@growthub/cli 0.8.0 → 0.8.1

package/assets/worker-kits/growthub-agency-portal-starter-v1/templates/self-eval.md

@@ -0,0 +1,67 @@
+# Self-evaluation template — v1 primitive (Growthub, capability-agnostic)
+
+A skill's `selfEval` contract declares **what good looks like** (`criteria[]`) and **the retry ceiling** (`maxRetries`). The agent drives the loop; this file is the pattern the agent follows at every unit of work.
+
+The contract is defined in `@growthub/api-contract/skills::SkillSelfEval` and is **capability-agnostic** — the same primitive applies to code edits, copy drafts, CRM rules, API payloads, asset renders, audit passes, and every other domain. The "unit of work" is the smallest reversible change the skill operates on; concrete boundaries are defined in the kit's own `skills.md` operator runbook, not here.
+
+## Loop
+
+```
+for attempt in 1..maxRetries:          # default maxRetries = 3
+  generate       — produce a proposal (whatever the skill produces)
+  apply          — materialise the proposal against the fork
+  self-evaluate  — for each criterion in skill.selfEval.criteria:
+                     check → pass / fail / needs-confirmation
+  record         — append to project.md (human) + trace.jsonl (machine)
+
+  if all criteria pass: break
+  if attempt == maxRetries: park with needs_confirmation note. Stop.
+```
+
+## What each attempt writes
+
+### Human row — append to `.growthub-fork/project.md` "Session log"
+
+```md
+### 2026-04-23 18:40 UTC · <skill-slug>
+- **Plan.** What you intend to do this unit of work.
+- **Changes.** Material change applied (must correspond to a trace event).
+- **Self-eval.** attempt 2/3 — criterion "<one of skill.selfEval.criteria>" ✗ (<note>). Retrying.
+- **Outcome.** retry-pending / pass / parked.
+- **Next.** What the next attempt (or next session) should pick up.
+```
+
+### Machine row — append to `.growthub-fork/trace.jsonl` (via `appendKitForkTraceEvent`)
+
+```json
+{
+  "ts": "2026-04-23T18:40:00.000Z",
+  "forkId": "<fork-id>",
+  "kitId": "<kit-id>",
+  "type": "self_eval_recorded",
+  "summary": "attempt 2/3 failed on <criterion>",
+  "detail": {
+    "skill": "<skill-slug>",
+    "attempt": 2,
+    "maxRetries": 3,
+    "criterion": "<one of skill.selfEval.criteria>",
+    "outcome": "fail",
+    "notes": "<short explanation>"
+  }
+}
+```
+
+## Hard rules
+
+1. **Never exceed `maxRetries`.** At the ceiling, park with a `needs_confirmation` note and stop. Do not loop forever.
+2. **Record every attempt.** Even the first pass. Continuity depends on a complete journal.
+3. **Keep `project.md` and `trace.jsonl` in sync.** One without the other is a protocol violation.
+4. **Preserve prior entries.** Append-only. Never rewrite history.
+
+## Bound the blast radius
+
+Evaluate at the smallest unit of work the skill operates on, not only at the end of a multi-step run. The retry ceiling applies to that unit — so a bad attempt does not sink the whole job.
+
+What counts as a "unit of work" is **kit-specific** and lives in that kit's `skills.md` operator runbook — not in this agnostic template. A kit picks its own smallest reversible boundary and documents it in `skills.md`; this template does not prescribe one.
+
+The agnostic SDK (`@growthub/api-contract/skills::SkillSelfEval`) does not encode any domain-specific boundaries — it only carries `criteria[]`, `maxRetries`, and `traceTo`. See `SKILL.md::selfEval.criteria` in this kit for the concrete checks, and `skills.md` for the kit-specific unit of work.

package/assets/worker-kits/growthub-agency-portal-starter-v1/templates/supabase-setup-plan.md

@@ -0,0 +1,26 @@
+# Database Provider Setup Plan
+
+This file name is retained for compatibility with older agency portal notes. The v1 worker-kit contract is not Supabase-specific.
+
+Use `AGENCY_PORTAL_DATA_ADAPTER` to select persistence:
+
+- `postgres` with `DATABASE_URL`
+- `qstash-kv` with `QSTASH_KV_REST_URL` and `QSTASH_KV_REST_TOKEN`
+- `provider-managed` for a hosted database surface outside this kit
+
+Supabase may be used only as one Postgres-compatible provider behind `DATABASE_URL`. Do not add Supabase SDK dependencies or Supabase-only assumptions to the starter unless a user explicitly chooses that provider in their own fork.
+
+## Selected Provider
+
+- Adapter:
+- Provider:
+- Required env:
+- Migration owner:
+- Backup owner:
+
+## Validation
+
+```bash
+node setup/verify-env.mjs
+cd apps/agency-portal && npm run build
+```

package/assets/worker-kits/growthub-agency-portal-starter-v1/templates/workspace-brief.md

@@ -0,0 +1,11 @@
+# Workspace Brief — Template
+
+Use this template to capture what a new custom workspace is for.
+
+- Client:
+- Project slug:
+- Goals (3 bullets max):
+- Surface area (which worker kits this workspace composes):
+- Out of scope:
+- Success criteria:
+- First heal checkpoint:

package/assets/worker-kits/growthub-agency-portal-starter-v1/validation-checklist.md

@@ -0,0 +1,32 @@
+# Agency Portal Starter — Validation Checklist
+
+- [ ] `kit.json` is schema-v2 valid and identifies `growthub-agency-portal-starter-v1`.
+- [ ] Every path in `kit.json.frozenAssetPaths` exists.
+- [ ] `SKILL.md`, `templates/project.md`, `templates/self-eval.md`, `helpers/README.md`, and `skills/README.md` are present.
+- [ ] `studio/` builds with `npm run build`.
+- [ ] `apps/agency-portal/` builds with `npm run build`.
+- [ ] `node setup/verify-env.mjs` validates the selected adapters.
+- [ ] Vercel root is `apps/agency-portal`.
+- [ ] Persistence adapter is documented as `postgres`, `qstash-kv`, or `provider-managed`.
+- [ ] Auth and payment adapters are documented without provider lock-in.
+- [ ] Integration adapter is documented as `static`, `growthub-bridge`, or `byo-api-key`.
+- [ ] `/settings/integrations` renders a dedicated sidebar nav page, not home-page integration content.
+- [ ] Data pipeline objects are explicit: Windsor AI, Google Sheets blended data, Google Analytics, Shopify, Meta Facebook/Instagram.
+- [ ] MCP connection integrations are explicit: Asana, Slack, GoHighLevel, Google Drive, Notion.
+- [ ] Growthub bridge mode shows active/connected status when normalized MCP account rows are returned by the bridge.
+- [ ] `growthub-connection-normalizer.js` accepts both SDK/profile-style `integrations[]` and GH app MCP `accounts[]` payloads.
+- [ ] Unknown active MCP providers are preserved as discovered workspace integrations instead of being dropped.
+- [ ] BYO API key mode works from `AGENCY_PORTAL_BYO_CONNECTIONS_JSON` using the same object shape.
+- [ ] Windsor BYO mode works with `WINDSOR_API_KEY` alone and renders Windsor AI as connected.
+- [ ] Windsor API key path is supported as `WINDSOR_API_KEY` and represented as a first-class data pipeline object.
+- [ ] CLI discovery/list/export path succeeds:
+  ```bash
+  growthub kit list --family studio --json
+  growthub kit download growthub-agency-portal-starter-v1 --out /tmp/agency-portal-qa --yes
+  ```
+- [ ] Fork registration/status path succeeds on an exported workspace:
+  ```bash
+  growthub kit fork register /tmp/agency-portal-qa/growthub-agent-worker-kit-agency-portal-starter-v1
+  growthub kit fork status <fork-id>
+  ```
+- [ ] Governed forks record material changes to `.growthub-fork/project.md` and `.growthub-fork/trace.jsonl`.

package/assets/worker-kits/growthub-agency-portal-starter-v1/workers/agency-portal-operator/CLAUDE.md

@@ -0,0 +1,75 @@
+# Agency Portal Operator — Agent Operating Instructions
+
+**Kit:** `growthub-agency-portal-starter-v1`  
+**Worker ID:** `agency-portal-operator`  
+**Version:** `1.0.0`
+
+## Role
+
+You operate the Agency Portal Starter as a governed workspace built from the custom workspace starter primitive. Keep the Growthub local-first Vite shell in `studio/`; operate the deployable Vercel/serverless portal under `apps/agency-portal/`.
+
+## Source Of Truth
+
+1. `.growthub-fork/project.md`
+2. `SKILL.md`
+3. `skills.md`
+4. `docs/governed-workspace-primitives.md`
+5. `docs/adapter-contracts.md`
+6. `docs/vercel-serverless-deployment.md`
+7. `docs/vite-ui-shell-guide.md`
+8. `validation-checklist.md`
+
+## Hard Rules
+
+- Do not collapse the kit into the Vercel app. The kit root is the governed workspace; `studio/` is the local-first Vite operator shell; `apps/agency-portal/` is the serverless app payload.
+- Do not hardcode one database provider into the worker-kit contract. Persistence is selected by adapter env: `postgres`, `qstash-kv`, or `provider-managed`.
+- Do not hardcode payments. Payments are selected by `AGENCY_PORTAL_PAYMENT_ADAPTER`.
+- Do not move third-party provider tokens into source. Growthub bridge mode consumes hosted GH app connection state; BYO mode references env names and normalized metadata only.
+- Do not place integration lists on the home dashboard. Use the dedicated sidebar route `/settings/integrations`.
+- Do not collapse data pipelines and operational integrations into one opaque bucket. Data pipeline objects and MCP connection integrations stay distinct under the unified integrations page.
+- Do not treat cloud deployment as the local runtime. Local Growthub operation stays first; Vercel is the clean serverless deployment lane.
+- Every material change in a governed fork records to `.growthub-fork/project.md` and `.growthub-fork/trace.jsonl`.
+
+## Integration Model
+
+Model the GH app primitive without importing the GH app runtime:
+
+- Catalog metadata: `id`, `provider`, `name`, `description`, `category`, `authType`.
+- User connection state: `isConnected`, `isActive`, `connectionId`, `connectionMetadata`.
+- Worker-kit lane: `lane`, `objectType`, `authPath`, `setupMode`.
+
+Data pipeline objects:
+
+- Windsor AI
+- Google Sheets blended data
+- Google Analytics
+- Shopify
+- Meta Facebook/Instagram
+
+MCP connection integrations:
+
+- Asana
+- Slack
+- GoHighLevel
+- Google Drive
+- Notion
+
+`growthub-bridge` means hosted GH app authority resolves active connections. `byo-api-key` means the exported workspace owns explicit setup through env vars and `AGENCY_PORTAL_BYO_CONNECTIONS_JSON`.
+
+## Verification
+
+```bash
+bash setup/check-deps.sh
+node setup/verify-env.mjs
+cd studio && npm install && npm run build
+cd apps/agency-portal && npm install && npm run build
+```
+
+CLI export/fork verification:
+
+```bash
+growthub kit list --family studio --json
+growthub kit download growthub-agency-portal-starter-v1 --out /tmp/agency-portal-qa --yes
+growthub kit fork register /tmp/agency-portal-qa/growthub-agent-worker-kit-agency-portal-starter-v1
+growthub kit fork status <fork-id>
+```

package/dist/index.js

@@ -8519,6 +8519,15 @@ var init_catalog = __esm({
         activationModes: ["export"],
         family: "studio"
       },
+      {
+        id: "growthub-agency-portal-starter-v1",
+        packageDirName: "growthub-agency-portal-starter-v1",
+        defaultBundleId: "growthub-agency-portal-starter-v1",
+        type: "worker",
+        executionMode: "export",
+        activationModes: ["export"],
+        family: "studio"
+      },
       {
         id: "growthub-twenty-crm-v1",
         packageDirName: "growthub-twenty-crm-v1",
@@ -34184,16 +34193,6 @@ async function runDiscoveryHub(opts) {
           label: "\u{1F4D6} Memory & Knowledge",
           hint: "persistent memory, search, multi-provider config, Growthub sync"
         },
-        {
-          value: "skills-catalog",
-          label: "\u{1F4C7} Skills Catalog",
-          hint: "enumerate SKILL.md across this tree + inspect .growthub-fork/project.md"
-        },
-        {
-          value: "hosted-auth",
-          label: "\u{1F510} Connect Growthub Account",
-          hint: "Attach this CLI to the hosted Growthub user through the canonical browser flow"
-        },
         {
           value: "help",
           label: "\u2753 Help CLI",
@@ -34430,6 +34429,11 @@ async function runDiscoveryHub(opts) {
               label: "\u{1F6A2} Fleet Operations",
               hint: "Fleet-level fork view \xB7 drift \xB7 policy matrix \xB7 approvals \xB7 agent-led plans"
             },
+            {
+              value: "skills-catalog",
+              label: "\u{1F4C7} Skills Catalog",
+              hint: "enumerate SKILL.md across this tree + inspect .growthub-fork/project.md"
+            },
             {
               value: "__back_to_hub",
               label: "\u2190 Back to main menu"
@@ -34537,6 +34541,25 @@ async function runDiscoveryHub(opts) {
           await fleetView({});
           continue;
         }
+        if (surfaceChoice2 === "skills-catalog") {
+          const { readSkillCatalog: readSkillCatalog2 } = await Promise.resolve().then(() => (init_catalog2(), catalog_exports));
+          const catalog = readSkillCatalog2({ root: process.cwd() });
+          p34.note(
+            [
+              `Root: ${pc49.cyan(catalog.catalog.root ?? process.cwd())}`,
+              `Skills discovered: ${pc49.bold(String(catalog.entries.length))}`,
+              catalog.warnings.length > 0 ? `Warnings: ${pc49.yellow(String(catalog.warnings.length))}` : `Warnings: 0`,
+              "",
+              "Invoke directly:",
+              "  growthub skills list --json",
+              "  growthub skills validate",
+              "  growthub skills session show",
+              "  growthub skills session init --kit <kit-id>"
+            ].join("\n"),
+            "Skills Catalog"
+          );
+          continue;
+        }
       }
       continue;
     }
@@ -34560,29 +34583,6 @@ async function runDiscoveryHub(opts) {
       if (result2 === "back") continue;
       return;
     }
-    if (surfaceChoice === "skills-catalog") {
-      const { readSkillCatalog: readSkillCatalog2 } = await Promise.resolve().then(() => (init_catalog2(), catalog_exports));
-      const catalog = readSkillCatalog2({ root: process.cwd() });
-      p34.note(
-        [
-          `Root: ${pc49.cyan(catalog.catalog.root ?? process.cwd())}`,
-          `Skills discovered: ${pc49.bold(String(catalog.entries.length))}`,
-          catalog.warnings.length > 0 ? `Warnings: ${pc49.yellow(String(catalog.warnings.length))}` : `Warnings: 0`,
-          "",
-          "Invoke directly:",
-          "  growthub skills list --json",
-          "  growthub skills validate",
-          "  growthub skills session show",
-          "  growthub skills session init --kit <kit-id>"
-        ].join("\n"),
-        "Skills Catalog"
-      );
-      continue;
-    }
-    if (surfaceChoice === "hosted-auth") {
-      await runHostedBridgeEntry({ config: opts?.config, dataDir: opts?.dataDir });
-      continue;
-    }
     const result = await runTemplatePicker({ allowBackToHub: true });
     if (result === "back") continue;
     return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@growthub/cli",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "Growthub Local is a control plane for forked worker kits. The CLI is the executor, the hosted app is the identity authority, the worker kit is the unit of portable agent infrastructure, and the fork is the operator's personal branch of that infrastructure — policy-governed, trace-backed, and self-healing.",
   "type": "module",
   "bin": {