@mccaskie-labs/workbench-config 0.1.13 → 0.1.15

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # @mccaskie-labs/workbench-config
 
+## 0.1.15
+
+### Patch Changes
+
+- The `email` manifest's probe ids now match wb-probe's, which already hold stored history and appear in the phase 4 checkpoint: `email.send.inline-attachment` (was `email.send.inline-image`) and `email.send.dev-key-recipient-refused` (was `email.send.dev-recipient-refused`). `email.send.transactional` is no longer in the daily smoke run, so the smoke run sends no daily mail. `email.send.new-sender` (after the Control drill's `gw_sender_add`) is listed.
+- The `config` manifest lists the brand file exports (`BRAND_FILE`, `brandSchema`, `defineBrand`, `resolveBrand`, `BRAND_DEFAULTS`), a rule to keep one `brand.json` per app, and the probe `config.brand-file`.
+
+## 0.1.14
+
+### Patch Changes
+
+- Shared voices (`docs/spec.md` §2.8). `workbench-ai`: `voice` and `spelling` options on `text`, `structured`, `stream` and `countTokens` (a Workbench voice by name, or `{ instructions }` for the app's own), `voice` on a text result, and a writing check with no AI call: `checkWriting`, `writingStops`, `writingNotes`, `writingFixNote`, `paragraphBands`. Paragraph length is a target: quiet up to 1.25 times, a note up to double, a stop only past that. `createFakeAi` records the voice and spelling of each call. `workbench-config`: the `ai` manifest lists the voices, spellings, targets and banned phrases, and three probes. `workbench-ai` now needs `workbench-config` 0.1.14.
+
 ## 0.1.13
 
 ### Patch Changes

package/capabilities/ai.json

@@ -7,7 +7,7 @@
   "status": "built",
   "surfaces": {
     "gateway": ["POST /anthropic/v1/messages", "POST /anthropic/v1/messages/count_tokens"],
-    "package": ["createAi", "Ai.text", "Ai.structured", "Ai.stream", "Ai.countTokens", "Ai.budget", "createFakeAi"]
+    "package": ["createAi", "Ai.text", "Ai.structured", "Ai.stream", "Ai.countTokens", "Ai.budget", "createFakeAi", "checkWriting", "writingStops", "writingNotes", "writingFixNote"]
   },
   "config": [
     {
@@ -33,7 +33,43 @@
     ],
     "explicit_models": ["claude-sonnet-5", "claude-opus-5"],
     "server_tools": ["web_search", "web_fetch", "code_execution"],
-    "required_headers": ["X-Workbench-Job"]
+    "required_headers": ["X-Workbench-Job"],
+    "optional_headers": ["X-Workbench-Voice", "X-Workbench-Spelling"],
+    "voices": [
+      { "name": "casual", "paragraph_target": 50, "sentence_target": 18 },
+      { "name": "conversational", "paragraph_target": 60, "sentence_target": 22 },
+      { "name": "plain", "paragraph_target": 60, "sentence_target": 20 },
+      { "name": "formal", "paragraph_target": 80, "sentence_target": 25 },
+      { "name": "strict-formal", "paragraph_target": 80, "sentence_target": 28 }
+    ],
+    "spellings": ["en-AU", "en-PH", "en-GB", "en-US"],
+    "writing": {
+      "voice_set_version": 1,
+      "house_paragraph_target": 80,
+      "paragraph_grace": 1.25,
+      "paragraph_ceiling": 2,
+      "banned_phrases": [
+        "delve",
+        "it's worth noting",
+        "it is worth noting",
+        "it's important to note",
+        "it is important to note",
+        "in today's fast-paced world",
+        "navigate the complexities",
+        "a testament to",
+        "game-changer",
+        "game-changing",
+        "let's dive in",
+        "dive into",
+        "rest assured",
+        "in conclusion",
+        "at the end of the day",
+        "the world of",
+        "unlock the",
+        "embark on",
+        "tapestry"
+      ]
+    }
   },
   "limits": [
     { "id": "ai.retry-attempts", "value": 3, "unit": "attempts", "per": "request", "enforced_by": "gateway" }
@@ -45,7 +81,8 @@
   "rules": [
     { "id": "ai.no-partial-success", "kind": "must_not", "text": "Treat a refusal or a max_tokens truncation as a successful result.", "enforced_by": "types", "probe": "ai.text.truncation-throws" },
     { "id": "ai.store-resolved-model", "kind": "must", "text": "Store the resolved model and request id with any output kept.", "enforced_by": "review", "probe": "ai.text.claude-default" },
-    { "id": "ai.aliases-only", "kind": "must", "text": "Ask for a Workbench alias (or an allowlisted explicit id), never an arbitrary model id.", "enforced_by": "gateway", "probe": "ai.model-not-allowed" }
+    { "id": "ai.aliases-only", "kind": "must", "text": "Ask for a Workbench alias (or an allowlisted explicit id), never an arbitrary model id.", "enforced_by": "gateway", "probe": "ai.model-not-allowed" },
+    { "id": "ai.voice-by-name", "kind": "must", "text": "Name a Workbench voice and spelling with the voice and spelling options, so the Gateway adds the text, or bring the app's own voice. Never paste Workbench's voice text into a prompt.", "enforced_by": "gateway", "probe": "ai.voice" }
   ],
   "examples": [
     {
@@ -54,6 +91,13 @@
       "lang": "ts",
       "probe": "ai.text.claude-default",
       "code": "const ai = createAi({ key: env.WORKBENCH_GATEWAY_KEY, env: workbenchEnv(env) })\nconst r = await ai.text({ model: 'claude-default', job: 'article.write', prompt })\nawait save({ text: r.text, model: r.model, requestId: r.requestId })"
+    },
+    {
+      "id": "ai.example.voice",
+      "title": "Text in a Workbench voice, then checked without AI",
+      "lang": "ts",
+      "probe": "ai.voice",
+      "code": "const r = await ai.text({ model: 'claude-default', job: 'article.write', voice: 'conversational', spelling: 'en-AU', prompt })\nconst issues = checkWriting(r.text, { voice: 'conversational' })\nif (writingStops(issues).length > 0) await retryWith(prompt + writingFixNote(issues))"
     }
   ],
   "probes": [
@@ -65,6 +109,9 @@
     { "id": "ai.text.truncation-throws", "half": "runtime", "expect": "pass", "cost_hint_usd": 0.001 },
     { "id": "ai.model-not-allowed", "half": "runtime", "expect": "refused_as_expected", "refusal": "model_not_allowed", "cost_hint_usd": 0 },
     { "id": "ai.count-tokens", "half": "runtime", "expect": "pass", "smoke": true, "cost_hint_usd": 0 },
-    { "id": "ai.budget", "half": "runtime", "expect": "pass", "smoke": true, "cost_hint_usd": 0 }
+    { "id": "ai.budget", "half": "runtime", "expect": "pass", "smoke": true, "cost_hint_usd": 0 },
+    { "id": "ai.voice", "half": "runtime", "expect": "pass", "cost_hint_usd": 0.004 },
+    { "id": "ai.voice.unknown", "half": "runtime", "expect": "refused_as_expected", "refusal": "invalid_request", "cost_hint_usd": 0 },
+    { "id": "ai.voice.cache-read", "half": "runtime", "expect": "pass", "cost_hint_usd": 0.008 }
   ]
 }

package/capabilities/config.json

@@ -17,7 +17,12 @@
       "capabilitySchema",
       "capabilities",
       "MANIFEST_VERSION",
-      "compareDevVars"
+      "compareDevVars",
+      "BRAND_FILE",
+      "brandSchema",
+      "defineBrand",
+      "resolveBrand",
+      "BRAND_DEFAULTS"
     ]
   },
   "config": [
@@ -36,7 +41,8 @@
     { "id": "config.fail-by-name", "kind": "must", "text": "Fail at startup when a required variable is missing or invalid, naming every bad variable in one error.", "enforced_by": "types", "probe": "config.missing-variable-named" },
     { "id": "config.never-print-values", "kind": "must_not", "text": "Print, log or include in an error the value of any variable, valid or not.", "enforced_by": "types", "probe": "config.value-never-printed" },
     { "id": "config.no-node-env", "kind": "must_not", "text": "Decide the environment from NODE_ENV or a default. WORKBENCH_ENV is required and has no fallback.", "enforced_by": "types", "probe": "config.env-required" },
-    { "id": "config.dev-vars-example", "kind": "must", "text": "Keep .dev.vars.example listing every variable .dev.vars has, with no values; check with npx workbench-config check.", "enforced_by": "review", "probe": "config.dev-vars-check" }
+    { "id": "config.dev-vars-example", "kind": "must", "text": "Keep .dev.vars.example listing every variable .dev.vars has, with no values; check with npx workbench-config check.", "enforced_by": "review", "probe": "config.dev-vars-check" },
+    { "id": "config.one-brand-file", "kind": "must", "text": "Keep the app's name, logo, colours and fonts in brand.json at the repo root, read with defineBrand, so emails, PDFs and sign-in mails are branded from one file.", "enforced_by": "types", "probe": "config.brand-file" }
   ],
   "examples": [
     {
@@ -51,6 +57,7 @@
     { "id": "config.missing-variable-named", "half": "runtime", "expect": "pass", "smoke": true, "cost_hint_usd": 0 },
     { "id": "config.value-never-printed", "half": "runtime", "expect": "pass", "smoke": true, "cost_hint_usd": 0 },
     { "id": "config.env-required", "half": "runtime", "expect": "pass", "cost_hint_usd": 0 },
+    { "id": "config.brand-file", "half": "runtime", "expect": "pass", "cost_hint_usd": 0, "note": "The app's brand.json passes defineBrand and a bad one is refused with every bad field named" },
     { "id": "config.dev-vars-check", "half": "runtime", "expect": "pass", "cost_hint_usd": 0, "note": "Manual: run npx workbench-config check in the project" }
   ]
 }

package/capabilities/email.json

@@ -35,10 +35,10 @@
   "rules": [
     { "id": "email.text-always", "kind": "must", "text": "Send a text part with every mail, even when there is HTML.", "enforced_by": "gateway", "probe": "email.send.transactional" },
     { "id": "email.idempotency-key", "kind": "must", "text": "Give an idempotencyKey to any send a retry could repeat (invites, receipts, resets). A repeat within 24 hours returns the first result and sends nothing.", "enforced_by": "review", "probe": "email.send.idempotent-repeat" },
-    { "id": "email.attachments-as-bytes", "kind": "must", "text": "Pass attachments as bytes (Uint8Array), and give an inline image a contentId that the HTML references as cid:.", "enforced_by": "types", "probe": "email.send.inline-image" },
+    { "id": "email.attachments-as-bytes", "kind": "must", "text": "Pass attachments as bytes (Uint8Array), and give an inline image a contentId that the HTML references as cid:.", "enforced_by": "types", "probe": "email.send.inline-attachment" },
     { "id": "email.allowed-sender", "kind": "must", "text": "Send only from an address added with gw_sender_add on a domain onboarded with cf_email_sending_onboard.", "enforced_by": "gateway", "probe": "email.send.sender-not-allowed" },
     { "id": "email.no-capture-outside-dev", "kind": "must_not", "text": "Use the capture transport outside development. createMailer throws when WORKBENCH_ENV is staging or production.", "enforced_by": "types", "probe": "email.capture-refused-in-staging" },
-    { "id": "email.dev-key-allowlist", "kind": "must_not", "text": "Expect a development key to mail anyone but Robert. The Gateway refuses other recipients before the budget.", "enforced_by": "gateway", "probe": "email.send.dev-recipient-refused" },
+    { "id": "email.dev-key-allowlist", "kind": "must_not", "text": "Expect a development key to mail anyone but Robert. The Gateway refuses other recipients before the budget.", "enforced_by": "gateway", "probe": "email.send.dev-key-recipient-refused" },
     { "id": "email.transactional-only", "kind": "must_not", "text": "Send bulk or marketing mail. type bulk is refused with not_available until Amazon SES is built.", "enforced_by": "gateway", "probe": "email.send.transactional" }
   ],
   "examples": [
@@ -46,16 +46,17 @@
       "id": "email.example.send",
       "title": "Send a transactional mail with an inline logo",
       "lang": "ts",
-      "probe": "email.send.inline-image",
+      "probe": "email.send.inline-attachment",
       "code": "const env = workbenchEnv(process.env)\nconst mailer = createMailer({ env, transport: selectTransport(env), from: { address: 'hello@mail.example.com', name: 'Example' }, gateway: { key: process.env.WORKBENCH_GATEWAY_KEY! } })\nawait mailer.send({ to: user.email, subject: 'Welcome', text, html: '<img src=\"cid:logo\"> ...', template: 'welcome', idempotencyKey: `welcome:${user.id}`, attachments: [{ filename: 'logo.png', mimeType: 'image/png', bytes: logo, contentId: 'logo' }] })"
     }
   ],
   "probes": [
-    { "id": "email.send.transactional", "half": "runtime", "expect": "pass", "smoke": true, "cost_hint_usd": 0.00035, "note": "To Robert; check that it arrives" },
-    { "id": "email.send.inline-image", "half": "runtime", "expect": "pass", "cost_hint_usd": 0.00035, "note": "Robert checks the image renders" },
+    { "id": "email.send.transactional", "half": "runtime", "expect": "pass", "cost_hint_usd": 0.00035, "note": "To Robert; check that it arrives. Not in the daily smoke run, so it sends no daily mail" },
+    { "id": "email.send.inline-attachment", "half": "runtime", "expect": "pass", "cost_hint_usd": 0.00035, "note": "Robert checks the image renders" },
     { "id": "email.send.idempotent-repeat", "half": "runtime", "expect": "pass", "cost_hint_usd": 0.00035, "note": "The repeat answers replayed: true and no second mail arrives" },
-    { "id": "email.send.dev-recipient-refused", "half": "runtime", "expect": "refused_as_expected", "refusal": "recipient_not_allowed", "cost_hint_usd": 0 },
+    { "id": "email.send.dev-key-recipient-refused", "half": "runtime", "expect": "refused_as_expected", "refusal": "recipient_not_allowed", "cost_hint_usd": 0 },
     { "id": "email.send.sender-not-allowed", "half": "runtime", "expect": "refused_as_expected", "refusal": "sender_not_allowed", "cost_hint_usd": 0 },
-    { "id": "email.capture-refused-in-staging", "half": "runtime", "expect": "pass", "cost_hint_usd": 0, "note": "createMailer with transport capture and WORKBENCH_ENV=staging throws invalid_config" }
+    { "id": "email.capture-refused-in-staging", "half": "runtime", "expect": "pass", "cost_hint_usd": 0, "note": "createMailer with transport capture and WORKBENCH_ENV=staging throws invalid_config" },
+    { "id": "email.send.new-sender", "half": "runtime", "expect": "pass", "cost_hint_usd": 0.00035, "note": "Runs after the Control drill's gw_sender_add step; skipped without it" }
   ]
 }

package/dist/capabilities.gen.d.ts

@@ -1,4 +1,4 @@
-export declare const MANIFEST_VERSION: "f3d5b55e579d";
+export declare const MANIFEST_VERSION: "f81423629d34";
 export declare const capabilities: {
     readonly ai: {
         readonly $schema: "./schema.json";
@@ -9,7 +9,7 @@ export declare const capabilities: {
         readonly status: "built";
         readonly surfaces: {
             readonly gateway: readonly ["POST /anthropic/v1/messages", "POST /anthropic/v1/messages/count_tokens"];
-            readonly package: readonly ["createAi", "Ai.text", "Ai.structured", "Ai.stream", "Ai.countTokens", "Ai.budget", "createFakeAi"];
+            readonly package: readonly ["createAi", "Ai.text", "Ai.structured", "Ai.stream", "Ai.countTokens", "Ai.budget", "createFakeAi", "checkWriting", "writingStops", "writingNotes", "writingFixNote"];
         };
         readonly config: readonly [{
             readonly name: "WORKBENCH_GATEWAY_KEY";
@@ -41,6 +41,36 @@ export declare const capabilities: {
             readonly explicit_models: readonly ["claude-sonnet-5", "claude-opus-5"];
             readonly server_tools: readonly ["web_search", "web_fetch", "code_execution"];
             readonly required_headers: readonly ["X-Workbench-Job"];
+            readonly optional_headers: readonly ["X-Workbench-Voice", "X-Workbench-Spelling"];
+            readonly voices: readonly [{
+                readonly name: "casual";
+                readonly paragraph_target: 50;
+                readonly sentence_target: 18;
+            }, {
+                readonly name: "conversational";
+                readonly paragraph_target: 60;
+                readonly sentence_target: 22;
+            }, {
+                readonly name: "plain";
+                readonly paragraph_target: 60;
+                readonly sentence_target: 20;
+            }, {
+                readonly name: "formal";
+                readonly paragraph_target: 80;
+                readonly sentence_target: 25;
+            }, {
+                readonly name: "strict-formal";
+                readonly paragraph_target: 80;
+                readonly sentence_target: 28;
+            }];
+            readonly spellings: readonly ["en-AU", "en-PH", "en-GB", "en-US"];
+            readonly writing: {
+                readonly voice_set_version: 1;
+                readonly house_paragraph_target: 80;
+                readonly paragraph_grace: 1.25;
+                readonly paragraph_ceiling: 2;
+                readonly banned_phrases: readonly ["delve", "it's worth noting", "it is worth noting", "it's important to note", "it is important to note", "in today's fast-paced world", "navigate the complexities", "a testament to", "game-changer", "game-changing", "let's dive in", "dive into", "rest assured", "in conclusion", "at the end of the day", "the world of", "unlock the", "embark on", "tapestry"];
+            };
         };
         readonly limits: readonly [{
             readonly id: "ai.retry-attempts";
@@ -78,6 +108,12 @@ export declare const capabilities: {
             readonly text: "Ask for a Workbench alias (or an allowlisted explicit id), never an arbitrary model id.";
             readonly enforced_by: "gateway";
             readonly probe: "ai.model-not-allowed";
+        }, {
+            readonly id: "ai.voice-by-name";
+            readonly kind: "must";
+            readonly text: "Name a Workbench voice and spelling with the voice and spelling options, so the Gateway adds the text, or bring the app's own voice. Never paste Workbench's voice text into a prompt.";
+            readonly enforced_by: "gateway";
+            readonly probe: "ai.voice";
         }];
         readonly examples: readonly [{
             readonly id: "ai.example.text";
@@ -85,6 +121,12 @@ export declare const capabilities: {
             readonly lang: "ts";
             readonly code: "const ai = createAi({ key: env.WORKBENCH_GATEWAY_KEY, env: workbenchEnv(env) })\nconst r = await ai.text({ model: 'claude-default', job: 'article.write', prompt })\nawait save({ text: r.text, model: r.model, requestId: r.requestId })";
             readonly probe: "ai.text.claude-default";
+        }, {
+            readonly id: "ai.example.voice";
+            readonly title: "Text in a Workbench voice, then checked without AI";
+            readonly lang: "ts";
+            readonly code: "const r = await ai.text({ model: 'claude-default', job: 'article.write', voice: 'conversational', spelling: 'en-AU', prompt })\nconst issues = checkWriting(r.text, { voice: 'conversational' })\nif (writingStops(issues).length > 0) await retryWith(prompt + writingFixNote(issues))";
+            readonly probe: "ai.voice";
         }];
         readonly probes: readonly [{
             readonly id: "ai.text.claude-default";
@@ -135,6 +177,22 @@ export declare const capabilities: {
             readonly expect: "pass";
             readonly smoke: true;
             readonly cost_hint_usd: 0;
+        }, {
+            readonly id: "ai.voice";
+            readonly half: "runtime";
+            readonly expect: "pass";
+            readonly cost_hint_usd: 0.004;
+        }, {
+            readonly id: "ai.voice.unknown";
+            readonly half: "runtime";
+            readonly expect: "refused_as_expected";
+            readonly refusal: "invalid_request";
+            readonly cost_hint_usd: 0;
+        }, {
+            readonly id: "ai.voice.cache-read";
+            readonly half: "runtime";
+            readonly expect: "pass";
+            readonly cost_hint_usd: 0.008;
         }];
     };
     readonly analytics: {
@@ -217,7 +275,7 @@ export declare const capabilities: {
         readonly summary: "Reads WORKBENCH_ENV and the app's own variables and secrets. A missing or invalid variable fails at startup, by name, and no value is ever printed.";
         readonly status: "built";
         readonly surfaces: {
-            readonly package: readonly ["workbenchEnv", "defineConfig", "sharedSecret", "workerSecret", "redact", "redactAll", "WorkbenchConfigError", "capabilitySchema", "capabilities", "MANIFEST_VERSION", "compareDevVars"];
+            readonly package: readonly ["workbenchEnv", "defineConfig", "sharedSecret", "workerSecret", "redact", "redactAll", "WorkbenchConfigError", "capabilitySchema", "capabilities", "MANIFEST_VERSION", "compareDevVars", "BRAND_FILE", "brandSchema", "defineBrand", "resolveBrand", "BRAND_DEFAULTS"];
         };
         readonly config: readonly [{
             readonly name: "WORKBENCH_ENV";
@@ -253,6 +311,12 @@ export declare const capabilities: {
             readonly text: "Keep .dev.vars.example listing every variable .dev.vars has, with no values; check with npx workbench-config check.";
             readonly enforced_by: "review";
             readonly probe: "config.dev-vars-check";
+        }, {
+            readonly id: "config.one-brand-file";
+            readonly kind: "must";
+            readonly text: "Keep the app's name, logo, colours and fonts in brand.json at the repo root, read with defineBrand, so emails, PDFs and sign-in mails are branded from one file.";
+            readonly enforced_by: "types";
+            readonly probe: "config.brand-file";
         }];
         readonly examples: readonly [{
             readonly id: "config.example.define";
@@ -278,6 +342,12 @@ export declare const capabilities: {
             readonly half: "runtime";
             readonly expect: "pass";
             readonly cost_hint_usd: 0;
+        }, {
+            readonly id: "config.brand-file";
+            readonly half: "runtime";
+            readonly expect: "pass";
+            readonly cost_hint_usd: 0;
+            readonly note: "The app's brand.json passes defineBrand and a bad one is refused with every bad field named";
         }, {
             readonly id: "config.dev-vars-check";
             readonly half: "runtime";
@@ -552,7 +622,7 @@ export declare const capabilities: {
             readonly kind: "must";
             readonly text: "Pass attachments as bytes (Uint8Array), and give an inline image a contentId that the HTML references as cid:.";
             readonly enforced_by: "types";
-            readonly probe: "email.send.inline-image";
+            readonly probe: "email.send.inline-attachment";
         }, {
             readonly id: "email.allowed-sender";
             readonly kind: "must";
@@ -570,7 +640,7 @@ export declare const capabilities: {
             readonly kind: "must_not";
             readonly text: "Expect a development key to mail anyone but Robert. The Gateway refuses other recipients before the budget.";
             readonly enforced_by: "gateway";
-            readonly probe: "email.send.dev-recipient-refused";
+            readonly probe: "email.send.dev-key-recipient-refused";
         }, {
             readonly id: "email.transactional-only";
             readonly kind: "must_not";
@@ -583,17 +653,16 @@ export declare const capabilities: {
             readonly title: "Send a transactional mail with an inline logo";
             readonly lang: "ts";
             readonly code: "const env = workbenchEnv(process.env)\nconst mailer = createMailer({ env, transport: selectTransport(env), from: { address: 'hello@mail.example.com', name: 'Example' }, gateway: { key: process.env.WORKBENCH_GATEWAY_KEY! } })\nawait mailer.send({ to: user.email, subject: 'Welcome', text, html: '<img src=\"cid:logo\"> ...', template: 'welcome', idempotencyKey: `welcome:${user.id}`, attachments: [{ filename: 'logo.png', mimeType: 'image/png', bytes: logo, contentId: 'logo' }] })";
-            readonly probe: "email.send.inline-image";
+            readonly probe: "email.send.inline-attachment";
         }];
         readonly probes: readonly [{
             readonly id: "email.send.transactional";
             readonly half: "runtime";
             readonly expect: "pass";
-            readonly smoke: true;
             readonly cost_hint_usd: 0.00035;
-            readonly note: "To Robert; check that it arrives";
+            readonly note: "To Robert; check that it arrives. Not in the daily smoke run, so it sends no daily mail";
         }, {
-            readonly id: "email.send.inline-image";
+            readonly id: "email.send.inline-attachment";
             readonly half: "runtime";
             readonly expect: "pass";
             readonly cost_hint_usd: 0.00035;
@@ -605,7 +674,7 @@ export declare const capabilities: {
             readonly cost_hint_usd: 0.00035;
             readonly note: "The repeat answers replayed: true and no second mail arrives";
         }, {
-            readonly id: "email.send.dev-recipient-refused";
+            readonly id: "email.send.dev-key-recipient-refused";
             readonly half: "runtime";
             readonly expect: "refused_as_expected";
             readonly refusal: "recipient_not_allowed";
@@ -622,6 +691,12 @@ export declare const capabilities: {
             readonly expect: "pass";
             readonly cost_hint_usd: 0;
             readonly note: "createMailer with transport capture and WORKBENCH_ENV=staging throws invalid_config";
+        }, {
+            readonly id: "email.send.new-sender";
+            readonly half: "runtime";
+            readonly expect: "pass";
+            readonly cost_hint_usd: 0.00035;
+            readonly note: "Runs after the Control drill's gw_sender_add step; skipped without it";
         }];
     };
     readonly "email-inbound": {

package/dist/capabilities.gen.js

@@ -1,6 +1,6 @@
 // Generated by `npm run capabilities:build` from capabilities/*.json. Do not edit.
 // check:capabilities fails in Checks when this file is stale.
-export const MANIFEST_VERSION = "f3d5b55e579d";
+export const MANIFEST_VERSION = "f81423629d34";
 export const capabilities = {
     "ai": {
         "$schema": "./schema.json",
@@ -21,7 +21,11 @@ export const capabilities = {
                 "Ai.stream",
                 "Ai.countTokens",
                 "Ai.budget",
-                "createFakeAi"
+                "createFakeAi",
+                "checkWriting",
+                "writingStops",
+                "writingNotes",
+                "writingFixNote"
             ]
         },
         "config": [
@@ -76,7 +80,71 @@ export const capabilities = {
             ],
             "required_headers": [
                 "X-Workbench-Job"
-            ]
+            ],
+            "optional_headers": [
+                "X-Workbench-Voice",
+                "X-Workbench-Spelling"
+            ],
+            "voices": [
+                {
+                    "name": "casual",
+                    "paragraph_target": 50,
+                    "sentence_target": 18
+                },
+                {
+                    "name": "conversational",
+                    "paragraph_target": 60,
+                    "sentence_target": 22
+                },
+                {
+                    "name": "plain",
+                    "paragraph_target": 60,
+                    "sentence_target": 20
+                },
+                {
+                    "name": "formal",
+                    "paragraph_target": 80,
+                    "sentence_target": 25
+                },
+                {
+                    "name": "strict-formal",
+                    "paragraph_target": 80,
+                    "sentence_target": 28
+                }
+            ],
+            "spellings": [
+                "en-AU",
+                "en-PH",
+                "en-GB",
+                "en-US"
+            ],
+            "writing": {
+                "voice_set_version": 1,
+                "house_paragraph_target": 80,
+                "paragraph_grace": 1.25,
+                "paragraph_ceiling": 2,
+                "banned_phrases": [
+                    "delve",
+                    "it's worth noting",
+                    "it is worth noting",
+                    "it's important to note",
+                    "it is important to note",
+                    "in today's fast-paced world",
+                    "navigate the complexities",
+                    "a testament to",
+                    "game-changer",
+                    "game-changing",
+                    "let's dive in",
+                    "dive into",
+                    "rest assured",
+                    "in conclusion",
+                    "at the end of the day",
+                    "the world of",
+                    "unlock the",
+                    "embark on",
+                    "tapestry"
+                ]
+            }
         },
         "limits": [
             {
@@ -122,6 +190,13 @@ export const capabilities = {
                 "text": "Ask for a Workbench alias (or an allowlisted explicit id), never an arbitrary model id.",
                 "enforced_by": "gateway",
                 "probe": "ai.model-not-allowed"
+            },
+            {
+                "id": "ai.voice-by-name",
+                "kind": "must",
+                "text": "Name a Workbench voice and spelling with the voice and spelling options, so the Gateway adds the text, or bring the app's own voice. Never paste Workbench's voice text into a prompt.",
+                "enforced_by": "gateway",
+                "probe": "ai.voice"
             }
         ],
         "examples": [
@@ -131,6 +206,13 @@ export const capabilities = {
                 "lang": "ts",
                 "code": "const ai = createAi({ key: env.WORKBENCH_GATEWAY_KEY, env: workbenchEnv(env) })\nconst r = await ai.text({ model: 'claude-default', job: 'article.write', prompt })\nawait save({ text: r.text, model: r.model, requestId: r.requestId })",
                 "probe": "ai.text.claude-default"
+            },
+            {
+                "id": "ai.example.voice",
+                "title": "Text in a Workbench voice, then checked without AI",
+                "lang": "ts",
+                "code": "const r = await ai.text({ model: 'claude-default', job: 'article.write', voice: 'conversational', spelling: 'en-AU', prompt })\nconst issues = checkWriting(r.text, { voice: 'conversational' })\nif (writingStops(issues).length > 0) await retryWith(prompt + writingFixNote(issues))",
+                "probe": "ai.voice"
             }
         ],
         "probes": [
@@ -191,6 +273,25 @@ export const capabilities = {
                 "expect": "pass",
                 "smoke": true,
                 "cost_hint_usd": 0
+            },
+            {
+                "id": "ai.voice",
+                "half": "runtime",
+                "expect": "pass",
+                "cost_hint_usd": 0.004
+            },
+            {
+                "id": "ai.voice.unknown",
+                "half": "runtime",
+                "expect": "refused_as_expected",
+                "refusal": "invalid_request",
+                "cost_hint_usd": 0
+            },
+            {
+                "id": "ai.voice.cache-read",
+                "half": "runtime",
+                "expect": "pass",
+                "cost_hint_usd": 0.008
             }
         ]
     },
@@ -311,7 +412,12 @@ export const capabilities = {
                 "capabilitySchema",
                 "capabilities",
                 "MANIFEST_VERSION",
-                "compareDevVars"
+                "compareDevVars",
+                "BRAND_FILE",
+                "brandSchema",
+                "defineBrand",
+                "resolveBrand",
+                "BRAND_DEFAULTS"
             ]
         },
         "config": [
@@ -362,6 +468,13 @@ export const capabilities = {
                 "text": "Keep .dev.vars.example listing every variable .dev.vars has, with no values; check with npx workbench-config check.",
                 "enforced_by": "review",
                 "probe": "config.dev-vars-check"
+            },
+            {
+                "id": "config.one-brand-file",
+                "kind": "must",
+                "text": "Keep the app's name, logo, colours and fonts in brand.json at the repo root, read with defineBrand, so emails, PDFs and sign-in mails are branded from one file.",
+                "enforced_by": "types",
+                "probe": "config.brand-file"
             }
         ],
         "examples": [
@@ -394,6 +507,13 @@ export const capabilities = {
                 "expect": "pass",
                 "cost_hint_usd": 0
             },
+            {
+                "id": "config.brand-file",
+                "half": "runtime",
+                "expect": "pass",
+                "cost_hint_usd": 0,
+                "note": "The app's brand.json passes defineBrand and a bad one is refused with every bad field named"
+            },
             {
                 "id": "config.dev-vars-check",
                 "half": "runtime",
@@ -760,7 +880,7 @@ export const capabilities = {
                 "kind": "must",
                 "text": "Pass attachments as bytes (Uint8Array), and give an inline image a contentId that the HTML references as cid:.",
                 "enforced_by": "types",
-                "probe": "email.send.inline-image"
+                "probe": "email.send.inline-attachment"
             },
             {
                 "id": "email.allowed-sender",
@@ -781,7 +901,7 @@ export const capabilities = {
                 "kind": "must_not",
                 "text": "Expect a development key to mail anyone but Robert. The Gateway refuses other recipients before the budget.",
                 "enforced_by": "gateway",
-                "probe": "email.send.dev-recipient-refused"
+                "probe": "email.send.dev-key-recipient-refused"
             },
             {
                 "id": "email.transactional-only",
@@ -797,7 +917,7 @@ export const capabilities = {
                 "title": "Send a transactional mail with an inline logo",
                 "lang": "ts",
                 "code": "const env = workbenchEnv(process.env)\nconst mailer = createMailer({ env, transport: selectTransport(env), from: { address: 'hello@mail.example.com', name: 'Example' }, gateway: { key: process.env.WORKBENCH_GATEWAY_KEY! } })\nawait mailer.send({ to: user.email, subject: 'Welcome', text, html: '<img src=\"cid:logo\"> ...', template: 'welcome', idempotencyKey: `welcome:${user.id}`, attachments: [{ filename: 'logo.png', mimeType: 'image/png', bytes: logo, contentId: 'logo' }] })",
-                "probe": "email.send.inline-image"
+                "probe": "email.send.inline-attachment"
             }
         ],
         "probes": [
@@ -805,12 +925,11 @@ export const capabilities = {
                 "id": "email.send.transactional",
                 "half": "runtime",
                 "expect": "pass",
-                "smoke": true,
                 "cost_hint_usd": 0.00035,
-                "note": "To Robert; check that it arrives"
+                "note": "To Robert; check that it arrives. Not in the daily smoke run, so it sends no daily mail"
             },
             {
-                "id": "email.send.inline-image",
+                "id": "email.send.inline-attachment",
                 "half": "runtime",
                 "expect": "pass",
                 "cost_hint_usd": 0.00035,
@@ -824,7 +943,7 @@ export const capabilities = {
                 "note": "The repeat answers replayed: true and no second mail arrives"
             },
             {
-                "id": "email.send.dev-recipient-refused",
+                "id": "email.send.dev-key-recipient-refused",
                 "half": "runtime",
                 "expect": "refused_as_expected",
                 "refusal": "recipient_not_allowed",
@@ -843,6 +962,13 @@ export const capabilities = {
                 "expect": "pass",
                 "cost_hint_usd": 0,
                 "note": "createMailer with transport capture and WORKBENCH_ENV=staging throws invalid_config"
+            },
+            {
+                "id": "email.send.new-sender",
+                "half": "runtime",
+                "expect": "pass",
+                "cost_hint_usd": 0.00035,
+                "note": "Runs after the Control drill's gw_sender_add step; skipped without it"
             }
         ]
     },

package/dist/capability-schema.d.ts

@@ -39,6 +39,20 @@ export declare const allowedSchemas: {
         explicit_models: z.ZodArray<z.ZodString>;
         server_tools: z.ZodArray<z.ZodString>;
         required_headers: z.ZodArray<z.ZodString>;
+        optional_headers: z.ZodArray<z.ZodString>;
+        voices: z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            paragraph_target: z.ZodNumber;
+            sentence_target: z.ZodNumber;
+        }, z.core.$strict>>;
+        spellings: z.ZodArray<z.ZodString>;
+        writing: z.ZodObject<{
+            voice_set_version: z.ZodNumber;
+            house_paragraph_target: z.ZodNumber;
+            paragraph_grace: z.ZodNumber;
+            paragraph_ceiling: z.ZodNumber;
+            banned_phrases: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>;
     }, z.core.$strict>;
     images: z.ZodObject<{
         aliases: z.ZodArray<z.ZodObject<{

package/dist/capability-schema.js

@@ -99,6 +99,20 @@ export const allowedSchemas = {
         explicit_models: z.array(z.string().min(1)),
         server_tools: z.array(z.string().min(1)),
         required_headers: z.array(z.string().min(1)),
+        // Voices and spelling (docs/spec.md §2.8). The Gateway holds the text; these are the names and the
+        // figures the package's writing check needs, kept here so the two can't drift apart.
+        optional_headers: z.array(z.string().min(1)),
+        voices: z
+            .array(z.strictObject({ name: z.string().regex(/^[a-z][a-z0-9-]{0,39}$/), paragraph_target: z.number().int().positive(), sentence_target: z.number().int().positive() }))
+            .min(1),
+        spellings: z.array(z.string().regex(/^[a-z]{2,3}-[A-Z]{2}$/)).min(1),
+        writing: z.strictObject({
+            voice_set_version: z.number().int().positive(),
+            house_paragraph_target: z.number().int().positive(),
+            paragraph_grace: z.number().min(1),
+            paragraph_ceiling: z.number().min(1),
+            banned_phrases: z.array(z.string().min(1)).min(1),
+        }),
     }),
     images: z.strictObject({
         aliases: z.array(aliasEntry.extend({ provider: z.enum(["google", "openai"]) })).min(1),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mccaskie-labs/workbench-config",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "description": "Workbench app configuration: WORKBENCH_ENV, typed variables that fail by name, secrets that are never printed, and the capabilities manifest.",
   "license": "UNLICENSED",
   "type": "module",