@topy-ai/maggie 0.7.37 → 0.7.40

package/README-zh-TW.md

@@ -2,16 +2,24 @@
 
 [English README](README.md) · [完整繁體中文 README](https://github.com/TOPY-AI-LTD/ai-cmo-skills/blob/main/README.zh-TW.md)
 
-`@topy-ai/maggie` 提供 19 個可安裝的 AI website workflow skills，支援
+`@topy-ai/maggie` 提供 20 個可安裝的 AI website workflow skills，支援
 Codex、Claude Code 與相容的 coding agents。
 
 ## 安裝
 
 ```bash
-npx @topy-ai/maggie@0.7.37 init --agent all
+npx @topy-ai/maggie@0.7.38 init --agent all
 npx @topy-ai/maggie doctor --project .
 ```
 
+目前 release 是 `0.7.40`，加入 feedback batch 21：progressive enhancement
+的區域/identity/request 驗證、Tailwind utility 與 CSS cascade evidence、
+dashboard/sample surface contract、primary navigation indexability、privacy
+origin parity、provider-neutral site structure、host capability manifest，
+以及包含 duration/price variants 的 Booking treatment group。MaggieDash
+同步更新至 0.2.9，ORA reference host 也提供相同的 capability/site-structure
+邊界。
+
 常用流程：
 
 ```bash
@@ -21,11 +29,26 @@ maggie memory context --project . --skill <skill-name>
 maggie doctor --project . --require-bootstrap --strict
 ```
 
+Feedback batch quality gates：
+
+```bash
+maggie design progressive-check --evidence .maggie/progressive.json
+maggie design dash-validate --plan .maggie/design/dashboard/PLAN.json --evidence .maggie/dashboard.json
+maggie seo privacy-check --evidence .maggie/privacy-origins.json
+maggie dash capabilities-validate --manifest .maggie/host-capabilities.json
+maggie dash structure-validate --model .maggie/site-structure.json --evidence .maggie/site-structure-rendered.json
+maggie service treatment-group-audit --project .
+```
+
+這些 gate 只接受經過清理的 build/browser evidence，會在第三方 request 重複、
+Tailwind/CSS cascade、dashboard unsupported surface、privacy origin、site
+structure drift 或重複 treatment product 時 fail closed。
+
 主要 skills 包括 clone、design、template、Blog、SEO/GEO、localization、
 deployment、memory、feedback 和 MaggieDash。內容先 draft/review，外部寫入、
 publish 與 production deployment 需要明確確認。
 
-目前 release 是 `0.7.37`，加入可安裝的 `maggie-booking` workflow：MaggieDash Booking host bootstrap、傳統 email/password 團隊登入與 granular permissions、Stripe payment boundary、Resend outbox/template 管理、public customer booking flow、runtime/ops evidence checks，以及完整的 Booking 維護文件。Production activation 仍會 fail-closed，直到 host migration、owner、Stripe、scheduler 和 authenticated runtime evidence 都完成。上一版 `0.7.36` 完成下一批已驗證 feedback：修正 doctor placeholder scope、Tailwind renderable source scope、internal link/fragment audit、unstable baseline classification、site-wide baseline reason、base64url asset hash、installed-file hash update safety，並加入 provider-routed Gemini v2、venue timezone/DST booking parsing、social-card release path、notification lifecycle contract 和 mobile hero video playback contract。provider-bound video generation 與 transactional delivery 已記錄在 issue #39；前一批延後功能仍在 issue #38，不會直接成為 active memory。0.7.33 記錄並審查一筆更正回饋；確認 0.7.32 已正確處理 batch index，沒有修改已驗證的 shared behavior。0.7.32 加入 feedback 一基索引支援、MaggieDash panel 的 source/freshness/error evidence、Consent Mode 與實際 write/no-op reconciliation、SEO baseline recapture、sitemap origin rebasing、content-diff scope、migration ledger reconciliation、deployment credential preflight、release provenance/runtime preflight、icon release gate、opt-in blog auto-publish gate，以及 least-privilege VPS deployer。也修復 top-level `maggie feedback` dispatcher parity。0.7.31 加入 update 差異摘要、atomic installer copy、subset install manifest merge，以及 inventory drift 時 doctor non-zero。0.7.30 補上 feedback tracking issue closeout gate 與 batch 14/15 audit ledger。0.7.29 修正 npm package landing page 使用英文 README；0.7.28 加入 versioned Gemini model policy、明確 fallback 與 provenance、bundled-first CLI
+目前 source tree 的 release candidate 是 `0.7.39`，npm registry 仍是 `0.7.38`；候選版本加入可安裝的 `maggie-booking` workflow：MaggieDash Booking host bootstrap、傳統 email/password 團隊登入與 granular permissions、Stripe payment boundary、Resend outbox/template 管理、public customer booking flow、runtime/ops evidence checks，以及完整的 Booking 維護文件。全新的 Astro host 會自動補上可攜的 Node SSR adapter；已有 Cloudflare、Vercel、Netlify 或 Deno adapter 的專案會保留原本的部署選擇。Production activation 仍會 fail-closed，直到 host migration、owner、Stripe、scheduler 和 authenticated runtime evidence 都完成。上一版 `0.7.36` 完成下一批已驗證 feedback：修正 doctor placeholder scope、Tailwind renderable source scope、internal link/fragment audit、unstable baseline classification、site-wide baseline reason、base64url asset hash、installed-file hash update safety，並加入 provider-routed Gemini v2、venue timezone/DST booking parsing、social-card release path、notification lifecycle contract 和 mobile hero video playback contract。provider-bound video generation 與 transactional delivery 已記錄在 issue #39；前一批延後功能仍在 issue #38，不會直接成為 active memory。0.7.33 記錄並審查一筆更正回饋；確認 0.7.32 已正確處理 batch index，沒有修改已驗證的 shared behavior。0.7.32 加入 feedback 一基索引支援、MaggieDash panel 的 source/freshness/error evidence、Consent Mode 與實際 write/no-op reconciliation、SEO baseline recapture、sitemap origin rebasing、content-diff scope、migration ledger reconciliation、deployment credential preflight、release provenance/runtime preflight、icon release gate、opt-in blog auto-publish gate，以及 least-privilege VPS deployer。也修復 top-level `maggie feedback` dispatcher parity。0.7.31 加入 update 差異摘要、atomic installer copy、subset install manifest merge，以及 inventory drift 時 doctor non-zero。0.7.30 補上 feedback tracking issue closeout gate 與 batch 14/15 audit ledger。0.7.29 修正 npm package landing page 使用英文 README；0.7.28 加入 versioned Gemini model policy、明確 fallback 與 provenance、bundled-first CLI
 dispatch、`maggie --version`、feedback batch review 聚合與重複偵測、marketplace enrichment evidence、booking
 worker/resolver evidence，以及 read-only migration preflight。它也包含 host-owned mobile app surface contract、signed-in
 camera-state QA、直接 Astro route resolution、correlated feedback batch，以及
@@ -63,15 +86,41 @@ delivery outbox：可查看去識別化的狀態與 sanitized error；owner/mana
 這是 Maggie 的 server-side delivery queue 與 audit 管理，不取代 Resend 自己的
 domain、audience、campaign 或 analytics console。
 
+Booking manager 也已提供 tenant-scoped 的 prepaid treatment package catalogue，
+以及客戶 package entitlement 的手動授予、餘額查詢和預約時的原子核銷：可設定
+包含的 treatment variant 數量、價格、幣別、有效期與啟用狀態。公開客戶流程
+也支援 package checkout、token-bound payment return；manager 可以查看購買紀錄
+並提出受 redemption 保護的 Stripe package refund。Stripe 確認購買或退款後，
+會透過共用 outbox/worker 發送去識別化且具 idempotency 的 Resend 通知。
+
 在全新的 Astro 專案中，可以讓安裝流程補上缺少的 Booking runtime 套件：
 
 ```bash
 maggie booking install --project . --confirm --install-dependencies
+
+# 已審核的新主機：安裝缺少的套件並套用 Booking schema
+maggie booking install --project . --confirm --ready
 ```
 
 這個選項會依照專案現有的 npm/pnpm/yarn/bun lockfile，只安裝缺少的
-React、Phosphor、Tailwind、PostgreSQL 和 Stripe 套件，保留已存在的版本，
-並更新相對應的 lockfile；它不能和 `--dry-run` 或 `--diff` 一起使用。
+React、Phosphor、Tailwind、PostgreSQL、Stripe 和 SSR adapter 套件，保留已存在的
+版本，並更新相對應的 lockfile。空白 Astro 專案會補上可攜的
+`@astrojs/node` 與 `astro.config.mjs`；已有 `astro.config.*` 或
+Cloudflare/Vercel/Netlify/Deno adapter 的專案會保留原本的部署選擇。
+它不能和 `--dry-run` 或 `--diff` 一起使用。
+
+如果 host 需要自動處理 Resend outbox、reminder 和 payment reconciliation，
+可以同時產生 scheduler artifact：
+
+```bash
+maggie booking install --project . --confirm --bootstrap --schedule systemd
+# 沒有 systemd 的 host：
+maggie booking worker-schedule --project . --scheduler cron --confirm
+```
+
+這只會在 `deploy/` 寫入可審查的 service/timer 或 cron 文件，不會修改
+crontab、啟用 systemd、啟動 worker，也不會輸出 secret。啟用前仍要由 host
+管理員審查 service user，並完成 migration、backup/restore 及 release evidence。
 
 Booking 的 browser evidence gate 現在涵蓋全部 15 個 manager routes，在 mobile、
 tablet、desktop 三種 viewport 共需要 45 個 screens，包含 waitlist、locations、
@@ -95,11 +144,20 @@ Booking Team access 支援透過 Resend 發送傳統 email/password 邀請、`ma
 maggie booking email-templates-contract
 ```
 
-Booking 內置七種 Resend 事件模板。Owner、administrator 和 Booking manager
+Booking 內置十種 Resend 事件模板，包含 package purchase confirmation/refund
+與成功 no-show fee charge 通知。No-show 狀態轉換不會自動扣款；只有在
+客戶同意、已有保存的 Stripe payment method、provider off-session capability
+已驗證，且 owner/manager/finance 明確確認後，才會建立 idempotent adjustment
+charge。
+Owner、administrator 和 Booking manager
 可以編輯 draft、用 sandbox sample data 預覽、發佈 audited version，或 rollback
 舊版本。每個事件只接受核准的 placeholder，worker 發送前會 escape value；
 provider credentials 和 recipient address 只留在 server/worker，不會返回瀏覽器。
 
+Owner 設定 Stripe secrets 後，Booking Overview 會提供 server-side 的
+「Verify Stripe connection」操作：檢查帳號與 webhook 設定，只保存不含 secrets
+的 capability 狀態，並寫入 audited、可安全重試的結果；Stripe keys 不會進入瀏覽器。
+
 新版 release gates：
 
 ```bash
@@ -142,6 +200,6 @@ maggie service retirement-audit --project . \
   --evidence .maggie/booking/retirement-evidence.json
 ```
 
-完整中文說明、19 個 skills 清單和 roadmap：
+完整中文說明、20 個 skills 清單和 roadmap：
 [繁體中文 README](https://github.com/TOPY-AI-LTD/ai-cmo-skills/blob/main/README.zh-TW.md)
 · [Roadmap](https://github.com/TOPY-AI-LTD/ai-cmo-skills/blob/main/ROADMAP.md)

package/README.md

@@ -58,15 +58,41 @@ Then invoke the installed skills from your coding agent, for example:
 
 Maggie keeps the existing project foundation and asks for decisions before
 shared routes, analytics, or publishing boundaries change. The current
-package ships 19 installable skills and a local-first MaggieDash foundation.
-
-The current release is `0.7.37`. It adds the installable `maggie-booking`
+package ships 20 installable skills and a local-first MaggieDash foundation.
+
+The current release is `0.7.40`. It adds feedback batch 21 contracts for
+progressive-enhancement identity/request safety, rendered Tailwind utility and
+CSS-cascade checks, dashboard/sample surface evidence, primary-navigation
+indexability, privacy-origin parity, provider-neutral site structure, host
+capability manifests, and Booking treatment groups with duration/price
+variants. It also includes MaggieDash 0.2.9 host-contract updates.
+
+The previous `0.7.39` release candidate added adapter-aware fresh Astro Booking
+installation: blank hosts receive a portable Node SSR config while existing
+deployment adapters remain host-owned. It also adds the installable `maggie-booking`
 workflow for MaggieDash Booking: host bootstrap, traditional email/password
 team access with granular permissions, Stripe payment boundaries, Resend
 outbox and tenant email-template management, public customer booking flow,
 runtime/ops evidence checks, and the maintained Booking implementation docs.
+The manager workspace also includes a tenant-scoped prepaid treatment package
+catalogue with included variant quantities, package pricing, optional expiry,
+and active/inactive state. Managers can also grant tenant-scoped customer
+entitlements, inspect remaining balances, and redeem matching visits
+transactionally when creating a manager booking. Public customers can also
+start package checkout, return through a token-bound payment page, and the
+manager can list and request guarded Stripe package refunds. Verified package
+success/refund transitions also enqueue idempotent Resend confirmation/refund
+emails through the shared delivery worker.
+The Booking flow also supports an explicit, consented Stripe off-session
+no-show fee action after a booking is marked `no_show`; it requires a saved
+payment method, verified provider capability, idempotent adjustment state, and
+queues the customer email through the Resend outbox only after a successful
+charge. A status transition never charges automatically.
 Production activation remains fail-closed until the host migration, owner,
-Stripe, scheduler, and authenticated runtime evidence are supplied.
+Stripe, scheduler, and authenticated runtime evidence are supplied. The
+release candidate also regenerates the published Booking contracts and adds
+an exact npm-tarball smoke test so the registry package cannot silently fall
+behind the source CLI.
 
 The previous `0.7.36` release closed the next validated feedback batch:
 production demo fixtures are development-only, Dash infers the persisted
@@ -525,8 +551,8 @@ artifact schemas.
 Recommended upgrade sequence for the current release:
 
 ```bash
-npx @topy-ai/maggie@0.7.37 update --project . --force
-npx @topy-ai/maggie@0.7.37 cleanup --project .
+npx @topy-ai/maggie@0.7.39 update --project . --force
+npx @topy-ai/maggie@0.7.39 cleanup --project .
 ```
 
 Maintainers should pass npm credentials through the repository helper, never
@@ -635,14 +661,21 @@ maggie booking install --project . --confirm
 
 For a fresh Astro host, let the explicit install also add only the missing
 Booking runtime packages through the host's existing npm/pnpm/yarn/bun
-package manager:
+package manager. This includes the server-rendering adapter when the project
+has no existing Astro deployment adapter:
 
 ```bash
 maggie booking install --project . --confirm --install-dependencies
+
+# Reviewed new host: install missing packages and apply the Booking schema
+maggie booking install --project . --confirm --ready
 ```
 
-Existing dependency versions are preserved. This option updates the matching
-lockfile and is intentionally incompatible with `--dry-run` and `--diff`.
+Existing dependency versions are preserved. A blank Astro project receives a
+portable `@astrojs/node` adapter and `astro.config.mjs`; an existing
+`astro.config.*` and Cloudflare/Vercel/Netlify/Deno adapter remain untouched.
+This option updates the matching lockfile and is intentionally incompatible
+with `--dry-run` and `--diff`.
 
 For a reviewed new host, `--bootstrap` also applies the installed idempotent
 Booking schema using the host's existing `DATABASE_URL`:
@@ -657,6 +690,20 @@ one in the local `.env` without printing it. Existing secrets are preserved;
 short configured values fail closed. External secret stores must provision the
 key themselves.
 
+Generate the worker schedule artifact during install when the host is ready to
+review its Resend outbox, reminders, and payment reconciliation cadence:
+
+```bash
+maggie booking install --project . --confirm --bootstrap --schedule systemd
+# or:
+maggie booking worker-schedule --project . --scheduler cron --confirm
+```
+
+The command writes reviewable files under `deploy/` only. It does not edit a
+crontab, enable systemd, start a worker, or print secrets. Review the generated
+unit, set an unprivileged service user, and enable it only after the migration,
+backup/restore, and host evidence gates pass.
+
 Run the read-only onboarding checklist after installation:
 
 ```bash
@@ -683,7 +730,7 @@ Validate the tenant-scoped Booking email-template contract independently:
 maggie booking email-templates-contract
 ```
 
-The Booking workspace includes seven Resend event templates. Owner,
+The Booking workspace includes ten Resend event templates. Owner,
 administrator, and Booking managers can edit drafts, preview sandboxed sample
 data, publish audited versions, and roll back earlier versions. Event-specific
 placeholders are allowlisted and escaped before the host worker sends through
@@ -698,6 +745,11 @@ reports required environment-key presence and the explicit schema,
 owner-registration, Stripe webhook, and Resend-worker steps without printing
 secret values or mutating the host.
 
+After the owner adds the Stripe secrets, the Booking Overview includes a
+server-side “Verify Stripe connection” action. It checks the account and
+webhook configuration, stores only non-secret capability status, and records
+an audited idempotent result; Stripe keys never enter the browser.
+
 Booking also includes a tenant-scoped Notifications screen for the Resend
 delivery outbox. It shows redacted delivery state and sanitized errors through
 `GET /api/maggie/booking/notifications.json`; an owner or manager can replay a
@@ -996,7 +1048,7 @@ repairs with `maggie dash sections validate`, `fanout-validate`,
 `maggie dash inventory` to classify published pages once into disjoint kinds.
 See the [quality contract examples](https://github.com/TOPY-AI-LTD/ai-cmo-skills/blob/main/contracts/maggiedash/quality-contracts.md).
 
-The package includes all 19 installable skills: `maggie-blog-bootstrap`,
+The package includes all 20 installable skills: `maggie-blog-bootstrap`,
 `maggie-dash`, `maggie-clone`, `maggie-clone-to-template`, `maggie-marketplace`,
 `maggie-template`, `maggie-design`, `maggie-ops`, `maggie-deployment`,
 `maggie-project-context`, `maggie-seo-geo`, `maggie-social-share`,
@@ -1054,6 +1106,23 @@ maggie list
 maggie --help
 ```
 
+Feedback batch quality gates:
+
+```bash
+maggie design progressive-check --evidence .maggie/progressive.json
+maggie design dash-validate --plan .maggie/design/dashboard/PLAN.json --evidence .maggie/dashboard.json
+maggie design sample-validate --plan .maggie/design/sample/PLAN.json --evidence .maggie/sample.json
+maggie seo privacy-check --evidence .maggie/privacy-origins.json
+maggie dash capabilities-validate --manifest .maggie/host-capabilities.json
+maggie dash structure-validate --model .maggie/site-structure.json --evidence .maggie/site-structure-rendered.json
+maggie service treatment-group-audit --project .
+```
+
+These checks consume sanitized build/browser evidence and fail closed on
+third-party request churn, stale utility CSS, unsupported dashboard panels,
+privacy-policy origin drift, site-structure drift, or duplicated treatment
+products.
+
 ## Safety model
 
 - Clone only sites the user owns or is authorized to reproduce.

package/bin/maggie.js

@@ -58,7 +58,7 @@ Usage:
   maggie doctor [--project PATH]
   maggie bootstrap interview [project]
   maggie dash init|install|status|migrate|transition|variant|cms --project PATH [options]
-  maggie booking install|inspect|setup|contract|runtime-validate|ops-validate|release-gate|stripe-audit|tasks --project PATH [options]
+  maggie booking install|worker-schedule|inspect|setup|contract|runtime-validate|ops-validate|release-gate|stripe-audit|tasks --project PATH [options]
   maggie dash sections <validate|prompt|keys|remap-translations|fanout-validate|locale-validate|variant-copy-validate|media-validate|bindings-validate|idempotency-validate|reconcile> [options]
   maggie dash inventory --pages-file FILE [--require-page-kinds] [--require-source-coverage]
   maggie dash api-contract --spec FILE
@@ -68,6 +68,11 @@ Usage:
   maggie dash components-audit --bindings-file FILE --sections-file FILE --pages-file FILE
   maggie dash status --project PATH
   maggie dash migrate --project PATH --confirm
+  maggie dash capabilities-validate --manifest FILE
+  maggie dash structure-validate --model FILE --evidence FILE
+  maggie design progressive-check|css-check|css-cascade-check --evidence FILE
+  maggie design dash-init|dash-validate|sample-init|sample-validate [options]
+  maggie seo privacy-check --evidence FILE
   maggie content FILE --source PROVIDER --project PATH --confirm
   maggie agent-content write --url URL --allowed-origin ORIGIN --token-env ENV --payload FILE
   maggie bootstrap phase <start|pass|fail|status> <phase> [project]
@@ -469,7 +474,8 @@ function docs(args) {
 function seo(args) {
   const command = args[0];
   const scripts = { performance: "maggie_performance.py", images: "maggie_images.py", sitemap: "maggie_sitemap.py", indexnow: "maggie_indexnow.py", "social-cards": "maggie_social_cards.py", "head-tags": "maggie_head_tags.py" };
-  if (!scripts[command]) throw new Error("seo command must be performance, images, sitemap, indexnow, social-cards, or head-tags");
+  if (command === "privacy-check") return workflowCli("maggie_contracts.py", ["privacy-check", ...args.slice(1)]);
+  if (!scripts[command]) throw new Error("seo command must be performance, images, sitemap, indexnow, social-cards, head-tags, or privacy-check");
   workflowCli(scripts[command], args.slice(1));
 }
 
@@ -564,6 +570,7 @@ try {
   else if (command === "clone-to-template") workflowCli("maggie_clone_to_template.py", args);
   else if (command === "design" && args[0] === "icon-inventory") workflowCli("maggie_icon_inventory.py", args.slice(1));
   else if (command === "design" && args[0] === "icon-release-gate") workflowCli("maggie_icon_release_gate.py", args.slice(1));
+  else if (command === "design" && ["progressive-check", "css-check", "css-cascade-check", "dash-init", "dash-validate", "sample-init", "sample-validate"].includes(args[0])) workflowCli("maggie_contracts.py", args);
   else if (command === "design") workflowCli("maggie_design.py", args);
   else if (command === "auth") workflowCli("maggie_auth.py", args);
   else if (command === "blog") workflowCli("maggie_blog.py", args);
@@ -590,6 +597,7 @@ try {
   else if (command === "site-audit") workflowCli("site_audit.py", args);
   else if (command === "browser-audit") workflowCli("maggie_browser_audit.py", args);
   else if (command === "verification") workflowCli("maggie_verification.py", args);
+  else if (command === "dash" && ["capabilities-validate", "structure-validate"].includes(args[0])) workflowCli("maggie_contracts.py", args);
   else if (command === "dash") workflowCli("maggie_dash.py", args);
   else if (command === "booking") workflowCli("maggie_booking.py", args);
   else if (command === "agent-content") workflowCli("maggie_agent_content.py", args);

package/bundled-contracts/maggie-design/css-utility-evidence-v1.schema.json

@@ -0,0 +1,10 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "Maggie rendered CSS utility evidence",
+  "type": "object",
+  "required": ["schemaVersion", "elements"],
+  "properties": {
+    "schemaVersion": {"const": "maggie-css-utility-evidence.v1"},
+    "elements": {"type": "array"}
+  }
+}

package/bundled-contracts/maggie-design/dashboard-surface-v1.schema.json

@@ -0,0 +1,11 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "Maggie operator dashboard surface",
+  "type": "object",
+  "required": ["schemaVersion", "route", "requiredEvidence"],
+  "properties": {
+    "schemaVersion": {"const": "maggie-dashboard-surface.v1"},
+    "route": {"type": "string"},
+    "requiredEvidence": {"type": "array", "minItems": 6}
+  }
+}

package/bundled-contracts/maggie-design/progressive-enhancement-v1.schema.json

@@ -0,0 +1,12 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "Maggie progressive enhancement evidence",
+  "type": "object",
+  "required": ["schemaVersion", "region", "initial", "states"],
+  "properties": {
+    "schemaVersion": {"const": "maggie-progressive-enhancement.v1"},
+    "region": {"type": "object", "required": ["id", "selector", "swapScope"]},
+    "initial": {"type": "object", "required": ["thirdPartyRequests", "identities"]},
+    "states": {"type": "array", "minItems": 1}
+  }
+}

package/bundled-contracts/maggie-design/sample-surface-v1.schema.json

@@ -0,0 +1,13 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "Maggie layout sample surface",
+  "type": "object",
+  "required": ["schemaVersion", "route", "noindex", "sitemapIncluded", "finishChecklist"],
+  "properties": {
+    "schemaVersion": {"const": "maggie-sample-surface.v1"},
+    "route": {"type": "string"},
+    "noindex": {"const": true},
+    "sitemapIncluded": {"const": false},
+    "finishChecklist": {"type": "array", "minItems": 1}
+  }
+}

package/bundled-contracts/maggie-seo/privacy-origin-evidence-v1.schema.json

@@ -0,0 +1,11 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "Maggie third-party privacy origin evidence",
+  "type": "object",
+  "required": ["schemaVersion", "pages", "policyOrigins"],
+  "properties": {
+    "schemaVersion": {"const": "maggie-privacy-origin-evidence.v1"},
+    "pages": {"type": "array"},
+    "policyOrigins": {"type": "array"}
+  }
+}

package/bundled-contracts/maggiedash/README.md

@@ -53,7 +53,7 @@ import.
   items with stable ordering, nesting, and safe destinations;
 - [`dashboard-runtime-v1.json`](dashboard-runtime-v1.json) defines evidence
   that an admin screen mounted, ran its checks, and completed its data calls.
-- MaggieDash 0.2.6 also ships a screen-level host adapter contract and
+- MaggieDash 0.2.7 also ships a screen-level host adapter contract and
   provider-neutral install starters in the first-party distribution. The
   `host-adapter-v2` contract lists endpoint methods, public routes, response
   content types, and required fields; `maggie dash conformance` validates

package/bundled-contracts/maggiedash/booking-access-v1.json

@@ -8,10 +8,11 @@
   "roles": ["manager", "staff", "finance"],
   "permissions": [
     "calendar.read", "bookings.read", "bookings.manage", "customers.read",
-    "catalog.read", "catalog.manage", "staff.read", "staff.manage",
-    "resources.read", "resources.manage", "schedule.read", "schedule.manage",
-    "payments.read", "payments.manage", "refunds.manage", "settings.read",
-    "settings.manage", "reports.read", "audit.read"
+    "waitlist.read", "waitlist.manage",
+    "catalog.read", "catalog.manage", "packages.read", "packages.manage", "staff.read", "staff.manage",
+    "resources.read", "resources.manage", "schedule.read", "schedule.manage", "locations.read", "locations.manage",
+    "payments.read", "payments.manage", "refunds.manage", "notifications.read", "notifications.manage",
+    "settings.read", "settings.manage", "reports.read", "audit.read"
   ],
   "endpointIds": ["booking.access.read", "booking.access.create", "booking.access.update", "booking.access.revoke"],
   "canonicalRoutes": {

package/bundled-contracts/maggiedash/booking-customer-surface-v1.json

@@ -10,6 +10,8 @@
   "hostResponsibilities": ["tenant-binding", "origin-and-csrf", "rate-limit", "bot-protection", "opaque-payment-return-token", "sealed-customer-manage-token", "provider-and-notification-adapters"],
   "endpointIds": [
     "booking.public.catalog.read",
+    "booking.public.package-checkout.start",
+    "booking.public.package-payment-return.read",
     "booking.public.availability.read",
     "booking.public.waitlist.join",
     "booking.public.hold.create",
@@ -21,7 +23,9 @@
   ],
   "canonicalRoutes": {
     "booking.public.catalog.read": "GET /catalog.json",
-    "booking.public.availability.read": "GET /availability.json?serviceVariantId={serviceVariantId}&date={date}",
+    "booking.public.package-checkout.start": "POST /package-checkout.json",
+    "booking.public.package-payment-return.read": "GET /package-payment-return.json?token={token}",
+    "booking.public.availability.read": "GET /availability.json?serviceVariantId={serviceVariantId}&locationId={locationId}&date={date}",
     "booking.public.waitlist.join": "POST /waitlist.json",
     "booking.public.hold.create": "POST /holds.json",
     "booking.public.checkout.start": "POST /checkout.json",
@@ -42,5 +46,12 @@
     "paymentReturn": "short-lived",
     "customerManage": "30-day-sealed",
     "rawTokenStorage": false
+  },
+  "packageRedemption": {
+    "holdField": "packageEntitlementId",
+    "checkoutField": "packageEntitlementId",
+    "binding": "tenant-and-customer-email",
+    "fullyCoveredOnly": true,
+    "transaction": "lock-entitlement-and-items-create-booking-write-ledger"
   }
 }

package/bundled-contracts/maggiedash/booking-email-templates-v1.json

@@ -17,6 +17,8 @@
     { "id": "booking.reminder", "variables": ["customerName", "serviceName", "when", "locationName", "bookingId", "manageUrl", "siteName"] },
     { "id": "payment.action_required", "variables": ["customerName", "serviceName", "bookingId", "actionUrl", "siteName"] },
     { "id": "payment.refunded", "variables": ["customerName", "serviceName", "bookingId", "siteName"] },
+    { "id": "package.purchase.confirmed", "variables": ["customerName", "packageName", "amount", "expiresAt", "siteName"] },
+    { "id": "package.purchase.refunded", "variables": ["customerName", "packageName", "amount", "siteName"] },
     { "id": "booking.waitlist.available", "variables": ["customerName", "serviceName", "when", "locationName", "bookingUrl", "siteName"] }
   ],
   "endpointIds": ["booking.email-templates.read", "booking.email-templates.draft", "booking.email-templates.publish", "booking.email-templates.rollback"],

package/bundled-contracts/maggiedash/booking-host-adapter-v1.json

@@ -5,16 +5,20 @@
   "schemaVersion": "maggiedash-booking-host-adapter.v1",
   "apiPrefix": "/api/maggie/booking",
   "auth": { "managerSession": "host-session-cookie", "emailPassword": true, "passkeys": false },
-  "requiredCapabilities": ["bookingOverview", "bookingCalendar", "bookingLifecycle", "customerLookup", "bookingWaitlist", "serviceCatalog", "locationSetup", "staffSetup", "resourceSetup", "paymentReconciliation", "bookingReports", "bookingSettings", "bookingAudit", "notificationOperations", "bookingAccess"],
+  "requiredCapabilities": ["bookingOverview", "bookingCalendar", "bookingLifecycle", "customerLookup", "bookingWaitlist", "serviceCatalog", "treatmentPackages", "packagePurchasePayments", "locationSetup", "staffSetup", "resourceSetup", "paymentReconciliation", "bookingReports", "bookingSettings", "bookingAudit", "notificationOperations", "bookingAccess"],
   "endpointIds": [
-    "booking.overview.read", "booking.reports.read", "booking.calendar.read", "booking.bookings.read", "booking.booking.read", "booking.booking.create", "booking.booking.transition", "booking.booking.reschedule", "booking.availability.read", "booking.holds.create", "booking.holds.release", "booking.customers.read", "booking.customer.read", "booking.waitlist.read", "booking.waitlist.update", "booking.catalog.read", "booking.catalog.write", "booking.locations.read", "booking.location.write", "booking.staff.read", "booking.staff.write", "booking.resources.read", "booking.resources.write", "booking.schedule.read", "booking.schedule.write", "booking.payments.read", "booking.payment.start", "booking.payment.reconcile", "booking.refund.start", "booking.notifications.read", "booking.notification.replay", "booking.health.read", "booking.payment-health.read", "booking.settings.read", "booking.settings.update", "booking.audit.read", "booking.events.read", "booking.runtime.read", "booking.provider.webhook"
+    "booking.overview.read", "booking.reports.read", "booking.calendar.read", "booking.bookings.read", "booking.booking.read", "booking.booking.create", "booking.booking.transition", "booking.booking.no-show-fee", "booking.booking.reschedule", "booking.availability.read", "booking.holds.create", "booking.holds.release", "booking.customers.read", "booking.customer.read", "booking.waitlist.read", "booking.waitlist.update", "booking.catalog.read", "booking.catalog.write", "booking.packages.read", "booking.package.write", "booking.customer-packages.read", "booking.customer-package.grant", "booking.package-purchases.read", "booking.package-purchase.refund", "booking.locations.read", "booking.location.write", "booking.staff.read", "booking.staff.write", "booking.resources.read", "booking.resources.write", "booking.schedule.read", "booking.schedule.write", "booking.payments.read", "booking.payment.start", "booking.payment.reconcile", "booking.refund.start", "booking.notifications.read", "booking.notification.replay", "booking.health.read", "booking.payment-health.read", "booking.payment-health.verify", "booking.settings.read", "booking.settings.update", "booking.audit.read", "booking.events.read", "booking.runtime.read", "booking.provider.webhook"
   ],
   "canonicalRoutes": {
+    "booking.booking.no-show-fee": "POST /bookings/{id}/no-show-fee.json",
+    "booking.package-purchases.read": "GET /package-purchases.json?customerId={customerId}&status={status}",
+    "booking.package-purchase.refund": "POST /package-purchases/{purchaseId}/refund.json",
     "booking.payment.start": "POST /payments/start.json",
     "booking.refund.start": "POST /refunds.json",
     "booking.notifications.read": "GET /notifications.json?status={status}",
     "booking.notification.replay": "POST /notifications/{id}/replay.json",
     "booking.payment-health.read": "GET /payment-health.json",
+    "booking.payment-health.verify": "POST /payment-health.json",
     "booking.provider.webhook": "POST /webhooks/{provider}"
   },
   "serviceMethods": {
@@ -25,6 +29,7 @@
     "booking.booking.read": "readBooking",
     "booking.booking.create": "createBooking",
     "booking.booking.transition": "transitionBooking",
+    "booking.booking.no-show-fee": "chargeNoShowFee",
     "booking.booking.reschedule": "rescheduleBooking",
     "booking.availability.read": "readAvailability",
     "booking.holds.create": "createHold",
@@ -35,6 +40,12 @@
     "booking.waitlist.update": "updateWaitlist",
     "booking.catalog.read": "readCatalog",
     "booking.catalog.write": "updateCatalog",
+    "booking.packages.read": "listPackages",
+    "booking.package.write": "updatePackage",
+    "booking.customer-packages.read": "listCustomerPackages",
+    "booking.customer-package.grant": "grantCustomerPackage",
+    "booking.package-purchases.read": "listPackagePurchases",
+    "booking.package-purchase.refund": "startPackageRefund",
     "booking.locations.read": "listLocations",
     "booking.location.write": "updateLocation",
     "booking.staff.read": "listStaff",
@@ -51,6 +62,7 @@
     "booking.notification.replay": "replayNotification",
     "booking.health.read": "readHealth",
     "booking.payment-health.read": "readPaymentHealth",
+    "booking.payment-health.verify": "verifyPaymentConnection",
     "booking.settings.read": "readSettings",
     "booking.settings.update": "updateSettings",
     "booking.audit.read": "listAudit",
@@ -63,7 +75,9 @@
     "readPublicAvailability",
     "createCustomerHold",
     "startCustomerCheckout",
+    "startCustomerPackageCheckout",
     "readCustomerPaymentReturn",
+    "readCustomerPackagePaymentReturn",
     "readCustomerManage",
     "cancelCustomerBooking",
     "rescheduleCustomerBooking",

package/bundled-contracts/maggiedash/booking-runtime.v1.json

@@ -0,0 +1,41 @@
+{
+  "schemaVersion": "maggiedash-booking-runtime.v1",
+  "generatedAt": "2026-09-20T00:00:00Z",
+  "environment": "fixture",
+  "baseUrl": "https://booking.fixture.invalid",
+  "tenant": "dedicated-fixture-tenant",
+  "endpoints": [
+    { "id": "booking.overview.read", "method": "GET", "route": "/api/maggie/booking/overview.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.calendar.read", "method": "GET", "route": "/api/maggie/booking/calendar.json?date={date}&view={view}", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.bookings.read", "method": "GET", "route": "/api/maggie/booking/bookings.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.booking.read", "method": "GET", "route": "/api/maggie/booking/bookings/{id}.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.booking.create", "method": "POST", "route": "/api/maggie/booking/bookings.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.booking.transition", "method": "POST", "route": "/api/maggie/booking/bookings/{id}/transition.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.booking.reschedule", "method": "POST", "route": "/api/maggie/booking/bookings/{id}/reschedule.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.availability.read", "method": "GET", "route": "/api/maggie/booking/availability.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.holds.create", "method": "POST", "route": "/api/maggie/booking/holds.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.holds.release", "method": "POST", "route": "/api/maggie/booking/holds/{id}/release.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.customers.read", "method": "GET", "route": "/api/maggie/booking/customers.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.customer.read", "method": "GET", "route": "/api/maggie/booking/customers/{id}.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.catalog.read", "method": "GET", "route": "/api/maggie/booking/catalog.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.catalog.write", "method": "POST", "route": "/api/maggie/booking/catalog.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.staff.read", "method": "GET", "route": "/api/maggie/booking/staff.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.staff.write", "method": "POST", "route": "/api/maggie/booking/staff.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.resources.read", "method": "GET", "route": "/api/maggie/booking/resources.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.resources.write", "method": "POST", "route": "/api/maggie/booking/resources.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.schedule.read", "method": "GET", "route": "/api/maggie/booking/schedule.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.schedule.write", "method": "POST", "route": "/api/maggie/booking/schedule.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.payments.read", "method": "GET", "route": "/api/maggie/booking/payments.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.payment.start", "method": "POST", "route": "/api/maggie/booking/payments/start.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.payment.reconcile", "method": "POST", "route": "/api/maggie/booking/payments/{id}/reconcile.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.refund.start", "method": "POST", "route": "/api/maggie/booking/refunds.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.health.read", "method": "GET", "route": "/api/maggie/booking/health.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.payment-health.read", "method": "GET", "route": "/api/maggie/booking/payment-health.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.settings.read", "method": "GET", "route": "/api/maggie/booking/settings.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.settings.update", "method": "PATCH", "route": "/api/maggie/booking/settings.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.audit.read", "method": "GET", "route": "/api/maggie/booking/audit.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.events.read", "method": "GET", "route": "/api/maggie/booking/events.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.runtime.read", "method": "GET", "route": "/api/maggie/booking/runtime.json", "status": 200, "requiredFieldsPresent": true },
+    { "id": "booking.provider.webhook", "method": "POST", "route": "/api/maggie/booking/webhooks/{provider}", "status": 200, "requiredFieldsPresent": true }
+  ]
+}