@tomorrowos/sdk 0.9.66 → 0.9.67

package/README.md

@@ -79,7 +79,7 @@ Follow @tomorrowos/sdk (an NPM package) VERCEL_SETUP.md and set up my TomorrowOS
 
 Open VERCEL_QUESTIONS.md first.
 For Q1, Q2, Q3: paste each question block VERBATIM. Do not rephrase options.
-For Q3: DO NOT ask a branding question or offer choices. Immediately open one form with ALL SEVEN optional inputs visible at once (Product Name, Tagline, Primary/Background/Text/Secondary colour, Logo Upload above Logo URL). Never only Name + Primary colour. Blanks = brand.json defaults.
+For Q3: DO NOT ask a branding choice. Open one form with ALL SEVEN optional inputs at once, then HARD STOP and WAIT for my submit or "skip". Never auto-continue with defaults without my reply. Never only Name + Primary colour. Logo = Upload above Logo URL.
 After Q1 database choice, YOU set TOMORROWOS_STORE and DATABASE_SSL. Do not ask me to fill those.
 After Q2 media storage choice, YOU set TOMORROWOS_MEDIA. Do not ask me to fill those.
 Run: npx @tomorrowos/sdk@latest init . --hosting v0 --force
@@ -94,7 +94,7 @@ after deploy verify: GET /status → JSON, GET / → Control Panel, WebSocket on
 pair devices against the Production URL only
 ```
 
-Agents must paste questions from [`VERCEL_QUESTIONS.md`](./VERCEL_QUESTIONS.md) verbatim. Q1/Q2 are choice questions; **Q3 is a form only** — open **all seven** optional inputs at once (never a branding choice first; never only Name + Primary colour). Logo = Upload above Logo URL; blanks keep `brand.json` defaults. WebSockets require Fluid compute. The agent sets `cms.hostingTarget` to `"vercel"`.
+Agents must paste questions from [`VERCEL_QUESTIONS.md`](./VERCEL_QUESTIONS.md) verbatim. Q1/Q2 are choice questions; **Q3 is a form only** — open **all seven** optional inputs at once, then **wait** for submit or `"skip"` (never auto-skip because fields are optional; never a branding choice first; never only Name + Primary colour). Logo = Upload above Logo URL. WebSockets require Fluid compute. The agent sets `cms.hostingTarget` to `"vercel"`.
 
 Upgrading an existing Vercel / v0 CMS instead:
 

package/VERCEL_QUESTIONS.md

@@ -1,10 +1,11 @@
 # Vercel / v0 - Verbatim question bank
 
-> **Protocol:** `vercel-questions/1.4` (pairs with `VERCEL_SETUP.md` 1.12+ / `@tomorrowos/sdk` 0.9.66+)  
+> **Protocol:** `vercel-questions/1.5` (pairs with `VERCEL_SETUP.md` 1.13+ / `@tomorrowos/sdk` 0.9.67+)  
 > **For Agents:** When asking the user a setup question, **copy-paste the block below for that step EXACTLY**.  
 > Do **not** paraphrase, reorder, rename options, or invent alternatives (no S3, no Supabase Storage, no "Blob recommended", no "disable media").  
 > After each answer, configure per `VERCEL_SETUP.md`, then paste the **next** block.  
-> **Q1 and Q2 are choice questions. Q3 is a form only - never a multiple-choice question.**
+> **Q1 and Q2 are choice questions. Q3 is a form only - never a multiple-choice question.**  
+> **HARD STOP on Q3:** show the form, then **wait** for the user's reply. Optional fields do **not** mean you may auto-skip.
 
 ---
 
@@ -45,17 +46,21 @@ Reply with **1** or **2** (or "Cloudinary" / "Vercel Blob").
 
 ---
 
-## Q3 - Brand form (NOT a question - open this form immediately)
+## Q3 - Brand form (NOT a question - open this form, then WAIT)
 
 **STOP - read before doing anything for branding:**
 
-1. Q3 is **not** a chat question and **not** a multiple-choice step.
+1. Q3 is **not** a chat multiple-choice step.
 2. **Do not** ask: "Want to customize branding?", "Option A / Option B", "skip or customize?", or any other choice first.
 3. **Do not** open a form with only Product Name + Primary colour (or any subset).
-4. **Immediately** open **one** multi-input form with **all seven fields visible at the same time**. User submits **once**. Every field is **optional**.
+4. **Immediately** open **one** multi-input form with **all seven fields visible at the same time**.
+5. **HARD STOP and WAIT** for the user to submit the form, reply with values, or say **"skip"**.  
+   - Fields being optional means blanks keep defaults **after** the user responds.  
+   - Fields being optional does **NOT** mean you may continue scaffolding without a user reply.  
+   - **Forbidden:** "fields are optional so I'll proceed with defaults" / auto-skip / thinking past Q3 in the same turn.
 
 **Title:** Brand your TomorrowOS experience  
-**Helper:** All fields optional. Leave blank to keep starter brand.json defaults. Submit once.
+**Helper:** All fields optional. Leave blank to keep starter brand.json defaults. Submit once (or reply "skip"). I will wait for your reply before continuing setup.
 
 **Create exactly these seven controls - all on screen together (no Next / no wizard steps):**
 
@@ -71,12 +76,15 @@ Reply with **1** or **2** (or "Cloudinary" / "Vercel Blob").
 
 **Pass / fail check before showing the user:** count the text inputs. If you see fewer than **six** text fields (Product Name, Tagline, Primary, Background, Text, Secondary) plus the Logo Upload+URL row, **do not show it** - rebuild the form with all seven.
 
-**Forbidden Q3 UIs:**
+**Forbidden Q3 UIs / behaviors:**
 
 - Any multiple-choice / radio / "1 or 2" / Option A vs B
 - A preliminary question before the form
 - Only Name + Primary colour (or any 1-2 field subset)
 - One freeform / Other box for all brand values
 - Field-by-field Next wizard
+- Auto-continuing to init/scaffold/deploy without a user Q3 reply or explicit "skip"
+- Interpreting "do not re-ask" as "do not wait for the first reply"
 
+After the user submits (including all-blank) or says "skip": apply `brand.json`, then continue. **Do not** re-ask Q3 a second time.
 Blank fields -> keep existing `brand.json`. Logo blank -> `./assets/logo.svg`.

package/VERCEL_SETUP.md

@@ -5,10 +5,10 @@
 >
 > **On Vercel, this file is the setup questionnaire** (not `REPLIT_SETUP.md`).
 >
-> Protocol id: `vercel-setup/1.12` - pairs with `@tomorrowos/sdk` **0.9.66+** (`templates/cms-starter-v0`, Fluid Functions WebSockets).
+> Protocol id: `vercel-setup/1.13` - pairs with `@tomorrowos/sdk` **0.9.67+** (`templates/cms-starter-v0`, Fluid Functions WebSockets).
 >
 > **Questions source of truth:** `VERCEL_QUESTIONS.md` - Agents must **open that file and paste each Q block verbatim**. Do not paraphrase.  
-> **Q1/Q2 = choice questions. Q3 = form only:** immediately open **all seven optional inputs at once**. Never ask a branding choice first. Never show only Name + Primary colour. Logo = **Upload** above **Logo URL**. Blanks keep starter `brand.json`.  
+> **Q1/Q2 = choice questions. Q3 = form only:** open **all seven optional inputs at once**, then **HARD STOP and WAIT** for submit or "skip". Never auto-skip because fields are optional. Never ask a branding choice first. Never show only Name + Primary colour. Logo = **Upload** above **Logo URL**.  
 > **Copy questions verbatim from `VERCEL_QUESTIONS.md`.** Do not invent alternate Q2 options (no "Supabase Storage", no S3, no "disable media", no making Blob the recommended option).  
 > **`TOMORROWOS_STORE` and `DATABASE_SSL` are agent-only** - set them automatically after Q1; never put them in a user-facing Env form for the customer to type.
 
@@ -38,7 +38,7 @@ Follow @tomorrowos/sdk (an NPM package) VERCEL_SETUP.md and set up my TomorrowOS
 
 Open VERCEL_QUESTIONS.md first.
 For Q1, Q2, Q3: paste each question block VERBATIM. Do not rephrase options.
-For Q3: DO NOT ask a branding question or offer choices. Immediately open one form with ALL SEVEN optional inputs visible at once (Product Name, Tagline, Primary/Background/Text/Secondary colour, Logo Upload above Logo URL). Never only Name + Primary colour. Blanks = brand.json defaults.
+For Q3: DO NOT ask a branding choice. Open one form with ALL SEVEN optional inputs at once, then HARD STOP and WAIT for my submit or "skip". Never auto-continue with defaults without my reply. Never only Name + Primary colour. Logo = Upload above Logo URL.
 After Q1 database choice, YOU set TOMORROWOS_STORE and DATABASE_SSL. Do not ask me to fill those.
 After Q2 media storage choice, YOU set TOMORROWOS_MEDIA. Do not ask me to fill those.
 Run: npx @tomorrowos/sdk@latest init . --hosting v0 --force
@@ -219,9 +219,9 @@ Then ask **Question 1**.
 16. **No inventing CMS login** from a branding URL.
 17. **Skip ??invent.** Stay on Q1?Q3 only.
 18. **Publish gate:** `/status` JSON + WebSocket 101; no static `public/` trap.
-19. **Q3 is a form, not a question.** After Q2, **immediately** open one dialog with **all seven** optional inputs visible together. **Never** ask a preliminary branding choice. **Never** show only Product Name + Primary colour. **Never** use multiple-choice / Option A-B for branding. Logo = **Upload** above **Logo URL**.
+19. **Q3 is a form, not a question ? and you must WAIT.** After Q2, open one dialog with **all seven** optional inputs visible together, then **stop and wait** for submit or explicit **"skip"**. **Never** auto-continue because fields are optional. **Never** ask a preliminary branding choice. **Never** show only Product Name + Primary colour. **Never** use multiple-choice / Option A-B for branding. Logo = **Upload** above **Logo URL**.
 
-**Question order:** Q1 -> (auto-set store env) -> Q2 -> Q3 form -> execution checklist.
+**Question order:** Q1 -> (auto-set store env) -> Q2 -> Q3 form (**wait for user**) -> execution checklist.
 
 ---
 
@@ -752,28 +752,32 @@ import { put } from "@vercel/blob";
 
 ---
 
-## Question 3 - Brand form (`brand.json` only; **not a choice question**)
+## Question 3 - Brand form (`brand.json` only; **not a choice question**; **must wait**)
 
 > Updates **only** `brand.json`. Does **not** change Vercel project settings, Env Vars, `vercel.json`, or `server.ts` store wiring beyond what Q1-Q2 already required.
 >
-> **IRON RULE - form, not question:** As soon as Q2 is done, **open the brand form**. Do **not** ask the user anything in chat first. Do **not** offer choices. Show **all seven optional fields on one screen at the same time**. User fills what they want (or leaves blank) and submits **once**.
+> **IRON RULE - form, not question; show then WAIT:** As soon as Q2 is done, **open the brand form**. Do **not** ask a choice first. Show **all seven optional fields on one screen at the same time**. Then **HARD STOP** until the user submits the form, replies with values, or says **"skip"**.
+>
+> **Optional fields ? optional step.** Leaving a field blank keeps the starter default **after the user responds**. It does **not** authorize you to skip waiting or auto-apply defaults in the same turn.
 >
 > - **Forbidden:** any preliminary question ("customize branding?", "skip or set brand?", Option A/B)
 > - **Forbidden:** multiple-choice / radio / "reply 1 or 2" for branding
 > - **Forbidden:** showing only Product Name + Primary colour (or any subset under 7)
 > - **Forbidden:** field-by-field Next wizard (name -> wait -> tagline -> ...)
 > - **Forbidden:** one freeform / Other box for all brand values
-> - **Required:** six text inputs + Logo Upload above Logo URL, all visible together before submit
+> - **Forbidden:** auto-continuing to init / scaffold / env / deploy because "fields are optional" or "I shouldn't re-ask"
+> - **Required:** six text inputs + Logo Upload above Logo URL, all visible together
+> - **Required:** wait for one user action (submit / values / "skip") before scaffolding continues
 >
 > **Self-check:** If the UI you are about to show has fewer than six text fields for name/tagline/four colours, **abort and rebuild** - that UI is off-protocol.
 >
-> **Every field is optional.** Blank / skip / "use defaults" -> keep starter **`brand.json`** values (from `templates/cms-starter-v0/brand.json` / project `brand.json` after `init`). **Do not** re-ask for missing fields. **Do not** invent a second branding prompt.
+> **Every field is optional** once the form is shown. After the user submits (including all-blank) or says "skip": keep starter **`brand.json`** for blanks; **do not** re-ask Q3 a second time. **Do not** invent a second branding prompt.
 >
 > Default TomorrowOS Control Panel has **no login**. Do **not** scaffold login/auth unless the user explicitly asks.
 
-### Preferred UI (open immediately - all seven at once)
+### Preferred UI (open immediately - all seven at once - then wait)
 
-Open **one** dialog titled **Brand your TomorrowOS experience**. Render **each row as its own control**. All rows must appear **together** on first paint - not revealed after a choice, not after filling a previous field.
+Open **one** dialog titled **Brand your TomorrowOS experience**. Render **each row as its own control**. All rows must appear **together** on first paint - not revealed after a choice, not after filling a previous field. After opening, **end your turn** and wait.
 
 | # | Exact label | Control type | Blank default |
 |---|-------------|--------------|---------------|
@@ -785,15 +789,15 @@ Open **one** dialog titled **Brand your TomorrowOS experience**. Render **each r
 | 6 | **Secondary colour** | text input (hex) | e.g. `#F5F3EF` |
 | 7 | **Logo** | **Upload** (SVG/PNG file picker) **above** **Logo URL** (text input) | keep `./assets/logo.svg` |
 
-Helper text: *All fields optional. Leave blank to keep starter brand.json defaults. Submit once. For logo: upload a file or paste a URL.*
+Helper text: *All fields optional. Leave blank to keep starter brand.json defaults. Submit once, or reply "skip". I will wait before continuing setup.*
 
 **Logo UX:** Upload control directly above Logo URL. Either is fine; if both provided, prefer the uploaded file.
 
-### If a form UI is unavailable - one chat message only (still no choice question)
+### If a form UI is unavailable - one chat message only (still wait)
 
-Only when the platform **cannot** render multi-field forms. Do **not** ask a choice first. Send **exactly one** message listing all seven fields (user may answer partially, attach a logo, or say "skip"):
+Only when the platform **cannot** render multi-field forms. Do **not** ask a choice first. Send **exactly one** message listing all seven fields, then **end your turn and wait** (user may answer partially, attach a logo, or say "skip"):
 
-> Brand your TomorrowOS experience (**all optional - reply once**). Leave any field blank to keep starter `brand.json` defaults:
+> Brand your TomorrowOS experience (**all optional - reply once**). Leave any field blank to keep starter `brand.json` defaults. I will wait for your reply before scaffolding:
 >
 > 1. **Product Name**
 > 2. **Tagline**
@@ -802,6 +806,8 @@ Only when the platform **cannot** render multi-field forms. Do **not** ask a cho
 > 5. **Text colour** (hex)
 > 6. **Secondary colour** (hex)
 > 7. **Logo** - attach SVG/PNG or paste a Logo URL
+>
+> Or reply **skip** to keep all defaults.
 
 ### After the user submits
 
@@ -965,6 +971,7 @@ Tell the user:
 | Agent asked for OpenAI / `sk-` key during setup | Hallucinated ?AI pairing??requirement | **Refuse.** TomorrowOS does not need LLM keys. Return to Q2 media choices only |
 | Agent asked a branding choice / Option A-B / "customize?" before the form | Off-protocol Q3 | Close it; immediately open the **7-field form** (no choice step) |
 | Agent showed only Name + Primary colour (or any subset) | Off-protocol Q3 | Rebuild with **all seven** inputs visible at once |
+| Agent auto-continued after showing Q3 because "fields are optional" / "shouldn't re-ask" | Off-protocol Q3 | **HARD STOP** and wait for submit or explicit "skip"; do not scaffold yet |
 | Agent asked branding as Option A URL vs Option B, or field-by-field Next | Off-protocol Q3 | Re-open Q3 as **seven separate optional inputs** in one dialog; blanks keep `brand.json` |
 | Agent built a login page from branding answers | Misread brand step as product scope | Remove login; keep starter Control Panel; apply answers only to `brand.json` |
 | Secrets in git | Mistake | Rotate keys; move to Vercel Env Vars |
@@ -1013,7 +1020,9 @@ Protocol complete when:
 
 ## Protocol version
 
-`vercel-setup/1.12` - pairs with `@tomorrowos/sdk` 0.9.66+ and `VERCEL_QUESTIONS.md` 1.4.
+`vercel-setup/1.13` - pairs with `@tomorrowos/sdk` 0.9.67+ and `VERCEL_QUESTIONS.md` 1.5.
+
+**Changelog 1.13:** Q3 must **HARD STOP and WAIT** for user submit or "skip". Optional fields do **not** authorize auto-continuing with defaults. Clarifies "do not re-ask" = after the user already replied, not "skip waiting".
 
 **Changelog 1.12:** Q3 is a **form, not a question**. No preliminary branding choice. Must show **all seven** optional inputs at once (never only Name + Primary colour). Logo = Upload above Logo URL.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tomorrowos/sdk",
-  "version": "0.9.66",
+  "version": "0.9.67",
   "description": "TomorrowOS CMS server SDK - WebSocket transport, pairing, device commands, optional static CMS UI. Includes CLI (tomorrowos init / build) and starter templates.",
   "type": "module",
   "main": "./dist/index.js",

package/templates/cms-starter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "my-cms",
-  "version": "0.9.66",
+  "version": "0.9.67",
   "description": "CMS server on @tomorrowos/sdk. Add your UI (React, static files, etc.) alongside this server.",
   "private": true,
   "type": "module",
@@ -13,7 +13,7 @@
     "build-player": "tomorrowos build --platform tizen"
   },
   "dependencies": {
-    "@tomorrowos/sdk": "^0.9.66",
+    "@tomorrowos/sdk": "^0.9.67",
     "dotenv": "^17.2.3",
     "tsx": "^4.19.0"
   },

package/templates/cms-starter-v0/package.json

@@ -1,6 +1,6 @@
 {
   "name": "my-cms",
-  "version": "0.9.66",
+  "version": "0.9.67",
   "description": "TomorrowOS CMS for Vercel / v0 Publish (Fluid Function + WebSockets + optional Next Preview).",
   "private": true,
   "type": "module",
@@ -17,7 +17,7 @@
     "build-player": "tomorrowos build --platform tizen"
   },
   "dependencies": {
-    "@tomorrowos/sdk": "^0.9.66",
+    "@tomorrowos/sdk": "^0.9.67",
     "dotenv": "^17.2.3",
     "tsx": "^4.19.0"
   },