leedab 0.5.3 → 0.6.1

package/apps/console/.next/standalone/.next/server/chunks/854.js

@@ -0,0 +1,1287 @@
+exports.id=854,exports.ids=[854],exports.modules={7506:(a,b,c)=>{"use strict";c.d(b,{sb:()=>j});var d=c(73024),e=c(76760),f=c.n(e),g=c(57477);let h=/^[a-z0-9](?:[a-z0-9-]{0,58}[a-z0-9])?$/,i=/^[a-z][a-z0-9_]{1,40}\.[a-z][a-z0-9_]{1,40}$/;async function j(a){try{if(!h.test(a.clientId))return{ok:!1,error:`Invalid clientId: ${a.clientId}`};if(!i.test(a.agent))return{ok:!1,error:`Invalid agent format: ${a.agent} (expected agent.tool)`};if(!await (0,g.xB)(a.clientId))return{ok:!1,error:`No brain for ${a.clientId} — audit not written`};let b={...a,inputSummary:function(a){if(!a)return;let b={};for(let[c,d]of Object.entries(a))"string"==typeof d?b[c]=d.length>200?`${d.slice(0,200)}…[+${d.length-200} chars]`:d:"number"==typeof d||"boolean"==typeof d||null===d?b[c]=d:Array.isArray(d)?b[c]=`[array length=${d.length}]`:"object"==typeof d?b[c]=`[object keys=${Object.keys(d).length}]`:b[c]=`[${typeof d}]`;return b}(a.inputSummary)},c=function(a,b){let c=`${b.getUTCFullYear()}-${String(b.getUTCMonth()+1).padStart(2,"0")}`;return f().join((0,g.Ip)(a),"_inbox",`audit-${c}.jsonl`)}(a.clientId,new Date(a.ts));await d.promises.mkdir(f().dirname(c),{recursive:!0});let e=JSON.stringify(b)+"\n";return await d.promises.appendFile(c,e,"utf8"),{ok:!0,path:c,bytes:Buffer.byteLength(e,"utf8")}}catch(a){return{ok:!1,error:a.message}}}},11702:(a,b,c)=>{"use strict";c.d(b,{AU:()=>h,xH:()=>g});var d=c(10641),e=c(90897);function f(a){return a.ok?null:"agentId"in a?d.NextResponse.json({error:a.error,message:a.message,clientId:a.clientId,agentId:a.agentId},{status:a.status}):"reason"in a&&void 0!==a.reason?d.NextResponse.json({error:a.error,reason:a.reason,message:a.message},{status:a.status}):d.NextResponse.json({error:a.error,message:a.message},{status:a.status})}async function g(){return f(await (0,e.b)())}async function h(a,b){return f(await (0,e.s)(a,b))}},54338:(a,b,c)=>{"use strict";c.d(b,{DF:()=>w,EK:()=>u,FV:()=>r,IJ:()=>e,Jg:()=>s,MC:()=>i,Md:()=>h,Oz:()=>g,SJ:()=>p,TM:()=>o,V_:()=>l,dC:()=>k,es:()=>f,jB:()=>m,ke:()=>t,o3:()=>v,pz:()=>q,qT:()=>n,th:()=>j});var d=c(57477);function e(a,b){let c=b.triggerType??"webhook",e="schedule"===c?{parameters:{rule:{interval:[{field:"cronExpression",expression:b.cronSchedule??"0 9 * * *"}]}},id:"trigger",name:"Schedule",type:"n8n-nodes-base.scheduleTrigger",typeVersion:1,position:[240,300]}:"manual"===c?{parameters:{},id:"trigger",name:"Manual",type:"n8n-nodes-base.manualTrigger",typeVersion:1,position:[240,300]}:{parameters:{path:`${a.clientId}-${(0,d.B0)(b.name)}`,options:{}},id:"trigger",name:"Webhook",type:"n8n-nodes-base.webhook",typeVersion:1.1,position:[240,300],webhookId:`${a.clientId}-${(0,d.B0)(b.name)}`};return JSON.stringify({name:`${a.displayName} — ${b.name}`,nodes:[e,{parameters:{jsCode:`// TODO: Implementation agent — fill in the action.
+// Description: ${b.description}
+// Customer: ${a.displayName} (${a.clientId})
+
+return $input.all();`},id:"action",name:"Placeholder action",type:"n8n-nodes-base.code",typeVersion:2,position:[460,300]}],connections:{[e.name]:{main:[[{node:"Placeholder action",type:"main",index:0}]]}},active:!1,settings:{executionOrder:"v1"},versionId:"scaffold",meta:{leedabClientId:a.clientId,leedabIndustry:a.industry,generatedBy:"implementation-agent.scaffold_n8n_workflow",generatedAt:(0,d.st)(),description:b.description},pinData:{},tags:[{name:"leedab"},{name:a.clientId}]},null,2)}function f(a,b){return`---
+type: skill-override
+agent_id: ${b.agentId}
+client_id: ${a.clientId}
+created: ${(0,d.st)()}
+status: draft
+---
+
+# ${b.agentId} — ${a.displayName} override
+
+> Per-customer system-prompt append block. Once approved, paste this body
+> into \`clients/${a.clientId}/manifest.json\` under
+> \`overrides.${b.agentId}.append_block\`. The console's
+> \`buildSystemPrompt\` will append it to the agent's base spec at runtime.
+
+## Why this override exists
+
+${b.reason.trim()}
+
+## Customer-specific guidance for ${b.agentId}
+
+${b.guidance?.trim()??`(Implementation agent — fill in. Be concrete: name the systems, terminology, decision rules, and escalation paths specific to ${a.displayName}. Anything that should change about the standard ${b.agentId} behaviour goes here.)`}
+
+## Hard rules added on top of base spec
+
+1.
+2.
+3.
+
+## When to escalate
+
+(What signals warrant kicking this back to Delivery / Implementation rather than ${b.agentId} acting alone for ${a.displayName}?)
+
+## Examples (good / bad)
+
+**Good response shape:**
+
+(Concrete example specific to this customer's data + workflows.)
+
+**Bad response shape:**
+
+(What ${b.agentId} should NEVER do for this customer — drawn from any prior incidents.)
+
+## Sign-offs
+
+- [ ] Delivery
+- [ ] Onboarding
+- [ ] Customer primary contact (acknowledged)
+
+---
+
+_Generated by Implementation agent. After sign-off, copy the body (everything below the frontmatter) into the manifest \`append_block\`._
+`}function g(a,b){let c=(0,d.B0)(b.name)||"migration";return`// One-time migration: ${b.source} → ${b.target}
+// Customer: ${a.displayName} (${a.clientId})
+// Generated: ${(0,d.st)()}
+// Run once: \`npx tsx scripts/migrations/${a.clientId}-${c}.ts\`
+//
+// Implementation agent — fill in the read + transform + write steps.
+// Hard rules from the spec:
+//   - Test on real data first (with customer permission), not synthetic.
+//   - Idempotent: re-running should not duplicate rows.
+//   - Logs every batch — \`console.log\` to stdout, capture to a file.
+//   - Never store customer credentials in this file. Use env vars.
+
+${b.description?`// Description: ${b.description}
+//
+`:""}import { readFile, writeFile, mkdir } from "node:fs/promises";
+import path from "node:path";
+
+type SourceRow = {
+  // TODO: shape of one row from ${b.source}
+};
+
+type TargetRow = {
+  // TODO: shape of one row in ${b.target}
+};
+
+async function readSource(): Promise<SourceRow[]> {
+  // TODO: read from ${b.source}
+  // Example for CSV/JSON-on-disk:
+  //   const raw = await readFile(process.env.MIGRATION_SOURCE_PATH ?? "input.json", "utf8");
+  //   return JSON.parse(raw);
+  throw new Error("readSource() not implemented");
+}
+
+function transform(row: SourceRow): TargetRow | null {
+  // TODO: map source → target. Return null to skip a row (with a logged reason).
+  void row;
+  throw new Error("transform() not implemented");
+}
+
+async function writeTarget(rows: TargetRow[]): Promise<void> {
+  // TODO: write to ${b.target}.
+  // Example for the per-customer brain:
+  //   const outDir = path.resolve(process.env.HOME ?? "", "leedab-brains/${a.clientId}/_inbox/migrations");
+  //   await mkdir(outDir, { recursive: true });
+  //   await writeFile(path.join(outDir, "${c}.json"), JSON.stringify(rows, null, 2));
+  void rows;
+  void path;
+  void mkdir;
+  void writeFile;
+  throw new Error("writeTarget() not implemented");
+}
+
+async function main() {
+  console.log(\`[${c}] reading from ${b.source}\`);
+  const source = await readSource();
+  console.log(\`[${c}] read \${source.length} rows\`);
+
+  const transformed: TargetRow[] = [];
+  let skipped = 0;
+  for (const row of source) {
+    const out = transform(row);
+    if (out === null) {
+      skipped++;
+      continue;
+    }
+    transformed.push(out);
+  }
+  console.log(\`[${c}] transformed \${transformed.length} rows, skipped \${skipped}\`);
+
+  await writeTarget(transformed);
+  console.log(\`[${c}] wrote \${transformed.length} rows to ${b.target}\`);
+}
+
+main().catch((err) => {
+  console.error(\`[${c}] failed:\`, err);
+  process.exit(1);
+});
+
+void readFile; // silence unused — readSource may want it
+`}function h(a,b){return`---
+type: content-brief
+format: seo-blog
+client_id: ${a.clientId}
+created: ${(0,d.st)()}
+status: draft
+review_required: yes
+---
+
+# SEO brief — ${b.topic}
+
+> Drafted by Content agent on ${(0,d.dR)()} for ${a.displayName}${a.industry?` (${a.industry})`:""}.
+> Search-intent first; problem-first; product second.
+
+## Target keyword
+
+${b.primaryKeyword??`(Primary keyword the SMB operator would actually type — not what we wish they typed. Example shape: "how to ${b.topic.toLowerCase()} for ${a.industry??"small business"}")`}
+
+## Search intent
+
+(What is the reader trying to do? Are they: comparing options, troubleshooting, learning a concept, looking to buy? Be specific — bad targeting comes from skipping this step.)
+
+## Audience
+
+${b.audience??`(Who specifically — e.g. "operations manager at a 12-truck logistics fleet" not "small businesses")`}
+
+## Title (H1)
+
+(Keyword-rich but not stuffed. ≤ 60 chars for SERP fit.)
+
+## Meta description
+
+(155 chars max. One promise + one specific outcome.)
+
+## Hook (first 2 paragraphs)
+
+(Open with the pain. Specific scenario, not "small businesses with manual processes". The product enters AFTER the reader has nodded along for at least two paragraphs.)
+
+## Outline
+
+| H2 | One-line description |
+|---|---|
+| | |
+| | |
+| | |
+| | |
+
+## Word count target
+
+(800–1500 for most. 2000+ only for pillar / cornerstone content. Justify if claiming pillar status.)
+
+## Internal links
+
+- (Existing LeedAB content this should link to — case studies, comparison pages, related how-tos)
+
+## CTA
+
+(What does the reader do at the end? Trial sign-up? Demo request? Read another article?)
+
+## Hard rules check
+
+- [ ] Search intent clearly named (not "people who care about X")
+- [ ] Concrete scenario in the hook (numbers, geography, tools)
+- [ ] Problem-first opening — product enters paragraph 3 or later
+- [ ] Internal links to existing content, not invented placeholder pages
+- [ ] CTA matches the search intent (trial CTA on a how-to that solved their problem; demo CTA on a comparison piece)
+
+---
+
+_Generated by Content agent. Hand off to writer or refine in next turn._
+`}function i(a,b){return`---
+type: product-spec
+client_id: ${a.clientId}
+created: ${(0,d.st)()}
+status: draft
+review_required: yes
+---
+
+# Feature: ${b.feature}
+
+> Drafted by Product agent on ${(0,d.dR)()}. Engineers should be able to build from this without further clarification.
+
+## Problem
+
+${b.problem.trim()}
+
+${b.audience?`**Whose problem:** ${b.audience}
+
+`:""}**How painful, how frequent:** (specific — "12 spreadsheet edits/day" not "a lot of manual work")
+
+## Proposed solution
+
+(One paragraph. Include the shape of the UX. Do NOT list technical details here — those go under Technical considerations.)
+
+## User stories
+
+- As a [role], I want [capability], so that [outcome].
+- As a [role], I want [capability], so that [outcome].
+
+## Acceptance criteria
+
+(Specific, testable, true/false statements. Each one must be observable.)
+
+1.
+2.
+3.
+
+## UX flow
+
+(Prose or mermaid diagram. Walk through the primary path. Note key decision points.)
+
+## Local-first impact
+
+- **Where does this data live?** (default: on the user's machine)
+- **Does this require cloud infrastructure?** (if yes, justify and provide local fallback)
+- **What happens offline?** (must degrade gracefully)
+- **What data, if any, crosses the network?** (user must understand and consent)
+
+## Technical considerations
+
+- Data storage:
+- AI provider implications:
+- Performance expectations:
+- Failure modes:
+
+## Edge cases
+
+-
+-
+
+## Out of scope (explicit)
+
+-
+
+## Open questions
+
+(Anything the founders need to weigh in on before this is buildable.)
+
+-
+
+## Approvals
+
+- [ ] Engineering (buildable as specified)
+- [ ] Founders (problem worth solving + scope appropriate)
+
+---
+
+_Generated by Product agent. Local-first is non-negotiable — every feature must answer the four data-locality questions._
+`}function j(a,b){return`---
+type: adr
+status: proposed
+client_id: ${a.clientId}
+created: ${(0,d.st)()}
+date: ${(0,d.dR)()}
+---
+
+# ADR — ${b.title}
+
+> Architecture Decision Record. Drafted by Engineering agent on ${(0,d.dR)()}.
+
+## Status
+
+Proposed (not yet accepted).
+
+## Context
+
+${b.context.trim()}
+
+## Decision
+
+${b.decision.trim()}
+
+## Consequences
+
+### Positive
+
+-
+
+### Negative / cost
+
+-
+
+### Neutral
+
+-
+
+## Alternatives considered
+
+${b.alternatives??"(List alternatives weighed. Each one: what was it, why was it rejected, what would change the answer.)"}
+
+## Architectural principle check
+
+- [ ] **Local-first:** customer data stays on customer's machine; cloud is opt-in and disclosed
+- [ ] **Provider-agnostic:** doesn't hard-code a single AI provider into core paths
+- [ ] **Graceful degradation:** handles no-internet, provider downtime, rate limits, timeouts
+- [ ] **Observable:** action is inspectable in the local audit trail
+- [ ] **Security first:** no path-traversal, no credentials in repo, typed errors at boundaries
+
+## Implementation plan
+
+(High-level. Detailed PRD lives in Product's output.)
+
+1.
+2.
+3.
+
+## References
+
+- Cross-references to related ADRs:
+- Spec / PRD that prompted this:
+
+---
+
+_Generated by Engineering agent. Once accepted, change \`status: proposed\` → \`status: accepted\` and add the acceptance date._
+`}function k(a,b){return`---
+type: component-spec
+client_id: ${a.clientId}
+created: ${(0,d.st)()}
+status: draft
+---
+
+# Component — ${b.name}
+
+> Drafted by Frontend agent on ${(0,d.dR)()}. Component contract first; implementation follows.
+
+## Purpose
+
+${b.purpose.trim()}
+
+## Component contract
+
+\`\`\`tsx
+interface ${b.name}Props {
+  // TODO: required props (label, value, onAction, etc.)
+  // TODO: optional props with defaults
+  // TODO: variants if any: variant?: "primary" | "ghost" | "danger";
+}
+\`\`\`
+
+## Variants
+
+${b.variants??`(List visual variants — primary / ghost / danger / etc — with the design intent for each. If none, write "single variant".)`}
+
+## States
+
+- Default
+- Hover (interactive elements only)
+- Focus (must be visually distinct from hover)
+- Active / pressed
+- Disabled
+- Loading
+- Error / invalid
+
+## Accessibility checklist
+
+- [ ] Keyboard focus is visible (\`outline\` or ring; never \`outline: none\` without a replacement)
+- [ ] Tab order is logical
+- [ ] ARIA label on icon-only buttons (\`aria-label\` or visually hidden text)
+- [ ] \`role\` and \`aria-*\` for custom widgets (combobox, dialog, etc)
+- [ ] Colour contrast ≥ 4.5:1 for normal text, 3:1 for large text
+- [ ] Works with screen reader (announce state changes)
+
+## Server vs client component
+
+- **Decision:** [Server | Client]
+- **Reason:** (Server by default. Client only if event handlers, browser APIs, or React state/effects.)
+
+## Performance
+
+- [ ] Images via \`next/image\` with explicit width/height
+- [ ] Fonts via \`next/font\` (no layout shift)
+- [ ] No \`use client\` if Server Component would suffice
+- [ ] Bundle impact estimated if adding a new dependency
+
+## Test plan
+
+- [ ] React Testing Library: contract (props → DOM)
+- [ ] React Testing Library: state transitions (default → hover → active → disabled)
+- [ ] Playwright: keyboard navigation
+- [ ] Playwright: screen reader announce (where supported)
+
+## Design tokens used
+
+- Colour:
+- Spacing:
+- Typography:
+- Radius / shadow:
+
+---
+
+_Generated by Frontend agent. Implementation follows the contract above; deviations require updating the contract first._
+`}function l(a,b){return`---
+type: endpoint-spec
+client_id: ${a.clientId}
+created: ${(0,d.st)()}
+status: draft
+---
+
+# ${b.method} ${b.path}
+
+> Drafted by Backend agent on ${(0,d.dR)()}. Type the boundary; errors are data; safe paths everywhere.
+
+## Purpose
+
+${b.purpose.trim()}
+
+## Authentication
+
+- [ ] License gate (\`requireLicense\`)
+- [ ] Per-customer manifest gate (\`requireLicensedAgent\`) — only if endpoint serves a specific agent's tool
+- [ ] Auth shape: [JWT | session | API token | public]
+
+## Request
+
+### Headers
+
+- \`Content-Type: application/json\` (for body-bearing methods)
+- (Other required headers)
+
+### Path params
+
+(if any)
+
+### Query params
+
+(if any)
+
+### Body
+
+\`\`\`ts
+import { z } from "zod";
+
+const Body = z.object({
+  clientId: z.string().regex(/^[a-z0-9](?:[a-z0-9-]{0,58}[a-z0-9])?$/),
+  // TODO: required fields
+  // TODO: optional fields
+});
+type Body = z.infer<typeof Body>;
+\`\`\`
+
+## Response
+
+### 200 OK
+
+\`\`\`ts
+type Response = {
+  ok: true;
+  // TODO: response shape
+};
+\`\`\`
+
+### Error responses
+
+\`\`\`ts
+type ApiError =
+  | { ok: false; error: "INVALID_BODY"; details: string }
+  | { ok: false; error: "NOT_FOUND"; resource: string }
+  | { ok: false; error: "FORBIDDEN"; reason: string };
+\`\`\`
+
+| Status | Code | When |
+|---|---|---|
+| 400 | INVALID_BODY | Body fails Zod validation |
+| 401 | NO_LICENSE | License gate refused |
+| 403 | FORBIDDEN | Agent not licensed for this customer |
+| 404 | NOT_FOUND | clientId / record not found |
+| 500 | INTERNAL | Unhandled — should never reach here in tests |
+
+## Side effects
+
+- Filesystem:
+- Database:
+- External calls:
+- Audit trail entry: (always — name the event type)
+
+## Path safety
+
+- [ ] All filesystem paths go through \`resolvedFile()\` / \`assertSafePath()\` from \`lib/agent-tools/vault.ts\`
+- [ ] No string concatenation of \`clientId\` into a path without slug-validation
+- [ ] No \`..\` or absolute paths permitted in user input
+
+## Streaming
+
+- [ ] If response can take > 2s, use Server-Sent Events
+- [ ] Final event: \`data: {"type":"done"}\` or \`data: {"type":"error","value":"..."}\`
+
+## Test plan
+
+- [ ] Happy path
+- [ ] Each error response (400 / 401 / 403 / 404)
+- [ ] Path traversal attempt rejected (\`clientId: "../etc"\`)
+- [ ] Large body rejected (over a sane cap)
+- [ ] Concurrent calls don't corrupt shared state
+
+---
+
+_Generated by Backend agent. Type the boundary, name the errors._
+`}function m(a,b){let c=b.incident??"service degraded";return`---
+type: runbook
+client_id: ${a.clientId}
+service: ${b.service}
+created: ${(0,d.st)()}
+status: draft
+---
+
+# Runbook — ${b.service}: ${c}
+
+> Drafted by DevOps agent on ${(0,d.dR)()}. Designed for a founder at 2am — every step concrete, no jargon.
+
+## Symptom
+
+(What does the operator / customer see? Specific — "dashboard returns 502 on /api/chat" not "things broken")
+
+## Severity
+
+- [ ] **P0** — customer data at risk OR all customers down
+- [ ] **P1** — one customer fully blocked, or core agent flow broken
+- [ ] **P2** — degraded UX, workaround exists
+- [ ] **P3** — annoying but non-urgent
+
+## First-30-seconds triage
+
+1. **Is it actually broken?**
+   \`\`\`bash
+   # health check (curl, ping, log tail — ONE command)
+   \`\`\`
+2. **Is it customer-specific or platform-wide?**
+   \`\`\`bash
+   # how to tell (e.g. check more than one clientId)
+   \`\`\`
+
+## Diagnosis
+
+(What logs / dashboards / queries narrow it down? Each step a single command.)
+
+\`\`\`bash
+# Check 1
+# Check 2
+# Check 3
+\`\`\`
+
+## Mitigation (immediate, reversible)
+
+(Get the customer back to working state. Reversible — don't truncate tables, don't push hot fixes.)
+
+\`\`\`bash
+# Action 1 — what it does + why it's safe
+\`\`\`
+
+## Resolution (root cause fix)
+
+(After mitigation. May require a code change + deploy.)
+
+\`\`\`bash
+# Action 1
+# Action 2
+\`\`\`
+
+## Verification
+
+\`\`\`bash
+# How to confirm the issue is actually fixed (not just masked)
+\`\`\`
+
+## Postmortem trigger
+
+- [ ] P0 / P1 always get a postmortem within 48h
+- [ ] Postmortem owner: DevOps (incident commander)
+- [ ] Add learnings + new monitor / runbook step to this file
+
+## Known false positives
+
+(Cases that look like this but aren't — don't waste 2am minutes here)
+
+-
+
+---
+
+_Generated by DevOps agent. Update this runbook with anything you learned during the incident._
+`}function n(a,b){return`---
+type: po-brief
+client_id: ${a.clientId}
+supplier: ${b.supplier}
+created: ${(0,d.st)()}
+status: draft
+review_required: yes
+---
+
+# PO brief — ${a.displayName} → ${b.supplier}
+
+> Drafted by Procurement agent on ${(0,d.dR)()}. **Never bypass the PO system.** Confirm match against existing supplier contract before sending.
+
+## Items requested
+
+${b.items.trim()}
+
+## Commercial terms
+
+- **Supplier:** ${b.supplier}
+- **Budget:** ${b.budget??"(operator: confirm against contract / market quote)"}
+- **Urgency:** ${b.urgency??"routine"}
+- **Payment terms:** (operator: pull from supplier contract — Net 30 / Net 60 / on receipt)
+- **Currency:** (default to AUD unless contract specifies otherwise)
+
+## Required checks (operator confirms each)
+
+- [ ] PO number generated from internal sequence
+- [ ] Supplier on approved-vendor list
+- [ ] Budget approved by spend authority
+- [ ] Items match a current contract / RFQ — no off-contract spend without approval
+- [ ] Delivery address + receiving contact confirmed
+- [ ] Insurance / compliance docs current (if vendor type requires)
+
+## Risks
+
+- **Off-contract risk:** if any line item isn't on contract, escalate to Finance before send.
+- **Supplier solvency:** check the last 3 invoices were paid on time both directions before issuing.
+- **Spec ambiguity:** every line item has a unit + quantity + spec. Vague briefs come back wrong.
+
+## Approval chain
+
+- [ ] Procurement (drafted)
+- [ ] Finance (budget + spend authority)
+- [ ] Operations (operational fit)
+- [ ] Founder (if > approval threshold or off-contract)
+
+---
+
+_Generated by Procurement agent. Suppliers are SAP-driven for ${a.displayName} — never bypass the PO system._
+`}function o(a,b){let c=b.urgency??"exception";return`---
+type: dispatch-brief
+client_id: ${a.clientId}
+urgency: ${c}
+created: ${(0,d.st)()}
+status: draft
+review_required: yes
+---
+
+# Dispatch brief — ${a.displayName}
+
+> Drafted by Ops agent on ${(0,d.dR)()}. **Never auto-action exceptions.** Surface to the human; let them choose.
+
+## Scenario
+
+${b.scenario.trim()}
+
+## Severity
+
+- [ ] **P0** — service-level breach OR customer escalation in progress
+- [ ] **Exception** — abnormal but recoverable within shift
+- [ ] **Routine** — exception is daily-shape, no escalation needed
+
+(Auto-tagged: ${c}. Operator confirms or adjusts.)
+
+## Customer-side impact
+
+${b.customerImpact??'(operator: name the customer + the SLA touched. "Coles", "Woolworths", "3-hour delivery window" etc.)'}
+
+## Triage steps (in order)
+
+1. **Confirm dispatch ID = SAP order ID.** No exception action without ID match.
+2. **Read the manifest** — what was on the truck, who picked, which leg failed.
+3. **Driver call** — get the driver's account in their words. Quote verbatim if writing customer-side.
+4. **Customer-side comms decision** — proactive notify (preferred) vs. wait-and-see.
+5. **Resolution path** — reroute / replace / refund / dispute. Pick one before talking to customer.
+
+## Resolution options
+
+- **Reroute:** another truck picks up the leg — confirm capacity + ETA before promising.
+- **Replace:** issue replacement freight from depot — only if customer accepts the delay.
+- **Refund:** financial-only resolution — escalate to Finance for sign-off.
+- **Dispute:** customer-on-customer (e.g. wrong-address claim) — escalate to CX with documentation.
+
+## Escalation triggers
+
+- Anything over $5k impact → Mina before action
+- Anything customer-visible → Mina before action
+- Anything touching a contractual SLA → Mina before action
+- 5am Sydney shift handoff to NZ — flag in dispatch before delegation
+
+## Customer-side reply (if proactive notify chosen)
+
+(Tone: terse, blue-collar, time-zoned Sydney. Sign-off: dispatch operator's name + role. No corporate-speak.)
+
+\`\`\`
+[Customer], heads up — [scenario in 1 line].
+[Resolution path] — ETA [time] Sydney.
+Will update if anything changes.
+
+[Operator name], dispatch
+\`\`\`
+
+---
+
+_Generated by Ops agent. Surface, don't auto-action. Cross-customer isolation matters here more than usual — driver names never leak to the wrong customer._
+`}function p(a,b){let c=b.length??5,e=b.channel??"lifecycle";return`---
+type: email-sequence-brief
+client_id: ${a.clientId}
+channel: ${e}
+length: ${c}
+created: ${(0,d.st)()}
+status: draft
+review_required: yes
+---
+
+# Email sequence brief — ${a.displayName}
+
+> Drafted by Email agent on ${(0,d.dR)()}. **Drafts only — does not deploy.** Sequence ships through the licensed ESP after operator review.
+
+## Audience
+
+${b.audience.trim()}
+
+## Goal of the sequence
+
+${b.goal.trim()}
+
+## Sequence shape — ${c} emails over ${"cold"===e?"10-14 days":"winback"===e?"7 days":"30-90 days"}
+
+| # | Send (relative) | Subject angle | One-line body intent | CTA |
+|---|---|---|---|---|
+${Array.from({length:c},(a,b)=>{let c="cold"===e?`Day ${2*b}`:"winback"===e?`Day ${b+1}`:`Day ${[0,3,7,14,30,60,90][Math.min(b,6)]}`;return`| ${b+1} | ${c} | (operator: hook angle) | (one line) | (specific) |`}).join("\n")}
+
+## Hard rules
+
+- **One CTA per email.** Multiple CTAs = none performs.
+- **Subject under 50 chars.** Mobile clipping is real.
+- **First sentence is NOT the greeting.** Hook in line 1, not "I hope this finds you well."
+- **No false personalisation.** "I noticed you {{trait}}" is fine if true; never fabricate.
+- **Unsubscribe in every email** (compliance + trust signal).
+- **No multi-variate per email.** A/B test ONE thing per send.
+
+## Deliverability checklist
+
+- [ ] SPF / DKIM / DMARC verified for sender domain
+- [ ] Plain-text fallback present (60%+ of opens are mobile dark-mode now)
+- [ ] No image-only emails (looks like spam)
+- [ ] Sender name + reply-to is a person, not "noreply"
+- [ ] Sequence-level cap: max 1 email/day per recipient
+
+## Performance baselines (industry${a.industry?` — ${a.industry}`:""})
+
+- Open rate: 25-40% acceptable, < 20% = subject problem
+- Reply rate (cold): 2-5% acceptable, < 1% = audience or offer mismatch
+- Click rate: 2-8% depending on CTA shape
+
+## Approval chain
+
+- [ ] Email (drafted)
+- [ ] Marketing lead (audience + goal sanity check)
+- [ ] Compliance (unsub + claims review)
+- [ ] CX (escalation paths if reply patterns surface support issues)
+
+---
+
+_Generated by Email agent. Drafts only — deployment requires the licensed ESP integration which Implementation owns._
+`}function q(a,b){return`---
+type: campaign-brief
+client_id: ${a.clientId}
+channel: ${b.channel}
+created: ${(0,d.st)()}
+status: draft
+review_required: yes
+---
+
+# Campaign brief — ${a.displayName} \xb7 ${b.channel}
+
+> Drafted by Campaigns agent on ${(0,d.dR)()}. **Drafts the brief, not the spend.** No budget moves without Finance + founder sign-off.
+
+## Objective
+
+${b.objective.trim()}
+
+## Channel
+
+${b.channel} — chosen because: (operator: explain why this channel matches the audience + funnel stage)
+
+## Budget + duration
+
+- **Total budget:** ${b.budget??"(operator: name the cap — daily / total / blended)"}
+- **Duration:** ${b.duration??"(operator: name end date or always-on)"}
+- **Spend pacing:** (even / front-loaded / event-aligned)
+
+## Audience
+
+- **Who:** (specific segment — "ops managers at 12+ truck logistics fleets in NSW" not "small businesses")
+- **Where:** (geographies, language)
+- **Funnel stage:** (cold / warm / retargeting / customer-LAL)
+
+## Creative direction
+
+- **Hook:** (one-line — what stops the scroll)
+- **Proof:** (numbers, quote, comparison)
+- **Visual:** (testimonial / product / outcome / metaphor)
+- **CTA:** (specific verb + value)
+
+## Tracking + UTM
+
+- **utm_source:** ${b.channel}
+- **utm_medium:** (cpc / paid-social / display)
+- **utm_campaign:** \`${a.clientId}-${(0,d.B0)(b.objective).slice(0,30)}\`
+- **utm_content:** (creative variant)
+- **utm_term:** (keyword variant for search)
+
+## Hard rules
+
+- **Single objective per campaign.** Multi-objective campaigns optimise for nothing.
+- **Hold creative variants stable for 7+ days.** Don't kill a variant on day-2 noise.
+- **One landing page per campaign.** Generic homepage = generic conversion rate.
+- **Conversion event defined BEFORE launch.** Not "we'll figure it out from data."
+- **Budget cap enforced at the platform.** No "watching it" as the only safeguard.
+
+## Performance baselines (channel + funnel stage)
+
+- (operator: pull last 3 campaigns of this channel + stage from analytics, paste benchmarks here)
+
+## Kill criteria
+
+- (operator: name the metric + threshold + window. e.g. "if CPL > $80 over 5 days at $50 daily, pause")
+
+## Approval chain
+
+- [ ] Campaigns (drafted)
+- [ ] Marketing lead (positioning fit)
+- [ ] Finance (budget approval)
+- [ ] Founder (if > approval threshold)
+
+---
+
+_Generated by Campaigns agent. Drafts only — actual spend through the licensed ad-platform integration._
+`}function r(a,b){let c=b.assetType??"other";return`---
+type: brand-audit
+client_id: ${a.clientId}
+asset_type: ${c}
+created: ${(0,d.st)()}
+status: draft
+review_required: yes
+---
+
+# Brand audit — ${a.displayName} \xb7 ${c}
+
+> Drafted by Brand agent on ${(0,d.dR)()}. **Audit only, not a rewrite.** Identifies brand-fit gaps; the asset owner ships the fix.
+
+## Asset under review
+
+\`\`\`
+${b.assetText.trim().slice(0,1200)}${b.assetText.length>1200?"\n... [truncated for brief]":""}
+\`\`\`
+
+## Voice + tone check
+
+- [ ] **Tone matches brand register** (operator: pull current register from \`Wiki/brand/voice.md\` — terse vs warm, technical vs accessible, etc.)
+- [ ] **Vocabulary matches** the customer's language, not internal jargon
+- [ ] **Reading level** appropriate to audience (Hemingway grade 6-8 for SMB ops; grade 4-6 for consumer)
+- [ ] **Personality cues** present (humour, directness, reassurance — depending on brand)
+
+## Visual + structure check (when applicable)
+
+- [ ] **Logo usage** correct (sizing, clearspace, colour treatment)
+- [ ] **Colour palette** brand-compliant (hex matches token, no near-misses)
+- [ ] **Typography** uses brand fonts at correct weights
+- [ ] **Layout density** appropriate (whitespace = premium, density = utility)
+
+## Message hierarchy
+
+- [ ] **Headline communicates the value prop** without product knowledge required
+- [ ] **First subhead reframes** in customer's words / pain
+- [ ] **CTA is unambiguous** about what happens on click
+- [ ] **Secondary content supports**, doesn't compete with, the primary message
+
+## Risk flags
+
+- **Tone drift** — asset reads like a different brand (corporate vs friendly, technical vs accessible)
+- **Claim risk** — superlatives or numbers without sourcing ("the best", "10x faster")
+- **Compliance flags** — financial / health / legal claims requiring substantiation
+- **Asset reuse risk** — would this work in 3 other contexts, or is it brittle to one channel?
+
+## Recommendations
+
+(operator: 3-5 specific, action-oriented suggestions. Each one references a hard rule above.)
+
+1.
+2.
+3.
+
+## Approval chain
+
+- [ ] Brand (audit complete)
+- [ ] Asset owner (acknowledges + commits to fix or escalates)
+- [ ] Marketing lead (final fit-check before publish)
+
+---
+
+_Generated by Brand agent. Brand audits are descriptive — visual fixes happen in the design tool the asset originated in (Figma / Canva / etc)._
+`}function s(a,b){let c=b.durationS??60;return`---
+type: video-script
+client_id: ${a.clientId}
+format: ${b.format}
+duration_s: ${c}
+created: ${(0,d.st)()}
+status: draft
+review_required: yes
+---
+
+# Video script — ${a.displayName} \xb7 ${b.format} \xb7 ${c}s
+
+> Drafted by Video agent on ${(0,d.dR)()}. Script + storyboard + B-roll cues + on-screen text.
+
+## Topic
+
+${b.topic.trim()}
+
+## Hook (0:00 – 0:03)
+
+(One sentence. Stops scroll. Ideally a contrarian claim, surprising stat, or problem the viewer is living right now. NO greeting, NO logo intro.)
+
+## Body — beat sheet
+
+| Time | Spoken (VO or talent) | Visual / B-roll | On-screen text |
+|---|---|---|---|
+| 0:03 – 0:08 | | | |
+| 0:08 – 0:15 | | | |
+| 0:15 – 0:30 | | | |
+| 0:30 – 0:45 | | | |
+| 0:45 – 0:55 | | | |
+| 0:55 – ${c}:00 | | | |
+
+## CTA (last 3-5s)
+
+- **What:** (specific verb + outcome)
+- **Where:** (URL / button / next video)
+- **Persistent on-screen:** (logo + URL throughout the CTA window)
+
+## Production notes
+
+- **Aspect ratio:** (9:16 for TikTok/Reels/Shorts; 1:1 for in-feed; 16:9 for YouTube/landing)
+- **Captions:** baked-in (most views are sound-off)
+- **Pacing:** ${c<30?"fast — average shot 1.5-2s":c<60?"medium — average shot 2-3s":"varied — open with quick cuts to retain, slow during proof"}
+- **Music:** (track licence + mood)
+- **Voice:** (talent name + recording approach: studio / phone / clean room)
+
+## Hard rules
+
+- **First 3s = hook.** No logo, no "hey guys", no greeting. Stop the scroll or lose the viewer.
+- **One message per video.** A second message is a second video.
+- **Closed captions baked in.** Not a YouTube auto-caption — properly authored.
+- **Brand-compliant** colour + typography on every on-screen text card.
+- **CTA visible for last 5s minimum** so the algo's preview frame includes it.
+
+## Approval chain
+
+- [ ] Video (script + storyboard drafted)
+- [ ] Brand (voice + visual fit)
+- [ ] Marketing lead (objective alignment)
+- [ ] Founder (if customer-facing claims)
+
+---
+
+_Generated by Video agent. Script-only — production happens through HeyGen / Runway / talent shoot._
+`}function t(a,b){return`---
+type: cohort-brief
+client_id: ${a.clientId}
+created: ${(0,d.st)()}
+status: draft
+review_required: yes
+---
+
+# Cohort analysis brief — ${a.displayName}
+
+> Drafted by Data agent on ${(0,d.dR)()}. Defines the question, the data shape needed, and the chart that answers it. **Analysis spec only — execution requires DB access (Postgres / BigQuery / etc) Implementation owns.**
+
+## Question
+
+${b.question.trim()}
+
+## Why this matters
+
+(operator: 1-2 lines on what decision this analysis informs. If you can't name the decision, the analysis isn't worth running yet.)
+
+## Dimensions (slice-by columns)
+
+${b.dimensions??"(operator: list the columns to slice by — date / customer-segment / product-tier / channel — and the granularity)"}
+
+## Metric definitions
+
+(One row per metric. **Definitions matter** — "active user" means different things to different people.)
+
+| Metric | Definition | Source table | Filter |
+|---|---|---|---|
+| | | | |
+
+## Expected output shape
+
+- [ ] **Trend** — metric over time (line)
+- [ ] **Comparison** — metric across segments at a point in time (bar)
+- [ ] **Distribution** — metric values across the population (histogram / box)
+- [ ] **Funnel** — conversion across stages (funnel)
+
+(Auto-tagged: ${b.expectedShape??"operator picks"})
+
+## Hypothesis
+
+(operator: what do you expect to see, and what would surprise you? If the answer is "I have no idea", run a smaller exploratory query first.)
+
+## Cuts to ignore (out of scope this round)
+
+- (operator: name dimensions you'll be tempted to slice by but shouldn't — keeps the analysis focused)
+
+## Validation steps
+
+- [ ] Sample-size check: each cohort has > 30 observations (else trend is noise)
+- [ ] Outlier check: top/bottom 1% inspected — included or excluded with reason
+- [ ] Duplicate check: row counts match expected join cardinality
+- [ ] Time-zone check: timestamps in customer-local zone, not UTC by accident
+- [ ] Definition cross-check: pulled metric matches the canonical definition in \`05_Finance/metrics.md\` (or equivalent)
+
+## Approval chain
+
+- [ ] Data (analysis spec)
+- [ ] Engineering (query feasibility check)
+- [ ] Founder (decision owner — accepts the framing or refines)
+
+---
+
+_Generated by Data agent. Cite or shut up — every chart in the final analysis names its source table + filter._
+`}function u(a,b){let c=b.level??"mid";return`---
+type: job-brief
+client_id: ${a.clientId}
+role: ${b.role}
+level: ${c}
+created: ${(0,d.st)()}
+status: draft
+review_required: yes
+---
+
+# Job brief — ${a.displayName} \xb7 ${c} ${b.role}
+
+> Drafted by People agent on ${(0,d.dR)()}. JD + interview rubric + decision criteria. **Drafts only — ATS posting + scheduling go through the licensed integration.**
+
+## What they actually do (day 1, week 4, month 6)
+
+- **Day 1:** (concrete onboarding tasks)
+- **Week 4:** (first owned outcome)
+- **Month 6:** (proficient + delivering)
+
+## Why this role exists
+
+(operator: 1-2 lines on the gap this role fills. If you can't name the gap, the role isn't ready to hire for.)
+
+## Must-haves (hard requirements)
+
+(Each is interview-able; vague ones get cut.)
+
+1.
+2.
+3.
+
+## Nice-to-haves
+
+1.
+2.
+
+## Won't-haves (explicit anti-patterns)
+
+(What disqualifies — saves both sides time. Examples: "no remote-only candidates outside Australian timezones", "no agency-heavy career paths".)
+
+-
+
+## Compensation band
+
+- **Salary range:** (operator: confirm against ${a.industry??"industry"} benchmarks at ${c} level)
+- **Equity:** (% range or "none")
+- **Bonus / variable:** (target % at-plan)
+- **Benefits:** (super, leave, learning budget, equipment)
+
+## Logistics
+
+- **Location:** ${b.remoteOk?"Remote (Australia)":"Hybrid / on-site (Sydney primary)"}
+- **Reporting line:** (operator: name the manager + skip-level)
+- **Team size:** (current team count, growth plan)
+- **Travel:** (% expected)
+
+## Interview rubric (4-stage)
+
+| Stage | Format | Owner | Decision criteria |
+|---|---|---|---|
+| 1. Screen | 30-min call | Recruiter / People | Hard requirements check, salary alignment |
+| 2. Skills | 60-min, role-specific exercise | Hiring manager | Can-they-actually-do-the-job evidence |
+| 3. Team fit | 45-min with peers | Future teammates | Ways-of-working alignment |
+| 4. Founder | 30-min | Founder | Mission alignment, leverage potential |
+
+## Bar / non-negotiables
+
+- (operator: 2-3 things every offer-grade candidate must demonstrate)
+
+## Approval chain
+
+- [ ] People (drafted)
+- [ ] Hiring manager (approves brief + rubric)
+- [ ] Founder (sign-off on band + headcount)
+
+---
+
+_Generated by People agent. JD-only — actual posting + scheduling through the licensed ATS integration._
+`}function v(a,b){return`---
+type: clause-template
+client_id: ${a.clientId}
+contract_type: ${b.contractType}
+created: ${(0,d.st)()}
+status: draft
+review_required: yes
+---
+
+# Clause template — ${b.contractType}
+
+> Drafted by Legal agent on ${(0,d.dR)()} for ${a.displayName}. **Template only — not legal advice.** Customer's qualified counsel reviews before any signature.
+
+## Intent
+
+${b.intent.trim()}
+
+## Governing law
+
+${b.governingLaw??"(operator: jurisdiction — NSW Australia, Delaware US, etc. Default: customer's primary place of business.)"}
+
+## Plain-English version (operator-readable)
+
+(Two-sentence summary of what this clause does and what it protects against. If counsel and operator can't both agree on this summary, the clause language probably needs work.)
+
+## Clause language (placeholder template)
+
+> ⚠️ **The text below is a starting structure, NOT enforceable language.** Have qualified counsel substitute the actual operative language for the customer's jurisdiction.
+
+\`\`\`
+[Title of clause]
+
+[Operative paragraph 1 — what each party agrees to do or not do]
+
+[Operative paragraph 2 — conditions, triggers, exceptions]
+
+[Operative paragraph 3 — remedies / consequences if breached]
+
+[Standard boilerplate hooks — severability, no waiver, governing law reference]
+\`\`\`
+
+## Defined terms used
+
+(Each term referenced in the clause language above must be defined elsewhere in the contract or here.)
+
+| Term | Definition source |
+|---|---|
+| | |
+
+## Risk flags
+
+- **Indemnification scope** — broad indemnification clauses transfer risk in ways the operator may not realise. Counsel reviews scope.
+- **Liability cap** — capped liability is the default for SaaS-shaped relationships. Uncapped is unusual and worth a flag.
+- **Termination triggers** — material breach vs. convenience differ on notice periods + survival.
+- **IP assignment** — work-product IP defaults to a different party in different jurisdictions. Make it explicit.
+- **Compliance carve-outs** — some claims (fraud, gross negligence, IP infringement) commonly carve out of liability caps.
+
+## Operator checklist before counsel review
+
+- [ ] Counterparty name + entity confirmed
+- [ ] Jurisdiction matches customer's operating location
+- [ ] Defined terms cross-checked against the master agreement
+- [ ] Plain-English version reviewed with the business owner of this relationship
+- [ ] Risk flags above each addressed or explicitly accepted
+
+## Approval chain
+
+- [ ] Legal agent (template drafted)
+- [ ] Operator / business owner (intent + risk acknowledged)
+- [ ] **Qualified external counsel (signs off on operative language)**
+- [ ] Founder (final sign-off)
+
+---
+
+_Generated by Legal agent. **Not legal advice.** Templates start a conversation with qualified counsel; they don't replace it._
+`}function w(a,b){return`---
+type: workflow-blueprint
+client_id: ${a.clientId}
+created: ${(0,d.st)()}
+status: draft
+review_required: yes
+---
+
+# Workflow blueprint — ${a.displayName}
+
+> Drafted by Automation agent on ${(0,d.dR)()}. Operator-readable spec for an automation. **Implementation agent's \`scaffold_n8n_workflow\` tool produces the importable n8n JSON from this blueprint.**
+
+## Description
+
+${b.description??`Automation triggered by "${b.trigger}" performing "${b.action}".`}
+
+## Trigger
+
+- **Type:** ${b.trigger.trim()}
+- **Cadence:** ${b.schedule??"event-driven (runs on each trigger event)"}
+- **Source system:** (operator: where the trigger event originates — webhook URL / cron / inbox watcher)
+
+## Action
+
+${b.action.trim()}
+
+## Step-by-step flow
+
+1. **Trigger fires** — receives ${b.trigger}
+2. **Validate input** — schema check, reject malformed payloads with logged reason
+3. **Branch logic** — (operator: name the conditions that route to different actions)
+4. **Primary action** — ${b.action}
+5. **Side effects** — (notify / log / write back to source system)
+6. **Idempotency check** — same trigger payload twice doesn't double-action
+
+## Failure modes (each needs a handler)
+
+- **Source system unavailable** — retry with exponential backoff, max N attempts, fail-loud after
+- **Rate-limited** — queue + backoff, never drop silently
+- **Malformed payload** — reject with logged reason, alert operator if rate exceeds threshold
+- **Downstream action failed** — rollback or compensating action; don't leave half-state
+- **Schedule misfire** (if scheduled) — detect missed runs on next fire, decide catch-up vs skip
+
+## Observability requirements
+
+- [ ] Every run logs: timestamp, trigger payload (sanitised), success/failure, duration
+- [ ] Failed runs alert (channel: operator's preferred — email / Telegram / Slack)
+- [ ] Daily digest: success count, failure count, average duration
+
+## Hard rules
+
+- **Idempotent by construction.** Same trigger twice = same end state, not double action.
+- **No customer credentials in workflow.** Use the platform's secret manager.
+- **Cross-customer isolation.** A Tarheel workflow never reads ${"Tarheel Logistics"===a.displayName?"another customer's":"Tarheel's"} data. Every workflow scoped to one customer.
+- **Surface, don't auto-action exceptions.** Anything that touches money / legal / customer-visible: human-approval gate.
+- **Reversible by default.** New automations launch in dry-run mode; flip to live after a week of clean runs.
+
+## Estimated effort
+
+- **Build:** (operator: hours estimate + confidence)
+- **Maintenance:** (ongoing time per month — every automation has a maintenance tail)
+
+## Approval chain
+
+- [ ] Automation (blueprint drafted)
+- [ ] Operator (operational fit + responsibility for monitoring)
+- [ ] Implementation (technical feasibility + scaffolds the n8n JSON)
+- [ ] Founder (if cross-functional or > approval threshold)
+
+---
+
+_Generated by Automation agent. Blueprint pairs with Implementation's \`scaffold_n8n_workflow\` tool for the importable JSON._
+`}},57477:(a,b,c)=>{"use strict";c.d(b,{B0:()=>t,Ip:()=>k,T8:()=>q,_T:()=>p,dR:()=>r,mx:()=>o,nj:()=>v,st:()=>s,xB:()=>l,yv:()=>u,zG:()=>n,zY:()=>w});var d=c(73024),e=c(76760),f=c.n(e),g=c(48161),h=c.n(g);let i=/^[a-z0-9](?:[a-z0-9-]{0,58}[a-z0-9])?$/,j=["_inbox/","_Workflows/","00_Org/","01_Customers/","02_Sales/","03_Product/","04_Operations/","05_Finance/","06_Legal/","Permanent/","Wiki/"];function k(a){if(!i.test(a))throw Error(`Invalid clientId: ${a}`);return f().join(process.env.LEEDAB_BRAINS_ROOT?f().resolve(process.env.LEEDAB_BRAINS_ROOT):f().resolve(h().homedir(),"leedab-brains"),a)}async function l(a){try{return(await d.promises.stat(k(a))).isDirectory()}catch{return!1}}function m(a,b){if(b.includes("..")||f().isAbsolute(b))throw Error(`Refused: path contains traversal or is absolute: ${b}`);if(!j.some(a=>b.startsWith(a)))throw Error(`Refused: path "${b}" doesn't start with an allowed prefix (${j.join(", ")})`);let c=k(a),d=f().resolve(c,b);if(!d.startsWith(c+f().sep))throw Error(`Refused: path resolves outside brain root: ${b}`);return d}async function n(a,b){try{if(!await l(a))return{ok:!1,error:`No brain at ${k(a)}. Run bin/onboard-customer.sh first.`};let c=m(a,b),e=await d.promises.readFile(c,"utf8");return{ok:!0,body:e,path:c}}catch(a){return{ok:!1,error:a.message}}}async function o(a,b,c){try{if(!await l(a))return{ok:!1,error:`No brain at ${k(a)}. Run bin/onboard-customer.sh first.`};let e=m(a,b);return await d.promises.mkdir(f().dirname(e),{recursive:!0}),await d.promises.writeFile(e,c,"utf8"),{ok:!0,path:e,bytes:Buffer.byteLength(c,"utf8")}}catch(a){return{ok:!1,error:a.message}}}async function p(a,b,c={}){try{if(!await l(a))return{ok:!1,error:`No brain at ${k(a)}.`};let e=b.endsWith("/")?b:b+"/",g=m(a,e+"__list_sentinel__"),h=f().dirname(g),i=[];try{i=await d.promises.readdir(h)}catch{return{ok:!0,entries:[]}}let j=c.extension??".md",n=c.sinceISO?Date.parse(c.sinceISO):0,o=[];for(let a of i){if(j&&!a.endsWith(j))continue;let b=f().join(h,a),c=await d.promises.stat(b);c.isFile()&&(n&&c.mtimeMs<n||o.push({relativePath:e+a,absolutePath:b,bytes:c.size,modifiedISO:new Date(c.mtimeMs).toISOString()}))}return o.sort((a,b)=>Date.parse(b.modifiedISO)-Date.parse(a.modifiedISO)),{ok:!0,entries:c.limit?o.slice(0,c.limit):o}}catch(a){return{ok:!1,error:a.message}}}async function q(a,b,c){try{if(!await l(a))return{ok:!1,error:`No brain at ${k(a)}. Run bin/onboard-customer.sh first.`};let e=m(a,b);await d.promises.mkdir(f().dirname(e),{recursive:!0});let g="";try{let a=await d.promises.readFile(e,"utf8");a.length>0&&!a.endsWith("\n")&&(g="\n")}catch{}return await d.promises.appendFile(e,g+c,"utf8"),{ok:!0,path:e,bytes:Buffer.byteLength(g+c,"utf8")}}catch(a){return{ok:!1,error:a.message}}}function r(){return new Date().toISOString().slice(0,10)}function s(){return new Date().toISOString()}function t(a){return a.toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"").slice(0,60)}function u(a){if(!a.startsWith("---\n")&&!a.startsWith("---\r\n"))return{frontmatter:{},body:a};let b=a.indexOf("\n---",4);if(-1===b)return{frontmatter:{},body:a};let c=a.slice(4,b),d=a.slice(b+4).replace(/^\r?\n/,""),e={},f=null,g=[],h=()=>{null!==f&&(e[f]=[...g],g.length=0,f=null)};for(let a of c.split(/\r?\n/)){if(""===a.trim())continue;let b=a.match(/^\s*-\s+(.*)$/);if(b&&null!==f){let a=b[1].trim(),c=a.startsWith('"')&&a.endsWith('"')||a.startsWith("'")&&a.endsWith("'")?a.slice(1,-1):a;g.push(c);continue}let c=a.match(/^([A-Za-z0-9_\-.]+)\s*:\s*(.*)$/);if(c){h();let a=c[1],b=c[2];if(""===b){f=a;continue}e[a]=function(a){let b=a.trim();if(""===b||"null"===b||"~"===b)return null;if("true"===b)return!0;if("false"===b)return!1;if(b.startsWith('"')&&b.endsWith('"'))return b.slice(1,-1).replace(/\\"/g,'"').replace(/\\\\/g,"\\");if(b.startsWith("'")&&b.endsWith("'"))return b.slice(1,-1).replace(/\\'/g,"'");if(b.startsWith("[")&&b.endsWith("]")){let a=b.slice(1,-1).trim();return a?a.split(/\s*,\s*/).map(a=>{let b=a.trim();return b.startsWith('"')&&b.endsWith('"')||b.startsWith("'")&&b.endsWith("'")?b.slice(1,-1):b}):[]}return/^-?\d+$/.test(b)||/^-?\d*\.\d+$/.test(b)?Number(b):b}(b)}}return h(),{frontmatter:e,body:d}}function v(a,b){let c=Object.keys(a);if(0===c.length)return b.startsWith("---"),b;let d=["---"];for(let b of c){var e;d.push(`${b}: ${null===(e=a[b])?"null":"boolean"==typeof e||"number"==typeof e?String(e):Array.isArray(e)?"["+e.map(a=>/[,\s:#]/.test(a)?`"${a.replace(/"/g,'\\"')}"`:a).join(", ")+"]":""===e||/^[\d\s]/.test(e)||/[:#\n"']/.test(e)||"true"===e||"false"===e||"null"===e||"~"===e?`"${e.replace(/"/g,'\\"')}"`:e}`)}return d.push("---",""),d.join("\n")+b.replace(/^\n+/,"")}function w(a){if(!a||"object"!=typeof a||Array.isArray(a))return{ok:!1,error:"patch must be a flat object"};let b={};for(let[c,d]of Object.entries(a)){if(!/^[A-Za-z0-9_\-.]+$/.test(c))return{ok:!1,error:`invalid frontmatter key "${c}" (allowed: letters / digits / _ - .)`};if(null===d||"string"==typeof d||"number"==typeof d||"boolean"==typeof d)b[c]=d;else{if(!(Array.isArray(d)&&d.every(a=>"string"==typeof a)))return{ok:!1,error:`value for "${c}" must be string / number / boolean / null / string[] — got ${typeof d}`};b[c]=d}}return{ok:!0,patch:b}}},78335:()=>{},96487:()=>{}};