@synap-core/workspace-templates 0.2.1

package/src/dev-dashboard.yaml

@@ -0,0 +1,1309 @@
+# Dev Dashboard workspace template — Infrastructure Command Center
+# Internal DevOps inventory product. Union of:
+#   synap-backend/templates/packages/dev-dashboard.package.json (primary)
+#   synap-control-plane-api/templates/Synap Dev Dashboard.json   (cross-check, richer seed data)
+# Validated against types.ts at build time.
+# NOTE: distinct from builder.yaml (the DevPlane + agent layer). Both are kept.
+
+meta:
+  slug: dev-dashboard
+  name: "Synap Dev — Infrastructure Command Center"
+  description: "Internal DevOps dashboard for monitoring Synap infrastructure. Tracks services, vendors, and environments with health status, architecture flow map, and quick access to admin panels."
+  icon: server
+  color: "#3B82F6"
+  tags: [devops, infrastructure, monitoring, services, vendors, credentials]
+  isPublic: false
+
+workspace:
+  name: "Synap Dev — Infrastructure Command Center"
+  description: "Internal DevOps dashboard for monitoring Synap infrastructure. Tracks services, vendors, and environments with health status, architecture flow map, and quick access to admin panels."
+  proposalId: dev-dashboard-v1
+  subtype: infrastructure
+  workspaceType: operational
+
+profiles:
+  - slug: service
+    displayName: Service
+    icon: server
+    color: "#3B82F6"
+    description: "A Synap infrastructure service or application with monitoring, deployment, and connection details."
+    scope: WORKSPACE
+    properties:
+      - slug: service-type
+        label: Service Type
+        valueType: string
+        inputType: select
+        enumValues: [Frontend, Backend API, Worker, Bridge, Landing Page]
+      - slug: service-url
+        label: Service URL
+        valueType: string
+        placeholder: "https://..."
+        constraints:
+          format: url
+      - slug: github-url
+        label: GitHub URL
+        valueType: string
+        placeholder: "https://github.com/..."
+        constraints:
+          format: url
+      - slug: health-endpoint
+        label: Health Check URL
+        valueType: string
+        placeholder: "https://.../health"
+        constraints:
+          format: url
+      - slug: deploy-url
+        label: Deploy Dashboard URL
+        valueType: string
+        placeholder: "https://..."
+        constraints:
+          format: url
+      - slug: server-host
+        label: Server Host (SSH)
+        valueType: string
+        placeholder: "user@host"
+      - slug: admin-panel-url
+        label: Admin Panel URL
+        valueType: string
+        placeholder: "https://..."
+        constraints:
+          format: url
+      - slug: monitoring-url
+        label: Monitoring URL
+        valueType: string
+        placeholder: "https://..."
+        constraints:
+          format: url
+      - slug: docs-url
+        label: Documentation URL
+        valueType: string
+        placeholder: "https://..."
+        constraints:
+          format: url
+      - slug: health-status
+        label: Health Status
+        valueType: string
+        inputType: select
+        enumValues: [Healthy, Degraded, Down, Unknown]
+      - slug: tech-stack
+        label: Tech Stack
+        valueType: array
+      - slug: port
+        label: Port
+        valueType: number
+        placeholder: "3000"
+      - slug: environment
+        label: Environment
+        valueType: string
+        inputType: select
+        enumValues: [Production, Staging, Development]
+      - slug: deployment-branch
+        label: Deployment Branch
+        valueType: string
+        placeholder: "main"
+      - slug: last-deploy
+        label: Last Deploy
+        valueType: date
+      - slug: service-notes
+        label: Notes
+        valueType: string
+        inputType: textarea
+
+  - slug: vendor
+    displayName: Vendor
+    icon: package
+    color: "#8B5CF6"
+    description: "External services, tools, and providers used by the Synap platform."
+    scope: WORKSPACE
+    properties:
+      - slug: vendor-type
+        label: Vendor Type
+        valueType: string
+        inputType: select
+        enumValues: [Hosting, AI, Auth, Database, Monitoring, CI/CD, DNS, Email, Other]
+      - slug: vendor-url
+        label: Vendor URL
+        valueType: string
+        placeholder: "https://..."
+        constraints:
+          format: url
+      - slug: admin-url
+        label: Admin Console URL
+        valueType: string
+        placeholder: "https://..."
+        constraints:
+          format: url
+      - slug: docs-url
+        label: Documentation URL
+        valueType: string
+        placeholder: "https://..."
+        constraints:
+          format: url
+      - slug: status-page-url
+        label: Status Page URL
+        valueType: string
+        placeholder: "https://status.example.com"
+        constraints:
+          format: url
+      - slug: api-key-ref
+        label: API Key
+        valueType: string
+      - slug: pricing-model
+        label: Pricing Model
+        valueType: string
+        inputType: select
+        enumValues: [Free, Pay-as-you-go, Monthly, Annual]
+      - slug: monthly-cost
+        label: "Monthly Cost (€)"
+        valueType: number
+        placeholder: "0"
+      - slug: vendor-status
+        label: Status
+        valueType: string
+        inputType: select
+        enumValues: [Active, Trial, Deprecated]
+      - slug: vendor-notes
+        label: Notes
+        valueType: string
+        inputType: textarea
+
+  - slug: environment
+    displayName: Environment
+    icon: cloud
+    color: "#10B981"
+    description: "Deployment environments for Synap services (production, staging, dev)."
+    scope: WORKSPACE
+    properties:
+      - slug: env-type
+        label: Environment Type
+        valueType: string
+        inputType: select
+        enumValues: [Production, Staging, Development, Preview]
+      - slug: env-url
+        label: Base URL
+        valueType: string
+        placeholder: "https://..."
+        constraints:
+          format: url
+      - slug: branch
+        label: Deployed Branch
+        valueType: string
+        placeholder: "main"
+      - slug: last-deploy
+        label: Last Deploy
+        valueType: date
+      - slug: env-status
+        label: Status
+        valueType: string
+        inputType: select
+        enumValues: [Active, Maintenance, Down]
+      - slug: env-notes
+        label: Notes
+        valueType: string
+        inputType: textarea
+
+  - slug: repository
+    displayName: Repository
+    icon: git-branch
+    color: "#F97316"
+    description: "A Git repository with branch info, CI status, and contributor activity."
+    scope: WORKSPACE
+    properties:
+      - slug: repo-url
+        label: Repository URL
+        valueType: string
+        placeholder: "https://github.com/..."
+        constraints:
+          format: url
+      - slug: main-branch
+        label: Main Branch
+        valueType: string
+        placeholder: "main"
+      - slug: active-branches
+        label: Active Branches
+        valueType: array
+      - slug: ci-status
+        label: CI Status
+        valueType: string
+        inputType: select
+        enumValues: [Passing, Failing, Pending, Unknown]
+      - slug: ci-url
+        label: CI Dashboard URL
+        valueType: string
+        placeholder: "https://github.com/.../actions"
+        constraints:
+          format: url
+      - slug: last-commit
+        label: Last Commit
+        valueType: string
+      - slug: last-commit-date
+        label: Last Commit Date
+        valueType: date
+      - slug: language
+        label: Primary Language
+        valueType: string
+        inputType: select
+        enumValues: [TypeScript, JavaScript, Python, Rust, Go, Other]
+      - slug: package-manager
+        label: Package Manager
+        valueType: string
+        inputType: select
+        enumValues: [pnpm, npm, yarn, bun, cargo, pip]
+      - slug: monorepo
+        label: Monorepo
+        valueType: boolean
+      - slug: repo-notes
+        label: Notes
+        valueType: string
+        inputType: textarea
+
+  - slug: credential
+    displayName: Credential
+    icon: key
+    color: "#F59E0B"
+    description: "API keys, SSH keys, and secrets linked to vault items"
+    scope: WORKSPACE
+    properties:
+      - slug: credential-type
+        label: Type
+        valueType: string
+        inputType: select
+        enumValues: [api_key, ssh_key, password, token, certificate, env_variable, other]
+        placeholder: "Select credential type"
+      - slug: service-name
+        label: Service
+        valueType: string
+        inputType: text
+        placeholder: "e.g. Hetzner, Stripe, GitHub"
+      - slug: vault-ref
+        label: Vault Item Name
+        valueType: string
+        inputType: text
+        placeholder: "Name of the vault item storing this secret"
+      - slug: last-rotated
+        label: Last Rotated
+        valueType: date
+        inputType: date
+      - slug: expires-at
+        label: Expires At
+        valueType: date
+        inputType: date
+      - slug: environment
+        label: Environment
+        valueType: string
+        inputType: select
+        enumValues: [production, staging, development, all]
+        placeholder: "Environment"
+      - slug: notes
+        label: Notes
+        valueType: string
+        inputType: textarea
+        placeholder: "Permissions, rotation policy, who has access..."
+
+views:
+  - name: Infrastructure Map
+    type: flow
+    scopeProfileSlug: service
+    config:
+      nodes:
+        - id: browser
+          type: entity
+          position: { x: 0, y: 0 }
+          label: Browser
+          data: { entityIndex: 8 }
+        - id: control-plane
+          type: entity
+          position: { x: 0, y: 250 }
+          label: Control Plane
+          data: { entityIndex: 3 }
+        - id: synap-app
+          type: entity
+          position: { x: 400, y: 0 }
+          label: Synap App
+          data: { entityIndex: 0 }
+        - id: control-plane-api
+          type: entity
+          position: { x: 400, y: 250 }
+          label: Control Plane API
+          data: { entityIndex: 2 }
+        - id: synap-backend
+          type: entity
+          position: { x: 400, y: 500 }
+          label: Synap Backend
+          data: { entityIndex: 1 }
+        - id: intelligence-service
+          type: entity
+          position: { x: 800, y: 0 }
+          label: Intelligence Service
+          data: { entityIndex: 4 }
+        - id: zeroclaw-bridge
+          type: entity
+          position: { x: 800, y: 250 }
+          label: ZeroClaw Bridge
+          data: { entityIndex: 7 }
+        - id: life-feed
+          type: entity
+          position: { x: 800, y: 500 }
+          label: Life Feed
+          data: { entityIndex: 6 }
+        - id: landing-page
+          type: entity
+          position: { x: 400, y: 750 }
+          label: Landing Page
+          data: { entityIndex: 5 }
+      edges:
+        - id: e-browser-app
+          source: browser
+          target: synap-app
+          label: "embeds workspace"
+          animated: false
+        - id: e-cp-cpapi
+          source: control-plane
+          target: control-plane-api
+          label: "frontend → API"
+          animated: false
+        - id: e-app-backend
+          source: synap-app
+          target: synap-backend
+          label: "API calls"
+          animated: true
+        - id: e-app-intel
+          source: synap-app
+          target: intelligence-service
+          label: "AI features"
+          animated: true
+        - id: e-cpapi-backend
+          source: control-plane-api
+          target: synap-backend
+          label: "pod management"
+          animated: false
+        - id: e-backend-intel
+          source: synap-backend
+          target: intelligence-service
+          label: "agent orchestration"
+          animated: true
+        - id: e-backend-zeroclaw
+          source: synap-backend
+          target: zeroclaw-bridge
+          label: "security scanning"
+          animated: false
+        - id: e-zeroclaw-intel
+          source: zeroclaw-bridge
+          target: intelligence-service
+          label: "AI analysis"
+          animated: false
+        - id: e-app-lifefeed
+          source: synap-app
+          target: life-feed
+          label: "real-time events"
+          animated: false
+
+  - name: Service Health
+    type: kanban
+    scopeProfileSlug: service
+    config:
+      groupByField: health-status
+
+  - name: Architecture Graph
+    type: graph
+    scopeProfileSlugs: [service, vendor, repository]
+    config:
+      layout: force
+      showRelations: true
+
+  - name: Deploy Timeline
+    type: table
+    scopeProfileSlug: service
+    config:
+      visibleColumns: [service-type, environment, deployment-branch, last-deploy, health-status]
+      sortBy: last-deploy
+      sortDirection: desc
+
+  - name: Vendor Costs
+    type: table
+    scopeProfileSlug: vendor
+    config:
+      visibleColumns: [vendor-type, pricing-model, monthly-cost, vendor-status]
+      sortBy: monthly-cost
+      sortDirection: desc
+
+  - name: Services by Type
+    type: kanban
+    scopeProfileSlug: service
+    config:
+      groupByField: service-type
+
+  - name: All Services
+    type: table
+    scopeProfileSlug: service
+    config:
+      columns:
+        - { key: service-type }
+        - { key: environment }
+        - { key: health-status }
+        - { key: tech-stack }
+        - { key: service-url }
+      sort:
+        field: service-type
+        direction: asc
+
+  - name: Vendors
+    type: table
+    scopeProfileSlug: vendor
+    config:
+      columns:
+        - { key: vendor-type }
+        - { key: pricing-model }
+        - { key: monthly-cost }
+        - { key: vendor-status }
+        - { key: vendor-url }
+      sort:
+        field: monthly-cost
+        direction: desc
+
+  - name: Repositories
+    type: table
+    scopeProfileSlug: repository
+    config:
+      columns:
+        - { key: language }
+        - { key: package-manager }
+        - { key: monorepo }
+        - { key: ci-status }
+        - { key: main-branch }
+      sort:
+        field: language
+        direction: asc
+
+  - name: Services Dashboard
+    type: bento
+    config:
+      layout: fixed
+      blocks:
+        - id: platform-metrics
+          kind: widget
+          widgetType: dev-platform-metrics
+          pos: { x: 0, y: 0, w: 12, h: 3 }
+          config: {}
+        - id: intelligence-usage
+          kind: widget
+          widgetType: dev-intelligence-usage
+          pos: { x: 0, y: 3, w: 6, h: 4 }
+          config: {}
+        - id: service-health
+          kind: widget
+          widgetType: dev-service-health
+          pos: { x: 6, y: 3, w: 6, h: 4 }
+          config: {}
+        - id: agent-activity
+          kind: widget
+          widgetType: dev-agent-activity
+          pos: { x: 0, y: 7, w: 4, h: 5 }
+          config: {}
+        - id: pod-status
+          kind: widget
+          widgetType: dev-pod-status
+          pos: { x: 4, y: 7, w: 4, h: 5 }
+          config: {}
+        - id: quick-links
+          kind: widget
+          widgetType: dev-quick-links
+          pos: { x: 8, y: 7, w: 4, h: 5 }
+          config: {}
+        - id: cost-summary
+          kind: widget
+          widgetType: dev-cost-summary
+          pos: { x: 0, y: 12, w: 12, h: 3 }
+          config: {}
+
+  - name: Credentials
+    type: table
+    scopeProfileSlug: credential
+    config: {}
+
+entityLinks:
+  - sourceProfileSlug: service
+    targetProfileSlug: vendor
+    type: uses
+  - sourceProfileSlug: service
+    targetProfileSlug: environment
+    type: deployed_on
+  - sourceProfileSlug: service
+    targetProfileSlug: service
+    type: depends_on
+  - sourceProfileSlug: environment
+    targetProfileSlug: vendor
+    type: hosted_on
+  - sourceProfileSlug: repository
+    targetProfileSlug: service
+    type: powers
+  - sourceProfileSlug: repository
+    targetProfileSlug: repository
+    type: depends_on
+
+seedEntities:
+  - profileSlug: service
+    title: Synap App
+    properties:
+      service-type: Frontend
+      service-url: "https://app.synap.live"
+      github-url: "https://github.com/synapsh/synap-app"
+      health-status: Unknown
+      tech-stack: [Next.js, React, tRPC, Zustand, Ink]
+      port: 3000
+      environment: Production
+      service-notes: "Main workspace application. pnpm monorepo: core, features, views, apps. @synap/capabilities = single source of truth for widget/view types. Bento system via @synap/cell-runtime + @synap/cells."
+  - profileSlug: service
+    title: Synap Backend
+    properties:
+      service-type: Backend API
+      github-url: "https://github.com/synapsh/synap-backend"
+      health-status: Unknown
+      tech-stack: [Node.js, Hono, tRPC, Drizzle, PostgreSQL, Better Auth]
+      port: 4000
+      environment: Production
+      service-notes: "Data Pod backend — deployed per user pod at {name}.synap.live. Hono HTTP + tRPC + Better Auth. Hub Protocol (16 sub-routers)."
+  - profileSlug: service
+    title: Control Plane API
+    properties:
+      service-type: Backend API
+      service-url: "https://api.synap.live"
+      github-url: "https://github.com/synapsh/synap-control-plane-api"
+      health-endpoint: "https://api.synap.live/health"
+      health-status: Unknown
+      tech-stack: [Node.js, Hono, Better Auth, Drizzle, PostgreSQL, Stripe]
+      port: 4100
+      environment: Production
+      service-notes: "SaaS Control Plane. REST-only (Hono). Pod provisioning, Stripe subscriptions, Better Auth. CP↔Pod JWT handshake via ES256. Provision JWT carries tier + Resend config to pods."
+  - profileSlug: service
+    title: Control Plane
+    properties:
+      service-type: Frontend
+      service-url: "https://control.synap.live"
+      github-url: "https://github.com/synapsh/synap-control-plane"
+      health-status: Unknown
+      tech-stack: [Next.js, React]
+      port: 3100
+      environment: Production
+      service-notes: "Platform marketing + dashboard. Sign-up, pod management, billing (Stripe), add-on marketplace."
+  - profileSlug: service
+    title: Agent Hub
+    properties:
+      service-type: Backend API
+      service-url: "https://intelligence.synap.live"
+      github-url: "https://github.com/synapsh/synap-intelligence-service"
+      health-endpoint: "https://intelligence.synap.live/health"
+      health-status: Unknown
+      tech-stack: [Node.js, Hono, Mem0, OpenRouter, MCP]
+      port: 4200
+      environment: Production
+      service-notes: "AI/Agent Hub (synap-agent-hub). OrchestratorAgent (co-founder AI, 15 tools) + PersonaAgent (CTO/Marketing/Sales/PM). Session-scoped memory via compaction engine. MCP client — OpenClaw (browsing) + Firecrawl (scraping) via Docker. Hub Protocol client for all IS→backend operations."
+  - profileSlug: service
+    title: OpenClaw
+    properties:
+      service-type: Worker
+      github-url: "https://github.com/synapsh/openclaw"
+      health-status: Unknown
+      tech-stack: [Docker, MCP, Playwright]
+      port: 3000
+      service-notes: "Web browsing MCP tool. Docker-managed via workspace.settings.serviceCommands.openclaw. MCP stdio/HTTP transport. Used by Agent Hub for web research. Internal only."
+  - profileSlug: service
+    title: Firecrawl
+    properties:
+      service-type: Worker
+      service-url: "https://firecrawl.dev"
+      github-url: "https://github.com/mendableai/firecrawl"
+      health-status: Unknown
+      tech-stack: [Docker, MCP]
+      port: 3001
+      service-notes: "Web scraping MCP tool. Docker-managed via workspace.settings.serviceCommands.firecrawl. MCP stdio/HTTP transport. Used by Agent Hub for structured content extraction."
+  - profileSlug: service
+    title: Browser
+    properties:
+      service-type: Frontend
+      github-url: "https://github.com/synapsh/browser"
+      health-status: Unknown
+      tech-stack: [Electron, React, Zustand]
+      service-notes: "Desktop browser shell. Wraps Synap App with native OS integration, tab management, profile/workspace switching, embedded webviews."
+  - profileSlug: service
+    title: Langfuse Monitor
+    properties:
+      service-type: Monitoring
+      service-url: "https://ai-monitoring.synap.live"
+      github-url: "https://github.com/langfuse/langfuse"
+      health-endpoint: "https://ai-monitoring.synap.live/api/public/health"
+      health-status: Unknown
+      tech-stack: [Langfuse, Docker, PostgreSQL]
+      environment: Production
+      service-notes: "Self-hosted Langfuse AI observability. Traces all Agent Hub executions."
+  - profileSlug: service
+    title: MonoHub
+    properties:
+      service-type: Worker
+      github-url: "https://github.com/synapsh/synap"
+      health-status: Unknown
+      tech-stack: [Node.js, Ink, React, MCP]
+      port: 7433
+      service-notes: "Internal developer CLI (monohub/). Terminal dashboard: package health, circular dep detection, publish orchestration, capability scaffolding wizard, MCP server for Claude/Cursor. Web dashboard at http://localhost:7433."
+  - profileSlug: vendor
+    title: Hetzner
+    properties:
+      vendor-type: Hosting
+      vendor-url: "https://hetzner.com"
+      admin-url: "https://console.hetzner.cloud"
+      status-page-url: "https://status.hetzner.com"
+      pricing-model: Monthly
+      monthly-cost: 0
+      vendor-status: Active
+      vendor-notes: "Primary cloud hosting. Servers for Data Pods and Agent Hub."
+  - profileSlug: vendor
+    title: Stripe
+    properties:
+      vendor-type: Other
+      vendor-url: "https://stripe.com"
+      admin-url: "https://dashboard.stripe.com"
+      docs-url: "https://stripe.com/docs"
+      status-page-url: "https://status.stripe.com"
+      pricing-model: Pay-as-you-go
+      monthly-cost: 0
+      vendor-status: Active
+      vendor-notes: "Billing and subscription management. solo/pro/team/enterprise tiers + addon subscriptions. Webhooks consumed by Control Plane API."
+  - profileSlug: vendor
+    title: OpenRouter
+    properties:
+      vendor-type: AI
+      vendor-url: "https://openrouter.ai"
+      admin-url: "https://openrouter.ai/dashboard"
+      docs-url: "https://openrouter.ai/docs"
+      pricing-model: Pay-as-you-go
+      monthly-cost: 0
+      vendor-status: Active
+      vendor-notes: "LLM API gateway. Used by Agent Hub for all model calls (Claude, GPT-4, etc.)."
+  - profileSlug: vendor
+    title: Cloudflare
+    properties:
+      vendor-type: DNS
+      vendor-url: "https://cloudflare.com"
+      admin-url: "https://dash.cloudflare.com"
+      status-page-url: "https://www.cloudflarestatus.com"
+      pricing-model: Monthly
+      monthly-cost: 0
+      vendor-status: Active
+      vendor-notes: "DNS management and CDN for all Synap domains."
+  - profileSlug: vendor
+    title: Resend
+    properties:
+      vendor-type: Email
+      vendor-url: "https://resend.com"
+      admin-url: "https://resend.com/dashboard"
+      docs-url: "https://resend.com/docs"
+      pricing-model: Pay-as-you-go
+      monthly-cost: 0
+      vendor-status: Active
+      vendor-notes: "Transactional email. API key provisioned to each Data Pod via provision JWT."
+  - profileSlug: vendor
+    title: GitHub
+    properties:
+      vendor-type: CI/CD
+      vendor-url: "https://github.com"
+      admin-url: "https://github.com/synapsh"
+      pricing-model: Monthly
+      monthly-cost: 0
+      vendor-status: Active
+      vendor-notes: "Code hosting and CI/CD (GitHub Actions). All repos under github.com/synapsh."
+  - profileSlug: vendor
+    title: Namecheap
+    properties:
+      vendor-type: Domain Registrar
+      vendor-url: "https://namecheap.com"
+      admin-url: "https://ap.www.namecheap.com/dashboard"
+      pricing-model: Annual
+      monthly-cost: 0
+      vendor-status: Active
+      vendor-notes: "Domain registrar for synap.live. Alternative DNS provider alongside Cloudflare."
+  - profileSlug: vendor
+    title: Trigger.dev
+    properties:
+      vendor-type: Background Jobs
+      vendor-url: "https://trigger.dev"
+      admin-url: "https://cloud.trigger.dev"
+      pricing-model: Monthly
+      monthly-cost: 0
+      vendor-status: Active
+      vendor-notes: "Background job orchestration for CP: pod provisioning, rolling updates, health checks."
+  - profileSlug: environment
+    title: Production
+    properties:
+      env-type: Production
+      env-url: "https://app.synap.live"
+      branch: main
+      env-status: Active
+      env-notes: "Live production environment. All customer data. Requires deployment checklist before any release."
+  - profileSlug: environment
+    title: Staging
+    properties:
+      env-type: Staging
+      branch: staging
+      env-status: Active
+      env-notes: "Pre-production staging environment for QA and integration testing."
+  - profileSlug: environment
+    title: Development
+    properties:
+      env-type: Development
+      env-url: "http://localhost:3000"
+      branch: main
+      env-status: Active
+      env-notes: "Local development. Run: pnpm dev in synap-app, synap-backend, synap-intelligence-service, synap-control-plane-api."
+  - profileSlug: repository
+    title: synap-app
+    properties:
+      repo-url: "https://github.com/synapsh/synap-app"
+      main-branch: main
+      ci-status: Unknown
+      ci-url: "https://github.com/synapsh/synap-app/actions"
+      language: TypeScript
+      package-manager: pnpm
+      monorepo: true
+      repo-notes: "Frontend monorepo. packages/core (@synap/capabilities, @synap/cell-runtime, @synap/cells), packages/features (channels, sidebar, bento), packages/views, packages/apps (fluid, billing, agent-os)."
+  - profileSlug: repository
+    title: synap-backend
+    properties:
+      repo-url: "https://github.com/synapsh/synap-backend"
+      main-branch: main
+      ci-status: Unknown
+      ci-url: "https://github.com/synapsh/synap-backend/actions"
+      language: TypeScript
+      package-manager: pnpm
+      monorepo: true
+      repo-notes: "Data Pod backend monorepo. Hono + tRPC + Drizzle + Better Auth. Hub Protocol (16 sub-routers)."
+  - profileSlug: repository
+    title: synap-control-plane-api
+    properties:
+      repo-url: "https://github.com/synapsh/synap-control-plane-api"
+      main-branch: main
+      ci-status: Unknown
+      ci-url: "https://github.com/synapsh/synap-control-plane-api/actions"
+      language: TypeScript
+      package-manager: pnpm
+      monorepo: false
+      repo-notes: "SaaS Control Plane. Hono REST + Better Auth + Stripe. Also contains workspace template JSON files."
+  - profileSlug: repository
+    title: synap-intelligence-service
+    properties:
+      repo-url: "https://github.com/synapsh/synap-intelligence-service"
+      main-branch: main
+      ci-status: Unknown
+      ci-url: "https://github.com/synapsh/synap-intelligence-service/actions"
+      language: TypeScript
+      package-manager: pnpm
+      monorepo: true
+      repo-notes: "Agent Hub monorepo (synap-agent-hub). OrchestratorAgent, PersonaAgent, tool registry, Hub Protocol client, compaction engine."
+  - profileSlug: repository
+    title: browser
+    properties:
+      repo-url: "https://github.com/synapsh/browser"
+      main-branch: main
+      ci-status: Unknown
+      ci-url: "https://github.com/synapsh/browser/actions"
+      language: TypeScript
+      package-manager: pnpm
+      monorepo: false
+      repo-notes: "Electron desktop shell. Native OS integration for Synap App."
+  - profileSlug: repository
+    title: monohub
+    properties:
+      repo-url: "https://github.com/synapsh/synap"
+      main-branch: main
+      ci-status: Unknown
+      ci-url: "https://github.com/synapsh/synap/actions"
+      language: TypeScript
+      package-manager: pnpm
+      monorepo: false
+      repo-notes: "Developer tooling CLI (monohub/ at workspace root). Terminal dashboard, capability scaffolding, MCP server, publish orchestration. .github/workflows/monohub.yml for monorepo CI."
+  - profileSlug: credential
+    title: Hetzner API Token
+    properties:
+      credential-type: api_key
+      service-name: Hetzner
+      vault-ref: hetzner-api-token
+      environment: production
+      notes: "Zone DNS Edit + server/volume permissions. Used by CP for pod provisioning."
+  - profileSlug: credential
+    title: Cloudflare API Token
+    properties:
+      credential-type: api_key
+      service-name: Cloudflare
+      vault-ref: cloudflare-api-token
+      environment: production
+      notes: "Zone DNS Edit permission for synap.live. Used by CP for DNS record management."
+  - profileSlug: credential
+    title: Namecheap API Key
+    properties:
+      credential-type: api_key
+      service-name: Namecheap
+      vault-ref: namecheap-api-key
+      environment: production
+      notes: "Requires NAMECHEAP_CLIENT_IP whitelist. Fallback DNS provider."
+  - profileSlug: credential
+    title: Stripe Secret Key
+    properties:
+      credential-type: api_key
+      service-name: Stripe
+      vault-ref: stripe-secret-key
+      environment: production
+      notes: "sk_live_* key for CP billing. Never expose client-side."
+  - profileSlug: credential
+    title: Stripe Webhook Secret
+    properties:
+      credential-type: api_key
+      service-name: Stripe
+      vault-ref: stripe-webhook-secret
+      environment: production
+      notes: "whsec_* for verifying Stripe webhook payloads in CP."
+  - profileSlug: credential
+    title: OpenRouter API Key
+    properties:
+      credential-type: api_key
+      service-name: OpenRouter
+      vault-ref: openrouter-api-key
+      environment: production
+      notes: "sk-or-v1-* key. Required by Agent Hub. Covers all LLM models."
+  - profileSlug: credential
+    title: Resend API Key
+    properties:
+      credential-type: api_key
+      service-name: Resend
+      vault-ref: resend-api-key
+      environment: production
+      notes: "re_* key. Used by CP for transactional emails. Also provisioned to pods."
+  - profileSlug: credential
+    title: GitHub Actions Token
+    properties:
+      credential-type: token
+      service-name: GitHub
+      vault-ref: github-actions-token
+      environment: production
+      notes: "PAT for CI/CD — ghcr.io image push, workflow triggers."
+  - profileSlug: credential
+    title: CP EC Private Key
+    properties:
+      credential-type: certificate
+      service-name: Control Plane API
+      vault-ref: cp-ec-private-key
+      environment: production
+      notes: "ES256 PKCS#8 private key. Signs provision JWTs. Pods verify via /well-known/jwks.json."
+  - profileSlug: credential
+    title: Hetzner SSH Key
+    properties:
+      credential-type: ssh_key
+      service-name: Hetzner
+      vault-ref: hetzner-ssh-key
+      environment: production
+      notes: "SSH key pair for pod server access via Hetzner."
+
+suggestedRelations:
+  - { sourceRef: "service:Synap App", targetRef: "service:Synap Backend", type: depends_on }
+  - { sourceRef: "service:Synap App", targetRef: "service:Agent Hub", type: depends_on }
+  - { sourceRef: "service:Browser", targetRef: "service:Synap App", type: depends_on }
+  - { sourceRef: "service:Control Plane", targetRef: "service:Control Plane API", type: depends_on }
+  - { sourceRef: "service:Control Plane API", targetRef: "service:Synap Backend", type: depends_on }
+  - { sourceRef: "service:Synap Backend", targetRef: "service:Agent Hub", type: depends_on }
+  - { sourceRef: "service:Agent Hub", targetRef: "service:OpenClaw", type: depends_on }
+  - { sourceRef: "service:Agent Hub", targetRef: "service:Firecrawl", type: depends_on }
+  - { sourceRef: "service:Agent Hub", targetRef: "vendor:OpenRouter", type: uses }
+  - { sourceRef: "service:Control Plane API", targetRef: "vendor:Stripe", type: uses }
+  - { sourceRef: "service:Synap Backend", targetRef: "vendor:Hetzner", type: deployed_on }
+  - { sourceRef: "service:Agent Hub", targetRef: "vendor:Hetzner", type: deployed_on }
+  - { sourceRef: "service:Control Plane API", targetRef: "vendor:Resend", type: uses }
+  - { sourceRef: "service:Synap App", targetRef: "vendor:Vercel", type: deployed_on }
+  - { sourceRef: "service:Control Plane", targetRef: "vendor:Vercel", type: deployed_on }
+  - { sourceRef: "repository:synap-app", targetRef: "service:Synap App", type: powers }
+  - { sourceRef: "repository:synap-backend", targetRef: "service:Synap Backend", type: powers }
+  - { sourceRef: "repository:synap-control-plane-api", targetRef: "service:Control Plane API", type: powers }
+  - { sourceRef: "repository:synap-intelligence-service", targetRef: "service:Agent Hub", type: powers }
+  - { sourceRef: "repository:browser", targetRef: "service:Browser", type: powers }
+  - { sourceRef: "repository:monohub", targetRef: "service:MonoHub", type: powers }
+  - { sourceRef: "Hetzner", targetRef: "Hetzner API Token", type: references }
+  - { sourceRef: "Hetzner", targetRef: "Hetzner SSH Key", type: references }
+  - { sourceRef: "Cloudflare", targetRef: "Cloudflare API Token", type: references }
+  - { sourceRef: "Namecheap", targetRef: "Namecheap API Key", type: references }
+  - { sourceRef: "Stripe", targetRef: "Stripe Secret Key", type: references }
+  - { sourceRef: "Stripe", targetRef: "Stripe Webhook Secret", type: references }
+  - { sourceRef: "OpenRouter", targetRef: "OpenRouter API Key", type: references }
+  - { sourceRef: "Resend", targetRef: "Resend API Key", type: references }
+  - { sourceRef: "GitHub", targetRef: "GitHub Actions Token", type: references }
+  - { sourceRef: "Control Plane API", targetRef: "CP EC Private Key", type: references }
+
+displayTemplates:
+  - name: Service Card
+    description: "Infrastructure service with health status, stack, and links"
+    entityType: service
+    targetType: entity
+    isDefault: true
+    config:
+      layout:
+        structure:
+          header:
+            enabled: true
+            slots: [health-status, service-type]
+            layout: horizontal
+          sidebar:
+            enabled: true
+            slots: [environment, port, deployment-branch, last-deploy]
+            position: right
+            width: "260px"
+            layout: vertical
+          content:
+            enabled: true
+            slots: [tech-stack, service-url, github-url, health-endpoint]
+            layout: vertical
+        fieldMapping:
+          health-status:
+            slot: health-status
+            renderer: { type: badge, size: md }
+            showLabel: false
+            order: 1
+          service-type:
+            slot: service-type
+            renderer: { type: badge, size: sm }
+            showLabel: false
+            order: 2
+          environment:
+            slot: environment
+            renderer: { type: badge, size: sm }
+            label: Environment
+            order: 3
+          port:
+            slot: port
+            renderer: { type: number }
+            label: Port
+            order: 4
+          deployment-branch:
+            slot: deployment-branch
+            renderer: { type: text }
+            label: Branch
+            order: 5
+          last-deploy:
+            slot: last-deploy
+            renderer: { type: date, format: relative }
+            label: Last Deploy
+            order: 6
+          tech-stack:
+            slot: tech-stack
+            renderer: { type: badge }
+            label: Tech Stack
+            order: 7
+          service-url:
+            slot: service-url
+            renderer: { type: link }
+            label: Service URL
+            order: 8
+          github-url:
+            slot: github-url
+            renderer: { type: link }
+            label: GitHub
+            order: 9
+          health-endpoint:
+            slot: health-endpoint
+            renderer: { type: link }
+            label: Health Check
+            order: 10
+      colors:
+        accent: "#3B82F6"
+      styling:
+        borderRadius: "10px"
+
+  - name: Vendor Card
+    description: "External vendor with pricing, status, and admin links"
+    entityType: vendor
+    targetType: entity
+    isDefault: true
+    config:
+      layout:
+        structure:
+          header:
+            enabled: true
+            slots: [vendor-status, vendor-type]
+            layout: horizontal
+          sidebar:
+            enabled: true
+            slots: [pricing-model, monthly-cost]
+            position: right
+            width: "240px"
+            layout: vertical
+          content:
+            enabled: true
+            slots: [vendor-url, admin-url, docs-url, status-page-url]
+            layout: vertical
+        fieldMapping:
+          vendor-status:
+            slot: vendor-status
+            renderer: { type: badge, size: md }
+            showLabel: false
+            order: 1
+          vendor-type:
+            slot: vendor-type
+            renderer: { type: badge, size: sm }
+            showLabel: false
+            order: 2
+          pricing-model:
+            slot: pricing-model
+            renderer: { type: badge, size: sm }
+            label: Pricing
+            order: 3
+          monthly-cost:
+            slot: monthly-cost
+            renderer: { type: number, format: currency }
+            label: Monthly Cost
+            order: 4
+          vendor-url:
+            slot: vendor-url
+            renderer: { type: link }
+            label: Website
+            order: 5
+          admin-url:
+            slot: admin-url
+            renderer: { type: link }
+            label: Admin Console
+            order: 6
+          docs-url:
+            slot: docs-url
+            renderer: { type: link }
+            label: Documentation
+            order: 7
+          status-page-url:
+            slot: status-page-url
+            renderer: { type: link }
+            label: Status Page
+            order: 8
+      colors:
+        accent: "#8B5CF6"
+      styling:
+        borderRadius: "10px"
+
+  - name: Environment Card
+    description: "Deployment environment with status and branch info"
+    entityType: environment
+    targetType: entity
+    isDefault: true
+    config:
+      layout:
+        structure:
+          header:
+            enabled: true
+            slots: [env-status, env-type]
+            layout: horizontal
+          sidebar:
+            enabled: true
+            slots: [branch, last-deploy]
+            position: right
+            width: "240px"
+            layout: vertical
+          content:
+            enabled: true
+            slots: [env-url]
+            layout: vertical
+        fieldMapping:
+          env-status:
+            slot: env-status
+            renderer: { type: badge, size: md }
+            showLabel: false
+            order: 1
+          env-type:
+            slot: env-type
+            renderer: { type: badge, size: sm }
+            showLabel: false
+            order: 2
+          branch:
+            slot: branch
+            renderer: { type: text }
+            label: Branch
+            order: 3
+          last-deploy:
+            slot: last-deploy
+            renderer: { type: date, format: relative }
+            label: Last Deploy
+            order: 4
+          env-url:
+            slot: env-url
+            renderer: { type: link }
+            label: URL
+            order: 5
+      colors:
+        accent: "#10B981"
+      styling:
+        borderRadius: "10px"
+
+  - name: Repository Card
+    description: "Git repository with CI status and branch info"
+    entityType: repository
+    targetType: entity
+    isDefault: true
+    config:
+      layout:
+        structure:
+          header:
+            enabled: true
+            slots: [ci-status, language]
+            layout: horizontal
+          sidebar:
+            enabled: true
+            slots: [main-branch, package-manager, monorepo]
+            position: right
+            width: "240px"
+            layout: vertical
+          content:
+            enabled: true
+            slots: [repo-url, ci-url]
+            layout: vertical
+        fieldMapping:
+          ci-status:
+            slot: ci-status
+            renderer: { type: badge, size: md }
+            showLabel: false
+            order: 1
+          language:
+            slot: language
+            renderer: { type: badge, size: sm }
+            showLabel: false
+            order: 2
+          main-branch:
+            slot: main-branch
+            renderer: { type: text }
+            label: Main Branch
+            order: 3
+          package-manager:
+            slot: package-manager
+            renderer: { type: badge, size: sm }
+            label: Package Manager
+            order: 4
+          monorepo:
+            slot: monorepo
+            renderer: { type: checkbox }
+            label: Monorepo
+            order: 5
+          repo-url:
+            slot: repo-url
+            renderer: { type: link }
+            label: Repository
+            order: 6
+          ci-url:
+            slot: ci-url
+            renderer: { type: link }
+            label: CI Dashboard
+            order: 7
+      colors:
+        accent: "#F97316"
+      styling:
+        borderRadius: "10px"
+
+# Top-level workspace dashboard (from bentoLayout + bentoViewBlocks union)
+bento:
+  blocks:
+    - kind: widget
+      widgetType: welcome-header
+      pos: { x: 0, y: 0, w: 12, h: 2 }
+      config: {}
+    - kind: widget
+      widgetType: entity-count
+      pos: { x: 0, y: 2, w: 3, h: 2 }
+      config:
+        profileSlug: service
+        label: Services
+    - kind: widget
+      widgetType: entity-count
+      pos: { x: 3, y: 2, w: 3, h: 2 }
+      config:
+        profileSlug: vendor
+        label: Vendors
+    - kind: widget
+      widgetType: entity-count
+      pos: { x: 6, y: 2, w: 3, h: 2 }
+      config:
+        profileSlug: service
+        label: Healthy
+        filter:
+          health-status: Healthy
+    - kind: widget
+      widgetType: entity-count
+      pos: { x: 9, y: 2, w: 3, h: 2 }
+      config:
+        profileSlug: environment
+        label: Environments
+    - kind: widget
+      widgetType: dev-service-health
+      pos: { x: 0, y: 4, w: 3, h: 3 }
+      config: {}
+    - kind: widget
+      widgetType: dev-cost-summary
+      pos: { x: 3, y: 4, w: 3, h: 3 }
+      config: {}
+    - kind: widget
+      widgetType: dev-quick-links
+      pos: { x: 6, y: 4, w: 6, h: 3 }
+      config:
+        title: Quick Links
+        links:
+          - { label: GitHub, url: "https://github.com/synapsh", color: "#24292E" }
+          - { label: Hetzner Console, url: "https://console.hetzner.cloud", color: "#D50C2D" }
+          - { label: Vercel Dashboard, url: "https://vercel.com/dashboard", color: "#000000" }
+          - { label: Ory Console, url: "https://console.ory.sh", color: "#5528FF" }
+          - { label: Cloudflare, url: "https://dash.cloudflare.com", color: "#F38020" }
+          - { label: OpenRouter, url: "https://openrouter.ai/dashboard", color: "#6366F1" }
+    - kind: widget
+      widgetType: entity-list
+      pos: { x: 0, y: 7, w: 6, h: 5 }
+      config:
+        profileSlug: service
+        title: All Services
+        limit: 10
+    - kind: widget
+      widgetType: entity-list
+      pos: { x: 6, y: 7, w: 3, h: 5 }
+      config:
+        profileSlug: vendor
+        title: Vendors
+        limit: 8
+    - kind: widget
+      widgetType: feed
+      pos: { x: 9, y: 7, w: 3, h: 5 }
+      config: {}
+    - kind: view
+      viewName: Deploy Timeline
+      pos: { x: 0, y: 12, w: 12, h: 4 }
+    - kind: view
+      viewName: Vendor Costs
+      pos: { x: 0, y: 16, w: 6, h: 4 }
+    - kind: view
+      viewName: Service Health
+      pos: { x: 6, y: 16, w: 6, h: 4 }
+
+onboarding:
+  goal: "Capture the user's infrastructure surface — the services they run, the repositories behind them, their environments, the vendors they depend on, and their credentials inventory — so the command center reflects their real stack."
+  framing: "Act as a staff platform engineer doing an infra walkthrough. Tease out what's running in production, where the code lives, how environments are laid out, which third parties they depend on, and what secrets need tracking. Translate that into services, repositories, environments, vendors, and credentials."
+  collect:
+    - profileSlug: service
+      what: "The services / apps they run and their stack"
+      cardinality: several
+      keyFields: [title, service-type, service-url, tech-stack]
+    - profileSlug: repository
+      what: "The repositories behind those services"
+      cardinality: several
+      keyFields: [title, repo-url, main-branch, language]
+    - profileSlug: environment
+      what: "Their deployment environments (prod, staging, etc.)"
+      cardinality: few
+      keyFields: [title, env-type, env-url, branch]
+    - profileSlug: vendor
+      what: "The third-party vendors / SaaS they depend on and their cost"
+      cardinality: several
+      keyFields: [title, vendor-type, monthly-cost, vendor-url]
+    - profileSlug: credential
+      what: "The credentials / secrets that need tracking and rotation"
+      cardinality: few
+      keyFields: [title, credential-type, service-name, expires-at]
+  openingQuestions:
+    - "What services are running in production right now, and what's each built on?"
+    - "Where does the code live, and how are your environments laid out?"
+    - "Which vendors do you depend on, and what credentials need tracking?"
+  doneWhen: "Their running services and repositories exist, environments are mapped, key vendors are captured with cost, and the credentials inventory is started."