@elevasis/sdk 1.6.0 → 1.7.0

package/dist/cli.cjs

@@ -44004,7 +44004,7 @@ function wrapAction(commandName, fn) {
 // package.json
 var package_default = {
   name: "@elevasis/sdk",
-  version: "1.6.0",
+  version: "1.7.0",
   description: "SDK for building Elevasis organization resources",
   type: "module",
   bin: {
@@ -45494,9 +45494,7 @@ function renderProjectWorkBrief(brief) {
   if (!brief.resumeTarget) {
     lines.push("  No clear resume target yet.");
   } else {
-    lines.push(
-      `  ${brief.resumeTarget.kind}: ${brief.resumeTarget.name} (${brief.resumeTarget.status ?? "unknown"})`
-    );
+    lines.push(`  ${brief.resumeTarget.kind}: ${brief.resumeTarget.name} (${brief.resumeTarget.status ?? "unknown"})`);
     if (brief.resumeTarget.savedState) {
       lines.push(`  Saved state: ${brief.resumeTarget.savedState}`);
     }
@@ -45544,7 +45542,9 @@ Projects (${projects.length}):
   );
 }
 function registerProjectResolve(program3) {
-  program3.command("project:resolve <query>").description('Resolve a project ID from a name, UUID, or search query\n  Example: elevasis-sdk project:resolve "Alpha"').option("--api-url <url>", "API base URL").option("--pretty", "Render project details instead of only the resolved ID").action(
+  program3.command("project:resolve <query>").description(
+    'Resolve a project ID from a name, UUID, or search query\n  Example: elevasis-sdk project:resolve "Alpha"'
+  ).option("--api-url <url>", "API base URL").option("--pretty", "Render project details instead of only the resolved ID").action(
     wrapAction("project:resolve", async (query, options2) => {
       const project = await resolveProject(query, options2.apiUrl);
       if (options2.pretty) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@elevasis/sdk",
-  "version": "1.6.0",
+  "version": "1.7.0",
   "description": "SDK for building Elevasis organization resources",
   "type": "module",
   "bin": {
@@ -44,7 +44,7 @@
     "tsup": "^8.0.0",
     "typescript": "5.9.2",
     "zod": "^4.1.0",
-    "@repo/core": "0.5.0",
+    "@repo/core": "0.6.0",
     "@repo/typescript-config": "0.0.0"
   },
   "scripts": {

package/reference/claude-config/hooks/__tests__/pre-edit-vibe-gate.test.mjs

@@ -0,0 +1,169 @@
+#!/usr/bin/env node
+// pre-edit-vibe-gate.test.mjs
+// Tests for the pre-edit-vibe-gate hook.
+// Run with: node --test .claude/hooks/__tests__/pre-edit-vibe-gate.test.mjs
+//
+// Tests the exported `isProtectedPath` helper directly (pure logic, no stdin/stdout
+// mocking needed). Integration cases simulate the full hook by spawning it as a
+// child process.
+
+import { describe, it } from 'node:test'
+import assert from 'node:assert/strict'
+import { spawnSync } from 'node:child_process'
+import { resolve, dirname } from 'node:path'
+import { fileURLToPath, pathToFileURL } from 'node:url'
+
+const __dirname = dirname(fileURLToPath(import.meta.url))
+const HOOK_PATH = resolve(__dirname, '..', 'pre-edit-vibe-gate.mjs')
+
+// Import the exported helper for unit-level tests.
+// Using a dynamic import so the module's top-level await (stdin read) doesn't
+// execute — the hook guards that behind the stdin loop which only runs when
+// there is actual input; unit tests call the exported function directly.
+// On Windows, absolute paths must be converted to file:// URLs for ESM imports.
+const { isProtectedPath } = await import(pathToFileURL(HOOK_PATH).href)
+
+// Template root = 3 levels up from __tests__/
+const TEMPLATE_ROOT = resolve(__dirname, '..', '..', '..')
+
+// ---------------------------------------------------------------------------
+// Helper: run the hook as a subprocess with a synthetic PreToolUse event.
+// filePath may be relative (to template root) or already absolute.
+// ---------------------------------------------------------------------------
+function runHook(toolName, filePath, env = {}) {
+  // Claude always sends absolute paths to hooks. Resolve relative paths
+  // against the template root so toRelative() inside the hook works correctly.
+  const absFilePath =
+    filePath.startsWith('/') || /^[A-Za-z]:/.test(filePath) ? filePath : resolve(TEMPLATE_ROOT, filePath)
+
+  const event = JSON.stringify({
+    tool_name: toolName,
+    tool_input: { file_path: absFilePath }
+  })
+
+  return spawnSync(process.execPath, [HOOK_PATH], {
+    input: event,
+    encoding: 'utf-8',
+    env: {
+      ...process.env,
+      // Override AFTER spreading so this always wins over any ambient value
+      CLAUDE_PROJECT_DIR: TEMPLATE_ROOT,
+      ...env
+    },
+    timeout: 5000
+  })
+}
+
+// ---------------------------------------------------------------------------
+// Unit tests — isProtectedPath (pure function, no process spawning)
+// ---------------------------------------------------------------------------
+
+describe('isProtectedPath — exact protected files', () => {
+  it('blocks organization-model.ts', () => {
+    assert.equal(isProtectedPath('foundations/config/organization-model.ts'), true)
+  })
+
+  it('blocks organization-model.examples.ts', () => {
+    assert.equal(isProtectedPath('foundations/config/organization-model.examples.ts'), true)
+  })
+
+  it('blocks organization-model.override.ts', () => {
+    assert.equal(isProtectedPath('foundations/config/organization-model.override.ts'), true)
+  })
+})
+
+describe('isProtectedPath — extensions glob', () => {
+  it('blocks a .ts file directly under extensions/', () => {
+    assert.equal(isProtectedPath('foundations/config/extensions/deal-ecom.ts'), true)
+  })
+
+  it('blocks a .ts file in a subdirectory under extensions/', () => {
+    assert.equal(isProtectedPath('foundations/config/extensions/crm/deal-ecom.ts'), true)
+  })
+
+  it('blocks the discriminated-union index.ts under extensions/', () => {
+    assert.equal(isProtectedPath('foundations/config/extensions/index.ts'), true)
+  })
+
+  it('does NOT block a non-.ts file under extensions/', () => {
+    assert.equal(isProtectedPath('foundations/config/extensions/README.md'), false)
+  })
+})
+
+describe('isProtectedPath — unrelated paths always pass', () => {
+  it('allows ui/ files', () => {
+    assert.equal(isProtectedPath('ui/src/routes/__root.tsx'), false)
+  })
+
+  it('allows operations/ files', () => {
+    assert.equal(isProtectedPath('operations/src/index.ts'), false)
+  })
+
+  it('allows foundations/types (not config)', () => {
+    assert.equal(isProtectedPath('foundations/types/entities.ts'), false)
+  })
+
+  it('does NOT block a partial-match path that is not under foundations/config', () => {
+    // "organization-model.ts" without the full prefix should not be blocked
+    assert.equal(isProtectedPath('src/organization-model.ts'), false)
+  })
+})
+
+describe('isProtectedPath — partial path / edge cases', () => {
+  it('does not block foundations/config/ itself (no .ts suffix)', () => {
+    // The directory path should not be blocked
+    assert.equal(isProtectedPath('foundations/config/'), false)
+  })
+
+  it('strips leading ./ before matching', () => {
+    assert.equal(isProtectedPath('./foundations/config/organization-model.ts'), true)
+  })
+})
+
+// ---------------------------------------------------------------------------
+// Integration tests — spawn the hook with synthetic events
+// ---------------------------------------------------------------------------
+
+describe('hook subprocess — blocked without VIBE_APPROVED', () => {
+  it('exits 2 for Write to organization-model.ts', () => {
+    const result = runHook('Write', 'foundations/config/organization-model.ts')
+    assert.equal(result.status, 2, `expected exit 2, got ${result.status}`)
+    assert.ok(result.stderr.includes('BLOCKED'), 'expected BLOCKED in stderr')
+  })
+
+  it('exits 2 for Edit to extensions/deal-ecom.ts', () => {
+    const result = runHook('Edit', 'foundations/config/extensions/deal-ecom.ts')
+    assert.equal(result.status, 2)
+    assert.ok(result.stderr.includes('BLOCKED'))
+  })
+
+  it('exits 2 for MultiEdit to organization-model.override.ts', () => {
+    const result = runHook('MultiEdit', 'foundations/config/organization-model.override.ts')
+    assert.equal(result.status, 2)
+    assert.ok(result.stderr.includes('BLOCKED'))
+  })
+})
+
+describe('hook subprocess — passes with VIBE_APPROVED=1', () => {
+  it('exits 0 for Write to organization-model.ts when VIBE_APPROVED=1', () => {
+    const result = runHook('Write', 'foundations/config/organization-model.ts', { VIBE_APPROVED: '1' })
+    assert.equal(result.status, 0, `expected exit 0, got ${result.status}`)
+  })
+
+  it('exits 0 for Edit to extensions/deal-ecom.ts when VIBE_APPROVED=1', () => {
+    const result = runHook('Edit', 'foundations/config/extensions/deal-ecom.ts', { VIBE_APPROVED: '1' })
+    assert.equal(result.status, 0)
+  })
+})
+
+describe('hook subprocess — unrelated path always passes', () => {
+  it('exits 0 for Write to ui/src/routes/__root.tsx without VIBE_APPROVED', () => {
+    const result = runHook('Write', 'ui/src/routes/__root.tsx')
+    assert.equal(result.status, 0)
+  })
+
+  it('exits 0 for Edit to operations/src/index.ts without VIBE_APPROVED', () => {
+    const result = runHook('Edit', 'operations/src/index.ts')
+    assert.equal(result.status, 0)
+  })
+})

package/reference/claude-config/hooks/pre-edit-vibe-gate.mjs

@@ -0,0 +1,128 @@
+#!/usr/bin/env node
+// pre-edit-vibe-gate.mjs
+// PreToolUse backstop — blocks raw writes to protected foundations/config paths
+// unless the VIBE_APPROVED=1 trust marker is present.
+//
+// Protected paths (relative to project root):
+//   foundations/config/organization-model.ts
+//   foundations/config/organization-model.examples.ts
+//   foundations/config/organization-model.override.ts
+//   foundations/config/extensions/**/*.ts
+//
+// To allow a write: set VIBE_APPROVED=1 in the environment before invoking the
+// agent, or run /configure which sets the marker automatically after user
+// confirmation.
+
+import { appendFileSync, mkdirSync } from 'node:fs'
+import { normalize, resolve, relative, sep } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const ROOT = normalize(process.env.CLAUDE_PROJECT_DIR ?? process.cwd())
+const LOG_DIR = ROOT + sep + '.claude' + sep + 'logs'
+const LOG_FILE = LOG_DIR + sep + 'pre-edit-vibe-gate.log'
+
+function log(msg) {
+  try {
+    mkdirSync(LOG_DIR, { recursive: true })
+    appendFileSync(LOG_FILE, `[${new Date().toISOString()}] ${msg}\n`)
+  } catch {
+    // Never crash on log failure
+  }
+}
+
+/**
+ * Normalise an incoming file path (may be absolute or project-relative) to a
+ * forward-slash relative path from ROOT for consistent matching.
+ */
+function toRelative(filePath) {
+  const abs = normalize(resolve(filePath))
+  // relative() returns OS-separator paths — normalise to forward slashes
+  return relative(ROOT, abs).replace(/\\/g, '/')
+}
+
+/**
+ * Returns true if `rel` (forward-slash relative path from root) matches one of
+ * the protected path patterns. No external deps — uses simple string checks.
+ *
+ * Protected patterns:
+ *   foundations/config/organization-model.ts                (exact)
+ *   foundations/config/organization-model.examples.ts       (exact)
+ *   foundations/config/organization-model.override.ts       (exact)
+ *   foundations/config/extensions/**\/*.ts                  (glob — any .ts under extensions/)
+ */
+export function isProtectedPath(rel) {
+  // Normalise away any leading ./
+  const r = rel.replace(/^\.\//, '')
+
+  // Exact protected files
+  const EXACT = [
+    'foundations/config/organization-model.ts',
+    'foundations/config/organization-model.examples.ts',
+    'foundations/config/organization-model.override.ts'
+  ]
+  if (EXACT.includes(r)) return true
+
+  // Glob: foundations/config/extensions/**/*.ts
+  // Must start with the prefix, end with .ts, and have at least one path segment
+  // after the extensions/ directory.
+  const EXT_PREFIX = 'foundations/config/extensions/'
+  if (r.startsWith(EXT_PREFIX) && r.endsWith('.ts')) {
+    // Ensure there is at least one filename after the prefix (not just the dir itself)
+    const remainder = r.slice(EXT_PREFIX.length)
+    if (remainder.length > 3) return true // at least "x.ts"
+  }
+
+  return false
+}
+
+const BLOCK_MESSAGE =
+  'BLOCKED: This file is protected by the vibe gate.\n' +
+  'WHY: Direct edits to foundations/config/organization-model.ts and\n' +
+  '     foundations/config/extensions/*.ts bypass the ambient vibe ceremony\n' +
+  '     (confirm + /configure write + pnpm check-types).\n' +
+  'FIX: Run /configure to codify changes with proper ceremony (sets VIBE_APPROVED=1\n' +
+  '     automatically), or set VIBE_APPROVED=1 explicitly if you are a power user\n' +
+  '     who has already completed the ceremony manually.'
+
+// Only run the stdin-reading main loop when this file is the entry point,
+// not when it is imported as a module (e.g., by tests).
+const isMain =
+  process.argv[1] != null && normalize(fileURLToPath(import.meta.url)) === normalize(resolve(process.argv[1]))
+
+if (isMain) {
+  try {
+    const chunks = []
+    for await (const chunk of process.stdin) chunks.push(chunk)
+    const input = JSON.parse(Buffer.concat(chunks).toString())
+
+    const toolName = input.tool_name ?? ''
+    const filePath = input.tool_input?.file_path ?? ''
+
+    // Only gate Write, Edit, MultiEdit
+    if (!['Write', 'Edit', 'MultiEdit'].includes(toolName)) {
+      log(`SKIP tool=${toolName} (not a write tool)`)
+      process.exit(0)
+    }
+
+    if (!filePath) {
+      log(`SKIP tool=${toolName} no file_path in input`)
+      process.exit(0)
+    }
+
+    const rel = toRelative(filePath)
+    const protected_ = isProtectedPath(rel)
+    const approved = process.env.VIBE_APPROVED === '1'
+    const decision = protected_ && !approved ? 'BLOCK' : 'ALLOW'
+
+    log(`tool=${toolName} path=${rel} protected=${protected_} VIBE_APPROVED=${approved} decision=${decision}`)
+
+    if (decision === 'BLOCK') {
+      process.stderr.write(BLOCK_MESSAGE)
+      process.exit(2)
+    }
+  } catch (err) {
+    log(`ERROR: ${err?.message ?? String(err)}`)
+  }
+
+  process.exit(0)
+}

package/reference/claude-config/logs/pre-edit-vibe-gate.log

@@ -0,0 +1,23 @@
+[2026-04-20T09:29:53.658Z] tool=Write path=../../foundations/config/organization-model.ts protected=false VIBE_APPROVED=false decision=ALLOW
+[2026-04-20T09:29:53.702Z] tool=Edit path=../../foundations/config/extensions/deal-ecom.ts protected=false VIBE_APPROVED=false decision=ALLOW
+[2026-04-20T09:29:53.747Z] tool=MultiEdit path=../../foundations/config/organization-model.override.ts protected=false VIBE_APPROVED=false decision=ALLOW
+[2026-04-20T09:29:53.793Z] tool=Write path=../../foundations/config/organization-model.ts protected=false VIBE_APPROVED=true decision=ALLOW
+[2026-04-20T09:29:53.837Z] tool=Edit path=../../foundations/config/extensions/deal-ecom.ts protected=false VIBE_APPROVED=true decision=ALLOW
+[2026-04-20T09:29:53.890Z] tool=Write path=../../ui/src/routes/__root.tsx protected=false VIBE_APPROVED=false decision=ALLOW
+[2026-04-20T09:29:53.934Z] tool=Edit path=../../operations/src/index.ts protected=false VIBE_APPROVED=false decision=ALLOW
+[2026-04-20T09:32:06.844Z] tool=Write path=../../foundations/config/organization-model.ts protected=false VIBE_APPROVED=false decision=ALLOW
+[2026-04-20T09:32:06.890Z] tool=Edit path=../../foundations/config/extensions/deal-ecom.ts protected=false VIBE_APPROVED=false decision=ALLOW
+[2026-04-20T09:32:06.934Z] tool=MultiEdit path=../../foundations/config/organization-model.override.ts protected=false VIBE_APPROVED=false decision=ALLOW
+[2026-04-20T09:32:06.978Z] tool=Write path=../../foundations/config/organization-model.ts protected=false VIBE_APPROVED=true decision=ALLOW
+[2026-04-20T09:32:07.021Z] tool=Edit path=../../foundations/config/extensions/deal-ecom.ts protected=false VIBE_APPROVED=true decision=ALLOW
+[2026-04-20T09:32:07.065Z] tool=Write path=../../ui/src/routes/__root.tsx protected=false VIBE_APPROVED=false decision=ALLOW
+[2026-04-20T09:32:07.109Z] tool=Edit path=../../operations/src/index.ts protected=false VIBE_APPROVED=false decision=ALLOW
+[2026-04-20T09:32:30.340Z] tool=Write path=../../foundations/config/organization-model.ts protected=false VIBE_APPROVED=false decision=ALLOW
+[2026-04-20T09:38:14.624Z] tool=Write path=../../foundations/config/organization-model.ts protected=false VIBE_APPROVED=false decision=ALLOW
+[2026-04-20T09:40:20.586Z] tool=Write path=foundations/config/organization-model.ts protected=true VIBE_APPROVED=false decision=BLOCK
+[2026-04-20T09:40:20.631Z] tool=Edit path=foundations/config/extensions/deal-ecom.ts protected=true VIBE_APPROVED=false decision=BLOCK
+[2026-04-20T09:40:20.674Z] tool=MultiEdit path=foundations/config/organization-model.override.ts protected=true VIBE_APPROVED=false decision=BLOCK
+[2026-04-20T09:40:20.718Z] tool=Write path=foundations/config/organization-model.ts protected=true VIBE_APPROVED=true decision=ALLOW
+[2026-04-20T09:40:20.762Z] tool=Edit path=foundations/config/extensions/deal-ecom.ts protected=true VIBE_APPROVED=true decision=ALLOW
+[2026-04-20T09:40:20.807Z] tool=Write path=ui/src/routes/__root.tsx protected=false VIBE_APPROVED=false decision=ALLOW
+[2026-04-20T09:40:20.905Z] tool=Edit path=operations/src/index.ts protected=false VIBE_APPROVED=false decision=ALLOW

package/reference/claude-config/rules/organization-os.md

@@ -5,12 +5,34 @@ Organization OS is the semantic contract layer defining how organizations, featu
 ## Key Files in This Project
 
 - `foundations/config/organization-model.ts` -- project-specific org model definition (calls `defineOrganizationModel` + `resolveOrganizationModel`)
-- `foundations/config/organization-model.examples.ts` -- 5 reference patterns: branding, CRM stages, lead-gen stages, resource mappings, custom features. Pure reference -- not imported anywhere. Read this when customizing the org model.
+- `foundations/config/organization-model.examples.ts` -- reference patterns for all 14 domains: branding, identity, customers, offerings, roles, goals, sales stages, prospecting stages, resource mappings with techStack, custom features, statuses, and open-placement navigation groups. Pure reference -- not imported anywhere. Read this when customizing the org model.
 - `foundations/types/entities.ts` -- typed entity contracts (Project, Deal, etc.). Extends `BaseProject`, `BaseDeal` from `@elevasis/core/entities` with project-specific metadata. Read this when authoring workflows that operate on these entities.
 - `ui/src/routes/__root.tsx` -- wires `ElevasisFeaturesProvider` with `canonicalOrganizationModel`
 - `ui/src/app-config.ts` -- references the org model
 - `operations/src/index.ts` -- `DeploymentSpec` registry for workflows and agents
 
+## Domain Overview
+
+As of the 2026-04-20 expansion, `OrganizationModel` contains 14 top-level domains:
+
+**Platform configuration:** `features`, `branding`, `navigation`, `sales` (formerly `crm`), `prospecting` (formerly `leadGen`), `projects` (formerly `delivery`), `resourceMappings`
+
+**Organizational reality:** `identity`, `customers`, `offerings`, `roles`, `goals`
+
+**Vibe layer:** `statuses`, `operations`
+
+The `resourceMappings` entries may carry an optional `techStack` extension (`platform`, `purpose`, `credentialStatus`, `isSystemOfRecord`) without introducing a new top-level domain.
+
+### Domain Rename Note
+
+Three field names changed in the 2026-04-20 expansion. Feature ID constants and consumer-facing feature IDs are unchanged:
+
+| Old field  | New field     | Feature ID (unchanged) | Constant (unchanged)  |
+| ---------- | ------------- | ---------------------- | --------------------- |
+| `crm`      | `sales`       | `'crm'`                | `CRM_FEATURE_ID`      |
+| `leadGen`  | `prospecting` | `'lead-gen'`           | `LEAD_GEN_FEATURE_ID` |
+| `delivery` | `projects`    | `'projects'`           | `PROJECTS_FEATURE_ID` |
+
 ## Reference Documentation
 
 Full Organization OS documentation ships with the SDK and is available locally after `pnpm install`:
@@ -20,7 +42,7 @@ Full Organization OS documentation ships with the SDK and is available locally a
 All paths under `node_modules/@elevasis/sdk/reference/scaffold/`:
 
 - `node_modules/@elevasis/sdk/reference/scaffold/index.mdx` -- scaffold root and navigation
-- `node_modules/@elevasis/sdk/reference/scaffold/core/organization-model.mdx` -- semantic contract, schema, authoring helpers
+- `node_modules/@elevasis/sdk/reference/scaffold/core/organization-model.mdx` -- semantic contract, all 14 domains, adapter authoring, validation gate, `/configure` entry point
 - `node_modules/@elevasis/sdk/reference/scaffold/core/organization-graph.mdx` -- graph derivation, node/edge taxonomy, lenses
 - `node_modules/@elevasis/sdk/reference/scaffold/ui/feature-shell.mdx` -- FeatureModule manifest, provider runtime
 - `node_modules/@elevasis/sdk/reference/scaffold/ui/composition-extensibility.mdx` -- layout primitives, router abstraction
@@ -48,15 +70,40 @@ All paths under `node_modules/@elevasis/sdk/reference/scaffold/`:
 - `@elevasis/core/organization-model` -- the curated organization-model barrel. Exports `defineOrganizationModel`, `resolveOrganizationModel`, `OrganizationModelSchema`, `DEFAULT_ORGANIZATION_MODEL`, organization-model types, and typed feature/surface constants.
   - Feature IDs: `CRM_FEATURE_ID`, `LEAD_GEN_FEATURE_ID`, `PROJECTS_FEATURE_ID`, `OPERATIONS_FEATURE_ID`, `MONITORING_FEATURE_ID`, `SETTINGS_FEATURE_ID`, `SEO_FEATURE_ID`
   - Headline surface IDs: `CRM_PIPELINE_SURFACE_ID`, `LEAD_GEN_LISTS_SURFACE_ID`, `PROJECTS_INDEX_SURFACE_ID`, `OPERATIONS_ORGANIZATION_GRAPH_SURFACE_ID`
-  - Use these constants instead of magic strings when overriding the org model.
+  - Reality domain types: `OrganizationModelIdentity`, `OrganizationModelCustomers`, `OrganizationModelCustomerSegment`, `OrganizationModelOfferings`, `OrganizationModelProduct`, `OrganizationModelRoles`, `OrganizationModelRole`, `OrganizationModelGoals`, `OrganizationModelObjective`, `OrganizationModelKeyResult`
+  - Vibe domain types: `OrganizationModelStatuses`, `OrganizationModelOperations`
+  - TechStack: `TechStackEntrySchema`, `OrganizationModelTechStackEntry`
+  - Use constants instead of magic strings when overriding the org model.
 - `@elevasis/core/entities` -- entity contracts barrel. Exports `BaseProject`, `BaseProjectSchema`, `BaseProjectInput` and the equivalents for `Milestone`, `Task`, `Deal`, `Company`, `Contact`. Each base interface is generic over a `\<TMeta>` extension slot. Extend these in `foundations/types/entities.ts` to add project-specific fields.
 
 ## When Working with Organization OS
 
-- **Adding a feature:** Follow `node_modules/@elevasis/sdk/reference/scaffold/recipes/add-a-feature.md`
-- **Adding a resource:** Follow `node_modules/@elevasis/sdk/reference/scaffold/recipes/add-a-resource.md`
-- **Changing org model:** Start with `foundations/config/organization-model.examples.ts` for reference patterns, then edit `foundations/config/organization-model.ts`. Use the typed feature/surface constants from `@elevasis/core/organization-model` rather than magic strings. Verify the org-os wiring (provider chain, CSS imports, feature shell).
+- **Changing org model (structural reality):** Use `/configure` as the entry point. Do not edit `foundations/config/organization-model.ts` directly -- the `pre-edit-vibe-gate.mjs` hook blocks raw writes without `VIBE_APPROVED=1`, which `/configure` sets after user confirmation. Run `/configure` for the full layered flow or `/configure \<domain>` for a targeted domain.
+- **Adding a feature:** Follow `node_modules/@elevasis/sdk/reference/scaffold/recipes/add-a-feature.md`. For toggling an existing feature, use `/configure features`.
+- **Adding a resource:** Follow `node_modules/@elevasis/sdk/reference/scaffold/recipes/add-a-resource.md`.
 - **Extending entities:** Start with `foundations/types/entities.ts` for the demo extension pattern. Base shapes come from `@elevasis/core/entities`.
 - **Authoring a workflow that takes a Project/Deal/etc.:** Reference entity types from `foundations/types/entities.ts` in the input schema -- do not redeclare them.
-- **Understanding contracts:** Check `node_modules/@elevasis/sdk/reference/scaffold/reference/contracts.md` for current type shapes
-- **Debugging sync issues:** Check `node_modules/@elevasis/sdk/reference/scaffold/operations/propagation-pipeline.md` for the verification pipeline
+- **Understanding contracts:** Check `node_modules/@elevasis/sdk/reference/scaffold/reference/contracts.md` for current type shapes.
+- **Debugging sync issues:** Check `node_modules/@elevasis/sdk/reference/scaffold/operations/propagation-pipeline.md` for the verification pipeline.
+
+## `/configure` -- Org Model QA Entry Point
+
+`/configure` is the recurring, safe-to-re-run org model editor for this project. It is a skill (not a command) at `.claude/skills/configure/SKILL.md`.
+
+**Usage:**
+
+- `/configure` -- layered flow: identity → customers → offerings → roles → goals → techStack
+- `/configure identity` -- legal identity, mission/vision, industry, geography, timezone
+- `/configure customers` -- customer segments with jobs-to-be-done, pains, gains, firmographics
+- `/configure offerings` -- products and services with pricing model and segment references
+- `/configure roles` -- role chart with responsibilities, reporting lines, and holders
+- `/configure goals` -- organizational goals with period and measurable outcomes
+- `/configure techStack` -- external-SaaS integration metadata on resource mappings
+- `/configure features` -- enable, disable, or add features
+- `/configure labels` -- edit display labels on enum entries (statuses, stages)
+
+Every write is gated: `resolveOrganizationModel()` must succeed (Zod cross-refs pass) and `pnpm -C operations check-types` must pass. On failure the change is rolled back.
+
+**Distinction from `/setup`:** `/setup` is first-time bootstrap only. After bootstrap it delegates here. `/configure` is idempotent and safe to re-run at any time.
+
+The ambient vibe layer (`.claude/rules/vibe.md`) automatically detects Codify intent in plain language and delegates to `/configure`. Power users can invoke `/configure` directly to bypass the ambient layer entirely.