@synap-core/workspace-templates 0.5.0 → 0.6.1

package/package.json

@@ -1,14 +1,14 @@
 {
   "name": "@synap-core/workspace-templates",
-  "version": "0.5.0",
+  "version": "0.6.1",
   "type": "module",
   "packageManager": "pnpm@9.15.4",
   "description": "Canonical workspace definitions — YAML source + typed exports for browser, backend, CLI, and marketplace",
   "exports": {
     ".": {
-      "types": "./src/index.ts",
+      "types": "./dist/index.d.ts",
       "node": "./dist/index.js",
-      "default": "./src/index.ts"
+      "default": "./dist/index.js"
     }
   },
   "files": [
@@ -18,10 +18,11 @@
   "scripts": {
     "type-check": "tsc --noEmit",
     "build:yaml": "node build.mjs",
-    "build": "node build.mjs && tsc -p tsconfig.build.json",
+    "check:converters": "node scripts/check-converters.mjs",
+    "build": "node build.mjs && tsup && node scripts/check-converters.mjs",
     "provision": "node scripts/provision.mjs",
     "eval": "node scripts/eval-standard.mjs",
-    "prepublishOnly": "node build.mjs && tsc -p tsconfig.build.json"
+    "prepublishOnly": "node build.mjs && tsup && node scripts/check-converters.mjs"
   },
   "dependencies": {
     "zod": "^3.0.0",
@@ -30,6 +31,7 @@
   "devDependencies": {
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^22.0.0",
+    "tsup": "^8.0.0",
     "typescript": "^5.5.0"
   },
   "publishConfig": {

package/src/agent-fleet.yaml

@@ -895,28 +895,36 @@ displayTemplates:
 bento:
   viewName: "Agent Fleet Home"
   blocks:
-    - widgetType: welcome-header
+    - kind: widget
+      widgetType: welcome-header
       pos: { x: 0, y: 0, w: 12, h: 2 }
       config: { title: "Agent Fleet", subtitle: "Your sovereign control plane for the agent fleet." }
-    - widgetType: entity-count
+    - kind: widget
+      widgetType: entity-count
       pos: { x: 0, y: 2, w: 3, h: 2 }
       config: { profileSlug: agent, label: Agents, icon: bot }
-    - widgetType: entity-count
+    - kind: widget
+      widgetType: entity-count
       pos: { x: 3, y: 2, w: 3, h: 2 }
       config: { profileSlug: task, label: Tasks, icon: check-square }
-    - widgetType: entity-count
+    - kind: widget
+      widgetType: entity-count
       pos: { x: 6, y: 2, w: 3, h: 2 }
       config: { profileSlug: skill, label: Skills, icon: zap }
-    - widgetType: entity-count
+    - kind: widget
+      widgetType: entity-count
       pos: { x: 9, y: 2, w: 3, h: 2 }
       config: { profileSlug: provider, label: Providers, icon: database }
-    - widgetType: entity-spotlight
+    - kind: widget
+      widgetType: entity-spotlight
       pos: { x: 0, y: 4, w: 4, h: 4 }
       config: { profileSlug: agent, seed: random, layout: detail, subtitleField: status, color: "#1A3A5C" }
-    - widgetType: entity-list
+    - kind: widget
+      widgetType: entity-list
       pos: { x: 4, y: 4, w: 4, h: 4 }
       config: { profileSlug: task, title: "Active Tasks", limit: 6, variant: compact }
-    - widgetType: entity-list
+    - kind: widget
+      widgetType: entity-list
       pos: { x: 8, y: 4, w: 4, h: 4 }
       config: { profileSlug: skill, title: "Top Skills", limit: 6, variant: compact }
     - kind: view

package/src/blockchain-ecosystem.yaml

@@ -0,0 +1,372 @@
+# Blockchain Ecosystem — PRIVATE OVERLAY on the Ecosystem workspace.
+# AI-generation-friendly YAML. Validated against types.ts at build time.
+#
+# This is an OVERLAY, not a standalone workspace: it `compose`s onto the
+# Ecosystem base and layers its web3 market actors (market-makers, auditors,
+# dev-shops, KOLs, agencies), the actor↔actor relations, and a couple of curated
+# views ADDITIVELY onto that base. No separate workspace is created.
+#
+# Overlay-safety: subtype MATCHES the base (`ecosystem`, a no-op on the additive
+# reconcile), and workspace `visibility`/`capabilities` are OMITTED so the base
+# Ecosystem keeps its own identity (the reconcile REPLACES those when set).
+# The 6 web3 role-profiles are moved here verbatim from grants.yaml. company/person
+# are NOT redeclared — the reconcile resolves base profiles the overlay references.
+
+meta:
+  slug: blockchain-ecosystem
+  name: Blockchain Ecosystem
+  description: "Web3 market actors — market-makers, auditors, dev shops, KOLs — and how they connect. Overlays the Ecosystem workspace."
+  icon: boxes
+  color: "#8B5CF6"
+  tags: [blockchain, web3, ecosystem, market-makers]
+  isPublic: false
+
+# OVERLAY on Ecosystem — composes additively onto the base workspace.
+dependencies:
+  - slug: ecosystem
+    kind: workspace
+    relation: compose
+    reason: "Adds web3 market actors + relations onto your Ecosystem."
+
+workspace:
+  name: Ecosystem
+  description: "Web3 market actors and the relationships between them, layered onto your Ecosystem."
+  subtype: ecosystem
+
+profiles:
+  # ── Web3 actor roles (facets on company/person) ─────────────────────────────
+  # Moved here VERBATIM from grants.yaml — web3-specific service roles an actor
+  # plays. `scope: shared` dedups to the ONE pod-wide role profile.
+
+  # ── Market Maker (liquidity provider for a token) ─────────────────────────
+  - slug: market-maker
+    displayName: Market Maker
+    icon: candlestick-chart
+    color: sky
+    description: A liquidity provider — makes markets and provides depth for a token.
+    scope: shared
+    profileKind: role
+    applicableKinds:
+      - company
+      - person
+    properties:
+      - slug: status
+        label: Status
+        valueType: string
+        inputType: select
+        enumValues:
+          - prospect
+          - active
+          - paused
+          - churned
+      - slug: exchanges
+        label: Exchanges / Venues
+        valueType: array
+        inputType: text
+      - slug: engagementStartDate
+        label: Engagement Start
+        valueType: date
+        inputType: date
+      - slug: notes
+        label: Notes
+        valueType: string
+        inputType: textarea
+
+  # ── Security Auditor (smart-contract / protocol audits) ───────────────────
+  - slug: security-auditor
+    displayName: Security Auditor
+    icon: shield-check
+    color: red
+    description: A security firm or individual that audits smart contracts and protocols.
+    scope: shared
+    profileKind: role
+    applicableKinds:
+      - company
+      - person
+    properties:
+      - slug: status
+        label: Status
+        valueType: string
+        inputType: select
+        enumValues:
+          - prospect
+          - active
+          - paused
+          - churned
+      - slug: specialty
+        label: Specialty
+        valueType: string
+        inputType: text
+      - slug: engagementStartDate
+        label: Engagement Start
+        valueType: date
+        inputType: date
+      - slug: notes
+        label: Notes
+        valueType: string
+        inputType: textarea
+
+  # ── Dev Shop (outsourced engineering / build partner) ─────────────────────
+  - slug: dev-shop
+    displayName: Dev Shop
+    icon: code
+    color: violet
+    description: An outsourced engineering studio or build partner.
+    scope: shared
+    profileKind: role
+    applicableKinds:
+      - company
+      - person
+    properties:
+      - slug: status
+        label: Status
+        valueType: string
+        inputType: select
+        enumValues:
+          - prospect
+          - active
+          - paused
+          - churned
+      - slug: specialty
+        label: Specialty
+        valueType: string
+        inputType: text
+      - slug: engagementStartDate
+        label: Engagement Start
+        valueType: date
+        inputType: date
+      - slug: notes
+        label: Notes
+        valueType: string
+        inputType: textarea
+
+  # ── Marketing Agency (brand / growth / content marketing) ─────────────────
+  - slug: marketing-agency
+    displayName: Marketing Agency
+    icon: megaphone
+    color: pink
+    description: A brand, growth, or content marketing agency.
+    scope: shared
+    profileKind: role
+    applicableKinds:
+      - company
+      - person
+    properties:
+      - slug: status
+        label: Status
+        valueType: string
+        inputType: select
+        enumValues:
+          - prospect
+          - active
+          - paused
+          - churned
+      - slug: specialty
+        label: Specialty
+        valueType: string
+        inputType: text
+      - slug: engagementStartDate
+        label: Engagement Start
+        valueType: date
+        inputType: date
+      - slug: notes
+        label: Notes
+        valueType: string
+        inputType: textarea
+
+  # ── Paid-Ads Agency (performance / paid media buying) ─────────────────────
+  - slug: paid-ads-agency
+    displayName: Paid-Ads Agency
+    icon: badge-dollar-sign
+    color: orange
+    description: A performance / paid-media buying agency.
+    scope: shared
+    profileKind: role
+    applicableKinds:
+      - company
+      - person
+    properties:
+      - slug: status
+        label: Status
+        valueType: string
+        inputType: select
+        enumValues:
+          - prospect
+          - active
+          - paused
+          - churned
+      - slug: channels
+        label: Channels
+        valueType: array
+        inputType: text
+      - slug: engagementStartDate
+        label: Engagement Start
+        valueType: date
+        inputType: date
+      - slug: notes
+        label: Notes
+        valueType: string
+        inputType: textarea
+
+  # ── KOL (key opinion leader / influencer) ─────────────────────────────────
+  - slug: kol
+    displayName: KOL
+    icon: star
+    color: yellow
+    description: A key opinion leader or influencer who amplifies reach.
+    scope: shared
+    profileKind: role
+    applicableKinds:
+      - company
+      - person
+    properties:
+      - slug: status
+        label: Status
+        valueType: string
+        inputType: select
+        enumValues:
+          - prospect
+          - active
+          - paused
+          - churned
+      - slug: platform
+        label: Primary Platform
+        valueType: string
+        inputType: text
+      - slug: audienceSize
+        label: Audience Size
+        valueType: number
+        inputType: number
+      - slug: notes
+        label: Notes
+        valueType: string
+        inputType: textarea
+
+# Web3 actor↔actor relations (company→company). `company` resolves from the
+# Ecosystem base — not redeclared here.
+entityLinks:
+  - sourceProfileSlug: company
+    targetProfileSlug: company
+    type: audited_by
+    label: Audited by
+  - sourceProfileSlug: company
+    targetProfileSlug: company
+    type: makes_market_for
+    label: Makes market for
+  - sourceProfileSlug: company
+    targetProfileSlug: company
+    type: built_by
+    label: Built by
+  - sourceProfileSlug: company
+    targetProfileSlug: company
+    type: advises
+    label: Advises
+
+# Curated views over the web3 roles (companies wearing each role).
+views:
+  - name: Market Makers
+    slug: market-makers
+    type: table
+    scopeProfileSlug: market-maker
+    description: Liquidity providers you work with, by status.
+    config:
+      columns: [title, status, exchanges, engagementStartDate]
+  - name: Auditors
+    slug: auditors
+    type: table
+    scopeProfileSlug: security-auditor
+    description: Security auditors you work with, by status.
+    config:
+      columns: [title, status, specialty, engagementStartDate]
+  - name: Dev Shops
+    slug: dev-shops
+    type: table
+    scopeProfileSlug: dev-shop
+    description: Build partners and engineering studios you work with.
+    config:
+      columns: [title, status, specialty, engagementStartDate]
+
+onboarding:
+  goal: >
+    Map the web3 service ecosystem — which market-makers, auditors, dev-shops,
+    and KOLs you work with, and how they connect to the projects and companies in
+    your Ecosystem — so the map shows not just the players but the service graph
+    around them.
+  framing: |
+    THE WEB3 ECOSYSTEM LEAD: Act as a sharp web3 ecosystem lead who knows the
+    service layer of the market — who provides liquidity, who audits, who ships
+    code, who moves attention. Push for REAL named firms and the concrete edges
+    between them: who audits whom, who makes markets for which token, who built
+    which product. Tag the role onto the real company, then draw the edge — a list
+    of service providers with no relationships is just a directory.
+  expertise:
+    starters:
+      - >
+        Tag the role onto the real company, don't spin up a new one. A market-maker
+        or auditor is a HAT a company wears — attach the role to the existing
+        Ecosystem company (match on domain / name first) rather than creating a
+        second entity for the same firm.
+      - >
+        The service layer is a graph, not a list. For every provider you log,
+        propose at least one real edge — audited_by, makes_market_for, built_by,
+        advises — because the value is in who serves whom, not in the roster alone.
+    blindSpots:
+      - >
+        Founders track the loud KOLs and forget the load-bearing providers — the
+        auditor gating a launch, the market-maker holding the book. Surface the
+        quiet, critical relationships, not just the visible ones.
+      - >
+        A service provider with no engagement status and no edge is a bookmark, not
+        a relationship. Force the status (prospect/active/paused/churned) and at
+        least one connection to a real project or company.
+    bar: >
+      The web3 service graph reads true: named firms wearing the right role
+      (market-maker, auditor, dev-shop, KOL), each with an engagement status and at
+      least one real edge to the company or project it serves — so a glance shows
+      who's providing liquidity, who's auditing, who's building, and who's amplifying.
+  collect:
+    - profileSlug: market-maker
+      what: The market-makers / liquidity providers you work with, tagged onto the real company.
+      cardinality: few
+      keyFields: [status, exchanges]
+    - profileSlug: security-auditor
+      what: The security auditors you work with, tagged onto the real firm.
+      cardinality: few
+      keyFields: [status, specialty]
+  openingQuestions:
+    - "Which market-makers or liquidity providers are in your orbit, and are they active?"
+    - "Who audits the projects you work with — which security firms do you trust?"
+    - "Which dev-shops or KOLs are part of your ecosystem, and how do they connect to your projects?"
+  doneWhen: a couple of web3 actors tagged onto real companies with an engagement status.
+
+app:
+  kind: stored
+  cellKey: entity-detail
+
+layout:
+  defaultView: Market Makers
+  defaultApp: null
+  pinnedApps: [dashboard, data]
+  sidebarItems:
+    - kind: view
+      viewName: Market Makers
+      label: Market Makers
+      icon: candlestick-chart
+    - kind: view
+      viewName: Auditors
+      label: Auditors
+      icon: shield-check
+    - kind: view
+      viewName: Dev Shops
+      label: Dev Shops
+      icon: code
+
+bento:
+  viewName: Market Makers
+  blocks:
+    - kind: view
+      viewName: Market Makers
+      pos: { x: 0, y: 0, w: 6, h: 5 }
+    - kind: view
+      viewName: Auditors
+      pos: { x: 6, y: 0, w: 6, h: 5 }

package/src/catalog.test.ts

@@ -0,0 +1,156 @@
+/**
+ * Unit tests for the mergeCatalog door. Run: `npx tsx --test src/catalog.test.ts`
+ *
+ * These test the SOURCE (`./catalog.js` → catalog.ts), never `dist/`, so no build
+ * is required and there is no stale-generated-output trap.
+ */
+
+import { test } from "node:test";
+import assert from "node:assert/strict";
+import { mergeCatalog, type RemoteEntry } from "./catalog.js";
+import type { WorkspaceYaml } from "./types.js";
+
+const BUNDLE_VERSION = "0.6.0";
+
+/** Minimal bundled template — only the fields the door reads. */
+function bundled(slug: string, extra?: Partial<WorkspaceYaml["meta"]>): WorkspaceYaml {
+  return {
+    meta: { slug, name: slug, description: `${slug} desc`, icon: "layers", color: "#fff", ...extra },
+    workspace: { name: slug, description: "" },
+    profiles: [],
+  } as WorkspaceYaml;
+}
+
+/** Minimal CP row. `version` (when given) lands at definition.sourcePackage.version. */
+function remote(slug: string, opts?: { version?: string; isPrivate?: boolean }): RemoteEntry {
+  return {
+    slug,
+    name: slug,
+    description: `${slug} remote`,
+    category: "workspace",
+    tags: [],
+    isPrivate: opts?.isPrivate,
+    definition:
+      opts?.version !== undefined
+        ? { sourcePackage: { name: "@synap-core/workspace-templates", version: opts.version } }
+        : undefined,
+  };
+}
+
+// ── Dedupe by slug ──────────────────────────────────────────────────────────
+// MUTATION PROOF: change the dedupe key to `slug@version` and this count goes to
+// 2 (bundled "1.0.0"-implied vs remote) → RED.
+test("dedupes a slug present in both sources into ONE entry", () => {
+  const { entries } = mergeCatalog({
+    bundled: [bundled("crm"), bundled("legal")],
+    remote: [remote("crm", { version: "0.5.0" }), remote("legal", { version: "0.5.0" })],
+    bundleVersion: BUNDLE_VERSION,
+  });
+  assert.equal(entries.length, 2, "two slugs, deduped");
+  assert.equal(entries.filter((e) => e.slug === "crm").length, 1);
+});
+
+// ── Winner rule ─────────────────────────────────────────────────────────────
+test("bundle wins when remote version EQUALS the bundle", () => {
+  const { entries } = mergeCatalog({
+    bundled: [bundled("crm")],
+    remote: [remote("crm", { version: BUNDLE_VERSION })],
+    bundleVersion: BUNDLE_VERSION,
+  });
+  assert.equal(entries[0].source, "bundled");
+});
+
+test("bundle wins when remote version is OLDER", () => {
+  const { entries } = mergeCatalog({
+    bundled: [bundled("crm")],
+    remote: [remote("crm", { version: "0.5.0" })],
+    bundleVersion: BUNDLE_VERSION,
+  });
+  assert.equal(entries[0].source, "bundled");
+});
+
+// MUTATION PROOF: flip `remoteIsStrictlyNewer`'s comparison (`>` → `<`, or return
+// false) and this assertion (source === "remote") goes RED.
+test("remote wins when it is STRICTLY newer (this client is stale)", () => {
+  const { entries } = mergeCatalog({
+    bundled: [bundled("crm")],
+    remote: [remote("crm", { version: "0.7.0" })],
+    bundleVersion: BUNDLE_VERSION,
+  });
+  assert.equal(entries[0].source, "remote");
+});
+
+// ── Third-party & squatting ─────────────────────────────────────────────────
+test("a non-colliding remote slug is kept as a DISTINCT entry", () => {
+  const { entries } = mergeCatalog({
+    bundled: [bundled("crm")],
+    remote: [remote("acme-widget")], // no sourcePackage, no bundled twin
+    bundleVersion: BUNDLE_VERSION,
+  });
+  assert.equal(entries.length, 2);
+  const acme = entries.find((e) => e.slug === "acme-widget");
+  assert.equal(acme?.source, "remote");
+  assert.equal(acme?.isPrivate, false, "browse rows default public");
+});
+
+test("a third-party row SQUATTING an official slug (no sourcePackage) loses to the bundle", () => {
+  const { entries } = mergeCatalog({
+    bundled: [bundled("crm")],
+    remote: [remote("crm")], // slug collision, NO sourcePackage → squatting
+    bundleVersion: BUNDLE_VERSION,
+  });
+  assert.equal(entries.length, 1);
+  assert.equal(entries[0].source, "bundled");
+});
+
+// ── sources degradation (load-bearing) ──────────────────────────────────────
+test("remote unreachable → returns bundled only + honest source status", () => {
+  const { entries, sources } = mergeCatalog({
+    bundled: [bundled("crm"), bundled("legal")],
+    remote: [], // fetch failed → empty
+    bundleVersion: BUNDLE_VERSION,
+    remoteStatus: "unreachable",
+  });
+  assert.equal(entries.length, 2, "still shows all bundled");
+  assert.equal(sources.bundled, "ok");
+  assert.equal(sources.remote, "unreachable");
+});
+
+test("remote unauthenticated → status surfaced; any stray remote rows are ignored", () => {
+  const { entries, sources } = mergeCatalog({
+    bundled: [bundled("crm")],
+    remote: [remote("private-pack", { isPrivate: true })], // must NOT be merged
+    bundleVersion: BUNDLE_VERSION,
+    remoteStatus: "unauthenticated",
+  });
+  assert.equal(entries.length, 1);
+  assert.equal(entries[0].slug, "crm");
+  assert.equal(sources.remote, "unauthenticated");
+});
+
+test("private remote packages merge when reachable and carry isPrivate", () => {
+  const { entries } = mergeCatalog({
+    bundled: [bundled("crm")],
+    remote: [remote("private-pack", { isPrivate: true })],
+    bundleVersion: BUNDLE_VERSION,
+    remoteStatus: "ok",
+  });
+  const priv = entries.find((e) => e.slug === "private-pack");
+  assert.equal(priv?.source, "remote");
+  assert.equal(priv?.isPrivate, true);
+});
+
+// ── Real bundled data shape (integration-ish) ───────────────────────────────
+test("maps a bundled template's meta fields onto the entry", () => {
+  const { entries } = mergeCatalog({
+    bundled: [bundled("crm", { icon: "handshake", tags: ["crm", "sales"], isPublic: false })],
+    remote: [],
+    bundleVersion: BUNDLE_VERSION,
+  });
+  const e = entries[0];
+  assert.equal(e.source, "bundled");
+  assert.equal(e.icon, "handshake");
+  assert.deepEqual(e.tags, ["crm", "sales"]);
+  assert.equal(e.category, "workspace");
+  assert.equal(e.isPrivate, true, "isPublic:false ⇒ isPrivate");
+});