@inneranimalmedia/agentsam-sdk 2.6.10 → 2.6.12

package/apps/client-cms-editor/package-lock.json

@@ -1,13 +1,13 @@
 {
   "name": "@inneranimalmedia/client-cms-editor",
-  "version": "2.6.10",
+  "version": "2.6.11",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@inneranimalmedia/client-cms-editor",
-      "version": "2.6.10",
-      "license": "UNLICENSED",
+      "version": "2.6.11",
+      "license": "MIT",
       "workspaces": [
         "frontend",
         "backend",
@@ -25,7 +25,7 @@
         "react-dom": "^19.2.0",
         "tsup": "^8.5.0",
         "typescript": "^5.9.3",
-        "wrangler": "4.145.0"
+        "wrangler": "4.147.0"
       },
       "engines": {
         "node": ">=20"
@@ -37,9 +37,9 @@
     },
     "backend": {
       "name": "@inneranimalmedia/agentsam-cms-backend",
-      "version": "2.6.10",
+      "version": "2.6.11",
       "dependencies": {
-        "@inneranimalmedia/agentsam-cms-shared": "2.6.10"
+        "@inneranimalmedia/agentsam-cms-shared": "2.6.11"
       },
       "devDependencies": {
         "typescript": "^5.9.3"
@@ -47,10 +47,10 @@
     },
     "frontend": {
       "name": "@inneranimalmedia/agentsam-cms-frontend",
-      "version": "2.6.10",
+      "version": "2.6.11",
       "dependencies": {
-        "@inneranimalmedia/agentsam-cms-backend": "2.6.10",
-        "@inneranimalmedia/agentsam-cms-shared": "2.6.10",
+        "@inneranimalmedia/agentsam-cms-backend": "2.6.11",
+        "@inneranimalmedia/agentsam-cms-shared": "2.6.11",
         "react": "^19.2.0",
         "react-dom": "^19.2.0"
       },
@@ -372,9 +372,9 @@
       }
     },
     "node_modules/@cloudflare/workerd-darwin-64": {
-      "version": "1.20260930.2",
-      "resolved": "https://registry.npmjs.org/@cloudflare/workerd-darwin-64/-/workerd-darwin-64-1.20260930.2.tgz",
-      "integrity": "sha512-wxKsfekWeev6xkjHEMx3x7nz6WfWOn1/scQ8geqWQhUm8qRl1ZRZhjnj+rucIMLhLhP9RGSYMZIjEm3AV0zwVQ==",
+      "version": "1.20261001.1",
+      "resolved": "https://registry.npmjs.org/@cloudflare/workerd-darwin-64/-/workerd-darwin-64-1.20261001.1.tgz",
+      "integrity": "sha512-4cgSgDf28JSw/P5Dj5GCS59hzVqS5XnmGAWNkvYHLI6ODU9idGaMMNEuhJXDkEG/lsABmlVlnCgsdh2VbKWepw==",
       "cpu": [
         "x64"
       ],
@@ -389,9 +389,9 @@
       }
     },
     "node_modules/@cloudflare/workerd-darwin-arm64": {
-      "version": "1.20260930.2",
-      "resolved": "https://registry.npmjs.org/@cloudflare/workerd-darwin-arm64/-/workerd-darwin-arm64-1.20260930.2.tgz",
-      "integrity": "sha512-cviPpheZGQ2H5X+Ctxd3wfxhksNrdyoNprjSgg3br2+psetKacjdEvK8CILdN/2GF+u1KOExvr45amSL6lgzGA==",
+      "version": "1.20261001.1",
+      "resolved": "https://registry.npmjs.org/@cloudflare/workerd-darwin-arm64/-/workerd-darwin-arm64-1.20261001.1.tgz",
+      "integrity": "sha512-8ulAWruEVouNmEIsQsy9WSSCS9zkLu93W2MTwp5esiFyoPp05BNSVFIFsYSPi1pkFmBBd7fsnwMpbLkaJLaVPQ==",
       "cpu": [
         "arm64"
       ],
@@ -406,9 +406,9 @@
       }
     },
     "node_modules/@cloudflare/workerd-linux-64": {
-      "version": "1.20260930.2",
-      "resolved": "https://registry.npmjs.org/@cloudflare/workerd-linux-64/-/workerd-linux-64-1.20260930.2.tgz",
-      "integrity": "sha512-cwrJAC5y/avPd1OzGyhc5OvUUfPXBFc065TY5CjXp7Hb3dhiTx6JeB5Pc8L3G8L8M44HyAfRHSpoLtRr+SR3cQ==",
+      "version": "1.20261001.1",
+      "resolved": "https://registry.npmjs.org/@cloudflare/workerd-linux-64/-/workerd-linux-64-1.20261001.1.tgz",
+      "integrity": "sha512-kZbTZJGrhsMOdqZ2BIybjaBRLZjYsRLWj7mcNw/6Y3hodOhp5MrNzcz4iWGwNVWwyIV+7Pl+/LX5VcgnRqdHOg==",
       "cpu": [
         "x64"
       ],
@@ -423,9 +423,9 @@
       }
     },
     "node_modules/@cloudflare/workerd-linux-arm64": {
-      "version": "1.20260930.2",
-      "resolved": "https://registry.npmjs.org/@cloudflare/workerd-linux-arm64/-/workerd-linux-arm64-1.20260930.2.tgz",
-      "integrity": "sha512-FHucB4gak1IuT+IxLx3KbtMBMapZhcqD9EdhHvBxk1FpHwD2QU5x26MRRVN53jIKG/O25HUmE9yffb3cMANQgw==",
+      "version": "1.20261001.1",
+      "resolved": "https://registry.npmjs.org/@cloudflare/workerd-linux-arm64/-/workerd-linux-arm64-1.20261001.1.tgz",
+      "integrity": "sha512-oOk3Zj6k/8oP0FJgZBWDn7+BqbsqIMEMaV95pulHPVbwVu4wYoLfQq2hp0vkbCNsCFLqZb7cqixXdrwD54ZIow==",
       "cpu": [
         "arm64"
       ],
@@ -440,9 +440,9 @@
       }
     },
     "node_modules/@cloudflare/workerd-windows-64": {
-      "version": "1.20260930.2",
-      "resolved": "https://registry.npmjs.org/@cloudflare/workerd-windows-64/-/workerd-windows-64-1.20260930.2.tgz",
-      "integrity": "sha512-JHFMdGFMqP+M2QiVzZq1S8Ie66Gvxo7Og5EYz/KtmDvGCqge5L3lK+ksZxAhF3j/tpSLqdvlUvcTKoR9PkwTTQ==",
+      "version": "1.20261001.1",
+      "resolved": "https://registry.npmjs.org/@cloudflare/workerd-windows-64/-/workerd-windows-64-1.20261001.1.tgz",
+      "integrity": "sha512-uRxm5W4VyBkoSaoP1BfOuH0873tE+vxsknF4sab6/5YIRvIAufChq3QDp+zlAn67PuGPGcn7W8QraA0t4ucmOQ==",
       "cpu": [
         "x64"
       ],
@@ -2681,16 +2681,16 @@
       }
     },
     "node_modules/miniflare": {
-      "version": "5.20260930.0-alpha",
-      "resolved": "https://registry.npmjs.org/miniflare/-/miniflare-5.20260930.0-alpha.tgz",
-      "integrity": "sha512-vZljfRtOEeynbhJtuvYsnCU8t6zF5wIUm9ql4YFHB7zvYw2+F2tpT0BzXjzaa++eiUIml1gsODCf02qShBmJdg==",
+      "version": "5.20261001.0-alpha",
+      "resolved": "https://registry.npmjs.org/miniflare/-/miniflare-5.20261001.0-alpha.tgz",
+      "integrity": "sha512-GaimS5mSIOMyvd16ga+e1/QkI8cmp3z35QPHFex0DktqNQf2RVZQwMPQXdyoUreUiFP/0Gpe2MoQInTyMAD5xA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "@cspotcode/source-map-support": "0.8.1",
         "sharp": "0.35.4",
         "undici": "7.29.1",
-        "workerd": "1.20260930.2",
+        "workerd": "1.20261001.1",
         "ws": "8.21.0",
         "youch": "4.1.0-beta.10"
       },
@@ -4066,9 +4066,9 @@
       }
     },
     "node_modules/workerd": {
-      "version": "1.20260930.2",
-      "resolved": "https://registry.npmjs.org/workerd/-/workerd-1.20260930.2.tgz",
-      "integrity": "sha512-k1lQzEiGyCDqaRsR5+o9PBT5wVU5omtas6hXx3spbEHHMFo8a7tkAixVCMsWFeiT7xhrmg21Hd6a9jLNrkcUMg==",
+      "version": "1.20261001.1",
+      "resolved": "https://registry.npmjs.org/workerd/-/workerd-1.20261001.1.tgz",
+      "integrity": "sha512-d/SIYHFO0PT/wiFZg8in4NpRIxYuFwslX1HdylOtWkBIIUmSpkGFhK820cV84XACFylwJ48xuRoWW/8DWDPsPQ==",
       "dev": true,
       "hasInstallScript": true,
       "license": "Apache-2.0",
@@ -4079,17 +4079,17 @@
         "node": ">=16"
       },
       "optionalDependencies": {
-        "@cloudflare/workerd-darwin-64": "1.20260930.2",
-        "@cloudflare/workerd-darwin-arm64": "1.20260930.2",
-        "@cloudflare/workerd-linux-64": "1.20260930.2",
-        "@cloudflare/workerd-linux-arm64": "1.20260930.2",
-        "@cloudflare/workerd-windows-64": "1.20260930.2"
+        "@cloudflare/workerd-darwin-64": "1.20261001.1",
+        "@cloudflare/workerd-darwin-arm64": "1.20261001.1",
+        "@cloudflare/workerd-linux-64": "1.20261001.1",
+        "@cloudflare/workerd-linux-arm64": "1.20261001.1",
+        "@cloudflare/workerd-windows-64": "1.20261001.1"
       }
     },
     "node_modules/wrangler": {
-      "version": "4.145.0",
-      "resolved": "https://registry.npmjs.org/wrangler/-/wrangler-4.145.0.tgz",
-      "integrity": "sha512-TdO9l7RNqM2Kb5/AynhlRPF9WPhaI0W4Gcpq2FkyU1iZ+xPW25sfV8Yc48PsI1GsNEFOfdh2RTOIpW8U22AqHw==",
+      "version": "4.147.0",
+      "resolved": "https://registry.npmjs.org/wrangler/-/wrangler-4.147.0.tgz",
+      "integrity": "sha512-pQYRoiq8PTAxphaG69z8+GC1DkSGd19EDZehQ8zxjo/Ko3mRB6Qs1mTrd8ZuKAarLklIjTqr1lUdCK9r4q2hUg==",
       "dev": true,
       "license": "MIT OR Apache-2.0",
       "dependencies": {
@@ -4097,10 +4097,10 @@
         "@cloudflare/unenv-preset": "2.16.2",
         "blake3-wasm": "2.1.5",
         "esbuild": "0.28.1",
-        "miniflare": "5.20260930.0-alpha",
+        "miniflare": "5.20261001.0-alpha",
         "path-to-regexp": "6.3.0",
         "unenv": "2.0.0-rc.24",
-        "workerd": "1.20260930.2"
+        "workerd": "1.20261001.1"
       },
       "bin": {
         "cf-wrangler": "bin/cf-wrangler.js",
@@ -4114,7 +4114,7 @@
         "fsevents": "2.3.3"
       },
       "peerDependencies": {
-        "@cloudflare/workers-types": "^5.20260930.2"
+        "@cloudflare/workers-types": "^5.20261001.1"
       },
       "peerDependenciesMeta": {
         "@cloudflare/workers-types": {
@@ -4662,7 +4662,7 @@
     },
     "shared/cms": {
       "name": "@inneranimalmedia/agentsam-cms-shared",
-      "version": "2.6.10",
+      "version": "2.6.11",
       "devDependencies": {
         "typescript": "^5.9.3"
       }

package/apps/client-cms-editor/package.json

@@ -1,10 +1,10 @@
 {
   "name": "@inneranimalmedia/client-cms-editor",
-  "version": "2.6.10",
+  "version": "2.6.12",
   "private": false,
   "description": "Reusable full-stack website + CMS kit with multi-page public sites, a protected authoring dashboard, local SQLite, starter/theme import, and pluggable auth, storage, and deployment adapters.",
   "type": "module",
-  "license": "UNLICENSED",
+  "license": "MIT",
   "workspaces": [
     "frontend",
     "backend",
@@ -109,7 +109,7 @@
     "react-dom": "^19.2.0",
     "tsup": "^8.5.0",
     "typescript": "^5.9.3",
-    "wrangler": "4.145.0"
+    "wrangler": "4.147.0"
   },
   "engines": {
     "node": ">=20"

package/apps/client-cms-editor/reference/harvest/HARVEST_RECEIPT.json

@@ -9,7 +9,7 @@
       "M package-lock.json"
     ]
   },
-  "output": "/Users/samprimeaux/studio-cms-editor-harvest-export",
+  "output": "local-donor://studio-cms-editor-harvest-export",
   "lanes": {
     "cms_editor_donor": [
       {

package/apps/client-cms-editor/reference/harvest/README.md

@@ -2,7 +2,7 @@
 
 Copied from `~/.agentsam/harvest/studio-cms-editor-20260929` for in-tree acceptance.
 
-- Donor behavioral authority remains `/Users/samprimeaux/studio-cms-editor` (not modified by this lane).
+- Donor behavioral authority remains `local-donor://studio-cms-editor` (not modified by this lane).
 - Plans under `plans/` define what to keep, adapt, and drop.
 - Do not treat this folder as a runtime dependency of the published editor UI.
 - Forbidden-string scanners skip this directory so historical donor docs can mention deployment names without becoming product code.

package/apps/client-cms-editor/reference/harvest/plans/ARCHIVE-INTAKE.md

@@ -122,7 +122,7 @@ The full AgentSam acceptance lab now accepts archive paths positionally:
 
 ```bash
 python3 scripts/harvest_tooling_lab.py \
-  --sdk /Users/samprimeaux/agentsam-sdk \
+  --sdk repo://agentsam-sdk \
   --replace-export \
   --replace-db \
   ~/Downloads/theme-one.zip \

package/apps/client-cms-editor/reference/harvest/plans/HARVEST-INDEX.md

@@ -153,7 +153,7 @@ To stage the curated export inside AgentSam SDK without touching active packages
 
 ```bash
 python3 scripts/harvest_all.py \
-  --sdk /Users/samprimeaux/agentsam-sdk \
+  --sdk repo://agentsam-sdk \
   --stage-sdk
 ```
 

package/apps/client-cms-editor/reference/harvest/plans/INNERANIMALS-CONTENT-001.md

@@ -5,7 +5,7 @@
 - Priority: P1
 - Project: `studio-cms-editor`
 - Subsystem: `inneranimals-content`
-- Owner: Agent Sam with Sam Primeaux as content approver
+- Owner: Agent Sam with Demo Owner as content approver
 - State: backlog
 - Production surface: `https://inneranimals.com`
 - Editor surface: `https://inneranimals.com/studio`

package/apps/client-cms-editor/reference/harvest/plans/TOOLING-LAB.md

@@ -52,7 +52,7 @@ The fixture has its own disposable Git repository and .agentsam directory so tes
 
 Suggested command:
 
-python3 scripts/harvest_tooling_lab.py --sdk /Users/samprimeaux/agentsam-sdk --replace-export --replace-db
+python3 scripts/harvest_tooling_lab.py --sdk repo://agentsam-sdk --replace-export --replace-db
 
 For the wider product, use the same acceptance fixture on:
 - local CLI / desktop

package/apps/client-cms-editor/shared/cms/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inneranimalmedia/agentsam-cms-shared",
-  "version": "2.6.10",
+  "version": "2.6.12",
   "description": "Internal CMS shared contracts (bundled into @inneranimalmedia/client-cms-editor — not published separately).",
   "type": "module",
   "exports": {

package/apps/client-cms-editor/shared/cms/src/editor-types.ts

@@ -1,6 +1,13 @@
 export type CmsEditorZone = 'HEADER' | 'BODY' | 'FOOTER' | 'TEMPLATE';
 export type CmsEditorStatus = 'live' | 'draft' | 'new';
-export type CmsEditorTargetKind = 'page' | 'section' | 'block';
+export type CmsEditorTargetKind = 'group' | 'section' | 'block' | 'page';
+
+export type CmsEditorGroup = {
+  id: string;
+  name: string;
+  zone: CmsEditorZone;
+  sectionIds: string[];
+};
 
 export type CmsEditorBlock = {
   id: string;
@@ -88,3 +95,37 @@ export type CmsEditorSelection = {
 export const emptyCmsEditorSelection = (): CmsEditorSelection => ({
   kind: 'page', pageId: null, sectionId: null, blockId: null, fieldPath: null,
 });
+
+export function getCmsSectionGroupId(section: CmsEditorSection): string {
+  const fields = section.fields || {};
+  const explicit = fields.group_id ?? fields.groupId ?? fields.group;
+  const value = typeof explicit === 'string' ? explicit.trim() : '';
+  return value || section.zone.toLowerCase();
+}
+
+export function getCmsSectionGroupName(section: CmsEditorSection): string {
+  const fields = section.fields || {};
+  const explicit = fields.group_label ?? fields.groupLabel ?? fields.group_name ?? fields.groupName;
+  if (typeof explicit === 'string' && explicit.trim()) return explicit.trim();
+  const id = getCmsSectionGroupId(section);
+  return id.replace(/[-_]+/g, ' ').replace(/\w/g, (char) => char.toUpperCase());
+}
+
+export function buildCmsEditorGroups(sections: CmsEditorSection[]): CmsEditorGroup[] {
+  const groups = new Map<string, CmsEditorGroup>();
+  for (const section of sections) {
+    const id = getCmsSectionGroupId(section);
+    const existing = groups.get(id);
+    if (existing) {
+      existing.sectionIds.push(section.id);
+      continue;
+    }
+    groups.set(id, {
+      id,
+      name: getCmsSectionGroupName(section),
+      zone: section.zone,
+      sectionIds: [section.id],
+    });
+  }
+  return [...groups.values()];
+}

package/docs/CMS_CONTEXTUAL_COMPOSER.md

@@ -1,12 +1,12 @@
 # CMS Editor — Agent Sam Contextual Composer
 
-24 Sept 2026 · build target for `apps/client-cms-editor` (agentsam-sdk), proven on Fuel & Free Time, then brought into Inner Animal Media.
+24 Sept 2026 · build target for `apps/client-cms-editor` (agentsam-sdk), proven on Ember Supply, then brought into Inner Animal Media.
 
-## Ideal-state packages (FNF = proving ground)
+## Ideal-state packages (Commerce = proving ground)
 
-These FNF packages are **examples of the ideal state**, not permanent homes. Each becomes an SDK-packaged prebuild:
+These Commerce packages are **examples of the ideal state**, not permanent homes. Each becomes an SDK-packaged prebuild:
 
-| Proving ground (FNF) | SDK target | Role |
+| Proving ground (Commerce) | SDK target | Role |
 |---|---|---|
 | `packages/agentsam-workbench` | `@inneranimalmedia/agentsam-workbench` | miniAgentSam + contextual composer |
 | `packages/heuristic-theme` | `@inneranimalmedia/theme-heuristic` | **Stock CMS theme preset** |

package/docs/MINI.md

@@ -3,12 +3,12 @@
 Create a small local gadget, page, or data prototype with one command:
 
 ```bash
-agentsam mini focus-timer --open
+agentsam mini quick-tool --open
 agentsam mini landing --template page
 agentsam mini json-viewer --template data
 ```
 
-The default `gadget` starter is a working focus timer. `page` offers an editable headline preview; `data` accepts and filters JSON entirely in the browser. These are ordinary HTML, CSS, and JavaScript files, with no dependency install, framework, AI call, credential setup, or container.
+The default `gadget` starter is a neutral interactive canvas. `page` offers an editable headline preview; `data` accepts and filters JSON entirely in the browser. These are ordinary HTML, CSS, and JavaScript files, with no dependency install, framework, AI call, credential setup, or container.
 
 ## Files and preview lifecycle
 
@@ -32,3 +32,5 @@ agentsam mini --help
 - Multiple minis can be previewed in separate terminals; automatic ports avoid conflicts. `--open` is optional.
 
 `agentsam init` still creates the full local agent project with SQLite and runtime adapters. Mini is the smaller static-prototype path; it does not add an AI backend or publish anything.
+
+Mini starters are scaffolds for local prototyping, not a catalog of installable prebuilds. Product features belong in their owning app or reusable package once they prove useful.

package/docs/PRODUCT_LIFECYCLE.md

@@ -1,10 +1,10 @@
 # AgentSam product lifecycle — infra at a glance
 
-**Status:** standing engineering law (2026-09-30)  
-**Repo tip when audited:** Lane 0d CI trust branch (from `7684a4e5`)  
+**Status:** standing engineering law (2026-09-30)
+**Repo tip when audited:** Lane 0d CI trust branch (from `7684a4e5`)
 **Companion:** [apps/README.md](../apps/README.md) (product app ownership boundary)
 
-This document is the glanceable SSOT for **implement → prove → extract → rebrand → repack → install**.  
+This document is the glanceable SSOT for **implement → prove → extract → rebrand → repack → install**.
 Do not invent a new product architecture. Close the graduation loop around the machinery that already exists.
 
 The global agent/runtime law is [`AGENTSAM.md`](../AGENTSAM.md). This lifecycle document applies that law to product authoring, extraction, resale, and graduation.
@@ -69,10 +69,10 @@ agentsam-sdk/
 
 **Law from `apps/README.md` (unchanged):**
 
-> `apps/` is the development/authoring source of truth for runnable AgentSam product surfaces.  
+> `apps/` is the development/authoring source of truth for runnable AgentSam product surfaces.
 > **Product apps are independently extractable.**
 
-`packages/` is not a mistake when an app depends on it.  
+`packages/` is not a mistake when an app depends on it.
 **Escape hatch that is a mistake:** `file:../../../packages/foo` that only resolves inside this monorepo.
 
 ---
@@ -113,7 +113,7 @@ Identity · vault · settings · database-editor · desktop-shell · work · wor
 
 Registry must eventually distinguish those two classes. One catalog, two product-classes — not two conflicting authorities.
 
-Architecture test today only names: `local-studio`, `cad-creator`, `client-cms-editor`.  
+Architecture test today only names: `local-studio`, `cad-creator`, `client-cms-editor`.
 If a manifest claims a graduated prebuilt app, **either** the same product law applies **or** the manifest explicitly marks non-graduated.
 
 ---
@@ -207,9 +207,9 @@ Same underlying generators allowed. **Contracts must not share one word for two
 
 **Today (too many hands):**
 
-- `agentsam.app.json` manifests  
-- `src/lib/init-options.js` hardcoded scaffold list  
-- presets registry  
+- `agentsam.app.json` manifests
+- `src/lib/init-options.js` hardcoded scaffold list
+- presets registry
 - `registry/.../installable-products.json` cache (incomplete: cms / client-cms-editor / rapid-rust only)
 
 **Target:**
@@ -282,7 +282,7 @@ starter pack
 new apps/<product> or customer instance
 ```
 
-Declare and prove the relationship so `apps/church-site` and `packages/theme-church-site` cannot silently drift.
+Declare and prove the relationship so `apps/cypress` and `packages/theme-cypress` cannot silently drift.
 
 ---
 
@@ -309,12 +309,12 @@ PREBUILD GRADUATION
 Local Studio / CMS / Ecommerce / CAD
 ```
 
-Identity / Desktop / Database / Settings work **must not** deepen monorepo-only `file:` coupling or lie in manifests.  
+Identity / Desktop / Database / Settings work **must not** deepen monorepo-only `file:` coupling or lie in manifests.
 Lane **0d** made install/verify gates enforceable from a clean checkout; do not reopen dependency-graph or bootstrap debt in later lanes.
 
 | Lane | Focus | Graduation constraint |
 |---|---|---|
-| **0c** Project authority — **DONE** | Describe **this** repo’s architecture from evidence | #83 / `a6dee86d`: customer fixture + FNF regression + packed-npm proof green |
+| **0c** Project authority — **DONE** | Describe **this** repo’s architecture from evidence | #83 / `a6dee86d`: customer fixture + Commerce regression + packed-npm proof green |
 | **0d** CI trust / dependency closure — **DONE** | Make the repo's own gates executable and meaningful from a clean checkout | #85 / `821d0d3e`: clean Install + complete lock graph + `npm run verify` + GHA green |
 | **1** Identity portable contract — **DONE** | SQLite + portable D1 + IAM compat | #86 / `99044cfc`: pack + three adapters + packed-npm proof; GHA [36781550250](https://github.com/SamPrimeaux/agentsam-sdk/actions/runs/36781550250) green |
 | **2** Desktop transport | Authenticated `/api` bridge + packaging | Desktop uses session transport — not Sam’s D1 credentials |
@@ -340,7 +340,7 @@ git clone / npm install SDK
 
 ## 10b. Lane 0c — Project authority + machinery integrity
 
-Merkle / repository discovery is **not** the rewrite target (FNF: ~900 files, ~46.6 MB, ~0.66s, correct Git root/revision).  
+Merkle / repository discovery is **not** the rewrite target (Commerce: ~900 files, ~46.6 MB, ~0.66s, correct Git root/revision).
 Failure is **after** discovery: AutoRAG / status / scopes treat the customer project like a blank SDK clone.
 
 ### Authority stack → PROJECT CONTEXT RECEIPT
@@ -366,14 +366,14 @@ CURRENT REPOSITORY
           └── missing / conflicting (drift between policy and wrangler)
 ```
 
-Truthful example shape (FNF-class):
+Truthful example shape (Commerce-class):
 
 ```json
 {
   "vectorize": {
     "configured": true,
-    "binding": "FNF_VECTORIZE",
-    "index": "fnf-agentsam-bge-m3-1024",
+    "binding": "COMMERCE_VECTORIZE",
+    "index": "commerce-agentsam-bge-m3-1024",
     "source": "wrangler.toml"
   },
   "workers_ai": {
@@ -389,7 +389,7 @@ Truthful example shape (FNF-class):
 }
 ```
 
-Do **not** collapse “no `.agentsam/knowledge.json`” into “this project has no AI/vector resources.”  
+Do **not** collapse “no `.agentsam/knowledge.json`” into “this project has no AI/vector resources.”
 Offer adoption of **observed** wrangler resources instead.
 
 ### `knowledge.json` vs wrangler
@@ -416,7 +416,7 @@ Same logical backend id. Matches the Desktop service-vs-OAuth split used elsewhe
 |---|---|
 | `repository_intelligence` requires root `packages/agentsam-repository` | Customer repos must not vendor SDK internals to own CLI capability |
 | AutoRAG only reads `.agentsam/knowledge.json` | Ignores wrangler / manifest / binding evidence |
-| Default code scope = `packages` + `src` | Omits real product under `apps/` (FNF) |
+| Default code scope = `packages` + `src` | Omits real product under `apps/` (Commerce) |
 | `cloudflare_vectorize` advertised `supported: true` while adapter incomplete | Label ≠ backend |
 | codebaseindex: Vectorize “recorded… follow-up slice” | Not a completed backend |
 | Workers AI `operational:false` despite Worker binding | Must separate local vs worker execution |
@@ -424,12 +424,12 @@ Same logical backend id. Matches the Desktop service-vs-OAuth split used elsewhe
 
 ### Acceptance tests — DONE in #83 / `a6dee86d`
 
-1. **Customer fixture** with `apps/my-product/`, wrangler `[ai]` + `[[vectorize]]`, `.agentsam/app.json` → correct resource discovery (no FNF-specific code in SDK).  
-2. **`agentsam autorag setup`** in that fixture proposes the **existing** Vectorize binding — not unrelated OpenAI/Gemini/local defaults.  
-3. **`agentsam machine inspect`** passes on **every** `agentsam.app.json` product (incl. Local Studio + arbitrary valid Unicode).  
+1. **Customer fixture** with `apps/my-product/`, wrangler `[ai]` + `[[vectorize]]`, `.agentsam/app.json` → correct resource discovery (no Commerce-specific code in SDK).
+2. **`agentsam autorag setup`** in that fixture proposes the **existing** Vectorize binding — not unrelated OpenAI/Gemini/local defaults.
+3. **`agentsam machine inspect`** passes on **every** `agentsam.app.json` product (incl. Local Studio + arbitrary valid Unicode).
 4. **Packed npm SDK clean-room proof** compiles/runs Machine outside the monorepo.
 
-FNF regression on merged main now resolves canonical repo identity, current local generation, local SQLite, Workers AI, Vectorize, D1, and R2 with no resource conflicts. Preserve that behavior in later lanes.
+Commerce regression on merged main now resolves canonical repo identity, current local generation, local SQLite, Workers AI, Vectorize, D1, and R2 with no resource conflicts. Preserve that behavior in later lanes.
 
 ---
 
@@ -486,8 +486,8 @@ Local Studio same-machine path: Tauri → loopback → `agentsamd`. No VPC, Tunn
 
 ## 10d. Lane 1 — Identity portability — **DONE**
 
-Branch: `lane-1-identity-portability` from clean main `a5d58c0a347eaee4be2ca2fd1717acb0ae304643`.  
-Merged: PR [#86](https://github.com/SamPrimeaux/agentsam-sdk/pull/86) @ `99044cfcb14930f7bdcb6f1769aa20ed8abf8430` (merge commit `1b075a53`).  
+Branch: `lane-1-identity-portability` from clean main `a5d58c0a347eaee4be2ca2fd1717acb0ae304643`.
+Merged: PR [#86](https://github.com/SamPrimeaux/agentsam-sdk/pull/86) @ `99044cfcb14930f7bdcb6f1769aa20ed8abf8430` (merge commit `1b075a53`).
 CI: [36781550250](https://github.com/SamPrimeaux/agentsam-sdk/actions/runs/36781550250) **PASS** (verify, 4m22s) on PR HEAD `99044cfc`.
 
 **Product law:** IdentityStore behavior + schema-pack ownership are product authority. SQLite, D1, and IAM are adapters. Do not make Cloudflare/IAM table names the portable contract. Do not create a second Desktop OAuth authority. Do not rename/rebuild production IAM schema merely to match portable names.
@@ -538,18 +538,18 @@ CI: [36781550250](https://github.com/SamPrimeaux/agentsam-sdk/actions/runs/36781
 
 A product may claim `source_scaffold = ready` / graduate / appear as a first-class installable only when a current receipt says:
 
-- [ ] manifest validate PASS  
-- [ ] app architecture law PASS (or explicit non-graduated class)  
-- [ ] machine inspect PASS (incl. UTF-8 / parse)  
-- [ ] no personal leakage PASS  
-- [ ] no escaping `file:` deps PASS  
-- [ ] SQLite + D1 schema packs PASS (as claimed)  
-- [ ] scaffold isolation PASS (complete product extract)  
-- [ ] npm tarball install PASS  
-- [ ] doctor from clean install PASS  
-- [ ] frontend + backend build PASS  
-- [ ] Cloudflare dry-run PASS (if claimed)  
-- [ ] desktop parity PASS or N/A  
+- [ ] manifest validate PASS
+- [ ] app architecture law PASS (or explicit non-graduated class)
+- [ ] machine inspect PASS (incl. UTF-8 / parse)
+- [ ] no personal leakage PASS
+- [ ] no escaping `file:` deps PASS
+- [ ] SQLite + D1 schema packs PASS (as claimed)
+- [ ] scaffold isolation PASS (complete product extract)
+- [ ] npm tarball install PASS
+- [ ] doctor from clean install PASS
+- [ ] frontend + backend build PASS
+- [ ] Cloudflare dry-run PASS (if claimed)
+- [ ] desktop parity PASS or N/A
 
 Until then: develop in `apps/`, but **do not** advertise extract/install readiness.
 
@@ -557,8 +557,8 @@ Until then: develop in `apps/`, but **do not** advertise extract/install readine
 
 ## 12. Related docs
 
-- [apps/README.md](../apps/README.md) — product app ownership boundary  
-- Branch closure trail (IAM): `inneranimalmedia/docs/platform/BRANCH_DISPOSITION_20260930.md`  
+- [apps/README.md](../apps/README.md) — product app ownership boundary
+- Branch closure trail (IAM): `inneranimalmedia/docs/platform/BRANCH_DISPOSITION_20260930.md`
 - Work plan: Cursor `identity_portability_status` — **Lane 1 Identity DONE** (#86 @ `99044cfc` / main `1b075a53`); next is Lane 2 Desktop transport
 - Lane 0c project authority merged in #83 at `a6dee86d`; preserve its customer-repo/runtime discovery contract in every later lane
 - Lane 0d closes clean-checkout CI trust; do not reopen ExecOS/terminal implementation during Identity

package/docs/REPO_FILE_MAP.txt

@@ -59,8 +59,8 @@ this orientation map as revision authority.
   |   |-- local-studio, project-control, frontend, theme-gallery-preview
   |   |-- cad-creator, client-cms-editor, ecommerce-cms-agentsam
   |   |-- agentsam-go-worker, agentsamd
-  |   |-- church-site, companions-site, floors-site, fuelnfree-site,
-  |   |   handyman-site, insurance-site, shinshu-site
+  |   |-- cypress, violet, grove, ember,
+  |   |   forge, harbor, summit
   |   `-- _incoming/         Intake area
   |       App-specific frontend/backend/shared code and deployment configs stay
   |       with the app; see docs/architecture/AGENTSAM_APPLICATION_CONTRACT.md.
@@ -84,7 +84,6 @@ this orientation map as revision authority.
   |-- registry/              Tool and domain registries
   |-- examples/, assets/     Examples and shared assets
   |-- sites/                 Public-site source/content
-  |-- focus-timer/           Separate tracked top-level mini-app/site
   |-- .github/, .changeset/  CI workflows and release metadata
   `-- tags/                  Repository tag metadata
 

package/docs/SOURCE_ARCHITECTURE.md

@@ -36,7 +36,7 @@ Package behavior belongs with the package:
 packages/identity/tests/*
 packages/agentsam-contracts/test/*
 packages/agentsam-workbench/test/*
-packages/connectors/cloudflare/tests/*
+packages/connectors/cfoa/tests/*
 ```
 
 Root SDK tests should move toward explicit roles:

package/docs/THEME_REFINERY.md

@@ -26,9 +26,9 @@ apps/<sellable-theme>  +  @inneranimalmedia/theme-<slug>
 
 | Kind | Use when |
 |------|----------|
-| `app` | Sellable site/APP (`insurance-site`) |
+| `app` | Sellable site/APP (`harbor`) |
 | `theme` | Visual/design product or stock shell (`heuristic-theme`) |
-| `sdk-package` | npm boundary (`@inneranimalmedia/theme-insurance-site`) |
+| `sdk-package` | npm boundary (`@inneranimalmedia/theme-harbor`) |
 | `section` / `block` | Reusable CMS pieces (also may write `cms_component_templates`) |
 | `ui-component` | Header/nav shells extracted for reuse |
 | `integration` | Provider adapters (Resend, Square, …) |
@@ -44,7 +44,7 @@ UPSERT by stable `slug`. Never delete/recreate to refresh metadata.
 ### 1. `agentsam_products` — canonical identity
 
 - Resolve `repository_id` from live `code_repositories` (never invent IDs).
-- Set `canonical_path` (e.g. `apps/insurance-site`, `packages/theme-insurance-site`).
+- Set `canonical_path` (e.g. `apps/harbor`, `packages/theme-harbor`).
 - Rely on existing triggers for `defined_in` → `code_repository`.
 - Provenance in `metadata` only (no secrets). See `protocol/theme-refinery/product-metadata.schema.json`.
 
@@ -57,9 +57,9 @@ Preferred verbs already in use: `defined_in`, `depends_on`, `consumed_by`, `buil
 Example:
 
 ```
-insurance-site --sourced_from--> (evidence / donor path hash)
-insurance-site --packaged_as--> @inneranimalmedia/theme-insurance-site
-insurance-site --depends_on--> theme.storefront.shell / cms contracts
+harbor --sourced_from--> (evidence / donor path hash)
+harbor --packaged_as--> @inneranimalmedia/theme-harbor
+harbor --depends_on--> theme.storefront.shell / cms contracts
 ```
 
 ### 3. `agentsam_evidence_snapshots` — point-in-time proof