@synap-core/workspace-templates 0.2.2 → 0.4.0

package/src/dev-dashboard.yaml

@@ -541,399 +541,6 @@ entityLinks:
     targetProfileSlug: repository
     type: depends_on
 
-seedEntities:
-  - profileSlug: service
-    title: Synap App
-    properties:
-      service-type: Frontend
-      service-url: "https://app.synap.live"
-      github-url: "https://github.com/synapsh/synap-app"
-      health-status: Unknown
-      tech-stack: [Next.js, React, tRPC, Zustand, Ink]
-      port: 3000
-      environment: Production
-      service-notes: "Main workspace application. pnpm monorepo: core, features, views, apps. @synap/capabilities = single source of truth for widget/view types. Bento system via @synap/cell-runtime + @synap/cells."
-  - profileSlug: service
-    title: Synap Backend
-    properties:
-      service-type: Backend API
-      github-url: "https://github.com/synapsh/synap-backend"
-      health-status: Unknown
-      tech-stack: [Node.js, Hono, tRPC, Drizzle, PostgreSQL, Better Auth]
-      port: 4000
-      environment: Production
-      service-notes: "Data Pod backend — deployed per user pod at {name}.synap.live. Hono HTTP + tRPC + Better Auth. Hub Protocol (16 sub-routers)."
-  - profileSlug: service
-    title: Control Plane API
-    properties:
-      service-type: Backend API
-      service-url: "https://api.synap.live"
-      github-url: "https://github.com/synapsh/synap-control-plane-api"
-      health-endpoint: "https://api.synap.live/health"
-      health-status: Unknown
-      tech-stack: [Node.js, Hono, Better Auth, Drizzle, PostgreSQL, Stripe]
-      port: 4100
-      environment: Production
-      service-notes: "SaaS Control Plane. REST-only (Hono). Pod provisioning, Stripe subscriptions, Better Auth. CP↔Pod JWT handshake via ES256. Provision JWT carries tier + Resend config to pods."
-  - profileSlug: service
-    title: Control Plane
-    properties:
-      service-type: Frontend
-      service-url: "https://control.synap.live"
-      github-url: "https://github.com/synapsh/synap-control-plane"
-      health-status: Unknown
-      tech-stack: [Next.js, React]
-      port: 3100
-      environment: Production
-      service-notes: "Platform marketing + dashboard. Sign-up, pod management, billing (Stripe), add-on marketplace."
-  - profileSlug: service
-    title: Agent Hub
-    properties:
-      service-type: Backend API
-      service-url: "https://intelligence.synap.live"
-      github-url: "https://github.com/synapsh/synap-intelligence-service"
-      health-endpoint: "https://intelligence.synap.live/health"
-      health-status: Unknown
-      tech-stack: [Node.js, Hono, Mem0, OpenRouter, MCP]
-      port: 4200
-      environment: Production
-      service-notes: "AI/Agent Hub (synap-agent-hub). OrchestratorAgent (co-founder AI, 15 tools) + PersonaAgent (CTO/Marketing/Sales/PM). Session-scoped memory via compaction engine. MCP client — OpenClaw (browsing) + Firecrawl (scraping) via Docker. Hub Protocol client for all IS→backend operations."
-  - profileSlug: service
-    title: OpenClaw
-    properties:
-      service-type: Worker
-      github-url: "https://github.com/synapsh/openclaw"
-      health-status: Unknown
-      tech-stack: [Docker, MCP, Playwright]
-      port: 3000
-      service-notes: "Web browsing MCP tool. Docker-managed via workspace.settings.serviceCommands.openclaw. MCP stdio/HTTP transport. Used by Agent Hub for web research. Internal only."
-  - profileSlug: service
-    title: Firecrawl
-    properties:
-      service-type: Worker
-      service-url: "https://firecrawl.dev"
-      github-url: "https://github.com/mendableai/firecrawl"
-      health-status: Unknown
-      tech-stack: [Docker, MCP]
-      port: 3001
-      service-notes: "Web scraping MCP tool. Docker-managed via workspace.settings.serviceCommands.firecrawl. MCP stdio/HTTP transport. Used by Agent Hub for structured content extraction."
-  - profileSlug: service
-    title: Browser
-    properties:
-      service-type: Frontend
-      github-url: "https://github.com/synapsh/browser"
-      health-status: Unknown
-      tech-stack: [Electron, React, Zustand]
-      service-notes: "Desktop browser shell. Wraps Synap App with native OS integration, tab management, profile/workspace switching, embedded webviews."
-  - profileSlug: service
-    title: Langfuse Monitor
-    properties:
-      service-type: Monitoring
-      service-url: "https://ai-monitoring.synap.live"
-      github-url: "https://github.com/langfuse/langfuse"
-      health-endpoint: "https://ai-monitoring.synap.live/api/public/health"
-      health-status: Unknown
-      tech-stack: [Langfuse, Docker, PostgreSQL]
-      environment: Production
-      service-notes: "Self-hosted Langfuse AI observability. Traces all Agent Hub executions."
-  - profileSlug: service
-    title: MonoHub
-    properties:
-      service-type: Worker
-      github-url: "https://github.com/synapsh/synap"
-      health-status: Unknown
-      tech-stack: [Node.js, Ink, React, MCP]
-      port: 7433
-      service-notes: "Internal developer CLI (monohub/). Terminal dashboard: package health, circular dep detection, publish orchestration, capability scaffolding wizard, MCP server for Claude/Cursor. Web dashboard at http://localhost:7433."
-  - profileSlug: vendor
-    title: Hetzner
-    properties:
-      vendor-type: Hosting
-      vendor-url: "https://hetzner.com"
-      admin-url: "https://console.hetzner.cloud"
-      status-page-url: "https://status.hetzner.com"
-      pricing-model: Monthly
-      monthly-cost: 0
-      vendor-status: Active
-      vendor-notes: "Primary cloud hosting. Servers for Data Pods and Agent Hub."
-  - profileSlug: vendor
-    title: Stripe
-    properties:
-      vendor-type: Other
-      vendor-url: "https://stripe.com"
-      admin-url: "https://dashboard.stripe.com"
-      docs-url: "https://stripe.com/docs"
-      status-page-url: "https://status.stripe.com"
-      pricing-model: Pay-as-you-go
-      monthly-cost: 0
-      vendor-status: Active
-      vendor-notes: "Billing and subscription management. solo/pro/team/enterprise tiers + addon subscriptions. Webhooks consumed by Control Plane API."
-  - profileSlug: vendor
-    title: OpenRouter
-    properties:
-      vendor-type: AI
-      vendor-url: "https://openrouter.ai"
-      admin-url: "https://openrouter.ai/dashboard"
-      docs-url: "https://openrouter.ai/docs"
-      pricing-model: Pay-as-you-go
-      monthly-cost: 0
-      vendor-status: Active
-      vendor-notes: "LLM API gateway. Used by Agent Hub for all model calls (Claude, GPT-4, etc.)."
-  - profileSlug: vendor
-    title: Cloudflare
-    properties:
-      vendor-type: DNS
-      vendor-url: "https://cloudflare.com"
-      admin-url: "https://dash.cloudflare.com"
-      status-page-url: "https://www.cloudflarestatus.com"
-      pricing-model: Monthly
-      monthly-cost: 0
-      vendor-status: Active
-      vendor-notes: "DNS management and CDN for all Synap domains."
-  - profileSlug: vendor
-    title: Resend
-    properties:
-      vendor-type: Email
-      vendor-url: "https://resend.com"
-      admin-url: "https://resend.com/dashboard"
-      docs-url: "https://resend.com/docs"
-      pricing-model: Pay-as-you-go
-      monthly-cost: 0
-      vendor-status: Active
-      vendor-notes: "Transactional email. API key provisioned to each Data Pod via provision JWT."
-  - profileSlug: vendor
-    title: GitHub
-    properties:
-      vendor-type: CI/CD
-      vendor-url: "https://github.com"
-      admin-url: "https://github.com/synapsh"
-      pricing-model: Monthly
-      monthly-cost: 0
-      vendor-status: Active
-      vendor-notes: "Code hosting and CI/CD (GitHub Actions). All repos under github.com/synapsh."
-  - profileSlug: vendor
-    title: Namecheap
-    properties:
-      vendor-type: Domain Registrar
-      vendor-url: "https://namecheap.com"
-      admin-url: "https://ap.www.namecheap.com/dashboard"
-      pricing-model: Annual
-      monthly-cost: 0
-      vendor-status: Active
-      vendor-notes: "Domain registrar for synap.live. Alternative DNS provider alongside Cloudflare."
-  - profileSlug: vendor
-    title: Trigger.dev
-    properties:
-      vendor-type: Background Jobs
-      vendor-url: "https://trigger.dev"
-      admin-url: "https://cloud.trigger.dev"
-      pricing-model: Monthly
-      monthly-cost: 0
-      vendor-status: Active
-      vendor-notes: "Background job orchestration for CP: pod provisioning, rolling updates, health checks."
-  - profileSlug: environment
-    title: Production
-    properties:
-      env-type: Production
-      env-url: "https://app.synap.live"
-      branch: main
-      env-status: Active
-      env-notes: "Live production environment. All customer data. Requires deployment checklist before any release."
-  - profileSlug: environment
-    title: Staging
-    properties:
-      env-type: Staging
-      branch: staging
-      env-status: Active
-      env-notes: "Pre-production staging environment for QA and integration testing."
-  - profileSlug: environment
-    title: Development
-    properties:
-      env-type: Development
-      env-url: "http://localhost:3000"
-      branch: main
-      env-status: Active
-      env-notes: "Local development. Run: pnpm dev in synap-app, synap-backend, synap-intelligence-service, synap-control-plane-api."
-  - profileSlug: repository
-    title: synap-app
-    properties:
-      repo-url: "https://github.com/synapsh/synap-app"
-      main-branch: main
-      ci-status: Unknown
-      ci-url: "https://github.com/synapsh/synap-app/actions"
-      language: TypeScript
-      package-manager: pnpm
-      monorepo: true
-      repo-notes: "Frontend monorepo. packages/core (@synap/capabilities, @synap/cell-runtime, @synap/cells), packages/features (channels, sidebar, bento), packages/views, packages/apps (fluid, billing, agent-os)."
-  - profileSlug: repository
-    title: synap-backend
-    properties:
-      repo-url: "https://github.com/synapsh/synap-backend"
-      main-branch: main
-      ci-status: Unknown
-      ci-url: "https://github.com/synapsh/synap-backend/actions"
-      language: TypeScript
-      package-manager: pnpm
-      monorepo: true
-      repo-notes: "Data Pod backend monorepo. Hono + tRPC + Drizzle + Better Auth. Hub Protocol (16 sub-routers)."
-  - profileSlug: repository
-    title: synap-control-plane-api
-    properties:
-      repo-url: "https://github.com/synapsh/synap-control-plane-api"
-      main-branch: main
-      ci-status: Unknown
-      ci-url: "https://github.com/synapsh/synap-control-plane-api/actions"
-      language: TypeScript
-      package-manager: pnpm
-      monorepo: false
-      repo-notes: "SaaS Control Plane. Hono REST + Better Auth + Stripe. Also contains workspace template JSON files."
-  - profileSlug: repository
-    title: synap-intelligence-service
-    properties:
-      repo-url: "https://github.com/synapsh/synap-intelligence-service"
-      main-branch: main
-      ci-status: Unknown
-      ci-url: "https://github.com/synapsh/synap-intelligence-service/actions"
-      language: TypeScript
-      package-manager: pnpm
-      monorepo: true
-      repo-notes: "Agent Hub monorepo (synap-agent-hub). OrchestratorAgent, PersonaAgent, tool registry, Hub Protocol client, compaction engine."
-  - profileSlug: repository
-    title: browser
-    properties:
-      repo-url: "https://github.com/synapsh/browser"
-      main-branch: main
-      ci-status: Unknown
-      ci-url: "https://github.com/synapsh/browser/actions"
-      language: TypeScript
-      package-manager: pnpm
-      monorepo: false
-      repo-notes: "Electron desktop shell. Native OS integration for Synap App."
-  - profileSlug: repository
-    title: monohub
-    properties:
-      repo-url: "https://github.com/synapsh/synap"
-      main-branch: main
-      ci-status: Unknown
-      ci-url: "https://github.com/synapsh/synap/actions"
-      language: TypeScript
-      package-manager: pnpm
-      monorepo: false
-      repo-notes: "Developer tooling CLI (monohub/ at workspace root). Terminal dashboard, capability scaffolding, MCP server, publish orchestration. .github/workflows/monohub.yml for monorepo CI."
-  - profileSlug: credential
-    title: Hetzner API Token
-    properties:
-      credential-type: api_key
-      service-name: Hetzner
-      vault-ref: hetzner-api-token
-      environment: production
-      notes: "Zone DNS Edit + server/volume permissions. Used by CP for pod provisioning."
-  - profileSlug: credential
-    title: Cloudflare API Token
-    properties:
-      credential-type: api_key
-      service-name: Cloudflare
-      vault-ref: cloudflare-api-token
-      environment: production
-      notes: "Zone DNS Edit permission for synap.live. Used by CP for DNS record management."
-  - profileSlug: credential
-    title: Namecheap API Key
-    properties:
-      credential-type: api_key
-      service-name: Namecheap
-      vault-ref: namecheap-api-key
-      environment: production
-      notes: "Requires NAMECHEAP_CLIENT_IP whitelist. Fallback DNS provider."
-  - profileSlug: credential
-    title: Stripe Secret Key
-    properties:
-      credential-type: api_key
-      service-name: Stripe
-      vault-ref: stripe-secret-key
-      environment: production
-      notes: "sk_live_* key for CP billing. Never expose client-side."
-  - profileSlug: credential
-    title: Stripe Webhook Secret
-    properties:
-      credential-type: api_key
-      service-name: Stripe
-      vault-ref: stripe-webhook-secret
-      environment: production
-      notes: "whsec_* for verifying Stripe webhook payloads in CP."
-  - profileSlug: credential
-    title: OpenRouter API Key
-    properties:
-      credential-type: api_key
-      service-name: OpenRouter
-      vault-ref: openrouter-api-key
-      environment: production
-      notes: "sk-or-v1-* key. Required by Agent Hub. Covers all LLM models."
-  - profileSlug: credential
-    title: Resend API Key
-    properties:
-      credential-type: api_key
-      service-name: Resend
-      vault-ref: resend-api-key
-      environment: production
-      notes: "re_* key. Used by CP for transactional emails. Also provisioned to pods."
-  - profileSlug: credential
-    title: GitHub Actions Token
-    properties:
-      credential-type: token
-      service-name: GitHub
-      vault-ref: github-actions-token
-      environment: production
-      notes: "PAT for CI/CD — ghcr.io image push, workflow triggers."
-  - profileSlug: credential
-    title: CP EC Private Key
-    properties:
-      credential-type: certificate
-      service-name: Control Plane API
-      vault-ref: cp-ec-private-key
-      environment: production
-      notes: "ES256 PKCS#8 private key. Signs provision JWTs. Pods verify via /well-known/jwks.json."
-  - profileSlug: credential
-    title: Hetzner SSH Key
-    properties:
-      credential-type: ssh_key
-      service-name: Hetzner
-      vault-ref: hetzner-ssh-key
-      environment: production
-      notes: "SSH key pair for pod server access via Hetzner."
-
-suggestedRelations:
-  - { sourceRef: "service:Synap App", targetRef: "service:Synap Backend", type: depends_on }
-  - { sourceRef: "service:Synap App", targetRef: "service:Agent Hub", type: depends_on }
-  - { sourceRef: "service:Browser", targetRef: "service:Synap App", type: depends_on }
-  - { sourceRef: "service:Control Plane", targetRef: "service:Control Plane API", type: depends_on }
-  - { sourceRef: "service:Control Plane API", targetRef: "service:Synap Backend", type: depends_on }
-  - { sourceRef: "service:Synap Backend", targetRef: "service:Agent Hub", type: depends_on }
-  - { sourceRef: "service:Agent Hub", targetRef: "service:OpenClaw", type: depends_on }
-  - { sourceRef: "service:Agent Hub", targetRef: "service:Firecrawl", type: depends_on }
-  - { sourceRef: "service:Agent Hub", targetRef: "vendor:OpenRouter", type: uses }
-  - { sourceRef: "service:Control Plane API", targetRef: "vendor:Stripe", type: uses }
-  - { sourceRef: "service:Synap Backend", targetRef: "vendor:Hetzner", type: deployed_on }
-  - { sourceRef: "service:Agent Hub", targetRef: "vendor:Hetzner", type: deployed_on }
-  - { sourceRef: "service:Control Plane API", targetRef: "vendor:Resend", type: uses }
-  - { sourceRef: "service:Synap App", targetRef: "vendor:Vercel", type: deployed_on }
-  - { sourceRef: "service:Control Plane", targetRef: "vendor:Vercel", type: deployed_on }
-  - { sourceRef: "repository:synap-app", targetRef: "service:Synap App", type: powers }
-  - { sourceRef: "repository:synap-backend", targetRef: "service:Synap Backend", type: powers }
-  - { sourceRef: "repository:synap-control-plane-api", targetRef: "service:Control Plane API", type: powers }
-  - { sourceRef: "repository:synap-intelligence-service", targetRef: "service:Agent Hub", type: powers }
-  - { sourceRef: "repository:browser", targetRef: "service:Browser", type: powers }
-  - { sourceRef: "repository:monohub", targetRef: "service:MonoHub", type: powers }
-  - { sourceRef: "Hetzner", targetRef: "Hetzner API Token", type: references }
-  - { sourceRef: "Hetzner", targetRef: "Hetzner SSH Key", type: references }
-  - { sourceRef: "Cloudflare", targetRef: "Cloudflare API Token", type: references }
-  - { sourceRef: "Namecheap", targetRef: "Namecheap API Key", type: references }
-  - { sourceRef: "Stripe", targetRef: "Stripe Secret Key", type: references }
-  - { sourceRef: "Stripe", targetRef: "Stripe Webhook Secret", type: references }
-  - { sourceRef: "OpenRouter", targetRef: "OpenRouter API Key", type: references }
-  - { sourceRef: "Resend", targetRef: "Resend API Key", type: references }
-  - { sourceRef: "GitHub", targetRef: "GitHub Actions Token", type: references }
-  - { sourceRef: "Control Plane API", targetRef: "CP EC Private Key", type: references }
-
 displayTemplates:
   - name: Service Card
     description: "Infrastructure service with health status, stack, and links"
@@ -1281,6 +888,43 @@ bento:
 onboarding:
   goal: "Capture the user's infrastructure surface — the services they run, the repositories behind them, their environments, the vendors they depend on, and their credentials inventory — so the command center reflects their real stack."
   framing: "Act as a staff platform engineer doing an infra walkthrough. Tease out what's running in production, where the code lives, how environments are laid out, which third parties they depend on, and what secrets need tracking. Translate that into services, repositories, environments, vendors, and credentials."
+  expertise:
+    starters:
+      - >
+        Start from what's serving live traffic RIGHT NOW, not the architecture diagram. Walk the
+        request path: what does a user hit first, and what does that call, and what does THAT call?
+        Capture each hop as a service with its host and health-check URL. The production edge is the
+        map's anchor; everything else hangs off it.
+      - >
+        For every third party, capture the cost AND who owns the account. Propose logging each
+        vendor with its pricing model and monthly spend the moment you name it — the €12/mo that
+        became €400/mo is always a vendor nobody was watching. An untracked line item is a future
+        surprise on the card.
+      - >
+        Inventory credentials by their EXPIRY, not their existence. For each secret, capture where
+        it's stored (vault ref), what it unlocks, and when it expires or was last rotated. The
+        credential nobody wrote down is the one that expires at 3am and takes prod with it.
+    blindSpots:
+      - >
+        The untracked credential is the classic infra time-bomb: the SSH key on one laptop, the API
+        token in someone's .env, the cert that auto-renewed until it didn't. Teams track services
+        obsessively and secrets not at all — surface expiry dates and rotation policy proactively,
+        because the outage is silent until the exact moment it isn't.
+      - >
+        Vendor cost creep has no owner. Each SaaS was signed up "just to try," and now the monthly
+        bill is a mystery no single person can explain line by line. Force a monthly-cost number and
+        an owner on every vendor — the sum is almost always higher than anyone guessed.
+      - >
+        "Works on my machine" is environment drift, and it hides until deploy day. Staging runs a
+        different Node, prod has an env var dev doesn't, the migration ran here but not there. Map
+        each environment EXPLICITLY with its branch and base URL so the deltas between prod, staging,
+        and dev are visible instead of discovered during an incident.
+    bar: >
+      A great result is a command center where you can answer, without SSHing anywhere: what's
+      serving traffic and is it healthy, which credential expires next and who rotates it, what each
+      vendor costs and who owns it, and exactly how prod differs from staging. The value is in the
+      facts nobody keeps in one place — expiry dates, cost owners, environment deltas — surfaced
+      before they become incidents.
   collect:
     - profileSlug: service
       what: "The services / apps they run and their stack"