@growthub/cli 0.7.9 → 0.8.1

package/assets/worker-kits/growthub-agency-portal-starter-v1/studio/package.json

@@ -0,0 +1,20 @@
+{
+  "name": "growthub-agency-portal-starter-studio",
+  "version": "1.0.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "vite",
+    "build": "vite build",
+    "preview": "vite preview",
+    "serve": "node serve.mjs"
+  },
+  "dependencies": {
+    "react": "^18.3.1",
+    "react-dom": "^18.3.1"
+  },
+  "devDependencies": {
+    "@vitejs/plugin-react": "^4.3.1",
+    "vite": "^5.4.2"
+  }
+}

package/assets/worker-kits/growthub-agency-portal-starter-v1/studio/serve.mjs

@@ -0,0 +1,42 @@
+#!/usr/bin/env node
+// Minimal static server for the built Vite shell.
+// Usage: node serve.mjs [--port 5180]
+import http from "node:http";
+import fs from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const DIST = path.resolve(__dirname, "dist");
+const PORT = Number(process.env.PORT ?? 5180);
+
+const mime = {
+  ".html": "text/html; charset=utf-8",
+  ".js": "application/javascript; charset=utf-8",
+  ".css": "text/css; charset=utf-8",
+  ".svg": "image/svg+xml",
+  ".json": "application/json; charset=utf-8",
+};
+
+function serve(req, res) {
+  const url = decodeURIComponent(req.url?.split("?")[0] ?? "/");
+  const file = url === "/" ? "/index.html" : url;
+  const full = path.resolve(DIST, "." + file);
+  if (!full.startsWith(DIST)) { res.statusCode = 403; res.end("Forbidden"); return; }
+  fs.readFile(full, (err, buf) => {
+    if (err) {
+      // SPA fallback
+      fs.readFile(path.resolve(DIST, "index.html"), (err2, fallback) => {
+        if (err2) { res.statusCode = 404; res.end("Not found"); return; }
+        res.setHeader("Content-Type", mime[".html"]); res.end(fallback);
+      });
+      return;
+    }
+    res.setHeader("Content-Type", mime[path.extname(full)] ?? "application/octet-stream");
+    res.end(buf);
+  });
+}
+
+http.createServer(serve).listen(PORT, () => {
+  console.log(`[starter-studio] serving ${DIST} on http://localhost:${PORT}`);
+});

package/assets/worker-kits/growthub-agency-portal-starter-v1/studio/src/App.jsx

@@ -0,0 +1,162 @@
+import React from "react";
+
+const capabilities = [
+  ["Dashboard", "Live agency snapshot", "Revenue, client health, overdue work, and next actions."],
+  ["Clients", "Profiles and onboarding", "Client records, notes, KPIs, lifecycle state, and contacts."],
+  ["Pipeline", "Opportunities", "Lead stages, potential value, won/lost state, and follow-up ownership."],
+  ["Reports", "Performance reviews", "Ad and campaign reporting through pluggable reporting adapters."],
+  ["Client Results", "Windsor reporting", "Blended Meta, Shopify, GA4, and Google Sheets-backed results."],
+  ["Settings", "Workspace control", "Branding, adapter selections, deployment metadata, and user preferences."],
+];
+
+const adapters = [
+  ["Persistence", "Postgres-compatible adapter boundary, not bound to one vendor."],
+  ["Auth", "Local workspace auth or Growthub hosted bridge authority."],
+  ["Payments", "Replaceable billing adapter for Stripe or explicit project needs."],
+  ["Integrations", "Growthub MCP bridge, BYO API tokens, and Windsor data pipelines."],
+];
+
+const quickActions = ["Client onboarding", "Publish report", "Sync Windsor data", "Review open tasks"];
+
+export default function App() {
+  return (
+    <main className="shell">
+      <aside className="sidebar">
+        <div className="brand">
+          <span className="brand-mark">GH</span>
+          <span>Agency Portal</span>
+        </div>
+        <nav className="nav">
+          {capabilities.map(([label]) => (
+            <a key={label} href={`#${label.toLowerCase().replaceAll(" ", "-")}`}>{label}</a>
+          ))}
+          <a href="#integrations">Integrations</a>
+        </nav>
+        <div className="sidebar-footer">
+          <span className="status-dot" />
+          Local Vite shell
+        </div>
+      </aside>
+
+      <section className="main">
+        <div className="utility-bar">
+          <div>
+            <strong>Growthub Agency Portal Starter</strong>
+            <span>Local-first Vite shell with Vercel app parity and governed worker-kit primitives.</span>
+          </div>
+          <div className="utility-actions">
+            <a href="#integrations">Open integrations</a>
+            <span className="pill">worker kit v1</span>
+          </div>
+        </div>
+
+        <header className="page-heading">
+          <span className="eyebrow">Agency operating system</span>
+          <h1>Client work, reporting, and integrations in one governed shell.</h1>
+          <p>
+            This starter keeps the copied prototype as product direction while the worker kit owns the
+            composable adapter model, local Vite workflow, and clean Vercel deployment path.
+          </p>
+        </header>
+
+        <section className="hero-grid">
+          <article className="hero-card primary">
+            <span>Monthly revenue</span>
+            <strong>$84.2k</strong>
+            <p>MRR, retainers, won pipeline, and invoice state are ready to bind to any supported database adapter.</p>
+          </article>
+          <article className="hero-card">
+            <span>MCP connections</span>
+            <strong>9 active</strong>
+            <p>Growthub bridge connections can hydrate user-linked providers without hardcoded API sprawl.</p>
+          </article>
+          <article className="hero-card">
+            <span>Windsor data</span>
+            <strong>4 sources</strong>
+            <p>Meta, Shopify, GA4, and Sheets-backed blended data are modeled as data pipeline objects.</p>
+          </article>
+        </section>
+
+        <section className="ops-strip">
+          <article>
+            <span>01</span>
+            <strong>Local Vite</strong>
+            <p>Fast local UI loop for the bundled starter.</p>
+          </article>
+          <article>
+            <span>02</span>
+            <strong>Vercel app</strong>
+            <p>Serverless app route parity for cloud deploy.</p>
+          </article>
+          <article>
+            <span>03</span>
+            <strong>Growthub bridge</strong>
+            <p>Optional hosted authority for MCP accounts.</p>
+          </article>
+          <article>
+            <span>04</span>
+            <strong>BYO keys</strong>
+            <p>Explicit credential setup stays composable.</p>
+          </article>
+        </section>
+
+        <section className="grid">
+          {capabilities.map(([label, metric, description]) => (
+            <article className="card" id={label.toLowerCase().replaceAll(" ", "-")} key={label}>
+              <span>{metric}</span>
+              <h3>{label}</h3>
+              <p>{description}</p>
+            </article>
+          ))}
+        </section>
+
+        <section className="adapter">
+          {adapters.map(([title, body]) => (
+            <article className="card" key={title}>
+              <h3>{title}</h3>
+              <p>{body}</p>
+            </article>
+          ))}
+        </section>
+
+        <section className="setup-grid" id="integrations" aria-label="Integration setup paths">
+          <article>
+            <span>Growthub Bridge</span>
+            <strong>MCP account authority</strong>
+            <p>Use hosted Growthub auth to resolve the user account's available linked connections.</p>
+          </article>
+          <article>
+            <span>BYO Credentials</span>
+            <strong>Thin provider adapters</strong>
+            <p>Accept explicit API tokens without coupling the kit to one data store or integration vendor.</p>
+          </article>
+          <article>
+            <span>Windsor AI</span>
+            <strong>Data pipeline object</strong>
+            <p>Model Windsor, Google Sheets blends, GA4, Shopify, and Meta as reporting data sources.</p>
+          </article>
+        </section>
+
+        <section className="results-panel">
+          <div>
+            <span className="eyebrow">Client results</span>
+            <h2>Windsor AI is a first-class data source path.</h2>
+            <p>
+              The kit models Windsor alongside Growthub bridge and BYO tokens, so reporting can use
+              blended Sheets pipelines without coupling the worker kit to one database or vendor.
+            </p>
+          </div>
+          <div className="results-metrics">
+            <div><strong>Meta</strong><span>Ads and social source</span></div>
+            <div><strong>Shopify</strong><span>Commerce source</span></div>
+            <div><strong>GA4</strong><span>Analytics source</span></div>
+          </div>
+        </section>
+      </section>
+
+      <div className="quick-actions" aria-label="Quick actions">
+        {quickActions.map((action) => <button key={action}>{action}</button>)}
+      </div>
+    </main>
+  );
+}

package/assets/worker-kits/growthub-agency-portal-starter-v1/studio/src/app.css

@@ -0,0 +1,138 @@
+:root {
+  color-scheme: dark;
+  --bg: #080b12;
+  --sidebar: #0d1118;
+  --panel: #111827;
+  --ink: #f7fafc;
+  --muted: #93a3b8;
+  --line: #223047;
+  --accent: #38bdf8;
+  --good: #22c55e;
+}
+
+* { box-sizing: border-box; }
+html { scroll-behavior: smooth; }
+body {
+  margin: 0;
+  background: var(--bg);
+  color: var(--ink);
+  font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+}
+a { color: inherit; }
+.shell {
+  min-height: 100vh;
+  display: grid;
+  grid-template-columns: 232px minmax(0, 1fr);
+  background: radial-gradient(circle at top right, rgba(56, 189, 248, 0.12), transparent 360px), var(--bg);
+}
+.sidebar {
+  position: sticky;
+  top: 0;
+  height: 100vh;
+  display: flex;
+  flex-direction: column;
+  gap: 22px;
+  background: rgba(13, 17, 24, 0.96);
+  border-right: 1px solid var(--line);
+  padding: 22px 16px;
+}
+.brand { display: flex; align-items: center; gap: 10px; font-weight: 800; }
+.brand-mark {
+  width: 34px;
+  height: 34px;
+  display: grid;
+  place-items: center;
+  border-radius: 8px;
+  background: var(--accent);
+  color: #06111d;
+  font-size: 13px;
+  font-weight: 900;
+}
+.nav { display: grid; gap: 5px; }
+.nav a {
+  color: #c6d1e1;
+  text-decoration: none;
+  padding: 9px 10px;
+  border-radius: 7px;
+  font-size: 14px;
+}
+.nav a:hover { background: #172133; color: white; }
+.sidebar-footer { margin-top: auto; display: flex; align-items: center; gap: 8px; color: var(--muted); font-size: 13px; }
+.status-dot { width: 8px; height: 8px; border-radius: 999px; background: var(--good); box-shadow: 0 0 0 4px rgba(34, 197, 94, 0.12); }
+.main { width: min(100%, 1180px); padding: 30px; }
+.utility-bar {
+  display: flex;
+  justify-content: space-between;
+  gap: 16px;
+  align-items: center;
+  margin-bottom: 20px;
+  padding: 12px 14px;
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  background: rgba(17, 24, 39, 0.82);
+}
+.utility-bar strong { display: block; font-size: 14px; }
+.utility-bar span, .page-heading p, .card p, .hero-card p, .ops-strip p, .results-panel p { color: var(--muted); line-height: 1.5; }
+.utility-actions { display: flex; flex-wrap: wrap; gap: 8px; align-items: center; }
+.utility-actions a, .pill {
+  display: inline-flex;
+  align-items: center;
+  min-height: 28px;
+  border: 1px solid var(--line);
+  border-radius: 999px;
+  padding: 5px 10px;
+  background: #0c1320;
+  color: #c9d7e8;
+  text-decoration: none;
+  font-size: 12px;
+}
+.page-heading { margin-bottom: 22px; }
+.page-heading h1 { margin: 4px 0 8px; font-size: clamp(32px, 5vw, 58px); line-height: 0.98; letter-spacing: 0; }
+.page-heading p { max-width: 780px; margin: 0; }
+.eyebrow { color: var(--accent); font-size: 12px; font-weight: 800; text-transform: uppercase; letter-spacing: 0.12em; }
+.hero-grid { display: grid; grid-template-columns: 1.2fr 0.9fr 0.9fr; gap: 14px; margin-bottom: 16px; }
+.hero-card, .card, .results-panel {
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  background: rgba(17, 24, 39, 0.9);
+}
+.hero-card { min-height: 188px; padding: 18px; }
+.hero-card.primary { background: linear-gradient(135deg, rgba(56, 189, 248, 0.18), rgba(17, 24, 39, 0.95)); }
+.hero-card span, .card span, .ops-strip span { color: var(--accent); font-size: 12px; font-weight: 800; text-transform: uppercase; }
+.hero-card strong { display: block; margin-top: 10px; font-size: 34px; line-height: 1; }
+.ops-strip, .setup-grid { display: grid; grid-template-columns: repeat(4, minmax(0, 1fr)); gap: 12px; margin-bottom: 18px; }
+.setup-grid { grid-template-columns: repeat(3, minmax(0, 1fr)); margin-top: 18px; }
+.ops-strip article, .setup-grid article { padding: 14px; border: 1px solid var(--line); border-radius: 8px; background: rgba(13, 20, 32, 0.88); }
+.ops-strip strong, .setup-grid strong { display: block; margin: 7px 0; font-size: 14px; }
+.grid { display: grid; grid-template-columns: repeat(3, minmax(0, 1fr)); gap: 14px; }
+.card { min-height: 138px; padding: 16px; }
+.card h3 { margin: 7px 0 8px; font-size: 15px; }
+.adapter { margin-top: 18px; display: grid; grid-template-columns: repeat(4, minmax(0, 1fr)); gap: 12px; }
+.adapter .card { min-height: auto; }
+.results-panel { margin-top: 18px; padding: 18px; display: grid; grid-template-columns: 1fr 1fr; gap: 18px; }
+.results-panel h2 { margin: 0 0 8px; }
+.results-metrics { display: grid; grid-template-columns: repeat(3, minmax(0, 1fr)); gap: 10px; }
+.results-metrics span { display: block; color: var(--muted); font-size: 12px; }
+.quick-actions { position: fixed; right: 20px; bottom: 20px; display: grid; gap: 8px; width: 190px; }
+.quick-actions button {
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  padding: 10px 12px;
+  background: #0d1420;
+  color: var(--ink);
+  text-align: left;
+  font: inherit;
+}
+
+@media (max-width: 1020px) {
+  .shell { grid-template-columns: 1fr; }
+  .sidebar { position: static; height: auto; }
+  .hero-grid, .grid, .adapter, .ops-strip, .setup-grid, .results-panel, .results-metrics { grid-template-columns: 1fr; }
+  .quick-actions { position: static; width: auto; margin: 20px 30px; }
+}
+
+@media (max-width: 720px) {
+  .main { padding: 20px; }
+  .utility-bar { display: block; }
+  .utility-actions { margin-top: 10px; }
+}

package/assets/worker-kits/growthub-agency-portal-starter-v1/studio/src/main.jsx

@@ -0,0 +1,10 @@
+import React from "react";
+import { createRoot } from "react-dom/client";
+import App from "./App.jsx";
+import "./app.css";
+
+createRoot(document.getElementById("root")).render(
+  <React.StrictMode>
+    <App />
+  </React.StrictMode>
+);

package/assets/worker-kits/growthub-agency-portal-starter-v1/studio/vite.config.js

@@ -0,0 +1,8 @@
+import { defineConfig } from "vite";
+import react from "@vitejs/plugin-react";
+
+export default defineConfig({
+  plugins: [react()],
+  server: { port: 5180 },
+  build: { outDir: "dist", emptyOutDir: true },
+});

package/assets/worker-kits/growthub-agency-portal-starter-v1/templates/agent-contract.md

@@ -0,0 +1,9 @@
+# Agent Contract — Template
+
+Used when layering a custom agent on top of this workspace. Keep this narrow — the Self-Healing Fork Sync Agent enforces the broader contract; this template is for workspace-specific rules.
+
+- Agent ID:
+- Scope (which files it may read / write):
+- Tools it may invoke:
+- Escalation policy (when to pause for user confirmation):
+- Trace requirements (which events must be appended):

package/assets/worker-kits/growthub-agency-portal-starter-v1/templates/client-onboarding-plan.md

@@ -0,0 +1,56 @@
+# Client Onboarding Plan
+
+Client:
+Portal project:
+Primary operator:
+
+## Step 1 — Fork And Validate
+
+```bash
+growthub kit download growthub-agency-portal-starter-v1 --out ./agency-portal-workspace --yes
+growthub kit fork register ./agency-portal-workspace/growthub-agent-worker-kit-agency-portal-starter-v1
+growthub kit fork status <fork-id>
+```
+
+## Step 2 — Local Setup
+
+```bash
+bash setup/check-deps.sh
+node setup/verify-env.mjs
+cd studio && npm install && npm run build
+cd ../apps/agency-portal && npm install && npm run build
+```
+
+## Step 3 — Integration Authority
+
+Choose one:
+
+- `growthub-bridge`: use hosted Growthub GH app MCP connections.
+- `byo-api-key`: configure `AGENCY_PORTAL_BYO_CONNECTIONS_JSON` and named provider env vars.
+- `static`: use starter catalog only for local planning.
+
+## Step 4 — Data Pipeline Objects
+
+- Windsor AI:
+- Google Sheets blended data:
+- Google Analytics:
+- Shopify:
+- Meta Facebook/Instagram:
+
+## Step 5 — MCP Connection Integrations
+
+- Asana:
+- Slack:
+- GoHighLevel:
+- Google Drive:
+- Notion:
+
+## Step 6 — Vercel + GitHub
+
+- GitHub repo:
+- Vercel project:
+- Root directory: `apps/agency-portal`
+- Build command: `npm run build`
+- Required env copied:
+- Preview URL:
+- Production URL:

package/assets/worker-kits/growthub-agency-portal-starter-v1/templates/deployment-handoff.md

@@ -0,0 +1,61 @@
+# Deployment Handoff
+
+Client:
+Project:
+Fork id:
+GitHub repo:
+Vercel project:
+
+## Validated Commands
+
+```bash
+node setup/verify-env.mjs
+cd studio && npm run build
+cd apps/agency-portal && npm run build
+growthub kit fork status <fork-id>
+```
+
+## Vercel Settings
+
+- Root directory: `apps/agency-portal`
+- Install command: `npm install`
+- Build command: `npm run build`
+- Framework preset: Next.js
+
+## Environment
+
+```text
+AGENCY_PORTAL_DEPLOY_TARGET=vercel
+AGENCY_PORTAL_DATA_ADAPTER=
+AGENCY_PORTAL_AUTH_ADAPTER=
+AGENCY_PORTAL_PAYMENT_ADAPTER=
+AGENCY_PORTAL_REPORTING_ADAPTER=
+AGENCY_PORTAL_INTEGRATION_ADAPTER=
+```
+
+Growthub bridge env, if used:
+
+```text
+GROWTHUB_BRIDGE_BASE_URL=
+GROWTHUB_BRIDGE_INTEGRATIONS_PATH=/api/mcp/accounts
+GROWTHUB_BRIDGE_ACCESS_TOKEN=<set in Vercel only>
+GROWTHUB_BRIDGE_USER_ID=<set when the selected bridge endpoint requires explicit user scoping>
+```
+
+BYO env, if used:
+
+```text
+AGENCY_PORTAL_BYO_CONNECTIONS_JSON=<set in Vercel only>
+WINDSOR_API_KEY=<set in Vercel only when BYO Windsor is used>
+```
+
+## Integration Validation
+
+- `/settings/integrations` loaded:
+- Data pipeline objects connected:
+- MCP connection integrations connected:
+- Active badges match Growthub bridge or BYO metadata:
+
+## Handoff Notes
+
+Record any remaining manual steps, provider-side OAuth actions, or client account permissions.

package/assets/worker-kits/growthub-agency-portal-starter-v1/templates/deployment-plan.md

@@ -0,0 +1,22 @@
+# Deployment Plan — Template
+
+A deployment plan is the final artifact of a workspace run. It must be:
+
+1. Human-reviewable (Markdown prose).
+2. Machine-executable (the JSON plan block below must be shape-compatible with the bundle descriptor).
+
+## Human summary
+
+Describe the plan in 3–5 sentences.
+
+## Machine plan
+
+```json
+{
+  "kit": "growthub-agency-portal-starter-v1",
+  "forkId": "<filled at runtime>",
+  "actions": [
+    { "type": "deploy", "target": "<env>" }
+  ]
+}
+```

package/assets/worker-kits/growthub-agency-portal-starter-v1/templates/portal-brief.md

@@ -0,0 +1,65 @@
+# Portal Brief
+
+Client:
+Project slug:
+Owner:
+Date:
+
+## Desired Outcome
+
+Describe the agency portal outcome in plain language.
+
+## Runtime Surfaces
+
+- Local-first operator shell: `studio/`
+- Vercel app payload: `apps/agency-portal/`
+- Vercel root directory: `apps/agency-portal`
+
+## Adapter Decisions
+
+- `AGENCY_PORTAL_DATA_ADAPTER`:
+- `AGENCY_PORTAL_AUTH_ADAPTER`:
+- `AGENCY_PORTAL_PAYMENT_ADAPTER`:
+- `AGENCY_PORTAL_REPORTING_ADAPTER`:
+- `AGENCY_PORTAL_INTEGRATION_ADAPTER`:
+
+## Data Pipeline Objects
+
+Mark each as `connected`, `available`, or `not used`.
+
+- Windsor AI:
+- Google Sheets blended data:
+- Google Analytics:
+- Shopify:
+- Meta Facebook/Instagram:
+
+## MCP Connection Integrations
+
+Mark each as `connected`, `available`, or `not used`.
+
+- Asana:
+- Slack:
+- GoHighLevel:
+- Google Drive:
+- Notion:
+
+## Growthub Bridge Or BYO Setup
+
+Bridge fields:
+
+- `GROWTHUB_BRIDGE_BASE_URL`:
+- `GROWTHUB_BRIDGE_INTEGRATIONS_PATH`:
+- `GROWTHUB_BRIDGE_ACCESS_TOKEN`: set in env, never written here
+
+BYO fields:
+
+- `AGENCY_PORTAL_BYO_CONNECTIONS_JSON`: set in env, never write raw secrets here
+- Named provider env vars:
+
+## Acceptance Criteria
+
+- Local Vite shell builds.
+- Next/Vercel app builds.
+- `/settings/integrations` renders a dedicated sidebar page.
+- Active bridge/BYO connection rows show as connected.
+- Deployment handoff is complete.

package/assets/worker-kits/growthub-agency-portal-starter-v1/templates/project.md

@@ -0,0 +1,55 @@
+---
+# .growthub-fork/project.md — session memory primitive (v1)
+#
+# This file is written by `growthub starter init` / `import-repo` / `import-skill`
+# (and by `growthub skills session init` inside an existing fork). It is the
+# human-readable continuity surface across agent sessions — it sits alongside
+# the machine-readable `trace.jsonl` without duplicating it.
+#
+# Rules:
+#   - Append-only. Never delete a dated entry; cross it out instead.
+#   - Every material change to the fork gets a paragraph here AND a typed event
+#     in `.growthub-fork/trace.jsonl`. The two are kept in sync.
+#   - Approvals, rejections, and self-eval outcomes all land here.
+#
+# Replaceable tokens (seeded at init time):
+#   {{KIT_ID}}    {{FORK_ID}}    {{STARTED_AT}}    {{SOURCE}}    {{SOURCE_REF}}
+
+kitId: "{{KIT_ID}}"
+forkId: "{{FORK_ID}}"
+startedAt: "{{STARTED_AT}}"
+source: "{{SOURCE}}"
+sourceRef: "{{SOURCE_REF}}"
+skillManifestVersion: 1
+approvals: []
+selfEvalHistory: []
+subSkillRuns: []
+---
+
+# Project journal — fork `{{FORK_ID}}`
+
+Baseline primitive: `{{KIT_ID}}`. Seeded at `{{STARTED_AT}}` from `{{SOURCE}}` (`{{SOURCE_REF}}`).
+
+This is your cross-session continuity surface. Return here at the start of every session; append to it at the end of every session and at every self-eval boundary.
+
+## How to use this file
+
+1. **Session start.** Read the last 3 entries in the "Session log" below + tail 20 events in `.growthub-fork/trace.jsonl`. State what you plan to do.
+2. **Material change.** Record the change as a dated bullet in "Session log" (what, why, outcome). Simultaneously append a typed event to `trace.jsonl` via the Fork Sync Agent — never bypass.
+3. **Approval boundary.** Add a row to `approvals` in the frontmatter above (include the operator's decision verbatim).
+4. **Self-eval boundary.** Append to `selfEvalHistory` in the frontmatter: `attempt`, `criteria`, `outcome`, `notes`. Enforce `maxRetries: 3` from the active skill's frontmatter.
+5. **Sub-skill spawn.** Append to `subSkillRuns` in the frontmatter: `subSkill`, `startedAt`, `result`.
+
+## Session log
+
+<!-- Append entries below, newest at the bottom. Format:
+
+### {{YYYY-MM-DD HH:mm UTC}} · {{skill-slug}}
+- **Plan.** What you intend to do this session.
+- **Changes.** What you actually did (material changes only; each must correspond to a trace event).
+- **Outcome.** Pass / fail / parked. Reference the self-eval criteria you checked.
+- **Next.** What the next session should pick up.
+
+-->
+
+_No sessions recorded yet. This block is populated as the fork is operated._