@utopia-studio-design/design-system-cli 0.6.1 → 0.7.0

package/README.md

@@ -5,11 +5,14 @@ The same structured API powers terminal output, JSON automation, generated agent
 ```sh
 npm install -D @utopia-studio-design/design-system-cli
 npx utopia-ds init . --theme utopia-default --yes
+npx utopia-ds room connect --id <room-id> --slug <room-slug> --name "Brand room" --brand "Brand" --source managed --client codex
 npx utopia-ds search "Arabic data table" --json
 npx utopia-ds component DataTable --json
 npx utopia-ds registry --list --json
 npx utopia-ds layout validate ./dashboard-layout.json --json
 npx utopia-ds layout serialize ./dashboard-layout.json
+npx utopia-ds logo-skill --list
+npx utopia-ds logo-skill combinedmark --json
 npx utopia-ds block interaction-workbench --copy ./src/interaction-workbench
 npx utopia-ds template template-saas-solution-homepage --copy ./saas-website
 npx utopia-ds template template-interaction-lab --copy ./interaction-lab
@@ -17,11 +20,35 @@ npx utopia-ds template template-dashboard-composer --copy ./dashboard-composer
 npx utopia-ds template template-saas-solution-homepage --theme dextrum --copy ./dextrum-website
 npx utopia-ds template validate ./my-community-template
 npx utopia-ds template submit ./my-community-template
-npx utopia-ds theme create nova
 npx utopia-ds manifest --json
 npx utopia-ds mcp
 ```
 
+`room connect` writes a non-secret `.ceramic/room.json` manifest in the local
+workspace. The MCP server exposes it through `get_room_context`, so Codex,
+Claude Code, and Cursor can identify the exact Ceramic Brand Room while using
+the same component, theme, template, and documentation contracts.
+The initializer writes both Claude Code's project configuration (`.mcp.json`)
+and Cursor's project configuration (`.cursor/mcp.json`). Codex uses its own
+`codex mcp add` registration command shown by the Ceramic onboarding flow.
+
+Logo Maker uses the same six-skill manifest in the browser and MCP. MCP clients
+can call `list_logo_skills`, `get_logo_skill`, then
+`prepare_logo_maker_run`. The prepared run includes Brand Room context, the
+selected skill prompt, reference ids, review policy, and the next approval-safe
+step. It also returns the shared Logo Quality Check gates from
+`docs/design-system/logo-maker-methodology.md`; it never implies that a draft
+was evaluated, approved, or published before artifact evidence exists.
+
+`theme create` is a source-authoring operation rather than a consumer-project command. Run it from the root of the Ceramic Design System repository after installing the workspace dependencies:
+
+```sh
+npm install
+npm run ds -- theme create your-theme-name
+```
+
+Replace `your-theme-name` with the lowercase kebab-case ID you want for the theme.
+
 Programmatic consumers can import `@utopia-studio-design/design-system-cli/api`.
 The Ceramic Composition Registry and versioned Layout JSON are the source of
 truth for agent and Studio dashboard composition. The Dashboard Composer's
@@ -40,12 +67,3 @@ Use `npm run build` before deployment. The generated project pins a compatible
 Ceramic package range and splits the optional Puck editor dependencies into
 separate production chunks; the validated Layout JSON and registry renderer
 remain usable without opening the visual editor.
-
-## 0.6.1 patch
-
-Copied templates resolve their own navigation at the standalone project root.
-Dashboard Composer opens `/visual-editor/` and returns to `/`; links to another
-template use the hosted Ceramic preview. The seven-template catalog and Ceramic
-0.8.x dependency range are unchanged. Official starter verification uses
-`npm run build` and runtime checks. `template validate` remains a community
-submission check requiring a separately authored `ceramic.template.json`.

package/bin/utopia-ds-mcp.mjs

@@ -1,11 +1,12 @@
 #!/usr/bin/env node
 import {
-  capabilityManifest, getBlock, getBlockDefinition, getComponent, getDoc, getMotionProfile, getTemplate, getTheme,
-  listBlockDefinitions, listBlocks, listComponents, listDocs, listMotionProfiles, listTemplates, listThemes,
+  capabilityManifest, getBlock, getBlockDefinition, getComponent, getDoc, getLogoSkill, getMotionProfile, getRoomContext, getTemplate, getTheme,
+  listBlockDefinitions, listBlocks, listComponents, listDocs, listLogoSkills, listMotionProfiles, listTemplates, listThemes, prepareLogoMakerRun,
   repositoryDoctor, search, validateAgentMutation, validateLayout,
 } from '../lib/api.mjs'
 
 const tools = [
+  ['get_room_context', 'Read the Brand Room context connected to this local workspace.', {}, () => getRoomContext()],
   ['search', 'Search components, docs, templates, themes, and motion profiles.', { query: { type: 'string' } }, ({ query }) => search(query)],
   ['list_components', 'List every Ceramic component contract.', {}, () => listComponents()],
   ['get_component', 'Get one component including imports, tokens, usage, and Arabic rules.', { name: { type: 'string' } }, ({ name }) => getComponent(name)],
@@ -21,6 +22,9 @@ const tools = [
   ['get_theme', 'Get a theme policy and semantic mappings.', { id: { type: 'string' } }, ({ id }) => getTheme(id)],
   ['list_motion_profiles', 'List theme-owned semantic motion personalities.', {}, () => listMotionProfiles()],
   ['get_motion_profile', 'Get a motion profile, its rules, contract, and compatible runtime adapters.', { id: { type: 'string' } }, ({ id }) => getMotionProfile(id)],
+  ['list_logo_skills', 'List the established Logo Maker skill structures and their governed guidance.', {}, () => listLogoSkills()],
+  ['get_logo_skill', 'Read one Logo Maker skill contract by id or name.', { id: { type: 'string' } }, ({ id }) => getLogoSkill(id)],
+  ['prepare_logo_maker_run', 'Prepare a Brand Room-aware Logo Maker chat run using the same skill contract as Ceramic UI. This does not approve or publish the result.', { skillId: { type: 'string' }, brandName: { type: 'string' }, brief: { type: 'string' }, referenceIds: { type: 'array', items: { type: 'string' }, maxItems: 3 } }, (input) => prepareLogoMakerRun(input)],
   ['list_docs', 'List AI-readable design-system documents.', {}, () => listDocs()],
   ['get_docs', 'Read one design-system document.', { topic: { type: 'string' } }, ({ topic }) => getDoc(topic)],
   ['doctor', 'Validate the Ceramic source of truth.', {}, () => repositoryDoctor()],

package/bin/utopia-ds.mjs

@@ -1,19 +1,20 @@
 #!/usr/bin/env node
 import { cpSync, existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from 'node:fs'
-import { dirname, join, resolve } from 'node:path'
+import { basename, dirname, join, resolve } from 'node:path'
 import { spawn } from 'node:child_process'
 import {
-  capabilityManifest, envelope, getBlock, getBlockDefinition, getComponent, getDoc, getMotionProfile, getTemplate, getTheme,
-  listBlockDefinitions, listBlocks, listComponents, listDocs, listMotionProfiles, listTemplates, listThemes, mcpLaunch,
+  capabilityManifest, envelope, getBlock, getBlockDefinition, getComponent, getDoc, getLogoSkill, getMotionProfile, getTemplate, getTheme,
+  listBlockDefinitions, listBlocks, listComponents, listDocs, listLogoSkills, listMotionProfiles, listTemplates, listThemes, mcpLaunch,
   repositoryDoctor, search, serializeLayout, validateLayout,
 } from '../lib/api.mjs'
 import { createTemplateSubmissionUrl, validateTemplateSubmission } from '../lib/template-submission.mjs'
+import { resolveTemplateContract, TEMPLATE_MODES } from '../lib/template-runtime.mjs'
 import { installCliTelemetry } from '../lib/telemetry.mjs'
 
 const args = process.argv.slice(2)
 const command = args.find((arg) => !arg.startsWith('--')) ?? 'help'
 const commandIndex = args.indexOf(command)
-const optionsWithValues = new Set(['--copy', '--theme'])
+const optionsWithValues = new Set(['--copy', '--theme', '--mode', '--id', '--slug', '--name', '--brand', '--source', '--client', '--directory'])
 const values = commandIndex >= 0 ? positionalValues(args.slice(commandIndex + 1)) : []
 const json = args.includes('--json')
 const dense = args.includes('--dense')
@@ -72,6 +73,7 @@ Usage: utopia-ds <command> [options]
 
 Commands:
   init [directory] [--theme <id>] [--yes]  Add Ceramic and agent instructions
+  room connect --id <id> --brand <name>    Connect this workspace to a Brand Room
   search <query>                           Search every design-system domain
   component <Name>|--list                 Inspect component contracts
   registry <block-id>|--list              Inspect agent-editable block definitions
@@ -79,13 +81,14 @@ Commands:
   layout serialize <file>                 Print canonical Ceramic Layout JSON
   block <id>|--list [--copy <directory>]  Inspect or copy a composed interaction block
   template <id>|--list [--skeleton]       Inspect starter structures
-  template <id> --copy <directory> [--theme <id>]
+  template <id> --copy <directory> [--theme <id>] [--mode exact|adapt|explore]
                                               Generate a themed runnable project
   template validate [directory]               Validate a community submission
   template submit [directory]                 Open a validated GitHub review request
   theme <id>|--list                       Inspect theme contracts
   theme create <id> [directory]           Scaffold and register a theme
   motion <id>|--list                      Inspect motion personalities and adapters
+  logo-skill <id>|--list                  Inspect Logo Maker skill structures
   docs <topic>|--list                     Read design-system guidance
   manifest                                Print the self-describing CLI contract
   doctor                                  Validate the design-system source
@@ -146,8 +149,8 @@ function scaffoldTheme() {
     '--motion-ease-standard': 'cubic-bezier(0.2, 0, 0, 1)', '--motion-ease-emphasized': 'cubic-bezier(0.16, 1, 0.3, 1)',
     '--motion-ease-icon': 'cubic-bezier(0.16, 1, 0.3, 1)', '--motion-press-scale': '0.985', '--motion-distance-page': '0px',
     '--motion-distance-reveal': '0px', '--font-sans': 'ui-sans-serif, sans-serif', '--font-display': 'ui-sans-serif, sans-serif', '--font-ui-support': 'ui-sans-serif, sans-serif',
-    '--font-marketing-display': 'ui-sans-serif, sans-serif', '--font-arabic': 'IBM Plex Sans Arabic', '--font-arabic-body': 'IBM Plex Sans Arabic',
-    '--font-arabic-display': 'IBM Plex Sans Arabic', '--font-weight-arabic-body': '400', '--font-weight-arabic-display': '700',
+    '--font-marketing-display': 'ui-sans-serif, sans-serif', '--font-arabic': 'Readex Pro', '--font-arabic-body': 'Readex Pro',
+    '--font-arabic-display': 'Readex Pro', '--font-weight-arabic-body': '300', '--font-weight-arabic-display': '500',
     '--font-size-display': 'clamp(2.75rem, 7vw, 5.5rem)', '--font-size-arabic-body': '16px', '--font-size-arabic-body-lg': '18px',
     '--font-size-arabic-display': 'clamp(2.625rem, 6.6vw, 5.25rem)', '--line-height-arabic': '1.75', '--line-height-arabic-body': '1.75',
     '--line-height-arabic-display': '1.14', '--tracking-arabic': '0', '--tracking-arabic-display': '0', '--sidebar-width': '17rem',
@@ -161,7 +164,7 @@ function scaffoldTheme() {
     motionProfile: 'precise',
     summary: `${name} neutral theme scaffold mapped to the Ceramic semantic contract; replace placeholder primitives before release.`,
     sourceFiles: [`packages/design-system/src/themes/${id}.css`, `packages/design-system/src/manifests/theme-${id}.json`],
-    brandPrimitives: { colors: { background: themeValues['--background'], foreground: themeValues['--foreground'], accent: themeValues['--primary'] }, typography: { latin: 'Unassigned', arabic: 'IBM Plex Sans Arabic' }, geometry: { controlRadius: themeValues['--radius-control'], surfaceRadius: themeValues['--radius-surface'] } },
+    brandPrimitives: { colors: { background: themeValues['--background'], foreground: themeValues['--foreground'], accent: themeValues['--primary'] }, typography: { latin: 'Unassigned', arabic: 'Readex Pro' }, geometry: { controlRadius: themeValues['--radius-control'], surfaceRadius: themeValues['--radius-surface'] } },
     semanticMappings: Object.fromEntries(Object.entries(themeValues).map(([token, value]) => [token, value])),
     visualPolicy: { tone: ['neutral', 'restrained', 'unfinished-by-design'], allow: ['semantic color roles', 'logical layout properties', 'theme-owned brand expression'], avoid: ['shipping placeholder primitives', 'generic SaaS gradients', 'default purple accents', 'component-specific color literals', 'left/right-only layout APIs'] },
     arabicFriendly: { direction: 'Support dir="rtl" with logical CSS properties.', typography: 'Use the declared Arabic family without Latin tracking or casing.' },
@@ -211,11 +214,41 @@ function init() {
   write(join(target, '.cursor/rules/ceramic-design-system.mdc'), `---\ndescription: Ceramic Design System rules\nalwaysApply: true\n---\n\n${rules}`)
   write(join(target, '.github/copilot-instructions.md'), rules)
   write(join(target, '.ceramic/config.json'), `${JSON.stringify({ apiVersion: 1, theme, motionProfile: getTheme(theme)?.motionProfile, arabicFriendly: true, source: '@utopia-studio-design/design-system' }, null, 2)}\n`)
-  write(join(target, '.mcp.json'), `${JSON.stringify({ mcpServers: { ceramic: mcpLaunch } }, null, 2)}\n`)
-  output('init-result', { ok: true, target, theme, files: ['AGENTS.md', 'CLAUDE.md', '.cursor/rules/ceramic-design-system.mdc', '.github/copilot-instructions.md', '.ceramic/config.json', '.mcp.json'] },
+  const mcpConfiguration = `${JSON.stringify({ mcpServers: { ceramic: mcpLaunch } }, null, 2)}\n`
+  write(join(target, '.mcp.json'), mcpConfiguration)
+  write(join(target, '.cursor/mcp.json'), mcpConfiguration)
+  output('init-result', { ok: true, target, theme, files: ['AGENTS.md', 'CLAUDE.md', '.cursor/rules/ceramic-design-system.mdc', '.cursor/mcp.json', '.github/copilot-instructions.md', '.ceramic/config.json', '.mcp.json'] },
     (data) => `Ceramic initialized in ${data.target}.\nCreated ${data.files.join(', ')}.`)
 }
 
+function connectRoom() {
+  if (values[0] !== 'connect') return fail('Room requires the connect subcommand.', 'ERR_ROOM_COMMAND')
+  const id = argAfter('--id', null)
+  const slug = argAfter('--slug', null)
+  const roomName = argAfter('--name', undefined)
+  const brandName = argAfter('--brand', undefined)
+  const sourceMode = argAfter('--source', null)
+  const client = argAfter('--client', null)
+  const directory = argAfter('--directory', process.cwd())
+  if ([id, slug, sourceMode, client, directory].some((value) => value == null)) return
+  if (!['managed', 'existing', 'blank'].includes(sourceMode)) return fail(`Unknown Brand Room source mode "${sourceMode}".`, 'ERR_ROOM_SOURCE')
+  if (!['browser', 'codex', 'claude', 'cursor'].includes(client)) return fail(`Unknown Ceramic client "${client}".`, 'ERR_ROOM_CLIENT')
+  const target = resolve(directory)
+  const room = {
+    apiVersion: 1,
+    id,
+    slug,
+    roomName: roomName ?? slug,
+    brandName: brandName ?? slug,
+    sourceMode,
+    client,
+    connectedAt: new Date().toISOString(),
+  }
+  write(join(target, '.ceramic', 'room.json'), `${JSON.stringify(room, null, 2)}\n`)
+  output('room-connect-result', { ok: true, target, room, file: '.ceramic/room.json' },
+    (data) => `Connected ${data.room.brandName} (${data.room.roomName}) to ${data.target}.\nMCP can now read this Room with get_room_context.`)
+}
+
 function runMcp() {
   const child = spawn(process.execPath, [join(dirname(new URL(import.meta.url).pathname), 'utopia-ds-mcp.mjs')], { stdio: 'inherit' })
   child.on('exit', (code) => { process.exitCode = code ?? 0 })
@@ -229,24 +262,39 @@ function copyTemplateProject(entry) {
   const theme = argAfter('--theme', 'utopia-default')
   if (!theme) return
   if (!getTheme(theme)) return fail(`Unknown theme "${theme}".`, 'ERR_THEME', listThemes().map((item) => item.id))
+  const mode = argAfter('--mode', entry.executionContract?.defaultMode ?? 'adapt')
+  if (!mode) return
+  if (!TEMPLATE_MODES.includes(mode)) return fail(`Unknown template mode "${mode}".`, 'ERR_TEMPLATE_MODE', TEMPLATE_MODES)
+  const templateContract = entry.executionContract ? resolveTemplateContract(entry, { mode, theme }) : null
   if (existsSync(target) && !args.includes('--force')) return fail(`Target already exists: ${target}. Pass --force to overwrite it.`, 'ERR_TARGET_EXISTS')
   const source = resolve(dirname(new URL(import.meta.url).pathname), '..', 'data', entry.bundlePath)
   if (!existsSync(source)) return fail(`Runnable bundle is missing for "${entry.id}".`, 'ERR_TEMPLATE_BUNDLE')
-  cpSync(source, target, { recursive: true, force: args.includes('--force') })
+  const generatedDirectories = new Set(['.next', 'node_modules', 'out'])
+  cpSync(source, target, {
+    recursive: true,
+    force: args.includes('--force'),
+    filter: (sourcePath) => !generatedDirectories.has(basename(sourcePath)),
+  })
 
   const replaceTheme = (directory) => {
     for (const name of readdirSync(directory)) {
       const path = join(directory, name)
       if (statSync(path).isDirectory()) replaceTheme(path)
-      else if (/\.(html|tsx|md)$/.test(name)) {
-        // Local links follow the copied template root; other templates stay hosted.
+      else if (/\.(css|html|tsx|md)$/.test(name)) {
+        let content = readFileSync(path, 'utf8')
+        // Resolve the copied template locally; other templates remain hosted previews.
         const templateSlug = entry.id.replace(/^template-/, '')
-        const content = readFileSync(path, 'utf8')
-          .replace(/(["'`])\/templates\/([a-z0-9-]+)\//g, (_match, quote, slug) =>
-            slug === templateSlug ? `${quote}/` : `${quote}https://design.utopia-studio.co/templates/${slug}/`)
-          .replace('Open live composer</a>', 'Open live composer (hosted preview)</a>')
-          .replaceAll('/themes/utopia-default.css', `/themes/${theme}.css`)
+        content = content.replace(/(["'`])\/templates\/([a-z0-9-]+)\//g, (_match, quote, slug) =>
+          slug === templateSlug ? `${quote}/` : `${quote}https://design.utopia-studio.co/templates/${slug}/`)
+        content = content.replace('Open live composer</a>', 'Open live composer (hosted preview)</a>')
+        if (!content.includes("const defaultTheme: TemplateTheme = 'utopia-default'")) {
+          content = content
+            .replaceAll('/themes/utopia-default.css', `/themes/${theme}.css`)
+            .replaceAll("@import './utopia-default.css';", `@import '@utopia-studio-design/design-system/themes/${theme}.css';`)
+        }
+        content = content
           .replaceAll('data-theme="utopia-default"', `data-theme="${theme}"`)
+          .replaceAll("const defaultTheme: TemplateTheme = 'utopia-default'", `const defaultTheme: TemplateTheme = '${theme}'`)
           .replaceAll("const activeTheme = 'utopia-default'", `const activeTheme = '${theme}'`)
         write(path, content)
       }
@@ -263,6 +311,25 @@ function copyTemplateProject(entry) {
   const cliDependency = existsSync(join(workspaceCli, 'package.json'))
     ? `file:${workspaceCli}`
     : `^${cliVersion}`
+  if (entry.runtime === 'nextjs') {
+    const packagePath = join(target, 'package.json')
+    const packageDocument = JSON.parse(readFileSync(packagePath, 'utf8'))
+    packageDocument.name = packageName
+    packageDocument.dependencies = {
+      ...packageDocument.dependencies,
+      '@utopia-studio-design/design-system': designSystemDependency,
+    }
+    packageDocument.devDependencies = {
+      ...packageDocument.devDependencies,
+      '@utopia-studio-design/design-system-cli': cliDependency,
+    }
+    write(packagePath, `${JSON.stringify(packageDocument, null, 2)}\n`)
+    write(join(target, '.ceramic/config.json'), `${JSON.stringify({ apiVersion: 1, theme, template: entry.id, templateMode: mode, motionProfile: getTheme(theme)?.motionProfile, motionAdapter: 'framer-motion', arabicFriendly: true, source: '@utopia-studio-design/design-system' }, null, 2)}\n`)
+    if (templateContract) write(join(target, '.ceramic/template-contract.json'), `${JSON.stringify(templateContract, null, 2)}\n`)
+    const existingReadme = readFileSync(join(target, 'README.md'), 'utf8')
+    write(join(target, 'README.md'), `# Generated ${entry.title}\n\nActive theme: \`${theme}\`\n\n\`\`\`sh\nnpm install\nnpm run dev\n\`\`\`\n\nOpen \`http://localhost:3000/\`.\n\n${existingReadme}`)
+    return output('template-copy-result', { ok: true, id: entry.id, target, theme, runtime: 'nextjs', pages: entry.pages ?? [] }, (data) => `Generated ${data.id} with theme ${data.theme} in ${data.target}.\nNext: cd ${data.target} && npm install && npm run dev`)
+  }
   write(join(target, 'package.json'), `${JSON.stringify({
     name: packageName,
     private: true,
@@ -279,7 +346,8 @@ function copyTemplateProject(entry) {
     },
     devDependencies: { '@utopia-studio-design/design-system-cli': cliDependency, '@vitejs/plugin-react': '^4.3.4', typescript: '^5.7.2', vite: '^6.0.7' },
   }, null, 2)}\n`)
-  write(join(target, '.ceramic/config.json'), `${JSON.stringify({ apiVersion: 1, theme, motionProfile: getTheme(theme)?.motionProfile, motionAdapter: 'framer-motion', arabicFriendly: true, source: '@utopia-studio-design/design-system' }, null, 2)}\n`)
+  write(join(target, '.ceramic/config.json'), `${JSON.stringify({ apiVersion: 1, theme, template: entry.id, templateMode: mode, motionProfile: getTheme(theme)?.motionProfile, motionAdapter: 'framer-motion', arabicFriendly: true, source: '@utopia-studio-design/design-system' }, null, 2)}\n`)
+  if (templateContract) write(join(target, '.ceramic/template-contract.json'), `${JSON.stringify(templateContract, null, 2)}\n`)
   const htmlEntries = []
   const collectHtml = (directory, prefix = '') => {
     for (const name of readdirSync(directory)) {
@@ -294,7 +362,7 @@ function copyTemplateProject(entry) {
   write(join(target, 'vite.config.ts'), `import { resolve } from 'node:path'\nimport react from '@vitejs/plugin-react'\nimport { defineConfig } from 'vite'\n\nexport default defineConfig({\n  plugins: [react()],\n  build: {\n    rollupOptions: {\n      input: {\n${viteInputs}\n      },\n      output: {\n        manualChunks(id) {\n          if (id.includes('node_modules/@dnd-kit/')) return 'puck-dnd'\n          if (id.includes('node_modules/@tanstack/react-virtual')) return 'puck-virtual'\n          if (id.includes('node_modules/@radix-ui/')) return 'radix'\n          if (\n            id.includes('node_modules/clsx')\n            || id.includes('node_modules/class-variance-authority')\n            || id.includes('node_modules/tailwind-merge')\n            || id.includes('node_modules/tiny-invariant')\n          ) return 'ui-utils'\n          if (id.includes('node_modules/react-dom') || id.includes('node_modules/react/')) return 'react'\n          return undefined\n        },\n      },\n    },\n  },\n})\n`)
   const existingReadme = readFileSync(join(target, 'README.md'), 'utf8')
   write(join(target, 'README.md'), `# Generated ${entry.title}\n\nActive theme: \`${theme}\`\n\n\`\`\`sh\nnpm install\nnpm run dev\n\`\`\`\n\nOpen \`http://localhost:5173/\`.\n\n${existingReadme}`)
-  output('template-copy-result', { ok: true, id: entry.id, target, theme, pages: entry.pages ?? [] }, (data) => `Generated ${data.id} with theme ${data.theme} in ${data.target}.\nNext: cd ${data.target} && npm install && npm run dev`)
+  output('template-copy-result', { ok: true, id: entry.id, target, theme, mode, pages: entry.pages ?? [] }, (data) => `Generated ${data.id} in ${data.mode} mode with theme ${data.theme} in ${data.target}.\nNext: cd ${data.target} && npm install && npm run dev`)
 }
 
 function copyBlock(entry) {
@@ -434,11 +502,16 @@ else if (command === 'search') {
   const name = values[0]
   if (!name || args.includes('--list')) output('motion-profile-list', listMotionProfiles(), (rows) => rows.map((item) => `${item.id}|${item.themes.join(',')}|${item.label}|${item.description}`).join('\n'))
   else { const item = getMotionProfile(name); item ? output('motion-profile', item) : fail(`Unknown motion profile "${name}".`, 'ERR_MOTION_PROFILE', listMotionProfiles().map((item) => item.id)) }
+} else if (command === 'logo-skill') {
+  const name = values[0]
+  if (!name || args.includes('--list')) output('logo-skill-list', listLogoSkills(), (rows) => rows.map((item) => `${item.id}|${item.name}|${item.tagline}|${item.example}`).join('\n'))
+  else { const item = getLogoSkill(name); item ? output('logo-skill', item) : fail(`Unknown logo skill "${name}".`, 'ERR_LOGO_SKILL', listLogoSkills().map((item) => item.id)) }
 } else if (command === 'docs') {
   const topic = values[0]
   if (!topic || args.includes('--list')) output('docs-list', listDocs(), (rows) => rows.join('\n'))
   else { const item = getDoc(topic); item ? output('docs', item, (doc) => dense ? doc.content.replace(/\n{2,}/g, '\n').trim() : doc.content) : fail(`Unknown docs topic "${topic}".`, 'ERR_DOCS', listDocs()) }
 } else if (command === 'doctor') {
   const result = repositoryDoctor(); output('doctor-result', result, (data) => data.ok ? `Ceramic doctor passed. ${data.checks.components} components, ${data.checks.blocks} blocks, ${data.checks.templates} templates, ${data.checks.themes} themes, ${data.checks.motionProfiles} motion profiles, MCP ready.` : `Ceramic doctor failed: ${data.missing.join(', ')}`); if (!result.ok) process.exitCode = 1
-} else if (command === 'mcp') runMcp()
+} else if (command === 'room') connectRoom()
+else if (command === 'mcp') runMcp()
 else fail(`Unknown command "${command}".`, 'ERR_COMMAND', capabilityManifest().commands.map((item) => item.name))

package/data/docs/arabic-friendly.md

@@ -31,9 +31,26 @@ Arabic typography needs its own role contract. It is not Latin typography transl
 - Required display roles: `--font-size-arabic-display`, `--font-weight-arabic-display`, and `--tracking-arabic-display`.
 - Required body roles: `--font-size-arabic-body`, `--font-size-arabic-body-lg`, `--font-weight-arabic-body`, and `--tracking-arabic`.
 - Arabic display text must use scale, weight, rhythm, and Arabic display typeface rules. Do not map Latin all-caps styling to Arabic.
-- Arabic display size should track the Latin display scale at about 95%, rather than becoming visually larger than the Latin equivalent.
+- Arabic display size should track the Latin display scale at about 90–92%. Arabic renders optically larger at equal px, so parity in numbers is not parity on screen.
+- Arabic display line height must be at least 1.28. Below that, ل and ك ascenders collide with the ج and ي descenders on the line above. This is a hard floor, not a preference.
+- Arabic display weight must not exceed 500. Bold Arabic closes the counters of ه, ع and ص at display size, and the Latin display face runs at 350.
 - Arabic contexts must force `text-transform: none`.
 
+## Arabic Orthography Requirements
+
+Arabic copy in this repo is inconsistent about the tanwīn. Standardise:
+
+- Write the tanwīn alif. `بدلًا`, not `بدلا`.
+- Place the fatḥatān on the letter **before** the alif, never on the alif itself:
+  `مرجعًا` not `مرجعاً`, `معًا` not `معاً`, `أبدًا` not `أبداً`.
+- Do not transliterate product or technical names. Ceramic, Utopia, MCP, CLI,
+  React, shadcn/ui, token, RTL stay Latin, inline, unquoted.
+- Numerals stay Western (104, 6, v0.9.0) in both locales — the docs are full of
+  versions and counts.
+- Use the Arabic ellipsis character `…`, not three periods.
+- `الوكلاء` on its own reads as sales agents. First mention on any page:
+  `وكلاء الذكاء الاصطناعي`.
+
 ## RTL Layout Requirements
 
 Every reusable component and template must be written in logical layout terms.
@@ -69,4 +86,4 @@ The design system should include Arabic/RTL previews for:
 - Empty state.
 - Side navigation.
 
-Mockups may use clearly marked test placeholder Arabic. They must not invent production Arabic marketing copy.
+Mockups may use clearly marked test placeholder Arabic. They must not invent production Arabic marketing copy. Reviewed strings live in `src/i18n.tsx` and the locale copy objects in each page — agents copy from there, they do not write new ones.

package/data/docs/billing-setup.md

@@ -0,0 +1,80 @@
+# Billing setup (Polar + Clerk + Convex)
+
+Minimal path to recurring subscriptions. Matches [Studio Product Framework](https://github.com/The-Utopia-Studio/studio-product-framework) defaults.
+
+## 1. Clerk (StudioOS)
+
+Use the **StudioOS** Clerk application (`included-seahorse-61`):
+
+1. Confirm JWT template named **`convex`** exists (Clerk → JWT templates). Issuer must be `https://included-seahorse-61.clerk.accounts.dev`.
+2. Copy publishable key → `VITE_UTOPIA_OS_CLERK_PUBLISHABLE_KEY`
+3. Issuer → Convex env `CLERK_JWT_ISSUER_DOMAIN` = `https://included-seahorse-61.clerk.accounts.dev`
+
+## 2. Convex (this repo)
+
+Deployments (team **thestudio**, project **ceramic-design-system**):
+
+| Env | Deployment | Cloud URL | Site URL (webhooks) |
+|-----|------------|-----------|---------------------|
+| Dev | `nautical-goldfish-225` | `https://nautical-goldfish-225.convex.cloud` | `https://nautical-goldfish-225.convex.site` |
+| Prod | `mellow-fox-829` | `https://mellow-fox-829.convex.cloud` | `https://mellow-fox-829.convex.site` |
+
+```sh
+npm install
+npx convex dev   # links dev deployment, generates convex/_generated
+npx convex deploy --yes   # production (mellow-fox-829)
+```
+
+Set Convex environment variables:
+
+| Variable | Purpose |
+|----------|---------|
+| `CLERK_JWT_ISSUER_DOMAIN` | Clerk JWT issuer |
+| `POLAR_ACCESS_TOKEN` | Polar API token |
+| `POLAR_ORGANIZATION_ID` | Polar org id |
+| `POLAR_WEBHOOK_SECRET` | Webhook signing secret |
+| `POLAR_SERVER` | `sandbox` or `production` |
+| `FRONTEND_URL` | `https://design.utopia-studio.co` |
+
+Point the Vite app at this deployment:
+
+```env
+VITE_UTOPIA_OS_CONVEX_URL=https://YOUR.deployment.convex.cloud
+VITE_UTOPIA_OS_CLERK_PUBLISHABLE_KEY=pk_...
+VITE_CERAMIC_BILLING_ENABLED=true
+VITE_UTOPIA_OS_FELLOW_ENABLED=false
+```
+
+`VITE_UTOPIA_OS_FELLOW_ENABLED=false` skips Daedalus fellow queries when this Convex deployment only has Ceramic billing functions.
+
+## 3. Polar
+
+1. Create one active recurring **annual** Ceramic Membership product. V1 intentionally does not expose monthly prices.
+2. Register webhook URL:
+   - **Prod:** `https://mellow-fox-829.convex.site/polar/webhook`
+   - **Dev:** `https://nautical-goldfish-225.convex.site/polar/webhook`
+   (see `convex/http.ts`).
+3. Subscribe to subscription.* events.
+
+## 4. Vercel
+
+Add the same `VITE_*` vars to the Vercel project. Convex env vars are set in the Convex dashboard, not Vercel.
+
+## Plans (v1)
+
+| Plan | Entitlements (domain rules in `src/domain/entitlements.ts`) |
+|------|---------------------------------------------------------------|
+| `free` | Marketing, pricing, authentication, and legal pages only |
+| `pro` | All Docs, components, themes, templates, MCP setup, and the member production journey |
+| `team` | Same V1 content access; managed Brand Rooms remain a V2 feature |
+
+Admins (`userType === 'admin'`) always get full access regardless of subscription.
+
+After Polar confirms checkout, the customer returns to `#/onboarding-v2`. The managed Brand Room journey starts with project identity, brand sources, design agent, and review.
+
+Checkout returns to `#/onboarding-v2` on the origin that opened it. The server
+accepts the configured `FRONTEND_URL`; Polar sandbox additionally accepts HTTP
+loopback origins (`localhost` and `127.0.0.1`) so local testing keeps its Clerk
+session. Production checkout never accepts a client-provided external origin.
+
+The browser gate protects rendered product routes. Do not treat client-bundled files or a publicly published npm package as a security boundary; authenticated remote content and MCP entitlement enforcement are required before private source material is distributed.

package/data/docs/cer-003-032-033-round-8-repair.md

@@ -0,0 +1,41 @@
+# Round 8 제작 흐름 수정
+
+2026-09-05. 전달된 Round 8 보고서의 CER-032·033, CER-003의 예제/실행 경계와 로컬 저장, CER-021의 접근 가능성 오표기를 수정했다.
+
+## 수정
+
+- **CER-032:** 복사 버튼이 자신의 Claude/ChatGPT 대상을 명시적으로 프롬프트 빌더에 전달한다. 선택 버튼은 전체 프롬프트 미리보기의 대상을 제어한다. 실제 복사 → 텍스트 필드 붙여넣기로 Claude/ChatGPT 선택 × 두 복사 버튼의 네 조합을 검사했으며, 모두 버튼에 표시된 대상과 일치했다.
+- **CER-033:** 프롬프트 조립을 `src/domain/presentation-prompt.ts`로 분리했다. 명시적인 브리프의 장수, 선택 브랜드, 산출물 설정을 우선한다. 고정 12–15장 지시를 없앴고, 사용자 브랜드에는 Utopia 색상·폰트·참조 저장소를 요구하지 않는다. PPTX/PDF 선택 시 index.html·웹 이미지 폴더·HTML 제작 스킬·브라우저 모션 검증을 제거했다. 기본 이미지 라이브러리 안내에도 같은 출력 조건을 적용했다. 아랍어 프롬프트의 누락된 브리프도 복원했다.
+- **CER-003 경계:** 연결된 서버 룸·서비스·작업 세션이 없으면 로고 생성·수정·승인을 실행할 수 없다. 로컬 예제임을 입력 영역에서 먼저 알리고, 실제 생성/파일 수정/자산 등록을 하지 않는다고 명시한다. 정적인 마크를 생성 결과로 주장하지 않는다. 로고 가이드로 이동할 때 브랜드 문맥과 브리프를 전달한다.
+- **CER-003 저장:** 새로 만든 preview room뿐 아니라 기존 로컬 예제 방에도 브리프·대화 상태 저장과 복원을 적용했다. 실제 서버 룸에는 기존 서버 저장 경로를 유지한다. 로컬 저장 오류는 안내한다. 개발용 예제에서 입력 후 reload하여 같은 브리프가 복원됨을 확인했다.
+- **CER-021:** utopia-os-deck를 공개·접근 가능하다고 단정하지 않는다. 접근 실패 시 유효한 URL 또는 승인된 로컬 사본을 요청하며, 읽지 않은 참조를 확인했다고 주장하지 않는다. 사용자 브랜드에는 이 저장소를 필수 조건으로 붙이지 않는다.
+
+## 검증
+
+- `npx vitest run src/domain/round-8-prompts.test.ts src/domain/theme-handoff.test.ts`: 16개 통과.
+- TypeScript, semantic page ownership audit, production Vercel build 통과.
+- 로컬 실제 클립보드 4개 조합 통과.
+- 실제 Presentation Studio에서 exactly 3 slides, custom brand `/approved/qa-orbit`, PPTX/PDF를 선택하고 복사·붙여넣기: 브리프와 브랜드 포함, 고정 장수·Utopia 색상·index.html·Utopia 참조 저장소 필수 지시 없음.
+- 개발용 로컬 Agent 예제: 생성 버튼 disabled, 사전 안내 표시, 브리프 reload 복원, 로고 가이드로 브리프 전달 확인. 실제 계정 권한이나 멤버십을 변경하지 않았다.
+- Rams quick_review는 기존 30회 크레딧 소진으로 실행되지 않았다. 점수 없음.
+
+## 남은 검증과 차단
+
+**CER-003의 실제 서버 생성·수정·다운로드·저장 재개 검증은 아직 완료하지 않았다.** 이 수정은 예제를 실제 생성처럼 보이게 하는 동작을 차단한 것이며, 서버 제작 파이프라인 전체 성공을 의미하지 않는다. 기존 실제 브랜드의 생성 작업은 새로 실행하거나 변경하지 않았다.
+
+`gh repo view The-Utopia-Studio/utopia-os-deck`는 이번에도 resolve에 실패했다. 접근 가능한 PPT 참조 주소/로컬 사본을 사용자에게 요청했다. 실제 PPTX/PDF 제작·열기·등록, SVG 변환·대표 로고 지정·서버 공유 검증은 여전히 남아 있다. 권한 문제인지 주소 문제인지는 확정하지 않았다.
+
+이번 변경은 웹 앱의 페이지·도메인 프롬프트 코드이며 npm 공용 패키지 코드와 Convex 백엔드는 변경하지 않았다. 기존 공개 버전 design-system 0.9.0 / CLI 0.6.2는 유지한다.
+
+## HTML 우선 기준 및 Docs 후속 수정
+
+사용자의 후속 지시에 따라 애니메이션 HTML이 기본·최종 산출물이다. 위 PPTX/PDF 선택 검증은 선택형 내보내기 분기의 기록이며 기본 제작 경로의 수용 기준이 아니다. Templates의 기본 산출물, Brand Room의 제작 안내와 복사 프롬프트, 테마의 presentation 프롬프트에 HTML 우선을 적용했다. PPTX/PDF는 명시적으로 선택하거나 별도로 요청할 때만 만든다. 콘텐츠 진입 모션은 앞/뒤/직접 이동마다 재실행하며 배경·미디어·아이덴티티는 고정하도록 통일했다.
+
+로컬 검증용 독립 HTML 덱: `.codex-tmp/html-animation-qa/index.html`. 실제 브라우저에서 다음·이전·직접 이동, 재진입 시 stagger 모션, 정지 후 opacity 1/이동 0, 아이덴티티 transform none, 현재 뷰포트에서 가로 넘침 없음을 확인했다. 이 덱은 보조자가 만든 로컬 검증 산출물이며 서버 AI 생성 결과가 아니다. OS reduced-motion 설정과 전체 뷰포트 매트릭스, 서버 생성 전체 흐름 검증은 완료하지 않았으므로 전체 HTML 제작 QA PASS로 판정하지 않는다.
+
+What's New의 접근 불가능한 GitHub 저장소·Releases·커밋·CHANGELOG·PR 링크와 GitHub API 요청을 제거했다. 공개 패키지 스냅샷의 버전과 내부 Getting Started 링크를 표시한다. 로컬 실제 페이지 main 영역에서 GitHub 링크 0개를 확인했다.
+
+멤버십 게이트에 숨겨진 Logo Guide/Designer Agent 레이아웃 클래스를 적용하지 않도록 분리했다. Logo Guide의 !important 상단 여백이 멤버십 게이트에 전파되던 원인을 제거했다. 개발용 free 멤버십 프리뷰에서 gate top=0, backdrop top=0, wrapper padding=0px 확인.
+
+16개 프롬프트 테스트, TypeScript, semantic audit, 프로덕션 빌드 통과. Rams는 크레딧 소진으로 리뷰 결과를 반환하지 않았다.
+배포: `dpl_9uR8cy9RvsgUL22d1qGbyYMszddP`, entry `/assets/main-G3tlN1ai.js`.

package/data/docs/cer-007-checkout.md

@@ -0,0 +1,51 @@
+# CER-007 — checkout deployment mismatch
+
+2026-09-05. Status: deployed; free-account sandbox checkout entry verified in production. Membership activation and Room persistence acceptance remain pending.
+
+Production `mellow-fox-829` logs match request `b3f7f6503948d806` exactly:
+`ArgumentValidationError: Object contains extra field customerEmail that is not in the validator`.
+The deployed validator accepts only `discountCode?` and `priceId`; the browser also sends
+`customerEmail`, `locale`, and `returnOrigin`. Requests `ff523b7845474589` and
+`f052833f39385683` fail identically. Execution time and database writes are zero;
+the action handler and Polar were never reached. This evidence does not establish
+whether Polar itself is correctly configured.
+
+The working copy already has the expanded checkout validator and localized return URL.
+Deploy the reviewed backend contract before the frontend. Do not deploy the whole
+working directory blindly: it contains unrelated backend/schema and UI changes.
+
+Before releasing the frontend, run:
+
+```sh
+node scripts/check-billing-contract.mjs mellow-fox-829
+```
+
+This authenticated CLI metadata read verifies the deployed argument and return validators;
+it creates no membership, checkout, or user. CLI access to the target deployment is required.
+It does not establish that Polar or the end-to-end member journey works.
+
+Local regression coverage exercises the full browser payload with a new free identity
+and mocked Polar responses. UI failures retain Convex's request ID for support and
+only classify explicit discount validation errors as invalid codes.
+
+Acceptance still requires the real Google free account to open sandbox checkout,
+activate a test membership, create its first Room, and retain that Room after refresh
+and logout/login. No entitlement bypass or real payment is part of this fix.
+
+## Verification in this repair
+
+- Production contract check: FAIL; deployed fields are `discountCode`, `priceId`.
+- Development contract check (`nautical-goldfish-225`): PASS.
+- Checkout and error-classification tests: 11 passed (Polar mocked).
+- Convex TypeScript and semantic page ownership audit: PASS.
+- Whole-app TypeScript: blocked by existing `src/pages/BrandWorkspacePage.tsx:761`
+  (`assetLibraryForTheme` is undefined).
+- Rams quick_review attempted; no review returned because workspace credits are exhausted.
+- No deployment, entitlement change, checkout confirmation, or Room acceptance test performed.
+
+
+## Production deployment and retest
+
+2026-09-05: deployed the expanded checkout action to `mellow-fox-829`, preserving the existing production schema. The deployed metadata contract check now passes. Final frontend deployment: `dpl_2xoLyYTd8uBfYU31cERoxShxxFUL`, serving `https://design.utopia-studio.co`.
+
+Using the previously supplied Yongwoo Google QA account, confirmed `Current plan: free`, clicked View annual membership and Start annual membership, and reached the real `sandbox.polar.sh/checkout/…` page. The screen explicitly states payments are not processed. The checkout capability URL is intentionally not recorded here. No payment fields were entered and Subscribe now was not activated. Membership activation, first Room creation, refresh and relogin persistence still require separate acceptance testing.

package/data/docs/cer-008-011-qa-repair.md

@@ -0,0 +1,64 @@
+# CER-008–011 repair — 2026-09-05
+
+Status: deployed on 2026-09-05; focused production retest passed as recorded below. Earlier local-only and user-reported reproduction results are retained as history. Existing CER-001 and CER-003 are not closed by this work; CER-007 has a separate checkout retest record.
+
+| Issue | Confirmed source cause | Repair |
+| --- | --- | --- |
+| CER-008 | Hard-coded Docs TOC IDs drifted from rendered sections. | Derive links and labels from rendered sections/headings; observe lazy content and locale updates; remove duplicate Docs TOC definitions. |
+| CER-009 | Team, Terms and Privacy HTML files existed but were absent from Vite's multi-page build input. | Register all three HTML entries, so direct requests and refreshes have real static documents. |
+| CER-010 | Prism Mono and Y2K Pop policies were missing from the document resolver; misses silently used Utopia. | Register both policies; reject unknown policies; show an unavailable state for unsupported route brands. MD and AI briefs use the same resolved contract. |
+| CER-011 | Studio linked to an unsupported Renacore theme detail route. | Link to the registered brand design-system route. |
+
+Also repaired the stale BrandWorkspace asset-source accessor and brief argument to use the already registered BrandProductionSource API. These pre-existing mismatches blocked the application build and brand-page verification.
+
+Validation:
+
+- All 8 brand policy/source/export unit cases and unknown-brand rejection: 9 passed.
+- English and Arabic Docs: all TOC links in the 10 reported documents resolve inside the current document; final link clicked in each document.
+- All 8 brand documents: heading, MD source, browser clipboard AI brief, and reload passed on desktop and mobile Chromium in local preview (16 tests).
+- Renacore admin: link destination, reload, back and forward passed on desktop and mobile Chromium in local preview (2 tests).
+- Production static output (plain Python HTTP server, no SPA fallback): Team/Terms/Privacy client navigation, direct requests and refresh passed on desktop and mobile Chromium (6 tests), retaining the seed query.
+- `npm run build`, `npm run lint`, and `npm run audit:semantic-pages` passed.
+- Rams quick_review was attempted but returned only a credit-exhaustion message; no Rams review or score is claimed.
+
+Reproduce the static-output checks after building:
+
+```sh
+python3 -m http.server 4188 --bind 127.0.0.1 --directory dist
+# In another terminal:
+CERAMIC_STATIC_PREVIEW_URL=http://127.0.0.1:4188 npx playwright test tests/e2e/qa-template-build.spec.ts --workers=1
+```
+
+Run the Docs/brand/admin checks with `npx playwright test tests/e2e/qa-round-3.spec.ts`.
+These tests use the repository's existing local preview fixtures, not an authenticated production account. No external publishing, invitation, purchase, or AI generation was performed.
+
+## User-reported production interaction retest — 2026-09-05
+
+The follow-up report used the existing administrator account on design.utopia-studio.co and actual menu/link navigation and controls. This is additional reproduction evidence for the same four issues, not four new defects and not a post-deployment regression test. The local repairs above have not been deployed by this task.
+
+- CER-008: Color Usage, the eight foundation documents' Arabic/RTL targets, Arabic Friendly AI checklist, and Direction/RTL Install still have no target. Working targets such as Color Theme Swatches and foundation Tokens provide comparison evidence.
+- CER-009: Team, Terms and Privacy render after client navigation, then actual browser reload produces Vercel 404 on all three paths.
+- CER-010: selecting Prism Mono or Y2K Pop from the room menu, opening the full design system and invoking Copy AI brief still exposes the Utopia document and Markdown link content. This report does not establish OS clipboard bytes.
+- CER-011: searching Renacore in Studio admin, opening the room, using asset controls and following Design system → Open room still leads to the default Utopia preview.
+
+The report also records interactions across 22 Docs screens, command-copy feedback, logo brief edits and prompt review. Detailed click JSON for the first three Docs screens was lost to a tool timeout; final snapshots were retained. Scroll measurements taken during animation are not asserted as settled positions. The referenced screen-checks.json and sibling snapshots were not attached to this task and have not been independently inspected here.
+
+All four issues remain Open in production. Next acceptance must follow deployment and repeat these same user paths with the real administrator account, including reload for all three SaaS routes and brand-specific MD/AI brief verification. No checkout, publishing, asset approval or upload was performed in the reported retest.
+
+
+## Production release
+
+- Final deployment: `dpl_2xoLyYTd8uBfYU31cERoxShxxFUL` — https://utopia-design-system-29yn1l8iq-the-utopia-studio.vercel.app
+- Canonical alias: https://design.utopia-studio.co (Vercel Ready).
+- Convex: `mellow-fox-829`, existing schema retained; checkout and owner-scoped Room-by-slug query deployed. New Designer Agent tables/components were excluded. Its persistence calls remain development-only unless `VITE_CERAMIC_DESIGNER_AGENT_BACKEND_ENABLED=true` is explicitly configured after backend deployment.
+- Production Clerk uses `clerk.utopia-studio.co`, matching Convex's existing issuer. A temporary development-key mismatch during deployment was detected by live verification and corrected in the final build and Vercel environment. The existing administrator session and Studio admin access worked in the final deployment.
+
+Focused live checks with the real administrator account:
+
+- Color: clicked the generated Assigning semantic color roles TOC link; actual implementation section appeared at approximately 162px from the viewport top, confirmed visually and via DOM geometry.
+- Prism Mono and Y2K Pop: correct H1, CSS/manifest source and brand-specific MD link content. Y2K Copy AI brief returned the Y2K title in the browser clipboard. Prism's first immediate clipboard read was empty, so no live clipboard-byte success is claimed for that attempt (local clipboard tests passed).
+- Renacore: searched in Studio admin, opened the room, selected Design system, followed Open room, and reloaded; the Renacore document remained visible.
+- SaaS Team, Terms and Privacy: actual link clicks followed by browser reload retained each correct page and its seed/theme query, with no Vercel 404.
+- General account checkout entry was independently rechecked; see `cer-007-checkout.md`.
+
+This is focused production acceptance, not a repeat of all 22 Docs pages, every viewport, or the full membership/Room lifecycle. No Git push, public package release, asset approval, or payment confirmation was performed. The deployed backend source snapshot and hashes are retained locally under `.codex-tmp/qa-production-release-2026-09-05/`.