@inneranimalmedia/agentsam-sdk 2.6.2 → 2.6.4

package/migrations/d1/0012_agentsam_tools_required_seed.sql

@@ -0,0 +1,67 @@
+-- 0012_agentsam_tools_required_seed.sql
+-- Registers required tool_key stubs for new projects.
+-- Full handler schemas live in the host agentsam_tools registry; this seed
+-- guarantees GOAP / search_tools / multitask can resolve the required set.
+-- Idempotent: skips rows that already exist by tool_key.
+
+INSERT INTO agentsam_tools (
+  id, tool_name, tool_key, tool_code, display_name, tool_category,
+  handler_type, description, is_active, risk_level, domain, account_id
+)
+SELECT
+  'ast_req_' || lower(hex(randomblob(6))),
+  key,
+  key,
+  key,
+  key,
+  'platform',
+  'terminal',
+  'Required AgentSam tool seed · see registry/tools/required-seed.json',
+  1,
+  'low',
+  'general',
+  '*'
+FROM (
+  SELECT 'fs_read_file' AS key UNION ALL SELECT 'fs_write_file' UNION ALL SELECT 'fs_edit_file'
+  UNION ALL SELECT 'fs_list_dir' UNION ALL SELECT 'fs_search_files'
+  UNION ALL SELECT 'agentsam_filesystem_walk' UNION ALL SELECT 'agentsam_filesystem_stat_many'
+  UNION ALL SELECT 'agentsam_filesystem_hash_many' UNION ALL SELECT 'agentsam_filesystem_git_status'
+  UNION ALL SELECT 'agentsam_github_read' UNION ALL SELECT 'agentsam_github_write'
+  UNION ALL SELECT 'agentsam_github_pr' UNION ALL SELECT 'agentsam_github_pr_merge'
+  UNION ALL SELECT 'agentsam_github_issue' UNION ALL SELECT 'agentsam_github_search'
+  UNION ALL SELECT 'agentsam_github_tree' UNION ALL SELECT 'agentsam_github_read_many'
+  UNION ALL SELECT 'agentsam_github_patch' UNION ALL SELECT 'agentsam_github_grep'
+  UNION ALL SELECT 'agentsam_github_create_repo' UNION ALL SELECT 'agentsam_grep'
+  UNION ALL SELECT 'browser_navigate'
+  UNION ALL SELECT 'agentsam_memory_search' UNION ALL SELECT 'agentsam_memory_manager'
+  UNION ALL SELECT 'agentsam_memory_commit'
+  UNION ALL SELECT 'agentsam_d1_query' UNION ALL SELECT 'agentsam_d1_write'
+  UNION ALL SELECT 'agentsam_supabase_query' UNION ALL SELECT 'agentsam_supabase_write'
+  UNION ALL SELECT 'agentsam_supabase_vector'
+  UNION ALL SELECT 'agentsam_r2_get' UNION ALL SELECT 'agentsam_r2_put' UNION ALL SELECT 'agentsam_r2_delete'
+  UNION ALL SELECT 'agentsam_cf_vectorize' UNION ALL SELECT 'agentsam_cf_d1_list'
+  UNION ALL SELECT 'agentsam_cf_workers_list' UNION ALL SELECT 'agentsam_cf_worker_get'
+  UNION ALL SELECT 'agentsam_cf_worker_code'
+  UNION ALL SELECT 'agentsam_autorag'
+  UNION ALL SELECT 'agentsam_terminal_local' UNION ALL SELECT 'agentsam_terminal_sandbox'
+  UNION ALL SELECT 'agentsam_terminal_remote'
+  UNION ALL SELECT 'agentsam_create_subagent' UNION ALL SELECT 'agentsam_container_exec'
+  UNION ALL SELECT 'search_cloudflare_documentation' UNION ALL SELECT 'agentsam_spawn_tree'
+  UNION ALL SELECT 'agentsam_run_agent'
+  UNION ALL SELECT 'agentsam_ticket_list' UNION ALL SELECT 'agentsam_ticket_get'
+  UNION ALL SELECT 'agentsam_ticket_create' UNION ALL SELECT 'agentsam_ticket_set_status'
+  UNION ALL SELECT 'agentsam_code_interpreter'
+  UNION ALL SELECT 'cad_generate' UNION ALL SELECT 'cad_job_cancel' UNION ALL SELECT 'cad_job_status'
+  UNION ALL SELECT 'agentsam_search_tools'
+  UNION ALL SELECT 'agentsam_codebase_retrieve' UNION ALL SELECT 'agentsam_knowledge_ingest_segment'
+  UNION ALL SELECT 'agentsam_multitask_spawn' UNION ALL SELECT 'agentsam_multitask_status'
+  UNION ALL SELECT 'agentsam_multitask_cancel'
+  UNION ALL SELECT 'agentsam_merkle_build' UNION ALL SELECT 'agentsam_merkle_get'
+  UNION ALL SELECT 'agentsam_merkle_compare' UNION ALL SELECT 'agentsam_merkle_explain'
+  UNION ALL SELECT 'agentsam_merkle_delete'
+  UNION ALL SELECT 'agentsam_repo_intelligence' UNION ALL SELECT 'agentsam_code_index_build'
+  UNION ALL SELECT 'agentsam_repository_snapshot'
+) AS required
+WHERE NOT EXISTS (
+  SELECT 1 FROM agentsam_tools t WHERE t.tool_key = required.key OR t.tool_name = required.key
+);

package/migrations/d1/0013_identity_oauth_states.sql

@@ -0,0 +1,15 @@
+-- identity_oauth_states — PKCE state for /api/oauth/{provider}/start (identity login).
+-- Deliberately NOT named oauth_states (collides with Stripe Connect schema on this D1).
+-- Required for Sign in with Cloudflare on agentsam.inneranimalmedia.com.
+
+CREATE TABLE IF NOT EXISTS identity_oauth_states (
+  state TEXT PRIMARY KEY NOT NULL,
+  provider TEXT NOT NULL,
+  code_verifier TEXT NOT NULL,
+  redirect_to TEXT,
+  expires_at INTEGER NOT NULL,
+  created_at INTEGER NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_identity_oauth_states_expires
+  ON identity_oauth_states(expires_at);

package/migrations/d1/0014_auth_event_log.sql

@@ -0,0 +1,20 @@
+-- auth_event_log — append-only auth audit (identity package).
+-- status remains outcome-only (ok|failed). Rich context lives in metadata_json.
+
+CREATE TABLE IF NOT EXISTS auth_event_log (
+  id TEXT PRIMARY KEY NOT NULL,
+  user_id TEXT,
+  event_type TEXT NOT NULL,
+  status TEXT NOT NULL DEFAULT 'ok',
+  provider TEXT,
+  metadata_json TEXT NOT NULL DEFAULT '{}',
+  ip_hash TEXT,
+  user_agent_hash TEXT,
+  created_at INTEGER NOT NULL DEFAULT (unixepoch())
+);
+
+CREATE INDEX IF NOT EXISTS idx_auth_event_log_user_created
+  ON auth_event_log(user_id, created_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_auth_event_log_type_created
+  ON auth_event_log(event_type, created_at DESC);

package/migrations/d1/0015_identity_oauth_state_app_id.sql

@@ -0,0 +1,3 @@
+-- Optional app_id on OAuth PKCE state so post-login resumes the initiating app.
+
+ALTER TABLE identity_oauth_states ADD COLUMN app_id TEXT;

package/migrations/d1/README_PORTABLE_CONTROL_PLANE.md

@@ -0,0 +1,16 @@
+# Portable control-plane schemas (tickets · memory · skills · tools)
+
+Apply from the repo that owns the SQL (agentsam-sdk `migrations/d1/`).
+
+| File | Purpose |
+|------|---------|
+| `0010_portable_tickets_memory.sql` | Account-owned `agentsam_tickets` + events + `agentsam_memory` + outbox. `account_id` + `repository_id` **NOT NULL**. |
+| `0011_agentsam_skill_v2.sql` | Skill identity · metrics · retrieval (3-table redesign). Legacy hosts: rename old → `agentsam_skill_legacy`, backfill, verify. |
+| `0012_agentsam_tools_required_seed.sql` | Idempotent seed of required `tool_key` rows for GOAP / multitask. Manifest: `registry/tools/required-seed.json`. |
+
+## Law
+
+- **NULL `repository_id` on memory/ticket writes = broken implementation.** Resolve repo identity from `agentsam inspect` / snapshot before insert.
+- Customer tickets use **their** D1/SQLite — never IAM host ticket rows.
+- `agentsam_autorag` stays registered for A* planning even while multi-level retrieval is incomplete.
+- Skill publish uniqueness: partial unique on `slash_trigger WHERE is_published = 1` is included.

package/migrations/runtime/0001_cli_runtime.sql

@@ -191,6 +191,48 @@ CREATE TABLE IF NOT EXISTS agentsam_plans (
   updated_at_unix INTEGER NOT NULL DEFAULT (unixepoch())
 );
 
+-- GOAP ticket authority. Existing hosted deployments may already own this
+-- table; these columns mirror the live contract and let fresh SDK installs
+-- create portable, repository-scoped goals without a singleton fallback.
+CREATE TABLE IF NOT EXISTS agentsam_tickets (
+  id TEXT PRIMARY KEY,
+  title TEXT NOT NULL,
+  description TEXT,
+  status TEXT NOT NULL DEFAULT 'backlog'
+    CHECK(status IN ('backlog','active','blocked','shipped','abandoned')),
+  status_reason TEXT,
+  project TEXT,
+  subsystem TEXT,
+  tags TEXT,
+  priority TEXT NOT NULL DEFAULT 'P2',
+  doc_path TEXT,
+  blocks TEXT,
+  blocked_by TEXT,
+  supersedes TEXT,
+  created_at INTEGER NOT NULL DEFAULT (unixepoch()),
+  updated_at INTEGER NOT NULL DEFAULT (unixepoch()),
+  closed_at INTEGER,
+  dedup_key TEXT,
+  description_json TEXT,
+  surface TEXT NOT NULL DEFAULT 'platform',
+  owner_kind TEXT NOT NULL DEFAULT 'unassigned',
+  owner_ref TEXT,
+  account_id TEXT,
+  repository_id TEXT,
+  parent_ticket_id TEXT,
+  agent_run_id TEXT REFERENCES agentsam_agent_run(id) ON DELETE SET NULL,
+  worktree TEXT,
+  linked_commit TEXT,
+  source TEXT NOT NULL DEFAULT 'manual'
+);
+
+CREATE INDEX IF NOT EXISTS idx_agentsam_tickets_owner_updated
+  ON agentsam_tickets(owner_ref, updated_at DESC);
+CREATE INDEX IF NOT EXISTS idx_agentsam_tickets_account_repository
+  ON agentsam_tickets(account_id, repository_id, updated_at DESC);
+CREATE INDEX IF NOT EXISTS idx_agentsam_tickets_status_priority
+  ON agentsam_tickets(status, priority, updated_at DESC);
+
 CREATE TABLE IF NOT EXISTS agentsam_todo (
   id TEXT PRIMARY KEY,
   account_id TEXT,
@@ -296,3 +338,28 @@ CREATE TABLE IF NOT EXISTS agentsam_cron_runs (
 
 CREATE INDEX IF NOT EXISTS idx_agentsam_cron_runs_job_started
   ON agentsam_cron_runs(job_name, started_at DESC);
+
+CREATE TABLE IF NOT EXISTS agentsam_workspace_state (
+  id                TEXT PRIMARY KEY DEFAULT ('wss_' || lower(hex(randomblob(8)))),
+  repository_id     TEXT UNIQUE,
+  workspace_id      TEXT,
+  conversation_id   TEXT,
+  workspace_type    TEXT NOT NULL DEFAULT 'ide',
+  active_file       TEXT,
+  files_open        TEXT NOT NULL DEFAULT '[]',
+  state_json        TEXT NOT NULL DEFAULT '{}',
+  locked_by         TEXT,
+  lock_expires_at   INTEGER,
+  lock_reason       TEXT,
+  agent_session_id  TEXT,
+  current_task_id   TEXT,
+  last_agent_action TEXT,
+  agent_id          TEXT,
+  checkpoint_label  TEXT,
+  checkpoint_sha    TEXT,
+  created_at        INTEGER NOT NULL DEFAULT (unixepoch()),
+  updated_at        INTEGER NOT NULL DEFAULT (unixepoch())
+);
+
+CREATE INDEX IF NOT EXISTS idx_agentsam_workspace_state_repo
+  ON agentsam_workspace_state(repository_id);

package/migrations/runtime/0002_project_sessions.sql

@@ -0,0 +1,15 @@
+-- Resumable local ProjectSession state shares the canonical project database.
+-- Session JSON is bounded operational state, not a transcript or credential vault.
+CREATE TABLE IF NOT EXISTS agentsam_project_sessions (
+  id TEXT PRIMARY KEY NOT NULL,
+  project_root TEXT NOT NULL,
+  cwd TEXT NOT NULL,
+  status TEXT NOT NULL CHECK (status IN ('active','paused','interrupted','completed')),
+  title TEXT NOT NULL DEFAULT 'Agent Sam session',
+  state_json TEXT NOT NULL,
+  lifecycle TEXT NOT NULL DEFAULT 'session' CHECK (lifecycle = 'session'),
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+CREATE INDEX IF NOT EXISTS idx_agentsam_project_sessions_updated
+  ON agentsam_project_sessions(updated_at DESC);

package/migrations/runtime/0003_provider_continuations.sql

@@ -0,0 +1,8 @@
+-- Session-scoped provider continuation, separate from generic state and knowledge.
+-- Replaced by each compaction and deleted after a successful provider continuation.
+CREATE TABLE IF NOT EXISTS agentsam_provider_continuations (
+  session_id TEXT PRIMARY KEY REFERENCES agentsam_project_sessions(id) ON DELETE CASCADE,
+  provider TEXT NOT NULL,
+  output_json TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);

package/migrations/sqlite/agentsam_skill_retrieval.portable.sql

@@ -0,0 +1,42 @@
+-- Portable local skill retrieval shape (NOT applied to IAM D1 as-is).
+-- strategy ≠ provider_id ≠ driver_id ≠ accelerator_ref ≠ embedding_profile_id
+-- Hyperdrive is accelerator_ref, never a provider.
+
+CREATE TABLE IF NOT EXISTS agentsam_skill_retrieval (
+  id                   TEXT PRIMARY KEY,
+  skill_id             TEXT NOT NULL,
+
+  strategy             TEXT NOT NULL CHECK (
+    strategy IN (
+      'relational',
+      'object_store',
+      'vector_index',
+      'filesystem'
+    )
+  ),
+
+  provider_id          TEXT NOT NULL,
+  driver_id            TEXT NOT NULL,
+
+  connection_ref       TEXT,
+  accelerator_ref      TEXT,
+
+  embedding_profile_id TEXT,
+
+  index_name           TEXT,
+  namespace            TEXT,
+
+  is_primary           INTEGER NOT NULL DEFAULT 0,
+
+  config_json          TEXT NOT NULL DEFAULT '{}',
+
+  last_synced_at       TEXT,
+  created_at           TEXT NOT NULL DEFAULT (datetime('now')),
+  updated_at           TEXT NOT NULL DEFAULT (datetime('now'))
+);
+
+CREATE INDEX IF NOT EXISTS idx_skill_retrieval_skill
+  ON agentsam_skill_retrieval(skill_id);
+
+CREATE UNIQUE INDEX IF NOT EXISTS idx_skill_retrieval_primary
+  ON agentsam_skill_retrieval(skill_id) WHERE is_primary = 1;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inneranimalmedia/agentsam-sdk",
-  "version": "2.6.2",
+  "version": "2.6.4",
   "description": "Portable AgentSam SDK and CLI kits for local scaffolding, repository intelligence, incremental indexing, identity adapters, and verified dependency maintenance.",
   "type": "module",
   "main": "./src/index.js",
@@ -14,10 +14,24 @@
     "./merkle": "./packages/agentsam-repository/src/merkle/index.js",
     "./deploy-receipt": "./src/lib/deploy-receipt/index.js",
     "./knowledge": "./src/knowledge/index.js",
+    "./autorag": "./packages/agentsam-knowledge/src/autorag/index.js",
     "./knowledge-service-client": "./src/knowledge/service/client.js",
     "./knowledge-service-grpc-client": "./src/knowledge/service/grpc-client.js",
     "./capabilities": "./src/capabilities/index.js",
     "./capability-manifest": "./protocol/capabilities/manifest.json",
+    "./sam": "./src/sam/index.js",
+    "./sam/operation-schema": "./protocol/sam/operation.schema.json",
+    "./sam/result-schema": "./protocol/sam/result.schema.json",
+    "./sam/registry-seed": "./protocol/sam/registry.seed.json",
+    "./sam/state-schema": "./protocol/sam/state.v1.schema.json",
+    "./sam/question-schema": "./protocol/sam/question.v1.schema.json",
+    "./sam/answer-schema": "./protocol/sam/answer.v1.schema.json",
+    "./sam/evaluation-schema": "./protocol/sam/evaluation.v1.schema.json",
+    "./sam/decision-receipt-schema": "./protocol/sam/decision-receipt.v1.schema.json",
+    "./sam/outcome-schema": "./protocol/sam/outcome.v1.schema.json",
+    "./sam/calibration-schema": "./protocol/sam/calibration.v1.schema.json",
+    "./sam/activity-schema": "./protocol/sam/activity.v1.schema.json",
+    "./errors/recovery-schema": "./protocol/errors/recovery.v1.schema.json",
     "./repository": "./src/repository/index.js",
     "./repository/contracts": "./packages/agentsam-repository/src/contracts.js",
     "./repository/identity-schema": "./protocol/repository/repository-identity.schema.json",
@@ -26,11 +40,14 @@
     "./agent": "./src/agent/index.js",
     "./presets": "./src/presets/index.js",
     "./preset-catalog": "./protocol/presets/catalog.json",
+    "./brand": "./packages/agentsam-brand/src/index.js",
+    "./progression": "./src/progression/index.js",
     "./identity": "./packages/identity/src/index.js",
     "./identity/providers": "./packages/identity/src/providers/index.js",
     "./identity/providers/google": "./packages/identity/src/providers/google/index.js",
     "./identity/providers/github": "./packages/identity/src/providers/github/index.js",
     "./identity/providers/iam": "./packages/identity/src/providers/iam/index.js",
+    "./identity/providers/cloudflare": "./packages/identity/src/providers/cloudflare/index.js",
     "./identity/providers/gcp": "./packages/identity/src/providers/gcp/index.js",
     "./identity/providers/email": "./packages/identity/src/providers/email/index.js",
     "./identity/contracts/identity": "./packages/identity/src/contracts/identity.js",
@@ -55,17 +72,38 @@
     "./context": "./src/context/index.js",
     "./indexing": "./src/indexing/index.js",
     "./tools": "./src/tools/index.js",
+    "./plugins": "./src/plugins/index.js",
     "./models": "./src/models/index.js",
     "./telemetry": "./src/telemetry/index.js",
     "./providers": "./src/providers/index.js",
+    "./work-graph": "./packages/work-graph/src/index.js",
+    "./queue-control": "./packages/agentsam-queue-control/src/index.js",
+    "./work-graph/renderers/timeline": "./packages/work-graph/src/renderers/timeline.js",
+    "./work-graph/renderers/gantt-model": "./packages/work-graph/src/renderers/gantt-model.js",
+    "./work-graph/adapters/engineering/git": "./packages/work-graph/src/adapters/engineering/git.js",
+    "./work-graph/adapters/engineering/mcp": "./packages/work-graph/src/adapters/engineering/mcp.js",
+    "./work-graph/adapters/business/projects": "./packages/work-graph/src/adapters/business/projects.js",
     "./errors": "./src/errors/index.js",
+    "./errors/schema": "./protocol/errors/error-envelope.schema.json",
+    "./errors/catalog": "./protocol/errors/error-catalog.json",
     "./cloudflare": "./src/cloudflare/index.js",
     "./eval": "./src/eval/index.js",
+    "./mcp": "./src/mcp/index.js",
     "./context/result-policy-schema": "./protocol/context/result-policy.schema.json",
     "./context/budget-schema": "./protocol/context/context-budget.schema.json",
     "./context/pack-schema": "./protocol/context/resolved-context-pack.schema.json",
     "./skills": "./src/skills/index.js",
-    "./skills/catalog": "./skills/catalog.json"
+    "./skills/catalog": "./skills/catalog.json",
+    "./cad-project": "./src/lib/cad/project-cli.js",
+    "./providers/completeful": "./packages/providers/completeful/src/index.js",
+    "./theme/heuristic": "./packages/heuristic-theme/src/index.js",
+    "./theme/church-site": "./packages/theme-church-site/src/index.js",
+    "./theme/companions-site": "./packages/theme-companions-site/src/index.js",
+    "./theme/floors-site": "./packages/theme-floors-site/src/index.js",
+    "./theme/fuelnfree-site": "./packages/theme-fuelnfree-site/src/index.js",
+    "./theme/handyman-site": "./packages/theme-handyman-site/src/index.js",
+    "./theme/insurance-site": "./packages/theme-insurance-site/src/index.js",
+    "./theme/shinshu-site": "./packages/theme-shinshu-site/src/index.js"
   },
   "bin": {
     "agentsam": "bin/agentsam",
@@ -76,8 +114,18 @@
   "files": [
     "src",
     "packages/identity",
+    "packages/agentsam-brand",
+    "packages/agentsam-contracts",
+    "packages/agentsam-errors",
     "packages/agentsam-repository",
+    "packages/agentsam-knowledge",
+    "packages/agentsam-nav/package.json",
+    "packages/agentsam-nav/README.md",
+    "packages/agentsam-nav/dist",
+    "packages/work-graph",
+    "packages/agentsam-queue-control",
     "packages/connectors/cloudflare",
+    "packages/providers/completeful",
     "templates",
     "docs",
     "examples",
@@ -94,17 +142,43 @@
     "README.md",
     "LICENSE",
     "DEVELOPMENT.md",
-    "AGENTSAM.md"
+    "AGENTSAM.md",
+    "apps/cad-creator/shared/cad",
+    "packages/heuristic-theme",
+    "packages/theme-church-site",
+    "packages/theme-companions-site",
+    "packages/theme-floors-site",
+    "packages/theme-fuelnfree-site",
+    "packages/theme-handyman-site",
+    "packages/theme-insurance-site",
+    "packages/theme-shinshu-site"
   ],
   "workspaces": [
     "packages/agentsam-shell-kit",
     "packages/identity",
+    "packages/agentsam-brand",
     "packages/agentsam-contracts",
+    "packages/agentsam-errors",
     "packages/agentsam-repository",
-    "packages/agentsam-workbench"
+    "packages/agentsam-knowledge",
+    "packages/agentsam-nav",
+    "packages/work-graph",
+    "packages/agentsam-queue-control",
+    "packages/agentsam-workbench",
+    "packages/providers/completeful",
+    "packages/agentsam-desktop-shell",
+    "packages/heuristic-theme",
+    "packages/theme-church-site",
+    "packages/theme-companions-site",
+    "packages/theme-floors-site",
+    "packages/theme-fuelnfree-site",
+    "packages/theme-handyman-site",
+    "packages/theme-insurance-site",
+    "packages/theme-shinshu-site"
   ],
   "scripts": {
-    "test": "npm run test:standard && npm --prefix packages/identity test && npm run test:connectors",
+    "test": "npm run test:standard && npm --prefix packages/identity test && npm --prefix packages/agentsam-brand test && npm run test:connectors && npm run test:providers",
+    "test:brand": "npm --prefix packages/agentsam-brand test",
     "test:standard": "node test/smoke.mjs && npm run test:unit && npm run test:cli && npm run test:integration:mock && npm run test:terminal:mock",
     "test:unit": "node --test test/*.test.mjs",
     "test:cli": "node --test test/cli/*.test.mjs",
@@ -112,28 +186,40 @@
     "test:terminal:mock": "node --test test/terminal/*.test.mjs",
     "test:live:terminal": "node --test test/live/*.live.test.mjs",
     "test:identity": "npm --prefix packages/identity test",
-    "test:workspaces": "npm --prefix packages/agentsam-contracts test && npm --prefix packages/agentsam-contracts run typecheck && npm --prefix packages/agentsam-repository test && npm --prefix packages/agentsam-workbench test && npm --prefix packages/agentsam-workbench run typecheck && npm --prefix packages/agentsam-shell-kit run typecheck",
+    "test:workspaces": "npm --prefix packages/agentsam-contracts test && npm --prefix packages/agentsam-contracts run typecheck && npm --prefix packages/agentsam-errors test && npm --prefix packages/agentsam-repository test && npm --prefix packages/agentsam-workbench test && npm --prefix packages/agentsam-workbench run typecheck && npm --prefix packages/agentsam-nav run typecheck && npm --prefix packages/agentsam-shell-kit run typecheck && npm --prefix packages/work-graph test && npm --prefix packages/agentsam-queue-control test",
+    "test:autorag": "npm --prefix packages/agentsam-knowledge test",
     "smoke": "node test/smoke.mjs",
     "verify:package": "node scripts/verify-package.mjs",
     "verify:boundaries": "node scripts/verify-source-boundaries.mjs",
     "verify:bootstrap": "node scripts/verify-bootstrap.mjs",
-    "verify:knowledge-package": "node scripts/verify-knowledge-package.mjs",
+    "verify:knowledge-package": "node scripts/verify-knowledge-package.mjs && npm run test:autorag",
     "test:python": "node scripts/verify-python.mjs",
     "verify:release": "npm run verify && npm run verify:knowledge-package && npm run test:python && npm run security:check",
-    "pack:check": "npm pack --dry-run --json",
-    "verify": "npm run proto:check && npm test && npm run test:workspaces && npm run verify:boundaries && npm run verify:package && npm run verify:bootstrap && npm run pack:check",
+    "pack:check": "node scripts/verify-pack.mjs",
+    "verify": "npm run errors:check && npm run proto:check && npm test && npm run test:workspaces && npm run cad:registry:check && npm run verify:boundaries && npm run verify:package && npm run verify:bootstrap && npm run pack:check",
     "publish:identity-alpha": "bash scripts/publish-identity-alpha.sh",
     "publish:identity-alpha:dry-run": "bash scripts/publish-identity-alpha.sh --dry-run",
     "publish:identity-alpha:publish-only": "bash scripts/publish-identity-alpha.sh --publish-only",
     "preview:auth-portal": "node packages/identity/scripts/preview-auth-portal.mjs --open",
-    "prepublishOnly": "npm run verify:release",
+    "prepublishOnly": "npm run site:sync && npm run verify:release",
+    "site:sync": "node scripts/sync-public-site.mjs",
+    "site:learn": "node scripts/build-learn-site.mjs",
+    "site:sam-docs": "node scripts/build-sam-docs.mjs",
+    "site:publish": "node scripts/publish-website-assets.mjs",
     "security:check": "node src/security/cli.mjs scan",
     "security:repair": "node src/security/cli.mjs repair",
     "ui:preview": "node scripts/ui-preview.mjs",
     "test:connectors": "node --test packages/connectors/cloudflare/tests/**/*.test.mjs",
     "verify:npm10-lock": "node apps/local-studio/scripts/verify-npm10-lock.mjs",
     "proto:generate": "node scripts/generate-proto.mjs",
-    "proto:check": "node scripts/verify-proto.mjs"
+    "proto:check": "node scripts/verify-proto.mjs",
+    "errors:generate": "node scripts/generate-error-contracts.mjs",
+    "errors:check": "node scripts/verify-error-contracts.mjs",
+    "cad:registry:check": "node scripts/cad-registry.mjs --check",
+    "test:providers": "node --test packages/providers/completeful/test/*.test.mjs",
+    "test:themes": "npm --prefix packages/heuristic-theme test && npm --prefix packages/theme-church-site test && npm --prefix packages/theme-companions-site test && npm --prefix packages/theme-floors-site test && npm --prefix packages/theme-fuelnfree-site test && npm --prefix packages/theme-handyman-site test && npm --prefix packages/theme-insurance-site test && npm --prefix packages/theme-shinshu-site test",
+    "theme:harvest": "python3 scripts/theme-refinery/harvest.py",
+    "verify:go-distribution": "node scripts/verify-go-distribution.mjs"
   },
   "engines": {
     "node": ">=22 <25",
@@ -142,11 +228,13 @@
   "dependencies": {
     "@clack/prompts": "^1.7.0",
     "@grpc/grpc-js": "^1.14.4",
+    "@modelcontextprotocol/sdk": "^1.30.0",
     "google-protobuf": "^3.21.4",
     "node-pty": "^1.0.0",
     "pg": "8.16.3",
     "picocolors": "^1.1.1",
     "typescript": "5.9.3",
+    "wrangler": "4.140.0",
     "ws": "^8.18.0"
   },
   "publishConfig": {
@@ -172,9 +260,16 @@
   },
   "homepage": "https://github.com/SamPrimeaux/agentsam-sdk#readme",
   "allowScripts": {
-    "node-pty@1.1.0": true
+    "node-pty@1.1.0": true,
+    "grpc-tools@1.13.1": true,
+    "protobufjs@7.6.6": true,
+    "esbuild@0.28.1": true,
+    "fsevents@2.3.3": true,
+    "workerd@1.20260923.1": true
   },
   "devDependencies": {
+    "@changesets/changelog-github": "^1.0.1",
+    "@changesets/cli": "^3.0.3",
     "@electric-sql/pglite": "0.5.8",
     "@electric-sql/pglite-pgvector": "0.0.9",
     "grpc-tools": "^1.13.1"

package/packages/agentsam-brand/README.md

@@ -0,0 +1,21 @@
+# @inneranimalmedia/agentsam-sdk-brand
+
+Deterministic **Brand Intelligence** for AgentSam.
+
+```text
+repository.snapshot  →  brand.scan  →  brand.resolve  →  brand.plan  →  (apply/verify)
+```
+
+- **Brand ≠ Theme.** Theme is a projection; Brand is authority.
+- **No LLM required** for scan/resolve/plan skeleton.
+- **Same file authority** as security/knowledge (Merkle + gitignore via snapshot).
+- States stay separated: `observed` → `inferred` → `declared` → `resolved`.
+
+```bash
+agentsam brand scan --json
+agentsam brand resolve
+agentsam plan brand --goap
+agentsam brand --write   # writes .agentsam/brand/{evidence,resolved,contract}.json
+```
+
+Progression (generic, not brand-only): `@inneranimalmedia/agentsam-sdk/progression`

package/packages/agentsam-brand/package.json

@@ -0,0 +1,22 @@
+{
+  "name": "@inneranimalmedia/agentsam-sdk-brand",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "description": "Deterministic Brand Intelligence for AgentSam — scan/resolve/contract evidence on shared repository.snapshot authority",
+  "main": "./src/index.js",
+  "exports": {
+    ".": "./src/index.js",
+    "./scan": "./src/scan.js",
+    "./resolve": "./src/resolve.js",
+    "./contract": "./src/contract.js",
+    "./plan": "./src/plan.js",
+    "./goap-actions": "./src/goap-actions.js"
+  },
+  "scripts": {
+    "test": "node --test test/*.test.mjs"
+  },
+  "engines": {
+    "node": ">=22 <25"
+  }
+}

package/packages/agentsam-brand/src/contract.js

@@ -0,0 +1,59 @@
+/**
+ * Draft Brand Contract from scan + resolve (observed/inferred; declared empty until user answers).
+ */
+export function buildBrandContractDraft({ scan, resolved, brandId = 'brand:inferred' } = {}) {
+  if (!scan || scan.capability !== 'brand.scan') throw new Error('contract_requires_scan');
+  if (!resolved || resolved.capability !== 'brand.resolve') throw new Error('contract_requires_resolve');
+
+  return {
+    schema: 'agentsam.contract/v1',
+    kind: 'brand',
+    id: brandId,
+    version: '0.1.0',
+    status: 'draft',
+    extends: [],
+    origin: {
+      mode: 'inferred',
+      repository_snapshot: scan.repository?.snapshot_id || null,
+      scan_content_hash: scan.content_hash,
+      resolve_from: resolved.scan_content_hash,
+    },
+    confidence: resolved.confidence,
+    preservation: resolved.preservation,
+    visual_system: {
+      colors: {
+        observed: resolved.observed.colors,
+        inferred: resolved.inferred.colors,
+        declared: resolved.declared,
+        resolved: resolved.resolved.colors,
+      },
+      typography: {
+        observed: resolved.observed.typography,
+        inferred: resolved.inferred.typography,
+      },
+    },
+    components: {
+      patterns: scan.patterns,
+      inventory: Object.keys(scan.components || {}),
+    },
+    assets: scan.assets,
+    ambiguities: resolved.ambiguities,
+    metadata: {
+      generated_by: 'brand.scan+brand.resolve',
+      deterministic: true,
+    },
+  };
+}
+
+export function writeBrandArtifacts(rootFs, rootPath, { evidence, resolved, contract }) {
+  const path = rootFs.path || null;
+  // caller passes node:fs + path — keep pure write helper
+  const fs = rootFs.fs || rootFs;
+  const join = rootFs.join || ((...parts) => parts.join('/'));
+  const dir = join(rootPath, '.agentsam', 'brand');
+  fs.mkdirSync(dir, { recursive: true });
+  if (evidence) fs.writeFileSync(join(dir, 'evidence.json'), `${JSON.stringify(evidence, null, 2)}\n`);
+  if (resolved) fs.writeFileSync(join(dir, 'resolved.json'), `${JSON.stringify(resolved, null, 2)}\n`);
+  if (contract) fs.writeFileSync(join(dir, 'contract.json'), `${JSON.stringify(contract, null, 2)}\n`);
+  return { dir, files: ['evidence.json', 'resolved.json', 'contract.json'].filter(Boolean) };
+}