@koda-sl/baker-bridge 0.68.1 → 0.68.2

package/dist/hono/slash-command-allowlist.js

@@ -0,0 +1,42 @@
+import { readdir } from "node:fs/promises";
+import { join } from "node:path";
+import { z } from "zod";
+import { bridgeSlashCommandNames } from "./slash-commands.js";
+// Format renderers that the document-build skill routes to on the user's behalf.
+// They are real workspace skills, but nobody invokes them by name.
+const ROUTED_ONLY_SKILLS = new Set(["docx", "pdf", "pptx", "xlsx"]);
+const errnoSchema = z.object({ code: z.string() });
+/**
+ * Directory names are the command names: the SDK names a command from SKILL.md
+ * frontmatter, and scripts/check-skills.mjs fails the build when that `name`
+ * differs from its directory, so reading the directory avoids parsing 24 files.
+ *
+ * An absent directory means "no skills"; any other failure must propagate so a
+ * stale-but-good list is kept.
+ */
+async function readSkillDirNames(skillsDir) {
+    try {
+        const entries = await readdir(skillsDir, { withFileTypes: true });
+        return entries.filter((entry) => entry.isDirectory()).map((entry) => entry.name);
+    }
+    catch (error) {
+        if (errnoSchema.safeParse(error).data?.code === "ENOENT") {
+            return [];
+        }
+        throw error;
+    }
+}
+/** Names the sandbox picker is allowed to show: the workspace's own skills plus the bridge's own commands. */
+export async function readAllowedSlashCommandNames(projectRoot) {
+    const allowed = new Set(bridgeSlashCommandNames());
+    for (const name of await readSkillDirNames(join(projectRoot, ".claude", "skills"))) {
+        if (!ROUTED_ONLY_SKILLS.has(name)) {
+            allowed.add(name);
+        }
+    }
+    return allowed;
+}
+export function filterAllowedSlashCommands(commands, allowedNames) {
+    return commands.filter((command) => allowedNames.has(command.name));
+}
+//# sourceMappingURL=slash-command-allowlist.js.map

package/dist/hono/slash-command-allowlist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slash-command-allowlist.js","sourceRoot":"","sources":["../../src/hono/slash-command-allowlist.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,iFAAiF;AACjF,mEAAmE;AACnE,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEzF,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEnD;;;;;;;GAOG;AACH,KAAK,UAAU,iBAAiB,CAAC,SAAiB;IAChD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YACzD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,8GAA8G;AAC9G,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,WAAmB;IACpE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,uBAAuB,EAAE,CAAC,CAAC;IAE3D,KAAK,MAAM,IAAI,IAAI,MAAM,iBAAiB,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QACnF,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,QAAwB,EACxB,YAAiC;IAEjC,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AACtE,CAAC"}

package/dist/hono/slash-command-allowlist.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=slash-command-allowlist.test.d.ts.map

package/dist/hono/slash-command-allowlist.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slash-command-allowlist.test.d.ts","sourceRoot":"","sources":["../../src/hono/slash-command-allowlist.test.ts"],"names":[],"mappings":""}

package/dist/hono/slash-command-allowlist.test.js

@@ -0,0 +1,44 @@
+import { mkdir, mkdtemp, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { describe, expect, it } from "vitest";
+import { filterAllowedSlashCommands, readAllowedSlashCommandNames } from "./slash-command-allowlist.js";
+async function makeProjectRoot(skillNames) {
+    const root = await mkdtemp(join(tmpdir(), "baker-allowlist-"));
+    for (const name of skillNames) {
+        await mkdir(join(root, ".claude", "skills", name), { recursive: true });
+    }
+    return root;
+}
+const command = (name) => ({ name, description: name, argumentHint: "" });
+describe("filterAllowedSlashCommands", () => {
+    it("drops commands whose name is not allowed", () => {
+        const landing = command("landing");
+        const commands = [command("model"), command("clear"), command("doctor"), landing];
+        expect(filterAllowedSlashCommands(commands, new Set(["landing"]))).toEqual([landing]);
+    });
+});
+describe("readAllowedSlashCommandNames", () => {
+    it("allows workspace skills found on disk plus the bridge's own commands", async () => {
+        const projectRoot = await makeProjectRoot(["landing", "brand-build"]);
+        const allowed = await readAllowedSlashCommandNames(projectRoot);
+        expect(allowed).toEqual(new Set(["landing", "brand-build", "compact", "publish"]));
+    });
+    it("hides workspace skills the user never invokes directly", async () => {
+        const projectRoot = await makeProjectRoot(["landing", "docx", "pdf", "pptx", "xlsx"]);
+        const allowed = await readAllowedSlashCommandNames(projectRoot);
+        expect(allowed).toEqual(new Set(["landing", "compact", "publish"]));
+    });
+    it("fails closed when the skills directory is missing", async () => {
+        const projectRoot = await mkdtemp(join(tmpdir(), "baker-no-skills-"));
+        const allowed = await readAllowedSlashCommandNames(projectRoot);
+        expect(allowed).toEqual(new Set(["compact", "publish"]));
+    });
+    it("rejects when the skills directory cannot be read for a reason other than absence", async () => {
+        const projectRoot = await mkdtemp(join(tmpdir(), "baker-unreadable-skills-"));
+        await mkdir(join(projectRoot, ".claude"), { recursive: true });
+        await writeFile(join(projectRoot, ".claude", "skills"), "not a directory");
+        await expect(readAllowedSlashCommandNames(projectRoot)).rejects.toThrow();
+    });
+});
+//# sourceMappingURL=slash-command-allowlist.test.js.map

package/dist/hono/slash-command-allowlist.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slash-command-allowlist.test.js","sourceRoot":"","sources":["../../src/hono/slash-command-allowlist.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAExG,KAAK,UAAU,eAAe,CAAC,UAAoB;IACjD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC/D,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,IAAY,EAAgB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;AAEhG,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;QAElF,MAAM,CAAC,0BAA0B,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;QAEtE,MAAM,OAAO,GAAG,MAAM,4BAA4B,CAAC,WAAW,CAAC,CAAC;QAEhE,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAEtF,MAAM,OAAO,GAAG,MAAM,4BAA4B,CAAC,WAAW,CAAC,CAAC;QAEhE,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAEtE,MAAM,OAAO,GAAG,MAAM,4BAA4B,CAAC,WAAW,CAAC,CAAC;QAEhE,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;QAC9E,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAE3E,MAAM,MAAM,CAAC,4BAA4B,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/hono/slash-commands.d.ts

@@ -2,6 +2,8 @@ export declare enum BridgeSlashCommands {
     Publish = "/publish",
     Compact = "/compact"
 }
+/** Bare names (no leading slash) of the commands the bridge itself handles. */
+export declare function bridgeSlashCommandNames(): string[];
 export declare function verbatimSlashCommand(prompt: string): BridgeSlashCommands | null;
 export declare function isVerbatimSlashCommandPrompt(prompt: string): boolean;
 export declare function isPublishCommandPrompt(prompt: string): boolean;

package/dist/hono/slash-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"slash-commands.d.ts","sourceRoot":"","sources":["../../src/hono/slash-commands.ts"],"names":[],"mappings":"AAAA,oBAAY,mBAAmB;IAC7B,OAAO,aAAa;IACpB,OAAO,aAAa;CACrB;AASD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAG/E;AAED,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEpE;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAE9D"}
+{"version":3,"file":"slash-commands.d.ts","sourceRoot":"","sources":["../../src/hono/slash-commands.ts"],"names":[],"mappings":"AAAA,oBAAY,mBAAmB;IAC7B,OAAO,aAAa;IACpB,OAAO,aAAa;CACrB;AASD,+EAA+E;AAC/E,wBAAgB,uBAAuB,IAAI,MAAM,EAAE,CAElD;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAG/E;AAED,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEpE;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAE9D"}

package/dist/hono/slash-commands.js

@@ -9,6 +9,10 @@ export var BridgeSlashCommands;
 // rehydration — any of which would push the command off the front and turn it
 // into ordinary message text the model just echoes.
 const VERBATIM_COMMANDS = [BridgeSlashCommands.Publish, BridgeSlashCommands.Compact];
+/** Bare names (no leading slash) of the commands the bridge itself handles. */
+export function bridgeSlashCommandNames() {
+    return VERBATIM_COMMANDS.map((command) => command.replace("/", ""));
+}
 export function verbatimSlashCommand(prompt) {
     const trimmedPrompt = prompt.trim();
     return VERBATIM_COMMANDS.find((command) => command === trimmedPrompt) ?? null;

package/dist/hono/slash-commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"slash-commands.js","sourceRoot":"","sources":["../../src/hono/slash-commands.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,mBAGX;AAHD,WAAY,mBAAmB;IAC7B,2CAAoB,CAAA;IACpB,2CAAoB,CAAA;AACtB,CAAC,EAHW,mBAAmB,KAAnB,mBAAmB,QAG9B;AAED,8EAA8E;AAC9E,8EAA8E;AAC9E,sEAAsE;AACtE,8EAA8E;AAC9E,oDAAoD;AACpD,MAAM,iBAAiB,GAAmC,CAAC,mBAAmB,CAAC,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAErH,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IACpC,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,aAAa,CAAC,IAAI,IAAI,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,MAAc;IACzD,OAAO,oBAAoB,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,OAAO,oBAAoB,CAAC,MAAM,CAAC,KAAK,mBAAmB,CAAC,OAAO,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,OAAO,oBAAoB,CAAC,MAAM,CAAC,KAAK,mBAAmB,CAAC,OAAO,CAAC;AACtE,CAAC"}
+{"version":3,"file":"slash-commands.js","sourceRoot":"","sources":["../../src/hono/slash-commands.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,mBAGX;AAHD,WAAY,mBAAmB;IAC7B,2CAAoB,CAAA;IACpB,2CAAoB,CAAA;AACtB,CAAC,EAHW,mBAAmB,KAAnB,mBAAmB,QAG9B;AAED,8EAA8E;AAC9E,8EAA8E;AAC9E,sEAAsE;AACtE,8EAA8E;AAC9E,oDAAoD;AACpD,MAAM,iBAAiB,GAAmC,CAAC,mBAAmB,CAAC,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAErH,+EAA+E;AAC/E,MAAM,UAAU,uBAAuB;IACrC,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IACpC,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,aAAa,CAAC,IAAI,IAAI,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,MAAc;IACzD,OAAO,oBAAoB,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,OAAO,oBAAoB,CAAC,MAAM,CAAC,KAAK,mBAAmB,CAAC,OAAO,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,OAAO,oBAAoB,CAAC,MAAM,CAAC,KAAK,mBAAmB,CAAC,OAAO,CAAC;AACtE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@koda-sl/baker-bridge",
-  "version": "0.68.1",
+  "version": "0.68.2",
   "description": "HTTP server wrapping the Claude Agent SDK. Persists chat events to Convex; the dashboard subscribes via Convex realtime",
   "license": "MIT",
   "type": "module",
@@ -14,8 +14,7 @@
     }
   },
   "files": [
-    "dist",
-    "plugins"
+    "dist"
   ],
   "engines": {
     "node": ">=18"
@@ -38,9 +37,9 @@
     "typecheck": "tsc --noEmit",
     "link:local": "bash scripts/link-local.sh",
     "unlink:local": "bash scripts/unlink-local.sh",
-    "lint": "biome check src scripts plugins vitest.config.mts",
-    "format:check": "biome format src scripts plugins vitest.config.mts",
-    "format": "biome format --write src scripts plugins vitest.config.mts"
+    "lint": "biome check src scripts vitest.config.mts",
+    "format:check": "biome format src scripts vitest.config.mts",
+    "format": "biome format --write src scripts vitest.config.mts"
   },
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.3.220",

package/dist/hono/plugins.d.ts

@@ -1,3 +0,0 @@
-import type { SdkPluginConfig } from "@anthropic-ai/claude-agent-sdk";
-export declare function bakerPlugins(): SdkPluginConfig[];
-//# sourceMappingURL=plugins.d.ts.map

package/dist/hono/plugins.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"plugins.d.ts","sourceRoot":"","sources":["../../src/hono/plugins.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAItE,wBAAgB,YAAY,IAAI,eAAe,EAAE,CAEhD"}

package/dist/hono/plugins.js

@@ -1,7 +0,0 @@
-import { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
-const bridgePackageRoot = join(dirname(fileURLToPath(import.meta.url)), "..", "..");
-export function bakerPlugins() {
-    return [{ type: "local", path: join(bridgePackageRoot, "plugins", "reports") }];
-}
-//# sourceMappingURL=plugins.js.map

package/dist/hono/plugins.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"plugins.js","sourceRoot":"","sources":["../../src/hono/plugins.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAEpF,MAAM,UAAU,YAAY;IAC1B,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,iBAAiB,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;AAClF,CAAC"}

package/dist/hono/plugins.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=plugins.test.d.ts.map

package/dist/hono/plugins.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"plugins.test.d.ts","sourceRoot":"","sources":["../../src/hono/plugins.test.ts"],"names":[],"mappings":""}

package/dist/hono/plugins.test.js

@@ -1,98 +0,0 @@
-var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {
-    if (typeof path === "string" && /^\.\.?\//.test(path)) {
-        return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
-            return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase() + "js");
-        });
-    }
-    return path;
-};
-import { existsSync, mkdtempSync, readFileSync, rmSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { dirname, join } from "node:path";
-import { fileURLToPath, pathToFileURL } from "node:url";
-import { describe, expect, it } from "vitest";
-import { bakerPlugins } from "./plugins.js";
-const packageRoot = join(dirname(fileURLToPath(import.meta.url)), "..", "..");
-const repoRoot = join(packageRoot, "..", "..");
-const reportsRoot = join(packageRoot, "plugins", "reports");
-const skillRoot = join(reportsRoot, "skills", "build");
-function reportsManifest() {
-    return JSON.parse(readFileSync(join(reportsRoot, ".claude-plugin", "plugin.json"), "utf8"));
-}
-function bridgePackageFiles() {
-    const packageJson = JSON.parse(readFileSync(join(packageRoot, "package.json"), "utf8"));
-    return Array.isArray(packageJson.files) ? packageJson.files.filter((file) => typeof file === "string") : [];
-}
-describe("bakerPlugins", () => {
-    it("resolves the reports plugin from the bundled Bridge plugins", () => {
-        const plugins = bakerPlugins();
-        expect(plugins).toHaveLength(1);
-        expect(plugins[0]).toEqual({ type: "local", path: reportsRoot });
-        expect(existsSync(plugins[0]?.path ?? "")).toBe(true);
-        expect(reportsManifest().name).toBe("reports");
-    });
-    it("declares the reports plugin metadata and /reports:build command", () => {
-        const manifest = reportsManifest();
-        const skill = readFileSync(join(skillRoot, "SKILL.md"), "utf8");
-        const skillName = skill.match(/^name: (.+)$/m)?.[1];
-        expect(manifest).toMatchObject({
-            name: "reports",
-            displayName: "Baker Reports",
-            version: "0.1.0",
-            description: "Build and repair Baker company Reports.",
-            keywords: ["baker", "reports", "marketing"],
-        });
-        expect(`${manifest.name}:${skillName}`).toBe("reports:build");
-    });
-    it("includes the full reports capability bundle", () => {
-        expect(existsSync(join(skillRoot, "references", "report-contracts.md"))).toBe(true);
-        expect(existsSync(join(skillRoot, "scripts", "scaffold-report.mjs"))).toBe(true);
-        expect(existsSync(join(skillRoot, "scripts", "report-paths.mjs"))).toBe(true);
-        expect(existsSync(join(skillRoot, "templates", "report-definition.md"))).toBe(true);
-        expect(existsSync(join(skillRoot, "templates", "report-index.html"))).toBe(true);
-    });
-    it("includes the bundled reports plugin payload in Bridge package files", () => {
-        expect(bridgePackageFiles()).toContain("plugins");
-        expect(existsSync(join(reportsRoot, ".claude-plugin", "plugin.json"))).toBe(true);
-        expect(existsSync(join(skillRoot, "SKILL.md"))).toBe(true);
-        expect(existsSync(join(skillRoot, "references", "report-contracts.md"))).toBe(true);
-        expect(existsSync(join(skillRoot, "scripts", "scaffold-report.mjs"))).toBe(true);
-        expect(existsSync(join(skillRoot, "scripts", "report-paths.mjs"))).toBe(true);
-        expect(existsSync(join(skillRoot, "templates", "report-definition.md"))).toBe(true);
-        expect(existsSync(join(skillRoot, "templates", "report-index.html"))).toBe(true);
-    });
-    it("keeps the vendored scaffold path contract in sync", async () => {
-        const pluginContract = (await import(__rewriteRelativeImportExtension(pathToFileURL(join(skillRoot, "scripts", "report-paths.mjs")).href)));
-        const scaffoldContract = (await import(__rewriteRelativeImportExtension(pathToFileURL(join(repoRoot, "apps", "scaffold-template", "__tooling__", "watcher", "base", "report-contract.mjs")).href)));
-        expect(pluginContract.ReportFileContract.isValidSlug("weekly-summary")).toBe(scaffoldContract.ReportFileContract.isValidSlug("weekly-summary"));
-        expect(pluginContract.ReportFileContract.isValidSlug("Weekly Summary")).toBe(scaffoldContract.ReportFileContract.isValidSlug("Weekly Summary"));
-        expect(pluginContract.ReportFileContract.titleFromSlug("weekly-summary")).toBe(scaffoldContract.ReportFileContract.titleFromSlug("weekly-summary"));
-        expect(pluginContract.ReportFileContract.paths("weekly-summary")).toEqual(scaffoldContract.ReportFileContract.paths("weekly-summary"));
-    });
-    it("scaffolds report files in a company repo root", async () => {
-        const tempDir = mkdtempSync(join(tmpdir(), "baker-reports-plugin-"));
-        try {
-            const script = (await import(__rewriteRelativeImportExtension(pathToFileURL(join(skillRoot, "scripts", "scaffold-report.mjs")).href)));
-            const result = script.createReportFiles("weekly-summary", tempDir);
-            expect(result.slug).toBe("weekly-summary");
-            expect(result.files).toEqual([
-                join(tempDir, "reports/server/routes/reports/data/weekly-summary.get.ts"),
-                join(tempDir, "reports/public/weekly-summary/index.html"),
-                join(tempDir, "reports/public/weekly-summary/_definition.md"),
-            ]);
-            const endpointPath = join(tempDir, "reports/server/routes/reports/data/weekly-summary.get.ts");
-            const dashboardPath = join(tempDir, "reports/public/weekly-summary/index.html");
-            const definitionPath = join(tempDir, "reports/public/weekly-summary/_definition.md");
-            expect(existsSync(endpointPath)).toBe(true);
-            expect(existsSync(dashboardPath)).toBe(true);
-            expect(existsSync(definitionPath)).toBe(true);
-            expect(readFileSync(dashboardPath, "utf8")).not.toMatch(/__[A-Z0-9_]+__/);
-            expect(readFileSync(definitionPath, "utf8")).toContain("/reports/data/weekly-summary");
-            expect(readFileSync(definitionPath, "utf8")).not.toMatch(/__[A-Z0-9_]+__/);
-        }
-        finally {
-            rmSync(tempDir, { recursive: true, force: true });
-        }
-    });
-});
-//# sourceMappingURL=plugins.test.js.map

package/dist/hono/plugins.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"plugins.test.js","sourceRoot":"","sources":["../../src/hono/plugins.test.ts"],"names":[],"mappings":";;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAC9E,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAcvD,SAAS,eAAe;IACtB,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAoB,CAAC;AACjH,CAAC;AAED,SAAS,kBAAkB;IACzB,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAsB,CAAC;IAC7G,OAAO,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9G,CAAC;AAED,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAE/B,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;QAChE,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAEpD,MAAM,CAAC,QAAQ,CAAC,CAAC,aAAa,CAAC;YAC7B,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,eAAe;YAC5B,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,yCAAyC;YACtD,QAAQ,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC;SAC5C,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpF,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjF,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9E,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpF,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClF,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpF,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjF,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9E,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpF,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,cAAc,GAAG,CAAC,MAAM,MAAM,kCAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,EAAC,CAMvG,CAAC;QACF,MAAM,gBAAgB,GAAG,CAAC,MAAM,MAAM,kCACpC,aAAa,CACX,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,qBAAqB,CAAC,CACrG,CAAC,IAAI,EACP,CAA0B,CAAC;QAE5B,MAAM,CAAC,cAAc,CAAC,kBAAkB,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAC1E,gBAAgB,CAAC,kBAAkB,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAClE,CAAC;QACF,MAAM,CAAC,cAAc,CAAC,kBAAkB,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAC1E,gBAAgB,CAAC,kBAAkB,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAClE,CAAC;QACF,MAAM,CAAC,cAAc,CAAC,kBAAkB,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAC5E,gBAAgB,CAAC,kBAAkB,CAAC,aAAa,CAAC,gBAAgB,CAAC,CACpE,CAAC;QACF,MAAM,CAAC,cAAc,CAAC,kBAAkB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CACvE,gBAAgB,CAAC,kBAAkB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAC5D,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;QAErE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,kCAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC,CAAC,IAAI,EAAC,CAElG,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;YAEnE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC3C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;gBAC3B,IAAI,CAAC,OAAO,EAAE,0DAA0D,CAAC;gBACzE,IAAI,CAAC,OAAO,EAAE,0CAA0C,CAAC;gBACzD,IAAI,CAAC,OAAO,EAAE,8CAA8C,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,0DAA0D,CAAC,CAAC;YAC/F,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,0CAA0C,CAAC,CAAC;YAChF,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,EAAE,8CAA8C,CAAC,CAAC;YACrF,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7C,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,MAAM,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAC1E,MAAM,CAAC,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;YACvF,MAAM,CAAC,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC7E,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/plugins/reports/.claude-plugin/plugin.json

@@ -1,7 +0,0 @@
-{
-  "name": "reports",
-  "displayName": "Baker Reports",
-  "version": "0.1.0",
-  "description": "Build and repair Baker company Reports.",
-  "keywords": ["baker", "reports", "marketing"]
-}

package/plugins/reports/skills/build/SKILL.md

@@ -1,73 +0,0 @@
----
-name: build
-description: Create or edit company Reports in the current workspace. Use it when user ask for reports, dashboards.
----
-
-# Reports
-
-Reports are internal dashboard/sandbox live assets authored in `reports/` from the Company Repo root. A company Report is first-class backend state; scaffold files are the authored source that the watcher upserts. The sandbox builds Reports through the locked build wrapper and serves promoted built Nitro output on port `3001`; do not use or fall back to `nitro dev`.
-
-## Start here
-
-1. Clarify the business question and reader.
-2. If the domain is specialized, consult the relevant domain/playbook skill before choosing metrics.
-3. Read `src/brand/BRAND.md` and make the dashboard match the client brand. If it is empty, use neutral defaults and leave a TODO comment.
-4. Create new reports with the scaffold script bundled with this skill. Resolve `scripts/scaffold-report.mjs` from this `SKILL.md` file's directory, then run it from the Company Repo root:
-
-```bash
-node /absolute/path/to/this/skill/scripts/scaffold-report.mjs <slug>
-```
-
-5. Replace the generated placeholder `index.html` with the real Report Dashboard. Author HTML/CSS/JS as a real file; do not pass report HTML through a JS function/string API.
-6. Edit only the generated report files unless the user explicitly asks for infrastructure work.
-
-## Report files
-
-Each report slug owns exactly these authored files:
-
-- `reports/server/routes/reports/data/{slug}.get.ts` - JSON endpoint.
-- `reports/public/{slug}/index.html` - HTML dashboard rendered by the generic report route.
-- `reports/public/{slug}/_definition.md` - metadata contract watched by backend upsert.
-
-Do not edit report runtime infrastructure (`nitro.config.ts`, generic routes, utils, package config) for normal report creation.
-
-## V1 contracts
-
-Read `references/report-contracts.md` before creating or repairing endpoint/refresh/metadata behavior.
-
-Core rules:
-
-- Status values: `draft`, `active`, `error`, `archived`.
-- `_definition.md` frontmatter is the metadata source for title, description, status, and optional `errorMessage`.
-- Set `status: active` only after the dashboard, endpoint, metadata, and live smoke test pass.
-- Endpoints return `{ ok: true, data, meta }` or `{ ok: false, error }`.
-- Use `runReportBaker(event, args)` for Baker CLI reads that support no-cache refresh, or `runBaker(args, { noCache })` with the v1 `fresh=true` convention when orchestration requires it.
-- For new or repaired Google Ads query rows, adapt Baker's flat dotted keys with `googleAdsRow(raw)` before returning report data.
-- HTML pages should fetch `/reports/data/{slug}` normally; never fetch `/reports/{slug}` for JSON because that route serves the authored HTML dashboard. The generic `/reports/{slug}/` route injects the Refresh control and propagates `?fresh=true` to same-origin report fetches.
-- Refresh invalidation is whole-report: the injected Refresh control reloads `/reports/{slug}/?fresh=true`, the runtime propagates `fresh=true` to same-origin `/reports/data/{slug}` fetches, and `runReportBaker(...)` passes `--no-cache` to Baker CLI. HTTP responses stay `no-store`; the Baker CLI cache is the cache being bypassed.
-- Reports are not public generated-site deployment output in v1.
-
-## Validate
-
-For report changes, run the scaffold verification gate from the Company Repo root:
-
-```bash
-pnpm run verify
-```
-
-Do not invoke `__tooling__/lefthook/base/validate-reports.mjs` directly. `pnpm run verify` is the supported contract; it runs report contract validation from the correct root along with typecheck and Nitro build checks.
-
-`verify` proves contracts, typecheck, and Nitro build. It does not prove live data correctness. For a new or active report, smoke-test the built runtime before claiming success:
-
-```bash
-node __tooling__/scripts/smoke-reports-runtime.mjs --slug {slug}
-```
-
-In a running company sandbox, the supervisor serves the built Reports runtime at `http://localhost:3001`; you may also smoke the live URLs directly:
-
-```bash
-curl -fsS http://localhost:3001/reports/{slug}/ >/tmp/report.html
-curl -fsS http://localhost:3001/reports/data/{slug} | tee /tmp/report-data.json
-```
-
-Treat endpoint `{ "ok": false, ... }`, visible dashboard error cards, failed Baker CLI calls, provider API errors, or smoke script failures as blocking. Fix the endpoint/query and rerun the smoke test. For a new report, also visually open `http://localhost:3001/reports/{slug}/` in the sandbox and verify the dashboard renders with real data or a deliberate empty state.

package/plugins/reports/skills/build/references/report-contracts.md

@@ -1,103 +0,0 @@
-# Report Contracts
-
-Use this reference when creating or repairing Baker company Reports.
-
-## Ownership
-
-- Convex owns Report lifecycle and dashboard listing state.
-- Scaffold owns report files and Nitro runtime behavior.
-- The sandbox supervisor builds `reports` through the locked `reports-build` wrapper and serves promoted built Nitro output on port `3001`; do not use `nitro dev` for Reports.
-- Dashboard owns visibility and links to the sandbox `reportsHost`.
-- V1 reports are internal dashboard/sandbox live assets, not public generated-site deployment output.
-
-## Required files
-
-For slug `{slug}`:
-
-```text
-reports/server/routes/reports/data/{slug}.get.ts
-reports/public/{slug}/index.html
-reports/public/{slug}/_definition.md
-```
-
-Slug format: lowercase alphanumeric words separated by hyphens.
-
-## `_definition.md`
-
-Frontmatter is the metadata contract consumed by watcher/upsert.
-
-```markdown
----
-title: "Campaign Performance Weekly"
-description: "Weekly spend, conversions, and cost per lead by campaign"
-status: draft
----
-```
-
-Allowed statuses: `draft`, `active`, `error`, `archived`. Optional `errorMessage` is surfaced with error report definitions.
-
-Keep frontmatter minimal and put business context, data-source notes, refresh notes, evolution, and source breadcrumbs in the Markdown body. Set `status: active` only when the endpoint, dashboard, metadata, and live smoke test are ready.
-
-## Endpoint pattern
-
-Default to `runReportBaker(event, args)` so `?fresh=true` maps to Baker `--no-cache`.
-
-```ts
-import { defineHandler } from "nitro";
-import { runReportBaker } from "../../../utils/baker.ts";
-
-export default defineHandler(async (event) => {
-  const start = Date.now();
-  const result = await runReportBaker<Row[]>(event, ["ads", "google", "query", "--preset", "campaign-performance"]);
-
-  if (!result.ok) {
-    return { ok: false, error: result.error };
-  }
-
-  return {
-    ok: true,
-    data: result.data,
-    meta: { durationMs: Date.now() - start, cached: result.cached ?? false },
-  };
-});
-```
-
-For multi-call orchestration, read `freshRequested(event)` once and pass `{ noCache }` to every cacheable Baker call. Do not pass `noCache` to Baker commands that do not support `--no-cache`. Refresh invalidation is whole-report: `/reports/{slug}/?fresh=true` propagates to same-origin `/reports/data/{slug}` fetches, and Baker CLI cache is bypassed with `--no-cache`; HTTP responses remain `no-store`.
-
-Google Ads query rows arrive from Baker CLI with flat dotted keys such as `campaign.name`, `campaign.advertising_channel_type`, `metrics.cost_micros`, and `segments.conversion_action_name`. `runReportBaker` preserves those flat keys and explicitly adds nested aliases for compatibility with existing reports. In new or repaired Google Ads report endpoints, adapt rows with `googleAdsRow(raw)` from `reports/server/utils/googleAdsRow.ts` before returning report data; the adapter preserves the input row as `row.raw`. Do not use top-level aliases such as `row.name` or `row.spend`; derive those explicitly from the Google Ads fields.
-
-## HTML dashboard pattern
-
-The page is served by the generic route at `/reports/{slug}/`, which injects a whole-report Refresh control. Keep dashboard JS simple:
-
-- Fetch `/reports/data/{slug}` without manually appending `fresh=true`.
-- Let the injected bootstrap propagate `?fresh=true` from the page URL to same-origin report fetches.
-- Do not implement a second custom refresh button unless the user explicitly asks for custom UX.
-- Keep chart data available in tables for accessibility.
-
-## Validation
-
-Run from the scaffold harness root:
-
-```bash
-pnpm run verify
-```
-
-Do not invoke `__tooling__/lefthook/base/validate-reports.mjs` directly. `pnpm run verify` is the supported contract and runs report validation with the correct working directory, plus typecheck and Nitro build checks.
-
-The report validator checks report slug shape, `_definition.md` frontmatter/status, required dashboard files, active report endpoints, and legacy dashboard fetches. Legacy `/reports/{slug}` data fetches/routes must be fixed manually to use `/reports/data/{slug}`. The validator reports these issues but does not mutate source files or execute report data endpoints.
-
-Before marking a new or active report done, smoke-test the built runtime:
-
-```bash
-node __tooling__/scripts/smoke-reports-runtime.mjs --slug {slug}
-```
-
-In a running company sandbox, the supervisor serves Reports at port `3001`, so direct probes are also valid:
-
-```bash
-curl -fsS http://localhost:3001/reports/{slug}/ >/tmp/report.html
-curl -fsS http://localhost:3001/reports/data/{slug} | tee /tmp/report-data.json
-```
-
-Endpoint `{ "ok": false, ... }`, visible dashboard error cards, failed Baker CLI calls, provider API errors, or smoke script failures are blocking. Fix the endpoint/query and rerun the smoke test before claiming success.

package/plugins/reports/skills/build/scripts/report-paths.mjs

@@ -1,19 +0,0 @@
-const REPORT_SLUG_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
-
-function titleFromSlug(slug) {
-  return slug.replace(/-/g, " ").replace(/\b\w/g, (letter) => letter.toUpperCase());
-}
-
-function paths(slug) {
-  return {
-    definition: `reports/public/${slug}/_definition.md`,
-    dashboard: `reports/public/${slug}/index.html`,
-    endpoint: `reports/server/routes/reports/data/${slug}.get.ts`,
-  };
-}
-
-export const ReportFileContract = {
-  isValidSlug: (slug) => REPORT_SLUG_RE.test(slug),
-  titleFromSlug,
-  paths,
-};

package/plugins/reports/skills/build/scripts/scaffold-report.mjs

@@ -1,108 +0,0 @@
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { dirname, join, resolve } from "node:path";
-import { fileURLToPath, pathToFileURL } from "node:url";
-import { ReportFileContract } from "./report-paths.mjs";
-
-function endpointTemplate() {
-  return `import { defineHandler } from "nitro";
-import { runReportBaker } from "../../../utils/baker.ts";
-
-export default defineHandler(async (event) => {
-  const start = Date.now();
-
-  // TODO: replace with the Baker command for this report.
-  // runReportBaker maps ?fresh=true to Baker --no-cache for commands that support it.
-  const result = await runReportBaker(event, ["TODO", "replace", "with", "baker", "args"]);
-
-  if (!result.ok) {
-    return { ok: false, error: result.error };
-  }
-
-  return {
-    ok: true,
-    data: result.data,
-    meta: {
-      durationMs: Date.now() - start,
-      cached: result.cached ?? false,
-    },
-  };
-});
-`;
-}
-
-const scriptDir = dirname(fileURLToPath(import.meta.url));
-
-function readTemplate(name) {
-  return readFileSync(resolve(scriptDir, "..", "templates", name), "utf8");
-}
-
-const TEMPLATE_TOKEN_RE = /__[A-Z0-9_]+__/g;
-
-function renderTemplate(template, values) {
-  let rendered = template;
-  for (const [key, value] of Object.entries(values)) {
-    rendered = rendered.replaceAll(`__${key.toUpperCase()}__`, value);
-  }
-
-  const unresolved = rendered.match(TEMPLATE_TOKEN_RE);
-  if (unresolved) {
-    throw new Error(`Unresolved template token(s): ${[...new Set(unresolved)].join(", ")}`);
-  }
-
-  return rendered;
-}
-
-function pageTemplate(slug, title) {
-  return renderTemplate(readTemplate("report-index.html"), { slug, title });
-}
-
-function definitionTemplate(slug, title, today = new Date().toISOString().slice(0, 10)) {
-  return renderTemplate(readTemplate("report-definition.md"), { slug, title, today });
-}
-
-export function createReportFiles(slug, projectRoot = process.cwd()) {
-  if (!ReportFileContract.isValidSlug(slug)) {
-    throw new Error(`Invalid slug "${slug}". Must match /^[a-z0-9]+(-[a-z0-9]+)*$/`);
-  }
-
-  const paths = ReportFileContract.paths(slug);
-  const pageDir = join(projectRoot, "reports", "public", slug);
-  const dashboardPath = join(pageDir, "index.html");
-  const endpointPath = resolve(projectRoot, paths.endpoint);
-  const definitionPath = resolve(projectRoot, paths.definition);
-
-  if (existsSync(pageDir)) {
-    throw new Error(`Dashboard page already exists: ${pageDir}`);
-  }
-
-  if (existsSync(endpointPath)) {
-    throw new Error(`Endpoint already exists: ${endpointPath}`);
-  }
-
-  const title = ReportFileContract.titleFromSlug(slug);
-
-  mkdirSync(pageDir, { recursive: true });
-  mkdirSync(dirname(endpointPath), { recursive: true });
-  writeFileSync(dashboardPath, pageTemplate(slug, title));
-  writeFileSync(definitionPath, definitionTemplate(slug, title));
-  writeFileSync(endpointPath, endpointTemplate());
-
-  return { slug, files: [endpointPath, dashboardPath, definitionPath] };
-}
-
-const isDirectRun = process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href;
-if (isDirectRun) {
-  const slug = process.argv[2];
-
-  if (!slug) {
-    console.error("Usage: node scaffold-report.mjs <slug>");
-    process.exit(1);
-  }
-
-  try {
-    process.stdout.write(`${JSON.stringify(createReportFiles(slug), null, 2)}\n`);
-  } catch (error) {
-    process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
-    process.exit(1);
-  }
-}