@growthub/cli 0.9.3 → 0.9.5

package/assets/worker-kits/growthub-custom-workspace-starter-v1/apps/workspace/package.json

@@ -0,0 +1,17 @@
+{
+  "name": "growthub-workspace-app",
+  "version": "1.0.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "next dev",
+    "build": "next build --webpack",
+    "start": "next start",
+    "lint": "next lint"
+  },
+  "dependencies": {
+    "next": "16.2.4",
+    "react": "19.2.4",
+    "react-dom": "19.2.4"
+  }
+}

package/assets/worker-kits/growthub-custom-workspace-starter-v1/apps/workspace/postcss.config.mjs

@@ -0,0 +1,3 @@
+export default {
+  plugins: {},
+};

package/assets/worker-kits/growthub-custom-workspace-starter-v1/apps/workspace/vercel.json

@@ -0,0 +1,5 @@
+{
+  "framework": "nextjs",
+  "buildCommand": "npm run build",
+  "installCommand": "npm install"
+}

package/assets/worker-kits/growthub-custom-workspace-starter-v1/bundles/growthub-custom-workspace-starter-v1.json

@@ -27,6 +27,7 @@
     "output-standards.md",
     "runtime-assumptions.md",
     "validation-checklist.md",
+    "growthub.config.json",
     "workers/custom-workspace-operator/CLAUDE.md",
     "brands/_template/brand-kit.md",
     "brands/growthub/brand-kit.md",
@@ -45,6 +46,8 @@
     "docs/starter-kit-overview.md",
     "docs/fork-sync-integration.md",
     "docs/vite-ui-shell-guide.md",
+    "docs/adapter-contracts.md",
+    "docs/vercel-serverless-deployment.md",
     "studio/index.html",
     "studio/package.json",
     "studio/vite.config.js",
@@ -52,6 +55,16 @@
     "studio/src/main.jsx",
     "studio/src/App.jsx",
     "studio/src/app.css",
+    "apps/workspace/package.json",
+    "apps/workspace/package-lock.json",
+    "apps/workspace/next.config.js",
+    "apps/workspace/growthub.config.json",
+    "apps/workspace/app/page.jsx",
+    "apps/workspace/app/settings/integrations/page.jsx",
+    "apps/workspace/lib/adapters/env.js",
+    "apps/workspace/lib/adapters/integrations/index.js",
+    "apps/workspace/lib/adapters/integrations/growthub-connection-normalizer.js",
+    "apps/workspace/lib/domain/integrations.js",
     "growthub-meta/README.md",
     "growthub-meta/kit-standard.md",
     "docs/governed-workspace-primitives.md"

package/assets/worker-kits/growthub-custom-workspace-starter-v1/docs/adapter-contracts.md

@@ -0,0 +1,86 @@
+# Adapter Contracts — Workspace Starter
+
+The worker-kit contract is provider-agnostic. Concrete providers are configured through environment variables and adapter documentation, not through kit identity.
+
+## Persistence
+
+`AGENCY_PORTAL_DATA_ADAPTER` selects the persistence layer:
+
+| Value | Required env | Runtime target |
+|---|---|---|
+| `postgres` | `DATABASE_URL` | Any Postgres-compatible database |
+| `qstash-kv` | `QSTASH_KV_REST_URL`, `QSTASH_KV_REST_TOKEN` | Qstash/Vercel KV-style HTTP storage |
+| `provider-managed` | Provider-specific env in `.env` | Hosted database surface managed outside the kit |
+
+The app payload under `apps/workspace/` exposes these adapters as code-level interfaces. Treat any future provider-specific implementation as replaceable behind this contract.
+
+## Auth
+
+`AGENCY_PORTAL_AUTH_ADAPTER` selects the auth layer:
+
+| Value | Required env |
+|---|---|
+| `oidc` | `AUTH_SECRET`, `AUTH_ISSUER`, `AUTH_CLIENT_ID`, `AUTH_CLIENT_SECRET` |
+| `clerk` | provider-specific Clerk env |
+| `authjs` | Auth.js-compatible env |
+| `provider-managed` | provider-specific env |
+
+## Payments
+
+`AGENCY_PORTAL_PAYMENT_ADAPTER` selects payment support:
+
+| Value | Required env |
+|---|---|
+| `none` | none |
+| `stripe` | `PAYMENT_SECRET_KEY`, optional `PAYMENT_WEBHOOK_SECRET` |
+| `polar` | `PAYMENT_SECRET_KEY`, optional `PAYMENT_WEBHOOK_SECRET` |
+
+## Reporting
+
+`AGENCY_PORTAL_REPORTING_ADAPTER` is optional. Use `windsor` for the first-party reporting path. Windsor AI is treated as a reporting/data-source adapter, not as the database. The starter keeps persistence selected by `AGENCY_PORTAL_DATA_ADAPTER`.
+
+The intended Windsor pattern is:
+
+1. Connect Windsor AI through the Growthub GH app/MCP bridge.
+2. Use Windsor's blended data support to publish or sync blended marketing datasets into Google Sheets when spreadsheet-backed reporting is preferred.
+3. Read normalized connection state through the integration adapter rather than storing Windsor, Google Analytics, Shopify, or Meta credentials in the starter app.
+
+## Integrations
+
+`AGENCY_PORTAL_INTEGRATION_ADAPTER` selects how Settings resolves data sources and workspace integrations:
+
+| Value | Required env | Authority |
+|---|---|---|
+| `growthub-bridge` | `GROWTHUB_BRIDGE_BASE_URL`, `GROWTHUB_BRIDGE_ACCESS_TOKEN` | Growthub GH app MCP connection authority |
+| `byo-api-key` | `AGENCY_PORTAL_BYO_CONNECTIONS_JSON` or `WINDSOR_API_KEY` for Windsor-only setup | Workspace-owned explicit provider setup |
+| `static` | none | Local starter catalog for development and exported workspaces without hosted authority |
+
+The bridge adapter is intentionally thin. It expects a JSON endpoint configured by `GROWTHUB_BRIDGE_INTEGRATIONS_PATH` (default `/api/mcp/accounts`) and normalizes the response into two lanes:
+
+- **Data sources**: Windsor AI, Google Sheets blended data, Google Analytics, Shopify, Meta Facebook/Instagram.
+- **Workspace integrations**: Asana, Slack, GoHighLevel, Google Drive, Notion.
+
+The GH app authority pattern observed in `/Users/antonio/gh-app` is CMS catalog rows plus active `mcp_connections` rows. The starter does not query that database directly. It consumes the bridge API so the hosted app keeps ownership of user auth, tokens, verification, account IDs, scopes, and provider metadata.
+
+The kit-local primitive for this is `apps/workspace/lib/adapters/integrations/growthub-connection-normalizer.js`. It accepts the SDK/profile-style integration shape:
+
+```json
+{ "integrations": [{ "provider": "slack", "label": "Slack", "connectedAt": "...", "scopes": [], "handle": "...", "ready": true }] }
+```
+
+It also accepts the GH app MCP accounts shape returned by `/api/mcp/accounts`:
+
+```json
+{ "success": true, "accounts": [{ "id": "...", "provider": "slack", "connectionName": "Slack", "connectionType": "oauth_first_party", "isActive": true, "isVerified": true, "metadata": {}, "createdAt": "...", "updatedAt": "...", "appSlug": "slack" }] }
+```
+
+Both shapes normalize into the same `AgencyPortalIntegration` object used by the BYO path. Unknown connected providers are preserved as discovered workspace integrations instead of being dropped.
+
+The BYO path uses the same normalized object shape, but expects the workspace operator to provide the connection metadata and secret env names explicitly. Windsor is first-class: when `WINDSOR_API_KEY` is set with `AGENCY_PORTAL_INTEGRATION_ADAPTER=byo-api-key`, the app marks the Windsor AI data pipeline object as connected without requiring a larger JSON payload. The hosted Growthub bridge remains the lower-friction first-party path for user-owned MCP connections.
+
+The starter also supports a safe hybrid mode for new users: keep `AGENCY_PORTAL_INTEGRATION_ADAPTER=growthub-bridge` for hosted account authority, and set `WINDSOR_API_KEY` locally when Windsor reporting is being bootstrapped before the hosted bridge has returned a Windsor account row. In that mode the app overlays a connected Windsor state onto:
+
+- `windsor-ai`
+- `google-sheets` blended data
+
+This preserves the bridge as the source of truth for the rest of the integration catalog while letting the portal surface Windsor-backed reporting setup end to end from first boot.

package/assets/worker-kits/growthub-custom-workspace-starter-v1/docs/vercel-serverless-deployment.md

@@ -0,0 +1,46 @@
+# Vercel Serverless Deployment
+
+The clean cloud deployment lane is the app payload:
+
+```text
+apps/workspace/
+```
+
+The Growthub local-first workspace remains the kit root, and the Vite operator shell remains:
+
+```text
+studio/
+```
+
+## Vercel project settings
+
+- Root directory: `apps/workspace`
+- Build command: `npm run build`
+- Install command: `npm install`
+- Framework preset: Next.js
+
+## Required adapter env
+
+At minimum, set:
+
+```text
+AGENCY_PORTAL_DEPLOY_TARGET=vercel
+AGENCY_PORTAL_DATA_ADAPTER=<postgres|qstash-kv|provider-managed>
+AGENCY_PORTAL_AUTH_ADAPTER=<oidc|clerk|authjs|provider-managed>
+AGENCY_PORTAL_PAYMENT_ADAPTER=<none|stripe|polar>
+AGENCY_PORTAL_INTEGRATION_ADAPTER=<static|growthub-bridge|byo-api-key>
+```
+
+Then set the provider-specific env required by `docs/adapter-contracts.md`.
+
+For hosted Growthub authority, set:
+
+```text
+GROWTHUB_BRIDGE_BASE_URL=<growthub-gh-app-url>
+GROWTHUB_BRIDGE_INTEGRATIONS_PATH=/api/mcp/accounts
+GROWTHUB_BRIDGE_ACCESS_TOKEN=<bridge-token-issued-by-growthub-authority>
+```
+
+The deployed app reads normalized integration state from the bridge. It does not require raw Shopify, Meta, Google Analytics, Asana, Slack, GoHighLevel, Google Drive, Notion, Windsor, or Google Sheets secrets.
+
+If `AGENCY_PORTAL_INTEGRATION_ADAPTER=byo-api-key`, set `AGENCY_PORTAL_BYO_CONNECTIONS_JSON` with the same normalized integration object fields and secret env names. This is more detailed setup, but keeps the worker kit contract composable.

package/assets/worker-kits/growthub-custom-workspace-starter-v1/growthub.config.json

@@ -0,0 +1,49 @@
+{
+  "id": "custom-workspace-default",
+  "name": "Custom Workspace Canvas",
+  "description": "Default no-code composition shipped by growthub-custom-workspace-starter-v1. It keeps the canonical custom workspace primitive agnostic: chat session, workflow runner, and artifact viewer wired to session memory and trace primitives. Forks can edit ids, layouts, and bindings to tailor the canvas to the workspace domain.",
+  "capabilities": [],
+  "pipelines": [],
+  "integrations": [],
+  "canvas": {
+    "id": "workspace-default",
+    "name": "Custom workspace dashboard",
+    "scope": "workspace",
+    "layout": {
+      "columns": 12,
+      "rowHeight": 64,
+      "gap": 16,
+      "responsive": true
+    },
+    "widgets": [
+      {
+        "id": "agent-chat",
+        "kind": "chat-session",
+        "title": "Agent chat",
+        "position": { "x": 0, "y": 0, "w": 6, "h": 4 }
+      },
+      {
+        "id": "active-workflow",
+        "kind": "workflow-runner",
+        "title": "Active workflow",
+        "position": { "x": 6, "y": 0, "w": 6, "h": 4 }
+      },
+      {
+        "id": "session-artifacts",
+        "kind": "artifact-viewer",
+        "title": "Session artifacts",
+        "mediaPreview": true,
+        "position": { "x": 0, "y": 4, "w": 12, "h": 3 }
+      }
+    ],
+    "bindings": {
+      "chatToCanvas": true,
+      "workflowOutputsToArtifacts": true,
+      "sessionContext": true
+    }
+  },
+  "provenance": {
+    "createdBy": "cli",
+    "note": "Shipped with growthub-custom-workspace-starter-v1; safe to edit inside a governed fork and validate through the starter export smoke path."
+  }
+}

package/assets/worker-kits/growthub-custom-workspace-starter-v1/helpers/check-self-improving-health.sh

@@ -0,0 +1,60 @@
+#!/usr/bin/env bash
+# helpers/check-self-improving-health.sh
+# Self-improving workspace health check (optional feature extension).
+#
+# Usage: bash helpers/check-self-improving-health.sh [--json]
+# Returns non-zero when any FAIL check is found.
+set -euo pipefail
+
+FORK_DIR=".growthub-fork"
+JSON_MODE=false
+[[ "${1:-}" == "--json" ]] && JSON_MODE=true
+
+pass=()
+warn=()
+fail=()
+
+# Core governed primitives
+[[ -f "SKILL.md" ]]               && pass+=("SKILL.md present") || fail+=("SKILL.md missing")
+[[ -f "templates/project.md" ]]   && pass+=("templates/project.md present") || warn+=("templates/project.md missing")
+[[ -f "templates/self-eval.md" ]] && pass+=("templates/self-eval.md present") || warn+=("templates/self-eval.md missing")
+[[ -d "helpers" ]]                && pass+=("helpers/ present") || warn+=("helpers/ missing")
+[[ -d "skills" ]]                 && pass+=("skills/ present") || warn+=("skills/ missing")
+
+# Fork state
+[[ -d "${FORK_DIR}" ]]            && pass+=(".growthub-fork/ exists") || warn+=(".growthub-fork/ missing — run: growthub kit fork register .")
+[[ -f "${FORK_DIR}/trace.jsonl" ]] && pass+=("trace.jsonl present") || warn+=("trace.jsonl missing")
+
+# Self-improving feature checks (optional)
+[[ -d "${FORK_DIR}/capabilities/proposals" ]] \
+  && pass+=("capabilities/proposals/ exists ($(ls "${FORK_DIR}/capabilities/proposals/"*.json 2>/dev/null | wc -l | tr -d ' ') proposals)") \
+  || warn+=("No proposals yet — run: growthub workspace improve propose --from-run demo")
+[[ -d "${FORK_DIR}/capabilities/promoted" ]] \
+  && pass+=("capabilities/promoted/ exists ($(ls "${FORK_DIR}/capabilities/promoted/"*.json 2>/dev/null | wc -l | tr -d ' ') promoted)") \
+  || pass+=("No promoted capabilities yet (ok)")
+[[ -f "helpers/propose-capability.mjs" ]] && pass+=("propose-capability.mjs present") || warn+=("propose-capability.mjs missing")
+[[ -f "helpers/promote-capability.mjs" ]] && pass+=("promote-capability.mjs present") || warn+=("promote-capability.mjs missing")
+
+PASS_COUNT=${#pass[@]}
+WARN_COUNT=${#warn[@]}
+FAIL_COUNT=${#fail[@]}
+
+if $JSON_MODE; then
+  printf '{\n  "pass": [%s],\n  "warn": [%s],\n  "fail": [%s],\n  "summary": "pass=%d warn=%d fail=%d"\n}\n' \
+    "$(printf '"%s",' "${pass[@]:-}" | sed 's/,$//')" \
+    "$(printf '"%s",' "${warn[@]:-}" | sed 's/,$//')" \
+    "$(printf '"%s",' "${fail[@]:-}" | sed 's/,$//')" \
+    "$PASS_COUNT" "$WARN_COUNT" "$FAIL_COUNT"
+else
+  echo ""
+  echo "Self-Improving Workspace Health"
+  echo "================================"
+  for m in "${pass[@]:-}"; do echo "  PASS  $m"; done
+  for m in "${warn[@]:-}"; do echo "  WARN  $m"; done
+  for m in "${fail[@]:-}"; do echo "  FAIL  $m"; done
+  echo ""
+  echo "  pass=${PASS_COUNT} warn=${WARN_COUNT} fail=${FAIL_COUNT}"
+  echo ""
+fi
+
+[[ ${FAIL_COUNT} -gt 0 ]] && exit 1 || exit 0

package/assets/worker-kits/growthub-custom-workspace-starter-v1/helpers/promote-capability.mjs

@@ -0,0 +1,37 @@
+#!/usr/bin/env node
+/**
+ * helpers/promote-capability.mjs
+ * Self-improving workspace helper (primitive #6).
+ *
+ * Thin wrapper: calls `growthub workspace improve promote` so agents have
+ * a single-invocation helper that follows the primitive #6 convention.
+ *
+ * Usage:
+ *   node helpers/promote-capability.mjs <slug> [--yes] [--json]
+ *
+ * Works identically on:
+ *   - a maintainer's machine with growthub installed globally
+ *   - CI / cloud agents with only the source tree (uses cli/dist/index.js)
+ */
+import { spawnSync } from "node:child_process";
+import { fileURLToPath } from "node:url";
+import path from "node:path";
+import fs from "node:fs";
+
+const args = process.argv.slice(2);
+
+function resolveGrowthubCli() {
+  const distPath = path.resolve(
+    path.dirname(fileURLToPath(import.meta.url)),
+    "../../../../cli/dist/index.js",
+  );
+  if (fs.existsSync(distPath)) return [process.execPath, distPath];
+  return ["growthub"];
+}
+
+const [exec, ...rest] = resolveGrowthubCli();
+const result = spawnSync(exec, [...rest, "workspace", "improve", "promote", ...args], {
+  stdio: "inherit",
+  env: process.env,
+});
+process.exit(result.status ?? 1);

package/assets/worker-kits/growthub-custom-workspace-starter-v1/helpers/propose-capability.mjs

@@ -0,0 +1,38 @@
+#!/usr/bin/env node
+/**
+ * helpers/propose-capability.mjs
+ * Self-improving workspace helper (primitive #6).
+ *
+ * Thin wrapper: calls `growthub workspace improve propose` so agents have
+ * a single-invocation helper that follows the primitive #6 convention.
+ *
+ * Usage:
+ *   node helpers/propose-capability.mjs --from-run <run-id> [--summary "..."] [--json]
+ *
+ * Works identically on:
+ *   - a maintainer's machine with growthub installed globally
+ *   - CI / cloud agents with only the source tree (uses cli/dist/index.js)
+ */
+import { spawnSync } from "node:child_process";
+import { fileURLToPath } from "node:url";
+import path from "node:path";
+import fs from "node:fs";
+
+const args = process.argv.slice(2);
+
+function resolveGrowthubCli() {
+  // Three-step ladder: dist → installed binary
+  const distPath = path.resolve(
+    path.dirname(fileURLToPath(import.meta.url)),
+    "../../../../cli/dist/index.js",
+  );
+  if (fs.existsSync(distPath)) return [process.execPath, distPath];
+  return ["growthub"];
+}
+
+const [exec, ...rest] = resolveGrowthubCli();
+const result = spawnSync(exec, [...rest, "workspace", "improve", "propose", ...args], {
+  stdio: "inherit",
+  env: process.env,
+});
+process.exit(result.status ?? 1);

package/assets/worker-kits/growthub-custom-workspace-starter-v1/kit.json

@@ -30,6 +30,7 @@
     "output-standards.md",
     "runtime-assumptions.md",
     "validation-checklist.md",
+    "growthub.config.json",
     "workers/custom-workspace-operator/CLAUDE.md",
     "brands/_template/brand-kit.md",
     "brands/growthub/brand-kit.md",
@@ -43,11 +44,16 @@
     "templates/project.md",
     "templates/self-eval.md",
     "helpers/README.md",
+    "helpers/propose-capability.mjs",
+    "helpers/promote-capability.mjs",
+    "helpers/check-self-improving-health.sh",
     "skills/README.md",
     "examples/workspace-sample.md",
     "docs/starter-kit-overview.md",
     "docs/fork-sync-integration.md",
     "docs/vite-ui-shell-guide.md",
+    "docs/adapter-contracts.md",
+    "docs/vercel-serverless-deployment.md",
     "studio/index.html",
     "studio/package.json",
     "studio/vite.config.js",
@@ -55,6 +61,32 @@
     "studio/src/main.jsx",
     "studio/src/App.jsx",
     "studio/src/app.css",
+    "apps/workspace/README.md",
+    "apps/workspace/.env.example",
+    "apps/workspace/package.json",
+    "apps/workspace/package-lock.json",
+    "apps/workspace/next.config.js",
+    "apps/workspace/postcss.config.mjs",
+    "apps/workspace/vercel.json",
+    "apps/workspace/growthub.config.json",
+    "apps/workspace/jsconfig.json",
+    "apps/workspace/app/layout.jsx",
+    "apps/workspace/app/page.jsx",
+    "apps/workspace/app/globals.css",
+    "apps/workspace/app/settings/integrations/page.jsx",
+    "apps/workspace/app/api/workspace/route.js",
+    "apps/workspace/app/api/settings/integrations/route.js",
+    "apps/workspace/lib/domain/portal.js",
+    "apps/workspace/lib/domain/integrations.js",
+    "apps/workspace/lib/adapters/env.js",
+    "apps/workspace/lib/adapters/auth/index.js",
+    "apps/workspace/lib/adapters/integrations/index.js",
+    "apps/workspace/lib/adapters/integrations/growthub-connection-normalizer.js",
+    "apps/workspace/lib/adapters/payments/index.js",
+    "apps/workspace/lib/adapters/persistence/index.js",
+    "apps/workspace/lib/adapters/persistence/postgres.js",
+    "apps/workspace/lib/adapters/persistence/qstash-kv.js",
+    "apps/workspace/lib/adapters/persistence/provider-managed.js",
     "growthub-meta/README.md",
     "growthub-meta/kit-standard.md",
     "docs/governed-workspace-primitives.md"
@@ -74,6 +106,7 @@
       "bundles/growthub-custom-workspace-starter-v1.json",
       "SKILL.md",
       "skills.md",
+      "growthub.config.json",
       "workers/custom-workspace-operator/CLAUDE.md",
       "brands/_template/brand-kit.md",
       "brands/growthub/brand-kit.md",
@@ -85,11 +118,23 @@
       "templates",
       "templates/project.md",
       "templates/self-eval.md",
+      "templates/deployment-handoff.md",
+      "templates/supabase-setup-plan.md",
       "helpers",
       "helpers/README.md",
+      "helpers/propose-capability.mjs",
+      "helpers/promote-capability.mjs",
+      "helpers/check-self-improving-health.sh",
       "skills",
       "skills/README.md",
       "docs",
+      "docs/adapter-contracts.md",
+      "docs/vercel-serverless-deployment.md",
+      "apps/workspace",
+      "apps/workspace/package-lock.json",
+      "apps/workspace/next.config.js",
+      "apps/workspace/growthub.config.json",
+      "apps/workspace/lib/adapters",
       "growthub-meta",
       "docs/governed-workspace-primitives.md"
     ]

package/assets/worker-kits/growthub-custom-workspace-starter-v1/templates/deployment-handoff.md

@@ -0,0 +1,61 @@
+# Deployment Handoff
+
+Client:
+Project:
+Fork id:
+GitHub repo:
+Vercel project:
+
+## Validated Commands
+
+```bash
+node setup/verify-env.mjs
+cd studio && npm run build
+cd apps/workspace && npm run build
+growthub kit fork status <fork-id>
+```
+
+## Vercel Settings
+
+- Root directory: `apps/workspace`
+- Install command: `npm install`
+- Build command: `npm run build`
+- Framework preset: Next.js
+
+## Environment
+
+```text
+AGENCY_PORTAL_DEPLOY_TARGET=vercel
+AGENCY_PORTAL_DATA_ADAPTER=
+AGENCY_PORTAL_AUTH_ADAPTER=
+AGENCY_PORTAL_PAYMENT_ADAPTER=
+AGENCY_PORTAL_REPORTING_ADAPTER=
+AGENCY_PORTAL_INTEGRATION_ADAPTER=
+```
+
+Growthub bridge env, if used:
+
+```text
+GROWTHUB_BRIDGE_BASE_URL=
+GROWTHUB_BRIDGE_INTEGRATIONS_PATH=/api/mcp/accounts
+GROWTHUB_BRIDGE_ACCESS_TOKEN=<set in Vercel only>
+GROWTHUB_BRIDGE_USER_ID=<set when the selected bridge endpoint requires explicit user scoping>
+```
+
+BYO env, if used:
+
+```text
+AGENCY_PORTAL_BYO_CONNECTIONS_JSON=<set in Vercel only>
+WINDSOR_API_KEY=<set in Vercel only when BYO Windsor is used>
+```
+
+## Integration Validation
+
+- `/settings/integrations` loaded:
+- Data pipeline objects connected:
+- MCP connection integrations connected:
+- Active badges match Growthub bridge or BYO metadata:
+
+## Handoff Notes
+
+Record any remaining manual steps, provider-side OAuth actions, or client account permissions.

package/assets/worker-kits/growthub-custom-workspace-starter-v1/templates/supabase-setup-plan.md

@@ -0,0 +1,26 @@
+# Database Provider Setup Plan
+
+This file name is retained for compatibility with older workspace notes. The v1 worker-kit contract is not Supabase-specific.
+
+Use `AGENCY_PORTAL_DATA_ADAPTER` to select persistence:
+
+- `postgres` with `DATABASE_URL`
+- `qstash-kv` with `QSTASH_KV_REST_URL` and `QSTASH_KV_REST_TOKEN`
+- `provider-managed` for a hosted database surface outside this kit
+
+Supabase may be used only as one Postgres-compatible provider behind `DATABASE_URL`. Do not add Supabase SDK dependencies or Supabase-only assumptions to the starter unless a user explicitly chooses that provider in their own fork.
+
+## Selected Provider
+
+- Adapter:
+- Provider:
+- Required env:
+- Migration owner:
+- Backup owner:
+
+## Validation
+
+```bash
+node setup/verify-env.mjs
+cd apps/workspace && npm run build
+```