@zonease/aiworker-cli 0.15.2 → 0.16.1

package/official-apps/aiworker-hr/dist/{standalone.js → standalone/standalone.js}

@@ -13282,6 +13282,48 @@ var soulAppUiContributionKindSchema = exports_external.enum([
 var soulAppMountedSurfaceRendererSchema = exports_external.enum(["host-descriptor", "sandboxed-frame", "trusted-module"]);
 var soulAppMountedSurfaceScopeSchema = exports_external.enum(["app", "workspace", "session", "artifact", "review"]);
 var soulAppRequiredPermissionSchema = exports_external.string().regex(REQUIRED_PERMISSION_RE, "requiredPermissions must use kind:action:target");
+var soulAppEngineTargetSchema = exports_external.enum(["codex", "claude-code"]);
+var soulAppEngineAssetSourceSchema = exports_external.string().min(1);
+var soulAppWorkspaceEngineAssetsSchema = exports_external.object({
+  source: soulAppEngineAssetSourceSchema
+});
+var soulAppSkillEngineAssetsSchema = exports_external.object({
+  source: soulAppEngineAssetSourceSchema,
+  targets: exports_external.array(soulAppEngineTargetSchema).min(1).readonly()
+});
+var soulAppMcpClientEngineAssetsSchema = exports_external.object({
+  source: soulAppEngineAssetSourceSchema,
+  target: soulAppEngineTargetSchema
+});
+var soulAppMcpServerTransportSchema = exports_external.enum(["stdio", "http"]);
+var soulAppMcpServerEngineAssetsSchema = exports_external.object({
+  id: soulAppIdSchema,
+  package: exports_external.string().min(1),
+  requiredPermissions: exports_external.array(soulAppRequiredPermissionSchema).readonly().optional(),
+  transport: soulAppMcpServerTransportSchema
+});
+var soulAppEngineAssetsSchema = exports_external.object({
+  mcpClients: exports_external.array(soulAppMcpClientEngineAssetsSchema).readonly().optional(),
+  mcpServers: exports_external.array(soulAppMcpServerEngineAssetsSchema).readonly().optional(),
+  skills: soulAppSkillEngineAssetsSchema.optional(),
+  workspace: soulAppWorkspaceEngineAssetsSchema
+});
+var soulAppProjectionKindSchema = exports_external.enum(["workspace-file", "native-skill", "mcp-client"]);
+var soulAppProjectionReceiptEntrySchema = exports_external.object({
+  appId: soulAppIdSchema,
+  engineTarget: soulAppEngineTargetSchema.optional(),
+  generatedAt: exports_external.string().min(1),
+  kind: soulAppProjectionKindSchema,
+  sha256: exports_external.string().regex(/^[a-f0-9]{64}$/),
+  source: exports_external.string().min(1),
+  target: exports_external.string().min(1)
+});
+var soulAppProjectionReceiptSchema = exports_external.object({
+  appId: soulAppIdSchema,
+  generatedAt: exports_external.string().min(1),
+  projections: exports_external.array(soulAppProjectionReceiptEntrySchema).readonly(),
+  version: exports_external.literal(1)
+});
 var soulAppMountedSurfaceSchema = exports_external.object({
   entry: exports_external.string().regex(ROUTE_RE, "surface entry must be an absolute mounted service route"),
   renderer: soulAppMountedSurfaceRendererSchema,
@@ -13413,6 +13455,7 @@ var soulAppManifestSchema = exports_external.object({
   compatibility: soulAppCompatibilitySchema,
   connectors: soulAppConnectorsSchema,
   description: exports_external.string().min(1),
+  engineAssets: soulAppEngineAssetsSchema,
   exports: soulAppExportsSchema,
   healthcheck: soulAppHealthcheckSchema,
   id: soulAppIdSchema,
@@ -13461,6 +13504,8 @@ var soulAppManifestIssueCodeSchema = exports_external.enum([
   "unsafe_local_service_url",
   "unsafe_permission_request",
   "unsafe_ui_surface",
+  "unsafe_engine_asset_source",
+  "unsafe_mcp_server_package",
   "missing_ui_api_entry",
   "invalid_artifact_schema",
   "namespace_collision"
@@ -13492,6 +13537,27 @@ function validateSoulAppManifest(input, options = {}) {
   }
   const manifest = parsed.data;
   const issues = [];
+  for (const source of engineAssetSources(manifest)) {
+    if (!source.value.startsWith("./") || source.value.includes("..")) {
+      issues.push({
+        code: "unsafe_engine_asset_source",
+        message: "engine asset source must be a relative app-local path.",
+        path: source.path,
+        severity: "error"
+      });
+    }
+  }
+  for (const server of manifest.engineAssets.mcpServers ?? []) {
+    const message = mcpServerPackageMessage(manifest, server.package);
+    if (message) {
+      issues.push({
+        code: "unsafe_mcp_server_package",
+        message,
+        path: `engineAssets.mcpServers.${server.id}.package`,
+        severity: "error"
+      });
+    }
+  }
   if (options.hostVersion && !hostVersionSatisfies(options.hostVersion, manifest.compatibility.host)) {
     issues.push({
       code: "incompatible_host_version",
@@ -13684,6 +13750,25 @@ function unsafeSurfaceMessage(surface) {
     return "sandboxed-frame surfaces must use a /frames/* mounted service entry.";
   return null;
 }
+function mcpServerPackageMessage(manifest, packageName) {
+  const packagePart = packageName.includes("/") ? packageName.split("/").at(-1) : packageName;
+  const genericMcpPackage = /^(?:[a-z][a-z0-9]*-)*mcp-[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/.test(packagePart);
+  if (!genericMcpPackage)
+    return "MCP server packages must use a generic mcp-* package name, for example @zonease/aiworker-mcp-ats.";
+  if (packagePart.includes(manifest.id))
+    return "MCP server packages must not be private to a Soul App id.";
+  return null;
+}
+function engineAssetSources(manifest) {
+  return [
+    { path: "engineAssets.workspace.source", value: manifest.engineAssets.workspace.source },
+    ...manifest.engineAssets.skills ? [{ path: "engineAssets.skills.source", value: manifest.engineAssets.skills.source }] : [],
+    ...(manifest.engineAssets.mcpClients ?? []).map((client, index) => ({
+      path: `engineAssets.mcpClients.${index}.source`,
+      value: client.source
+    }))
+  ];
+}
 function manifestUiContributions(manifest) {
   return [
     ...manifest.ui.routes.map((route, index) => ({ path: `ui.routes.${index}`, surface: route.surface })),
@@ -13701,7 +13786,7 @@ var QA_REGRESSION_MATRIX_SCHEMA_HASH = "6a4f3494764431e8785a82865215eabc4c4678df
 var QA_RELEASE_GATE_SCHEMA_HASH = "0c953a3453ff235c419600073c70c1f155976f448c4567711b511d83668a09e4";
 var hrSoulAppManifest = soulAppManifestSchema.parse({
   api: {
-    entry: "./src/api.ts",
+    entry: "./host-adapter/api.ts",
     routePrefix: "/api/local/apps/aiworker-hr"
   },
   artifactTypes: [
@@ -13709,9 +13794,9 @@ var hrSoulAppManifest = soulAppManifestSchema.parse({
       description: "Source-backed HR lifecycle profile.",
       id: "person-profile",
       name: "Person Profile",
-      previewRef: "./src/ui/person-profile-preview.tsx",
-      reviewPolicyRef: "./review/person-profile.md",
-      schemaRef: "./schemas/person-profile.schema.json",
+      previewRef: "./product/web/artifact-previews/person-profile-preview.tsx",
+      reviewPolicyRef: "./product/reviews/person-profile.md",
+      schemaRef: "./product/artifacts/schemas/person-profile.schema.json",
       schemaSha256: HR_PERSON_PROFILE_SCHEMA_HASH,
       version: "0.1.0"
     },
@@ -13719,9 +13804,9 @@ var hrSoulAppManifest = soulAppManifestSchema.parse({
       description: "Role-related candidate screen with missing evidence and risks.",
       id: "candidate-screen",
       name: "Candidate Screen",
-      previewRef: "./src/ui/candidate-screen-preview.tsx",
-      reviewPolicyRef: "./review/candidate-screen.md",
-      schemaRef: "./schemas/candidate-screen.schema.json",
+      previewRef: "./product/web/artifact-previews/candidate-screen-preview.tsx",
+      reviewPolicyRef: "./product/reviews/candidate-screen.md",
+      schemaRef: "./product/artifacts/schemas/candidate-screen.schema.json",
       schemaSha256: HR_CANDIDATE_SCREEN_SCHEMA_HASH,
       version: "0.1.0"
     }
@@ -13734,8 +13819,8 @@ var hrSoulAppManifest = soulAppManifestSchema.parse({
       name: "Person Profile",
       outputKind: "person-profile",
       packRefs: [],
-      promptRef: "./capabilities/person-profile/prompt.md",
-      reviewRubricRef: "./capabilities/person-profile/review.md",
+      promptRef: "./product/workflows/person-profile/prompt.md",
+      reviewRubricRef: "./product/workflows/person-profile/review.md",
       version: "0.1.0",
       workspaceTypes: ["people-profile"]
     },
@@ -13746,8 +13831,8 @@ var hrSoulAppManifest = soulAppManifestSchema.parse({
       name: "Candidate Screen",
       outputKind: "candidate-screen",
       packRefs: [],
-      promptRef: "./capabilities/candidate-screen/prompt.md",
-      reviewRubricRef: "./capabilities/candidate-screen/review.md",
+      promptRef: "./product/workflows/candidate-screen/prompt.md",
+      reviewRubricRef: "./product/workflows/candidate-screen/review.md",
       version: "0.1.0",
       workspaceTypes: ["role-search", "candidate"]
     }
@@ -13775,13 +13860,22 @@ var hrSoulAppManifest = soulAppManifestSchema.parse({
     ]
   },
   description: "People operations Soul App for profiles, recruiting evidence, lifecycle touchpoints, and HR review policy.",
+  engineAssets: {
+    skills: {
+      source: "./engine-assets/skills",
+      targets: ["codex", "claude-code"]
+    },
+    workspace: {
+      source: "./engine-assets/workspace"
+    }
+  },
   exports: {
-    artifact: "./src/protocol/artifact.ts",
-    connector: "./src/protocol/connectors.ts",
-    lifecycle: "./src/protocol/lifecycle.ts",
-    review: "./src/protocol/review.ts",
-    runtime: "./src/protocol/runtime.ts",
-    ui: "./src/protocol/ui.ts"
+    artifact: "./host-adapter/protocol/artifact.ts",
+    connector: "./host-adapter/protocol/connectors.ts",
+    lifecycle: "./host-adapter/protocol/lifecycle.ts",
+    review: "./host-adapter/protocol/review.ts",
+    runtime: "./host-adapter/protocol/runtime.ts",
+    ui: "./host-adapter/protocol/ui.ts"
   },
   healthcheck: {
     kind: "protocol-handler",
@@ -13794,13 +13888,13 @@ var hrSoulAppManifest = soulAppManifestSchema.parse({
     namespace: "aiworker-hr"
   },
   modes: {
-    hostMounted: { entry: "./src/host-mounted.ts", supported: true },
-    standalone: { entry: "./src/standalone.ts", supported: true }
+    hostMounted: { entry: "./host-adapter/mounted/host-mounted.ts", supported: true },
+    standalone: { entry: "./host-adapter/standalone/standalone.ts", supported: true }
   },
   name: "AIWorker HR",
   pack: {
     refs: [
-      { id: "hr-recruiting", ref: "packs/hr-recruiting/SOUL.md", source: "embedded", version: "0.1.0" }
+      { id: "hr-recruiting", ref: "product/profiles/hr-recruiting/SOUL.md", source: "embedded", version: "0.1.0" }
     ]
   },
   permissions: [
@@ -13882,7 +13976,7 @@ var hrSoulAppManifest = soulAppManifestSchema.parse({
   ui: {
     artifactPreviews: [
       {
-        entry: "./src/ui/person-profile-preview.tsx",
+        entry: "./product/web/artifact-previews/person-profile-preview.tsx",
         id: "person-profile-preview",
         label: "Person profile preview",
         slot: "artifact-preview",
@@ -13891,7 +13985,7 @@ var hrSoulAppManifest = soulAppManifestSchema.parse({
     ],
     panels: [
       {
-        entry: "./src/ui/profile-panel.tsx",
+        entry: "./product/web/panels/profile-panel.tsx",
         id: "hr-profile-panel",
         label: "Profile panel",
         slot: "panel",
@@ -13905,7 +13999,7 @@ var hrSoulAppManifest = soulAppManifestSchema.parse({
     ],
     reviewPanels: [
       {
-        entry: "./src/ui/review-panel.tsx",
+        entry: "./product/web/panels/review-panel.tsx",
         id: "hr-review-panel",
         label: "HR review panel",
         slot: "review-panel"
@@ -13913,7 +14007,7 @@ var hrSoulAppManifest = soulAppManifestSchema.parse({
     ],
     routes: [
       {
-        entry: "./src/ui/hr-route.tsx",
+        entry: "./product/web/routes/hr-route.tsx",
         id: "hr-home",
         label: "HR",
         path: "/hr",
@@ -13965,7 +14059,7 @@ var hrSoulAppManifest = soulAppManifestSchema.parse({
     },
     workspaceWidgets: [
       {
-        entry: "./src/ui/people-widget.tsx",
+        entry: "./product/web/widgets/people-widget.tsx",
         id: "hr-people-widget",
         label: "People widget",
         slot: "workspace-widget",
@@ -14005,7 +14099,7 @@ var hrSoulAppManifest = soulAppManifestSchema.parse({
 });
 var qaSoulAppManifest = soulAppManifestSchema.parse({
   api: {
-    entry: "./src/api.ts",
+    entry: "./host-adapter/api.ts",
     routePrefix: "/api/local/apps/aiworker-qa"
   },
   artifactTypes: [
@@ -14013,9 +14107,9 @@ var qaSoulAppManifest = soulAppManifestSchema.parse({
       description: "Coverage matrix mapped to release risk.",
       id: "regression-matrix",
       name: "Regression Matrix",
-      previewRef: "./src/ui/regression-matrix-preview.tsx",
-      reviewPolicyRef: "./review/regression-matrix.md",
-      schemaRef: "./schemas/regression-matrix.schema.json",
+      previewRef: "./product/web/artifact-previews/regression-matrix-preview.tsx",
+      reviewPolicyRef: "./product/reviews/regression-matrix.md",
+      schemaRef: "./product/artifacts/schemas/regression-matrix.schema.json",
       schemaSha256: QA_REGRESSION_MATRIX_SCHEMA_HASH,
       version: "0.1.0"
     },
@@ -14023,9 +14117,9 @@ var qaSoulAppManifest = soulAppManifestSchema.parse({
       description: "Go/no-go release readiness artifact.",
       id: "release-gate",
       name: "Release Gate",
-      previewRef: "./src/ui/release-gate-preview.tsx",
-      reviewPolicyRef: "./review/release-gate.md",
-      schemaRef: "./schemas/release-gate.schema.json",
+      previewRef: "./product/web/artifact-previews/release-gate-preview.tsx",
+      reviewPolicyRef: "./product/reviews/release-gate.md",
+      schemaRef: "./product/artifacts/schemas/release-gate.schema.json",
       schemaSha256: QA_RELEASE_GATE_SCHEMA_HASH,
       version: "0.1.0"
     }
@@ -14038,8 +14132,8 @@ var qaSoulAppManifest = soulAppManifestSchema.parse({
       name: "Regression Matrix",
       outputKind: "regression-matrix",
       packRefs: [],
-      promptRef: "./capabilities/regression-matrix/prompt.md",
-      reviewRubricRef: "./capabilities/regression-matrix/review.md",
+      promptRef: "./product/workflows/regression-matrix/prompt.md",
+      reviewRubricRef: "./product/workflows/regression-matrix/review.md",
       version: "0.1.0",
       workspaceTypes: ["release", "test-suite"]
     },
@@ -14050,8 +14144,8 @@ var qaSoulAppManifest = soulAppManifestSchema.parse({
       name: "Release Gate",
       outputKind: "release-gate",
       packRefs: [],
-      promptRef: "./capabilities/release-gate/prompt.md",
-      reviewRubricRef: "./capabilities/release-gate/review.md",
+      promptRef: "./product/workflows/release-gate/prompt.md",
+      reviewRubricRef: "./product/workflows/release-gate/review.md",
       version: "0.1.0",
       workspaceTypes: ["release"]
     }
@@ -14079,13 +14173,22 @@ var qaSoulAppManifest = soulAppManifestSchema.parse({
     ]
   },
   description: "Quality Soul App for release workspaces, regression evidence, defect triage, and release gate review.",
+  engineAssets: {
+    skills: {
+      source: "./engine-assets/skills",
+      targets: ["codex", "claude-code"]
+    },
+    workspace: {
+      source: "./engine-assets/workspace"
+    }
+  },
   exports: {
-    artifact: "./src/protocol/artifact.ts",
-    connector: "./src/protocol/connectors.ts",
-    lifecycle: "./src/protocol/lifecycle.ts",
-    review: "./src/protocol/review.ts",
-    runtime: "./src/protocol/runtime.ts",
-    ui: "./src/protocol/ui.ts"
+    artifact: "./host-adapter/protocol/artifact.ts",
+    connector: "./host-adapter/protocol/connectors.ts",
+    lifecycle: "./host-adapter/protocol/lifecycle.ts",
+    review: "./host-adapter/protocol/review.ts",
+    runtime: "./host-adapter/protocol/runtime.ts",
+    ui: "./host-adapter/protocol/ui.ts"
   },
   healthcheck: {
     kind: "protocol-handler",
@@ -14098,13 +14201,13 @@ var qaSoulAppManifest = soulAppManifestSchema.parse({
     namespace: "aiworker-qa"
   },
   modes: {
-    hostMounted: { entry: "./src/host-mounted.ts", supported: true },
-    standalone: { entry: "./src/standalone.ts", supported: true }
+    hostMounted: { entry: "./host-adapter/mounted/host-mounted.ts", supported: true },
+    standalone: { entry: "./host-adapter/standalone/standalone.ts", supported: true }
   },
   name: "AIWorker QA",
   pack: {
     refs: [
-      { id: "qa-reviewer", ref: "packs/qa-reviewer/SOUL.md", source: "embedded", version: "0.1.0" }
+      { id: "qa-reviewer", ref: "product/profiles/qa-reviewer/SOUL.md", source: "embedded", version: "0.1.0" }
     ]
   },
   permissions: [
@@ -14186,7 +14289,7 @@ var qaSoulAppManifest = soulAppManifestSchema.parse({
   ui: {
     artifactPreviews: [
       {
-        entry: "./src/ui/release-gate-preview.tsx",
+        entry: "./product/web/artifact-previews/release-gate-preview.tsx",
         id: "release-gate-preview",
         label: "Release gate preview",
         slot: "artifact-preview",
@@ -14195,7 +14298,7 @@ var qaSoulAppManifest = soulAppManifestSchema.parse({
     ],
     panels: [
       {
-        entry: "./src/ui/release-panel.tsx",
+        entry: "./product/web/panels/release-panel.tsx",
         id: "qa-release-panel",
         label: "Release panel",
         slot: "panel",
@@ -14209,7 +14312,7 @@ var qaSoulAppManifest = soulAppManifestSchema.parse({
     ],
     reviewPanels: [
       {
-        entry: "./src/ui/review-panel.tsx",
+        entry: "./product/web/panels/review-panel.tsx",
         id: "qa-review-panel",
         label: "QA review panel",
         slot: "review-panel"
@@ -14217,7 +14320,7 @@ var qaSoulAppManifest = soulAppManifestSchema.parse({
     ],
     routes: [
       {
-        entry: "./src/ui/qa-route.tsx",
+        entry: "./product/web/routes/qa-route.tsx",
         id: "qa-home",
         label: "QA",
         path: "/qa",
@@ -14262,7 +14365,7 @@ var qaSoulAppManifest = soulAppManifestSchema.parse({
     },
     workspaceWidgets: [
       {
-        entry: "./src/ui/release-widget.tsx",
+        entry: "./product/web/widgets/release-widget.tsx",
         id: "qa-release-widget",
         label: "Release widget",
         slot: "workspace-widget",
@@ -14912,11 +15015,11 @@ function queryString(input, seed = {}) {
 // soul-app.manifest.json
 var soul_app_manifest_default = {
   api: {
-    entry: "./src/api.ts",
+    entry: "./host-adapter/api.ts",
     localService: {
       command: [
         "bun",
-        "src/host-mounted.ts"
+        "host-adapter/mounted/host-mounted.ts"
       ],
       healthPath: "/health"
     },
@@ -14927,9 +15030,9 @@ var soul_app_manifest_default = {
       description: "Source-backed HR lifecycle profile.",
       id: "person-profile",
       name: "Person Profile",
-      previewRef: "./src/ui/person-profile-preview.tsx",
-      reviewPolicyRef: "./review/person-profile.md",
-      schemaRef: "./schemas/person-profile.schema.json",
+      previewRef: "./product/web/artifact-previews/person-profile-preview.tsx",
+      reviewPolicyRef: "./product/reviews/person-profile.md",
+      schemaRef: "./product/artifacts/schemas/person-profile.schema.json",
       schemaSha256: "35c14e3d4c0fe9fd95c87e9bc47a210e21f99bcb1b079aa99a95bb93e820c8ab",
       version: "0.1.0"
     },
@@ -14937,9 +15040,9 @@ var soul_app_manifest_default = {
       description: "Role-related candidate screen with missing evidence and risks.",
       id: "candidate-screen",
       name: "Candidate Screen",
-      previewRef: "./src/ui/candidate-screen-preview.tsx",
-      reviewPolicyRef: "./review/candidate-screen.md",
-      schemaRef: "./schemas/candidate-screen.schema.json",
+      previewRef: "./product/web/artifact-previews/candidate-screen-preview.tsx",
+      reviewPolicyRef: "./product/reviews/candidate-screen.md",
+      schemaRef: "./product/artifacts/schemas/candidate-screen.schema.json",
       schemaSha256: "e8bd207be63eab23073cd47e41092f1d753c38d609383206e94334dd984b309c",
       version: "0.1.0"
     }
@@ -14954,8 +15057,8 @@ var soul_app_manifest_default = {
       name: "Person Profile",
       outputKind: "person-profile",
       packRefs: [],
-      promptRef: "./capabilities/person-profile/prompt.md",
-      reviewRubricRef: "./capabilities/person-profile/review.md",
+      promptRef: "./product/workflows/person-profile/prompt.md",
+      reviewRubricRef: "./product/workflows/person-profile/review.md",
       version: "0.1.0",
       workspaceTypes: [
         "people-profile"
@@ -14970,8 +15073,8 @@ var soul_app_manifest_default = {
       name: "Candidate Screen",
       outputKind: "candidate-screen",
       packRefs: [],
-      promptRef: "./capabilities/candidate-screen/prompt.md",
-      reviewRubricRef: "./capabilities/candidate-screen/review.md",
+      promptRef: "./product/workflows/candidate-screen/prompt.md",
+      reviewRubricRef: "./product/workflows/candidate-screen/review.md",
       version: "0.1.0",
       workspaceTypes: [
         "role-search",
@@ -15015,13 +15118,25 @@ var soul_app_manifest_default = {
     ]
   },
   description: "People operations Soul App for profiles, recruiting evidence, lifecycle touchpoints, and HR review policy.",
+  engineAssets: {
+    skills: {
+      source: "./engine-assets/skills",
+      targets: [
+        "codex",
+        "claude-code"
+      ]
+    },
+    workspace: {
+      source: "./engine-assets/workspace"
+    }
+  },
   exports: {
-    artifact: "./src/protocol/artifact.ts",
-    connector: "./src/protocol/connectors.ts",
-    lifecycle: "./src/protocol/lifecycle.ts",
-    review: "./src/protocol/review.ts",
-    runtime: "./src/protocol/runtime.ts",
-    ui: "./src/protocol/ui.ts"
+    artifact: "./host-adapter/protocol/artifact.ts",
+    connector: "./host-adapter/protocol/connectors.ts",
+    lifecycle: "./host-adapter/protocol/lifecycle.ts",
+    review: "./host-adapter/protocol/review.ts",
+    runtime: "./host-adapter/protocol/runtime.ts",
+    ui: "./host-adapter/protocol/ui.ts"
   },
   healthcheck: {
     kind: "protocol-handler",
@@ -15035,11 +15150,11 @@ var soul_app_manifest_default = {
   },
   modes: {
     hostMounted: {
-      entry: "./src/host-mounted.ts",
+      entry: "./host-adapter/mounted/host-mounted.ts",
       supported: true
     },
     standalone: {
-      entry: "./src/standalone.ts",
+      entry: "./host-adapter/standalone/standalone.ts",
       supported: true
     }
   },
@@ -15048,7 +15163,7 @@ var soul_app_manifest_default = {
     refs: [
       {
         id: "hr-recruiting",
-        ref: "packs/hr-recruiting/SOUL.md",
+        ref: "product/profiles/hr-recruiting/SOUL.md",
         source: "embedded",
         version: "0.1.0"
       }
@@ -15136,7 +15251,7 @@ var soul_app_manifest_default = {
   ui: {
     artifactPreviews: [
       {
-        entry: "./src/ui/person-profile-preview.tsx",
+        entry: "./product/web/artifact-previews/person-profile-preview.tsx",
         id: "person-profile-preview",
         label: "Person profile preview",
         slot: "artifact-preview",
@@ -15145,7 +15260,7 @@ var soul_app_manifest_default = {
     ],
     panels: [
       {
-        entry: "./src/ui/profile-panel.tsx",
+        entry: "./product/web/panels/profile-panel.tsx",
         id: "hr-profile-panel",
         label: "Profile panel",
         slot: "panel",
@@ -15161,7 +15276,7 @@ var soul_app_manifest_default = {
     ],
     reviewPanels: [
       {
-        entry: "./src/ui/review-panel.tsx",
+        entry: "./product/web/panels/review-panel.tsx",
         id: "hr-review-panel",
         label: "HR review panel",
         slot: "review-panel"
@@ -15169,7 +15284,7 @@ var soul_app_manifest_default = {
     ],
     routes: [
       {
-        entry: "./src/ui/hr-route.tsx",
+        entry: "./product/web/routes/hr-route.tsx",
         id: "hr-home",
         label: "HR",
         path: "/hr",
@@ -15223,7 +15338,7 @@ var soul_app_manifest_default = {
     },
     workspaceWidgets: [
       {
-        entry: "./src/ui/people-widget.tsx",
+        entry: "./product/web/widgets/people-widget.tsx",
         id: "hr-people-widget",
         label: "People widget",
         slot: "workspace-widget",
@@ -15274,13 +15389,13 @@ var soul_app_manifest_default = {
   ]
 };
 
-// src/index.ts
+// host-adapter/index.ts
 var hrSoulAppManifest2 = createSoulAppManifest(soul_app_manifest_default);
 var HR_REFERENCE_APP_BOUNDARY = {
-  hostMountedEntry: "./src/host-mounted.ts",
+  hostMountedEntry: "./host-adapter/mounted/host-mounted.ts",
   packageName: "@zonease/aiworker-hr",
   primaryWorkbench: "People/Profile Workbench",
-  standaloneEntry: "./src/standalone.ts"
+  standaloneEntry: "./host-adapter/standalone/standalone.ts"
 };
 var hrReferenceSoulApp = defineSoulApp({
   artifact: {
@@ -15409,7 +15524,7 @@ function lifecycleHandlers(message) {
   };
 }
 
-// src/standalone.ts
+// host-adapter/standalone/standalone.ts
 import process from "process";
 function renderStandaloneHtml() {
   return [

package/official-apps/aiworker-hr/engine-assets/workspace/AGENTS.md

@@ -0,0 +1,38 @@
+# {{workerName}} Workspace Instructions
+
+This workspace belongs to an AIWorker HR profile ledger.
+
+## Workspace Identity
+
+- Soul worker: {{workerName}}
+- Soul id: {{soulId}}
+- Workspace profile: {{workspaceName}}
+
+## Accepted State
+
+- README.md is the accepted HR profile state for this workspace.
+- Do not directly update `README.md` during an agent session.
+- If a result should change the accepted profile, write a reviewable artifact and request human review.
+- Human review plus HR policy is the only path that may promote an artifact into `README.md`.
+
+## Action and Skill Binding
+
+- When a session is started from a Soul App action, treat that action as an explicit skill selection.
+- Follow the selected skill purpose, expected inputs, output shape, and review boundary.
+- Do not silently switch to another skill.
+- If the request appears to require a different skill, explain the mismatch and ask the user to confirm whether to continue, switch, or start a new action.
+- When no action or skill is explicitly selected, choose the most relevant available HR skill when useful.
+- If no skill fits, continue as a general HR workspace session and keep outputs within the same artifact and review rules.
+
+## Session Output
+
+- Write durable session outputs under `artifacts/<sessionId>/`.
+- Keep facts, assumptions, evidence gaps, risks, review notes, and next actions separated.
+- Text-only clarification is allowed; do not create a fake artifact just to satisfy the protocol.
+- Available native skills may be empty. When skills exist, use `.agents/skills/` or `.claude/skills/` according to the active engine.
+
+## Review Boundary
+
+- Agent output is a proposal until a human review accepts it.
+- Sensitive facts, hiring or employment decisions, and memory candidates require explicit review.
+- Do not store secrets, connector credentials, bearer tokens, or raw sensitive evidence in `README.md`, artifacts, reviews, logs, prompts, or skill files.

package/official-apps/aiworker-hr/engine-assets/workspace/CLAUDE.md

@@ -0,0 +1 @@
+@AGENTS.md

package/official-apps/aiworker-hr/engine-assets/workspace/README.md

@@ -0,0 +1,17 @@
+# {{workspaceName}}
+
+> Canonical accepted HR profile for this Soul workspace. Session outputs remain proposals until review.
+
+## Current Profile Summary
+
+No approved profile revision yet.
+
+## Evidence And Review
+
+- Proposed changes live in `artifacts/`.
+- Human review records live in `reviews/`.
+- Evidence descriptors live in `evidence/descriptors/`.
+
+## Revision Notes
+
+Approve a profile revision to update this README.

package/official-apps/aiworker-hr/engine-assets/workspace/evidence/README.md

@@ -0,0 +1,3 @@
+# Evidence
+
+Store source descriptors in `descriptors/`. Keep raw sensitive evidence in `raw/`, which is ignored by the profile git ledger by default.