@growthub/cli 0.8.0 → 0.8.2

package/assets/worker-kits/growthub-agency-portal-starter-v1/templates/self-eval.md

@@ -0,0 +1,67 @@
+# Self-evaluation template — v1 primitive (Growthub, capability-agnostic)
+
+A skill's `selfEval` contract declares **what good looks like** (`criteria[]`) and **the retry ceiling** (`maxRetries`). The agent drives the loop; this file is the pattern the agent follows at every unit of work.
+
+The contract is defined in `@growthub/api-contract/skills::SkillSelfEval` and is **capability-agnostic** — the same primitive applies to code edits, copy drafts, CRM rules, API payloads, asset renders, audit passes, and every other domain. The "unit of work" is the smallest reversible change the skill operates on; concrete boundaries are defined in the kit's own `skills.md` operator runbook, not here.
+
+## Loop
+
+```
+for attempt in 1..maxRetries:          # default maxRetries = 3
+  generate       — produce a proposal (whatever the skill produces)
+  apply          — materialise the proposal against the fork
+  self-evaluate  — for each criterion in skill.selfEval.criteria:
+                     check → pass / fail / needs-confirmation
+  record         — append to project.md (human) + trace.jsonl (machine)
+
+  if all criteria pass: break
+  if attempt == maxRetries: park with needs_confirmation note. Stop.
+```
+
+## What each attempt writes
+
+### Human row — append to `.growthub-fork/project.md` "Session log"
+
+```md
+### 2026-04-23 18:40 UTC · <skill-slug>
+- **Plan.** What you intend to do this unit of work.
+- **Changes.** Material change applied (must correspond to a trace event).
+- **Self-eval.** attempt 2/3 — criterion "<one of skill.selfEval.criteria>" ✗ (<note>). Retrying.
+- **Outcome.** retry-pending / pass / parked.
+- **Next.** What the next attempt (or next session) should pick up.
+```
+
+### Machine row — append to `.growthub-fork/trace.jsonl` (via `appendKitForkTraceEvent`)
+
+```json
+{
+  "ts": "2026-04-23T18:40:00.000Z",
+  "forkId": "<fork-id>",
+  "kitId": "<kit-id>",
+  "type": "self_eval_recorded",
+  "summary": "attempt 2/3 failed on <criterion>",
+  "detail": {
+    "skill": "<skill-slug>",
+    "attempt": 2,
+    "maxRetries": 3,
+    "criterion": "<one of skill.selfEval.criteria>",
+    "outcome": "fail",
+    "notes": "<short explanation>"
+  }
+}
+```
+
+## Hard rules
+
+1. **Never exceed `maxRetries`.** At the ceiling, park with a `needs_confirmation` note and stop. Do not loop forever.
+2. **Record every attempt.** Even the first pass. Continuity depends on a complete journal.
+3. **Keep `project.md` and `trace.jsonl` in sync.** One without the other is a protocol violation.
+4. **Preserve prior entries.** Append-only. Never rewrite history.
+
+## Bound the blast radius
+
+Evaluate at the smallest unit of work the skill operates on, not only at the end of a multi-step run. The retry ceiling applies to that unit — so a bad attempt does not sink the whole job.
+
+What counts as a "unit of work" is **kit-specific** and lives in that kit's `skills.md` operator runbook — not in this agnostic template. A kit picks its own smallest reversible boundary and documents it in `skills.md`; this template does not prescribe one.
+
+The agnostic SDK (`@growthub/api-contract/skills::SkillSelfEval`) does not encode any domain-specific boundaries — it only carries `criteria[]`, `maxRetries`, and `traceTo`. See `SKILL.md::selfEval.criteria` in this kit for the concrete checks, and `skills.md` for the kit-specific unit of work.

package/assets/worker-kits/growthub-agency-portal-starter-v1/templates/supabase-setup-plan.md

@@ -0,0 +1,26 @@
+# Database Provider Setup Plan
+
+This file name is retained for compatibility with older agency portal notes. The v1 worker-kit contract is not Supabase-specific.
+
+Use `AGENCY_PORTAL_DATA_ADAPTER` to select persistence:
+
+- `postgres` with `DATABASE_URL`
+- `qstash-kv` with `QSTASH_KV_REST_URL` and `QSTASH_KV_REST_TOKEN`
+- `provider-managed` for a hosted database surface outside this kit
+
+Supabase may be used only as one Postgres-compatible provider behind `DATABASE_URL`. Do not add Supabase SDK dependencies or Supabase-only assumptions to the starter unless a user explicitly chooses that provider in their own fork.
+
+## Selected Provider
+
+- Adapter:
+- Provider:
+- Required env:
+- Migration owner:
+- Backup owner:
+
+## Validation
+
+```bash
+node setup/verify-env.mjs
+cd apps/agency-portal && npm run build
+```

package/assets/worker-kits/growthub-agency-portal-starter-v1/templates/workspace-brief.md

@@ -0,0 +1,11 @@
+# Workspace Brief — Template
+
+Use this template to capture what a new custom workspace is for.
+
+- Client:
+- Project slug:
+- Goals (3 bullets max):
+- Surface area (which worker kits this workspace composes):
+- Out of scope:
+- Success criteria:
+- First heal checkpoint:

package/assets/worker-kits/growthub-agency-portal-starter-v1/validation-checklist.md

@@ -0,0 +1,32 @@
+# Agency Portal Starter — Validation Checklist
+
+- [ ] `kit.json` is schema-v2 valid and identifies `growthub-agency-portal-starter-v1`.
+- [ ] Every path in `kit.json.frozenAssetPaths` exists.
+- [ ] `SKILL.md`, `templates/project.md`, `templates/self-eval.md`, `helpers/README.md`, and `skills/README.md` are present.
+- [ ] `studio/` builds with `npm run build`.
+- [ ] `apps/agency-portal/` builds with `npm run build`.
+- [ ] `node setup/verify-env.mjs` validates the selected adapters.
+- [ ] Vercel root is `apps/agency-portal`.
+- [ ] Persistence adapter is documented as `postgres`, `qstash-kv`, or `provider-managed`.
+- [ ] Auth and payment adapters are documented without provider lock-in.
+- [ ] Integration adapter is documented as `static`, `growthub-bridge`, or `byo-api-key`.
+- [ ] `/settings/integrations` renders a dedicated sidebar nav page, not home-page integration content.
+- [ ] Data pipeline objects are explicit: Windsor AI, Google Sheets blended data, Google Analytics, Shopify, Meta Facebook/Instagram.
+- [ ] MCP connection integrations are explicit: Asana, Slack, GoHighLevel, Google Drive, Notion.
+- [ ] Growthub bridge mode shows active/connected status when normalized MCP account rows are returned by the bridge.
+- [ ] `growthub-connection-normalizer.js` accepts both SDK/profile-style `integrations[]` and GH app MCP `accounts[]` payloads.
+- [ ] Unknown active MCP providers are preserved as discovered workspace integrations instead of being dropped.
+- [ ] BYO API key mode works from `AGENCY_PORTAL_BYO_CONNECTIONS_JSON` using the same object shape.
+- [ ] Windsor BYO mode works with `WINDSOR_API_KEY` alone and renders Windsor AI as connected.
+- [ ] Windsor API key path is supported as `WINDSOR_API_KEY` and represented as a first-class data pipeline object.
+- [ ] CLI discovery/list/export path succeeds:
+  ```bash
+  growthub kit list --family studio --json
+  growthub kit download growthub-agency-portal-starter-v1 --out /tmp/agency-portal-qa --yes
+  ```
+- [ ] Fork registration/status path succeeds on an exported workspace:
+  ```bash
+  growthub kit fork register /tmp/agency-portal-qa/growthub-agent-worker-kit-agency-portal-starter-v1
+  growthub kit fork status <fork-id>
+  ```
+- [ ] Governed forks record material changes to `.growthub-fork/project.md` and `.growthub-fork/trace.jsonl`.

package/assets/worker-kits/growthub-agency-portal-starter-v1/workers/agency-portal-operator/CLAUDE.md

@@ -0,0 +1,75 @@
+# Agency Portal Operator — Agent Operating Instructions
+
+**Kit:** `growthub-agency-portal-starter-v1`  
+**Worker ID:** `agency-portal-operator`  
+**Version:** `1.0.0`
+
+## Role
+
+You operate the Agency Portal Starter as a governed workspace built from the custom workspace starter primitive. Keep the Growthub local-first Vite shell in `studio/`; operate the deployable Vercel/serverless portal under `apps/agency-portal/`.
+
+## Source Of Truth
+
+1. `.growthub-fork/project.md`
+2. `SKILL.md`
+3. `skills.md`
+4. `docs/governed-workspace-primitives.md`
+5. `docs/adapter-contracts.md`
+6. `docs/vercel-serverless-deployment.md`
+7. `docs/vite-ui-shell-guide.md`
+8. `validation-checklist.md`
+
+## Hard Rules
+
+- Do not collapse the kit into the Vercel app. The kit root is the governed workspace; `studio/` is the local-first Vite operator shell; `apps/agency-portal/` is the serverless app payload.
+- Do not hardcode one database provider into the worker-kit contract. Persistence is selected by adapter env: `postgres`, `qstash-kv`, or `provider-managed`.
+- Do not hardcode payments. Payments are selected by `AGENCY_PORTAL_PAYMENT_ADAPTER`.
+- Do not move third-party provider tokens into source. Growthub bridge mode consumes hosted GH app connection state; BYO mode references env names and normalized metadata only.
+- Do not place integration lists on the home dashboard. Use the dedicated sidebar route `/settings/integrations`.
+- Do not collapse data pipelines and operational integrations into one opaque bucket. Data pipeline objects and MCP connection integrations stay distinct under the unified integrations page.
+- Do not treat cloud deployment as the local runtime. Local Growthub operation stays first; Vercel is the clean serverless deployment lane.
+- Every material change in a governed fork records to `.growthub-fork/project.md` and `.growthub-fork/trace.jsonl`.
+
+## Integration Model
+
+Model the GH app primitive without importing the GH app runtime:
+
+- Catalog metadata: `id`, `provider`, `name`, `description`, `category`, `authType`.
+- User connection state: `isConnected`, `isActive`, `connectionId`, `connectionMetadata`.
+- Worker-kit lane: `lane`, `objectType`, `authPath`, `setupMode`.
+
+Data pipeline objects:
+
+- Windsor AI
+- Google Sheets blended data
+- Google Analytics
+- Shopify
+- Meta Facebook/Instagram
+
+MCP connection integrations:
+
+- Asana
+- Slack
+- GoHighLevel
+- Google Drive
+- Notion
+
+`growthub-bridge` means hosted GH app authority resolves active connections. `byo-api-key` means the exported workspace owns explicit setup through env vars and `AGENCY_PORTAL_BYO_CONNECTIONS_JSON`.
+
+## Verification
+
+```bash
+bash setup/check-deps.sh
+node setup/verify-env.mjs
+cd studio && npm install && npm run build
+cd apps/agency-portal && npm install && npm run build
+```
+
+CLI export/fork verification:
+
+```bash
+growthub kit list --family studio --json
+growthub kit download growthub-agency-portal-starter-v1 --out /tmp/agency-portal-qa --yes
+growthub kit fork register /tmp/agency-portal-qa/growthub-agent-worker-kit-agency-portal-starter-v1
+growthub kit fork status <fork-id>
+```

package/assets/worker-kits/growthub-creative-video-pipeline-v1/.env.example

@@ -0,0 +1,28 @@
+# Growthub Creative Video Pipeline — governed workspace env template
+#
+# Keep real provider secrets in your local .env.local or deployment provider.
+
+# Local workspace placement
+CREATIVE_VIDEO_PIPELINE_HOME=
+CREATIVE_STRATEGIST_HOME=
+VIDEO_USE_HOME=
+
+# Local studio shell
+CREATIVE_VIDEO_PIPELINE_STUDIO_PORT=5180
+
+# Stage 2 adapter
+# Supported values: growthub-pipeline, byo-api-key
+CREATIVE_VIDEO_PIPELINE_GENERATIVE_ADAPTER=growthub-pipeline
+GROWTHUB_BRIDGE_BASE_URL=
+GROWTHUB_BRIDGE_ACCESS_TOKEN=
+
+# BYOK adapter values, only used when CREATIVE_VIDEO_PIPELINE_GENERATIVE_ADAPTER=byo-api-key
+# Supported values: veo, fal, runway
+VIDEO_MODEL_PROVIDER=
+GOOGLE_AI_API_KEY=
+FAL_KEY=
+RUNWAY_API_KEY=
+
+# Stage 3 video-use fork
+ELEVENLABS_API_KEY=
+

package/assets/worker-kits/growthub-creative-video-pipeline-v1/QUICKSTART.md

@@ -0,0 +1,118 @@
+# Creative Video Pipeline — Quickstart
+
+This kit is a governed Growthub workspace with three runtime surfaces:
+
+- `studio/` — local-first Vite operator shell.
+- `apps/creative-video-pipeline/` — Vercel-ready pipeline dashboard and API key settings.
+- Three-stage pipeline: Brief → Generate → Edit.
+
+## 0. Discover, export, and register
+
+```bash
+growthub discover
+growthub kit list --family studio
+growthub kit download growthub-creative-video-pipeline-v1 --out ./creative-video-pipeline --yes
+growthub kit fork register ./creative-video-pipeline
+growthub kit fork status <fork-id>
+```
+
+Natural-language prompt for an agent after export:
+
+```text
+Read SKILL.md, skills.md, QUICKSTART.md, docs/adapter-contracts.md, and
+workers/creative-video-pipeline-operator/CLAUDE.md. Run setup checks, verify
+the generative adapter, and confirm the video-use fork path before starting work.
+```
+
+## 1. Verify the governed workspace
+
+```bash
+cp .env.example .env
+bash setup/check-deps.sh
+node setup/verify-env.mjs
+```
+
+Set adapter env in `.env`. Defaults are documented in `.env.example`.
+
+## 2. Clone the video-use fork (Stage 3 dependency)
+
+```bash
+bash setup/clone-fork.sh
+bash setup/install-skill.sh
+```
+
+This clones `browser-use/video-use` into `${VIDEO_USE_HOME:-$HOME/video-use}` and installs it as a Claude Code skill.
+
+## 3. Configure the generative adapter
+
+### Option A — Growthub pipeline (primary, recommended)
+
+```bash
+growthub auth login
+growthub auth whoami
+```
+
+In `.env`:
+```
+CREATIVE_VIDEO_PIPELINE_GENERATIVE_ADAPTER=growthub-pipeline
+GROWTHUB_BRIDGE_ACCESS_TOKEN=<token from growthub auth>
+GROWTHUB_BRIDGE_BASE_URL=<growthub hosted base url>
+ELEVENLABS_API_KEY=<your key>
+```
+
+### Option B — BYOK
+
+In `.env`:
+```
+CREATIVE_VIDEO_PIPELINE_GENERATIVE_ADAPTER=byo-api-key
+VIDEO_MODEL_PROVIDER=veo          # veo | fal | runway
+GOOGLE_AI_API_KEY=<your key>      # if VIDEO_MODEL_PROVIDER=veo
+ELEVENLABS_API_KEY=<your key>
+```
+
+Both options normalize to the same `GenerativeArtifact[]` object shape.
+
+## 4. Run the local Vite shell
+
+```bash
+cd studio
+npm install
+npm run dev
+```
+
+Open `http://localhost:5180`. The shell shows the three-stage pipeline status, output viewer, and settings panel.
+
+## 5. Run the Vercel app locally
+
+```bash
+cd apps/creative-video-pipeline
+npm install
+npm run dev
+```
+
+Open `http://localhost:3000`. Navigate to `/settings/keys` to configure the generative adapter and API keys.
+
+## 6. Run the pipeline
+
+Follow `skills.md` for the complete three-stage runbook:
+
+```
+Stage 1 — Brief      brand-kit.md → scene structure → hooks → pipeline-brief.md
+Stage 2 — Generate   growthub pipeline execute OR BYOK → generative/manifest.json
+Stage 3 — Edit       video-use fork → EDL → FFmpeg → final/final.mp4
+```
+
+## 7. Deploy to Vercel
+
+Use `apps/creative-video-pipeline` as the Vercel project root.
+
+```bash
+cd apps/creative-video-pipeline
+npm run build
+```
+
+Connect to Vercel with root directory `apps/creative-video-pipeline`. Set adapter env per `docs/adapter-contracts.md` and `docs/vercel-deployment.md`.
+
+## 8. Governed operation
+
+Read `SKILL.md`, `skills.md`, and `workers/creative-video-pipeline-operator/CLAUDE.md` before material changes. Record every stage completion to `.growthub-fork/project.md` and `.growthub-fork/trace.jsonl`.

package/assets/worker-kits/growthub-creative-video-pipeline-v1/SKILL.md

@@ -0,0 +1,103 @@
+---
+name: growthub-creative-video-pipeline-v1
+description: "Chainable worker kit that composes a creative brief, generative image/video via the growthub pipeline or BYOK, and video editing via the video-use fork into a single governed pipeline. Use when the user says: \"creative video pipeline\", \"brief to video\", \"generative video pipeline\", \"fork growthub-creative-video-pipeline-v1\"."
+triggers:
+  - creative video pipeline
+  - brief to video
+  - generative video pipeline
+  - video content pipeline
+  - fork growthub-creative-video-pipeline-v1
+progressiveDisclosure: true
+sessionMemory:
+  path: .growthub-fork/project.md
+selfEval:
+  criteria:
+    - Stage 1 brief is grounded in brand-kit.md — scene structure, hooks, and guardrails sourced from file, not memory.
+    - Stage 2 generative execution routes through growthub pipeline execute (primary) or explicit BYOK adapter — no ad-hoc API calls outside the adapter contract.
+    - Stage 3 video edit delegates to VIDEO_USE_HOME fork — edit-plan.md is the handoff artifact, final.mp4 lands at output/<client>/<project>/final/.
+    - .growthub-fork/project.md is appended to at each stage boundary and self-eval outcome.
+    - .growthub-fork/trace.jsonl receives a typed event for each material change.
+  maxRetries: 3
+  traceTo: .growthub-fork/trace.jsonl
+helpers:
+  - path: helpers/run-pipeline.sh
+    description: Auth pre-flight + growthub pipeline execute passthrough
+  - path: helpers/check-generative-adapter.sh
+    description: Print current adapter mode and which provider keys are set
+subSkills:
+  - name: brief-generation
+    path: skills/brief-generation/SKILL.md
+  - name: generative-execution
+    path: skills/generative-execution/SKILL.md
+  - name: video-edit
+    path: skills/video-edit/SKILL.md
+mcpTools: []
+---
+
+# Creative Video Pipeline — Governed Workspace
+
+Discovery entry and routing menu for `growthub-creative-video-pipeline-v1`. Family: `studio`. Agent contract: `workers/creative-video-pipeline-operator/CLAUDE.md`.
+
+## When to use this skill
+
+When the user's intent matches any trigger above, or when an agent is dropped into a fork whose `.growthub-fork/fork.json` declares `kitId: "growthub-creative-video-pipeline-v1"`.
+
+## Decision tree
+
+```
+Fork exists (.growthub-fork/fork.json)?
+├── No  → growthub kit download growthub-creative-video-pipeline-v1 --out <path>
+│         growthub kit fork register <path>
+│
+└── Yes → read in this order:
+          1. .growthub-fork/project.md          — session memory (primitive #3)
+          2. SKILL.md (this file)                — routing menu  (primitive #1)
+          3. skills.md                           — operator runbook
+          4. workers/creative-video-pipeline-operator/CLAUDE.md  — agent contract
+          5. QUICKSTART.md                       — first-run steps
+          6. runtime-assumptions.md              — host requirements
+          7. .growthub-fork/policy.json          — what you may touch
+          8. .growthub-fork/trace.jsonl (tail 20) — recent machine history
+```
+
+## Three-stage pipeline
+
+```
+Stage 1 — Brief          brand-kit.md → hooks → scene structure
+                         output: output/<client>/<project>/brief/pipeline-brief.md
+
+Stage 2 — Generate       growthub pipeline execute (primary)
+                         OR BYOK provider adapter (secondary)
+                         output: output/<client>/<project>/generative/
+
+Stage 3 — Edit           video-use fork (VIDEO_USE_HOME)
+                         ElevenLabs Scribe → EDL → FFmpeg
+                         output: output/<client>/<project>/final/final.mp4
+```
+
+## Activation
+
+Primary: `growthub pipeline execute` with the `video-generation` CMS node (veo-3.1-generate-001).
+Secondary: BYOK path via `CREATIVE_VIDEO_PIPELINE_GENERATIVE_ADAPTER=byo-api-key`.
+
+Both normalize to the same `GenerativeArtifact[]` object. The UI shell renders whichever path produced the artifacts.
+
+## The six primitives (same shape across every Growthub worker kit)
+
+1. **`SKILL.md`** — this file.
+2. **Symlinked pointer** — repo-root `AGENTS.md` is authoritative.
+3. **`.growthub-fork/project.md`** — session memory, seeded at init from `templates/project.md`.
+4. **Self-evaluation** — generate → apply → evaluate → record; retry up to `maxRetries` (3); mirrors the Fork Sync Agent loop.
+5. **`skills/`** — sub-skill lanes: `brief-generation`, `generative-execution`, `video-edit`.
+6. **`helpers/`** — `run-pipeline.sh`, `check-generative-adapter.sh`.
+
+## Related files
+
+- `skills.md` — full 3-stage operator runbook
+- `QUICKSTART.md` — first-run steps
+- `runtime-assumptions.md` — host requirements (FFmpeg, ElevenLabs, CLI, video-use fork)
+- `output-standards.md` — output dir structure
+- `docs/adapter-contracts.md` — generative adapter contracts
+- `docs/pipeline-architecture.md` — chain composition detail
+- `templates/project.md` — session-memory seed
+- `templates/self-eval.md` — self-evaluation pattern

package/assets/worker-kits/growthub-creative-video-pipeline-v1/apps/creative-video-pipeline/.env.example

@@ -0,0 +1,20 @@
+# Creative Video Pipeline app — deployment env template
+
+# Supported values: growthub-pipeline, byo-api-key
+CREATIVE_VIDEO_PIPELINE_GENERATIVE_ADAPTER=growthub-pipeline
+
+# growthub-pipeline adapter
+GROWTHUB_BRIDGE_BASE_URL=
+GROWTHUB_BRIDGE_ACCESS_TOKEN=
+
+# byo-api-key adapter
+# Supported values: veo, fal, runway
+VIDEO_MODEL_PROVIDER=
+GOOGLE_AI_API_KEY=
+FAL_KEY=
+RUNWAY_API_KEY=
+
+# Stage 3 edit pipeline handoff
+VIDEO_USE_HOME=
+ELEVENLABS_API_KEY=
+

package/assets/worker-kits/growthub-creative-video-pipeline-v1/apps/creative-video-pipeline/README.md

@@ -0,0 +1,33 @@
+# creative-video-pipeline — Next.js App
+
+Next.js 16 + React 19 app for the Growthub Creative Video Pipeline worker kit. Vercel-deployable.
+
+## Dev
+
+```bash
+npm install
+npm run dev
+```
+
+## Build
+
+```bash
+npm run build
+npm start
+```
+
+## Deploy
+
+```bash
+vercel --prod
+```
+
+See `docs/vercel-deployment.md` for environment variable configuration.
+
+## Routes
+
+| Route | Purpose |
+|-------|---------|
+| `/` | Pipeline dashboard — stage status, adapter state |
+| `/settings/keys` | API key configuration reference |
+| `/api/pipeline` | GET — returns live adapter config + pipeline stage state |

package/assets/worker-kits/growthub-creative-video-pipeline-v1/apps/creative-video-pipeline/app/api/pipeline/route.js

@@ -0,0 +1,27 @@
+import { NextResponse } from "next/server";
+import { readAdapterConfig } from "@/lib/adapters/env";
+import { describeGenerativeAdapter } from "@/lib/adapters/generative/index";
+import { pipelineStages, stageStatus } from "@/lib/domain/pipeline";
+
+export const dynamic = "force-dynamic";
+
+export function GET() {
+  const config = readAdapterConfig();
+  const generative = describeGenerativeAdapter();
+
+  return NextResponse.json({
+    kit: "growthub-creative-video-pipeline-v1",
+    adapter: generative,
+    config: {
+      generativeAdapter: config.generativeAdapter,
+      videoUseHome: config.videoUseHome,
+      hasElevenLabsKey: config.hasElevenLabsKey,
+      hasBridgeToken: config.hasBridgeToken,
+      videoModelProvider: config.videoModelProvider,
+    },
+    stages: pipelineStages.map((s) => ({
+      ...s,
+      status: stageStatus.PENDING,
+    })),
+  });
+}