-        if (!Number.isInteger(parsed) || parsed < 0 || parsed > 65535) {
-            console.error(`error: invalid --port "${String(values['port'])}" (expected 0-65535)`);
-            return 1;
-        }
-        port = parsed;
-    }
-    const noOpen = values['no-open'] === true;
-    const outFile = values['out'] === undefined ? 'dashboard.html' : String(values['out']);
-    const outPath = isAbsolute(outFile) ? outFile : resolve(cwd, outFile);
-    try {
-        await regenerateInto(outPath, cwd);
-        console.log(`dashboard written: ${outPath}`);
-        console.log(`serving dashboard at http://127.0.0.1:${port}/ (press Ctrl+C to stop)`);
-        // Start backlog browser in parallel; don't await so the dashboard server can listen immediately.
-        spawnBacklogBrowser(cwd, port);
-        await startServeServer(cwd, {
-            port,
-            file: outPath,
-            regenerate: () => regenerateInto(outPath, cwd),
-            openBrowser: !noOpen,
-        });
-        return 0;
-    }
-    catch (err) {
-        console.error(`error: serve failed (${err instanceof Error ? err.message : String(err)})`);
-        return 1;
-    }
-}
+// Deprecated alias: `sbl serve` behaves exactly like `sbl dashboard`.
+export { runDashboard as runServe } from './dashboard.js';

package/dist/commands/uninstall.js

@@ -1,8 +1,6 @@
-// src/commands/uninstall.ts
-import { spawnSync } from 'node:child_process';
+import spawn from 'cross-spawn';
 import { existsSync, readFileSync, rmSync } from 'node:fs';
 import { join } from 'node:path';
-import process from 'node:process';
 import { findGitDir, POINTER_HEADING_RE } from '../init/execute.js';
 import { atomicWrite } from '../lib/atomic.js';
 import { GUARD_RE, REFRESH_RE, removeGuardHook, removeRefreshHook } from '../lib/hooks.js';
@@ -195,11 +193,10 @@ export function verifyRemnants(cwd) {
     return remnants;
 }
 function defaultRemoveGlobal() {
-    const cmd = process.platform === 'win32' ? 'npm.cmd' : 'npm';
-    const r = spawnSync(cmd, ['uninstall', '-g', 'super-backlog'], {
+    const cmd = 'npm';
+    const r = spawn.sync(cmd, ['uninstall', '-g', 'super-backlog'], {
         encoding: 'utf8',
         windowsHide: true,
-        shell: process.platform === 'win32',
     });
     if (r.error)
         return 1;

package/dist/commands/update.js

@@ -4,7 +4,7 @@ import { basename, join, resolve } from 'node:path';
 import process from 'node:process';
 import { executeActions, findGitDir, InvalidJsonError, validateJsonFile, RefusalError, UpstreamError } from '../init/execute.js';
 import { planInit } from '../init/planner.js';
-import { GUARD_RE, REFRESH_RE } from '../lib/hooks.js';
+import { GUARD_RE } from '../lib/hooks.js';
 import { detectPackageManager } from '../lib/pm.js';
 import { resolveBacklogBin, runCapture } from '../lib/run.js';
 import { KIT_VERSION } from '../lib/version.js';
@@ -13,8 +13,6 @@ const REFRESH_KINDS = new Set([
     'write-claude-pointer',
     'copy-skills',
     'install-guard-hook',
-    'install-refresh-hook',
-    'generate-dashboard',
 ]);
 export function refreshActions(all) {
     return all.filter((action) => REFRESH_KINDS.has(action.kind));
@@ -31,15 +29,6 @@ function guardHookInstalled(cwd) {
         return false;
     return GUARD_RE.test(readFileSync(hookPath, 'utf8'));
 }
-function refreshHookInstalled(cwd) {
-    const gitDir = findGitDir(cwd);
-    if (!gitDir)
-        return false;
-    const hookPath = join(gitDir, 'hooks', 'post-commit');
-    if (!existsSync(hookPath))
-        return false;
-    return REFRESH_RE.test(readFileSync(hookPath, 'utf8'));
-}
 export async function runUpdate(cwd, _args) {
     // Up-front detection-failure check (mirrors uninstall): refuse before mutating anything.
     for (const f of ['package.json', 'opencode.json']) {
@@ -72,8 +61,6 @@ export async function runUpdate(cwd, _args) {
         harnesses: ['opencode', 'claude'],
         pm: 'auto',
         guard: guardHookInstalled(cwd),
-        refreshHook: refreshHookInstalled(cwd),
-        dashboard: existsSync(join(cwd, 'dashboard.html')),
         skipInstall: false,
     };
     const plan = planInit(state, opts, KIT_VERSION);
@@ -113,13 +100,12 @@ export async function runUpdate(cwd, _args) {
             warnings.push(`\`${bin} --version\` failed with exit code ${local.status}`);
         }
     }
-    const npm = process.platform === 'win32' ? 'npm.cmd' : 'npm';
     let published = null;
     try {
         // test seam: SBL_FORCE_OFFLINE makes e2e runs take the offline path deterministically
         if (process.env.SBL_FORCE_OFFLINE)
             throw new Error('forced offline');
-        const view = runCapture(npm, ['view', 'backlog.md', 'version'], cwd);
+        const view = runCapture('npm', ['view', 'backlog.md', 'version'], cwd);
         if (view.status === 0)
             published = firstLine(view.stdout);
     }

package/dist/dashboard/data.js

@@ -159,7 +159,7 @@ export const BUILT_IN_GLOSSARY = [
     { term: 'Backlog.md', definition: 'File-based task management CLI owning specs, statuses and history under backlog/.' },
     { term: 'Superpowers', definition: 'The methodology skill set that decides HOW the work is done.' },
     { term: 'Pipeline', definition: 'The nine workflow phases from Idea to Merge & archive.' },
-    { term: 'Freshness Hook', definition: 'A post-commit git hook that regenerates dashboard.html when commits touch backlog/.' },
+    { term: 'Freshness Hook', definition: 'Run `sbl dashboard` to serve a live dashboard that reloads automatically while the server is running.' },
 ];
 /** Split `## Term` headings plus their following non-heading block into entries; empty sections are skipped. */
 export function parseGlossaryMarkdown(content) {

package/dist/dashboard/server.js

@@ -5,6 +5,7 @@ import { readFile } from 'node:fs/promises';
 import { createServer } from 'node:http';
 import { isAbsolute, join } from 'node:path';
 import process from 'node:process';
+import crossSpawn from 'cross-spawn';
 import { createModelApiHandler } from '../models/dashboard-api.js';
 import { resolveBacklogBin } from '../lib/run.js';
 export const DASHBOARD_PORT = 6428;
@@ -25,7 +26,12 @@ async function readBody(req) {
 /** Safe /api/run handler: only whitelisted backlog subcommands may be spawned. */
 export function createRunApiHandler(cwd) {
     return async (req, res) => {
-        if (req.method !== 'POST' || req.url !== '/api/run') {
+        if (req.url !== '/api/run') {
+            res.writeHead(404, { 'content-type': 'text/plain; charset=utf-8' });
+            res.end('not found');
+            return;
+        }
+        if (req.method !== 'POST') {
             res.writeHead(404, { 'content-type': 'text/plain; charset=utf-8' });
             res.end('not found');
             return;
@@ -61,11 +67,10 @@ export function createRunApiHandler(cwd) {
         }
         const args = WHITELIST.get(payload.command);
         try {
-            const child = spawn(bin, args, {
+            const child = crossSpawn(bin, args, {
                 cwd,
                 detached: true,
                 stdio: 'ignore',
-                shell: process.platform === 'win32',
             });
             child.on('error', () => { });
             child.unref();

package/dist/init/execute.js

@@ -4,7 +4,7 @@ import { dirname, basename, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import process from 'node:process';
 import { atomicWrite } from '../lib/atomic.js';
-import { installGuardHook, installRefreshHook } from '../lib/hooks.js';
+import { installGuardHook } from '../lib/hooks.js';
 import { injectBlock } from '../lib/markers.js';
 import { applyPluginEntry } from '../lib/opencode.js';
 import { OwnershipError, renderSkill } from '../lib/ownership.js';
@@ -150,22 +150,6 @@ function applyCopySkills(cwd, version) {
     }
     return true;
 }
-async function applyGenerateDashboard(cwd, warnings) {
-    try {
-        // Non-literal specifier: the dashboard module lands in a later batch; a missing
-        // module must degrade to a warning here, never crash init.
-        const specifier = '../commands/dashboard.js';
-        const mod = (await import(specifier));
-        if (typeof mod.generateDashboard !== 'function') {
-            throw new Error('dashboard module does not export generateDashboard');
-        }
-        await mod.generateDashboard(cwd, { serve: false });
-    }
-    catch (err) {
-        warnings.push(`dashboard generation skipped (${err instanceof Error ? err.message : String(err)})`);
-    }
-    return true;
-}
 export async function executeActions(cwd, actions, ctx) {
     const warnings = [];
     let applied = 0;
@@ -214,21 +198,6 @@ export async function executeActions(cwd, actions, ctx) {
                 }
                 break;
             }
-            case 'install-refresh-hook': {
-                const gitDir = findGitDir(cwd);
-                if (!gitDir) {
-                    warnings.push('no .git directory found - dashboard refresh hook not installed');
-                    skipped++;
-                }
-                else {
-                    installRefreshHook(gitDir, ctx.version);
-                    applied++;
-                }
-                break;
-            }
-            case 'generate-dashboard':
-                (await applyGenerateDashboard(cwd, warnings)) ? applied++ : skipped++;
-                break;
             case 'install-model-router': {
                 const { installOpenCodeAdapter } = await import('../models/opencode.js');
                 const { installClaudeAdapter } = await import('../models/claude.js');

package/dist/init/planner.js

@@ -58,10 +58,6 @@ export function planInit(state, opts, _version) {
         actions.push({ kind: 'write-claude-pointer' });
     if (opts.guard)
         actions.push({ kind: 'install-guard-hook' });
-    if (opts.refreshHook ?? true)
-        actions.push({ kind: 'install-refresh-hook' });
-    if (opts.dashboard)
-        actions.push({ kind: 'generate-dashboard' });
     if (opts.models === true)
         actions.push({ kind: 'install-model-router', enabled: true });
     return { actions, warnings };

package/dist/lib/preflight.js

@@ -3,19 +3,17 @@
 // System-changing fixes (node install, execution policy) require consent or fixAll;
 // safe fixes run unconditionally. Every fix is verified and reports a manual
 // fallback command on failure.
-import { spawnSync } from 'node:child_process';
 import { existsSync } from 'node:fs';
 import { delimiter, join } from 'node:path';
 import process from 'node:process';
+import spawn from 'cross-spawn';
 import { getEffectiveExecutionPolicy, isBlockingExecutionPolicy, } from './powershell.js';
 import { resolveBacklogBin } from './run.js';
 const defaultExecutor = (cmd, args) => {
-    // shell on win32 — .cmd/.ps1 shims (npm.cmd etc.) are not directly executable.
-    // Safe only because callers pass constant args; never pass user input here.
-    const r = spawnSync(cmd, args, {
+    // cross-spawn resolves .cmd shims on Windows without shell: true.
+    const r = spawn.sync(cmd, args, {
         encoding: 'utf8',
         windowsHide: true,
-        shell: process.platform === 'win32',
     });
     if (r.error)
         return { status: null, stdout: '', stderr: String(r.error.message) };
@@ -99,13 +97,6 @@ function checkNpmCommand(ctx) {
         ctx.npmCmd = 'npm';
         return { id, status: 'ok', detail: `npm ${probe.stdout.trim()}` };
     }
-    if (ctx.platform === 'win32') {
-        const fallback = ctx.executor('npm.cmd', ['--version']);
-        if (fallback.status === 0) {
-            ctx.npmCmd = 'npm.cmd';
-            return { id, status: 'fixed', detail: 'npm not directly callable; using npm.cmd shim' };
-        }
-    }
     return {
         id,
         status: 'failed',
@@ -206,7 +197,7 @@ export function runPreflight(cwd, deps = {}) {
         log: deps.log ?? ((line) => console.log(line)),
         confirm: deps.confirm,
         fixAll: deps.fixAll ?? false,
-        npmCmd: platform === 'win32' ? 'npm.cmd' : 'npm',
+        npmCmd: 'npm',
     };
     const unitNames = [
         ['node-version', checkNodeVersion],

package/dist/lib/run.js

@@ -1,12 +1,9 @@
 import { existsSync } from 'node:fs';
-import { spawnSync } from 'node:child_process';
 import { join } from 'node:path';
 import process from 'node:process';
+import spawn from 'cross-spawn';
 export function runCapture(cmd, args, cwd) {
-    // shell on win32 — safe only because callers pass constant args; never pass user input here.
-    const winShell = process.platform === 'win32';
-    const file = winShell && /\s/.test(cmd) ? `"${cmd}"` : cmd;
-    const r = spawnSync(file, args, { cwd, encoding: 'utf8', shell: winShell });
+    const r = spawn.sync(cmd, args, { cwd, encoding: 'utf8' });
     if (r.error && (r.status === null || r.status === undefined)) {
         return { status: 127, stdout: '', stderr: String(r.error.message) };
     }

package/dist/templates/dashboard.html

@@ -163,15 +163,18 @@
 
   /* ---------- Quick actions ---------- */
   .cmd-row { display: flex; flex-wrap: wrap; gap: 10px; align-items: center; }
+  .cmd-row { display: flex; flex-wrap: wrap; gap: 10px; }
   .cmd-btn {
-    font-family: var(--mono); font-size: .84rem; padding: 6px 14px; border-radius: 999px;
+    display: flex; flex-direction: column; align-items: flex-start; gap: 3px;
+    padding: 10px 18px; border-radius: 10px; min-width: 180px; text-align: left;
     background: var(--surface); border: 1px solid var(--line-strong); color: var(--text);
     cursor: pointer;
   }
-  .cmd-btn:hover { background: var(--surface-2); border-color: var(--accent); color: var(--accent); }
+  .cmd-btn:hover { background: var(--surface-2); border-color: var(--accent); }
   .cmd-btn:active { transform: translateY(1px); }
-  .cmd-btn::before { content: "$ "; color: var(--accent); }
-  .cmd-btn[data-copy]::after { content: " copy"; font-size: .7em; color: var(--dim); }
+  .cmd-title { font-size: .95rem; font-weight: 600; color: var(--text); }
+  .cmd-btn:hover .cmd-title { color: var(--accent); }
+  .cmd-line { font-family: var(--mono); font-size: .72rem; color: var(--dim); }
   .hint { color: var(--dim); font-size: .8rem; margin-top: 12px; }
   .drafts-list { list-style: none; margin: 0; padding: 0; display: grid; gap: 8px; }
   .drafts-list li { background: var(--surface); border: 1px solid var(--line); border-radius: 8px; padding: 8px 12px; font-size: .88rem; }
@@ -322,9 +325,9 @@
   <div class="sec-head"><span class="sec-num">01</span><h2>Board &amp; Quick Actions</h2><span class="tagline">commands &middot; board mirror only</span></div>
   <div id="quickactions" class="mount">
     <div class="cmd-row" id="cmd-buttons">
-      <button type="button" class="cmd-btn" data-cmd="browser">backlog browser</button>
-      <button type="button" class="cmd-btn" data-cmd="board">backlog board</button>
-      <button type="button" class="cmd-btn" data-copy="sbl dashboard --serve">sbl dashboard --serve</button>
+      <button type="button" class="cmd-btn" data-cmd="browser"><span class="cmd-title">Backlog Browser</span><span class="cmd-line">backlog browser</span></button>
+      <button type="button" class="cmd-btn" data-cmd="board"><span class="cmd-title">Backlog Board</span><span class="cmd-line">backlog board</span></button>
+      <button type="button" class="cmd-btn" data-copy="sbl dashboard"><span class="cmd-title">Live Dashboard</span><span class="cmd-line">sbl dashboard</span></button>
     </div>
     <p class="hint">The board mirrors Backlog.md &mdash; it never writes execution state.</p>
   </div>
@@ -389,7 +392,7 @@
 
 <footer class="footer">
   Generated __GENERATED_AT__ &middot; super-backlog v__KIT_VERSION__ &middot; <span id="source-badge"></span> &middot;
-  regenerated automatically on commits touching backlog/.
+  served live by <code class="inline">sbl dashboard</code> &mdash; reloads automatically while the server is running.
 </footer>
 
 </main>
@@ -506,12 +509,26 @@
   renderTasks();
 
   /* ---------- Quick action buttons ---------- */
+  function cmdFeedback(btn, text) {
+    var title = btn.querySelector('.cmd-title');
+    if (!title || btn.getAttribute('data-busy')) return;
+    btn.setAttribute('data-busy', '1');
+    var orig = title.textContent;
+    title.textContent = text;
+    setTimeout(function () { title.textContent = orig; btn.removeAttribute('data-busy'); }, 1200);
+  }
+  function copyCommand(btn, command) {
+    if (navigator.clipboard) navigator.clipboard.writeText(command).catch(function () {});
+    cmdFeedback(btn, 'copied \u2713');
+  }
   document.querySelectorAll('#cmd-buttons .cmd-btn').forEach(function (b) {
     b.addEventListener('click', function () {
       var copy = b.getAttribute('data-copy');
-      if (copy) { navigator.clipboard && navigator.clipboard.writeText(copy).catch(function(){}); return; }
-      fetch('/api/run', { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ command: b.getAttribute('data-cmd') }) })
-        .catch(function () { navigator.clipboard && navigator.clipboard.writeText(b.textContent || '').catch(function(){}); });
+      if (copy) { copyCommand(b, copy); return; }
+      var cmd = b.getAttribute('data-cmd');
+      fetch('/api/run', { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ command: cmd }) })
+        .then(function (res) { if (!res.ok) throw new Error('run failed'); cmdFeedback(b, 'started \u2713'); })
+        .catch(function () {});
     });
   });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "super-backlog",
-  "version": "0.10.1",
+  "version": "1.0.3",
   "description": "One command to equip any project with Backlog.md + Superpowers, plus a Project Dashboard.",
   "license": "MIT",
   "repository": {
@@ -32,6 +32,7 @@
     "screenshot": "npm run build && node scripts/capture-dashboard.mjs"
   },
   "devDependencies": {
+    "@types/cross-spawn": "^6.0.6",
     "@types/node": "^26.2.0",
     "backlog.md": "^1.50.1",
     "cspell": "^10.1.1",
@@ -52,9 +53,13 @@
     },
     "vitest": {
       "vite": "^8.2.2",
+      "esbuild": "^0.25.0",
       "@vitest/mocker": {
         "vite": "^8.2.2"
       }
     }
+  },
+  "dependencies": {
+    "cross-spawn": "^7.0.6"
   }
 }

package/dist/dashboard/regen.js

@@ -1,28 +0,0 @@
-// src/dashboard/regen.ts
-// Standalone regeneration entry invoked by the post-commit freshness hook:
-//   node "<repo>/node_modules/super-backlog/dist/dashboard/regen.js"
-// Contract: never throw, never exit non-zero - a broken dashboard generation
-// must never block or fail a user's commit. All errors go to console.error.
-import { join, resolve } from 'node:path';
-import { pathToFileURL } from 'node:url';
-import process from 'node:process';
-import { collectDashboardData } from './data.js';
-import { renderDashboard } from './render.js';
-import { atomicWrite } from '../lib/atomic.js';
-import { KIT_VERSION } from '../lib/version.js';
-/** Regenerate <cwd>/dashboard.html. Throws on failure; the direct-run wrapper swallows. */
-export function regenerateDashboard(cwd) {
-    const html = renderDashboard(collectDashboardData(cwd, { kitVersion: KIT_VERSION }));
-    atomicWrite(join(cwd, 'dashboard.html'), html);
-}
-const invokedDirectly = process.argv[1] !== undefined &&
-    import.meta.url === pathToFileURL(resolve(process.argv[1])).href;
-if (invokedDirectly) {
-    try {
-        regenerateDashboard(process.cwd());
-    }
-    catch (err) {
-        console.error(err instanceof Error ? (err.stack ?? err.message) : err);
-    }
-    process.exit(0); // always - success or failure
-}