@elevasis/sdk 0.5.13 → 0.5.15

package/dist/cli.cjs

@@ -40164,6 +40164,12 @@ var DOMAIN_MAP = {
   [DOMAINS.DIAGNOSTIC]: DIAGNOSTIC_DOMAIN
 };
 
+// ../core/src/platform/registry/reserved.ts
+var RESERVED_RESOURCE_IDS = /* @__PURE__ */ new Set(["command-center-assistant"]);
+function isReservedResourceId(resourceId) {
+  return RESERVED_RESOURCE_IDS.has(resourceId);
+}
+
 // ../core/src/execution/engine/base/errors.ts
 var ExecutionError = class extends Error {
   /**
@@ -43363,6 +43369,13 @@ var ResourceRegistry = class {
       }
       seen.add(id);
     }
+    for (const id of incomingIds) {
+      if (isReservedResourceId(id)) {
+        throw new Error(
+          `Resource ID '${id}' is reserved for platform use. External deployments cannot use reserved resource IDs.`
+        );
+      }
+    }
     if (this.isRemote(orgName)) {
       this.unregisterOrganization(orgName);
     }
@@ -43395,6 +43408,46 @@ var ResourceRegistry = class {
     }
     this.serializedCache.set(orgName, serializeOrganization(this.registry[orgName]));
   }
+  /**
+   * Register built-in platform resources (static, local execution)
+   *
+   * Unlike registerOrganization(), these resources:
+   * - Do NOT have remote config (execute in-process, not in worker threads)
+   * - Are NOT removed by unregisterOrganization() (persist across redeployments)
+   * - Use reserved resource IDs that external deployments cannot claim
+   *
+   * @param orgName - Organization name
+   * @param org - Resource definitions with real handlers (not stubs)
+   */
+  registerStaticResources(orgName, org) {
+    const incomingWorkflowIds = (org.workflows ?? []).map((w) => w.config.resourceId);
+    const incomingAgentIds = (org.agents ?? []).map((a) => a.config.resourceId);
+    const incomingIds = [...incomingWorkflowIds, ...incomingAgentIds];
+    const seen = /* @__PURE__ */ new Set();
+    for (const id of incomingIds) {
+      if (seen.has(id)) {
+        throw new Error(`Duplicate resource ID '${id}' in static resources.`);
+      }
+      seen.add(id);
+    }
+    const existingOrg = this.registry[orgName];
+    if (existingOrg) {
+      const existingWorkflowIds = new Set((existingOrg.workflows ?? []).map((w) => w.config.resourceId));
+      const existingAgentIds = new Set((existingOrg.agents ?? []).map((a) => a.config.resourceId));
+      for (const id of incomingIds) {
+        if (existingWorkflowIds.has(id) || existingAgentIds.has(id)) {
+          throw new Error(`Static resource '${id}' conflicts with existing resource in '${orgName}'.`);
+        }
+      }
+    }
+    if (existingOrg) {
+      existingOrg.workflows = [...existingOrg.workflows ?? [], ...org.workflows ?? []];
+      existingOrg.agents = [...existingOrg.agents ?? [], ...org.agents ?? []];
+    } else {
+      this.registry[orgName] = org;
+    }
+    this.serializedCache.set(orgName, serializeOrganization(this.registry[orgName]));
+  }
   /**
    * Unregister runtime-registered resources for an organization
    *
@@ -43478,6 +43531,21 @@ var ResourceRegistry = class {
     }
     return null;
   }
+  /**
+   * Get statistics about remotely-deployed resources
+   * Used by the health endpoint for platform-wide deployment visibility.
+   */
+  getRemoteStats() {
+    const orgs = /* @__PURE__ */ new Set();
+    for (const key of this.remoteResources.keys()) {
+      const orgName = key.split("/")[0];
+      orgs.add(orgName);
+    }
+    return {
+      activeOrgs: orgs.size,
+      totalResources: this.remoteResources.size
+    };
+  }
   // ============================================================================
   // Resource Manifest Accessors
   // ============================================================================
@@ -43783,7 +43851,7 @@ async function apiDelete(endpoint, apiUrl = resolveApiUrl()) {
 // package.json
 var package_default = {
   name: "@elevasis/sdk",
-  version: "0.5.13",
+  version: "0.5.15",
   description: "SDK for building Elevasis organization resources",
   type: "module",
   bin: {
@@ -43869,9 +43937,7 @@ async function scanDocumentation() {
         const raw = await (0, import_promises.readFile)(fullPath, "utf-8");
         const fileSize = Buffer.byteLength(raw, "utf-8");
         if (fileSize > 100 * 1024) {
-          throw new Error(
-            `Documentation file exceeds 100KB: docs/${relPath} (${Math.round(fileSize / 1024)}KB)`
-          );
+          throw new Error(`Documentation file exceeds 100KB: docs/${relPath} (${Math.round(fileSize / 1024)}KB)`);
         }
         totalSize += fileSize;
         if (totalSize > 1024 * 1024) {
@@ -43924,7 +43990,9 @@ async function generateResourceMap(org) {
     );
     for (const w of workflows) {
       const desc = escapeMdx(w.config.description);
-      lines.push(`| \`${w.config.resourceId}\` | ${escapeMdx(w.config.name)} | ${w.config.version} | ${w.config.status} | ${desc} |`);
+      lines.push(
+        `| \`${w.config.resourceId}\` | ${escapeMdx(w.config.name)} | ${w.config.version} | ${w.config.status} | ${desc} |`
+      );
     }
     lines.push("");
   }
@@ -43937,11 +44005,16 @@ async function generateResourceMap(org) {
     );
     for (const a of agents) {
       const desc = escapeMdx(a.config.description);
-      lines.push(`| \`${a.config.resourceId}\` | ${escapeMdx(a.config.name)} | ${a.config.version} | ${a.config.status} | ${desc} |`);
+      lines.push(
+        `| \`${a.config.resourceId}\` | ${escapeMdx(a.config.name)} | ${a.config.version} | ${a.config.status} | ${desc} |`
+      );
     }
     lines.push("");
   }
-  lines.push(`**Total:** ${workflows.length + agents.length} resources (${workflows.length} workflows, ${agents.length} agents)`, "");
+  lines.push(
+    `**Total:** ${workflows.length + agents.length} resources (${workflows.length} workflows, ${agents.length} agents)`,
+    ""
+  );
   await (0, import_promises.mkdir)((0, import_path.resolve)("docs"), { recursive: true });
   await (0, import_promises.writeFile)((0, import_path.resolve)("docs/resource-map.mdx"), lines.join("\n"), "utf-8");
 }
@@ -44005,8 +44078,12 @@ async function generateProjectMap(org) {
         if (resourceCount === 0) {
           types = "(utilities)";
         } else {
-          const wCount = workflows.filter((w) => Array.isArray(w.config.domains) && w.config.domains.includes(domainName)).length;
-          const aCount = agents.filter((a) => Array.isArray(a.config.domains) && a.config.domains.includes(domainName)).length;
+          const wCount = workflows.filter(
+            (w) => Array.isArray(w.config.domains) && w.config.domains.includes(domainName)
+          ).length;
+          const aCount = agents.filter(
+            (a) => Array.isArray(a.config.domains) && a.config.domains.includes(domainName)
+          ).length;
           const parts = [];
           if (wCount > 0) parts.push(`${wCount} workflow${wCount !== 1 ? "s" : ""}`);
           if (aCount > 0) parts.push(`${aCount} agent${aCount !== 1 ? "s" : ""}`);
@@ -44118,10 +44195,7 @@ async function generateProjectMap(org) {
     if (categories.length === 0) {
       lines.push("SDK reference found but no categories parsed.", "");
     } else {
-      lines.push(
-        "| Category | Files | Covers |",
-        "| --- | --- | --- |"
-      );
+      lines.push("| Category | Files | Covers |", "| --- | --- | --- |");
       for (const cat of categories) {
         const covers = cat.titles.slice(0, 5).join(", ") + (cat.titles.length > 5 ? ", ..." : "");
         lines.push(`| ${escapeMdx(cat.name)} | ${cat.count} | ${escapeMdx(covers)} |`);
@@ -44139,10 +44213,7 @@ async function generateProjectMap(org) {
     if (cmdFiles.length === 0) {
       lines.push("No commands found.", "");
     } else {
-      lines.push(
-        "| Command | File | Purpose |",
-        "| --- | --- | --- |"
-      );
+      lines.push("| Command | File | Purpose |", "| --- | --- | --- |");
       for (const f of cmdFiles) {
         const cmdName = f.name.replace(/\.md$/, "");
         let purpose = "";
@@ -44171,10 +44242,7 @@ async function generateProjectMap(org) {
     if (ruleFiles.length === 0) {
       lines.push("No rules found.", "");
     } else {
-      lines.push(
-        "| Rule | File | Scope |",
-        "| --- | --- | --- |"
-      );
+      lines.push("| Rule | File | Scope |", "| --- | --- | --- |");
       for (const f of ruleFiles) {
         const ruleName = f.name.replace(/\.md$/, "").replace(/-/g, " ").replace(/\b\w/g, (c) => c.toUpperCase());
         let scope = "";
@@ -44205,10 +44273,7 @@ async function generateProjectMap(org) {
     if (skillDirs.length === 0) {
       lines.push("No skills found.", "");
     } else {
-      lines.push(
-        "| Skill | File | Trigger |",
-        "| --- | --- | --- |"
-      );
+      lines.push("| Skill | File | Trigger |", "| --- | --- | --- |");
       for (const d of skillDirs) {
         const skillFile = (0, import_path.resolve)(".claude/skills", d.name, "SKILL.md");
         let trigger = "";
@@ -44264,10 +44329,7 @@ async function generateProjectMap(org) {
     if (memoryFiles.length === 0) {
       lines.push("No memory files found.", "");
     } else {
-      lines.push(
-        "| File | Purpose | Last Modified |",
-        "| --- | --- | --- |"
-      );
+      lines.push("| File | Purpose | Last Modified |", "| --- | --- | --- |");
       for (const m of memoryFiles) {
         lines.push(`| .claude/memory/${m.rel} | ${escapeMdx(m.purpose)} | ${m.mtime} |`);
       }
@@ -44299,250 +44361,293 @@ async function generateProjectMap(org) {
   await (0, import_promises.mkdir)((0, import_path.resolve)("docs"), { recursive: true });
   await (0, import_promises.writeFile)((0, import_path.resolve)("docs/project-map.mdx"), lines.join("\n"), "utf-8");
 }
+async function generateNavigationMap(docs) {
+  const excludedFiles = /* @__PURE__ */ new Set(["docs/navigation-map.mdx", "docs/project-map.mdx", "docs/resource-map.mdx"]);
+  const filtered = docs.filter((doc) => !excludedFiles.has(doc.path)).sort((a, b) => {
+    const orderA = a.frontmatter.order ?? 9999;
+    const orderB = b.frontmatter.order ?? 9999;
+    if (orderA !== orderB) return orderA - orderB;
+    return a.frontmatter.title.localeCompare(b.frontmatter.title);
+  });
+  const lines = [
+    "---",
+    "title: Navigation Map",
+    "description: Auto-generated table of contents for all documentation (updated on each deploy)",
+    "order: 997",
+    "---",
+    "",
+    "# Navigation Map",
+    "",
+    "> Auto-generated by `elevasis-sdk deploy`. Do not edit manually.",
+    "",
+    "| Title | Description | Path |",
+    "| --- | --- | --- |"
+  ];
+  for (const doc of filtered) {
+    lines.push(`| ${escapeMdx(doc.frontmatter.title)} | ${escapeMdx(doc.frontmatter.description)} | ${doc.path} |`);
+  }
+  lines.push("");
+  await (0, import_promises.mkdir)((0, import_path.resolve)("docs"), { recursive: true });
+  await (0, import_promises.writeFile)((0, import_path.resolve)("docs/navigation-map.mdx"), lines.join("\n"), "utf-8");
+}
 function registerDeployCommand(program3) {
-  program3.command("deploy").description("Validate, bundle, upload, and deploy project resources\n  Example: elevasis-sdk deploy --api-url http://localhost:5170").option("--api-url <url>", "API URL").option("--entry <path>", "Path to entry file (default: ./src/index.ts)").option("--prod", "Deploy to production (overrides NODE_ENV=development)").action(wrapAction("deploy", async (options2) => {
-    const startTime = Date.now();
-    const apiUrl = resolveApiUrl(options2.apiUrl, options2.prod);
-    const env2 = resolveEnvironment(options2.prod);
-    const entryPath = options2.entry ?? "./src/index.ts";
-    const authSpinner = ora("Authenticating...").start();
-    let orgName;
-    try {
-      const me = await apiGet("/api/external/me", apiUrl);
-      orgName = me.organizationName;
-      authSpinner.succeed(
-        source_default.green("Authenticating...") + source_default.white("          done") + source_default.gray(` (${orgName})`)
-      );
-    } catch (error46) {
-      authSpinner.fail(source_default.red("Authentication failed"));
-      const errMsg = error46 instanceof Error ? error46.message : String(error46);
-      if (errMsg.includes("401") || errMsg.toLowerCase().includes("unauthorized")) {
-        const keyVar = !options2.prod && process.env.NODE_ENV === "development" && process.env.ELEVASIS_PLATFORM_KEY_DEV ? "ELEVASIS_PLATFORM_KEY_DEV" : "ELEVASIS_PLATFORM_KEY";
-        console.error(source_default.red("  Invalid API key."));
-        console.error(source_default.gray(`  Your ${keyVar} was rejected by the server.`));
-        console.error(source_default.gray("  Check your .env file and verify the key in the Elevasis dashboard."));
-      } else {
-        console.error(source_default.gray("  Check your API key and API URL."));
+  program3.command("deploy").description(
+    "Validate, bundle, upload, and deploy project resources\n  Example: elevasis-sdk deploy --api-url http://localhost:5170"
+  ).option("--api-url <url>", "API URL").option("--entry <path>", "Path to entry file (default: ./src/index.ts)").option("--prod", "Deploy to production (overrides NODE_ENV=development)").action(
+    wrapAction("deploy", async (options2) => {
+      const startTime = Date.now();
+      const apiUrl = resolveApiUrl(options2.apiUrl, options2.prod);
+      const env2 = resolveEnvironment(options2.prod);
+      const entryPath = options2.entry ?? "./src/index.ts";
+      const authSpinner = ora("Authenticating...").start();
+      let orgName;
+      try {
+        const me = await apiGet("/api/external/me", apiUrl);
+        orgName = me.organizationName;
+        authSpinner.succeed(
+          source_default.green("Authenticating...") + source_default.white("          done") + source_default.gray(` (${orgName})`)
+        );
+      } catch (error46) {
+        authSpinner.fail(source_default.red("Authentication failed"));
+        const errMsg = error46 instanceof Error ? error46.message : String(error46);
+        if (errMsg.includes("401") || errMsg.toLowerCase().includes("unauthorized")) {
+          const keyVar = !options2.prod && process.env.NODE_ENV === "development" && process.env.ELEVASIS_PLATFORM_KEY_DEV ? "ELEVASIS_PLATFORM_KEY_DEV" : "ELEVASIS_PLATFORM_KEY";
+          console.error(source_default.red("  Invalid API key."));
+          console.error(source_default.gray(`  Your ${keyVar} was rejected by the server.`));
+          console.error(source_default.gray("  Check your .env file and verify the key in the Elevasis dashboard."));
+        } else {
+          console.error(source_default.gray("  Check your API key and API URL."));
+        }
+        throw error46;
       }
-      throw error46;
-    }
-    const validateSpinner = ora("Validating...").start();
-    let org;
-    try {
-      const jiti = (0, import_jiti.createJiti)(import_meta.url);
-      const entryModule = await jiti.import((0, import_path.resolve)(entryPath));
-      org = entryModule.default;
-      if (!org) {
-        validateSpinner.fail("Invalid entry: no default export found");
-        console.error(source_default.gray(`  Entry file: ${(0, import_path.resolve)(entryPath)}`));
-        throw new Error("Invalid entry: no default export found");
+      const validateSpinner = ora("Validating...").start();
+      let org;
+      try {
+        const jiti = (0, import_jiti.createJiti)(import_meta.url);
+        const entryModule = await jiti.import((0, import_path.resolve)(entryPath));
+        org = entryModule.default;
+        if (!org) {
+          validateSpinner.fail("Invalid entry: no default export found");
+          console.error(source_default.gray(`  Entry file: ${(0, import_path.resolve)(entryPath)}`));
+          throw new Error("Invalid entry: no default export found");
+        }
+        new ResourceRegistry({ [orgName]: org });
+        const workflowCount = org.workflows?.length ?? 0;
+        const agentCount = org.agents?.length ?? 0;
+        const totalCount = workflowCount + agentCount;
+        validateSpinner.succeed(
+          source_default.green("Validating...") + source_default.white("              done") + source_default.gray(` (${totalCount} resource${totalCount !== 1 ? "s" : ""}, 0 errors)`)
+        );
+        console.log("");
+        console.log(source_default.gray(`  Org:    ${orgName}`));
+        console.log(source_default.gray(`  Target: ${apiUrl} (${env2})`));
+        console.log("");
+        for (const w of org.workflows ?? []) {
+          console.log(source_default.gray(`  workflow  ${source_default.white(w.config.resourceId)}  v${w.config.version}`));
+        }
+        for (const a of org.agents ?? []) {
+          console.log(source_default.gray(`  agent     ${source_default.white(a.config.resourceId)}  v${a.config.version}`));
+        }
+        console.log("");
+      } catch (error46) {
+        if (error46 instanceof RegistryValidationError) {
+          validateSpinner.fail(source_default.red("Validation failed"));
+          console.error("");
+          console.error(source_default.red(`  ERROR  ${error46.message}`));
+          if (error46.resourceId) {
+            console.error(source_default.gray(`  Resource: ${error46.resourceId}`));
+          }
+          console.error("");
+          console.error(source_default.gray("  Deploy aborted."));
+        }
+        throw error46;
       }
-      new ResourceRegistry({ [orgName]: org });
-      const workflowCount = org.workflows?.length ?? 0;
-      const agentCount = org.agents?.length ?? 0;
-      const totalCount = workflowCount + agentCount;
-      validateSpinner.succeed(
-        source_default.green("Validating...") + source_default.white("              done") + source_default.gray(` (${totalCount} resource${totalCount !== 1 ? "s" : ""}, 0 errors)`)
-      );
-      console.log("");
-      console.log(source_default.gray(`  Org:    ${orgName}`));
-      console.log(source_default.gray(`  Target: ${apiUrl} (${env2})`));
-      console.log("");
-      for (const w of org.workflows ?? []) {
-        console.log(source_default.gray(`  workflow  ${source_default.white(w.config.resourceId)}  v${w.config.version}`));
+      await generateResourceMap(org);
+      await generateProjectMap(org);
+      let documentation = await scanDocumentation();
+      if (documentation) {
+        await generateNavigationMap(documentation);
+        documentation = await scanDocumentation();
+        console.log(
+          source_default.gray(
+            `  docs    ${source_default.white(String(documentation.length))} file${documentation.length !== 1 ? "s" : ""}`
+          )
+        );
       }
-      for (const a of org.agents ?? []) {
-        console.log(source_default.gray(`  agent     ${source_default.white(a.config.resourceId)}  v${a.config.version}`));
+      const triggerCount = org.triggers?.length ?? 0;
+      const integrationCount = org.integrations?.length ?? 0;
+      const checkpointCount = org.humanCheckpoints?.length ?? 0;
+      if (triggerCount > 0) console.log(source_default.gray(`  triggers  ${source_default.white(String(triggerCount))}`));
+      if (integrationCount > 0) console.log(source_default.gray(`  integrations  ${source_default.white(String(integrationCount))}`));
+      if (checkpointCount > 0) console.log(source_default.gray(`  checkpoints  ${source_default.white(String(checkpointCount))}`));
+      const relationshipCount = org.relationships ? Object.keys(org.relationships).length : 0;
+      if (relationshipCount > 0) {
+        console.log(
+          source_default.gray(
+            `  rels    ${source_default.white(String(relationshipCount))} resource${relationshipCount !== 1 ? "s" : ""}`
+          )
+        );
       }
-      console.log("");
-    } catch (error46) {
-      if (error46 instanceof RegistryValidationError) {
-        validateSpinner.fail(source_default.red("Validation failed"));
-        console.error("");
-        console.error(source_default.red(`  ERROR  ${error46.message}`));
-        if (error46.resourceId) {
-          console.error(source_default.gray(`  Resource: ${error46.resourceId}`));
+      const schemaWarnings = [];
+      const workflows = (org.workflows ?? []).map((w) => {
+        const meta = {
+          resourceId: w.config.resourceId,
+          name: w.config.name,
+          version: w.config.version,
+          status: w.config.status,
+          description: w.config.description,
+          domains: w.config.domains
+        };
+        if (w.contract.inputSchema) {
+          try {
+            meta.inputSchema = external_exports.toJSONSchema(w.contract.inputSchema);
+          } catch {
+            schemaWarnings.push(`${w.config.resourceId}: inputSchema could not be serialized`);
+          }
         }
-        console.error("");
-        console.error(source_default.gray("  Deploy aborted."));
-      }
-      throw error46;
-    }
-    await generateResourceMap(org);
-    await generateProjectMap(org);
-    const documentation = await scanDocumentation();
-    if (documentation) {
-      console.log(source_default.gray(`  docs    ${source_default.white(String(documentation.length))} file${documentation.length !== 1 ? "s" : ""}`));
-    }
-    const triggerCount = org.triggers?.length ?? 0;
-    const integrationCount = org.integrations?.length ?? 0;
-    const checkpointCount = org.humanCheckpoints?.length ?? 0;
-    if (triggerCount > 0) console.log(source_default.gray(`  triggers  ${source_default.white(String(triggerCount))}`));
-    if (integrationCount > 0) console.log(source_default.gray(`  integrations  ${source_default.white(String(integrationCount))}`));
-    if (checkpointCount > 0) console.log(source_default.gray(`  checkpoints  ${source_default.white(String(checkpointCount))}`));
-    const relationshipCount = org.relationships ? Object.keys(org.relationships).length : 0;
-    if (relationshipCount > 0) {
-      console.log(source_default.gray(`  rels    ${source_default.white(String(relationshipCount))} resource${relationshipCount !== 1 ? "s" : ""}`));
-    }
-    const schemaWarnings = [];
-    const workflows = (org.workflows ?? []).map((w) => {
-      const meta = {
-        resourceId: w.config.resourceId,
-        name: w.config.name,
-        version: w.config.version,
-        status: w.config.status,
-        description: w.config.description,
-        domains: w.config.domains
-      };
-      if (w.contract.inputSchema) {
-        try {
-          meta.inputSchema = external_exports.toJSONSchema(w.contract.inputSchema);
-        } catch {
-          schemaWarnings.push(`${w.config.resourceId}: inputSchema could not be serialized`);
+        if (w.contract.outputSchema) {
+          try {
+            meta.outputSchema = external_exports.toJSONSchema(w.contract.outputSchema);
+          } catch {
+            schemaWarnings.push(`${w.config.resourceId}: outputSchema could not be serialized`);
+          }
         }
-      }
-      if (w.contract.outputSchema) {
-        try {
-          meta.outputSchema = external_exports.toJSONSchema(w.contract.outputSchema);
-        } catch {
-          schemaWarnings.push(`${w.config.resourceId}: outputSchema could not be serialized`);
+        return meta;
+      });
+      const agents = (org.agents ?? []).map((a) => {
+        const meta = {
+          resourceId: a.config.resourceId,
+          name: a.config.name,
+          version: a.config.version,
+          status: a.config.status,
+          description: a.config.description,
+          domains: a.config.domains
+        };
+        if (a.contract.inputSchema) {
+          try {
+            meta.inputSchema = external_exports.toJSONSchema(a.contract.inputSchema);
+          } catch {
+            schemaWarnings.push(`${a.config.resourceId}: inputSchema could not be serialized`);
+          }
         }
-      }
-      return meta;
-    });
-    const agents = (org.agents ?? []).map((a) => {
-      const meta = {
-        resourceId: a.config.resourceId,
-        name: a.config.name,
-        version: a.config.version,
-        status: a.config.status,
-        description: a.config.description,
-        domains: a.config.domains
-      };
-      if (a.contract.inputSchema) {
-        try {
-          meta.inputSchema = external_exports.toJSONSchema(a.contract.inputSchema);
-        } catch {
-          schemaWarnings.push(`${a.config.resourceId}: inputSchema could not be serialized`);
+        if (a.contract.outputSchema) {
+          try {
+            meta.outputSchema = external_exports.toJSONSchema(a.contract.outputSchema);
+          } catch {
+            schemaWarnings.push(`${a.config.resourceId}: outputSchema could not be serialized`);
+          }
         }
-      }
-      if (a.contract.outputSchema) {
-        try {
-          meta.outputSchema = external_exports.toJSONSchema(a.contract.outputSchema);
-        } catch {
-          schemaWarnings.push(`${a.config.resourceId}: outputSchema could not be serialized`);
+        return meta;
+      });
+      if (schemaWarnings.length > 0) {
+        for (const warning of schemaWarnings) {
+          console.log(source_default.yellow(`  warn  ${warning}`));
         }
+        console.log(source_default.gray("  Schemas will be unavailable on the platform for these resources."));
+        console.log("");
       }
-      return meta;
-    });
-    if (schemaWarnings.length > 0) {
-      for (const warning of schemaWarnings) {
-        console.log(source_default.yellow(`  warn  ${warning}`));
-      }
-      console.log(source_default.gray("  Schemas will be unavailable on the platform for these resources."));
-      console.log("");
-    }
-    const bundleSpinner = ora("Bundling...").start();
-    const wrapperPath = (0, import_path.resolve)("__elevasis_worker.ts");
-    const bundleOutfile = (0, import_path.resolve)("dist/bundle.js");
-    try {
-      const entryImport = entryPath.replace(/\.ts$/, ".js");
-      const wrapperContent = `import org from ${JSON.stringify(entryImport)}
+      const bundleSpinner = ora("Bundling...").start();
+      const wrapperPath = (0, import_path.resolve)("__elevasis_worker.ts");
+      const bundleOutfile = (0, import_path.resolve)("dist/bundle.js");
+      try {
+        const entryImport = entryPath.replace(/\.ts$/, ".js");
+        const wrapperContent = `import org from ${JSON.stringify(entryImport)}
 import { startWorker } from '@elevasis/sdk/worker'
 startWorker(org)
 `;
-      await (0, import_promises.writeFile)(wrapperPath, wrapperContent, "utf-8");
-      await (0, import_promises.mkdir)((0, import_path.resolve)("dist"), { recursive: true });
-      await esbuild.build({
-        entryPoints: [wrapperPath],
-        bundle: true,
-        platform: "node",
-        format: "cjs",
-        outfile: bundleOutfile
-      });
-      await (0, import_promises.unlink)(wrapperPath);
-      const bundleBuffer = await (0, import_promises.readFile)(bundleOutfile);
-      const bundleSizeKB = Math.round(bundleBuffer.length / 1024);
-      bundleSpinner.succeed(
-        source_default.green("Bundling...") + source_default.white("                done") + source_default.gray(` (${bundleSizeKB} KB)`)
-      );
-    } catch (error46) {
-      try {
+        await (0, import_promises.writeFile)(wrapperPath, wrapperContent, "utf-8");
+        await (0, import_promises.mkdir)((0, import_path.resolve)("dist"), { recursive: true });
+        await esbuild.build({
+          entryPoints: [wrapperPath],
+          bundle: true,
+          platform: "node",
+          format: "cjs",
+          outfile: bundleOutfile
+        });
         await (0, import_promises.unlink)(wrapperPath);
-      } catch {
+        const bundleBuffer = await (0, import_promises.readFile)(bundleOutfile);
+        const bundleSizeKB = Math.round(bundleBuffer.length / 1024);
+        bundleSpinner.succeed(
+          source_default.green("Bundling...") + source_default.white("                done") + source_default.gray(` (${bundleSizeKB} KB)`)
+        );
+      } catch (error46) {
+        try {
+          await (0, import_promises.unlink)(wrapperPath);
+        } catch {
+        }
+        bundleSpinner.fail(source_default.red("Bundling failed"));
+        throw error46;
       }
-      bundleSpinner.fail(source_default.red("Bundling failed"));
-      throw error46;
-    }
-    const uploadSpinner = ora("Uploading...").start();
-    try {
-      const bundleBuffer = await (0, import_promises.readFile)(bundleOutfile);
-      const apiKey = resolveApiKey(options2.prod);
-      if (!apiKey) {
-        uploadSpinner.fail(source_default.red("Missing API key environment variable"));
-        console.error(source_default.gray("  Set it in your .env file or shell environment:"));
-        if (!options2.prod && process.env.NODE_ENV === "development") {
-          console.error(source_default.gray("    ELEVASIS_PLATFORM_KEY_DEV=sk_...  (or ELEVASIS_PLATFORM_KEY as fallback)"));
-        } else {
-          console.error(source_default.gray("    ELEVASIS_PLATFORM_KEY=sk_..."));
-        }
-        throw new Error("Missing API key environment variable");
-      }
-      const metadata = {
-        sdkVersion: SDK_VERSION,
-        mode: env2,
-        resources: { workflows, agents },
-        ...documentation ? { documentation } : {},
-        ...org.relationships ? { relationships: org.relationships } : {}
-      };
-      const form = new FormData();
-      form.append("bundle", new Blob([bundleBuffer]), "bundle.js");
-      form.append("metadata", JSON.stringify(metadata));
-      const response = await fetch(`${apiUrl}/api/external/deploy`, {
-        method: "POST",
-        headers: { Authorization: `Bearer ${apiKey}` },
-        body: form
-      });
-      if (!response.ok) {
-        const errorText = await response.text();
-        uploadSpinner.fail(source_default.red("Upload failed"));
-        console.error(source_default.red(`  ${response.status}: ${errorText}`));
-        throw new Error(`Deploy upload failed (${response.status}): ${errorText}`);
-      }
-      const result = await response.json();
-      uploadSpinner.succeed(
-        source_default.green("Uploading...") + source_default.white("               done")
-      );
-      const totalResources = (org.workflows?.length ?? 0) + (org.agents?.length ?? 0);
-      const elapsed = ((Date.now() - startTime) / 1e3).toFixed(1);
-      if (result.status === "active") {
-        console.log("");
-        console.log(source_default.green.bold(`  Deployed! ${totalResources} resource${totalResources !== 1 ? "s" : ""} live.`));
-        if (result.deployId) {
-          console.log(source_default.gray(`  Version:  ${result.deployId}`));
+      const uploadSpinner = ora("Uploading...").start();
+      try {
+        const bundleBuffer = await (0, import_promises.readFile)(bundleOutfile);
+        const apiKey = resolveApiKey(options2.prod);
+        if (!apiKey) {
+          uploadSpinner.fail(source_default.red("Missing API key environment variable"));
+          console.error(source_default.gray("  Set it in your .env file or shell environment:"));
+          if (!options2.prod && process.env.NODE_ENV === "development") {
+            console.error(source_default.gray("    ELEVASIS_PLATFORM_KEY_DEV=sk_...  (or ELEVASIS_PLATFORM_KEY as fallback)"));
+          } else {
+            console.error(source_default.gray("    ELEVASIS_PLATFORM_KEY=sk_..."));
+          }
+          throw new Error("Missing API key environment variable");
         }
-        console.log(source_default.gray(`  Duration: ${elapsed}s`));
-      } else if (result.status === "failed") {
-        console.log("");
-        console.log(source_default.red.bold("  Deploy failed."));
-        if (result.error) {
-          console.error(source_default.red(`  ${result.error}`));
+        const metadata = {
+          sdkVersion: SDK_VERSION,
+          mode: env2,
+          resources: { workflows, agents },
+          ...documentation ? { documentation } : {},
+          ...org.relationships ? { relationships: org.relationships } : {}
+        };
+        const form = new FormData();
+        form.append("bundle", new Blob([bundleBuffer]), "bundle.js");
+        form.append("metadata", JSON.stringify(metadata));
+        const response = await fetch(`${apiUrl}/api/external/deploy`, {
+          method: "POST",
+          headers: { Authorization: `Bearer ${apiKey}` },
+          body: form
+        });
+        if (!response.ok) {
+          const errorText = await response.text();
+          uploadSpinner.fail(source_default.red("Upload failed"));
+          console.error(source_default.red(`  ${response.status}: ${errorText}`));
+          throw new Error(`Deploy upload failed (${response.status}): ${errorText}`);
+        }
+        const result = await response.json();
+        uploadSpinner.succeed(source_default.green("Uploading...") + source_default.white("               done"));
+        const totalResources = (org.workflows?.length ?? 0) + (org.agents?.length ?? 0);
+        const elapsed = ((Date.now() - startTime) / 1e3).toFixed(1);
+        if (result.status === "active") {
+          console.log("");
+          console.log(
+            source_default.green.bold(`  Deployed! ${totalResources} resource${totalResources !== 1 ? "s" : ""} live.`)
+          );
+          if (result.deployId) {
+            console.log(source_default.gray(`  Version:  ${result.deployId}`));
+          }
+          console.log(source_default.gray(`  Duration: ${elapsed}s`));
+        } else if (result.status === "failed") {
+          console.log("");
+          console.log(source_default.red.bold("  Deploy failed."));
+          if (result.error) {
+            console.error(source_default.red(`  ${result.error}`));
+          }
+          throw new Error(`Deploy failed: ${result.error ?? "unknown error"}`);
+        } else {
+          console.log("");
+          console.log(source_default.yellow(`  Deploy status: ${result.status ?? "unknown"}`));
+          if (result.deployId) {
+            console.log(source_default.gray(`  Version: ${result.deployId}`));
+          }
         }
-        throw new Error(`Deploy failed: ${result.error ?? "unknown error"}`);
-      } else {
-        console.log("");
-        console.log(source_default.yellow(`  Deploy status: ${result.status ?? "unknown"}`));
-        if (result.deployId) {
-          console.log(source_default.gray(`  Version: ${result.deployId}`));
+      } catch (error46) {
+        if (uploadSpinner.isSpinning) {
+          uploadSpinner.fail(source_default.red("Deploy failed"));
         }
+        throw error46;
       }
-    } catch (error46) {
-      if (uploadSpinner.isSpinning) {
-        uploadSpinner.fail(source_default.red("Deploy failed"));
-      }
-      throw error46;
-    }
-  }));
+    })
+  );
 }
 
 // src/cli/commands/check.ts
@@ -45075,7 +45180,7 @@ var import_path3 = require("path");
 var import_promises2 = require("fs/promises");
 
 // src/cli/commands/templates/core/workspace.ts
-var TEMPLATE_VERSION = 27;
+var TEMPLATE_VERSION = 28;
 function configTemplate() {
   return `import type { ElevasConfig } from '@elevasis/sdk'
 
@@ -45087,44 +45192,52 @@ export default {
 `;
 }
 function packageJsonTemplate(organization) {
-  return JSON.stringify({
-    name: organization,
-    private: true,
-    type: "module",
-    scripts: {
-      "check-types": "tsc --noEmit",
-      check: "elevasis-sdk check",
-      deploy: "elevasis-sdk deploy"
-    },
-    dependencies: {
-      "@elevasis/sdk": `^${SDK_VERSION}`
+  return JSON.stringify(
+    {
+      name: organization,
+      private: true,
+      type: "module",
+      scripts: {
+        "check-types": "tsc --noEmit",
+        check: "elevasis-sdk check",
+        deploy: "elevasis-sdk deploy"
+      },
+      dependencies: {
+        "@elevasis/sdk": `^${SDK_VERSION}`
+      },
+      devDependencies: {
+        typescript: "5.9.2",
+        zod: "4.1.12"
+      }
     },
-    devDependencies: {
-      typescript: "5.9.2",
-      zod: "4.1.12"
-    }
-  }, null, 2) + "\n";
+    null,
+    2
+  ) + "\n";
 }
 function pnpmWorkspaceTemplate() {
   return `packages: []
 `;
 }
 function tsconfigTemplate() {
-  return JSON.stringify({
-    compilerOptions: {
-      target: "ES2022",
-      module: "ESNext",
-      moduleResolution: "Bundler",
-      strict: true,
-      esModuleInterop: true,
-      skipLibCheck: true,
-      forceConsistentCasingInFileNames: true,
-      isolatedModules: true,
-      outDir: "./dist"
+  return JSON.stringify(
+    {
+      compilerOptions: {
+        target: "ES2022",
+        module: "ESNext",
+        moduleResolution: "Bundler",
+        strict: true,
+        esModuleInterop: true,
+        skipLibCheck: true,
+        forceConsistentCasingInFileNames: true,
+        isolatedModules: true,
+        outDir: "./dist"
+      },
+      include: ["src"],
+      exclude: ["node_modules", "dist"]
     },
-    include: ["src"],
-    exclude: ["node_modules", "dist"]
-  }, null, 2) + "\n";
+    null,
+    2
+  ) + "\n";
 }
 function envTemplate() {
   return `ELEVASIS_PLATFORM_KEY=
@@ -45242,6 +45355,28 @@ function claudeSettingsTemplate() {
               }
             ]
           }
+        ],
+        PostToolUse: [
+          {
+            matcher: "Write|Edit|MultiEdit",
+            hooks: [
+              {
+                type: "command",
+                command: "node .claude/hooks/post-edit-validate.mjs"
+              }
+            ]
+          }
+        ],
+        PostToolUseFailure: [
+          {
+            matcher: "Bash",
+            hooks: [
+              {
+                type: "command",
+                command: "node .claude/hooks/tool-failure-recovery.mjs"
+              }
+            ]
+          }
         ]
       }
     },
@@ -45450,16 +45585,16 @@ proactivity -- to their assessed levels.
 
 | Resource | Location | When to Load |
 | --- | --- | --- |
-| Workspace concepts | \`reference/concepts/index.mdx\` | User asks "what is...?" or needs conceptual grounding |
+| Workspace concepts | \`reference/concepts.mdx\` | User asks "what is...?" or needs conceptual grounding |
 | SDK patterns and examples | \`reference/resources/patterns.mdx\` | Building or modifying a workflow |
 | Platform tool catalog | \`reference/platform-tools/index.mdx\` | Connecting to external services |
-| CLI reference | \`reference/cli/index.mdx\` | Running execution/platform operations |
-| Credential model | \`reference/security/credentials.mdx\` | Setting up integrations or tool access |
-| Interaction guidance | \`reference/developer/interaction-guidance.mdx\` | Unsure how to adapt for a skill combination |
+| CLI reference | \`reference/cli.mdx\` | Running execution/platform operations |
+| Credential model | \`reference/platform-tools/index.mdx\` | Setting up integrations or credential security |
+| Interaction guidance | \`reference/framework/interaction-guidance.mdx\` | Unsure how to adapt for a skill combination |
 | Error history | \`.claude/memory/errors/index.md\` | Debugging errors, checking past fixes |
-| Command View model | \`reference/deployment/command-view.mdx\` | Deploying or building resources that invoke other resources |
-| Command Center UI reference | \`reference/deployment/command-center-ui.mdx\` | User asks about post-deployment UI or Command Center navigation |
-| SDK error reference | \`reference/troubleshooting/common-errors.mdx\` | Unknown error not in workspace memory |
+| Command View model | \`reference/deployment/command-center.mdx\` | Deploying or building resources that invoke other resources |
+| Command Center UI reference | \`reference/deployment/command-center.mdx\` | User asks about post-deployment UI or Command Center navigation |
+| SDK error reference | \`reference/troubleshooting.mdx\` | Unknown error not in workspace memory |
 | Project map | \`docs/project-map.mdx\` | Session start, project orientation |
 | Resource inventory | \`docs/resource-map.mdx\` | Finding a specific resource by name or ID |
 | Project priorities | \`docs/priorities.mdx\` | Deciding what to work on next |
@@ -45485,7 +45620,7 @@ Use \`pnpm exec elevasis-sdk\` for runtime commands (resolves the locally instal
 - \`pnpm exec elevasis-sdk execution <resource-id> <execution-id>\` -- inspect execution detail
 
 Organization is derived from your API key -- no org prefix needed in the resource ID.
-For full CLI reference: \`reference/cli/index.mdx\`
+For full CLI reference: \`reference/cli.mdx\`
 
 ## Rules
 
@@ -45500,8 +45635,8 @@ SDK patterns (imports, source structure, platform tools) are auto-loaded from
 
 When an error occurs:
 1. Check \`.claude/memory/errors/\` first for past fixes
-2. If new, check \`reference/troubleshooting/common-errors.mdx\`
-3. After resolving, record in \`memory/errors/\` with context and fix
+2. If new, check \`reference/troubleshooting.mdx\`
+3. After resolving, record in \`.claude/memory/errors/\` with context and fix
 4. If an error recurs 3+ times, add a rule to \`.claude/rules/workspace-patterns.md\`${ctx.hasUI ? `
 
 ### UI App (\`ui/\`)
@@ -45533,7 +45668,7 @@ based on what you find.
 - When growth is observed, note it in the skills.md Growth Log.
 
 For detailed per-dimension adaptation rules, read
-\`reference/developer/interaction-guidance.mdx\`.
+\`reference/framework/interaction-guidance.mdx\`.
 
 ## Commands
 
@@ -45542,7 +45677,7 @@ For detailed per-dimension adaptation rules, read
 | \`/meta\` | Project lifecycle: init, status, fix, deploy, health |
 | \`/docs\` | Browse, create, and verify permanent documentation |
 | \`/work\` | Task tracking: create, save, resume, complete |
-| \`/tutorial\` | Progressive learning path (7 core lessons + 9 modules) |
+| \`/tutorial\` | Progressive learning path (21 items across 4 sections) |
 
 ## Skills
 
@@ -45575,7 +45710,7 @@ Do not store in \`.claude/memory/\`:
 
 ### Structure
 
-- \`memory/index.md\` is the root -- maps to topic files and subdirectories
+- \`.claude/memory/index.md\` is the root -- maps to topic files and subdirectories
 - Every subdirectory has its own \`index.md\` mapping to children
 - Start at the root index and drill down
 - When a file outgrows a single document, split into a subdirectory
@@ -45599,14 +45734,14 @@ Read \`.claude/memory/profile/skills.md\` first. The \`automation\` skill level
 controls which docs you load and which lesson variant you deliver.
 
 **automation: none**
-- Load from \`reference/concepts/index.mdx\`: Glossary, What is a Workflow,
+- Load from \`reference/concepts.mdx\`: Glossary, What is a Workflow,
   Platform Tools Overview only. Skip Zod, Execution Model, Design Decisions.
-- Load \`reference/deployment/command-center-ui.mdx\` for UI-first teaching.
+- Load \`reference/deployment/command-center.mdx\` for UI-first teaching.
 - Do NOT load \`reference/resources/patterns.mdx\` or
   \`reference/platform-tools/adapters.mdx\` during core lessons.
 
 **automation: low-code**
-- Load all sections of \`reference/concepts/index.mdx\`.
+- Load all sections of \`reference/concepts.mdx\`.
 - Load \`reference/resources/patterns.mdx\` with Zapier/Make mapping in mind.
 - Load \`reference/platform-tools/adapters.mdx\` on-demand (when tools are used).
 
@@ -45694,7 +45829,7 @@ Each lesson follows this flow:
 
 When automation is none:
 Skip the file tour. Start with what Elevasis does for their business -- use analogies
-from \`reference/developer/interaction-guidance.mdx\` (recipe, assembly line, kitchen
+from \`reference/framework/interaction-guidance.mdx\` (recipe, assembly line, kitchen
 appliance). Explain deployment plainly: "You write the recipe here, then deploy it so
 it's live." Deploy the starter echo workflow (\`elevasis-sdk check\` + \`elevasis-sdk deploy\`),
 THEN tour the Command Center so the user sees populated pages, not empty ones. Tour:
@@ -45942,14 +46077,14 @@ Each module follows this flow:
 ## Modules
 
 **Module: hitl -- Human-in-the-Loop**
-Read: \`reference/deployment/command-center-ui.mdx\` (Command Queue section).
+Read: \`reference/deployment/command-center.mdx\` (Command Queue section).
 Build: Add an approval gate using \`approval.requestApproval()\`. Test full lifecycle:
 trigger, see pending in Command Queue, approve/reject, observe resume.
 Key concepts: approval adapter, pending state, Command Queue UI, resume on decision.
 Verify: Trigger workflow, open Command Queue, approve, confirm completion.
 
 **Module: schedules -- Task Scheduling**
-Read: \`reference/deployment/command-center-ui.mdx\` (Task Scheduler section).
+Read: \`reference/deployment/command-center.mdx\` (Task Scheduler section).
 Build: Create all three schedule types (Recurring cron, Relative delay, Absolute
 datetime). Use \`scheduler\` adapter for in-workflow scheduling.
 Key concepts: schedule types, cron syntax, scheduler adapter, Task Scheduler UI.
@@ -45963,7 +46098,7 @@ Verify: Run workflow, check notification in Command Center, confirm email receiv
 
 **Module: integrations -- Real-World Integrations**
 Read: \`reference/platform-tools/index.mdx\`, \`reference/platform-tools/adapters.mdx\`,
-\`reference/security/credentials.mdx\`.
+\`reference/platform-tools/index.mdx\`.
 Build: Pick a real integration adapter based on user's goals (read \`identity.md\`).
 Set up credential (OAuth via UI, API key via CLI). Build end-to-end integration workflow.
 Key concepts: adapter pattern, credential scoping, error handling for external calls.
@@ -45972,7 +46107,7 @@ handling with invalid credential.
 
 **Module: error-handling -- Error Handling Mastery**
 Read: \`reference/resources/patterns.mdx\` (error handling),
-\`reference/troubleshooting/common-errors.mdx\`.
+\`reference/troubleshooting.mdx\`.
 Build: Create a workflow demonstrating all three error types. Add try/catch,
 \`context.logger\`, and error recovery.
 Key concepts: ExecutionError, PlatformToolError, ToolingError, recovery patterns.
@@ -45988,7 +46123,7 @@ Key concepts: context.store, context.logger, domain organization, schema depth.
 Verify: Run workflow, confirm store values in step output, check logs in Execution Logs.
 
 **Module: composition -- Resource Composition**
-Read: \`reference/deployment/command-view.mdx\`, \`reference/resources/patterns.mdx\`.
+Read: \`reference/deployment/command-center.mdx\`, \`reference/resources/patterns.mdx\`.
 Build: Create two workflows where the first triggers the second using
 \`execution.trigger()\`. Declare the relationship.
 Key concepts: execution.trigger, relationship declarations, Command View graph edges.
@@ -46136,7 +46271,7 @@ Last Session: {today's date}
 \`\`\`
 
 Update rules:
-- \`Current\`: free-form, e.g. "4: Using Platform Tools" or "M:integrations" or "20: Rules, Memory, and Customization"
+- \`Current\`: free-form, e.g. "7: Using Platform Tools" or "M:integrations" or "20: Rules, Memory, and Customization"
 - \`Last Session\`: update to today's date on each \`/tutorial\` invocation
 - Completed Lessons: add a row when any numbered item (1-10, 20-21) finishes
 - Completed Modules: add a row when any module (items 11-19) finishes
@@ -46232,9 +46367,9 @@ by the \`<!-- initialized: false -->\` flag in CLAUDE.md, or run manually.
    - Create \`.claude/memory/profile/preferences.md\` (verbosity, guidance)
 
 4. **Git check**
-   - If \`.git/\` exists: note git is configured in memory/profile/preferences.md
+   - If \`.git/\` exists: note git is configured in .claude/memory/profile/preferences.md
    - If \`.git/\` does not exist: suggest \`git init\` and optionally GitHub
-   - If git remote exists: note remote URL in memory/profile/preferences.md
+   - If git remote exists: note remote URL in .claude/memory/profile/preferences.md
 
 5. **Verify project**
    Run \`elevasis-sdk check\` to confirm the starter resource is valid.
@@ -46255,9 +46390,9 @@ by the \`<!-- initialized: false -->\` flag in CLAUDE.md, or run manually.
 
 Display a project health summary:
 1. Template version (from elevasis.config.ts) and installed SDK version (from package.json). Suggest \`elevasis-sdk update\` to check for updates
-3. Profile summary (from memory/profile/skills.md)
-4. Quick drift check: count of missing managed files, missing gitignore entries
-5. Last deployment status (from memory/deployment-state.md if it exists)
+2. Profile summary (from .claude/memory/profile/skills.md)
+3. Quick drift check: count of missing managed files, missing gitignore entries
+4. Last deployment status (from .claude/memory/deployment-state.md if it exists)
 
 ### \`/meta fix\` -- Maintenance and Upgrade
 
@@ -46275,9 +46410,9 @@ Detect and repair all drift. Optionally upgrades the SDK first.
 3. **CLAUDE.md sections:** Add missing sections in correct position
 4. **Memory structure:** Create base structure if missing, then verify index consistency.
    If \`.claude/memory/\` does not exist or is empty:
-   - Create \`memory/index.md\` (root index with placeholder entries)
-   - Create \`memory/errors/index.md\` (error category summary, empty tables)
-   - Create \`memory/errors/deploy.md\`, \`memory/errors/runtime.md\`, \`memory/errors/typescript.md\`
+   - Create \`.claude/memory/index.md\` (root index with placeholder entries)
+   - Create \`.claude/memory/errors/index.md\` (error category summary, empty tables)
+   - Create \`.claude/memory/errors/deploy.md\`, \`.claude/memory/errors/runtime.md\`, \`.claude/memory/errors/typescript.md\`
    If memory exists, verify: every file referenced in an index exists; every file
    without an index entry gets one added; broken references are removed.
 5. **Documentation verification:** For each file in docs/:
@@ -46288,7 +46423,7 @@ Detect and repair all drift. Optionally upgrades the SDK first.
    e. Report discrepancies with suggested fixes
    Note: \`/docs verify\` is available for standalone interactive verification outside this pipeline.
 6. **Settings consistency:** Verify expected fields
-7. **Rules health:** Scan \`memory/errors/\` -- flag any entry that has recurred
+7. **Rules health:** Scan \`.claude/memory/errors/\` -- flag any entry that has recurred
    3+ times and is not yet in \`.claude/rules/workspace-patterns.md\`.
    If \`workspace-patterns.md\` has no rules yet and 5+ resources exist in \`src/\`,
    suggest adding patterns. Surface suggestions only -- do not auto-generate.
@@ -46301,7 +46436,7 @@ Each step reports its result. Steps 1-8 run even if step 0 is skipped.
 
 ### \`/meta deploy\` -- Full Deploy Pipeline
 
-0. Read \`reference/deployment/command-view.mdx\` -- understand the Command View
+0. Read \`reference/deployment/command-center.mdx\` -- understand the Command View
    model, relationship declarations, and what deploy-time validation checks.
    This context is essential for diagnosing validation failures in steps 1-2.
 1. Run \`elevasis-sdk check\` (validation)
@@ -46311,18 +46446,18 @@ Each step reports its result. Steps 1-8 run even if step 0 is skipped.
 5. Run \`elevasis-sdk deploy\`
 6. \`docs/project-map.mdx\` is auto-regenerated by deploy (no manual bump needed)
 7. Verify deployment via platform
-8. Update \`memory/deployment-state.md\` with count, timestamp, inventory
+8. Update \`.claude/memory/deployment-state.md\` with count, timestamp, inventory
 9. If git configured and remote exists: optionally push
 
 Each step reports its result. Pipeline stops on failure with suggested fix.
-If validation fails with relationship errors, re-read \`reference/deployment/command-view.mdx\`
+If validation fails with relationship errors, re-read \`reference/deployment/command-center.mdx\`
 for the enforcement model and common fixes.
 
 ### \`/meta health\` -- Execution Debugging
 
 Diagnose runtime failures and environment issues:
 - Show recent executions with status (completed/failed)
-- For failed executions: analyze logs, cross-reference with memory/errors/
+- For failed executions: analyze logs, cross-reference with .claude/memory/errors/
 - Check resource deployment status (deployed, outdated, never deployed)
 - Verify environment: API key valid, credentials accessible, DB connected
 
@@ -46829,7 +46964,7 @@ This file is yours. The other \`.claude/rules/\` files are SDK-owned and updated
 
 ## When to Add a Rule
 
-- An error has recurred 3+ times (CLAUDE.md instructs you to promote from \`memory/errors/\`)
+- An error has recurred 3+ times (CLAUDE.md instructs you to promote from \`.claude/memory/errors/\`)
 - A pattern appears across 3+ resources and is worth documenting for consistency
 - A naming or structural convention exists that future sessions would likely get wrong
 
@@ -46954,6 +47089,199 @@ When all plan steps are marked COMPLETE, suggest \`/work complete\` to finalize
 - Completed tasks move OUT of \`docs/in-progress/\` to \`docs/<relevant-dir>/\`
 `;
 }
+function claudePostEditValidateHookTemplate() {
+  return `#!/usr/bin/env node
+// post-edit-validate.mjs
+// PostToolUse hook \u2014 auto-formats with prettier, type-checks .ts/.tsx files.
+// Fires after Edit|Write|MultiEdit succeeds.
+
+import { existsSync } from 'node:fs'
+import { resolve, normalize, extname, join, dirname } from 'node:path'
+import { execSync } from 'node:child_process'
+
+const ROOT = process.env.CLAUDE_PROJECT_DIR ?? process.cwd()
+
+// Extensions prettier should format
+const PRETTIER_EXTENSIONS = new Set([
+  '.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs', '.json', '.css', '.md', '.mdx'
+])
+
+// Extensions that trigger type-checking
+const TS_EXTENSIONS = new Set(['.ts', '.tsx'])
+
+function findNearestTsconfig(startDir) {
+  let dir = startDir
+  const root = normalize(ROOT)
+  while (dir.length >= root.length) {
+    const candidate = join(dir, 'tsconfig.json')
+    if (existsSync(candidate)) return candidate
+    const parent = dirname(dir)
+    if (parent === dir) break
+    dir = parent
+  }
+  return null
+}
+
+try {
+  const chunks = []
+  for await (const chunk of process.stdin) chunks.push(chunk)
+  const input = JSON.parse(Buffer.concat(chunks).toString())
+
+  const filePath = input.tool_input?.file_path
+  if (!filePath) process.exit(0)
+
+  const ext = extname(filePath).toLowerCase()
+  const absPath = normalize(resolve(filePath))
+  if (!existsSync(absPath)) process.exit(0)
+
+  const results = []
+
+  // 1. Prettier
+  if (PRETTIER_EXTENSIONS.has(ext)) {
+    try {
+      execSync('pnpm exec prettier --write "' + absPath + '"', {
+        cwd: ROOT,
+        stdio: ['pipe', 'pipe', 'pipe'],
+        timeout: 10_000
+      })
+    } catch (err) {
+      const stderr = err.stderr?.toString().trim() || ''
+      if (stderr && !/ignored/i.test(stderr)) {
+        results.push('Prettier error: ' + stderr.slice(0, 300))
+      }
+    }
+  }
+
+  // 2. Type-check for .ts/.tsx
+  if (TS_EXTENSIONS.has(ext)) {
+    const tsconfig = findNearestTsconfig(dirname(absPath))
+    if (tsconfig) {
+      try {
+        execSync('pnpm exec tsc --noEmit -p "' + tsconfig + '"', {
+          cwd: ROOT,
+          stdio: ['pipe', 'pipe', 'pipe'],
+          timeout: 30_000,
+          env: { ...process.env, NODE_OPTIONS: '--max-old-space-size=4096' }
+        })
+      } catch (err) {
+        if (err.killed) process.exit(0) // Don't block on timeout
+        const stdout = err.stdout?.toString() || ''
+        if (stdout.includes('error TS')) {
+          const errorLines = stdout
+            .split('\\n')
+            .filter(l => l.includes('error TS'))
+            .slice(0, 10)
+          results.push('Type errors after editing ' + filePath + ':\\n' + errorLines.join('\\n'))
+        }
+      }
+    }
+  }
+
+  // Output errors to Claude's context (silence = success)
+  if (results.length > 0) {
+    process.stderr.write(results.join('\\n\\n'))
+    process.exit(2) // Exit 2 = send stderr as feedback to Claude
+  }
+} catch {}
+
+process.exit(0)
+`;
+}
+function claudeToolFailureRecoveryHookTemplate() {
+  return `#!/usr/bin/env node
+// tool-failure-recovery.mjs
+// PostToolUseFailure hook \u2014 pattern-matches known Bash errors and returns
+// recovery advice via stderr + exit 2 (feedback to Claude).
+
+const RECOVERY_TABLE = [
+  {
+    test: r => /JavaScript heap out of memory/i.test(r),
+    advice: 'Out of memory.',
+    fix: 'Run the command with NODE_OPTIONS="--max-old-space-size=4096".',
+    why: 'Large TypeScript projects can exceed Node default heap limit.',
+  },
+  {
+    test: r => /boundary hook/i.test(r) && /block|denied/i.test(r),
+    advice: 'Command blocked by SDK boundary hook.',
+    fix: 'Ask the user to run this command manually.',
+    why: 'The boundary hook blocks gh CLI, destructive git operations, and file writes outside the project.',
+    see: 'CLAUDE.md',
+  },
+  {
+    test: r => /ENOENT/.test(r) && /node_modules/.test(r),
+    advice: 'Missing node_modules dependency.',
+    fix: 'Run: pnpm install',
+    why: 'Dependencies are not installed or were cleared.',
+  },
+  {
+    test: r => /ERR_MODULE_NOT_FOUND/.test(r) && /@elevasis\\/sdk/.test(r),
+    advice: '@elevasis/sdk module not found.',
+    fix: 'Run: pnpm install \u2014 then verify @elevasis/sdk is in package.json dependencies.',
+    why: 'The SDK package is not installed or the version is mismatched.',
+  },
+  {
+    test: r => /ERR_MODULE_NOT_FOUND/.test(r),
+    advice: 'Module not found at import path.',
+    fix: 'Check the import path and verify the package is installed (pnpm install).',
+    why: 'The import path does not match any installed package or local file.',
+  },
+  {
+    test: r => /TS2307/.test(r) || (/cannot find/i.test(r) && /declaration/i.test(r)),
+    advice: 'TypeScript cannot resolve module or declaration file.',
+    fix: 'Check that the package is installed and tsconfig paths are correct.',
+    why: 'Missing dependency or incorrect TypeScript configuration.',
+  },
+  {
+    test: r => /EPERM/.test(r) || /permission denied/i.test(r),
+    advice: 'Permission denied (EPERM).',
+    fix: 'Close the file in any other process (editor, terminal, or dev server) and retry.',
+    why: 'On Windows, files locked by another process cannot be written to.',
+  },
+  {
+    test: r => /lockfile/i.test(r) && /conflict|outdated|ERR_PNPM/i.test(r),
+    advice: 'pnpm lockfile conflict or outdated.',
+    fix: 'Run: pnpm install to regenerate the lockfile.',
+    why: 'The lockfile is out of sync with package.json changes.',
+  },
+  {
+    test: r => /elevasis-sdk check/.test(r) || /elevasis-sdk deploy/.test(r),
+    advice: 'elevasis-sdk CLI command failed.',
+    fix: 'Check the error output above. Common causes: missing .env ELEVASIS_API_KEY, invalid resource schemas, or network issues.',
+    why: 'The SDK CLI validates resources and communicates with the platform API.',
+  },
+  {
+    test: r => /EADDRINUSE/.test(r),
+    advice: 'Port already in use.',
+    fix: 'Find and kill the process using the port, or use a different port.',
+    why: 'A previous dev server or process is still holding the port.',
+  },
+]
+
+function formatRecovery(entry) {
+  let msg = 'FAILED: ' + entry.advice + '\\nFIX: ' + entry.fix
+  if (entry.why) msg += '\\nWHY: ' + entry.why
+  if (entry.see) msg += '\\nSEE: ' + entry.see
+  return msg
+}
+
+try {
+  const chunks = []
+  for await (const chunk of process.stdin) chunks.push(chunk)
+  const input = JSON.parse(Buffer.concat(chunks).toString())
+
+  const response = input.tool_response ?? ''
+
+  for (const entry of RECOVERY_TABLE) {
+    if (entry.test(response)) {
+      process.stderr.write(formatRecovery(entry))
+      process.exit(2)
+    }
+  }
+} catch {}
+
+process.exit(0)
+`;
+}
 
 // src/cli/commands/templates/core/resources.ts
 function starterTemplate() {
@@ -47129,6 +47457,8 @@ function getManagedTemplates(ctx = {}) {
     ".claude/settings.json": claudeSettingsTemplate,
     ".claude/scripts/statusline-command.js": claudeStatuslineScriptTemplate,
     ".claude/hooks/enforce-sdk-boundary.mjs": claudeSdkBoundaryHookTemplate,
+    ".claude/hooks/post-edit-validate.mjs": claudePostEditValidateHookTemplate,
+    ".claude/hooks/tool-failure-recovery.mjs": claudeToolFailureRecoveryHookTemplate,
     ".claude/commands/tutorial.md": claudeTutorialCommandTemplate,
     ".claude/commands/meta.md": claudeMetaCommandTemplate,
     ".claude/commands/work.md": claudeWorkCommandTemplate,
@@ -47341,6 +47671,8 @@ var MANAGED_FILES = [
   "CLAUDE.md",
   ".claude/settings.json",
   ".claude/hooks/enforce-sdk-boundary.mjs",
+  ".claude/hooks/post-edit-validate.mjs",
+  ".claude/hooks/tool-failure-recovery.mjs",
   ".claude/commands/tutorial.md",
   ".claude/commands/meta.md",
   ".claude/commands/work.md",
@@ -47355,96 +47687,100 @@ var MANAGED_FILES = [
 ];
 var SCAFFOLD_FILES = [...INIT_ONLY_FILES, ...MANAGED_FILES];
 function registerInitCommand(program3) {
-  program3.command("init [directory]").description("Scaffold a new Elevasis workspace\n  Example: elevasis-sdk init my-workspace").option("--force", "Overwrite existing files").option("--ui", "Include a Vite + React UI app in ui/").action(wrapAction("init", async (directory, options2) => {
-    const targetDir = directory ? (0, import_path3.resolve)(directory) : process.cwd();
-    const orgSlug = toSlug((0, import_path3.basename)(targetDir));
-    if (!options2.force) {
-      const filesToCheck = options2.ui ? [...SCAFFOLD_FILES, ...UI_INIT_FILES] : SCAFFOLD_FILES;
-      const conflicts = [];
-      for (const file2 of filesToCheck) {
-        try {
-          await (0, import_promises2.access)((0, import_path3.resolve)(targetDir, file2));
-          conflicts.push(file2);
-        } catch {
-        }
-      }
-      if (conflicts.length > 0) {
-        console.error(source_default.red("Files already exist:"));
-        for (const f of conflicts) {
-          console.error(source_default.gray(`  ${f}`));
+  program3.command("init [directory]").description("Scaffold a new Elevasis workspace\n  Example: elevasis-sdk init my-workspace").option("--force", "Overwrite existing files").option("--ui", "Include a Vite + React UI app in ui/").action(
+    wrapAction("init", async (directory, options2) => {
+      const targetDir = directory ? (0, import_path3.resolve)(directory) : process.cwd();
+      const orgSlug = toSlug((0, import_path3.basename)(targetDir));
+      if (!options2.force) {
+        const filesToCheck = options2.ui ? [...SCAFFOLD_FILES, ...UI_INIT_FILES] : SCAFFOLD_FILES;
+        const conflicts = [];
+        for (const file2 of filesToCheck) {
+          try {
+            await (0, import_promises2.access)((0, import_path3.resolve)(targetDir, file2));
+            conflicts.push(file2);
+          } catch {
+          }
         }
-        console.error(source_default.gray("\n  Use --force to overwrite."));
-        throw new Error("Scaffold conflict");
-      }
-    }
-    await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, "src/operations"), { recursive: true });
-    await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, "src/example"), { recursive: true });
-    await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, "src/shared"), { recursive: true });
-    await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, "docs/in-progress"), { recursive: true });
-    await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, ".claude/hooks"), { recursive: true });
-    await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, ".claude/scripts"), { recursive: true });
-    await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, ".claude/commands"), { recursive: true });
-    await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, ".claude/skills/creds"), { recursive: true });
-    await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, ".claude/rules"), { recursive: true });
-    if (options2.ui) {
-      await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, "ui/src"), { recursive: true });
-    }
-    const files = {
-      "elevasis.config.ts": configTemplate(),
-      "package.json": packageJsonTemplate(orgSlug),
-      "pnpm-workspace.yaml": pnpmWorkspaceTemplate(),
-      "tsconfig.json": tsconfigTemplate(),
-      ".env": envTemplate(),
-      ".npmrc": npmrcTemplate(),
-      ".gitignore": gitignoreTemplate({ hasUI: options2.ui }),
-      "src/index.ts": starterTemplate(),
-      "src/operations/platform-status.ts": platformStatusTemplate(),
-      "src/operations/index.ts": operationsBarrelTemplate(),
-      "src/example/echo.ts": starterWorkflowTemplate(),
-      "src/example/index.ts": exampleBarrelTemplate(),
-      "src/shared/.gitkeep": "",
-      "docs/index.mdx": docsIndexTemplate(orgSlug),
-      "docs/in-progress/.gitkeep": "",
-      "CLAUDE.md": claudeMdTemplate({ hasUI: options2.ui }),
-      ".claude/settings.json": claudeSettingsTemplate(),
-      ".claude/hooks/enforce-sdk-boundary.mjs": claudeSdkBoundaryHookTemplate(),
-      ".claude/commands/tutorial.md": claudeTutorialCommandTemplate(),
-      ".claude/commands/meta.md": claudeMetaCommandTemplate(),
-      ".claude/commands/work.md": claudeWorkCommandTemplate(),
-      ".claude/commands/docs.md": claudeDocsCommandTemplate(),
-      ".claude/skills/creds/SKILL.md": claudeCredsSkillTemplate(),
-      ".claude/rules/sdk-patterns.md": claudeSdkPatternsRuleTemplate(),
-      ".claude/rules/workspace-patterns.md": claudeWorkspaceRulesTemplate(),
-      ".claude/rules/docs-authoring.md": claudeDocsAuthoringRuleTemplate(),
-      ".claude/rules/memory-conventions.md": claudeMemoryConventionsRuleTemplate(),
-      ".claude/rules/project-map.md": claudeProjectMapRuleTemplate(),
-      ".claude/rules/task-tracking.md": claudeTaskTrackingRuleTemplate(),
-      ".claude/scripts/statusline-command.js": claudeStatuslineScriptTemplate()
-    };
-    if (options2.ui) {
-      Object.assign(files, getUIFiles(orgSlug));
-    }
-    for (const [filePath, content] of Object.entries(files)) {
-      await (0, import_promises2.writeFile)((0, import_path3.resolve)(targetDir, filePath), content, "utf-8");
-    }
-    console.log(source_default.green.bold("  Workspace created!"));
-    console.log("");
-    console.log(source_default.gray("  Next steps:"));
-    if (directory) {
-      console.log(source_default.gray(`    cd ${directory}`));
-    }
-    console.log(source_default.gray("    pnpm install"));
-    console.log(source_default.gray("    # Add your API key to .env"));
-    console.log(source_default.gray("    elevasis-sdk check"));
-    console.log(source_default.gray("    elevasis-sdk deploy"));
-    if (options2.ui) {
+        if (conflicts.length > 0) {
+          console.error(source_default.red("Files already exist:"));
+          for (const f of conflicts) {
+            console.error(source_default.gray(`  ${f}`));
+          }
+          console.error(source_default.gray("\n  Use --force to overwrite."));
+          throw new Error("Scaffold conflict");
+        }
+      }
+      await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, "src/operations"), { recursive: true });
+      await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, "src/example"), { recursive: true });
+      await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, "src/shared"), { recursive: true });
+      await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, "docs/in-progress"), { recursive: true });
+      await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, ".claude/hooks"), { recursive: true });
+      await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, ".claude/scripts"), { recursive: true });
+      await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, ".claude/commands"), { recursive: true });
+      await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, ".claude/skills/creds"), { recursive: true });
+      await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, ".claude/rules"), { recursive: true });
+      if (options2.ui) {
+        await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, "ui/src"), { recursive: true });
+      }
+      const files = {
+        "elevasis.config.ts": configTemplate(),
+        "package.json": packageJsonTemplate(orgSlug),
+        "pnpm-workspace.yaml": pnpmWorkspaceTemplate(),
+        "tsconfig.json": tsconfigTemplate(),
+        ".env": envTemplate(),
+        ".npmrc": npmrcTemplate(),
+        ".gitignore": gitignoreTemplate({ hasUI: options2.ui }),
+        "src/index.ts": starterTemplate(),
+        "src/operations/platform-status.ts": platformStatusTemplate(),
+        "src/operations/index.ts": operationsBarrelTemplate(),
+        "src/example/echo.ts": starterWorkflowTemplate(),
+        "src/example/index.ts": exampleBarrelTemplate(),
+        "src/shared/.gitkeep": "",
+        "docs/index.mdx": docsIndexTemplate(orgSlug),
+        "docs/in-progress/.gitkeep": "",
+        "CLAUDE.md": claudeMdTemplate({ hasUI: options2.ui }),
+        ".claude/settings.json": claudeSettingsTemplate(),
+        ".claude/hooks/enforce-sdk-boundary.mjs": claudeSdkBoundaryHookTemplate(),
+        ".claude/hooks/post-edit-validate.mjs": claudePostEditValidateHookTemplate(),
+        ".claude/hooks/tool-failure-recovery.mjs": claudeToolFailureRecoveryHookTemplate(),
+        ".claude/commands/tutorial.md": claudeTutorialCommandTemplate(),
+        ".claude/commands/meta.md": claudeMetaCommandTemplate(),
+        ".claude/commands/work.md": claudeWorkCommandTemplate(),
+        ".claude/commands/docs.md": claudeDocsCommandTemplate(),
+        ".claude/skills/creds/SKILL.md": claudeCredsSkillTemplate(),
+        ".claude/rules/sdk-patterns.md": claudeSdkPatternsRuleTemplate(),
+        ".claude/rules/workspace-patterns.md": claudeWorkspaceRulesTemplate(),
+        ".claude/rules/docs-authoring.md": claudeDocsAuthoringRuleTemplate(),
+        ".claude/rules/memory-conventions.md": claudeMemoryConventionsRuleTemplate(),
+        ".claude/rules/project-map.md": claudeProjectMapRuleTemplate(),
+        ".claude/rules/task-tracking.md": claudeTaskTrackingRuleTemplate(),
+        ".claude/scripts/statusline-command.js": claudeStatuslineScriptTemplate()
+      };
+      if (options2.ui) {
+        Object.assign(files, getUIFiles(orgSlug));
+      }
+      for (const [filePath, content] of Object.entries(files)) {
+        await (0, import_promises2.writeFile)((0, import_path3.resolve)(targetDir, filePath), content, "utf-8");
+      }
+      console.log(source_default.green.bold("  Workspace created!"));
       console.log("");
-      console.log(source_default.gray("  UI app:"));
-      console.log(source_default.gray("    cd ui && pnpm install"));
-      console.log(source_default.gray("    # Set VITE_WORKOS_CLIENT_ID in ui/.env"));
-      console.log(source_default.gray("    pnpm dev"));
-    }
-  }));
+      console.log(source_default.gray("  Next steps:"));
+      if (directory) {
+        console.log(source_default.gray(`    cd ${directory}`));
+      }
+      console.log(source_default.gray("    pnpm install"));
+      console.log(source_default.gray("    # Add your API key to .env"));
+      console.log(source_default.gray("    elevasis-sdk check"));
+      console.log(source_default.gray("    elevasis-sdk deploy"));
+      if (options2.ui) {
+        console.log("");
+        console.log(source_default.gray("  UI app:"));
+        console.log(source_default.gray("    cd ui && pnpm install"));
+        console.log(source_default.gray("    # Set VITE_WORKOS_CLIENT_ID in ui/.env"));
+        console.log(source_default.gray("    pnpm dev"));
+      }
+    })
+  );
 }
 function toSlug(name) {
   const slug = name.toLowerCase().replace(/[^a-z0-9-]/g, "-").replace(/^[^a-z]+/, "").replace(/-+/g, "-").replace(/-$/, "");