@owlmeans/viable-common 0.0.44 → 0.0.46

package/README.md

@@ -17,11 +17,12 @@ filesystem, no inference SDK. It is safe to import from a browser bundle.
 | `@owlmeans/viable-common/connect` | The connector protocol: sessions, operations, model tasks, questions, domain statuses, capabilities, the error family, and `connectProtocols()` — the one declaration both the platform and the SDK bind |
 | `@owlmeans/viable-common/convert` | Converting an application that already exists: the stages and their transitions, the origin and stack taxonomy, the census classifiers, and the `docs/conversion/` layout |
 | `@owlmeans/viable-common/integrity` | The target-shape manifest — what a slot is allowed to install, build and run — per target layout |
+| `@owlmeans/viable-common/legal` | `OWLMEANS_LEGAL_DATES`, `LegalDocumentDates` and `LegalDocumentKey` — shared ISO dates for the public site's policies and the platform's legal acceptance; no runtime dependencies |
 
 ## Installation
 
 ```bash
-bun add @owlmeans/viable-common@^0.0.44
+bun add @owlmeans/viable-common@^0.0.46
 ```
 
 ## Rules worth knowing before you change something
@@ -39,7 +40,7 @@ means "inherit" has no other spelling. `tests/convert.spec.ts` walks every expor
 both faults, and for draft-04 tuple `items`.
 
 **A field that crosses a version skew carries no `enum`.** A connector is installed with
-`npx -y @owlmeans/viable-mcp@^0.1.18-rc.42` and talks to a separately deployed platform, so an executor kind it
+`npx -y @owlmeans/viable-mcp@^0.1.18-rc.46` and talks to a separately deployed platform, so an executor kind it
 sends must remain an unused capability on an older platform rather than a refused session.
 
 **A ceiling exists once.** The inquiry answer cap here equals `DEFAULT_INQUIRY_ANSWER_CHARS` in
@@ -59,7 +60,7 @@ This package ships embedded agent skills under `agent-meta/`. After installing y
 your project's skill store (`.agents/skills/`):
 
 ```sh
-npx @owlmeans/agent-skills@^0.1.18-rc.48
+npx @owlmeans/agent-skills@^0.1.18-rc.51
 ```
 
 The embedded files are version-matched to this package release. Do not edit them

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
   "package": "@owlmeans/viable-common",
-  "version": "0.0.44",
-  "generatedAt": "2026-10-05T08:32:19.128Z",
+  "version": "0.0.46",
+  "generatedAt": "2026-10-06T11:45:57.674Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {

package/agent-meta/skills/agent-presentation/SKILL.md

@@ -6,10 +6,10 @@ description: Shared, runtime-free taxonomy for presenting OwlMeans Viable agent
 
 # Agent output presentation
 
-**Install:** `"@owlmeans/viable-common": "^0.0.44"` in `dependencies`
+**Install:** `"@owlmeans/viable-common": "^0.0.46"` in `dependencies`
 
 `@owlmeans/viable-common`'s `agent/presentation.ts` owns the browser-safe vocabulary for agent
-output. Keep the server and every client on `classifyAgentMessage()`; consumers may refine a
+output. Keep the server and every client on `agentPresentationHelper.classifyAgentMessage()`; consumers may refine a
 provisional classification as streamed text becomes parseable, but must not invent a competing
 taxonomy.
 
@@ -24,7 +24,7 @@ taxonomy.
   compatibility; the final server hint is based on complete output and the browser refines it while
   it streams. Keep legacy `outputType` intact.
 - Unwrap a single LangChain tool call's `args` before semantic classification
-  (`agentToolCallArguments`). Known schemas render as cards; unknown objects and arrays remain
+  (`agentPresentationHelper.agentToolCallArguments`). Known schemas render as cards; unknown objects and arrays remain
   generic structured output, never raw JSON.
 - `structuredKindOf`'s shape checks are ORDER-SENSITIVE where one payload could match more than
   one: a scaffold plan carries its own `stories` array, so `ScaffoldPlan` (`identity` + `guestHome`
@@ -40,7 +40,7 @@ taxonomy.
   `source-extract`), or the single call's shape only reaches a `Generic*` kind. Without the
   action check, a free-flight `read_sources({ files })` call reads as an `ArtifactSelection` card
   instead of a tool call, because its args happen to shape-match that schema.
-- `isAgentMessageHidden()` owns utility-run suppression. The source extractor's `source-extract`
+- `agentPresentationHelper.isAgentMessageHidden()` owns utility-run suppression. The source extractor's `source-extract`
   range-selection calls are internal context reduction and never render in thinking or history.
 
 ## Consumer rules

package/agent-meta/skills/viable-common/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: viable-common
-description: How to use @owlmeans/viable-common — the runtime-free contract package of the OwlMeans Viable platform. Covers planning cards and flows (including the landing-gate and tenancy fields), project/story refusals, slot commands and layouts, slot metadata keys, target integrity, connector domain statuses and routes, the intent-first hand-off (`./intent`), conversion vocabulary, blueprint layer types and the case vocabulary, the ViableSkill/ViablePersona names (never the catalogue behind them), what belongs here versus in @owlmeans/viable, generated-project analysis/design/scaffold/metadata shapes, StoryDesignPort, schema conventions, and wire-version rules. Auto-invoked when importing a viable card type or flow, a slot command, a connector or conversion type, a target-integrity helper, or any *Schema this package exports.
+description: How to use @owlmeans/viable-common — the runtime-free contract package of the OwlMeans Viable platform. Covers planning cards and flows (including the landing-gate and tenancy fields), project/story refusals, slot commands and layouts, slot metadata keys, target integrity, connector domain statuses and routes, the intent-first hand-off (`./intent`), shared legal dates (`./legal`), conversion vocabulary, blueprint layer types and case vocabulary, ViableSkill/ViablePersona names, what belongs here versus in @owlmeans/viable, generated-project analysis/design/scaffold/metadata shapes, StoryDesignPort, schema conventions, and wire-version rules. Auto-invoked when importing a viable card type or flow, a slot command, a connector or conversion type, legal dates, a target-integrity helper, or any *Schema this package exports.
 user-invocable: false
 ---
 <!-- AUTO-GENERATED — do not edit. Regenerate via sync-agent-meta. -->
@@ -8,8 +8,8 @@ user-invocable: false
 # @owlmeans/viable-common
 
 **Layer:** Cross-cutting domain (contracts only)
-**Install:** `"@owlmeans/viable-common": "^0.0.44"` in `dependencies`
-**Subpaths:** `.` · `./slot` · `./connect` · `./convert` · `./integrity` · `./intent` — the barrel
+**Install:** `"@owlmeans/viable-common": "^0.0.46"` in `dependencies`
+**Subpaths:** `.` · `./slot` · `./connect` · `./convert` · `./integrity` · `./intent` · `./legal` — the barrel
 re-exports every subpath except `./intent`.
 **Runtime-free:** no `@langchain/*`, no filesystem, no Ajv at run time (a devDependency, for the
 tests that compile the schemas); it depends on the packages under Depends On and nothing else.
@@ -31,12 +31,29 @@ execution state and card fields name.
 
 | Subpath | What it declares |
 |---|---|
-| `.` (barrel) | The planning module (`VIABLE_*_TYPE`, `VIABLE_TYPE_SCHEMAS`, `VIABLE_FLOW_SCHEMAS`, `ViableStoryStatus`/`ViableProjectStatus` and their transitions, `ViableSpecCategory`, `ViableRelationship`, `ViableChannel`, `ViableProjectCard`/`ViableStoryCard`, the card helpers, the landing sentence helpers, the `Project*` refusals); `SlotMetadata` and the three metadata vocabularies (`metadataConfigs`, `metadataLists`, `metadataSecrets`), `BRANDING_ENV_KEYS` / `brandingEnv`; `ProjectArea` / `AREA_PATHS` / `AREA_ACCESS` / `AREA_TIER`, `ADMIN_PERMISSION` / `OPERATOR_PERMISSION`; the tenancy contract (`ProjectTenancy`, `ViableTenancyDecision`, `NO_TENANCY`, `tenancyOf`, `tenantedArea`, `TENANCY_QUOTE_MAX`); `ModelRole` and the viable `ExecutionState`; the `ViableSkill` / `ViablePersona` enums; the `Blueprint` layer types, `BlueprintRef` / `BlueprintPatch`, `BlueprintCase` / `GameKind` / `WorkKind`, `CASE_QUOTE_MAX`, `DEFAULT_BLUEPRINT_ID` / `BLUEPRINT_META_KEY`, `landingGatePreferenceOf`; the target topology (`TopologyDescriptor`, `LAYOUT_TOPOLOGIES`, `resolveTopology`, `packageForRole` — meaning in `/blueprints`); the BA shapes (`mergeConnectingStories`), the dev (`AccessBlock`, `AccessLevel`, `PermissionDefault`), UX, design and scaffold shapes and their schemas, `StoryDesignPort`; `ModerationCategory` / `ModerationSubject` / `decideModeration`; the `docs/` metadata paths; `PreviewEventType` (error kinds plus `Analytics` — an analytics event a target's web posted through the preview reporter's channel; the target-side plugins live in `@owlmeans/viable-log`) and the `OwlMeansAnalyticsPayload` shape; the agent-output taxonomy (`classifyAgentMessage`, `isAgentMessageHidden` — `/agent-presentation`) and the spectator entry types |
-| `./slot` | `SlotCommandType` and the `SlotFileCommand` / `SlotShellCommand` / `SlotGitCommand` / `SlotDatabaseCommand` sets; `SlotDatabaseInfo`, `SlotDatabaseQueryArgs` / `SlotDatabaseQueryResult`, `DATABASE_READ_LIMITS`; the per-command deadlines and timeouts (`commandDeadline`, `commandTimeout`), `SubProject`, `LAYOUTS` / `ROLE_DIRS` / `subprojectDirOf`, `WorkloadKind`, the target ports and process markers, `slotOrigin` / `targetRedirectUrisForOrigin` |
-| `./connect` | `ConnectTarget`, `ConnectLlm`, `ConnectHarness`, `ConnectExecutor`, `ConnectOpKind`, `ConnectProjectStatus`, `ConnectStoryStatus`, `ConnectPipelineState`, `ConnectWaitReason`, `ConnectProjectBranding` / `ConnectProjectBrandingSave`, the planning-kit views (`PlanningKitView`, `ConnectKitDescribe`, `ConnectKitApplyBody`, `ConnectKitApplyResult` and their `*Schema`s), `ModelTier` + `tierOfRole`/`clampTier`, `ModelTask*`, `InquiryPayload` + `ConnectInquiryKind`, the session and domain-status views, the convert bodies (`ConnectConvertCreateBody`, `ConnectConvertStartBody`, `ConnectConvertProceedBody`), the `Connect*` error family with `ConnectConfirmation` / `ConnectConfirmationAction`, `connectProtocols(opts)` and every `*Schema` behind them |
-| `./convert` | `ConversionStage`/`Status`/`Decision` and the `stageAfter`/`decisionFor`/`canEnter` transitions, `OriginKind`/`OriginShape`/`OriginState`, `StackId` + `STACK_FAMILY`, `ArchitectureCase`, `ConvertibilityVerdict`/`ConvertibilityReason`, the census classifiers (`fileClassOf`, `sizeClassOf`, `entropyClassOf`, `binaryByExtension`), the `docs/conversion/` paths, `CONVERTED_ORIGIN_DIR`, `SOURCE_LIST_EXCLUSIONS`, `CENSUS_SKIP_DIRS`, `RELOCATE_ALWAYS_KEEP`, and the model-answer schemas the conversion asks with |
-| `./integrity` | `TargetLayout` + `TARGET_LAYOUTS`, `detectTargetLayout`, `verifyTargetShape`, `TARGET_INTEGRITY_FILES`, `TARGET_PROTECTED_FILES`, `isLegacyLayout`, `targetPackageName` |
+| `.` (barrel) | The planning module (`VIABLE_*_TYPE`, `VIABLE_TYPE_SCHEMAS`, `VIABLE_FLOW_SCHEMAS`, `ViableStoryStatus`/`ViableProjectStatus` and their transitions, `ViableSpecCategory`, `ViableRelationship`, `ViableChannel`, `ViableProjectCard`/`ViableStoryCard`, the card helpers, the landing sentence helpers, the `Project*` refusals); `SlotMetadata` and the three metadata vocabularies (`metadataConfigs`, `metadataLists`, `metadataSecrets`), `BRANDING_ENV_KEYS` / `brandingEnv`; `ProjectArea` / `AREA_PATHS` / `AREA_ACCESS` / `AREA_TIER`, `ADMIN_PERMISSION` / `OPERATOR_PERMISSION`; the tenancy contract (`ProjectTenancy`, `ViableTenancyDecision`, `NO_TENANCY`, `tenancyHelper` (`tenancyOf`, `tenantedArea`), `TENANCY_QUOTE_MAX`); `ModelRole` and the viable `ExecutionState`; the `ViableSkill` / `ViablePersona` enums; the `Blueprint` layer types, `BlueprintRef` / `BlueprintPatch`, `BlueprintCase` / `GameKind` / `WorkKind`, `CASE_QUOTE_MAX`, `DEFAULT_BLUEPRINT_ID` / `BLUEPRINT_META_KEY`, `landingGatePreferenceOf`; the target topology (`TopologyDescriptor`, `LAYOUT_TOPOLOGIES`, `topologyHelper` (`resolveTopology`, `packageForRole`) — meaning in `/blueprints`); the BA shapes (`connectingStoryHelper.mergeConnectingStories`), the dev (`AccessBlock`, `AccessLevel`, `PermissionDefault`), UX, design and scaffold shapes and their schemas, `StoryDesignPort`; `ModerationCategory` / `ModerationSubject` / `moderationVerdictHelper.decideModeration`; the `docs/` metadata paths; `PreviewEventType` (error kinds plus `Analytics` — an analytics event a target's web posted through the preview reporter's channel; the target-side plugins live in `@owlmeans/viable-log`) and the `OwlMeansAnalyticsPayload` shape; the agent-output taxonomy (`agentPresentationHelper` — `classifyAgentMessage`, `isAgentMessageHidden`; `/agent-presentation`) and the spectator entry types |
+| `./slot` | `SlotCommandType` and the `SlotFileCommand` / `SlotShellCommand` / `SlotGitCommand` / `SlotDatabaseCommand` sets; `SlotDatabaseInfo`, `SlotDatabaseQueryArgs` / `SlotDatabaseQueryResult`, `DATABASE_READ_LIMITS`; the per-command deadlines and timeouts (`slotCommandHelper` — `commandDeadline`, `commandTimeout`), `SubProject`, `LAYOUTS` / `ROLE_DIRS` / `slotLayoutHelper.subprojectDirOf`, `WorkloadKind`, the target ports and process markers, `slotOriginHelper` (`slotOrigin` / `targetRedirectUrisForOrigin`) |
+| `./connect` | `ConnectTarget`, `ConnectLlm`, `ConnectHarness`, `ConnectExecutor`, `ConnectOpKind`, `ConnectProjectStatus`, `ConnectStoryStatus`, `ConnectPipelineState`, `ConnectWaitReason`, `ConnectProjectBranding` / `ConnectProjectBrandingSave`, the planning-kit views (`PlanningKitView`, `ConnectKitDescribe`, `ConnectKitApplyBody`, `ConnectKitApplyResult` and their `*Schema`s), `ModelTier` + `modelTierHelper` (`tierOfRole`/`clampTier`), `ModelTask*`, `InquiryPayload` + `ConnectInquiryKind`, the session and domain-status views, the convert bodies (`ConnectConvertCreateBody`, `ConnectConvertStartBody`, `ConnectConvertProceedBody`), the `Connect*` error family with `ConnectConfirmation` / `ConnectConfirmationAction`, `connectProtocols(opts)` and every `*Schema` behind them |
+| `./convert` | `ConversionStage`/`Status`/`Decision` and the `conversionStageHelper` transitions (`stageAfter`/`decisionFor`/`canEnter`), `OriginKind`/`OriginShape`/`OriginState`, `StackId` + `STACK_FAMILY`, `ArchitectureCase`, `ConvertibilityVerdict`/`ConvertibilityReason`, the census classifiers (`censusHelper` — `fileClassOf`, `sizeClassOf`, `entropyClassOf`, `binaryByExtension`), the `docs/conversion/` paths, `CONVERTED_ORIGIN_DIR`, `SOURCE_LIST_EXCLUSIONS`, `CENSUS_SKIP_DIRS`, `RELOCATE_ALWAYS_KEEP`, and the model-answer schemas the conversion asks with |
+| `./integrity` | `TargetLayout` + `TARGET_LAYOUTS`, `targetLayoutHelper` (`detectTargetLayout`, `isLegacyLayout`, `targetPackageName`), `targetIntegrityHelper.verifyTargetShape`, `TARGET_INTEGRITY_FILES`, `TARGET_PROTECTED_FILES` |
 | `./intent` | `intent` (the four aliases), `makeIntentProtocols(opts?)`, `intentFlow` + `IntentFlowStep` + `INTENT_PAYLOAD_REF`, `IntentStashBodySchema` / `IntentPickupBodySchema`, the `INTENT_*` constants, `IntentDraft`, `IntentExpired` (404) / `IntentThrottled` (429) |
+| `./legal` | `OWLMEANS_LEGAL_DATES`, `LegalDocumentDates`, `LegalDocumentKey` — the public site's legal dates and the platform's legal acceptance dates |
+
+## Shared legal dates (`./legal`)
+
+Import `OWLMEANS_LEGAL_DATES` from `@owlmeans/viable-common/legal` for legal-page builds and
+platform consent configuration. This subpath has no runtime imports; it loads only the date table.
+The package barrel also re-exports it. Never import another repository's sources by path.
+
+`src/legal/consts.ts` owns the ISO `YYYY-MM-DD` effective/updated dates; `src/legal/types.ts`
+declares `LegalDocumentDates` and the complete `LegalDocumentKey` union. A new document must add
+both a key and a table row; `satisfies Record<LegalDocumentKey, LegalDocumentDates>` checks coverage.
+Format dates in the consumer's locale, keeping policy text as placeholders rather than copied dates.
+
+Changing a terms/privacy/billing/product updated date changes the platform's terms-acceptance
+digest and requires acceptance again; privacy.updated also revises marketing consent.
+Cookies, services-agreement and platform-license dates are display-only. Rebuild this package
+before the platform and static-site consumers; both must receive the same table revision.
 
 ## The planning module
 
@@ -109,7 +126,7 @@ the wire and in target files — a parent agent's vocabulary, which never change
 
 `area` and `primary` are required in `ViableStoryFieldsSchema`; a create without an area still
 validates, because validation runs after the planning middlewares and the viable plugin fills the
-area of a narrative a person wrote. `storyFieldsOf` answers an absent area as `guest` and an
+area of a narrative a person wrote. `viableCardHelper.storyFieldsOf` answers an absent area as `guest` and an
 absent flag as `false`.
 
 ### The landing gate on the cards
@@ -122,12 +139,12 @@ full-scale screen after signing in (`/target-areas`). Two fields record it:
   is never written, since `null` would read as a decided "none" that nothing asks again. `at`
   carries no `format` because the planning registry compiles without ajv-formats.
 - story `fields.landing: true` marks the chosen card — at most one per project — and is what design
-  and development key on. `storyWriteInputOf` copies it into `StoryWriteInput.landing` only when
+  and development key on. `viableCardHelper.storyWriteInputOf` copies it into `StoryWriteInput.landing` only when
   set, so `StoryMeta.landing` appears only in that story's `docs/stories/<code>.md`; like `primary`
   it is the CARD's and is never passed in `StoryWriteContent`.
 
-`withLandingSentence` appends `LANDING_STORY_SENTENCE` to the chosen narrative — a note for people
-reading the board, never the authority. It is idempotent (`hasLandingSentence`,
+`landingSentenceHelper.withLandingSentence` appends `LANDING_STORY_SENTENCE` to the chosen narrative — a note for people
+reading the board, never the authority. It is idempotent (`.hasLandingSentence`,
 whitespace-insensitive), joins with one space, and never pushes a title past `TITLE_MAX`: a
 narrative with no room is returned uncut.
 
@@ -145,9 +162,9 @@ application, the project owner's, that every person acts in.
   is refused.
 - It reaches a run only through `BlueprintRef.tenancy`, and only when a flag is on; resolution
   alone writes it into `experience.tenancy` — never a blueprint or a case table. Read it through
-  `tenancyOf(blueprint)`: `NO_TENANCY` (frozen, both off) for no blueprint, layer, key or an
+  `tenancyHelper.tenancyOf(blueprint)`: `NO_TENANCY` (frozen, both off) for no blueprint, layer, key or an
   unreadable value — only a literal `true` turns a flag on.
-- `tenantedArea(area, tenancy)` — `user` follows `users`, `operator` follows `operators`; `guest`
+- `tenancyHelper.tenantedArea(area, tenancy)` — `user` follows `users`, `operator` follows `operators`; `guest`
   and `admin` (the project owner, above every tenant) are never tenanted.
 - Classification, the access policy, per-record kinds and the IAM client config live in
   `@owlmeans/viable` (`/target-tenancy`).
@@ -165,13 +182,13 @@ The co-located `*.spec.md` / `*.ux.md` / `*.ui.md` files of a target are FILES,
 prose lives in the `design` payload — so no type declares a `ux` or `ui` slot.
 
 A story CODE (`US-XXXXX`) is the target's vocabulary: every file, registry entry and widget stamp
-names the code, and a card id never reaches a target file — `storyWriteInputOf` refuses a card
+names the code, and a card id never reaches a target file — `viableCardHelper.storyWriteInputOf` refuses a card
 with no code (`ProjectStoryMissconfigured('no-code')`). A project's code is its alias, minted by
 the platform's name ladder; the slug policy only guards uniqueness.
 
 `follows`, `shares-widget` and `shares-screen` run story → story. Only `follows` is WRITTEN: a
 connective story follows the flow story it was anchored after, created in the same transition from
-`MergedStoryDraft.after` (the clamped 1-based position, filled by `mergeConnectingStories` alone).
+`MergedStoryDraft.after` (the clamped 1-based position, filled by `connectingStoryHelper.mergeConnectingStories` alone).
 The `shares-*` types are declared only — the `scaffold` specification is their single authority.
 
 ### The write channel
@@ -179,7 +196,7 @@ The `shares-*` types are declared only — the `scaffold` specification is their
 `ViableChannel` (`web`, `connect`, `agent`, `pipeline`) is what a planning write carries on
 `PlanningScope.channel` and records on `actor.channel`. It is never read from the wire: the API
 services derive `connect` from an access-token request and `web` from everything else; the agent's
-own writes are `agent` or `pipeline`. Three rules ask `isUserChannel`:
+own writes are `agent` or `pipeline`. Three rules ask `viableCardHelper.isUserChannel`:
 
 - the balance refusal — `ConnectOutOfCredits` for `connect`, `AgentOutOfTokens` otherwise;
 - re-formatting a narrative through the analyst — `web`/`connect` only;
@@ -188,11 +205,11 @@ own writes are `agent` or `pipeline`. Three rules ask `isUserChannel`:
 
 ### Card helpers and the design port
 
-`isViableProject` / `isViableStory` check kind AND type. `projectBriefOf(project, specs)` assembles
+`viableCardHelper.isViableProject` / `.isViableStory` check kind AND type. `viableSpecHelper.projectBriefOf(project, specs)` assembles
 the `AgentProject` brief (highest revision per part, `''` for an unwritten part, `alias` from the
-code). `userStoryOf(card, design?)` builds the coders' aggregate — the card wins on narrative,
-code, area and actor, the design supplies entities and screens; `userStoryOfDesign(design)` is the
-design-only reading. `storyDraftOf(card)` feeds the analysis prompts and moderation.
+code). `viableCardHelper.userStoryOf(card, design?)` builds the coders' aggregate — the card wins on narrative,
+code, area and actor, the design supplies entities and screens; `storyDesignHelper.userStoryOfDesign(design)` is the
+design-only reading. `viableCardHelper.storyDraftOf(card)` feeds the analysis prompts and moderation.
 `ExecutionState.projectCard` and `TaskExecutionState.card` carry the cards as plain data.
 
 `StoryDesignPort` is addressed by CARD id — `current(cardId)` and
@@ -226,6 +243,18 @@ schema, and a count the model should respect lives in the `description` and is c
 never as `minItems`/`maxItems`. The descriptions are what the planning model reads; `gate.target`
 is filled by code and described as such.
 
+**One reading of the landing page.** What a guest home draws is decided by the pure
+`landingPlanHelper` beside the schema, never re-derived by a consumer: `landingBandsOf` (the bands, in `LANDING_BAND_ORDER`,
+one presence rule each), `landingMenuOf` (the header menu: present bands only, page order, capped,
+padded to `LANDING_MENU.min`) and `homeSlotsOf` (the buttons a home link can attach to; a gate with
+fields removes `LANDING_GATE_SLOTS`). The optional bands (`useCases`, `differentiator`, `approach`,
+`about`) each carry a `basis` copied word for word from a source and checked downstream;
+`testimonials` is optional; `links` absent/`null` means undecided, `[]` decided none.
+`linksDecided` (optional, nullable, strings) lists the story codes whose links were decided at
+DEVELOPMENT time — a decision of no control included; absent on a plan whose links the planner
+decided. It is written by code only, so `ScaffoldPlanAnswerSchema` leaves it out of what the model
+is offered while the stored `ScaffoldPlanSchema` validates it.
+
 **A field that crosses a version skew carries no `enum`.** Users run `viable-mcp` from a moving
 `npx` range against a separately deployed platform, so `ConnectCapabilitiesSchema.executors.items`
 is a bare string: a newer executor kind is an unused capability on an older platform, never a
@@ -295,7 +324,7 @@ different ones) and the manager web agree on every address, schema and step. Pla
 - **`intentFlow` is walked on both sides and never becomes the live flow model.** `compose`
   (initial, the site) →`handoff`→ `land` (initial, the landing) →`review`→ `review` (`HOME`), plus
   the EXPLICIT `land` →`sign-in`→ `sign-in` (`DISPATCHER`) →`next`→ `review`. A signed-out visitor
-  is parked with `suspendFlow` at `sign-in`. The parameter is `?ref=` — never `?flow=` (`web-flow`
+  is parked with `flowLandingOf(context).suspendFlow` at `sign-in`. The parameter is `?ref=` — never `?flow=` (`web-flow`
   parses it on every page load) and never `?intent=` (the login surrogate window owns it).
 - **CORS is not declared here**: the routes ride the global `origin: '*'` (no credentials);
   `makeIntentProtocols` carries a `TODO(cors)` naming the origins to keep if that is restricted.
@@ -326,7 +355,7 @@ on the type only; the Google tag's CSP hosts never travel in it — the publishe
 (`technology`, `stack`, `template`, `createApp`, `packages`) and one OPTIONAL `experience` layer —
 what the product does for its users, changing no dependency and no coder prompt. Read `experience`
 only through a total helper: `landingGatePreferenceOf` (`LandingGatePreference.Allow` for no layer,
-no key or an unknown value) and `tenancyOf`. An execution carries a `BlueprintRef` — `id`,
+no key or an unknown value) and `tenancyHelper.tenancyOf`. An execution carries a `BlueprintRef` — `id`,
 optional `case`, optional `tenancy`, an override patch — never a resolved blueprint.
 
 `BlueprintCase` (`web`, `scalable`, `ai-pipeline`, `ai-agent`, `game`, `work-management`,
@@ -373,7 +402,7 @@ skips an unresolved alias — a missing body is a rule no model receives.
 - **`SubProject`** — a ROLE vocabulary mapped per layout (`ROLE_DIRS`), never joined onto a path.
   Both generations arrive on the wire, so the enum stays total over what any live agent sends, and
   no role but `Common` resolves to the `common` directory.
-- **`ConversionStage`** — advanced only through `stageAfter` / `canEnter` / `decisionFor`; a
+- **`ConversionStage`** — advanced only through `conversionStageHelper.stageAfter` / `.canEnter` / `.decisionFor`; a
   transition computed at a call site re-enters a stage already paid for.
 - **`ModerationCategory`** — a wire contract with eight languages of wording behind it; a fifth
   shape is PHRASED into one of the four, never added.
@@ -389,7 +418,7 @@ one allowed difference is stated: the platform's two keep what a volume it owns
 SDK's keeps what a DEVELOPER owns (`.viable`, the two `.env` files).
 
 `docs/conversion/` is addressed only through the path builders (`CONVERSION_*_FILE`,
-`conversionStoryDoc`, `conversionSeedDoc`) — the purge reads them back, and a path spelled at a
+`conversionDocHelper.conversionStoryDoc`, `.conversionSeedDoc`) — the purge reads them back, and a path spelled at a
 call site is a file the purge leaves behind.
 
 ## The inquiry vocabulary is a deliberate COPY; the ceiling is not
@@ -460,15 +489,15 @@ the manager's `useErrorPhrase` read the same substrings. A marker change changes
 | File | Pins |
 |---|---|
 | `planning.spec.ts` | the two flows and transition tables, type declarations, slots, code policies, reserved types outside `cardTypes`, field schemas (null optionals, refused strays and closed-set values), landing fields and sentence, the tenancy decision, the work kind and bounded case quote, card helpers, the `follows` anchor, refusal type names after a marshal |
-| `tenancy.spec.ts` | `NO_TENANCY` frozen, `tenancyOf` defaults and the literal-`true` rule, `tenantedArea` |
+| `tenancy.spec.ts` | `NO_TENANCY` frozen, `tenancyHelper.tenancyOf` defaults and the literal-`true` rule, `.tenantedArea` |
 | `access-schema.spec.ts` | the model-facing access schema: model keys only, byte-identical |
-| `scaffold.spec.ts` | old- and new-shape plans passing the schema and slot, `null` optionals, no `minItems` |
+| `scaffold.spec.ts` | old- and new-shape plans passing the schema and slot, `null` optionals, no `minItems`, closed anchors/slots, the landing helpers |
 | `blueprint.spec.ts` · `branding.spec.ts` | `landingGatePreferenceOf` defaults · the build env and metadata vocabulary |
 | `connect-entrypoints.spec.ts` · `connect-convert.spec.ts` | every route's method and path, aliases = `connectRef`, the paid gate on the delegated session alone, no socket or story route, branding body, the kit routes and their closed shapes · conversion routes, the start's body and both verbs' `confirm`, an unknown executor kind accepted |
 | `convert.spec.ts` | the three structural walks over the barrel, nullable enums under Ajv, census classifiers, stage transitions |
-| `design.spec.ts` | the design aggregate, staleness ranking, schema refusals, `userStoryOfDesign` |
+| `design.spec.ts` | the design aggregate, staleness ranking, schema refusals, `storyDesignHelper.userStoryOfDesign` |
 | `error-status.spec.ts` · `connect-errors.spec.ts` | declared statuses through a marshal · packed refusal fields fresh and after a round trip, the confirmation's `decode` |
-| `intent.spec.ts` | the four declarations without guards, schema cases incl. crafted refs, the flow walk and `suspendFlow` payload, error statuses |
+| `intent.spec.ts` | the four declarations without guards, schema cases incl. crafted refs, the flow walk and `flowLandingOf(context).suspendFlow` payload, error statuses |
 | `presentation.spec.ts` | the agent-output classifier (`/agent-presentation`) |
 
 ## Depends On
@@ -487,7 +516,7 @@ the manager's `useErrorPhrase` read the same substrings. A marker change changes
 
 - [[viable-sdk]] · [[viable-mcp]] — the connector SDK written against these contracts, and its npx
   stdio server
-- [[flow]] · [[client-flow]] — the model `intentFlow` is walked with, and `suspendFlow`
+- [[flow]] · [[client-flow]] — the model `intentFlow` is walked with, and `flowLandingOf(context).suspendFlow`
 - [[inquiry]] · [[llm-common]] — the primitive `InquiryPayload` mirrors; the model runtime's contracts
 - [[planning]] — the workcard model the planning module builds on
 - DOMAIN meaning lives downstream (`target-areas`, `target-tenancy`, `scaffolding`,

package/build/agent/index.d.ts

@@ -1,4 +1,5 @@
 export type * from './types.js';
+export type * from './presentation/types.js';
 export * from './spectator/index.js';
 export * from './memory.js';
 export * from './presentation.js';

package/build/agent/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/agent/index.ts"],"names":[],"mappings":"AACA,mBAAmB,YAAY,CAAA;AAC/B,cAAc,sBAAsB,CAAA;AACpC,cAAc,aAAa,CAAA;AAC3B,cAAc,mBAAmB,CAAA;AACjC,cAAc,aAAa,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/agent/index.ts"],"names":[],"mappings":"AACA,mBAAmB,YAAY,CAAA;AAC/B,mBAAmB,yBAAyB,CAAA;AAC5C,cAAc,sBAAsB,CAAA;AACpC,cAAc,aAAa,CAAA;AAC3B,cAAc,mBAAmB,CAAA;AACjC,cAAc,aAAa,CAAA"}

package/build/agent/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/agent/index.ts"],"names":[],"mappings":"AAEA,cAAc,sBAAsB,CAAA;AACpC,cAAc,aAAa,CAAA;AAC3B,cAAc,mBAAmB,CAAA;AACjC,cAAc,aAAa,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/agent/index.ts"],"names":[],"mappings":"AAGA,cAAc,sBAAsB,CAAA;AACpC,cAAc,aAAa,CAAA;AAC3B,cAAc,mBAAmB,CAAA;AACjC,cAAc,aAAa,CAAA"}

package/build/agent/presentation/types.d.ts

@@ -0,0 +1,21 @@
+import type { AgentCodeLanguage, AgentMessageRole } from '../consts.js';
+import type { AgentMessageClassificationInput, AgentMessagePresentation } from '../types.js';
+/** How an agent's thinking event is presented: its specialist family, its language, its card. */
+export interface AgentPresentationHelper {
+    /**
+     * Source extraction is an internal context-reduction pass. Its terminal tool call contains only
+     * line ranges, which are useful to the coder but add no useful information to a person's journal.
+     */
+    isAgentMessageHidden: (input: AgentMessageClassificationInput) => boolean;
+    /** Maps the attribution that reached the event boundary to the visual specialist family. */
+    agentMessageRoleOf: (input: AgentMessageClassificationInput) => AgentMessageRole;
+    /** Pulls a schema argument out of LangChain's serialised tool-call shape. */
+    agentToolCallArguments: (value: unknown) => unknown;
+    /** Finds the language of a unified diff from its destination (or source) file path. */
+    agentDiffLanguageOf: (text: string) => AgentCodeLanguage;
+    /** Conservative code detection; prose with one identifier remains plain text. */
+    agentCodeLanguageOf: (text: string) => AgentCodeLanguage;
+    isUnifiedDiff: (text: string) => boolean;
+    classifyAgentMessage: (input: AgentMessageClassificationInput) => AgentMessagePresentation;
+}
+//# sourceMappingURL=types.d.ts.map

package/build/agent/presentation/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/agent/presentation/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AACvE,OAAO,KAAK,EAAE,+BAA+B,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAA;AAE5F,iGAAiG;AACjG,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,oBAAoB,EAAE,CAAC,KAAK,EAAE,+BAA+B,KAAK,OAAO,CAAA;IACzE,4FAA4F;IAC5F,kBAAkB,EAAE,CAAC,KAAK,EAAE,+BAA+B,KAAK,gBAAgB,CAAA;IAChF,6EAA6E;IAC7E,sBAAsB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAA;IACnD,uFAAuF;IACvF,mBAAmB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,iBAAiB,CAAA;IACxD,iFAAiF;IACjF,mBAAmB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,iBAAiB,CAAA;IACxD,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAA;IACxC,oBAAoB,EAAE,CAAC,KAAK,EAAE,+BAA+B,KAAK,wBAAwB,CAAA;CAC3F"}

package/build/agent/presentation/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/build/agent/presentation/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/agent/presentation/types.ts"],"names":[],"mappings":""}

package/build/agent/presentation.d.ts

@@ -1,18 +1,20 @@
 import { AgentCodeLanguage, AgentMessageRole } from './consts.js';
 import type { AgentMessageClassificationInput, AgentMessagePresentation } from './types.js';
-/**
- * Source extraction is an internal context-reduction pass. Its terminal tool call contains only
- * line ranges, which are useful to the coder but add no useful information to a person's journal.
- */
+import type { AgentPresentationHelper } from './presentation/types.js';
+export declare const createAgentPresentationHelper: () => AgentPresentationHelper;
+export declare const agentPresentationHelper: AgentPresentationHelper;
+/** @deprecated compat:factory-refactor — use `agentPresentationHelper.isAgentMessageHidden(…)` */
 export declare const isAgentMessageHidden: (input: AgentMessageClassificationInput) => boolean;
-/** Maps the attribution that reached the event boundary to the visual specialist family. */
+/** @deprecated compat:factory-refactor — use `agentPresentationHelper.agentMessageRoleOf(…)` */
 export declare const agentMessageRoleOf: (input: AgentMessageClassificationInput) => AgentMessageRole;
-/** Pulls a schema argument out of LangChain's serialised tool-call shape. */
+/** @deprecated compat:factory-refactor — use `agentPresentationHelper.agentToolCallArguments(…)` */
 export declare const agentToolCallArguments: (value: unknown) => unknown;
-/** Finds the language of a unified diff from its destination (or source) file path. */
+/** @deprecated compat:factory-refactor — use `agentPresentationHelper.agentDiffLanguageOf(…)` */
 export declare const agentDiffLanguageOf: (text: string) => AgentCodeLanguage;
-/** Conservative code detection; prose with one identifier remains plain text. */
+/** @deprecated compat:factory-refactor — use `agentPresentationHelper.agentCodeLanguageOf(…)` */
 export declare const agentCodeLanguageOf: (text: string) => AgentCodeLanguage;
+/** @deprecated compat:factory-refactor — use `agentPresentationHelper.isUnifiedDiff(…)` */
 export declare const isUnifiedDiff: (text: string) => boolean;
+/** @deprecated compat:factory-refactor — use `agentPresentationHelper.classifyAgentMessage(…)` */
 export declare const classifyAgentMessage: (input: AgentMessageClassificationInput) => AgentMessagePresentation;
 //# sourceMappingURL=presentation.d.ts.map

package/build/agent/presentation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"presentation.d.ts","sourceRoot":"","sources":["../../src/agent/presentation.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAA2C,gBAAgB,EAAuB,MAAM,aAAa,CAAA;AAE/H,OAAO,KAAK,EAAE,+BAA+B,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAA;AAc3F;;;GAGG;AACH,eAAO,MAAM,oBAAoB,UAAW,+BAA+B,KAAG,OACxC,CAAA;AAEtC,4FAA4F;AAC5F,eAAO,MAAM,kBAAkB,UAAW,+BAA+B,KAAG,gBAgB3E,CAAA;AAED,6EAA6E;AAC7E,eAAO,MAAM,sBAAsB,UAAW,OAAO,KAAG,OAIvD,CAAA;AAkDD,uFAAuF;AACvF,eAAO,MAAM,mBAAmB,SAAU,MAAM,KAAG,iBAGlD,CAAA;AAaD,iFAAiF;AACjF,eAAO,MAAM,mBAAmB,SAAU,MAAM,KAAG,iBAmBlD,CAAA;AAED,eAAO,MAAM,aAAa,SAAU,MAAM,KAAG,OACuD,CAAA;AAcpG,eAAO,MAAM,oBAAoB,UAAW,+BAA+B,KAAG,wBAsC7E,CAAA"}
+{"version":3,"file":"presentation.d.ts","sourceRoot":"","sources":["../../src/agent/presentation.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAA2C,gBAAgB,EAAuB,MAAM,aAAa,CAAA;AAE/H,OAAO,KAAK,EAAE,+BAA+B,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAA;AAC3F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAA;AAEtE,eAAO,MAAM,6BAA6B,QAAO,uBAgMhD,CAAA;AAED,eAAO,MAAM,uBAAuB,yBAAkC,CAAA;AAEtE,kGAAkG;AAClG,eAAO,MAAM,oBAAoB,UAAW,+BAA+B,KAAG,OACzB,CAAA;AAErD,gGAAgG;AAChG,eAAO,MAAM,kBAAkB,UAAW,+BAA+B,KAAG,gBACzB,CAAA;AAEnD,oGAAoG;AACpG,eAAO,MAAM,sBAAsB,UAAW,OAAO,KAAG,OAAgE,CAAA;AAExH,iGAAiG;AACjG,eAAO,MAAM,mBAAmB,SAAU,MAAM,KAAG,iBAAsE,CAAA;AAEzH,iGAAiG;AACjG,eAAO,MAAM,mBAAmB,SAAU,MAAM,KAAG,iBAAsE,CAAA;AAEzH,2FAA2F;AAC3F,eAAO,MAAM,aAAa,SAAU,MAAM,KAAG,OAAsD,CAAA;AAEnG,kGAAkG;AAClG,eAAO,MAAM,oBAAoB,UAAW,+BAA+B,KAAG,wBACzB,CAAA"}