@rubytech/create-sitedesk-code 0.1.495 → 0.1.496

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-sitedesk-code",
-  "version": "0.1.495",
+  "version": "0.1.496",
   "description": "Install SiteDesk — automated back office for independent building contractors",
   "bin": {
     "create-sitedesk-code": "./dist/index.js"

package/payload/platform/plugins/admin/skills/insight/SKILL.md

@@ -15,7 +15,7 @@ Run the four passes now over the session so far, then keep going in this same se
 
 Pass 1 — Technical learnings. Walk this session for operator corrections and self-detected mistakes. For each one, delegate one graph write to `database-operator` via the Task tool, persisting a Learning or Correction node per the schema. Count what you write.
 
-Pass 2 — Operator-relationship updates. Walk this session for tonal signals, rejected phrasings, and working-style preferences. For each one worth carrying forward, Write the observation into `SOUL.md` at the account-scoped path. Count what you write.
+Pass 2 — Operator-relationship updates. Walk this session for tonal signals, rejected phrasings, and working-style preferences. For each one worth carrying forward, Write the observation into `agents/admin/SOUL.md`, the account-scoped identity path the spawn composer reads. That path is the only identity file; never write a bare `SOUL.md` at the account root, which the composer never reads and the schema guard blocks. Count what you write.
 
 Pass 3 — Graph completeness sweep. Walk this session for any node, edge, or commitment that was discussed but not written to the graph in-flight. For each missing write, delegate to `database-operator` via the Task tool. Count what you write.
 

package/payload/platform/plugins/admin/skills/platform-architecture/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: platform-architecture
 description: Use when grounding any documented-surface claim about what SiteDesk ships — plugins, skills, specialists, install/deploy flows, internals. This is the install catalogue, not evidence of what is enabled on the current account. For install state on this account, call `capabilities-here`; for documented surface, cite the `Source:` URL inline.
-content-hash: sha256:bf5eeb6446bc1a8e06f0fc7455eaad5ddc460397c58d4dbfb985e18d8e96686d
+content-hash: sha256:e3da93a9c86c4a41c7ea79d4cdc353a85ac8c69826cc5238c9d2c00d53811895
 brand: sitedesk-code
 product-name: SiteDesk
 ---
@@ -3300,9 +3300,11 @@ authoritative. This section names the surfaces and what backs each.
 >
 > - **Nav rows** are Dashboard, Chat, Tasks, Calendar, Data, the brand container
 >   row (Projects / Properties / Jobs, opening the graph filtered to the brand's
->   primary container), Activity, and Browser. The active row carries an accent
->   left indicator. The older People / Agents / Artefacts entries in the table
->   below are pre-redesign.
+>   primary container), Graph (the unfiltered whole graph at `/graph`, waypoints
+>   icon — active on plain `/graph`; the container row is active only when a
+>   `label=` filter is present), Activity, and Browser. The active row carries an
+>   accent left indicator. The older People / Agents / Artefacts entries in the
+>   table below are pre-redesign.
 > - **Dashboard home** renders on `/` (a greeting, stat cards, a Live-now column,
 >   a Recent artefacts card, and a Channels column), consuming existing endpoints
 >   only.
@@ -3317,14 +3319,23 @@ authoritative. This section names the surfaces and what backs each.
 > - **Mobile (< 720px).** The sidebar opens as a drawer from a 44x44 header menu
 >   button, and a fixed bottom tab bar (Home, Chat, Tasks, Data, Calendar) sits
 >   under the content; Graph, Activity, and Browser stay reachable through the
->   drawer. Between 721 and 1080px the sidebar defaults to the rail.
+>   drawer. Between 721 and 1080px the sidebar defaults to the rail. The
+>   drawer's SESSIONS head collapses its New-session pill to an icon-only `+`
+>   (34px square); the label returns above 720px. The **operator** variant gets
+>   its own fixed bottom tab bar — Chat, Conversations (rendered only when the
+>   pane handler is wired), Data — while its burger keeps the AccountMenu tail.
+>   In the webchat composer the icon control bar moves **above** the input box
+>   with 44px touch squares (desktop keeps the below-input row), and the
+>   composer placeholder never wraps (single line, ellipsized).
 
 > **Admin variant only.** Every surface below belongs to the `admin` shell
 > variant. The **operator** variant (`operator.<host>`) mounts no sidebar at
 > all: its dashboard is the persistent admin webchat at `/` and the data
 > browser at `/data`, plus a **Conversations** item reached from a dynamic
 > burger item — header order Chat → Conversations → Data → Log out, in a
-> single-column `.platform.platform-operator` grid. On the operator **chat**
+> single-column `.platform.platform-operator` grid. Below 720px the same three
+> nav items also render as the operator bottom tab bar (see Mobile above);
+> the Chat tab targets the operator root `/`, the canonical-session route. On the operator **chat**
 > surface the Conversations item opens the same in-chat session
 > switcher the admin `/chat` surface uses (`ChatSurface`'s `SessionList` flyout):
 > the operator's own admin webchat conversations, newest-first, each resuming

package/payload/platform/plugins/docs/references/admin-ui.md

@@ -399,9 +399,11 @@ authoritative. This section names the surfaces and what backs each.
 >
 > - **Nav rows** are Dashboard, Chat, Tasks, Calendar, Data, the brand container
 >   row (Projects / Properties / Jobs, opening the graph filtered to the brand's
->   primary container), Activity, and Browser. The active row carries an accent
->   left indicator. The older People / Agents / Artefacts entries in the table
->   below are pre-redesign.
+>   primary container), Graph (the unfiltered whole graph at `/graph`, waypoints
+>   icon — active on plain `/graph`; the container row is active only when a
+>   `label=` filter is present), Activity, and Browser. The active row carries an
+>   accent left indicator. The older People / Agents / Artefacts entries in the
+>   table below are pre-redesign.
 > - **Dashboard home** renders on `/` (a greeting, stat cards, a Live-now column,
 >   a Recent artefacts card, and a Channels column), consuming existing endpoints
 >   only.
@@ -416,14 +418,23 @@ authoritative. This section names the surfaces and what backs each.
 > - **Mobile (< 720px).** The sidebar opens as a drawer from a 44x44 header menu
 >   button, and a fixed bottom tab bar (Home, Chat, Tasks, Data, Calendar) sits
 >   under the content; Graph, Activity, and Browser stay reachable through the
->   drawer. Between 721 and 1080px the sidebar defaults to the rail.
+>   drawer. Between 721 and 1080px the sidebar defaults to the rail. The
+>   drawer's SESSIONS head collapses its New-session pill to an icon-only `+`
+>   (34px square); the label returns above 720px. The **operator** variant gets
+>   its own fixed bottom tab bar — Chat, Conversations (rendered only when the
+>   pane handler is wired), Data — while its burger keeps the AccountMenu tail.
+>   In the webchat composer the icon control bar moves **above** the input box
+>   with 44px touch squares (desktop keeps the below-input row), and the
+>   composer placeholder never wraps (single line, ellipsized).
 
 > **Admin variant only.** Every surface below belongs to the `admin` shell
 > variant. The **operator** variant (`operator.<host>`) mounts no sidebar at
 > all: its dashboard is the persistent admin webchat at `/` and the data
 > browser at `/data`, plus a **Conversations** item reached from a dynamic
 > burger item — header order Chat → Conversations → Data → Log out, in a
-> single-column `.platform.platform-operator` grid. On the operator **chat**
+> single-column `.platform.platform-operator` grid. Below 720px the same three
+> nav items also render as the operator bottom tab bar (see Mobile above);
+> the Chat tab targets the operator root `/`, the canonical-session route. On the operator **chat**
 > surface the Conversations item opens the same in-chat session
 > switcher the admin `/chat` surface uses (`ChatSurface`'s `SessionList` flyout):
 > the operator's own admin webchat conversations, newest-first, each resuming

package/payload/platform/plugins/memory/references/schema-estate-agent.md

@@ -13,7 +13,7 @@ When loading this reference, confirm: "Using schema-base + schema-estate-agent".
 | Entity | Neo4j Label | Owner | Schema.org Type | Required Properties |
 |--------|-------------|-------|-----------------|---------------------|
 | Property | `Property` |  | `schema:Accommodation` | `accountId`, `slug` (id, address-derived), `address` |
-| Listing | `Listing` |  | `schema:RealEstateListing` | `accountId`, `slug`, `displayName`, `listingType` (sale/let), `status`, `sourceSystem`, `sourceId`, `scope`, `heroImageUrl`*, `pageUrl`*, `blurb` |
+| Listing | `Listing` | `Property` | `schema:RealEstateListing` | `accountId`, `slug`, `displayName`, `listingType` (sale/let), `status`, `sourceSystem`, `sourceId`, `scope`, `heroImageUrl`*, `pageUrl`*, `blurb` |
 | Viewing | `Viewing` | `Listing` | `schema:Event` (subtype) | `accountId`, `listing` (id), `applicant` (id), `date`, `feedback`, `outcome` |
 | Offer | `Offer` | `Listing` | `schema:Offer` | `accountId`, `listing` (id), `applicant` (id), `price`, `conditions`, `status`, `date` |
 

package/payload/platform/scripts/__tests__/account-schema-owned-dirs.test.sh

@@ -13,6 +13,8 @@ PASS=0; FAIL=0; FAILED=()
 assert_grep()   { if printf '%s' "$2" | grep -qF "$1"; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); FAILED+=("$3: expected to find [$1]"); fi; }
 assert_nogrep() { if printf '%s' "$2" | grep -qF "$1"; then FAIL=$((FAIL+1)); FAILED+=("$3: expected NOT to find [$1]"); else PASS=$((PASS+1)); fi; }
 assert_eq()     { if [ "$1" = "$2" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); FAILED+=("$3: expected [$2] got [$1]"); fi; }
+assert_dir()    { if [ -d "$1" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); FAILED+=("$2: expected directory [$1]"); fi; }
+assert_nodir()  { if [ -d "$1" ]; then FAIL=$((FAIL+1)); FAILED+=("$2: expected NO directory [$1]"); else PASS=$((PASS+1)); fi; }
 
 . "$PLAT_SCRIPTS/lib/account-schema-owned-dirs.sh"
 
@@ -156,21 +158,63 @@ assert_eq "$(shasum "$A_C/SCHEMA.md" | awk '{print $1}')" "$B_C" "con-idempotent
 RCS="$(PROJECT_DIR="$PROJECT_DIR" python3 "$PLAT_SCRIPTS/lib/account-schema-owned-dirs.py" reconcile "$A_C")"
 assert_grep "ontologyEntity=Supplier bucket=suppliers present=true" "$RCS" "con-supplier-root-present"
 
-# --- estate-agent vertical: root buckets only, listing-owned entities nested ---
+# --- estate-agent vertical: Property is the sole root; Listing (and its own
+# children Viewing/Offer) nest, mirroring Quote<-Job in construction ---
 T_E="$(make_vertical_tree '["real-agent"]' 'schema-estate-agent')"; A_E="$(make_account "$T_E")"
 export PROJECT_DIR="$T_E/platform"
-merge_owned_dirs_into_schema "$A_E" >/dev/null
+OUT_E="$(merge_owned_dirs_into_schema "$A_E")"
+assert_grep "domainBuckets=properties" "$OUT_E" "ea-domain-log"
+assert_grep "roots=properties" "$OUT_E" "ea-roots-log"
+assert_grep "nested=Listing<-Property,Viewing<-Listing,Offer<-Listing" "$OUT_E" "ea-nested-log"
 ALLOWED_E="$(awk '/^```allowed-top-level$/{f=1;next} /^```$/{f=0} f' "$A_E/SCHEMA.md")"
-# Root entities get a bucket; Listing-owned Viewing/Offer do not.
-for d in properties listings; do
-  assert_grep "$d" "$ALLOWED_E" "ea-allow-$d"
-done
-for d in viewings offers; do
+# Property (blank Owner) is the only root bucket.
+assert_grep "properties" "$ALLOWED_E" "ea-allow-properties"
+# Listing and its children nest; none is a root bucket.
+for d in listings viewings offers; do
   assert_nogrep "$d" "$ALLOWED_E" "ea-noroot-$d"
 done
 assert_nogrep "jobs" "$ALLOWED_E" "ea-no-sitedesk-jobs"
 # The suppliers/ bucket is construction-only; it must not leak into another vertical.
 assert_nogrep "suppliers" "$ALLOWED_E" "ea-no-suppliers"
+# The descriptive region tells the agent Listing records live under properties/.
+assert_grep '`Listing` records live under `properties/` (owned by `Property`), not a root bucket.' "$(cat "$A_E/SCHEMA.md")" "ea-nested-line"
+
+# --- roots subcommand + seed_domain_root_dirs: buckets materialise on disk ---
+# estate-agent (PROJECT_DIR still $T_E/platform): properties/ is created.
+ROOTS_E="$(PROJECT_DIR="$T_E/platform" python3 "$PLAT_SCRIPTS/lib/account-schema-owned-dirs.py" roots)"
+assert_grep "properties" "$ROOTS_E" "ea-roots-cmd"
+assert_nogrep "listings" "$ROOTS_E" "ea-roots-cmd-no-listings"
+SEED_E="$(seed_domain_root_dirs "$A_E")"
+assert_grep "seeded-roots=properties" "$SEED_E" "ea-seed-log"
+assert_dir "$A_E/properties" "ea-seed-dir"
+# Idempotent: a second run creates nothing.
+SEED_E2="$(seed_domain_root_dirs "$A_E")"
+assert_grep "seeded-roots=none" "$SEED_E2" "ea-seed-idempotent"
+
+# construction: every root bucket is created; nested entities are not.
+export PROJECT_DIR="$T_C/platform"
+A_SEED_C="$(make_account "$T_C")"
+ROOTS_C="$(PROJECT_DIR="$T_C/platform" python3 "$PLAT_SCRIPTS/lib/account-schema-owned-dirs.py" roots)"
+for d in jobs customers customer-sites assets parts suppliers ppm-contracts; do
+  assert_grep "$d" "$ROOTS_C" "con-roots-cmd-$d"
+done
+seed_domain_root_dirs "$A_SEED_C" >/dev/null
+for d in jobs customers customer-sites assets parts suppliers ppm-contracts; do
+  assert_dir "$A_SEED_C/$d" "con-seed-dir-$d"
+done
+for d in quotes visits purchase-orders; do
+  assert_nodir "$A_SEED_C/$d" "con-seed-nonested-$d"
+done
+
+# The all-accounts sweep seeds an existing account's root buckets too, so a
+# sub-account (provisioned once at creation) gains properties/ on upgrade.
+export PROJECT_DIR="$T_E/platform"
+SWEEP_ACCTS="$(mktemp -d)"; mkdir -p "$SWEEP_ACCTS/ea1"
+cp "$T_E/platform/templates/account-schema/SCHEMA.md" "$SWEEP_ACCTS/ea1/SCHEMA.md"
+printf '{"accountId":"ea1","role":"client"}\n' > "$SWEEP_ACCTS/ea1/account.json"
+SWEEP_E="$(reconcile_all_accounts_owned_dirs "$SWEEP_ACCTS" 2>&1)"
+assert_grep "seeded-roots=properties" "$SWEEP_E" "sweep-seed-log"
+assert_dir "$SWEEP_ACCTS/ea1/properties" "sweep-seed-properties-dir"
 
 # --- no vertical declared: generic base only ---
 T_N="$(make_tree '[]')"; A_N="$(make_account "$T_N")"

package/payload/platform/scripts/__tests__/provision-role-stamp.test.sh

@@ -20,8 +20,11 @@ export USERS_FILE="/nonexistent/users.json"
 
 # Fresh account -> role=house stamped
 T1=$(mktemp -d); A1="$T1/acct-house"
-provision_account_dir "$A1" "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa" "house" >/dev/null 2>&1
+OUT1="$(provision_account_dir "$A1" "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa" "house" 2>/dev/null)"
 assert_eq "$(role_of "$A1/account.json")" "house" "fresh-house-role"
+# Task 1938 — provision seeds the vertical's root domain buckets; the log line
+# proves seed_domain_root_dirs ran (bucket set depends on the brand's vertical).
+assert_eq "$(printf '%s' "$OUT1" | grep -c 'seeded-roots=')" "1" "fresh-seed-roots-logged"
 assert_eq "$(ms_of "$A1/account.json")" "False" "fresh-managedService-default"
 # Task 1483 — the WhatsApp passive requirement-intake identity is seeded, non-empty.
 assert_nonempty "$A1/agents/passive/IDENTITY.md" "passive-identity-seeded"

package/payload/platform/scripts/lib/account-schema-owned-dirs.py

@@ -410,9 +410,19 @@ def reconcile(project_dir, account_dir):
                   f"bucket={b['dir']} expectedAtRoot=false stray={is_stray}")
 
 
+def roots(project_dir):
+    """Print each root domain bucket dir (blank/absent Owner) of the brand's
+    vertical, one per line, in table order. Empty when no vertical is declared.
+    Provision consumes this to mkdir the operator-data buckets so they exist as
+    directories, not just allowed names."""
+    for b in resolve_domain_buckets(project_dir):
+        if _is_root(b["owner"]):
+            print(b["dir"])
+
+
 def main():
     if len(sys.argv) < 2:
-        sys.exit("usage: account-schema-owned-dirs.py {resolve|merge|reconcile} [account_dir]")
+        sys.exit("usage: account-schema-owned-dirs.py {resolve|merge|reconcile|roots} [account_dir]")
     cmd = sys.argv[1]
     pd = _project_dir()
     if cmd == "resolve":
@@ -421,6 +431,8 @@ def main():
         merge(pd, sys.argv[2])
     elif cmd == "reconcile":
         reconcile(pd, sys.argv[2])
+    elif cmd == "roots":
+        roots(pd)
     else:
         sys.exit(f"unknown command: {cmd}")
 

package/payload/platform/scripts/lib/account-schema-owned-dirs.sh

@@ -17,9 +17,30 @@ merge_owned_dirs_into_schema() {
   echo "  [acct-schema] op=seed-owned-dirs ${_out}"
 }
 
+# seed_domain_root_dirs <account_dir>
+# mkdir each root domain bucket the brand's vertical projects (Property ->
+# properties/ for estate-agent, Job/Customer/... for construction), so the
+# operator-data buckets exist as directories, not just allowed names. Idempotent.
+# Logs the buckets created so a provision can be audited from its log.
+seed_domain_root_dirs() {
+  local _acct="$1"
+  local _created=""
+  local _d
+  while IFS= read -r _d; do
+    [ -n "$_d" ] || continue
+    if [ ! -d "$_acct/$_d" ]; then
+      mkdir -p "$_acct/$_d"
+      _created="${_created:+$_created,}$_d"
+    fi
+  done < <(PROJECT_DIR="$PROJECT_DIR" python3 "$_ACCT_SCHEMA_PY" roots 2>/dev/null)
+  echo "  [acct-schema] seeded-roots=${_created:-none}"
+}
+
 # reconcile_all_accounts_owned_dirs <accounts_dir>
 # Standing check + backfill: for every account dir with an account.json, log the
-# pre-merge present state of each declared owned dir, then merge (backfill).
+# pre-merge present state of each declared owned dir, merge (backfill), then seed
+# the vertical's root buckets so an existing account (sub-accounts are only
+# provisioned once, at creation) gains the same directories a fresh one gets.
 reconcile_all_accounts_owned_dirs() {
   local _accts="$1"
   [ -d "$_accts" ] || return 0
@@ -29,5 +50,6 @@ reconcile_all_accounts_owned_dirs() {
     PROJECT_DIR="$PROJECT_DIR" python3 "$_ACCT_SCHEMA_PY" reconcile "$_acct" 2>/dev/null \
       | while IFS= read -r _line; do echo "  [acct-schema] op=reconcile ${_line}"; done
     merge_owned_dirs_into_schema "$_acct"
+    seed_domain_root_dirs "$_acct"
   done
 }

package/payload/platform/scripts/lib/provision-account-dir.sh

@@ -45,6 +45,11 @@ provision_account_dir() {
   # seeded SCHEMA.md so the guard admits them (e.g. quoting/ on SiteDesk).
   merge_owned_dirs_into_schema "$ACCOUNT_DIR"
 
+  # Create the vertical's root domain buckets on disk (Property -> properties/
+  # for estate-agent, Job/Customer/... for construction) so they are present
+  # directories, not just allowed names the operator never sees.
+  seed_domain_root_dirs "$ACCOUNT_DIR"
+
   # Claude Code discovers project-level .claude/ relative to the nearest .git
   # root. Without a .git in the account dir it traverses up to ~/maxy/.git and
   # misses accountDir/.claude/. Initialise a repo so the account dir IS the root.

package/payload/premium-plugins/sitedesk/plugins/sitedesk-job/mcp/dist/lib/gates.d.ts

@@ -27,6 +27,11 @@ export interface RefVerdict {
     reason?: "inconsistent";
     refs?: string[];
 }
+export interface SignatureVerdict {
+    pass: boolean;
+    skipped?: boolean;
+    reason?: "not-order" | "no-asset" | "absent";
+}
 /** The document's displayed grand total (data-quote-total) must equal the
  *  engine total at penny precision — money is penny-precise, so a sub-penny
  *  engine total (e.g. 3395.235) reconciles against the penny total the client
@@ -64,4 +69,14 @@ export declare function gateTermsWeight(html: string): TermsVerdict;
  *  `1848/1` class, where the header says `1848` and the acceptance block says
  *  `1848/1` — fails and reports the distinct values in first-seen order. */
 export declare function gateReferenceConsistency(html: string): RefVerdict;
+/** An order-class document (marked `data-doc-order`) must embed the account's
+ *  declared signature asset (`quoting/templates/signature.html`) verbatim — the
+ *  operator's own signature block, its structure and embedded image data, not a
+ *  rebuilt approximation. The order marker is the class signal, checked first: a
+ *  document without it is not an order and is not checked (a plain quote carries
+ *  no signature). An order with no declared asset skips (the same opt-in as the
+ *  header template: no declared asset → no enforcement). An order with an asset
+ *  declared must contain that asset verbatim (whitespace tolerant, the header
+ *  mechanism); one that omits it fails closed — an unsigned order is not shipped. */
+export declare function gateSignatureAsset(html: string, signatureTemplate: string | null): SignatureVerdict;
 //# sourceMappingURL=gates.d.ts.map

package/payload/premium-plugins/sitedesk/plugins/sitedesk-job/mcp/dist/lib/gates.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gates.d.ts","sourceRoot":"","sources":["../../src/lib/gates.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,gBAAgB;IAAG,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;AACnE,MAAM,WAAW,WAAW;IAAG,IAAI,EAAE,OAAO,CAAA;CAAE;AAC9C,MAAM,WAAW,eAAe;IAAG,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,GAAG,UAAU,GAAG,WAAW,GAAG,UAAU,CAAA;CAAE;AACzI,MAAM,WAAW,aAAa;IAAG,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,UAAU,CAAA;CAAE;AAC7G,MAAM,WAAW,YAAY;IAAG,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,eAAe,CAAA;CAAE;AAC5F,MAAM,WAAW,UAAU;IAAG,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,cAAc,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE;AAExH;;;;;;;sEAOsE;AACtE,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,gBAAgB,CAMjF;AAED;8EAC8E;AAC9E,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAExD;AAED;+EAC+E;AAC/E,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAS1D;AAUD;;;;;;;+DAO+D;AAC/D,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,aAAa,CAM1F;AA4BD;;;;iEAIiE;AACjE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAO1D;AAED;;;;;4EAK4E;AAC5E,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAMjE"}
+{"version":3,"file":"gates.d.ts","sourceRoot":"","sources":["../../src/lib/gates.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,gBAAgB;IAAG,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;AACnE,MAAM,WAAW,WAAW;IAAG,IAAI,EAAE,OAAO,CAAA;CAAE;AAC9C,MAAM,WAAW,eAAe;IAAG,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,GAAG,UAAU,GAAG,WAAW,GAAG,UAAU,CAAA;CAAE;AACzI,MAAM,WAAW,aAAa;IAAG,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,UAAU,CAAA;CAAE;AAC7G,MAAM,WAAW,YAAY;IAAG,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,eAAe,CAAA;CAAE;AAC5F,MAAM,WAAW,UAAU;IAAG,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,cAAc,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE;AACxH,MAAM,WAAW,gBAAgB;IAAG,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,GAAG,UAAU,GAAG,QAAQ,CAAA;CAAE;AAEpH;;;;;;;sEAOsE;AACtE,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,gBAAgB,CAMjF;AAED;8EAC8E;AAC9E,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAExD;AAED;+EAC+E;AAC/E,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAS1D;AAUD;;;;;;;+DAO+D;AAC/D,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,aAAa,CAM1F;AA4BD;;;;iEAIiE;AACjE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAO1D;AAED;;;;;4EAK4E;AAC5E,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAMjE;AAED;;;;;;;;qFAQqF;AACrF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,IAAI,GAAG,gBAAgB,CAMnG"}

package/payload/premium-plugins/sitedesk/plugins/sitedesk-job/mcp/dist/lib/gates.js

@@ -7,6 +7,7 @@
 //   data-doc-header    the header block (must be the declared canonical template verbatim)
 //   data-doc-terms     the standing-terms section (must carry no above-normal weight)
 //   data-doc-ref       every place the document reference appears (must all agree)
+//   data-doc-order     the document is issued as an order (must embed the declared signature asset)
 /** The document's displayed grand total (data-quote-total) must equal the
  *  engine total at penny precision — money is penny-precise, so a sub-penny
  *  engine total (e.g. 3395.235) reconciles against the penny total the client
@@ -127,4 +128,22 @@ export function gateReferenceConsistency(html) {
         return { pass: true, ref: distinct[0] };
     return { pass: false, reason: "inconsistent", refs: distinct };
 }
+/** An order-class document (marked `data-doc-order`) must embed the account's
+ *  declared signature asset (`quoting/templates/signature.html`) verbatim — the
+ *  operator's own signature block, its structure and embedded image data, not a
+ *  rebuilt approximation. The order marker is the class signal, checked first: a
+ *  document without it is not an order and is not checked (a plain quote carries
+ *  no signature). An order with no declared asset skips (the same opt-in as the
+ *  header template: no declared asset → no enforcement). An order with an asset
+ *  declared must contain that asset verbatim (whitespace tolerant, the header
+ *  mechanism); one that omits it fails closed — an unsigned order is not shipped. */
+export function gateSignatureAsset(html, signatureTemplate) {
+    if (!/\bdata-doc-order\b/i.test(html))
+        return { pass: true, skipped: true, reason: "not-order" };
+    // A null or empty/whitespace-only template is "no signature asset declared":
+    // skip, rather than let `includes("")` report a pass that enforced nothing.
+    if (signatureTemplate === null || normaliseHtml(signatureTemplate) === "")
+        return { pass: true, skipped: true, reason: "no-asset" };
+    return normaliseHtml(html).includes(normaliseHtml(signatureTemplate)) ? { pass: true } : { pass: false, reason: "absent" };
+}
 //# sourceMappingURL=gates.js.map

package/payload/premium-plugins/sitedesk/plugins/sitedesk-job/mcp/dist/lib/gates.js.map

@@ -1 +1 @@
-{"version":3,"file":"gates.js","sourceRoot":"","sources":["../../src/lib/gates.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,yEAAyE;AACzE,6DAA6D;AAC7D,gFAAgF;AAChF,qFAAqF;AACrF,mFAAmF;AACnF,2FAA2F;AAC3F,sFAAsF;AACtF,mFAAmF;AASnF;;;;;;;sEAOsE;AACtE,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,WAAmB;IAC7D,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACpD,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACpD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;AACtF,CAAC;AAED;8EAC8E;AAC9E,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,EAAE,IAAI,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACzD,CAAC;AAED;+EAC+E;AAC/E,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,qCAAqC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACnE,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACtD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC3D,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC/D,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC3E,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACzF,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AACnD,CAAC;AAED;;;4DAG4D;AAC5D,SAAS,aAAa,CAAC,CAAS;IAC9B,OAAO,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/D,CAAC;AAED;;;;;;;+DAO+D;AAC/D,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,QAAuB;IACzE,8EAA8E;IAC9E,4EAA4E;IAC5E,IAAI,QAAQ,KAAK,IAAI,IAAI,aAAa,CAAC,QAAQ,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC9F,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC3F,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AACtH,CAAC;AAED;;;;;;8EAM8E;AAC9E,SAAS,WAAW,CAAC,IAAY,EAAE,IAAY;IAC7C,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,kBAAkB,IAAI,WAAW,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3E,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,QAAQ,GAAG,WAAW,EAAE,IAAI,CAAC,CAAC;IACvD,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC;IACxB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACjB,IAAI,EAAE,KAAK,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,KAAK,EAAE,CAAC;QACV,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED;;;;iEAIiE;AACjE,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAClD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACzD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;WAC9B,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;WAC3B,4CAA4C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC1E,CAAC;AAED;;;;;4EAK4E;AAC5E,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC5D,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACpC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AACjE,CAAC"}
+{"version":3,"file":"gates.js","sourceRoot":"","sources":["../../src/lib/gates.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,yEAAyE;AACzE,6DAA6D;AAC7D,gFAAgF;AAChF,qFAAqF;AACrF,mFAAmF;AACnF,2FAA2F;AAC3F,sFAAsF;AACtF,mFAAmF;AACnF,oGAAoG;AAUpG;;;;;;;sEAOsE;AACtE,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,WAAmB;IAC7D,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACpD,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACpD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;AACtF,CAAC;AAED;8EAC8E;AAC9E,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,EAAE,IAAI,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACzD,CAAC;AAED;+EAC+E;AAC/E,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,qCAAqC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACnE,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACtD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC3D,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC/D,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC3E,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACzF,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AACnD,CAAC;AAED;;;4DAG4D;AAC5D,SAAS,aAAa,CAAC,CAAS;IAC9B,OAAO,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/D,CAAC;AAED;;;;;;;+DAO+D;AAC/D,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,QAAuB;IACzE,8EAA8E;IAC9E,4EAA4E;IAC5E,IAAI,QAAQ,KAAK,IAAI,IAAI,aAAa,CAAC,QAAQ,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC9F,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC3F,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AACtH,CAAC;AAED;;;;;;8EAM8E;AAC9E,SAAS,WAAW,CAAC,IAAY,EAAE,IAAY;IAC7C,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,kBAAkB,IAAI,WAAW,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3E,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,QAAQ,GAAG,WAAW,EAAE,IAAI,CAAC,CAAC;IACvD,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC;IACxB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACjB,IAAI,EAAE,KAAK,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,KAAK,EAAE,CAAC;QACV,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED;;;;iEAIiE;AACjE,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAClD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACzD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;WAC9B,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;WAC3B,4CAA4C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC1E,CAAC;AAED;;;;;4EAK4E;AAC5E,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC5D,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACpC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AACjE,CAAC;AAED;;;;;;;;qFAQqF;AACrF,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,iBAAgC;IAC/E,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACjG,6EAA6E;IAC7E,4EAA4E;IAC5E,IAAI,iBAAiB,KAAK,IAAI,IAAI,aAAa,CAAC,iBAAiB,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACpI,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC7H,CAAC"}

package/payload/premium-plugins/sitedesk/plugins/sitedesk-job/mcp/dist/lib/render-run.d.ts

@@ -1,5 +1,5 @@
 import { type SignLinkVerdict } from "./gates.js";
-export type RenderFault = "render-absent" | "render-error" | "reconcile-fail" | "margin-leak" | "sign-link" | "header-mismatch" | "terms-weight" | "ref-inconsistent";
+export type RenderFault = "render-absent" | "render-error" | "reconcile-fail" | "margin-leak" | "sign-link" | "header-mismatch" | "terms-weight" | "ref-inconsistent" | "signature-absent";
 export interface RunRenderArgs {
     accountDir: string;
     renderScriptPath: string;

package/payload/premium-plugins/sitedesk/plugins/sitedesk-job/mcp/dist/lib/render-run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"render-run.d.ts","sourceRoot":"","sources":["../../src/lib/render-run.ts"],"names":[],"mappings":"AAYA,OAAO,EAOL,KAAK,eAAe,EACrB,MAAM,YAAY,CAAC;AAGpB,MAAM,MAAM,WAAW,GACnB,eAAe,GACf,cAAc,GACd,gBAAgB,GAChB,aAAa,GACb,WAAW,GACX,iBAAiB,GACjB,cAAc,GACd,kBAAkB,CAAC;AAEvB,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,YAAY,GACpB;IACE,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7D,SAAS,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;IAGrE,QAAQ,EAAE,eAAe,GAAG,IAAI,CAAC;CAClC,GACD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAIvD,wBAAsB,SAAS,CAAC,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAuIvE"}
+{"version":3,"file":"render-run.d.ts","sourceRoot":"","sources":["../../src/lib/render-run.ts"],"names":[],"mappings":"AAYA,OAAO,EAQL,KAAK,eAAe,EACrB,MAAM,YAAY,CAAC;AAGpB,MAAM,MAAM,WAAW,GACnB,eAAe,GACf,cAAc,GACd,gBAAgB,GAChB,aAAa,GACb,WAAW,GACX,iBAAiB,GACjB,cAAc,GACd,kBAAkB,GAClB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,YAAY,GACpB;IACE,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7D,SAAS,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;IAGrE,QAAQ,EAAE,eAAe,GAAG,IAAI,CAAC;CAClC,GACD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAIvD,wBAAsB,SAAS,CAAC,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAkJvE"}

package/payload/premium-plugins/sitedesk/plugins/sitedesk-job/mcp/dist/lib/render-run.js

@@ -9,7 +9,7 @@
 import { spawn } from "node:child_process";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
-import { gateReconcile, gateMarginLeak, gateSignLink, gateHeaderConformance, gateTermsWeight, gateReferenceConsistency, } from "./gates.js";
+import { gateReconcile, gateMarginLeak, gateSignLink, gateHeaderConformance, gateTermsWeight, gateReferenceConsistency, gateSignatureAsset, } from "./gates.js";
 import { writeRenderReceipt } from "./render-receipt.js";
 export async function runRender(a) {
     if (!existsSync(a.renderScriptPath)) {
@@ -95,9 +95,18 @@ export async function runRender(a) {
     const header = gateHeaderConformance(html.quote, headerTemplate);
     const terms = gateTermsWeight(html.quote);
     const ref = gateReferenceConsistency(html.quote);
+    // Order-class signature gate: when the render marks the client quote an order
+    // (data-doc-order), it must embed the account's declared signature asset
+    // (quoting/templates/signature.html, parallel to the header template). A
+    // non-order quote is not checked; an order with no declared asset skips. A
+    // marked order missing the declared asset fails closed, so an unsigned order
+    // writes no receipt and the browser-pdf-save gate then refuses the print.
+    const signatureAssetPath = join(a.accountDir, "quoting", "templates", "signature.html");
+    const signatureAsset = existsSync(signatureAssetPath) ? readFileSync(signatureAssetPath, "utf8") : null;
+    const signature = gateSignatureAsset(html.quote, signatureAsset);
     const internalOk = recInternal.pass;
     const breakdownOk = recBreakdown.pass && leakBreakdown.pass;
-    const quoteOk = recQuote.pass && leakQuote.pass && signOk && header.pass && terms.pass && ref.pass;
+    const quoteOk = recQuote.pass && leakQuote.pass && signOk && header.pass && terms.pass && ref.pass && signature.pass;
     if (!internalOk || !breakdownOk || !quoteOk) {
         // Reason names the first failing gate, in document then gate order.
         let reason;
@@ -134,10 +143,14 @@ export async function runRender(a) {
             reason = "terms-weight";
             detail = "quote terms section carries above-normal font weight (bold/strong/font-weight >= 500)";
         }
-        else {
+        else if (!ref.pass) {
             reason = "ref-inconsistent";
             detail = `quote document references disagree: ${(ref.refs ?? []).join(", ")}`;
         }
+        else {
+            reason = "signature-absent";
+            detail = "order-class quote (data-doc-order) does not embed the account's declared signature asset (quoting/templates/signature.html)";
+        }
         return { ok: false, reason, detail };
     }
     const internalPath = join(a.accountDir, "memory/admin/customers", phone, `quote-${a.jobId}-internal.html`);

package/payload/premium-plugins/sitedesk/plugins/sitedesk-job/mcp/dist/lib/render-run.js.map

@@ -1 +1 @@
-{"version":3,"file":"render-run.js","sourceRoot":"","sources":["../../src/lib/render-run.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,4EAA4E;AAC5E,6EAA6E;AAC7E,+EAA+E;AAC/E,uEAAuE;AACvE,EAAE;AACF,wEAAwE;AACxE,iFAAiF;AAEjF,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACL,aAAa,EACb,cAAc,EACd,YAAY,EACZ,qBAAqB,EACrB,eAAe,EACf,wBAAwB,GAEzB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAiCzD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,CAAgB;IAC9C,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,uBAAuB,CAAC,CAAC,gBAAgB,EAAE,EAAE,CAAC;IACrG,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC;IACnF,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,OAAO,CAA0D,CAAC,OAAO,EAAE,EAAE;QACtH,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QACzE,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3C,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAChF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACzE,2EAA2E;QAC3E,8EAA8E;QAC9E,0EAA0E;QAC1E,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAClC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,wBAAwB,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;IACvH,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAqB,CAAC;QACtD,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACpH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,mEAAmE,EAAE,CAAC;QAC5H,CAAC;QACD,IAAI,GAAG,MAAiB,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,+BAA+B,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;IACrH,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAI,CAAC,CAAC,OAAO,CAAC,MAAyC,EAAE,KAAK,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,iEAAiE,EAAE,CAAC;IAC1H,CAAC;IACD,2EAA2E;IAC3E,6EAA6E;IAC7E,yBAAyB;IACzB,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,gEAAgE,KAAK,EAAE,EAAE,CAAC;IAChI,CAAC;IAED,+EAA+E;IAC/E,yCAAyC;IACzC,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAE7C,2EAA2E;IAC3E,4EAA4E;IAC5E,6EAA6E;IAC7E,2EAA2E;IAC3E,6EAA6E;IAC7E,0EAA0E;IAC1E,MAAM,cAAc,GAAG,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7E,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC;IACrD,IAAI,MAAe,CAAC;IACpB,IAAI,UAAkB,CAAC;IACvB,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC;QAC1B,UAAU,GAAG,0BAA0B,WAAW,CAAC,MAAM,UAAU,WAAW,CAAC,IAAI,IAAI,EAAE,GAAG,CAAC;IAC/F,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,CAAC,SAAS,CAAC;QACpB,UAAU,GAAG,2GAA2G,CAAC;IAC3H,CAAC;IACD,4EAA4E;IAC5E,MAAM,QAAQ,GAA2B,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IAE7E,8EAA8E;IAC9E,2EAA2E;IAC3E,6EAA6E;IAC7E,6EAA6E;IAC7E,+EAA+E;IAC/E,gEAAgE;IAChE,MAAM,kBAAkB,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;IACrF,MAAM,cAAc,GAAG,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxG,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAEjD,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC;IACpC,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,IAAI,aAAa,CAAC,IAAI,CAAC;IAC5D,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC;IAEnG,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW,IAAI,CAAC,OAAO,EAAE,CAAC;QAC5C,oEAAoE;QACpE,IAAI,MAAmB,CAAC;QACxB,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,GAAG,gBAAgB,CAAC;YAAC,MAAM,GAAG,kBAAkB,WAAW,CAAC,KAAK,cAAc,WAAW,EAAE,CAAC;QAAC,CAAC;aACzH,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,GAAG,gBAAgB,CAAC;YAAC,MAAM,GAAG,mBAAmB,YAAY,CAAC,KAAK,cAAc,WAAW,EAAE,CAAC;QAAC,CAAC;aACjI,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,GAAG,aAAa,CAAC;YAAC,MAAM,GAAG,sCAAsC,CAAC;QAAC,CAAC;aACrG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,GAAG,gBAAgB,CAAC;YAAC,MAAM,GAAG,eAAe,QAAQ,CAAC,KAAK,cAAc,WAAW,EAAE,CAAC;QAAC,CAAC;aACrH,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,GAAG,aAAa,CAAC;YAAC,MAAM,GAAG,kCAAkC,CAAC;QAAC,CAAC;aAC7F,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,MAAM,GAAG,WAAW,CAAC;YAAC,MAAM,GAAG,UAAU,CAAC;QAAC,CAAC;aAC3D,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,GAAG,iBAAiB,CAAC;YAAC,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,kBAAkB,CAAC,CAAC,CAAC,gFAAgF,CAAC,CAAC,CAAC,6DAA6D,CAAC;QAAC,CAAC;aACnP,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,GAAG,cAAc,CAAC;YAAC,MAAM,GAAG,uFAAuF,CAAC;QAAC,CAAC;aAC/I,CAAC;YAAC,MAAM,GAAG,kBAAkB,CAAC;YAAC,MAAM,GAAG,uCAAuC,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAAC,CAAC;QACpH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACvC,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,wBAAwB,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,KAAK,gBAAgB,CAAC,CAAC;IAC3G,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,KAAK,iBAAiB,CAAC,CAAC;IAChH,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC;IAClG,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAU,EAAE,CAAC;QAC3H,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,6EAA6E;IAC7E,2EAA2E;IAC3E,6EAA6E;IAC7E,wCAAwC;IACxC,kBAAkB,CAAC,CAAC,CAAC,UAAU,EAAE;QAC/B,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,WAAW;QACX,KAAK,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE;QAC7E,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC,CAAC;IAEH,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE;QAC5E,SAAS,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE;QAC3E,QAAQ;KACT,CAAC;AACJ,CAAC"}
+{"version":3,"file":"render-run.js","sourceRoot":"","sources":["../../src/lib/render-run.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,4EAA4E;AAC5E,6EAA6E;AAC7E,+EAA+E;AAC/E,uEAAuE;AACvE,EAAE;AACF,wEAAwE;AACxE,iFAAiF;AAEjF,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACL,aAAa,EACb,cAAc,EACd,YAAY,EACZ,qBAAqB,EACrB,eAAe,EACf,wBAAwB,EACxB,kBAAkB,GAEnB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAkCzD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,CAAgB;IAC9C,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,uBAAuB,CAAC,CAAC,gBAAgB,EAAE,EAAE,CAAC;IACrG,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC;IACnF,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,OAAO,CAA0D,CAAC,OAAO,EAAE,EAAE;QACtH,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QACzE,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3C,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAChF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACzE,2EAA2E;QAC3E,8EAA8E;QAC9E,0EAA0E;QAC1E,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAClC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,wBAAwB,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;IACvH,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAqB,CAAC;QACtD,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACpH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,mEAAmE,EAAE,CAAC;QAC5H,CAAC;QACD,IAAI,GAAG,MAAiB,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,+BAA+B,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;IACrH,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAI,CAAC,CAAC,OAAO,CAAC,MAAyC,EAAE,KAAK,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,iEAAiE,EAAE,CAAC;IAC1H,CAAC;IACD,2EAA2E;IAC3E,6EAA6E;IAC7E,yBAAyB;IACzB,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,gEAAgE,KAAK,EAAE,EAAE,CAAC;IAChI,CAAC;IAED,+EAA+E;IAC/E,yCAAyC;IACzC,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAE7C,2EAA2E;IAC3E,4EAA4E;IAC5E,6EAA6E;IAC7E,2EAA2E;IAC3E,6EAA6E;IAC7E,0EAA0E;IAC1E,MAAM,cAAc,GAAG,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7E,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC;IACrD,IAAI,MAAe,CAAC;IACpB,IAAI,UAAkB,CAAC;IACvB,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC;QAC1B,UAAU,GAAG,0BAA0B,WAAW,CAAC,MAAM,UAAU,WAAW,CAAC,IAAI,IAAI,EAAE,GAAG,CAAC;IAC/F,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,CAAC,SAAS,CAAC;QACpB,UAAU,GAAG,2GAA2G,CAAC;IAC3H,CAAC;IACD,4EAA4E;IAC5E,MAAM,QAAQ,GAA2B,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IAE7E,8EAA8E;IAC9E,2EAA2E;IAC3E,6EAA6E;IAC7E,6EAA6E;IAC7E,+EAA+E;IAC/E,gEAAgE;IAChE,MAAM,kBAAkB,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;IACrF,MAAM,cAAc,GAAG,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxG,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAEjD,8EAA8E;IAC9E,yEAAyE;IACzE,yEAAyE;IACzE,2EAA2E;IAC3E,6EAA6E;IAC7E,0EAA0E;IAC1E,MAAM,kBAAkB,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;IACxF,MAAM,cAAc,GAAG,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxG,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAEjE,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC;IACpC,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,IAAI,aAAa,CAAC,IAAI,CAAC;IAC5D,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC;IAErH,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW,IAAI,CAAC,OAAO,EAAE,CAAC;QAC5C,oEAAoE;QACpE,IAAI,MAAmB,CAAC;QACxB,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,GAAG,gBAAgB,CAAC;YAAC,MAAM,GAAG,kBAAkB,WAAW,CAAC,KAAK,cAAc,WAAW,EAAE,CAAC;QAAC,CAAC;aACzH,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,GAAG,gBAAgB,CAAC;YAAC,MAAM,GAAG,mBAAmB,YAAY,CAAC,KAAK,cAAc,WAAW,EAAE,CAAC;QAAC,CAAC;aACjI,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,GAAG,aAAa,CAAC;YAAC,MAAM,GAAG,sCAAsC,CAAC;QAAC,CAAC;aACrG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,GAAG,gBAAgB,CAAC;YAAC,MAAM,GAAG,eAAe,QAAQ,CAAC,KAAK,cAAc,WAAW,EAAE,CAAC;QAAC,CAAC;aACrH,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,GAAG,aAAa,CAAC;YAAC,MAAM,GAAG,kCAAkC,CAAC;QAAC,CAAC;aAC7F,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,MAAM,GAAG,WAAW,CAAC;YAAC,MAAM,GAAG,UAAU,CAAC;QAAC,CAAC;aAC3D,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,GAAG,iBAAiB,CAAC;YAAC,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,kBAAkB,CAAC,CAAC,CAAC,gFAAgF,CAAC,CAAC,CAAC,6DAA6D,CAAC;QAAC,CAAC;aACnP,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,GAAG,cAAc,CAAC;YAAC,MAAM,GAAG,uFAAuF,CAAC;QAAC,CAAC;aAC/I,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,GAAG,kBAAkB,CAAC;YAAC,MAAM,GAAG,uCAAuC,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAAC,CAAC;aAC9H,CAAC;YAAC,MAAM,GAAG,kBAAkB,CAAC;YAAC,MAAM,GAAG,6HAA6H,CAAC;QAAC,CAAC;QAC7K,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACvC,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,wBAAwB,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,KAAK,gBAAgB,CAAC,CAAC;IAC3G,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,KAAK,iBAAiB,CAAC,CAAC;IAChH,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC;IAClG,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAU,EAAE,CAAC;QAC3H,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,6EAA6E;IAC7E,2EAA2E;IAC3E,6EAA6E;IAC7E,wCAAwC;IACxC,kBAAkB,CAAC,CAAC,CAAC,UAAU,EAAE;QAC/B,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,WAAW;QACX,KAAK,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE;QAC7E,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC,CAAC;IAEH,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE;QAC5E,SAAS,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE;QAC3E,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/payload/premium-plugins/sitedesk/plugins/sitedesk-job/mcp/src/lib/__tests__/gates.test.ts

@@ -6,6 +6,7 @@ import {
   gateHeaderConformance,
   gateTermsWeight,
   gateReferenceConsistency,
+  gateSignatureAsset,
 } from "../gates.js";
 
 describe("gateReconcile — displayed total must equal the engine total", () => {
@@ -142,3 +143,27 @@ describe("gateReferenceConsistency — one document reference across every marke
     expect(gateReferenceConsistency(html)).toEqual({ pass: false, reason: "inconsistent", refs: ["1848", "1848/1"] });
   });
 });
+
+describe("gateSignatureAsset — an order must embed the account's declared signature asset", () => {
+  const SIGNATURE = '<div data-doc-signature><img src="data:image/png;base64,AAAAsigBBBB"><span>A. Glazier, Director</span></div>';
+  it("skips a document that is not an order (no data-doc-order marker), even with an asset declared", () => {
+    expect(gateSignatureAsset("<body><h1>Quote</h1></body>", SIGNATURE)).toEqual({ pass: true, skipped: true, reason: "not-order" });
+  });
+  it("skips an order when the account declares no signature asset (template null)", () => {
+    expect(gateSignatureAsset('<body data-doc-order><h1>Order</h1></body>', null)).toEqual({ pass: true, skipped: true, reason: "no-asset" });
+  });
+  it("skips an order on an empty or whitespace-only declared asset rather than passing via includes(\"\")", () => {
+    expect(gateSignatureAsset('<body data-doc-order><h1>Order</h1></body>', "   \n  ")).toEqual({ pass: true, skipped: true, reason: "no-asset" });
+  });
+  it("passes when the order embeds the declared signature asset verbatim (whitespace-tolerant)", () => {
+    const rendered = `<body data-doc-order>\n  <div data-doc-signature>\n    <img src="data:image/png;base64,AAAAsigBBBB">\n    <span>A. Glazier, Director</span>\n  </div>\n</body>`;
+    expect(gateSignatureAsset(rendered, SIGNATURE)).toEqual({ pass: true });
+  });
+  it("fails an order that carries the order marker but omits the declared signature asset", () => {
+    expect(gateSignatureAsset('<body data-doc-order><h1>Order</h1><p>terms</p></body>', SIGNATURE)).toEqual({ pass: false, reason: "absent" });
+  });
+  it("fails an order whose signature block is a rebuilt approximation (different signer data)", () => {
+    const rebuilt = '<body data-doc-order><div data-doc-signature><img src="data:image/png;base64,AAAAsigBBBB"><span>Someone Else</span></div></body>';
+    expect(gateSignatureAsset(rebuilt, SIGNATURE)).toEqual({ pass: false, reason: "absent" });
+  });
+});

package/payload/premium-plugins/sitedesk/plugins/sitedesk-job/mcp/src/lib/__tests__/render-run.test.ts

@@ -268,6 +268,58 @@ process.stdin.on("end", () => {
   });
 });
 
+describe("runRender — order-class signature-asset gate against a declared asset", () => {
+  let sdir: string;
+  const SIG_TPL = '<div data-doc-signature><img src="data:image/png;base64,AAAAsigBBBB"><span>A. Glazier, Director</span></div>';
+  // Emit a quote body that is either an order (data-doc-order) or a plain quote,
+  // optionally embedding a signature block. Brand/layout is the operator's; the
+  // tool only gates. No acceptance anchor (default, no-signer path).
+  const renderEmitting = (quoteBody: string) => `
+let input = "";
+process.stdin.on("data", (d) => (input += d));
+process.stdin.on("end", () => {
+  const { figures } = JSON.parse(input);
+  const t = figures.total;
+  const quote = ${JSON.stringify(quoteBody)}.replace(/__T__/g, t);
+  process.stdout.write(JSON.stringify({
+    internal: '<html><body><td data-internal-only>c</td><p data-quote-total="' + t + '">Total ' + t + '</p></body></html>',
+    breakdown: '<html><body><p data-quote-total="' + t + '">Total ' + t + '</p></body></html>',
+    quote,
+  }));
+});
+`;
+  const ORDER_SIGNED = '<html><body data-doc-order><p data-quote-total="__T__">Total __T__</p>' + SIG_TPL + '</body></html>';
+  const ORDER_UNSIGNED = '<html><body data-doc-order><p data-quote-total="__T__">Total __T__</p></body></html>';
+  const PLAIN_QUOTE = '<html><body><p data-quote-total="__T__">Total __T__</p></body></html>';
+
+  beforeAll(() => {
+    sdir = mkdtempSync(join(tmpdir(), "sd-render-sig-"));
+    mkdirSync(join(sdir, "quoting", "templates"), { recursive: true });
+    writeFileSync(join(sdir, "quoting", "templates", "signature.html"), SIG_TPL);
+    writeFileSync(join(sdir, "quoting", "render-order-signed.mjs"), renderEmitting(ORDER_SIGNED));
+    writeFileSync(join(sdir, "quoting", "render-order-unsigned.mjs"), renderEmitting(ORDER_UNSIGNED));
+    writeFileSync(join(sdir, "quoting", "render-plain.mjs"), renderEmitting(PLAIN_QUOTE));
+  });
+  afterAll(() => rmSync(sdir, { recursive: true, force: true }));
+
+  it("passes when the order embeds the declared signature asset verbatim", async () => {
+    const r = await runRender({ accountDir: sdir, renderScriptPath: join(sdir, "quoting", "render-order-signed.mjs"), figures, jobId: "job-sig-ok" });
+    expect(r.ok).toBe(true);
+    expect(existsSync(receiptPath(sdir, "job-sig-ok"))).toBe(true);
+  });
+  it("signature-absent when the order omits the declared signature asset (fail-closed, nothing filed)", async () => {
+    const r = await runRender({ accountDir: sdir, renderScriptPath: join(sdir, "quoting", "render-order-unsigned.mjs"), figures, jobId: "job-sig-bad" });
+    expect(r).toMatchObject({ ok: false, reason: "signature-absent" });
+    expect(existsSync(join(sdir, "memory/users/44700900000/documents/quote-job-sig-bad.html"))).toBe(false);
+    expect(existsSync(receiptPath(sdir, "job-sig-bad"))).toBe(false);
+  });
+  it("files a plain quote (no order marker) even though a signature asset is declared — non-orders are not checked", async () => {
+    const r = await runRender({ accountDir: sdir, renderScriptPath: join(sdir, "quoting", "render-plain.mjs"), figures, jobId: "job-sig-plain" });
+    expect(r.ok).toBe(true);
+    expect(existsSync(receiptPath(sdir, "job-sig-plain"))).toBe(true);
+  });
+});
+
 describe("runRender — script faults", () => {
   it("render-absent when the render script is missing", async () => {
     const r = await runRender({ accountDir: dir, renderScriptPath: rs("nope.mjs"), figures, signUrl, jobId });