@rubytech/create-sitedesk-code 0.1.402 → 0.1.404

package/payload/server/public/index.html

@@ -5,20 +5,20 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>SiteDesk</title>
   <link rel="icon" href="/favicon.ico">
-  <script type="module" crossorigin src="/assets/admin-BnZH758N.js"></script>
+  <script type="module" crossorigin src="/assets/admin-BSuRtMws.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/chunk-CAM3fms7.js">
-  <link rel="modulepreload" crossorigin href="/assets/useSubAccountSwitcher-BVCMAnWK.js">
-  <link rel="modulepreload" crossorigin href="/assets/graph-labels-Cabqmf35.js">
-  <link rel="modulepreload" crossorigin href="/assets/AdminShell-C5vWTy2n.js">
+  <link rel="modulepreload" crossorigin href="/assets/useSubAccountSwitcher-Bg0RH3Gk.js">
+  <link rel="modulepreload" crossorigin href="/assets/graph-labels-6HKBjyXX.js">
+  <link rel="modulepreload" crossorigin href="/assets/AdminShell-BihejKg_.js">
   <link rel="modulepreload" crossorigin href="/assets/admin-types-hioowVct.js">
-  <link rel="modulepreload" crossorigin href="/assets/Checkbox-Chz6bfy-.js">
-  <link rel="modulepreload" crossorigin href="/assets/AdminLoginScreens-rlk263u9.js">
+  <link rel="modulepreload" crossorigin href="/assets/Checkbox-Ds004CBE.js">
+  <link rel="modulepreload" crossorigin href="/assets/AdminLoginScreens-BzErD9Zo.js">
   <link rel="modulepreload" crossorigin href="/assets/preload-helper-CvXuAEud.js">
-  <link rel="modulepreload" crossorigin href="/assets/maximize-2-DPe-Noig.js">
-  <link rel="modulepreload" crossorigin href="/assets/Transcript-Bsx-bGgY.js">
-  <link rel="modulepreload" crossorigin href="/assets/chevron-left-DSTeS1_g.js">
-  <link rel="modulepreload" crossorigin href="/assets/page-E7I5sEVt.js">
-  <link rel="stylesheet" crossorigin href="/assets/useSubAccountSwitcher-BH-YjP0H.css">
+  <link rel="modulepreload" crossorigin href="/assets/maximize-2-DWmyXX8h.js">
+  <link rel="modulepreload" crossorigin href="/assets/Transcript-CgaMQKgY.js">
+  <link rel="modulepreload" crossorigin href="/assets/chevron-left-DBUeR2CX.js">
+  <link rel="modulepreload" crossorigin href="/assets/page-rDhp8G9q.js">
+  <link rel="stylesheet" crossorigin href="/assets/useSubAccountSwitcher-B-GuP1jj.css">
   <link rel="stylesheet" crossorigin href="/assets/AdminLoginScreens-CWMpccrR.css">
   <link rel="stylesheet" href="/brand-defaults.css">
 </head>

package/payload/server/public/operator.html

@@ -5,20 +5,20 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Operator — Maxy</title>
   <link rel="icon" href="/favicon.ico">
-  <script type="module" crossorigin src="/assets/operator-BM_CDyCb.js"></script>
+  <script type="module" crossorigin src="/assets/operator-D-s7jVnf.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/chunk-CAM3fms7.js">
-  <link rel="modulepreload" crossorigin href="/assets/useSubAccountSwitcher-BVCMAnWK.js">
-  <link rel="modulepreload" crossorigin href="/assets/AdminShell-C5vWTy2n.js">
+  <link rel="modulepreload" crossorigin href="/assets/useSubAccountSwitcher-Bg0RH3Gk.js">
+  <link rel="modulepreload" crossorigin href="/assets/AdminShell-BihejKg_.js">
   <link rel="modulepreload" crossorigin href="/assets/admin-types-hioowVct.js">
-  <link rel="modulepreload" crossorigin href="/assets/Checkbox-Chz6bfy-.js">
-  <link rel="modulepreload" crossorigin href="/assets/AdminLoginScreens-rlk263u9.js">
+  <link rel="modulepreload" crossorigin href="/assets/Checkbox-Ds004CBE.js">
+  <link rel="modulepreload" crossorigin href="/assets/AdminLoginScreens-BzErD9Zo.js">
   <link rel="modulepreload" crossorigin href="/assets/preload-helper-CvXuAEud.js">
-  <link rel="modulepreload" crossorigin href="/assets/maximize-2-DPe-Noig.js">
-  <link rel="modulepreload" crossorigin href="/assets/Transcript-Bsx-bGgY.js">
-  <link rel="modulepreload" crossorigin href="/assets/chevron-left-DSTeS1_g.js">
-  <link rel="modulepreload" crossorigin href="/assets/rotate-ccw-Dwtj0NJ7.js">
-  <link rel="modulepreload" crossorigin href="/assets/page-CMIbXzSg.js">
-  <link rel="stylesheet" crossorigin href="/assets/useSubAccountSwitcher-BH-YjP0H.css">
+  <link rel="modulepreload" crossorigin href="/assets/maximize-2-DWmyXX8h.js">
+  <link rel="modulepreload" crossorigin href="/assets/Transcript-CgaMQKgY.js">
+  <link rel="modulepreload" crossorigin href="/assets/chevron-left-DBUeR2CX.js">
+  <link rel="modulepreload" crossorigin href="/assets/rotate-ccw-BzBJxqBN.js">
+  <link rel="modulepreload" crossorigin href="/assets/page-BcxrdxYL.js">
+  <link rel="stylesheet" crossorigin href="/assets/useSubAccountSwitcher-B-GuP1jj.css">
   <link rel="stylesheet" crossorigin href="/assets/AdminLoginScreens-CWMpccrR.css">
   <link rel="stylesheet" href="/brand-defaults.css">
 </head>

package/payload/server/public/public.html

@@ -5,18 +5,18 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>SiteDesk</title>
   <link rel="icon" href="/favicon.ico">
-  <script type="module" crossorigin src="/assets/public-CrdWCSk2.js"></script>
+  <script type="module" crossorigin src="/assets/public-zK67N3z2.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/chunk-CAM3fms7.js">
-  <link rel="modulepreload" crossorigin href="/assets/useSubAccountSwitcher-BVCMAnWK.js">
-  <link rel="modulepreload" crossorigin href="/assets/AdminShell-C5vWTy2n.js">
+  <link rel="modulepreload" crossorigin href="/assets/useSubAccountSwitcher-Bg0RH3Gk.js">
+  <link rel="modulepreload" crossorigin href="/assets/AdminShell-BihejKg_.js">
   <link rel="modulepreload" crossorigin href="/assets/admin-types-hioowVct.js">
   <link rel="modulepreload" crossorigin href="/assets/preload-helper-CvXuAEud.js">
-  <link rel="modulepreload" crossorigin href="/assets/maximize-2-DPe-Noig.js">
-  <link rel="modulepreload" crossorigin href="/assets/Transcript-Bsx-bGgY.js">
-  <link rel="modulepreload" crossorigin href="/assets/chevron-left-DSTeS1_g.js">
-  <link rel="modulepreload" crossorigin href="/assets/rotate-ccw-Dwtj0NJ7.js">
-  <link rel="modulepreload" crossorigin href="/assets/page-CMIbXzSg.js">
-  <link rel="stylesheet" crossorigin href="/assets/useSubAccountSwitcher-BH-YjP0H.css">
+  <link rel="modulepreload" crossorigin href="/assets/maximize-2-DWmyXX8h.js">
+  <link rel="modulepreload" crossorigin href="/assets/Transcript-CgaMQKgY.js">
+  <link rel="modulepreload" crossorigin href="/assets/chevron-left-DBUeR2CX.js">
+  <link rel="modulepreload" crossorigin href="/assets/rotate-ccw-BzBJxqBN.js">
+  <link rel="modulepreload" crossorigin href="/assets/page-BcxrdxYL.js">
+  <link rel="stylesheet" crossorigin href="/assets/useSubAccountSwitcher-B-GuP1jj.css">
   <link rel="stylesheet" href="/brand-defaults.css">
 </head>
 <body class="public-surface">

package/payload/server/server.js

@@ -1417,7 +1417,7 @@ function webchatChannelDescriptor(key) {
 }
 
 // app/lib/claude-auth.ts
-import { readFileSync, writeFileSync } from "fs";
+import { readFileSync, writeFileSync, renameSync, unlinkSync } from "fs";
 import { sep } from "path";
 import { lock } from "proper-lockfile";
 if (!CLAUDE_CREDENTIALS_FILE.startsWith(MAXY_DIR + sep)) {
@@ -1473,7 +1473,17 @@ function writeOAuthCredentials(tokens) {
       ...tokens.refreshToken != null ? { refreshToken: tokens.refreshToken } : {},
       expiresAt: newExpiresAt
     };
-    writeFileSync(CLAUDE_CREDENTIALS_FILE, JSON.stringify(fileData, null, 2), "utf-8");
+    const tmpPath = `${CLAUDE_CREDENTIALS_FILE}.${process.pid}.tmp`;
+    try {
+      writeFileSync(tmpPath, JSON.stringify(fileData, null, 2), "utf-8");
+      renameSync(tmpPath, CLAUDE_CREDENTIALS_FILE);
+    } catch (writeErr) {
+      try {
+        unlinkSync(tmpPath);
+      } catch {
+      }
+      throw writeErr;
+    }
     return newExpiresAt;
   } catch (err) {
     console.error(`[claude-auth] credential write failed: ${err instanceof Error ? err.message : String(err)}`);
@@ -9259,10 +9269,10 @@ var public_reader_default = app5;
 // server/routes/webchat.ts
 import { basename as basename7, dirname as dirname6 } from "path";
 import { join as join18 } from "path";
-import { existsSync as existsSync10, readdirSync as readdirSync11, readFileSync as readFileSync19, renameSync as renameSync3, statSync as statSync7, writeFileSync as writeFileSync7 } from "fs";
+import { existsSync as existsSync10, readdirSync as readdirSync11, readFileSync as readFileSync19, renameSync as renameSync4, statSync as statSync7, writeFileSync as writeFileSync7 } from "fs";
 
 // server/canonical-webchat-override.ts
-import { readFileSync as readFileSync17, writeFileSync as writeFileSync5, renameSync } from "fs";
+import { readFileSync as readFileSync17, writeFileSync as writeFileSync5, renameSync as renameSync2 } from "fs";
 import { join as join16 } from "path";
 var FILE = "canonical-webchat-session.json";
 var UUID = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
@@ -9300,7 +9310,7 @@ function writeCanonicalOverrideId(accountDir, userId, sessionId) {
   const path2 = canonicalOverridePath(accountDir);
   const tmp = `${path2}.${process.pid}.tmp`;
   writeFileSync5(tmp, JSON.stringify({ byAdmin }, null, 2), "utf8");
-  renameSync(tmp, path2);
+  renameSync2(tmp, path2);
 }
 
 // ../lib/models/src/index.ts
@@ -9346,7 +9356,7 @@ function isNewSessionEffortLevel(value) {
 }
 
 // ../services/claude-session-manager/src/sidecar-store.ts
-import { existsSync as existsSync9, mkdirSync as mkdirSync3, readdirSync as readdirSync10, readFileSync as readFileSync18, renameSync as renameSync2, unlinkSync, writeFileSync as writeFileSync6 } from "fs";
+import { existsSync as existsSync9, mkdirSync as mkdirSync3, readdirSync as readdirSync10, readFileSync as readFileSync18, renameSync as renameSync3, unlinkSync as unlinkSync2, writeFileSync as writeFileSync6 } from "fs";
 import { join as join17 } from "path";
 function escapeRegExp(s) {
   return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
@@ -9363,11 +9373,11 @@ function createSidecarStore(config) {
     const tmp = `${path2}.tmp.${process.pid}`;
     try {
       writeFileSync6(tmp, JSON.stringify(record), "utf8");
-      renameSync2(tmp, path2);
+      renameSync3(tmp, path2);
       return { ok: true };
     } catch (error) {
       try {
-        if (existsSync9(tmp)) unlinkSync(tmp);
+        if (existsSync9(tmp)) unlinkSync2(tmp);
       } catch {
       }
       return { ok: false, error };
@@ -9424,7 +9434,7 @@ function createSidecarStore(config) {
     const path2 = pathFor(sessionsDir, id);
     try {
       if (existsSync9(path2)) {
-        unlinkSync(path2);
+        unlinkSync2(path2);
         return { ok: true, removed: true };
       }
       return { ok: true, removed: false };
@@ -9974,7 +9984,7 @@ ${note}` : note;
       else parsed.adminPermissionMode = value;
       const tmp = `${accountJsonPath}.${process.pid}.tmp`;
       writeFileSync7(tmp, JSON.stringify(parsed, null, 2), "utf8");
-      renameSync3(tmp, accountJsonPath);
+      renameSync4(tmp, accountJsonPath);
     } catch (err) {
       const detail = err instanceof Error ? err.message : String(err);
       console.error(`[webchat:settings] op=${op} outcome=refused value=${value} reason=write-failed detail=${detail}`);
@@ -10373,7 +10383,7 @@ var telegram_default = app7;
 
 // server/routes/quickbooks.ts
 import { join as join21 } from "path";
-import { existsSync as existsSync13, readFileSync as readFileSync22, writeFileSync as writeFileSync8, mkdirSync as mkdirSync4, rmSync, renameSync as renameSync4 } from "fs";
+import { existsSync as existsSync13, readFileSync as readFileSync22, writeFileSync as writeFileSync8, mkdirSync as mkdirSync4, rmSync, renameSync as renameSync5 } from "fs";
 var TAG24 = "[quickbooks]";
 var INTUIT_TOKEN_URL = "https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer";
 var STATE_RE = /^[A-Za-z0-9_-]+$/;
@@ -10392,7 +10402,7 @@ async function completeConsent(args) {
   }
   const claimFile = `${pendingPath(accountDir, state)}.claimed`;
   try {
-    renameSync4(pendingPath(accountDir, state), claimFile);
+    renameSync5(pendingPath(accountDir, state), claimFile);
   } catch {
     console.error(`${TAG24} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
     return { ok: false, status: 400, message: "Invalid or unknown authorization state.", stateValid: false };
@@ -10481,20 +10491,10 @@ var quickbooks_default = app8;
 
 // server/routes/onboarding.ts
 import { spawn, spawnSync as spawnSync2, execFileSync as execFileSync3 } from "child_process";
-import { openSync as openSync3, closeSync as closeSync3, writeFileSync as writeFileSync10, writeSync, existsSync as existsSync15, readFileSync as readFileSync24, unlinkSync as unlinkSync2, renameSync as renameSync6 } from "fs";
+import { openSync as openSync3, closeSync as closeSync3, writeFileSync as writeFileSync10, writeSync, existsSync as existsSync15, readFileSync as readFileSync24, unlinkSync as unlinkSync3, renameSync as renameSync7 } from "fs";
 import { createHash as createHash3, randomUUID as randomUUID7 } from "crypto";
 
 // app/lib/claude-spawn-env.ts
-var HOST_AUTH_REFRESH_TIMEOUT_MS = "30000";
-function hostCredsEnv(platform, credsFile) {
-  if (platform === "darwin" && credsFile) {
-    return {
-      CLAUDE_CODE_HOST_CREDS_FILE: credsFile,
-      CLAUDE_CODE_HOST_AUTH_REFRESH_TIMEOUT_MS: HOST_AUTH_REFRESH_TIMEOUT_MS
-    };
-  }
-  return {};
-}
 function claudeBin() {
   return process.env.CLAUDE_BIN ?? "claude";
 }
@@ -10586,7 +10586,7 @@ function readHostCredsBlob(service) {
 }
 
 // ../lib/admins-write/src/index.ts
-import { existsSync as existsSync14, readFileSync as readFileSync23, writeFileSync as writeFileSync9, renameSync as renameSync5, mkdirSync as mkdirSync5, readdirSync as readdirSync13, statSync as statSync8, appendFileSync as appendFileSync2 } from "fs";
+import { existsSync as existsSync14, readFileSync as readFileSync23, writeFileSync as writeFileSync9, renameSync as renameSync6, mkdirSync as mkdirSync5, readdirSync as readdirSync13, statSync as statSync8, appendFileSync as appendFileSync2 } from "fs";
 import { dirname as dirname7, join as join22 } from "path";
 function id8(value) {
   return value.slice(0, 8);
@@ -10621,7 +10621,7 @@ function writeFileAtomic(filePath, contents, mode) {
   mkdirSync5(dirname7(filePath), { recursive: true });
   const tempPath = `${filePath}.tmp-${process.pid}-${Date.now()}`;
   writeFileSync9(tempPath, contents, mode !== void 0 ? { mode } : void 0);
-  renameSync5(tempPath, filePath);
+  renameSync6(tempPath, filePath);
 }
 function writeAdminEntry(input) {
   const result = { usersJsonResult: "noop", accountJsonResult: "noop" };
@@ -10818,7 +10818,7 @@ app9.post("/claude-auth", async (c) => {
     let logoutError = null;
     try {
       execFileSync3(claudeBin(), ["auth", "logout"], {
-        env: { ...process.env, ...hostCredsEnv(process.platform, CLAUDE_CREDENTIALS_FILE) },
+        env: { ...process.env },
         encoding: "utf-8",
         timeout: 8e3
       });
@@ -10866,7 +10866,7 @@ app9.post("/claude-auth", async (c) => {
     vncLog("claude-auth", { action: "start", transport: "native", platform: "darwin" });
     darwinCredsBefore = listHostCredsMdats();
     const claudeProc2 = spawn(claudeBin(), ["auth", "login"], {
-      env: { ...process.env, ...hostCredsEnv(process.platform, CLAUDE_CREDENTIALS_FILE) },
+      env: { ...process.env },
       stdio: ["pipe", "pipe", "pipe"]
     });
     claudeProc2.unref();
@@ -10885,7 +10885,7 @@ app9.post("/claude-auth", async (c) => {
         writeFile: (blob) => {
           const tmp = `${CLAUDE_CREDENTIALS_FILE}.${process.pid}.tmp`;
           writeFileSync10(tmp, blob, { mode: 384 });
-          renameSync6(tmp, CLAUDE_CREDENTIALS_FILE);
+          renameSync7(tmp, CLAUDE_CREDENTIALS_FILE);
         },
         log: (line) => console.log(line)
       });
@@ -11049,7 +11049,7 @@ app9.delete("/set-pin", requireAdminSession, async (c) => {
   }
   const remaining = users.filter((u) => u.userId !== sessionUserId);
   if (remaining.length === 0) {
-    unlinkSync2(USERS_FILE);
+    unlinkSync3(USERS_FILE);
     console.log(`[set-pin] cleared users.json (last entry removed): userId=${sessionUserId.slice(0, 8)}\u2026`);
   } else {
     writeFileSync10(USERS_FILE, JSON.stringify(remaining), { mode: 384 });
@@ -11151,7 +11151,7 @@ ${body.newPin}
 var onboarding_default = app9;
 
 // server/routes/client-error.ts
-import { appendFileSync as appendFileSync3, existsSync as existsSync16, renameSync as renameSync7, statSync as statSync9 } from "fs";
+import { appendFileSync as appendFileSync3, existsSync as existsSync16, renameSync as renameSync8, statSync as statSync9 } from "fs";
 import { join as join23 } from "path";
 var CLIENT_ERRORS_LOG = join23(LOG_DIR, "client-errors.log");
 var MAX_LOG_SIZE = 10 * 1024 * 1024;
@@ -11204,7 +11204,7 @@ function rotateIfNeeded() {
     if (!existsSync16(CLIENT_ERRORS_LOG)) return;
     const stats = statSync9(CLIENT_ERRORS_LOG);
     if (stats.size < MAX_LOG_SIZE) return;
-    renameSync7(CLIENT_ERRORS_LOG, CLIENT_ERRORS_LOG + ".1");
+    renameSync8(CLIENT_ERRORS_LOG, CLIENT_ERRORS_LOG + ".1");
   } catch (err) {
     console.error(`[client-error] log rotation failed: ${err instanceof Error ? err.message : String(err)}`);
   }
@@ -11684,7 +11684,7 @@ var logs_default = app13;
 import { execFileSync as execFileSync4 } from "child_process";
 var app14 = new Hono();
 app14.get("/", (c) => {
-  const claudeEnv = { ...process.env, ...hostCredsEnv(process.platform, CLAUDE_CREDENTIALS_FILE) };
+  const claudeEnv = { ...process.env };
   let version = "unknown";
   try {
     const raw = execFileSync4(claudeBin(), ["--version"], { env: claudeEnv, encoding: "utf-8", timeout: 5e3 });

package/payload/premium-plugins/sitedesk/plugins/sitedesk-media/skills/brand-extract/SKILL.md

@@ -1,86 +0,0 @@
----
-name: brand-extract
-description: Turn a business's existing website into a brand pack for the micro-site — a tokenized palette (ink/paper/rule/accent plus a deepened accent for legible text), the logo and icon saved as image files, and a brand.md recording the company facts the site exposes (name, contact, services, about copy, socials) together with an explicit list of what is still unknown. Use as the first step of make-media, or on its own when someone wants design tokens + logo + company facts pulled from a URL. Trigger phrases include "extract the brand from <url>", "get tokens and logo from <site>", "pull the company details from their website".
-allowed-tools:
-  - Bash
-  - Read
-  - Write
-  - WebFetch
-  - Grep
----
-
-# brand-extract
-
-Reads an existing website and produces what the `microsite` and `socials`
-templates need to be branded: a **palette**, the **logo** and **icon** as files,
-and a **brand.md** of company facts with an honest "still unknown" list.
-
-## Outputs
-
-```
-<output>/site/images/logo.png      # the wordmark/lockup, on a white or transparent ground
-<output>/site/images/icon.png      # the square mark / monogram (favicon source)
-<output>/site/favicon.png          # 64px icon
-<output>/brand.md                  # tokens + facts found + gaps
-```
-
-## Palette — the token contract
-
-The templates resolve every colour through ten CSS custom properties. Fill their
-values from the site; do not introduce new token names.
-
-| Token | Role | How to choose |
-|---|---|---|
-| `INK_900` | primary text, headings, dark surfaces | the site's darkest near-black text colour |
-| `INK_700` | secondary text | a step lighter than INK_900 |
-| `INK_400` | muted / captions | a mid grey |
-| `PAPER_100` | white surface | the lightest surface (usually `#FFFFFF`) |
-| `PAPER_200` | page-bg tint / bands | a faint off-white for alternating bands |
-| `RULE_100` | borders / dividers | a pale neutral hairline |
-| `ACCENT` | the brand accent (separators, hairlines, CTA hover) | the logo's accent colour, used verbatim |
-| `ACCENT_TEXT` | accent used as small text (eyebrows, links) | the accent **deepened** until it is legible at ~10px on white (aim for ≥ 3:1 contrast). This is the one token you compute rather than copy — a light brand accent is unreadable as tracked-caps text, so darken it while keeping the same hue. |
-| `ACCENT_SOFT` | soft tint behind accent text | a pale wash of the accent |
-| `BRAND_GREY` | logo/wordmark grey | the logo's neutral grey |
-
-If the operator supplied design tokens directly, use them verbatim and skip
-derivation. The three-font editorial system (Cormorant Garamond display, Lora
-body, Inter UI) is the template default and stays unless the operator asks to
-change it — brand identity lives in the logo, the accent, and the copy.
-
-## Logo — make it usable on dark and light
-
-Save the site's primary logo as `images/logo.png`. Note its background: a logo on
-a **white ground** sits cleanly on a light nav but cannot be dropped onto a dark
-photo. The `socials` tiles place the logo on a white chip precisely so a
-white-ground logo still reads over any hero. Record in brand.md whether a
-transparent or light-art variant exists. Save the square mark as `images/icon.png`
-and a 64px `favicon.png`.
-
-Right-size the logo (a multi-megabyte original is overkill for a 42–84px display);
-keep it crisp but reasonable.
-
-## Facts — record, and mark the gaps
-
-Write `brand.md` with everything the site exposes: trading name, legal name,
-tagline, sector, established year, phone, email, address, region, services,
-"about" copy, social links. For every field the site does **not** expose, write
-it under a `## Still unknown` heading. That list is exactly what `make-media`
-turns into questions for the operator.
-
-Do not promote a marketing line to a hard fact. "Over 35 years" is a claim about
-experience, not a company age; "since 1987" is a trading date, not necessarily an
-incorporation date. Keep claims as claims.
-
-## The 2000px image rule
-
-Never `Read` an image whose longest edge exceeds 2000px — it can break the
-session. Measure first (`sips -g pixelWidth -g pixelHeight`), and if larger,
-downscale a preview into `/tmp`, read that, and delete it.
-
-## Completion criteria
-
-- `images/logo.png`, `images/icon.png`, `favicon.png` exist and are right-sized.
-- `brand.md` lists the ten palette tokens with values, the company facts found,
-  and an explicit "Still unknown" list.
-- No colour was invented beyond deriving `ACCENT_TEXT` from `ACCENT`; no marketing
-  claim was recorded as a registration fact.

package/payload/premium-plugins/sitedesk/plugins/sitedesk-media/skills/make-media/SKILL.md

@@ -1,75 +0,0 @@
----
-name: make-media
-description: Single-entry orchestrator that turns an operator's raw inputs — a folder or zip of photos, an existing website URL, social-media links, and any free-text notes about the business — into a finished marketing micro-site plus a set of share-ready social tiles. Use whenever the deliverable is "a website and social images for this business" from mixed source material. Routes to brand-extract → microsite → socials, and asks the operator targeted questions to fill every field the sources do not supply. Trigger phrases include "make a site for this business", "build a microsite from these photos and their website", "turn this into a landing page and social tiles", "sitedesk media for <business>".
-allowed-tools:
-  - Bash
-  - Read
-  - Write
-  - Edit
-  - Glob
-  - Grep
-  - WebFetch
-  - Skill
-  - AskUserQuestion
----
-
-# make-media
-
-Orchestrates the `brand-extract → microsite → socials` pipeline. The deliverable is a self-contained `site/` directory (a scrollable single-page micro-site, an `llms.txt`, and a `socials/` folder of Open Graph + social tiles with a gallery and captions) plus a zipped copy, built from whatever the operator provides and whatever the orchestrator has to ask for.
-
-This skill is a playbook, not a programmatic dispatcher. It tells you the routing and the gap-filling contract; you execute each step under the underlying skills' own contracts.
-
-## What the operator gives, and what you do with it
-
-| Operator supplies | Used for | If missing |
-|---|---|---|
-| **Images** (folder or zip of photos) | hero rotator, photo grids, founder portrait, testimonial, social tiles | required — the site is image-led. If none, stop and ask. |
-| **Website URL** | brand tokens (palette, accent), logo, company name, contact, services, "about" copy | run `brand-extract`; anything it cannot read becomes a question |
-| **Social links** (Facebook / Instagram / TikTok / LinkedIn) | footer + drawer links, social handles, extra copy/ideas in the operator's own voice | login-walled platforms usually cannot be scraped — say so plainly and ask the operator to paste any posts they want used |
-| **Free-text notes / pasted posts / quotes** | founder section, testimonials, "from the site" updates, service descriptions, taglines | use verbatim where the operator marks a quote; never reword a real client testimonial into marketing prose |
-| **Design tokens** (if supplied directly) | the palette `:root` — use them verbatim, do not re-pick | if absent, `brand-extract` derives them from the site |
-
-## The core rule: ask, never invent
-
-Every `{{ PLACEHOLDER }}` in the templates is a fact about a real business. The brand and the operator's notes fill most of them. **For every placeholder still unfilled after `brand-extract`, ask the operator — do not synthesise a plausible value.** A fabricated phone number, a guessed founding year, an invented testimonial, or a made-up company number is a defect, not a convenience. The reference list of questions is in [`references/intake-and-questions.md`](references/intake-and-questions.md); ask only for what is genuinely missing, grouped so the operator answers in as few turns as possible.
-
-Two facts are load-bearing and frequently wrong if guessed: the **founding/established year** (a business that "trades since 1987" may have incorporated much later — keep the two distinct), and any **company-registration detail** (number, registered office) which must come from the register or the operator, never from the website's marketing line.
-
-## Process — high level
-
-1. **Resolve the workspace.** Default output root is the images directory's parent, or the operator's stated path. The deliverable lands in `<output>/site/`.
-2. **Run `brand-extract`** against the website URL: produces the brand tokens (palette + accent), the logo (placed as `site/images/logo.png`) and icon, the company facts it can read, and a `brand.md` recording what was found and what is still unknown. If the operator supplied design tokens directly, use those verbatim instead of re-deriving.
-3. **Curate the images.** Verify each photo's *content* by eye (never trust filenames), measuring first and previewing any image whose longest edge exceeds 2000px (downscale to `/tmp`, read, delete) so a large photo never breaks the session. Pick the strongest, most varied shots for the hero rotator and the strongest finished result for the testimonial; map the rest to the photo grids. A person's portrait is for the founder section and a portrait-only social tile, never a landscape crop.
-4. **Fill the gaps.** Compare the placeholder inventory ([`microsite/references/placeholders.md`](../microsite/references/placeholders.md)) against what brand-extract found and the operator's notes. Ask the operator for everything still missing, in grouped questions. Wait for answers. Do not proceed with blanks.
-5. **Run `microsite`** to build `site/index.html` + `site/llms.txt` from the templates, substituting every placeholder. No `{{ }}` may survive into the output.
-6. **Run `socials` in `microsite` mode** to render the Open Graph + social tiles into `site/socials/`, plus `site/socials.html` (gallery) and `site/social-posts.md` (captions), and to wire the site's `og:image` to the landscape tile.
-7. **Verify and report.** Confirm no placeholder survived, every referenced asset resolves over a local HTTP server, the site renders at desktop and mobile, and the social tiles are at exact dimensions. Report the path to `site/` and the zip, and list any value you had to ask for.
-
-## Outcome contract
-
-```
-<output>/site/
-  index.html            # the scrollable micro-site
-  llms.txt              # answer-engine summary
-  favicon.png
-  images/               # curated, optimised webp + logo.png + icon.png
-  socials/              # og-{landscape,square,portrait}-{main,interior,build}.png + og-portrait-founder.png
-  socials.html          # tile gallery with download links + OG snippet
-  social-posts.md       # captions per tile and platform
-  og.html               # tile render page (kept for re-runs)
-<output>/<brand-slug>-microsite.zip
-```
-
-## Completion criteria
-
-- `grep "{{" site/index.html site/llms.txt site/socials.html` returns nothing — every placeholder substituted.
-- No invented facts: every value traces to the website, the operator's notes, or an answer the operator gave. Anything still genuinely unknown is shown as a clear gap, not a guess.
-- The site renders at desktop and a 390px mobile viewport with no horizontal overflow and no broken images; the hero rotates; the back-to-top works.
-- Social tiles exist at exact sizes (1200×628 / 1200×1200 / 1080×1350); any person tile is portrait only.
-- The operator-facing report names the site path, the zip path, and every field that had to be asked for.
-
-## When NOT to use this skill
-
-- The operator only wants the micro-site, or only the social tiles → call `microsite` or `socials` directly.
-- The operator only wants brand tokens and a logo from a URL → call `brand-extract` directly.
-- There are no usable photos of the business → the site is image-led; stop and ask for photos before anything else.

package/payload/premium-plugins/sitedesk/plugins/sitedesk-media/skills/make-media/references/intake-and-questions.md

@@ -1,74 +0,0 @@
-# Intake & gap-filling questions
-
-Ask only for what the website and the operator's notes did not already supply.
-Group the questions so the operator answers in as few turns as possible, and
-present sensible candidates from the source material where you have them ("Your
-site says you've traded since 1994 — is that the year to show?").
-
-Never invent a value to avoid asking. A guessed phone number or founding year is
-a defect. If the operator does not know a field (e.g. company number), leave that
-slot out of the output rather than filling it with a placeholder or a guess.
-
-## 1. Identity
-
-- Trading name and full legal name (e.g. "Acme Joinery" / "Acme Joinery Ltd").
-- Short monogram / initials, if any (used as a small brand mark).
-- Tagline / strapline, in their own words.
-- Sector label for the nav and tiles (e.g. "Builders", "Joiners", "Florist").
-- Established year. **Keep "trading since" separate from "company incorporated".**
-- Company registration number + jurisdiction, and registered office — only if the
-  operator wants legal detail in the footer. Take these from the register or the
-  operator, never from a marketing line.
-
-## 2. Contact & place
-
-- Phone (display + dialable), mobile if separate.
-- Email.
-- Website domain and full URL (for canonical + Open Graph).
-- Address: street, post town, county, postcode (only the parts they want shown).
-- Service area / region phrase (e.g. "the South East" or "Greater Manchester").
-- Social profiles: Facebook, Instagram, TikTok, LinkedIn (URLs + handles).
-
-## 3. The story (copy, in their voice)
-
-- One or two paragraphs on who they are and how long they've been going.
-- What they're proudest of / the standard they hold to.
-- A headline sentence that sums the business up.
-- The three or four "by the numbers" facts (established, experience, ownership,
-  coverage, specialism, approach, promise).
-
-## 4. What they do (services)
-
-- Up to six services, each a short name and a one-line description.
-- A one-line lede for the services section.
-
-## 5. The founder / person on site
-
-- Name and role of the person who fronts the business.
-- A short intro in their voice (what they do, how hands-on they are).
-- A quote from them, ideally about a specific job or their approach.
-- 1–3 recent "from the site" updates in their own words (the social-post voice
-  is good here — keep it, just drop the emoji per the plain register).
-- A portrait photo of them (used in the founder section and a portrait social
-  tile — a person is never cropped to landscape).
-
-## 6. Proof (testimonial)
-
-- A real client quote, used verbatim. Note the one phrase to highlight.
-- Who it's from and the context ("on their new kitchen").
-- Which finished-job photo best illustrates it.
-- Any thank-you artefact (a card, a gift photo) that adds a personal touch.
-
-## 7. FAQ (answer-engine targets)
-
-- 3–5 plain questions a customer actually asks, each with a one or two sentence
-  answer. Default set: what they do, how long they've been going, where they're
-  based / areas covered, plus two specific to the trade.
-
-## 8. Images (you curate, but confirm)
-
-- Confirm which photo is the strongest "arrive here" shot (hero / main tile).
-- Confirm the best finished-result shot (testimonial + interior tile).
-- Confirm a strong in-progress / scale shot (build tile, full-bleed).
-- Flag if the photo set is mostly work-in-progress so expectations are set, and
-  ask for any finished-result photos that would strengthen the hero.

package/payload/premium-plugins/sitedesk/plugins/sitedesk-media/skills/microsite/references/placeholders.md

@@ -1,96 +0,0 @@
-# Placeholder reference
-
-Every `{{ TOKEN }}` in the templates and what fills it. After substitution,
-`grep "{{"` across the output must return nothing. Never invent a value — if a
-token has no source, go back to the operator and ask.
-
-## Brand tokens (palette) — from `brand-extract`
-
-`INK_900` `INK_700` `INK_400` (text: primary / secondary / muted) ·
-`PAPER_100` `PAPER_200` (white surface / page-bg tint) · `RULE_100` (dividers) ·
-`ACCENT` (brand accent) · `ACCENT_TEXT` (accent **deepened** for legible small
-text) · `ACCENT_SOFT` (pale accent wash) · `BRAND_GREY` (logo grey).
-
-## Identity
-
-`COMPANY_NAME` (trading name) · `COMPANY_LEGAL_NAME` · `COMPANY_SHORT` (monogram /
-initials) · `TAGLINE` · `SECTOR_LABEL` (e.g. "Builders") · `ESTABLISHED_YEAR` ·
-`YEARS_TRADING` (e.g. "over 35 years") · `OWNERSHIP` (e.g. "Family-run") ·
-`COMPANY_NUMBER` · `COMPANY_JURISDICTION` · `COPYRIGHT_YEAR`.
-
-## Contact & place
-
-`PHONE_DISPLAY` `PHONE_TEL` `PHONE_INTL` · `MOBILE_DISPLAY` `MOBILE_TEL` ·
-`EMAIL` · `WEBSITE_URL` `WEBSITE_DOMAIN` · `STREET_ADDRESS` `POST_TOWN` `LOCALITY`
-`COUNTY` `POSTCODE` · `REGION` (service-area phrase) `REGION_2` (secondary area) ·
-`FACEBOOK_URL` `INSTAGRAM_URL` `TIKTOK_URL` (+ `*_HANDLE` in social-posts).
-
-## Hero info-card
-
-`HERO_STRAPLINE` · `HERO_META` (the "New builds · Extensions …" line) ·
-`HERO_SPEC_1..4` (four credential cells). Hero image alts are exemplar — rewrite
-to the real photos.
-
-## Story / Build / Craft body blocks
-
-`STORY_HEADLINE` `STORY_PARA_1` `STORY_PARA_2` ·
-`BUILD_HEADLINE` `BUILD_PARA_1..3` (each may open with a `<strong>lead-in.</strong>`) ·
-`CRAFT_HEADLINE` `CRAFT_PARA_1..3`.
-
-## Founder / team-lead section
-
-`FOUNDER_SECTION_LABEL` (eyebrow) · `FOUNDER_NAME` `FOUNDER_FIRST_NAME` ·
-`FOUNDER_HEADLINE` `FOUNDER_INTRO` `FOUNDER_QUOTE` `FOUNDER_ETHOS` ·
-`FEATURE_PROJECT_ALT` `FEATURE_PROJECT_CAPTION` · `GIFT_ALT` `GIFT_CAPTION` ·
-`UPDATES_LABEL` · `UPDATE_1..3_LOC` `UPDATE_1..3_TEXT` ("from the site" cards).
-
-## Testimonial
-
-`TESTIMONIAL_QUOTE` (verbatim; wrap the highlight clause in
-`<span class="hl">…</span>`) · `TESTIMONIAL_ATTRIB` · `TESTIMONIAL_CONTEXT`.
-
-## Services
-
-`SERVICES_HEADLINE` `SERVICES_LEDE` · `SERVICE_1..6_NAME` `SERVICE_1..6_DESC` ·
-`OFFER_CATALOG_NAME` (JSON-LD).
-
-## Why-us / key facts
-
-`WHY_HEADLINE` · `FACT_1..6_KEY` `FACT_1..6_VALUE` · `FACTS_FOOTNOTE`. (The first
-fact row, "Established", uses `ESTABLISHED_YEAR`; Coverage uses `REGION`; Based
-uses `LOCALITY`/`COUNTY`.)
-
-## FAQ (visible + JSON-LD use the same tokens)
-
-`FAQ_1..5_Q` `FAQ_1..5_A`.
-
-## CTA / footer / meta / schema
-
-`CTA_HEADLINE` · `FOOTER_LABEL` `FOOTER_LEGAL` · `META_DESCRIPTION`
-`META_DESCRIPTION_SHORT` · `SCHEMA_TYPE` (e.g. `GeneralContractor`,
-`LocalBusiness`, `HomeAndConstructionBusiness`) `SCHEMA_DESCRIPTION`.
-
-## llms.txt
-
-`LLMS_SUMMARY` (the one-paragraph elevator summary) · `RECENT_PROJECTS`.
-
-## Social tiles (`socials` skill — og.html / socials.html / social-posts.md)
-
-The `socials` skill renders the tiles. In `microsite` mode it resolves the four
-brand themes (`main`, `interior`, `build`, `founder`) as the candidate set; the
-per-hero head/sub no longer live as separate markup tokens — the skill builds them
-into `og.html`'s `CANDIDATES_JSON` object from the brand copy. The remaining scalar
-tokens the templates still carry:
-
-- **og.html:** `TILE_EYEBROW` · `TILE_SPEC_1..4` · `CANDIDATES_JSON` (the
-  `{ key: { img, pos, head, sub } }` set, one entry per theme) · `COMPANY_*` ·
-  `WEBSITE_DOMAIN` · `PHONE_DISPLAY` · the palette tokens.
-- **socials.html (gallery):** repeats one group block per tile key —
-  `TILE_KEY` · `TILE_HEAD` · `TILE_CAPTION`; the OG snippet (microsite only) uses
-  `WEBSITE_URL`.
-- **social-posts.md (captions):** one block per tile key, with
-  `TILE_KEY_INSTAGRAM` `TILE_KEY_LINKEDIN` `TILE_KEY_TIKTOK` `TILE_KEY_FACEBOOK`
-  `TILE_KEY_X` (where `TILE_KEY` is the theme key).
-
-See [`../../socials/references/sources.md`](../../socials/references/sources.md) for
-the full adapter contract.