@rubytech/create-maxy-code 0.1.96 → 0.1.98

package/payload/platform/services/claude-session-manager/scripts/stash-cleanup.sh

@@ -0,0 +1,410 @@
+#!/usr/bin/env bash
+# Task 273 — one-time JSONL stash-composite cleanup.
+#
+# For each `<uuid>.<unix-ms>.jsonl` file under a CLAUDE_STATE_ROOT/projects
+# directory (top-level and archive/ subdir), pair it with the canonical
+# `<uuid>.jsonl`. Keep the larger of the two as the canonical; move the
+# smaller (with its sidecar) to QUARANTINE_ROOT, preserving the original
+# basename. If only the timestamped sibling exists (no canonical), promote
+# it to the canonical name. The quarantine path sits outside any directory
+# the fs-watcher scans, so quarantined files do not appear in the sidebar.
+#
+# Safety rails:
+#   1. Refuse to run if any PID file exists under CLAUDE_STATE_ROOT/sessions/.
+#      A live PTY holding one of the affected UUIDs is the failure mode this
+#      check guards against.
+#   2. Refuse to overwrite an existing quarantine target — if the same
+#      timestamped basename already sits in quarantine from a prior run,
+#      surface the conflict and skip rather than clobber.
+#   3. Sidecar `.meta.json` files follow the same disposition as their JSONL.
+#   4. A `.log` audit trail records every rename and quarantine move with
+#      from=, to=, bytes=, mtime=. The transcript is the operator's
+#      audit before approving permanent deletion in a follow-up task.
+#
+# Usage:
+#   stash-cleanup.sh <claude-state-root> [--dry-run]
+#     e.g. ~/.realagent-code/.claude
+#
+#   stash-cleanup.sh --self-test
+#     Seeds a temp dir with collision pairs, runs the cleanup against it,
+#     asserts post-conditions, and cleans up. Exits non-zero on failure.
+
+set -euo pipefail
+
+usage() {
+  cat <<USAGE
+Task 273 JSONL stash-cleanup.
+
+Usage:
+  $0 <claude-state-root> [--dry-run]
+  $0 --self-test
+
+Arguments:
+  <claude-state-root>  e.g. ~/.realagent-code/.claude
+
+Flags:
+  --dry-run    Plan-only: log what would happen, change nothing on disk.
+  --self-test  Run the embedded smoke test; exits 0 on PASS.
+USAGE
+}
+
+log() { printf '[stash-cleanup] %s\n' "$*"; }
+err() { printf '[stash-cleanup] ERROR: %s\n' "$*" >&2; }
+
+# Returns 0 if the basename matches `<uuid>.<unix-ms>.jsonl`. UUID is
+# 36 chars including dashes; ms timestamp is exactly 13 digits.
+is_stash_composite_basename() {
+  local name="$1"
+  [[ "$name" =~ ^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}\.[0-9]{13}\.jsonl$ ]]
+}
+
+# Extract the canonical `<uuid>.jsonl` basename from a stash composite.
+canonical_basename_for() {
+  local stash="$1"
+  printf '%s.jsonl\n' "${stash:0:36}"
+}
+
+bytes_of() {
+  if [[ -f "$1" ]]; then
+    stat -f%z "$1" 2>/dev/null || stat -c%s "$1"
+  else
+    printf '0\n'
+  fi
+}
+
+mtime_of() {
+  if [[ -f "$1" ]]; then
+    stat -f%m "$1" 2>/dev/null || stat -c%Y "$1"
+  else
+    printf '0\n'
+  fi
+}
+
+# Move a JSONL file (and its sidecar if present) to quarantine, preserving
+# the original basename. Refuses to clobber.
+move_to_quarantine() {
+  local src="$1" qdir="$2" reason="$3"
+  local bn dst sidecar_src sidecar_dst
+  bn=$(basename "$src")
+  dst="$qdir/$bn"
+
+  if [[ -e "$dst" ]]; then
+    err "quarantine target already exists, skipping: $dst"
+    return 1
+  fi
+
+  local sz mt
+  sz=$(bytes_of "$src")
+  mt=$(mtime_of "$src")
+  if [[ "$DRY_RUN" == "yes" ]]; then
+    log "DRY quarantine reason=$reason from=$src to=$dst bytes=$sz mtime=$mt"
+  else
+    mkdir -p "$qdir"
+    mv "$src" "$dst"
+    log "quarantine reason=$reason from=$src to=$dst bytes=$sz mtime=$mt"
+  fi
+
+  # Sidecar follows: `<base>.meta.json` where <base> is the JSONL path minus
+  # the trailing `.jsonl`.
+  sidecar_src="${src%.jsonl}.meta.json"
+  sidecar_dst="${dst%.jsonl}.meta.json"
+  if [[ -f "$sidecar_src" ]]; then
+    if [[ -e "$sidecar_dst" ]]; then
+      err "sidecar quarantine target already exists, skipping: $sidecar_dst"
+      return 1
+    fi
+    local ssz smt
+    ssz=$(bytes_of "$sidecar_src")
+    smt=$(mtime_of "$sidecar_src")
+    if [[ "$DRY_RUN" == "yes" ]]; then
+      log "DRY quarantine-sidecar from=$sidecar_src to=$sidecar_dst bytes=$ssz mtime=$smt"
+    else
+      mv "$sidecar_src" "$sidecar_dst"
+      log "quarantine-sidecar from=$sidecar_src to=$sidecar_dst bytes=$ssz mtime=$smt"
+    fi
+  fi
+}
+
+# Promote `src` to `dst` by renaming. Sidecar follows.
+promote_in_place() {
+  local src="$1" dst="$2" reason="$3"
+  local sidecar_src sidecar_dst
+  local sz mt
+  sz=$(bytes_of "$src")
+  mt=$(mtime_of "$src")
+  if [[ "$DRY_RUN" == "yes" ]]; then
+    log "DRY promote reason=$reason from=$src to=$dst bytes=$sz mtime=$mt"
+  else
+    mv "$src" "$dst"
+    log "promote reason=$reason from=$src to=$dst bytes=$sz mtime=$mt"
+  fi
+
+  sidecar_src="${src%.jsonl}.meta.json"
+  sidecar_dst="${dst%.jsonl}.meta.json"
+  if [[ -f "$sidecar_src" ]]; then
+    local ssz smt
+    ssz=$(bytes_of "$sidecar_src")
+    smt=$(mtime_of "$sidecar_src")
+    if [[ "$DRY_RUN" == "yes" ]]; then
+      log "DRY promote-sidecar from=$sidecar_src to=$sidecar_dst bytes=$ssz mtime=$smt"
+    else
+      mv "$sidecar_src" "$sidecar_dst"
+      log "promote-sidecar from=$sidecar_src to=$sidecar_dst bytes=$ssz mtime=$smt"
+    fi
+  fi
+}
+
+# Process one directory (top-level or archive/). For each stash composite,
+# pair with canonical; resolve.
+process_dir() {
+  local dir="$1" qdir="$2"
+  [[ -d "$dir" ]] || { log "skip: $dir does not exist"; return 0; }
+
+  local handled=0
+  shopt -s nullglob
+  for path in "$dir"/*.jsonl; do
+    local bn
+    bn=$(basename "$path")
+    is_stash_composite_basename "$bn" || continue
+    handled=$((handled + 1))
+
+    local canonical_bn canonical_path
+    canonical_bn=$(canonical_basename_for "$bn")
+    canonical_path="$dir/$canonical_bn"
+
+    if [[ -f "$canonical_path" ]]; then
+      local stash_sz canonical_sz
+      stash_sz=$(bytes_of "$path")
+      canonical_sz=$(bytes_of "$canonical_path")
+      log "pair dir=$dir uuid=${bn:0:8} stash=$bn stash-bytes=$stash_sz canonical-bytes=$canonical_sz"
+
+      if (( stash_sz > canonical_sz )); then
+        # Stash wins. Quarantine canonical first (preserving its name),
+        # then promote stash to canonical.
+        local canonical_quarantine_name="$canonical_bn.canonical"
+        local canonical_qdst="$qdir/$canonical_quarantine_name"
+        if [[ -e "$canonical_qdst" ]]; then
+          err "canonical quarantine target exists, skipping pair: $canonical_qdst"
+          continue
+        fi
+        local csz cmt
+        csz=$(bytes_of "$canonical_path")
+        cmt=$(mtime_of "$canonical_path")
+        if [[ "$DRY_RUN" == "yes" ]]; then
+          log "DRY quarantine reason=smaller-canonical from=$canonical_path to=$canonical_qdst bytes=$csz mtime=$cmt"
+        else
+          mkdir -p "$qdir"
+          mv "$canonical_path" "$canonical_qdst"
+          log "quarantine reason=smaller-canonical from=$canonical_path to=$canonical_qdst bytes=$csz mtime=$cmt"
+        fi
+        # Canonical sidecar follows with the same suffix.
+        local csc_src="${canonical_path%.jsonl}.meta.json"
+        local csc_dst="${canonical_qdst%.jsonl}.meta.json"
+        if [[ -f "$csc_src" ]]; then
+          if [[ "$DRY_RUN" == "yes" ]]; then
+            log "DRY quarantine-sidecar from=$csc_src to=$csc_dst"
+          else
+            mv "$csc_src" "$csc_dst"
+            log "quarantine-sidecar from=$csc_src to=$csc_dst"
+          fi
+        fi
+        promote_in_place "$path" "$canonical_path" "stash-larger-than-canonical"
+      else
+        # Canonical wins (or equal). Quarantine stash with its original
+        # timestamped basename.
+        move_to_quarantine "$path" "$qdir" "smaller-stash" || true
+      fi
+    else
+      # No canonical on disk. Promote the stash to canonical.
+      log "lone-stash dir=$dir uuid=${bn:0:8} stash=$bn"
+      promote_in_place "$path" "$canonical_path" "no-canonical-present"
+    fi
+  done
+  shopt -u nullglob
+
+  log "summary dir=$dir composites-handled=$handled"
+}
+
+# Walks every project directory under <state-root>/projects/ and processes
+# top-level + archive/ for each.
+run_cleanup() {
+  local state_root="$1"
+  local projects_root="$state_root/projects"
+  local sessions_root="$state_root/sessions"
+  local quarantine_root="$state_root/quarantine"
+
+  [[ -d "$projects_root" ]] || { err "projects root not found: $projects_root"; return 2; }
+
+  # Pre-flight: no live PTY may be running. The sessions/ directory holds
+  # one PID file per live PTY (Task 199 contract); empty = no live PTYs.
+  if [[ -d "$sessions_root" ]]; then
+    shopt -s nullglob
+    local pids=("$sessions_root"/*.json)
+    shopt -u nullglob
+    if (( ${#pids[@]} > 0 )); then
+      err "live PTY detected — ${#pids[@]} PID file(s) under $sessions_root; refuse to touch on-disk state"
+      err "stop the affected sessions first, then retry"
+      return 3
+    fi
+  fi
+  log "pre-flight pid-files=0 sessions-root=$sessions_root"
+
+  shopt -s nullglob
+  local project_dirs=("$projects_root"/*/)
+  shopt -u nullglob
+  log "projects-found count=${#project_dirs[@]}"
+
+  for project_dir in "${project_dirs[@]}"; do
+    local slug
+    slug=$(basename "$project_dir")
+    local qdir="$quarantine_root/$slug"
+    log "project-begin slug=$slug"
+    process_dir "${project_dir%/}" "$qdir"
+    process_dir "${project_dir%/}/archive" "$qdir/archive"
+    log "project-end slug=$slug"
+  done
+
+  log "done state-root=$state_root quarantine-root=$quarantine_root dry-run=$DRY_RUN"
+}
+
+# ----- self-test --------------------------------------------------------
+
+self_test() {
+  local tmp
+  tmp=$(mktemp -d)
+  # Expand at trap-set time so the path survives function-local scope.
+  trap "rm -rf '$tmp'" EXIT
+
+  local state="$tmp/state"
+  mkdir -p "$state/projects/slug-A" "$state/projects/slug-A/archive" "$state/sessions"
+
+  # Pair 1: timestamped sibling is larger; should win.
+  local uuid1="4bfe4274-1111-4111-8111-111111111111"
+  local big="payload-big"
+  local small="x"
+  printf '%s' "$big" > "$state/projects/slug-A/${uuid1}.1779477697566.jsonl"
+  printf '%s' "$small" > "$state/projects/slug-A/${uuid1}.jsonl"
+
+  # Pair 2: canonical is larger; sibling loses.
+  local uuid2="9c26cc66-2222-4222-8222-222222222222"
+  printf '%s' "big-canonical" > "$state/projects/slug-A/${uuid2}.jsonl"
+  printf '%s' "tiny" > "$state/projects/slug-A/${uuid2}.1779477700000.jsonl"
+
+  # Pair 3 (archive): canonical wins (matches the be23f93a archive-pair shape).
+  local uuid3="654f5fe5-3333-4333-8333-333333333333"
+  printf '%s' "archived-big-history" > "$state/projects/slug-A/archive/${uuid3}.jsonl"
+  printf '%s' "tiny" > "$state/projects/slug-A/archive/${uuid3}.1779477705000.jsonl"
+
+  # Pair 4: lone stash, no canonical present.
+  local uuid4="abcdef01-4444-4444-8444-444444444444"
+  printf '%s' "lone-stash-content" > "$state/projects/slug-A/${uuid4}.1779477710000.jsonl"
+
+  # Sidecar on uuid1's stash (the winner) — should travel with the rename
+  # to canonical. Sidecar on uuid2's stash (the loser) — should follow to
+  # quarantine.
+  printf '{"meta":"win"}' > "$state/projects/slug-A/${uuid1}.1779477697566.meta.json"
+  printf '{"meta":"lose"}' > "$state/projects/slug-A/${uuid2}.1779477700000.meta.json"
+
+  DRY_RUN=no run_cleanup "$state" >/tmp/stash-cleanup-selftest.log 2>&1 \
+    || { cat /tmp/stash-cleanup-selftest.log; err "self-test: run_cleanup failed"; exit 1; }
+
+  local fail=0
+  local q="$state/quarantine/slug-A"
+  local qa="$state/quarantine/slug-A/archive"
+
+  # uuid1: canonical now holds "payload-big"; old canonical lives in
+  # quarantine with the `.canonical` suffix.
+  if [[ "$(cat "$state/projects/slug-A/${uuid1}.jsonl" 2>/dev/null)" != "$big" ]]; then
+    err "uuid1 canonical did not receive stash content"; fail=1
+  fi
+  if [[ -e "$state/projects/slug-A/${uuid1}.1779477697566.jsonl" ]]; then
+    err "uuid1 stash sibling still on disk after promotion"; fail=1
+  fi
+  if [[ "$(cat "$q/${uuid1}.jsonl.canonical" 2>/dev/null)" != "$small" ]]; then
+    err "uuid1 old canonical not in quarantine"; fail=1
+  fi
+  # Sidecar followed promotion.
+  if [[ "$(cat "$state/projects/slug-A/${uuid1}.meta.json" 2>/dev/null)" != '{"meta":"win"}' ]]; then
+    err "uuid1 sidecar did not follow promotion"; fail=1
+  fi
+
+  # uuid2: canonical untouched; stash sibling in quarantine.
+  if [[ "$(cat "$state/projects/slug-A/${uuid2}.jsonl" 2>/dev/null)" != "big-canonical" ]]; then
+    err "uuid2 canonical altered"; fail=1
+  fi
+  if [[ ! -f "$q/${uuid2}.1779477700000.jsonl" ]]; then
+    err "uuid2 stash sibling not quarantined"; fail=1
+  fi
+  if [[ "$(cat "$q/${uuid2}.1779477700000.meta.json" 2>/dev/null)" != '{"meta":"lose"}' ]]; then
+    err "uuid2 sidecar did not follow to quarantine"; fail=1
+  fi
+
+  # uuid3 (archive): canonical wins; stash sibling in archive-quarantine.
+  if [[ "$(cat "$state/projects/slug-A/archive/${uuid3}.jsonl" 2>/dev/null)" != "archived-big-history" ]]; then
+    err "uuid3 archive canonical altered"; fail=1
+  fi
+  if [[ ! -f "$qa/${uuid3}.1779477705000.jsonl" ]]; then
+    err "uuid3 archive stash sibling not quarantined under archive/"; fail=1
+  fi
+
+  # uuid4: lone stash promoted in place; no quarantine.
+  if [[ "$(cat "$state/projects/slug-A/${uuid4}.jsonl" 2>/dev/null)" != "lone-stash-content" ]]; then
+    err "uuid4 lone stash not promoted to canonical"; fail=1
+  fi
+  if [[ -e "$state/projects/slug-A/${uuid4}.1779477710000.jsonl" ]]; then
+    err "uuid4 stash file still on disk after promotion"; fail=1
+  fi
+
+  # No <uuid>.<unix-ms>.jsonl siblings remain in the projects scan scope.
+  local residual
+  residual=$(find "$state/projects" -type f -name '*.jsonl' \
+    | awk -F/ '{ print $NF }' \
+    | grep -cE '^[a-f0-9-]{36}\.[0-9]{13}\.jsonl$' || true)
+  if (( residual > 0 )); then
+    err "self-test: $residual timestamped siblings still present"; fail=1
+  fi
+
+  # Live-PTY guard: seed a PID file and confirm the script refuses.
+  printf '{"pid":1234}' > "$state/sessions/1234.json"
+  if DRY_RUN=no run_cleanup "$state" >>/tmp/stash-cleanup-selftest.log 2>&1; then
+    err "self-test: live-PTY guard did not refuse"; fail=1
+  fi
+  rm -f "$state/sessions/1234.json"
+
+  if (( fail > 0 )); then
+    cat /tmp/stash-cleanup-selftest.log
+    err "self-test: FAILED"
+    exit 1
+  fi
+
+  log "self-test: PASS"
+}
+
+# ----- entry point ------------------------------------------------------
+
+DRY_RUN=no
+case "${1:-}" in
+  -h|--help|"")
+    usage
+    exit 0
+    ;;
+  --self-test)
+    self_test
+    exit 0
+    ;;
+  *)
+    STATE_ROOT="${1:-}"
+    shift || true
+    while (( $# > 0 )); do
+      case "$1" in
+        --dry-run) DRY_RUN=yes ;;
+        *) err "unknown flag: $1"; usage; exit 2 ;;
+      esac
+      shift
+    done
+    [[ -n "$STATE_ROOT" ]] || { usage; exit 2; }
+    # Expand ~ since the caller may pass it.
+    STATE_ROOT="${STATE_ROOT/#\~/$HOME}"
+    run_cleanup "$STATE_ROOT" || exit $?
+    ;;
+esac

package/payload/premium-plugins/.claude-plugin/marketplace.json

@@ -4,6 +4,11 @@
     "name": "Rubytech LLC"
   },
   "plugins": [
+    {
+      "name": "founder-pack",
+      "source": "./founder-pack",
+      "version": "0.1.0"
+    },
     {
       "name": "teaching",
       "source": "./teaching",

package/payload/premium-plugins/founder-pack/.claude-plugin/plugin.json

@@ -0,0 +1,8 @@
+{
+  "name": "founder-pack",
+  "description": "founder-pack plugin",
+  "version": "0.1.0",
+  "author": {
+    "name": "Rubytech LLC"
+  }
+}

package/payload/premium-plugins/founder-pack/skills/investor-data-room/SKILL.md

@@ -0,0 +1,218 @@
+---
+name: investor-data-room
+description: Use when a UK-domiciled founder needs to produce a full seed-raise pack from idea to deliverables: graph-structured data room, 15-section business plan, 12-slide deck blueprint, print-ready HTML+PDF for both. Trigger phrases include "build me a data room", "draft a business plan", "deck from the business plan", "print-ready PDF for the prospectus", "from office hours to investor pack", "set up the fundraise repo". The skill never speculates on financial figures or cap-table values: every number traces to a Companies House filing, a financial model worksheet, or a source citation. Public-facing artefacts contain zero internal workings (no "reconciliation pending", no "open Q" markers, no comparison-to-baseline commentary). Design tokens are harmonised across business plan, deck, and prospectus per `realagent-site/.docs/design-tokens.md`.
+allowed-tools:
+  - Bash
+  - Read
+  - Write
+  - Edit
+  - Glob
+  - Grep
+  - WebSearch
+  - WebFetch
+---
+
+# investor-data-room
+
+Build a UK seed-raise pack in five stages. Each stage has an outcome contract; do not advance until the contract is met.
+
+## Outcome contract (whole skill)
+
+Complete when the data room contains:
+
+```
+<project-site>/.docs/data-room/
+  README.md                                 # data-room index, status snapshot, doctrine
+  01-narrative/
+    office-hours-design.md                  # ideation working scratchpad
+    business-plan.md                        # 15-section business plan
+    deck-blueprint.md                       # 12-slide blueprint
+  02-corporate-legal/
+    README.md                               # incorporation filings, articles, board minutes
+    incorporation-<co-house-no>-<date>.pdf  # IN01 + statement of capital + cap table
+  03-cap-table/
+    README.md                               # pre/post-investment cap table with PSC notes
+  04-financials/
+    README.md
+    model_worksheet.md                      # opening cash, capex, burn, MRR ramp, two-round
+  05-commercial/
+    README.md
+    <gtm-partner-1>.md                      # one file per named partner
+    <gtm-partner-1>-proposal.pdf
+  06-product-ip/
+    README.md
+    encrypted-document-sharing.md           # if applicable
+  07-team/
+    README.md
+    <founder-1>.pdf                         # CV per foregrounded founder
+  08-market/
+    README.md
+    sources.md                              # every market figure with citation
+    competitor-value-claims-rebuttal.md
+  09-operations/
+    README.md
+  10-supporting/
+    README.md
+  html/
+    business-plan/
+      index.html                            # A4 portrait, design tokens, premium register
+      render-pdf.mjs                        # Playwright + img2pdf + qpdf pipeline
+      business-plan.pdf                     # rendered output
+      logo-light.png logo-dark.png
+    prospectus/
+      index.html
+      render-pdf.mjs
+      prospectus.pdf
+    deck/                                   # NOT YET BUILT in the reference project
+      index.html
+      render-pdf.mjs
+      deck.pdf
+```
+
+Skip stages that are already complete; do not regenerate stale artefacts blindly.
+
+## Stage 1 — Office-hours ideation
+
+Drive a conversational discovery session using the `/office-hours` skill (or equivalent YC-style forcing questions: demand reality, status quo, desperate specificity, narrowest wedge, observation, future-fit). Output a single `office-hours-design.md` capturing:
+
+- Problem statement
+- Demand evidence (with numbers and dates)
+- Status quo
+- Target user and narrowest wedge
+- Constraints
+- Six to eight numbered premises (founder-confirmed)
+- Two to four narrative-shape alternatives with a recommendation
+- Financials / use-of-funds placeholders flagged as open questions
+- Founder Signal Reflection
+
+This file is the working substrate. It stays internal-only. Every later artefact derives from it.
+
+**Doctrine.** Never speculate on numbers; flag them as open questions until the founder confirms.
+
+## Stage 2 — Data room scaffold
+
+Build the directory tree above. Each section gets a `README.md` that doubles as a content checklist (purpose, expected contents, current state, gaps). The graph structure is fixed: ten numbered sections (`01-narrative` through `10-supporting`) plus a top-level README and an `html/` subdirectory for rendered deliverables.
+
+**File-naming conventions:**
+
+- `<co-house-no>` for Companies House filings (e.g. `incorporation-17237239-2026-05-22.pdf`).
+- `<founder-firstname>-<lastname>.pdf` for CVs.
+- `<gtm-partner>.md` + `<gtm-partner>-proposal.pdf` for each commercial partner.
+- All `README.md` files are markdown only.
+
+**Where the published URL lives.** If the project hosts a public prospectus or marketing microsite, keep the published artefacts at a stable path (e.g. `realagent.chat/sites/<slug>/`); the rendered HTML inside `html/<artefact>/index.html` is the source of truth and republishes from there.
+
+References: `references/data-room-structure.md` for the section-by-section purpose statements.
+
+## Stage 3 — Business plan synthesis
+
+Generate `01-narrative/business-plan.md` with **15 sections** following the canonical structure:
+
+1. Executive Summary
+2. Vision and Mission (Vision / Mission / Doctrine triad)
+3. The Company (legal entity table + pre-investment cap table)
+4. The Market (TAM/SAM/SOM + structural tailwind + self-employed wedge + domestic adjacency + international upside + pricing)
+5. The Product (what it is + wedge product + upsell path + substrate moat + conversation ingestion + network + Anthropic asymmetric capture + human-services layer)
+6. The Business Model (revenue streams + unit economics)
+7. Go-to-Market (Wedge → Beachhead → Blitzscale framework + demand evidence + GTM partners + horse-before-cart logic + geography)
+8. Competition (three failing categories + RANL differentiation + most-direct-competitor counter)
+9. Operations (technology stack + data sovereignty + IP ownership chain + compliance posture summary)
+10. Compliance and regulatory positioning (UK consumer protection + UK data/AI regime + EU AI Act + adjacent UK obligations + moat-not-tax close)
+11. Team (founders + strategic shareholders + hiring plan)
+12. Financial Plan (12.1 opening balance sheet through 12.7 use of funds)
+13. Risks and Mitigations
+14. Milestones (the N-month thesis)
+15. The bottom line (summary table + close)
++ Appendices (titled documents only; no internal-only file pointers)
+
+**Critical rules** (all enforced; recurrence is a P0 violation):
+
+- **No internal workings** in body text. No "reconciliation pending", no "open Q", no comparison-to-baseline ("loss has grown from X to Y because…"), no cross-references to `office-hours-design.md` or any working file.
+- **Cap table is authoritative from the IN01.** Reconcile the share-capital line (`500,000 ordinary @ £0.001 nominal` vs `@ £0.01`) before writing the opening balance sheet. Inception premium (e.g. one founder paying £4,500 above nominal) reconciles £5k inception cash against £500 nominal.
+- **Every market figure cites a source.** Maintain `08-market/sources.md` with every figure used in the business plan; the body references "Appendix B" by title, never an internal file path.
+- **Financial figures derive from the model worksheet.** Cite "Appendix A" by title.
+- **No em-dashes between alphabetic words** in user-facing prose (recurring style violation in this project's history; see `references/internal-workings-scrub.md`).
+
+Compliance research is mandatory before drafting Section 10. WebSearch (or equivalent) for: DMCC Act (UK consumer protection for estate-agency), ICO ADM framework (Articles 22A–22D under UK GDPR + ICO 2025 strategy), EU AI Act (force date, high-risk classification for property-financing decisions). Cite each.
+
+References: `references/business-plan-template.md` for the section-by-section template; `references/compliance-research-checklist.md` for the UK + EU regulatory regimes to verify.
+
+## Stage 4 — Deck blueprint synthesis
+
+Generate `01-narrative/deck-blueprint.md` as a **12-slide brief** the deck designer can execute. Each slide has Purpose, Headline (one-line message), Body (bullets + figures pulled from the business plan), Visual suggestion, and Source reference. The 12 slides:
+
+1. Cover (raise headline + founders)
+2. Vision (Vision / Mission / Doctrine)
+3. The Market (TAM + tailwind + wedge)
+4. Business Model (subscription + service layer + unit economics)
+5. Go-to-Market (Wedge → Beachhead → Blitzscale + named partners)
+6. The Product (substrate + wedge + network + asymmetric capture + services layer)
+7. Competition (three failing categories + most-direct counter)
+8. The Team (founders + strategic shareholders)
+9. Economics (P&L summary + cash flow + break-even)
+10. The Raise (size, valuation, dilution, instrument, use of funds, IP transfer, follow-on round)
+11. Milestones (M0 to M-final timeline)
+12. Other Information (compliance + platform dependency + contact)
+
+Production notes attached: format (16:9 landscape, PDF + source deck), design tokens reference (`realagent-site/.docs/design-tokens.md` or project equivalent), chart-source consistency with the financial model, speaker-note attribution.
+
+References: `references/deck-blueprint-template.md`.
+
+## Stage 5 — HTML + PDF render pipeline
+
+For each artefact that ships as a print-ready PDF (business plan, prospectus, deck), produce three files under `html/<artefact>/`:
+
+```
+index.html        # A4 portrait single HTML file, premium design tokens, sectioned by <section class="page">
+render-pdf.mjs    # Playwright + img2pdf + qpdf pipeline (image-only PDF, linearized)
+<artefact>.pdf    # rendered output (regenerate after every HTML edit)
+```
+
+**Hard constraints** (from the `property-brochure:a4-print-documents` skill):
+
+- A4 portrait: `@page { size: A4 portrait; margin: 18mm 16mm 20mm; }`
+- One `<section class="page">` per A4 page; renderer aborts if `scrollHeight` exceeds 1123px + 2px slack.
+- Page numbers via CSS counter in `.page::after { content: counter(pagenum); }`. The renderer screenshots each section, so `@page @bottom-center` rules do NOT propagate.
+- Image-only PDF: Playwright captures one PNG per section at deviceScaleFactor 3.125 (300 dpi); `img2pdf --pagesize 210mmx297mm` binds them; `qpdf --linearize --object-streams=disable` linearises.
+- Even page count for booklet binding (multiple of 4 ideal). Add or remove a supporting page if parity breaks.
+- Cover and backpage are full-bleed `--surface-deep` with `@page :first { margin: 0 }` and named `@page backpage-full`.
+- Screen-only chrome (e.g. a Download PDF pill button) uses `@media print { display: none !important; }` per the skill.
+- `execFileSync` for img2pdf and qpdf (never `execSync` with template strings: shell-injection class).
+- Verify: `qpdf --check`, `pdfinfo | grep -E "Pages|Optimized"`, **and read every page visually**. `pdfinfo` reporting "25 pages, A4" is not verification.
+
+**Design tokens.** Reference the project's `design-tokens.md` Tier 1 (raw) + Tier 2 (semantic aliases) + Tier 3 (component) layers. Premium register defaults: `--paper-25` near-white page surface, `--teal-900` ink, `--gold-500` accent, `--paper-100` cool mist (`#ECF1F2`) tinted-band surface. Update token values in one place; CSS `:root` mirrors the spec.
+
+**Logo placement.** Copy the light and dark icon variants from the project's public assets (`logo-light.png` for dark cover/backpage, `logo-dark.png` reserved for light content pages if needed) into the artefact directory. Cover top-left pairs the icon with the wordmark; backpage top-left does the same.
+
+References: `references/html-pdf-pipeline.md` for the canonical `render-pdf.mjs` source and CSS scaffold.
+
+## Doctrine (enforced across all stages)
+
+- **No internal workings in public artefacts.** Comparison-to-baseline, reconciliation-pending, open-Q markers, internal cross-references all stay in working files (`01-narrative/office-hours-design.md`, section READMEs). Public artefacts (business plan, deck, prospectus, PDFs) state the current position as a fact.
+- **Every claim cites a source.** Companies House for the cap table. The model worksheet for every financial figure. A named publication for every market figure. A specific vendor page for every competitor claim.
+- **Design tokens are the visual contract.** Update once in the tokens spec; the business plan CSS, the prospectus CSS, and the deck CSS all consume the same tokens. Never hardcode hex values inside component CSS.
+- **Even page count for booklet binding.** Multiple of 4 ideally; minimum even. Add or remove a supporting page to maintain parity if a section change breaks it.
+- **Verify by reading every rendered page.** `pdfinfo` page count is not verification. The bottom 30% of every page must reach the content margin without significant whitespace.
+
+## Pitfalls to avoid (collected from the reference project)
+
+- **Renaming a directory after the URL is published.** Keep `<project-site>/.docs/data-room/html/<artefact>/index.html` stable; if the URL changes, downstream investor links break.
+- **Letting Round-2 hires inflate the Year-1 P&L.** Only Round-1 hires belong in the Year-1 income statement. Customer-success and product-engineer hires that trigger in Round 1 are in; senior platform engineer, head of growth, and CS team scale that Round 2 funds are not.
+- **Mixing "Year 1" (12-month) and "Round 1 runway" (9-month).** If the £350k buys 9 months, present a 9-month forecast; do not present a 12-month forecast that implicitly assumes Round 2 closes mid-period without modelling the Round-2 cash injection.
+- **Generic AI-bolted-onto-cloud-CRM competitors.** Treat the competitive set as three failing categories: incumbents (cloud CRM + bolted AI), Anthropic horizontal AI (inaccessible to non-tech-wizard users), and new-build cloud-SaaS AI-OS replacements (migration-required, same lock-in pattern as incumbents). Name each vendor, cite each claim from the vendor's own page, rebut with the substrate-AI inversion.
+- **Forgetting Priestley / equivalent founder-thesis anchor.** Any founder who built the same thesis years before AI made it structurally apparent should reference it: book title, first-publication date, founder's costly-signal action (e.g. "bought 200 copies and distributed them to operators in his network"). This dates the conviction and lifts the deck's signal weight.
+- **Letting the page background go light brown.** Premium register page surface (`--paper-25`) is near-white (`#FBFAF6`), not ivory. The screen-preview body background stays plain white (`#FFFFFF`).
+
+## References
+
+- `references/data-room-structure.md` — section-by-section README templates
+- `references/business-plan-template.md` — 15-section business plan template
+- `references/deck-blueprint-template.md` — 12-slide deck brief template
+- `references/html-pdf-pipeline.md` — render-pdf.mjs canonical source + CSS scaffold
+- `references/compliance-research-checklist.md` — UK + EU regulatory regimes to verify
+- `references/internal-workings-scrub.md` — the public-vs-internal doctrine, patterns to scrub, recurrence list
+- `references/design-tokens-application.md` — how to consume `realagent-site/.docs/design-tokens.md` from an artefact's `:root` block
+
+## Reference project
+
+The first execution of this skill produced `realagent-site/.docs/data-room/` for Real Agent Network Limited (Companies House 17237239). Read that directory as the canonical example; the skill's job is to reproduce its structure and doctrine for any subsequent UK seed raise.