@synap-core/workspace-templates 0.7.1 → 0.7.3

package/src/dev-dashboard.yaml

@@ -7,6 +7,7 @@
 
 meta:
   slug: dev-dashboard
+  domain: build
   name: "Synap Dev — Infrastructure Command Center"
   description: "Internal DevOps dashboard for monitoring Synap infrastructure. Tracks services, vendors, and environments with health status, architecture flow map, and quick access to admin panels."
   icon: server
@@ -123,7 +124,8 @@ profiles:
         label: Vendor Type
         valueType: string
         inputType: select
-        enumValues: [Hosting, AI, Auth, Database, Monitoring, CI/CD, DNS, Email, Other]
+        enumValues:
+          [Hosting, AI, Auth, Database, Monitoring, CI/CD, DNS, Email, Other]
       - slug: vendor-url
         label: Vendor URL
         valueType: string
@@ -271,7 +273,8 @@ profiles:
         label: Type
         valueType: string
         inputType: select
-        enumValues: [api_key, ssh_key, password, token, certificate, env_variable, other]
+        enumValues:
+          [api_key, ssh_key, password, token, certificate, env_variable, other]
         placeholder: "Select credential type"
       - slug: service-name
         label: Service
@@ -418,7 +421,14 @@ views:
     type: table
     scopeProfileSlug: service
     config:
-      visibleColumns: [service-type, environment, deployment-branch, last-deploy, health-status]
+      visibleColumns:
+        [
+          service-type,
+          environment,
+          deployment-branch,
+          last-deploy,
+          health-status,
+        ]
       sortBy: last-deploy
       sortDirection: desc
 
@@ -854,12 +864,36 @@ bento:
       config:
         title: Quick Links
         links:
-          - { label: GitHub, url: "https://github.com/synapsh", color: "#24292E" }
-          - { label: Hetzner Console, url: "https://console.hetzner.cloud", color: "#D50C2D" }
-          - { label: Vercel Dashboard, url: "https://vercel.com/dashboard", color: "#000000" }
-          - { label: Ory Console, url: "https://console.ory.sh", color: "#5528FF" }
-          - { label: Cloudflare, url: "https://dash.cloudflare.com", color: "#F38020" }
-          - { label: OpenRouter, url: "https://openrouter.ai/dashboard", color: "#6366F1" }
+          - {
+              label: GitHub,
+              url: "https://github.com/synapsh",
+              color: "#24292E",
+            }
+          - {
+              label: Hetzner Console,
+              url: "https://console.hetzner.cloud",
+              color: "#D50C2D",
+            }
+          - {
+              label: Vercel Dashboard,
+              url: "https://vercel.com/dashboard",
+              color: "#000000",
+            }
+          - {
+              label: Ory Console,
+              url: "https://console.ory.sh",
+              color: "#5528FF",
+            }
+          - {
+              label: Cloudflare,
+              url: "https://dash.cloudflare.com",
+              color: "#F38020",
+            }
+          - {
+              label: OpenRouter,
+              url: "https://openrouter.ai/dashboard",
+              color: "#6366F1",
+            }
     - kind: widget
       widgetType: entity-list
       pos: { x: 0, y: 7, w: 6, h: 5 }

package/src/domains.test.ts

@@ -0,0 +1,117 @@
+/**
+ * Unit tests for the domain taxonomy — the "works for any template" contract.
+ * Run: `npx vitest run packages/workspace-templates` (from the repo root).
+ */
+
+import { describe, expect, it } from "vitest";
+import {
+  groupByDomain,
+  domainLabel,
+  TEMPLATE_DOMAINS,
+  OTHER_DOMAIN_ID,
+  isKnownDomain,
+} from "./domains.js";
+
+type Row = { slug: string; domain?: string };
+const domainOf = (r: Row) => r.domain;
+
+describe("domainLabel", () => {
+  it("returns the registry label for a known domain", () => {
+    expect(domainLabel("revenue")).toBe("Sales & Marketing");
+  });
+  it("returns 'More' for a missing domain", () => {
+    expect(domainLabel(undefined)).toBe("More");
+    expect(domainLabel(null)).toBe("More");
+    expect(domainLabel("")).toBe("More");
+  });
+  it("title-cases an unknown-but-declared domain so it still reads", () => {
+    expect(domainLabel("supply-chain")).toBe("Supply Chain");
+    expect(domainLabel("bizops")).toBe("Bizops");
+  });
+});
+
+describe("groupByDomain — works for ANY template", () => {
+  it("orders known domains by the registry, never alphabetically", () => {
+    const rows: Row[] = [
+      { slug: "a", domain: "knowledge" }, // registry order 5
+      { slug: "b", domain: "strategy" }, // registry order 0
+      { slug: "c", domain: "content" }, // registry order 2
+    ];
+    const groups = groupByDomain(rows, domainOf);
+    expect(groups.map((g) => g.id)).toEqual(["strategy", "content", "knowledge"]);
+  });
+
+  it("preserves input order WITHIN a section", () => {
+    const rows: Row[] = [
+      { slug: "z", domain: "content" },
+      { slug: "a", domain: "content" },
+    ];
+    const [content] = groupByDomain(rows, domainOf);
+    expect(content.items.map((r) => r.slug)).toEqual(["z", "a"]);
+  });
+
+  it("places an unknown-but-declared domain AFTER all known ones", () => {
+    const rows: Row[] = [
+      { slug: "x", domain: "supply-chain" }, // unknown
+      { slug: "y", domain: "build" }, // known
+    ];
+    const groups = groupByDomain(rows, domainOf);
+    expect(groups.map((g) => g.id)).toEqual(["build", "supply-chain"]);
+    expect(groups[1].label).toBe("Supply Chain");
+  });
+
+  it("sorts multiple unknown domains alphabetically, before 'other'", () => {
+    const rows: Row[] = [
+      { slug: "1", domain: "zeta" },
+      { slug: "2" }, // missing → other
+      { slug: "3", domain: "alpha" },
+      { slug: "4", domain: "revenue" }, // known
+    ];
+    const groups = groupByDomain(rows, domainOf);
+    expect(groups.map((g) => g.id)).toEqual([
+      "revenue",
+      "alpha",
+      "zeta",
+      OTHER_DOMAIN_ID,
+    ]);
+  });
+
+  it("routes a MISSING domain into the 'More' bucket, always LAST", () => {
+    const rows: Row[] = [
+      { slug: "1" },
+      { slug: "2", domain: "strategy" },
+    ];
+    const groups = groupByDomain(rows, domainOf);
+    expect(groups[groups.length - 1].id).toBe(OTHER_DOMAIN_ID);
+    expect(groups[groups.length - 1].label).toBe("More");
+  });
+
+  it("NEVER drops an item — count in equals count out", () => {
+    const rows: Row[] = [
+      { slug: "1", domain: "build" },
+      { slug: "2", domain: "made-up" },
+      { slug: "3" },
+      { slug: "4", domain: "build" },
+    ];
+    const total = groupByDomain(rows, domainOf).reduce(
+      (n, g) => n + g.items.length,
+      0
+    );
+    expect(total).toBe(rows.length);
+  });
+
+  it("omits empty sections", () => {
+    const groups = groupByDomain([{ slug: "1", domain: "build" }], domainOf);
+    expect(groups).toHaveLength(1);
+    expect(groups[0].id).toBe("build");
+  });
+});
+
+describe("isKnownDomain", () => {
+  it("recognises every registry id and rejects the rest", () => {
+    for (const d of TEMPLATE_DOMAINS) expect(isKnownDomain(d.id)).toBe(true);
+    expect(isKnownDomain("made-up")).toBe(false);
+    expect(isKnownDomain(undefined)).toBe(false);
+    expect(isKnownDomain(OTHER_DOMAIN_ID)).toBe(false);
+  });
+});

package/src/domains.ts

@@ -0,0 +1,102 @@
+/**
+ * Template DOMAIN taxonomy — the authored, cross-surface grouping that sections
+ * the marketplace (CLI `market list`, browser New Space + catalog, marketplace).
+ *
+ * WHY A FIELD, NOT DERIVED FROM TAGS. Grouping is a property of the template, so
+ * it lives ON the template (`meta.domain`) — authored once, read by every
+ * surface. The alternative was a hardcoded slug→group map (or a tag heuristic)
+ * inside each consumer; that map drifts the instant a template is added, and no
+ * one authoring a template can see it. Same lesson as the vocabulary work: a
+ * declared relationship should live where it can be verified, not re-guessed.
+ *
+ * NOT `category`. The catalog already uses `category` for the PACKAGE TYPE
+ * (`workspace`/`capability`/`skill`/…). `domain` is the human subject area.
+ *
+ * WORKS FOR ANY TEMPLATE. A template may declare a domain absent from this
+ * registry, or none at all — `groupByDomain` never drops one. Known domains
+ * render first in registry order; an unknown-but-declared domain renders after
+ * them (its id title-cased); a missing domain falls into the `other` bucket,
+ * always last. So a NEW template appears correctly without touching this file —
+ * adding it here only controls a domain's ORDER and LABEL.
+ */
+
+export interface TemplateDomain {
+  id: string;
+  label: string;
+}
+
+export const OTHER_DOMAIN_ID = "other";
+export const OTHER_DOMAIN_LABEL = "More";
+
+/** Known domains, in display order (the order sections appear in a listing). */
+export const TEMPLATE_DOMAINS: readonly TemplateDomain[] = [
+  { id: "strategy", label: "Strategy & Market" },
+  { id: "revenue", label: "Sales & Marketing" },
+  { id: "content", label: "Content & Social" },
+  { id: "company", label: "Company & Operations" },
+  { id: "build", label: "Build & Operate" },
+  { id: "knowledge", label: "Knowledge & Research" },
+];
+
+const KNOWN = new Map(
+  TEMPLATE_DOMAINS.map((d, i) => [d.id, { label: d.label, order: i }] as const)
+);
+
+/** Every valid domain id the registry knows about (excludes `other`). */
+export function isKnownDomain(id: string | undefined | null): boolean {
+  return id != null && KNOWN.has(id);
+}
+
+/** Display label for a domain id. Missing → "More"; unknown-declared → title-cased id. */
+export function domainLabel(id: string | undefined | null): string {
+  if (!id) return OTHER_DOMAIN_LABEL;
+  const known = KNOWN.get(id);
+  if (known) return known.label;
+  return id
+    .replace(/[-_]/g, " ")
+    .replace(/\b\w/g, (c) => c.toUpperCase());
+}
+
+export interface DomainGroup<T> {
+  id: string;
+  label: string;
+  items: T[];
+}
+
+/**
+ * Partition `items` into ordered domain sections: known domains first (registry
+ * order), then unknown-but-declared domains (alphabetical), then the missing
+ * "More" bucket, always last. Empty sections are omitted; nothing is dropped.
+ * Item order WITHIN a section is preserved from the input.
+ */
+export function groupByDomain<T>(
+  items: readonly T[],
+  domainOf: (item: T) => string | undefined | null
+): DomainGroup<T>[] {
+  const buckets = new Map<string, T[]>();
+  for (const item of items) {
+    const id = domainOf(item) || OTHER_DOMAIN_ID;
+    const bucket = buckets.get(id);
+    if (bucket) bucket.push(item);
+    else buckets.set(id, [item]);
+  }
+
+  const rank = (id: string): number => {
+    if (id === OTHER_DOMAIN_ID) return Number.MAX_SAFE_INTEGER;
+    const known = KNOWN.get(id);
+    return known ? known.order : 1_000_000; // unknown-declared: after known, before "other"
+  };
+
+  return [...buckets.entries()]
+    .sort(([a], [b]) => {
+      const ra = rank(a);
+      const rb = rank(b);
+      if (ra !== rb) return ra - rb;
+      return a < b ? -1 : a > b ? 1 : 0;
+    })
+    .map(([id, groupItems]) => ({
+      id,
+      label: id === OTHER_DOMAIN_ID ? OTHER_DOMAIN_LABEL : domainLabel(id),
+      items: groupItems,
+    }));
+}

package/src/ecosystem.yaml

@@ -8,6 +8,7 @@
 
 meta:
   slug: ecosystem
+  domain: strategy
   name: Ecosystem
   description: Map the market you operate in — the partners, competitors, and players, the segments and trends, and the relationships between them.
   icon: radar
@@ -170,7 +171,8 @@ profiles:
         label: Type
         valueType: string
         inputType: select
-        enumValues: [raise, partnership, launch, acquisition, listing, conference, other]
+        enumValues:
+          [raise, partnership, launch, acquisition, listing, conference, other]
       - slug: event-date
         label: Date
         valueType: date
@@ -390,9 +392,19 @@ playbooks:
       profileSlug: competitor
     params:
       - { name: competitor, type: entity, label: Competitor, required: true }
-      - { name: focus, type: text, label: Focus area, defaultValue: "product, pricing, and positioning" }
+      - {
+          name: focus,
+          type: text,
+          label: Focus area,
+          defaultValue: "product, pricing, and positioning",
+        }
       - { name: companyContext, type: text, label: Our company context }
-      - { name: outputTypes, type: text, label: Outputs, defaultValue: "a head-to-head comparison summary and an updated competitor profile" }
+      - {
+          name: outputTypes,
+          type: text,
+          label: Outputs,
+          defaultValue: "a head-to-head comparison summary and an updated competitor profile",
+        }
     executor: is-agent
     # A radar MONITOR: bound to the competitor KIND + a schedule → the backing
     # cron automation fans out (query→loop→playbook_run) and runs this once per
@@ -423,7 +435,12 @@ playbooks:
       angles you covered, and why each new one matters.
     schedule: { cron: "0 9 * * 1", enabled: false }
     params:
-      - { name: ourSpace, type: text, label: Our market / category, required: true }
+      - {
+          name: ourSpace,
+          type: text,
+          label: Our market / category,
+          required: true,
+        }
     executor: is-agent
     grants:
       - exa_search
@@ -536,7 +553,10 @@ layout:
       icon: database
 
 bento:
-  viewName: Ecosystem Map
+  # Distinct from the "Ecosystem Map" graph view it embeds — the bento is created
+  # as its OWN view row, so reusing an embedded view's name puts two identically
+  # named views in the switcher.
+  viewName: Ecosystem Home
   blocks:
     - kind: view
       viewName: Ecosystem Map

package/src/enterprise-os.yaml

@@ -20,6 +20,7 @@
 
 meta:
   slug: enterprise-os
+  domain: company
   name: Enterprise OS
   description: Stand up a company's public operating core in one install — strategy, market, operations, and pipeline — plus a command tower to track objectives across them.
   icon: layout-dashboard

package/src/finance.yaml

@@ -5,6 +5,7 @@
 
 meta:
   slug: finance
+  domain: company
   name: Finance
   description: The company's money model — accounts, receivables, spend, revenue streams, budgets, and runway.
   icon: banknote
@@ -123,7 +124,17 @@ profiles:
         label: Category
         valueType: string
         inputType: select
-        enumValues: [payroll, software, marketing, rent, travel, contractors, taxes, other]
+        enumValues:
+          [
+            payroll,
+            software,
+            marketing,
+            rent,
+            travel,
+            contractors,
+            taxes,
+            other,
+          ]
         constraints: { defaultValue: other }
       - slug: status
         label: Status
@@ -245,7 +256,18 @@ profiles:
         label: Metric
         valueType: string
         inputType: select
-        enumValues: [runway, burn-rate, mrr, arr, cash-balance, gross-margin, cac, ltv, other]
+        enumValues:
+          [
+            runway,
+            burn-rate,
+            mrr,
+            arr,
+            cash-balance,
+            gross-margin,
+            cac,
+            ltv,
+            other,
+          ]
         constraints: { defaultValue: runway }
       - slug: value
         label: Value
@@ -292,7 +314,8 @@ views:
     defaultView: true
     description: Accounts receivable — who owes us, how much, and when it's due.
     config:
-      columns: [title, invoice-number, status, amount, customer, due-date, paid-date]
+      columns:
+        [title, invoice-number, status, amount, customer, due-date, paid-date]
       defaultSort:
         field: due-date
         direction: asc
@@ -311,7 +334,16 @@ views:
     scopeProfileSlug: revenue-stream
     description: Revenue streams with MRR/ARR and billing cadence.
     config:
-      columns: [title, stream-type, status, mrr, arr, billing-cadence, customer-segment]
+      columns:
+        [
+          title,
+          stream-type,
+          status,
+          mrr,
+          arr,
+          billing-cadence,
+          customer-segment,
+        ]
       defaultSort:
         field: mrr
         direction: desc
@@ -321,7 +353,16 @@ views:
     scopeProfileSlug: budget
     description: Planned spend against actuals, by category and period.
     config:
-      columns: [title, category, period, fiscal-year, budgeted-amount, actual-amount, status]
+      columns:
+        [
+          title,
+          category,
+          period,
+          fiscal-year,
+          budgeted-amount,
+          actual-amount,
+          status,
+        ]
   - name: Runway & Metrics
     slug: runway-metrics
     type: table

package/src/foundation.yaml

@@ -6,6 +6,7 @@
 
 meta:
   slug: foundation
+  domain: strategy
   name: Foundation
   description: The strategic DNA — mission, audience, positioning, and principles — that every workspace inherits.
   icon: compass
@@ -455,7 +456,18 @@ views:
   - name: Strategy Map
     slug: strategy-map
     type: graph
-    scopeProfileSlugs: [mission, vision, value, audience, pain-point, positioning, narrative, differentiator, non-goal]
+    scopeProfileSlugs:
+      [
+        mission,
+        vision,
+        value,
+        audience,
+        pain-point,
+        positioning,
+        narrative,
+        differentiator,
+        non-goal,
+      ]
     description: The strategic DNA as a connected graph.
 
 # Schema-level relations — give the Strategy Map and the relation picker

package/src/generate.d.mts

@@ -0,0 +1,15 @@
+/** Types for `generate.mjs` — the shared renderer for `src/templates.ts`. */
+
+export interface RawTemplateEntry {
+  /** Source file name, e.g. `business-developer.yaml`. */
+  file: string;
+  /** `meta.slug` as declared in the YAML. */
+  slug: string;
+  /** The parsed YAML document, untyped on purpose (build-time shape). */
+  data: unknown;
+}
+
+export declare const SRC_DIR: string;
+export declare const TEMPLATES_FILE: string;
+export declare function readYamlTemplates(): RawTemplateEntry[];
+export declare function renderTemplatesModule(templates: RawTemplateEntry[]): string;

package/src/generate.mjs

@@ -0,0 +1,86 @@
+/**
+ * The ONE renderer for the generated `src/templates.ts` corpus.
+ *
+ * WHY THIS FILE EXISTS (read before inlining it back into build.mjs):
+ * `src/templates.ts` is auto-generated from `src/*.yaml` AND committed to git
+ * (it has to be — `browser/tsconfig.json` aliases this package straight at
+ * `src/`, with no build step, and synap-backend's
+ * `__tripwires__/template-shared-role-ssot.test.ts` reads the file by path).
+ * A committed artifact can go stale: edit a YAML, run `pnpm test`, and every
+ * template-corpus check — including `concept-guard` — passes against
+ * vocabulary that no longer exists on disk. Only `pnpm build` regenerated.
+ *
+ * So the render logic lives HERE, and two callers share it:
+ *   • `build.mjs`            — validates, renders, WRITES the file.
+ *   • `src/templates-freshness.test.ts` — renders in memory and asserts the
+ *     committed file matches byte-for-byte. Runs in `pnpm test`, i.e. in CI.
+ *
+ * Duplicating the template string into the test would recreate the same class
+ * of drift one level up, so don't.
+ */
+
+import { readFileSync, readdirSync } from 'fs';
+import { dirname, join } from 'path';
+import { fileURLToPath } from 'url';
+import yaml from 'js-yaml';
+
+export const SRC_DIR = dirname(fileURLToPath(import.meta.url));
+export const TEMPLATES_FILE = join(SRC_DIR, 'templates.ts');
+
+/**
+ * Read + parse every `src/*.yaml`, in the same (readdir) order build.mjs used.
+ * No validation here — validation stays in build.mjs, which is the writer.
+ */
+export function readYamlTemplates() {
+  return readdirSync(SRC_DIR)
+    .filter((f) => f.endsWith('.yaml'))
+    .map((file) => {
+      const parsed = yaml.load(readFileSync(join(SRC_DIR, file), 'utf-8'));
+      return { file, slug: parsed?.meta?.slug, data: parsed };
+    });
+}
+
+/** Render the full text of `src/templates.ts` for a corpus. Pure. */
+export function renderTemplatesModule(templates) {
+  const data = JSON.stringify(
+    Object.fromEntries(templates.map((t) => [t.slug, t.data])),
+    null,
+    2,
+  );
+
+  return `// ═══════════════════════════════════════════════════════════════════════
+// AUTO-GENERATED from YAML source files in src/*.yaml
+// DO NOT EDIT — run \`node build.mjs\` or \`pnpm build\` to regenerate
+// ═══════════════════════════════════════════════════════════════════════
+
+import type { WorkspaceYaml } from './types.js';
+
+const DATA = ${data} as unknown as Record<string, WorkspaceYaml>;
+
+export const WORKSPACE_TEMPLATES: Record<string, WorkspaceYaml> = DATA;
+
+export type WorkspaceTemplateSlug = keyof typeof WORKSPACE_TEMPLATES;
+
+export function getWorkspaceTemplate(slug: string): WorkspaceYaml | undefined {
+  return WORKSPACE_TEMPLATES[slug];
+}
+
+export function listWorkspaceTemplates(): WorkspaceYaml[] {
+  return Object.values(WORKSPACE_TEMPLATES);
+}
+
+/**
+ * Public templates only (\`meta.isPublic !== false\`). This is a CONVENIENCE
+ * filter for the default picker — NOT a security boundary: the private YAML
+ * still ships in the published tarball, so anything that must not leak cannot
+ * rely on this. \`listWorkspaceTemplates()\` returns all of them (CLI, seeder,
+ * tripwire need the full set). Publicity is also expressed per-entry as
+ * \`CatalogEntry.isPrivate\` by \`mergeCatalog()\`, so a caller can pass ALL
+ * templates and filter at the presentation layer instead of choosing a list
+ * function up front — the merge door itself never filters (it stays pure).
+ */
+export function listPublicTemplates(): WorkspaceYaml[] {
+  return Object.values(WORKSPACE_TEMPLATES).filter(t => t.meta?.isPublic !== false);
+}
+`;
+}

package/src/grants.yaml

@@ -12,6 +12,7 @@
 
 meta:
   slug: grants
+  domain: revenue
   name: Grants Pipeline
   description: "Grant-agency operations — submissions, rounds, analyses. Overlays the Operations workspace."
   icon: award