@rubytech/create-sitedesk-code 0.1.506 → 0.1.508

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-sitedesk-code",
-  "version": "0.1.506",
+  "version": "0.1.508",
   "description": "Install SiteDesk — automated back office for independent building contractors",
   "bin": {
     "create-sitedesk-code": "./dist/index.js"
@@ -13,7 +13,7 @@
     "build": "tsc",
     "bundle": "node scripts/bundle.js",
     "test": "npm run build && node --test 'dist/__tests__/*.test.js'",
-    "prepublishOnly": "bash ../../platform/scripts/verify-skill-tool-surface.sh && node ../../platform/scripts/check-plugin-tools-mcp-consistency.mjs && node ../../platform/scripts/check-specialist-tool-surface.mjs && node ../../platform/scripts/check-agent-contract.mjs && node ../../platform/scripts/check-routing-prose-bash.mjs && node ../../platform/scripts/check-no-task-id-leaks.mjs && node ../../platform/scripts/check-no-esm-require.mjs && node ../../platform/scripts/check-no-raw-mcp-registrations.mjs && node ../../platform/scripts/check-skill-load-coverage.mjs && node ../../platform/scripts/check-architecture-skill-no-drift.mjs && node ../../platform/ui/scripts/check-route-wiring.mjs && node ../../platform/ui/scripts/check-edge-admin-routes.mjs && npm run build && node --test 'dist/__tests__/*.test.js' && chmod +x dist/index.js && npm run bundle && bash ../../platform/scripts/smoke-boot-services.sh && node ../../platform/ui/scripts/check-bundle-node-imports.mjs --dir=./payload/server/public/assets"
+    "prepublishOnly": "bash ../../platform/scripts/verify-skill-tool-surface.sh && node ../../platform/scripts/check-plugin-tools-mcp-consistency.mjs && node ../../platform/scripts/check-risk-class.mjs && node ../../platform/scripts/check-specialist-tool-surface.mjs && node ../../platform/scripts/check-agent-contract.mjs && node ../../platform/scripts/check-routing-prose-bash.mjs && node ../../platform/scripts/check-no-task-id-leaks.mjs && node ../../platform/scripts/check-no-esm-require.mjs && node ../../platform/scripts/check-no-raw-mcp-registrations.mjs && node ../../platform/scripts/check-skill-load-coverage.mjs && node ../../platform/scripts/check-architecture-skill-no-drift.mjs && node ../../platform/ui/scripts/check-brand-fonts.mjs && node ../../platform/ui/scripts/check-route-wiring.mjs && node ../../platform/ui/scripts/check-edge-admin-routes.mjs && npm run build && node --test 'dist/__tests__/*.test.js' && chmod +x dist/index.js && npm run bundle && bash ../../platform/scripts/smoke-boot-services.sh && node ../../platform/ui/scripts/check-bundle-node-imports.mjs --dir=./payload/server/public/assets"
   },
   "files": [
     "dist",

package/payload/platform/config/brand.json

@@ -18,9 +18,13 @@
   "googleClientSecret": "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",
   "commercialMode": false,
   "vertical": "schema-construction",
-  "shipsPremiumBundles": ["sitedesk"],
-  "primaryContainer": { "label": "Job", "term": "Jobs" },
-
+  "shipsPremiumBundles": [
+    "sitedesk"
+  ],
+  "primaryContainer": {
+    "label": "Job",
+    "term": "Jobs"
+  },
   "defaultColors": {
     "primary": "#ea7232",
     "primaryHover": "#CE642C",
@@ -30,14 +34,11 @@
     "background": "#FAFAF8",
     "agentBubble": "#ECECE6"
   },
-
   "defaultFonts": {
     "display": "'Inter', -apple-system, BlinkMacSystemFont, sans-serif",
     "body": "'Inter', -apple-system, BlinkMacSystemFont, sans-serif"
   },
-
   "logoContainsName": true,
-
   "assets": {
     "logo": "sitedesk-square.png",
     "icon": "sitedesk-monochrome.png",
@@ -47,27 +48,69 @@
     "appIcon192": "sitedesk-app-icon-192.png",
     "maskableIcon": "sitedesk-app-icon-maskable-512.png"
   },
-
   "npm": {
     "packageName": "@rubytech/create-sitedesk-code",
     "binName": "create-sitedesk-code",
     "author": "Rubytech LLC"
   },
-
   "plugins": {
-    "core": ["admin", "memory", "docs", "cloudflare", "anthropic", "workflows", "work", "ledger", "scheduling", "email", "contacts", "projects", "prompt-optimiser", "browser"],
-    "defaultEnabled": ["business-assistant", "web-designer"],
-    "available": ["connector", "telegram", "deep-research", "whatsapp", "replicate", "linkedin-import", "notion-import", "obsidian-import", "x-import", "slides"],
-    "excluded": ["sales", "joblogic"]
+    "core": [
+      "admin",
+      "memory",
+      "docs",
+      "cloudflare",
+      "anthropic",
+      "workflows",
+      "work",
+      "ledger",
+      "scheduling",
+      "email",
+      "contacts",
+      "projects",
+      "prompt-optimiser",
+      "browser"
+    ],
+    "defaultEnabled": [
+      "business-assistant",
+      "web-designer"
+    ],
+    "available": [
+      "connector",
+      "telegram",
+      "deep-research",
+      "whatsapp",
+      "replicate",
+      "linkedin-import",
+      "notion-import",
+      "obsidian-import",
+      "x-import",
+      "slides"
+    ],
+    "excluded": [
+      "sales",
+      "joblogic"
+    ]
   },
-
   "externalPlugins": [
-    { "name": "discord",  "marketplace": "claude-plugins-official", "channelPlugin": true },
-    { "name": "imessage", "marketplace": "claude-plugins-official", "channelPlugin": true },
-    { "name": "superpowers", "marketplace": "claude-plugins-official" },
-    { "name": "code-review", "marketplace": "claude-plugins-official" }
+    {
+      "name": "discord",
+      "marketplace": "claude-plugins-official",
+      "channelPlugin": true
+    },
+    {
+      "name": "imessage",
+      "marketplace": "claude-plugins-official",
+      "channelPlugin": true
+    },
+    {
+      "name": "superpowers",
+      "marketplace": "claude-plugins-official"
+    },
+    {
+      "name": "code-review",
+      "marketplace": "claude-plugins-official"
+    }
   ],
-
   "consent": {
     "copy": {
       "title": "Before you browse this listing",
@@ -85,5 +128,45 @@
       "accentFg": "#FFFFFF",
       "border": "#E0E0DB"
     }
+  },
+  "fonts": {
+    "display": {
+      "family": "Inter",
+      "faces": [
+        {
+          "weight": 400,
+          "file": "inter-400.woff2"
+        },
+        {
+          "weight": 500,
+          "file": "inter-500.woff2"
+        },
+        {
+          "weight": 600,
+          "file": "inter-600.woff2"
+        },
+        {
+          "weight": 700,
+          "file": "inter-700.woff2"
+        },
+        {
+          "weight": 800,
+          "file": "inter-800.woff2"
+        }
+      ]
+    },
+    "body": {
+      "family": "Inter",
+      "faces": [
+        {
+          "weight": 400,
+          "file": "inter-400.woff2"
+        },
+        {
+          "weight": 500,
+          "file": "inter-500.woff2"
+        }
+      ]
+    }
   }
 }

package/payload/platform/lib/account-schema-regions/dist/index.d.ts

@@ -22,11 +22,23 @@
  * behaviour so a future edit cannot reintroduce separator sensitivity.
  */
 /**
- * Operator-data buckets from the shipped template
- * (platform/templates/account-schema/SCHEMA.md). They carry no ontology row
- * because they are not entity buckets, but they hold the operator's own data,
- * so they are home on every brand. On a vertical with no `## Top-level node
- * types` table (schema-knowledge-work) they are the whole of home.
+ * Non-ontology buckets that are still the operator's own work, so they are home
+ * on every brand. They carry no ontology row because they are not entity
+ * buckets. On a vertical with no `## Top-level node types` table
+ * (schema-knowledge-work) they are the whole of home.
+ *
+ * The membership test is "would the operator go looking for this?", not "who
+ * writes it". `output`, `generated` and `extracted` hold delivered work product;
+ * `sites` holds published websites; `uploads` holds what a client sent in. The
+ * shipped template groups those five under "tool-owned", but that is a rule
+ * about not reorganising their internals — a write constraint, not a reason to
+ * file them behind the platform's own plumbing. What stays out is genuinely
+ * internal: caches, state, logs, secrets, temp, the git and Claude control
+ * dirs, and plugin workspaces.
+ *
+ * Every name here is created at provision (provision-account-dir.sh `_seed_dirs`),
+ * so the standing home-parity audit finds them on disk rather than reporting
+ * them missing.
  *
  * Lives here rather than in either consumer because both the /data page and the
  * standing reconcile audit must agree on the same set; a hand-synced copy in

package/payload/platform/lib/account-schema-regions/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,UAAU,EAAE,SAAS,MAAM,EAAyD,CAAA;AAiBjG,MAAM,WAAW,aAAa;IAC5B,0EAA0E;IAC1E,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,iEAAiE;IACjE,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,gEAAgE;IAChE,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB;;;;;;;OAOG;IACH,MAAM,EAAE,OAAO,CAAA;IACf;;;;OAIG;IACH,MAAM,EAAE,IAAI,GAAG,eAAe,GAAG,cAAc,CAAA;CAChD;AAiCD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,aAAa,CAazE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,UAAU,EAAE,SAAS,MAAM,EAEtC,CAAA;AAiBF,MAAM,WAAW,aAAa;IAC5B,0EAA0E;IAC1E,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,iEAAiE;IACjE,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,gEAAgE;IAChE,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB;;;;;;;OAOG;IACH,MAAM,EAAE,OAAO,CAAA;IACf;;;;OAIG;IACH,MAAM,EAAE,IAAI,GAAG,eAAe,GAAG,cAAc,CAAA;CAChD;AAiCD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,aAAa,CAazE"}

package/payload/platform/lib/account-schema-regions/dist/index.js

@@ -26,17 +26,31 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.HOME_FIXED = void 0;
 exports.parseSchemaRegions = parseSchemaRegions;
 /**
- * Operator-data buckets from the shipped template
- * (platform/templates/account-schema/SCHEMA.md). They carry no ontology row
- * because they are not entity buckets, but they hold the operator's own data,
- * so they are home on every brand. On a vertical with no `## Top-level node
- * types` table (schema-knowledge-work) they are the whole of home.
+ * Non-ontology buckets that are still the operator's own work, so they are home
+ * on every brand. They carry no ontology row because they are not entity
+ * buckets. On a vertical with no `## Top-level node types` table
+ * (schema-knowledge-work) they are the whole of home.
+ *
+ * The membership test is "would the operator go looking for this?", not "who
+ * writes it". `output`, `generated` and `extracted` hold delivered work product;
+ * `sites` holds published websites; `uploads` holds what a client sent in. The
+ * shipped template groups those five under "tool-owned", but that is a rule
+ * about not reorganising their internals — a write constraint, not a reason to
+ * file them behind the platform's own plumbing. What stays out is genuinely
+ * internal: caches, state, logs, secrets, temp, the git and Claude control
+ * dirs, and plugin workspaces.
+ *
+ * Every name here is created at provision (provision-account-dir.sh `_seed_dirs`),
+ * so the standing home-parity audit finds them on disk rather than reporting
+ * them missing.
  *
  * Lives here rather than in either consumer because both the /data page and the
  * standing reconcile audit must agree on the same set; a hand-synced copy in
  * each build is precisely the drift this shared module exists to prevent.
  */
-exports.HOME_FIXED = Object.freeze(['projects', 'contacts', 'documents']);
+exports.HOME_FIXED = Object.freeze([
+    'projects', 'contacts', 'documents', 'output', 'generated', 'extracted', 'sites', 'uploads',
+]);
 const ONT_START = '<!-- ontology-buckets:start -->';
 const ONT_END = '<!-- ontology-buckets:end -->';
 const PLUGIN_START = '<!-- plugin-owned-dirs:start -->';

package/payload/platform/lib/account-schema-regions/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;;;AAqFH,gDAaC;AAhGD;;;;;;;;;;GAUG;AACU,QAAA,UAAU,GAAsB,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,CAAA;AAEjG,MAAM,SAAS,GAAG,iCAAiC,CAAA;AACnD,MAAM,OAAO,GAAG,+BAA+B,CAAA;AAC/C,MAAM,YAAY,GAAG,kCAAkC,CAAA;AACvD,MAAM,UAAU,GAAG,gCAAgC,CAAA;AACnD,MAAM,aAAa,GAAG,sBAAsB,CAAA;AAE5C;;;;;;GAMG;AACH,MAAM,QAAQ,GAAG,mBAAmB,CAAA;AA0BpC,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa,EAAE,GAAW;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAChC,IAAI,IAAI,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IAC1B,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAClC,IAAI,EAAE,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IACxB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;AACxD,CAAC;AAED,SAAS,MAAM,CAAC,KAAe;IAC7B,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;QACpC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC9C,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;IACxC,IAAI,IAAI,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAC1C,IAAI,SAAS,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;IACzC,IAAI,EAAE,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IACxB,OAAO,IAAI;SACR,KAAK,CAAC,SAAS,GAAG,CAAC,EAAE,EAAE,CAAC;SACxB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AAChC,CAAC;AAED,SAAgB,kBAAkB,CAAC,QAAuB;IACxD,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAA;IAC5G,CAAC;IACD,MAAM,eAAe,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;IAC9C,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,GAAG,CAAC,CAAA;IACzC,OAAO;QACL,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAChE,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;QACpE,eAAe;QACf,MAAM;QACN,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc;KACvC,CAAA;AACH,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;;;AAmGH,gDAaC;AA9GD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACU,QAAA,UAAU,GAAsB,MAAM,CAAC,MAAM,CAAC;IACzD,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS;CAC5F,CAAC,CAAA;AAEF,MAAM,SAAS,GAAG,iCAAiC,CAAA;AACnD,MAAM,OAAO,GAAG,+BAA+B,CAAA;AAC/C,MAAM,YAAY,GAAG,kCAAkC,CAAA;AACvD,MAAM,UAAU,GAAG,gCAAgC,CAAA;AACnD,MAAM,aAAa,GAAG,sBAAsB,CAAA;AAE5C;;;;;;GAMG;AACH,MAAM,QAAQ,GAAG,mBAAmB,CAAA;AA0BpC,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa,EAAE,GAAW;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAChC,IAAI,IAAI,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IAC1B,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAClC,IAAI,EAAE,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IACxB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;AACxD,CAAC;AAED,SAAS,MAAM,CAAC,KAAe;IAC7B,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;QACpC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC9C,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;IACxC,IAAI,IAAI,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAC1C,IAAI,SAAS,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;IACzC,IAAI,EAAE,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IACxB,OAAO,IAAI;SACR,KAAK,CAAC,SAAS,GAAG,CAAC,EAAE,EAAE,CAAC;SACxB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AAChC,CAAC;AAED,SAAgB,kBAAkB,CAAC,QAAuB;IACxD,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAA;IAC5G,CAAC;IACD,MAAM,eAAe,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;IAC9C,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,GAAG,CAAC,CAAA;IACzC,OAAO;QACL,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAChE,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;QACpE,eAAe;QACf,MAAM;QACN,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc;KACvC,CAAA;AACH,CAAC"}

package/payload/platform/lib/account-schema-regions/src/index.ts

@@ -23,17 +23,31 @@
  */
 
 /**
- * Operator-data buckets from the shipped template
- * (platform/templates/account-schema/SCHEMA.md). They carry no ontology row
- * because they are not entity buckets, but they hold the operator's own data,
- * so they are home on every brand. On a vertical with no `## Top-level node
- * types` table (schema-knowledge-work) they are the whole of home.
+ * Non-ontology buckets that are still the operator's own work, so they are home
+ * on every brand. They carry no ontology row because they are not entity
+ * buckets. On a vertical with no `## Top-level node types` table
+ * (schema-knowledge-work) they are the whole of home.
+ *
+ * The membership test is "would the operator go looking for this?", not "who
+ * writes it". `output`, `generated` and `extracted` hold delivered work product;
+ * `sites` holds published websites; `uploads` holds what a client sent in. The
+ * shipped template groups those five under "tool-owned", but that is a rule
+ * about not reorganising their internals — a write constraint, not a reason to
+ * file them behind the platform's own plumbing. What stays out is genuinely
+ * internal: caches, state, logs, secrets, temp, the git and Claude control
+ * dirs, and plugin workspaces.
+ *
+ * Every name here is created at provision (provision-account-dir.sh `_seed_dirs`),
+ * so the standing home-parity audit finds them on disk rather than reporting
+ * them missing.
  *
  * Lives here rather than in either consumer because both the /data page and the
  * standing reconcile audit must agree on the same set; a hand-synced copy in
  * each build is precisely the drift this shared module exists to prevent.
  */
-export const HOME_FIXED: readonly string[] = Object.freeze(['projects', 'contacts', 'documents'])
+export const HOME_FIXED: readonly string[] = Object.freeze([
+  'projects', 'contacts', 'documents', 'output', 'generated', 'extracted', 'sites', 'uploads',
+])
 
 const ONT_START = '<!-- ontology-buckets:start -->'
 const ONT_END = '<!-- ontology-buckets:end -->'

package/payload/platform/plugins/admin/PLUGIN.md

@@ -6,117 +6,158 @@ tools:
   - name: system-status
     publicAllowlist: false
     adminAllowlist: false
+    riskClass: read
   - name: public-hostname
     publicAllowlist: false
     adminAllowlist: false
+    riskClass: read
   - name: admin-hostname
     publicAllowlist: false
     adminAllowlist: false
+    riskClass: read
   - name: publish-site
     publicAllowlist: false
     adminAllowlist: false
+    riskClass: write_local
   - name: brand-settings
     publicAllowlist: false
     adminAllowlist: false
+    riskClass: write_local
   - name: account-manage
     publicAllowlist: false
     adminAllowlist: false
+    riskClass: write_local
   - name: capabilities-here
     publicAllowlist: false
     adminAllowlist: false
+    riskClass: read
   - name: account-update
     publicAllowlist: false
     adminAllowlist: false
+    riskClass: write_local
   - name: account_list
     publicAllowlist: false
     adminAllowlist: true
+    riskClass: read
   - name: account_roster
     publicAllowlist: false
     adminAllowlist: true
+    riskClass: read
   - name: account_create
     publicAllowlist: false
     adminAllowlist: true
+    riskClass: write_local
   - name: account_reassign_admin
     publicAllowlist: false
     adminAllowlist: true
+    riskClass: write_local
   - name: account_set_owner_name
     publicAllowlist: false
     adminAllowlist: true
+    riskClass: write_local
   - name: account_delete
     publicAllowlist: false
     adminAllowlist: true
+    riskClass: write_local
   - name: account_purge
     publicAllowlist: false
     adminAllowlist: true
+    riskClass: write_local
   - name: account_channel_routing
     publicAllowlist: false
     adminAllowlist: true
+    riskClass: read
   - name: account_channel_routing_set
     publicAllowlist: false
     adminAllowlist: true
+    riskClass: write_local
   - name: admin-add
     publicAllowlist: false
     adminAllowlist: true
+    riskClass: write_local
   - name: admin-remove
     publicAllowlist: false
     adminAllowlist: true
+    riskClass: write_local
   - name: admin-list
     publicAllowlist: false
     adminAllowlist: true
+    riskClass: read
   - name: admin-update-pin
     publicAllowlist: false
     adminAllowlist: true
+    riskClass: write_local
   - name: agent-list
     publicAllowlist: false
     adminAllowlist: true
+    riskClass: read
   - name: agent-config-read
     publicAllowlist: false
     adminAllowlist: true
+    riskClass: read
   - name: logs-read
     publicAllowlist: false
     adminAllowlist: false
+    riskClass: read
   - name: cpu-triage-start
     publicAllowlist: false
     adminAllowlist: true
+    riskClass: exec
   - name: cpu-triage-read
     publicAllowlist: false
     adminAllowlist: true
+    riskClass: read
   - name: plugin-read
     publicAllowlist: false
     adminAllowlist: false
+    riskClass: read
   - name: skill-load
     publicAllowlist: false
     adminAllowlist: true
+    riskClass: read
   - name: skill-search
     publicAllowlist: false
     adminAllowlist: true
+    riskClass: read
   - name: store-skill
     publicAllowlist: false
     adminAllowlist: true
+    riskClass: write_local
   - name: session-reset
     publicAllowlist: false
     adminAllowlist: true
+    riskClass: write_local
   - name: session-resume
     publicAllowlist: false
     adminAllowlist: true
+    riskClass: write_local
   - name: action-pending
     publicAllowlist: false
     adminAllowlist: true
+    riskClass: read
   - name: action-approve
     publicAllowlist: false
     adminAllowlist: true
+    riskClass: external
   - name: action-reject
     publicAllowlist: false
     adminAllowlist: true
+    riskClass: write_local
   - name: action-edit
     publicAllowlist: false
     adminAllowlist: true
+    riskClass: write_local
 hidden:
-  - remote-auth-status
-  - remote-auth-set-password
-  - remote-auth-revoke-password
-  - qr-generate
-  - wifi
+  - name: remote-auth-status
+    riskClass: read
+  - name: remote-auth-set-password
+    riskClass: write_local
+  - name: remote-auth-revoke-password
+    riskClass: write_local
+  - name: qr-generate
+    riskClass: write_local
+  - name: wifi
+    riskClass: exec
 always: true
 embed: false
 mcp: