madarx 2.17.0 → 2.19.0

package/lib/tools/adapters/skill-bridge.js

@@ -0,0 +1,146 @@
+// Skill bridge — Phase 4 of voice/main-agent unification.
+//
+// Exposes a tightly-allowlisted set of first-party gstack CLI skills (the
+// visible-browser flows: /connect-chrome, /browse, /qa-only) as ONE in-app
+// tool. The main agent (and, by extension, voice — which now shares the full
+// catalog) can drive the same real browser the operator watches live.
+//
+// SECURITY — this crosses the Claude Code CLI trust boundary, so it is the most
+// sharply gated tool in the registry:
+//   • risk_level 'irreversible_external' → the main-agent path ALWAYS creates an
+//     approval request, even in trust-mode 'auto' (never bypassable).
+//   • registry.js force-gates it on the AGENT path too (added alongside
+//     browser_harness_run), so a sub-agent on auto can never self-run it.
+//   • enabled_default:false → the owner must explicitly install it first.
+//   • Hard env kill-switch MADARX_SKILL_BRIDGE_DISABLED=1.
+//   • Only skills on SKILL_BRIDGE_ALLOWLIST may be invoked — the LLM cannot
+//     name an arbitrary skill or shell command. The instruction is passed as
+//     data, never interpolated into a shell line.
+//   • The spawned CLI still runs under bypassPermissions bounded by the
+//     load-bearing deny list in .claude/settings.json (no rm/sudo/secret reads/
+//     network-from-shell/etc.).
+//
+// These are FIRST-PARTY skills (gstack, shipped with the repo), NOT
+// agent-authored code — so this does not violate the "never load/execute
+// LLM-authored code" invariant. The agent only chooses WHICH allowlisted skill
+// and WHAT instruction; it never supplies the skill body.
+
+import { runClaudeCodeAgent } from '../../agent-engines.js';
+import { DATA_DIR, WORKSPACE } from '../../paths.js';
+import { redactToolOutput } from '../safety.js';
+
+const DEFAULT_TIMEOUT_MS = 180000;
+const MAX_TIMEOUT_MS = 600000;
+const MAX_INSTRUCTION_CHARS = 4000;
+const MAX_SUMMARY_CHARS = 12000;
+const DEFAULT_MAX_TURNS = 25;
+
+// Allowlisted skills the bridge may invoke, keyed by the slug the agent passes.
+// Each entry: how to phrase the invocation + a one-line purpose. Keep this list
+// SHORT and visible-browser-focused; adding an entry widens the trust surface.
+const SKILL_BRIDGE_ALLOWLIST = {
+  'connect-chrome': {
+    purpose: 'Launch the visible GStack Chromium browser the operator can watch live.',
+    invoke: 'connect-chrome',
+  },
+  browse: {
+    purpose: 'Drive a browser to navigate, click, type, read pages, and capture screenshots.',
+    invoke: 'browse',
+  },
+  'qa-only': {
+    purpose: 'Run a QA pass against a running site and report findings (no fixes).',
+    invoke: 'qa-only',
+  },
+};
+
+export function listBridgeableSkills() {
+  return Object.entries(SKILL_BRIDGE_ALLOWLIST).map(([slug, meta]) => ({ slug, purpose: meta.purpose }));
+}
+
+function maxSummaryChars() {
+  const v = Number(process.env.MADARX_TOOL_OUTPUT_MAX_BYTES || MAX_SUMMARY_CHARS);
+  if (!Number.isFinite(v) || v <= 0) return MAX_SUMMARY_CHARS;
+  return Math.min(MAX_SUMMARY_CHARS, Math.floor(v));
+}
+
+function capSummary(text) {
+  return redactToolOutput(String(text || '').slice(0, maxSummaryChars()));
+}
+
+// Sync validation — runs BEFORE the approval/trust gates (PREFLIGHTS map). Throw
+// to reject outright; never reach the model with an off-allowlist skill.
+export function skillBridgeRunPreflight(input = {}) {
+  if (process.env.MADARX_SKILL_BRIDGE_DISABLED === '1') {
+    throw new Error('skill bridge is disabled (MADARX_SKILL_BRIDGE_DISABLED=1)');
+  }
+  const skill = String(input.skill || '').trim().toLowerCase();
+  if (!skill) throw new Error('skill is required');
+  const entry = SKILL_BRIDGE_ALLOWLIST[skill];
+  if (!entry) {
+    throw new Error(`skill "${skill}" is not bridgeable. Allowed: ${Object.keys(SKILL_BRIDGE_ALLOWLIST).join(', ')}`);
+  }
+  const instruction = String(input.instruction || '').trim();
+  if (!instruction) throw new Error('instruction is required');
+  if (instruction.length > MAX_INSTRUCTION_CHARS) {
+    throw new Error(`instruction is too long: ${instruction.length} chars; max ${MAX_INSTRUCTION_CHARS}`);
+  }
+  const timeoutMs = Math.max(
+    5000,
+    Math.min(MAX_TIMEOUT_MS, Number(input.timeout_ms || DEFAULT_TIMEOUT_MS) || DEFAULT_TIMEOUT_MS),
+  );
+  return { skill, entry, instruction, timeoutMs };
+}
+
+function buildSystemPrompt(skill, entry) {
+  return [
+    'You are a single-purpose runner spawned by the madarX main agent.',
+    `Your ONLY job: invoke the /${entry.invoke} skill and carry out the operator instruction with it.`,
+    `Purpose of this skill: ${entry.purpose}`,
+    'Rules:',
+    `- Use ONLY the /${entry.invoke} skill. Do not invoke other skills, write files outside workspace, or run unrelated commands.`,
+    '- Do not read secrets, .env files, or anything the deny list blocks.',
+    '- When done, reply with a concise plain-text summary of what happened and what you observed (URLs visited, key results). No markdown tables.',
+  ].join('\n');
+}
+
+export async function skillBridgeRun(input = {}, options = {}) {
+  const { skill, entry, instruction, timeoutMs } = skillBridgeRunPreflight(input);
+  const started = Date.now();
+
+  const systemPrompt = buildSystemPrompt(skill, entry);
+  const userMessage = `Use the /${entry.invoke} skill to do the following:\n\n${instruction}`;
+
+  try {
+    const text = await runClaudeCodeAgent({
+      systemPrompt,
+      userMessage,
+      maxTurns: DEFAULT_MAX_TURNS,
+      timeoutMs,
+      // Bounded toolset the gstack skills need (browser daemon runs via Bash).
+      // bypassPermissions + the .claude deny list remain the hard boundary.
+      allowedTools: ['Skill', 'Bash', 'Read', 'Write', 'Glob', 'Grep', 'WebFetch', 'WebSearch'],
+      addDirs: [WORKSPACE, DATA_DIR],
+      agentId: options.agent_id || 'main',
+      agentName: 'skill-bridge',
+    });
+
+    const summary = capSummary(text);
+    return {
+      ok: true,
+      tool: 'skill_bridge_run',
+      status: 'complete',
+      skill,
+      summary,
+      duration_ms: Date.now() - started,
+    };
+  } catch (err) {
+    return {
+      ok: false,
+      tool: 'skill_bridge_run',
+      status: 'failed',
+      skill,
+      error: String(err?.message || err).slice(0, 1000),
+      duration_ms: Date.now() - started,
+    };
+  }
+}

package/lib/tools/registry.js

@@ -61,6 +61,7 @@ import { gmail_messages_list, gmail_message_read, gmail_thread_read } from './ad
 import { calendar_events_list, calendar_event_read } from './adapters/google-calendar.js';
 import { transcribe_audio } from './adapters/transcribe.js';
 import { browserHarnessRun, browserHarnessRunPreflight } from './adapters/browser-harness.js';
+import { skillBridgeRun, skillBridgeRunPreflight } from './adapters/skill-bridge.js';
 import { browserNavigate, browserExtractStructured } from './adapters/browser-fetch.js';
 import { browserOpen, browserAct, browserExtract, browserScreenshot } from './adapters/browser-session.js';
 import { voice_speak } from './adapters/tts.js';
@@ -348,6 +349,36 @@ const MARKETPLACE_TOOLS = [
       required: ['script'],
     },
   },
+  {
+    name: 'skill_bridge_run',
+    title: 'Skill Bridge',
+    description: 'Run one allowlisted first-party gstack CLI skill (connect-chrome, browse, qa-only) to drive the real visible browser the operator can watch live. Crosses the Claude Code CLI trust boundary, so it is ALWAYS approval-gated for every run (even in trust-mode auto) and disabled by default. Pass the skill slug and a plain-language instruction; the bridge invokes only that skill, bounded by the .claude deny list.',
+    category: 'browser',
+    risk_level: 'irreversible_external',
+    approval_required: true,
+    approval_mode: 'approval_required',
+    required_env: [],
+    enabled_default: false,
+    allowlist_required: false,
+    rate_limit: { window_seconds: 300, max: 10 },
+    input_schema: {
+      type: 'object',
+      properties: {
+        skill: {
+          type: 'string',
+          description: 'Skill slug to invoke. One of: connect-chrome, browse, qa-only.',
+          enum: ['connect-chrome', 'browse', 'qa-only'],
+        },
+        instruction: {
+          type: 'string',
+          description: 'Plain-language instruction for the skill (e.g. "open Google News and search US Iran war, read the top 3 headlines"). Max 4000 chars.',
+        },
+        timeout_ms: { type: 'number', description: 'Timeout in milliseconds, capped at 600000. Default 180000.' },
+        approval_id: { type: 'string', description: 'Approval request ID for one-shot execution.' },
+      },
+      required: ['skill', 'instruction'],
+    },
+  },
   {
     name: 'browser_open',
     title: 'Browser Open (Playwright)',
@@ -773,7 +804,7 @@ const MARKETPLACE_TOOLS = [
   {
     name: 'gh_repo_list',
     title: 'List GitHub repos',
-    description: 'List GitHub repositories accessible to the configured token.',
+    description: 'List GitHub repositories the token can access. Without `org`, lists across all affiliations (owned + collaborator + organization_member). Pass `org` to list a specific organization\'s repos you were granted access to.',
     category: 'github',
     risk_level: 'low',
     required_env: ['GITHUB_TOKEN'],
@@ -784,10 +815,13 @@ const MARKETPLACE_TOOLS = [
     input_schema: {
       type: 'object',
       properties: {
-        visibility: { type: 'string', description: 'Filter by visibility: all, public, private.' },
-        type: { type: 'string', description: 'Filter by type: all, owner, member.' },
+        org: { type: 'string', description: 'List repos for this organization/owner (GET /orgs/{org}/repos). Use this to reach org repos you were granted access to.' },
+        affiliation: { type: 'string', description: 'Comma-separated: owner, collaborator, organization_member. Default lists all three. Ignored when `org` is set.' },
+        visibility: { type: 'string', description: 'Filter by visibility: all, public, private. Ignored when `org` is set.' },
+        type: { type: 'string', description: 'Without org: all|owner|member (mutually exclusive with affiliation). With org: all|public|private|forks|sources|member.' },
         sort: { type: 'string', description: 'Sort by: created, updated, pushed, full_name.' },
         per_page: { type: 'number', description: 'Results per page, 1-100. Default 30.' },
+        page: { type: 'number', description: 'Page number for pagination. Default 1.' },
       },
     },
   },
@@ -1737,6 +1771,7 @@ const ADAPTERS = {
   calendar_event_read,
   transcribe_audio,
   browser_harness_run: browserHarnessRun,
+  skill_bridge_run: skillBridgeRun,
   browser_open: browserOpen,
   browser_act: browserAct,
   browser_extract: browserExtract,
@@ -1786,6 +1821,7 @@ const PREFLIGHTS = {
   process_start: processStartPreflight,
   process_kill: processKillPreflight,
   browser_harness_run: browserHarnessRunPreflight,
+  skill_bridge_run: skillBridgeRunPreflight,
 };
 
 function requiredEnvNames(required = []) {
@@ -2461,7 +2497,7 @@ export async function executeRegistryTool(toolName, input = {}, options = {}) {
   // existing contract — the owner's explicit per-agent permission mode governs
   // them — except browser_harness_run, which has always force-gated here.
   const agentIrreversibleGate = isIrreversibleExternal(tool, input)
-    && (toolName === 'browser_harness_run' || Boolean(tool.source));
+    && (toolName === 'browser_harness_run' || toolName === 'skill_bridge_run' || Boolean(tool.source));
   if (options.agent_id && agentIrreversibleGate && !consumeApprovalRequest(input.approval_id, { action_type: `agent_tool_irreversible:${toolName}` })) {
     const req = createApprovalRequest({
       action_type: `agent_tool_irreversible:${toolName}`,

package/lib/voice/context.js

@@ -210,7 +210,7 @@ export function buildVoiceContext(opts = {}) {
     'Cross-scope access: find_artifacts searches every project, not just the active one. Call list_projects to enumerate projects on demand. Call get_state with project_id="<slug or id>" to read a specific project, or with project_id=null to read across all projects. Spaces are client-side UI tabs that group artifacts — they do not gate your reach; any artifact in any space is reachable via find_artifacts.',
   );
   sections.push(
-    'Rules: never speak API keys, ephemeral tokens, or secret values aloud. If a tool returns approval_required, tell the operator one short sentence and stop. Prefer artifact creation for anything longer than ~30 spoken seconds. Never invent artifact IDs — call find_artifacts or get_state first. To read an artifact\'s body, call read_artifact with the id from find_artifacts; do NOT claim you have read it until that call returns content. ARTIFACT CREATION — choose the right tool: (1) For any VISUAL result the operator expects to look designed — a list page, snapshot, brief, report, dashboard, presentation, landing page, "make a page for X", "show me X" — call generate_ui with a specific description that includes the actual content/data to render. generate_ui produces a full styled HTML document using the madarX brand system (typography, color, layout). (2) For plain written notes, scratch summaries, or pure markdown exports the operator asked for explicitly, use create_artifact with kind="markdown". Never use create_artifact for visual outputs — it stores raw text and the dashboard renders it as a basic document, not a designed page. Whenever the operator asks for a summary, brief, page, doc, or report, create the artifact unprompted as the result of the turn — do not ask for permission first.',
+    'Rules: never speak API keys, ephemeral tokens, or secret values aloud. If a tool returns approval_required, tell the operator one short sentence and stop. Prefer artifact creation for anything longer than ~30 spoken seconds. Never invent artifact IDs — call find_artifacts or get_state first. To read an artifact\'s body, call read_artifact with the id from find_artifacts; do NOT claim you have read it until that call returns content. ARTIFACT CREATION — choose the right tool: (1) For any VISUAL result the operator expects to look designed — a list page, snapshot, brief, report, dashboard, presentation, landing page, "make a page for X", "show me X" — call generate_ui with a specific description that includes the actual content/data to render. generate_ui produces a full styled HTML document using the madarX brand system (typography, color, layout). (2) For plain written notes, scratch summaries, or pure markdown exports the operator asked for explicitly, use create_artifact with kind="markdown". Never use create_artifact for visual outputs — it stores raw text and the dashboard renders it as a basic document, not a designed page. Whenever the operator asks for a summary, brief, page, doc, or report, create the artifact unprompted as the result of the turn — do not ask for permission first. BRAND IS MANDATORY: every visual artifact MUST follow the madarX brand guidelines above (palette, typography, layout) — generate_ui applies them automatically, so always route designed output through generate_ui. Never emit an off-brand layout, default-looking page, or any emoji in an artifact.',
   );
 
   const instructions = sections.join('\n\n').slice(0, 7800);

package/lib/voice/tools.js

@@ -64,8 +64,40 @@ function mainAgentToolList() {
   return getTools();
 }
 
+// Voice gets the SAME full tool catalog as the typed main agent — that is the
+// product contract (voice IS the main agent) and it must match what the voice
+// instruction block advertises (lib/voice/context.js lists every tool by name).
+// Latency is controlled the right way instead: session.reasoning.effort='low'
+// on gpt-realtime-2 (lib/realtime-openai.js) keeps first-audio snappy while the
+// model still has the whole toolset. The model's improved tool-selection avoids
+// over-calling on chit-chat. For deployments that prefer a tiny conversational
+// toolset over capability, set MADARX_VOICE_FAST_TOOLS=1 to trim to this set.
+const FAST_VOICE_TOOL_NAMES = new Set([
+  'web_search',
+  'web_fetch',
+  'find_artifacts',
+  'get_state',
+  'create_artifact',
+  'update_artifact',
+  'generate_ui',
+  'voice_speak',
+  'create_agent',
+  'upsert_schedule',
+]);
+
+function voiceToolList() {
+  const all = mainAgentToolList();
+  if (process.env.MADARX_VOICE_FAST_TOOLS === '1') {
+    const trimmed = all.filter(t => FAST_VOICE_TOOL_NAMES.has(t.name));
+    if (trimmed.length) return trimmed;
+  }
+  return all;
+}
+
 export function getVoiceToolCatalog() {
-  return mainAgentToolList().map(tool => ({
+  // Same source as getVoiceToolsForRealtime so the advertised tool list in the
+  // instruction block always matches what is actually attached to the session.
+  return voiceToolList().map(tool => ({
     name: tool.name,
     title: humanTitle(tool.name),
     description: tool.description || '',
@@ -74,7 +106,7 @@ export function getVoiceToolCatalog() {
 }
 
 export function getVoiceToolsForRealtime() {
-  return mainAgentToolList().map(toRealtimeShape);
+  return voiceToolList().map(toRealtimeShape);
 }
 
 export function isVoiceTool(name) {

package/middleware.js

@@ -1,5 +1,6 @@
 import { NextResponse } from 'next/server';
 import { createServerClient } from '@supabase/ssr';
+import { resolveEnvAuthConfig } from './lib/auth-env-fastpath.js';
 
 const PUBLIC_PREFIXES = [
   '/login',
@@ -59,18 +60,14 @@ function safeNext(pathname, search) {
 
 // Runs in the Edge runtime — cannot read node:sqlite. Resolves the UI-driven
 // auth config via the public /api/auth/config route, cached briefly in module
-// scope. An explicit MADARX_AUTH_MODE env value is the fast-path backstop.
+// scope. An explicit MADARX_AUTH_MODE env value WITH resolvable creds is the
+// fast-path backstop (resolveEnvAuthConfig); mode-without-creds defers to the
+// fetch so vault-stored keys still resolve.
 let _cfgCache = { at: 0, data: null };
 
 async function resolveAuthConfig(request) {
-  const envRaw = (process.env.MADARX_AUTH_MODE || '').trim().toLowerCase();
-  if (envRaw === 'local' || envRaw === 'supabase') {
-    return {
-      authMode: envRaw,
-      supabaseUrl: process.env.NEXT_PUBLIC_SUPABASE_URL || null,
-      supabaseAnonKey: process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY || null,
-    };
-  }
+  const fromEnv = resolveEnvAuthConfig(process.env);
+  if (fromEnv) return fromEnv;
   const now = Date.now();
   if (_cfgCache.data && now - _cfgCache.at < 10_000) return _cfgCache.data;
   try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "madarx",
-  "version": "2.17.0",
+  "version": "2.19.0",
   "type": "module",
   "description": "Madarx OS — Next.js product with SQLite-backed runtime, scheduled cron daemon, and approval-gated local runners.",
   "license": "MIT",
@@ -44,6 +44,8 @@
     "prepublishOnly": "npm run build && node --no-warnings scripts/prepack-guard.mjs",
     "prepack": "node --no-warnings scripts/prepack-guard.mjs",
     "clean:dist-data": "node --no-warnings scripts/prepack-guard.mjs",
+    "build:cloud-schema": "node --no-warnings scripts/build-cloud-schema.mjs",
+    "prebuild": "node --no-warnings scripts/build-cloud-schema.mjs",
     "build": "NODE_OPTIONS=--no-warnings next build",
     "postbuild": "node --no-warnings scripts/postbuild-standalone.mjs",
     "postinstall": "node --no-warnings scripts/postinstall-splash.mjs",

package/scripts/build-cloud-schema.mjs

@@ -0,0 +1,118 @@
+#!/usr/bin/env node
+/**
+ * scripts/build-cloud-schema.mjs — generate the shipped cloud-schema bundle.
+ *
+ * WHY THIS EXISTS
+ *   The onboarding wizard needs to (a) show the operator the exact SQL that
+ *   stands up the Supabase shared layer, and (b) apply it one-click via the
+ *   Management API. The canonical SQL lives in supabase/migrations/*.sql — but
+ *   `supabase/` is NOT in package.json `files`, so a global install never ships
+ *   those files. This script concatenates the migrations (in deterministic
+ *   order) into lib/cloud-schema.generated.js, which DOES ship (lib/ is
+ *   whitelisted). The migrations stay the single source of truth; this is a
+ *   build artifact, regenerated on every `prebuild`.
+ *
+ * OUTPUT
+ *   lib/cloud-schema.generated.js exporting:
+ *     - CLOUD_SCHEMA_SQL  : one idempotent SQL script (all migrations, ordered)
+ *     - REQUIRED_TABLES   : the public.* tables the script creates
+ *     - SCHEMA_VERSION    : short content hash (changes when the SQL changes)
+ *     - MIGRATION_FILES   : the source filenames, in applied order
+ *
+ * Run: node scripts/build-cloud-schema.mjs   (also wired into `prebuild`)
+ */
+
+import fs from 'node:fs';
+import path from 'node:path';
+import { createHash } from 'node:crypto';
+import { fileURLToPath } from 'node:url';
+
+const here = path.dirname(fileURLToPath(import.meta.url));
+const ROOT = path.resolve(here, '..');
+const MIGRATIONS_DIR = path.join(ROOT, 'supabase', 'migrations');
+const OUT_FILE = path.join(ROOT, 'lib', 'cloud-schema.generated.js');
+
+function main() {
+  if (!fs.existsSync(MIGRATIONS_DIR)) {
+    console.error(`[build-cloud-schema] migrations dir not found: ${MIGRATIONS_DIR}`);
+    process.exit(1);
+  }
+
+  // Deterministic order: lexical filename sort. The migrations are numbered and
+  // every statement is idempotent (CREATE … IF NOT EXISTS, drop-then-create
+  // policies), so concatenation in this order is safe to run as one script.
+  const files = fs
+    .readdirSync(MIGRATIONS_DIR)
+    .filter((f) => f.endsWith('.sql'))
+    .sort((a, b) => a.localeCompare(b));
+
+  if (!files.length) {
+    console.error('[build-cloud-schema] no .sql migrations found');
+    process.exit(1);
+  }
+
+  const parts = [];
+  parts.push('-- MadarX OS — Supabase shared-layer schema (generated bundle).');
+  parts.push('-- Generated from supabase/migrations/*.sql — DO NOT EDIT THE BUNDLE.');
+  parts.push('-- Idempotent: safe to run repeatedly in the Supabase SQL editor.');
+  parts.push('');
+
+  for (const file of files) {
+    const sql = fs.readFileSync(path.join(MIGRATIONS_DIR, file), 'utf8').trim();
+    parts.push(`-- ════════════════════════════════════════════════════════════════════`);
+    parts.push(`-- ▶ ${file}`);
+    parts.push(`-- ════════════════════════════════════════════════════════════════════`);
+    parts.push(sql);
+    parts.push('');
+  }
+
+  // Ask PostgREST to reload its schema cache so freshly-created tables are
+  // queryable immediately (the readiness probe hits PostgREST). Supabase also
+  // reloads via DDL event triggers, but this makes manual SQL-editor runs and
+  // Management-API applies verifiable without a wait.
+  parts.push('-- Refresh the PostgREST schema cache so new tables are visible now.');
+  parts.push("notify pgrst, 'reload schema';");
+  parts.push('');
+
+  const bundle = parts.join('\n');
+
+  // Parse the public.* tables the bundle creates so REQUIRED_TABLES stays in
+  // sync with the SQL automatically.
+  const tableRe = /create\s+table\s+(?:if\s+not\s+exists\s+)?public\.([a-z_][a-z0-9_]*)/gi;
+  const tables = new Set();
+  let m;
+  while ((m = tableRe.exec(bundle)) !== null) tables.add(m[1]);
+  const requiredTables = [...tables].sort();
+
+  const version = createHash('sha256').update(bundle).digest('hex').slice(0, 12);
+
+  const out =
+`/**
+ * lib/cloud-schema.generated.js — GENERATED. DO NOT EDIT BY HAND.
+ *
+ * Produced by scripts/build-cloud-schema.mjs from supabase/migrations/*.sql.
+ * Regenerate with: node scripts/build-cloud-schema.mjs  (runs on \`prebuild\`).
+ */
+
+/** The full idempotent SQL that stands up the Supabase shared layer. */
+export const CLOUD_SCHEMA_SQL = ${JSON.stringify(bundle)};
+
+/** Tables the bundle creates — used to probe whether the schema is applied. */
+export const REQUIRED_TABLES = ${JSON.stringify(requiredTables)};
+
+/** Source migration filenames, in applied order. */
+export const MIGRATION_FILES = ${JSON.stringify(files)};
+
+/** Short content hash; changes whenever the bundled SQL changes. */
+export const SCHEMA_VERSION = ${JSON.stringify(version)};
+`;
+
+  fs.writeFileSync(OUT_FILE, out, 'utf8');
+  console.log(
+    `[build-cloud-schema] wrote ${path.relative(ROOT, OUT_FILE)} ` +
+    `(${files.length} migrations, ${requiredTables.length} tables, ` +
+    `${bundle.length} bytes SQL, version ${version})`
+  );
+}
+
+main();

package/scripts/inspect-cloud-orgs.mjs

@@ -0,0 +1,30 @@
+// READ-ONLY: dump the shared-layer org tables so we can see current cloud state.
+// Never prints secrets. Run: node --env-file=.env.local scripts/inspect-cloud-orgs.mjs
+import { isSharedCloudReady, getSharedCloudAdmin } from '../lib/shared-cloud.js';
+
+if (!isSharedCloudReady()) {
+  console.error('shared cloud not configured (SUPABASE_URL + SUPABASE_SERVICE_ROLE_KEY missing).');
+  process.exit(1);
+}
+
+const admin = getSharedCloudAdmin();
+
+async function dump(table, opts = {}) {
+  try {
+    const rows = await admin.select(table, { limit: 500, ...opts });
+    console.log(`\n=== ${table} (${rows.length}) ===`);
+    for (const r of rows) console.log(JSON.stringify(r));
+    return rows;
+  } catch (err) {
+    console.log(`\n=== ${table} — ERROR: ${err.message} ===`);
+    return [];
+  }
+}
+
+await dump('organizations');
+await dump('org_memberships');
+await dump('shared_spaces');
+await dump('shared_artifacts');
+await dump('share_links');
+await dump('org_invites');
+await dump('shared_artifact_acl');

package/scripts/migrate-auth-v1.mjs

@@ -83,6 +83,15 @@ export function runAuthV1Migration(db) {
      VALUES ('mem-local-owner', 'personal-org', 'local-user-1', 'owner', ?)`
   ).run(now);
 
+  // ── Step 4b: Self-heal default-org ownership ──────────────────────────────
+  // The synthetic `local-user-1` owns personal-org (step 4). When the operator
+  // flips to Supabase mode and signs in, they get a `member` row — and because a
+  // membership now exists, the first-login owner-bootstrap is skipped, so they
+  // are permanently stuck below admin (every owner/admin gate 403s). Promote the
+  // real operator to owner of their own default org. Idempotent + conservative:
+  // only acts when there is NO real owner yet and the operator is unambiguous.
+  const heal = healDefaultOrgOwnership(db);
+
   // ── Step 5: Bind orphaned projects to personal-org ────────────────────────
   const projectsResult = db
     .prepare("UPDATE projects SET org_id = 'personal-org' WHERE org_id IS NULL")
@@ -97,9 +106,91 @@ export function runAuthV1Migration(db) {
   return {
     projectsUpdated: projectsResult.changes,
     artifactsUpdated: artifactsResult.changes,
+    ownershipHeal: heal,
   };
 }
 
+const SYNTHETIC_LOCAL_USER = 'local-user-1';
+const DEFAULT_ORG = 'personal-org';
+
+/**
+ * Ensure the real operator owns the default org (`personal-org`).
+ *
+ * Why: the seed makes the synthetic `local-user-1` the owner. In Supabase mode a
+ * real user is added as a `member`, and the owner-bootstrap is then skipped (a
+ * membership already exists), leaving the operator permanently below admin.
+ *
+ * Rule (idempotent, conservative — never downgrades, never guesses):
+ *   • If a real (non-synthetic) owner already exists → no-op.
+ *   • Else, among real members of the default org:
+ *       - exactly one  → promote them to owner (they are the operator).
+ *       - two or more  → ambiguous; promote only the one matching
+ *                        MADARX_OWNER_EMAIL if set, else leave for a human.
+ *       - zero         → no-op (pure local install, no real user yet).
+ *
+ * @param {DatabaseSync} db
+ * @returns {{ status: string, user_id?: string, basis?: string, count?: number }}
+ */
+export function healDefaultOrgOwnership(db) {
+  const org = db.prepare('SELECT id FROM organizations WHERE id = ?').get(DEFAULT_ORG);
+  if (!org) return { status: 'no_default_org' };
+
+  const realOwner = db
+    .prepare("SELECT user_id FROM org_memberships WHERE org_id = ? AND role = 'owner' AND user_id != ?")
+    .get(DEFAULT_ORG, SYNTHETIC_LOCAL_USER);
+  if (realOwner) return { status: 'already_owned', user_id: realOwner.user_id };
+
+  const realMembers = db
+    .prepare("SELECT user_id FROM org_memberships WHERE org_id = ? AND user_id != ?")
+    .all(DEFAULT_ORG, SYNTHETIC_LOCAL_USER);
+  if (realMembers.length === 0) return { status: 'no_real_user' };
+
+  let targetUserId;
+  let basis;
+  if (realMembers.length === 1) {
+    targetUserId = realMembers[0].user_id;
+    basis = 'sole_member';
+  } else {
+    // Ambiguous default org — only act on an explicit operator-of-record.
+    const ownerEmail = process.env.MADARX_OWNER_EMAIL;
+    if (!ownerEmail || ownerEmail === 'owner@local.dev') return { status: 'ambiguous', count: realMembers.length };
+    const match = db
+      .prepare(
+        `SELECT m.user_id FROM org_memberships m JOIN users u ON u.id = m.user_id
+         WHERE m.org_id = ? AND m.user_id != ? AND lower(u.email) = lower(?)`
+      )
+      .all(DEFAULT_ORG, SYNTHETIC_LOCAL_USER, ownerEmail);
+    if (match.length !== 1) return { status: 'ambiguous', count: realMembers.length };
+    targetUserId = match[0].user_id;
+    basis = 'owner_email';
+  }
+
+  const res = db
+    .prepare("UPDATE org_memberships SET role = 'owner' WHERE org_id = ? AND user_id = ? AND role != 'owner'")
+    .run(DEFAULT_ORG, targetUserId);
+  if (!res.changes) return { status: 'already_owned', user_id: targetUserId };
+
+  // Best-effort audit — never block boot on it.
+  try {
+    db.prepare(
+      `INSERT INTO audit_logs (id, at, type, summary, status, meta, user_id, org_id, action_target_id, action_target_type)
+       VALUES (?, ?, 'auth.default_org.owner_healed', ?, 'success', ?, ?, ?, ?, 'org_membership')`
+    ).run(
+      `audit-orgheal-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
+      nowIso(),
+      `Promoted real operator to owner of ${DEFAULT_ORG} (was member; default org was owned only by synthetic ${SYNTHETIC_LOCAL_USER})`,
+      JSON.stringify({ org_id: DEFAULT_ORG, user_id: targetUserId, basis }),
+      targetUserId,
+      DEFAULT_ORG,
+      targetUserId,
+    );
+  } catch {
+    // audit table not ready / schema drift — promotion still stands.
+  }
+
+  return { status: 'promoted', user_id: targetUserId, basis };
+}
+
 // ── CLI entry point ───────────────────────────────────────────────────────────
 // ESM direct-run guard: only execute main() when this file is the entry point,
 // not when imported as a module (e.g. by lib/seeds.js).
@@ -133,6 +224,7 @@ async function main() {
     console.log('  personal-org: ensured');
     console.log('  local-user-1: ensured (email: ' + ownerEmail + ')');
     console.log('  owner membership: ensured');
+    console.log('  ownership heal: ' + result.ownershipHeal.status + (result.ownershipHeal.user_id ? ' (' + result.ownershipHeal.user_id + ')' : ''));
     console.log('  projects bound: ' + result.projectsUpdated);
     console.log('  artifacts defaulted: ' + result.artifactsUpdated);
     console.log('  marker: ' + MARKER);

package/.next/standalone/.next/server/chunks/3806.js

@@ -1 +0,0 @@
-exports.id=3806,exports.ids=[3806],exports.modules={6974:(a,b,c)=>{Promise.resolve().then(c.bind(c,35271))},35271:(a,b,c)=>{"use strict";c.d(b,{default:()=>d});let d=(0,c(97954).registerClientReference)(function(){throw Error("Attempted to call the default export of \"/home/runner/work/madarx-os/madarx-os/app/components/admin/project-switcher.jsx\" from the server, but it's on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"/home/runner/work/madarx-os/madarx-os/app/components/admin/project-switcher.jsx","default")},49432:(a,b,c)=>{"use strict";c.a(a,async(a,d)=>{try{c.r(b),c.d(b,{"40731e16fca771cf253d8b5506395ac08dbbbbfdd2":()=>e.$$RSC_SERVER_ACTION_0});var e=c(91845),f=a([e]);e=(f.then?(await f)():f)[0],d()}catch(a){d(a)}})},86893:(a,b,c)=>{"use strict";c.d(b,{hI:()=>g,iN:()=>f,pp:()=>i,qs:()=>h});var d=c(75338),e=c(35271);function f({kicker:a="madarX OS v1.0",title:b,description:c,actions:f,hideProjectSwitcher:g,children:h}){return(0,d.jsxs)("main",{className:"admin-shell",children:[(0,d.jsxs)("header",{className:"admin-header",children:[(0,d.jsxs)("div",{children:[(0,d.jsx)("span",{className:"admin-kicker",children:a}),(0,d.jsx)("h1",{children:b}),c?(0,d.jsx)("p",{children:c}):null]}),(0,d.jsxs)("div",{className:"admin-header-actions",children:[g?null:(0,d.jsx)(e.default,{}),f]})]}),h]})}function g({label:a,value:b,tone:c}){return(0,d.jsxs)("div",{className:`admin-stat ${c||""}`,children:[(0,d.jsx)("b",{children:b}),(0,d.jsx)("span",{children:a})]})}function h({children:a,tone:b="neutral"}){return(0,d.jsx)("span",{className:`admin-pill ${b}`,children:a})}function i({title:a,children:b}){return(0,d.jsxs)("div",{className:"admin-empty",children:[(0,d.jsx)("b",{children:a}),(0,d.jsx)("p",{children:b})]})}},89670:(a,b,c)=>{Promise.resolve().then(c.bind(c,94657))},91845:(a,b,c)=>{"use strict";c.a(a,async(a,d)=>{try{c.r(b),c.d(b,{$$RSC_SERVER_ACTION_0:()=>u,default:()=>p,dynamic:()=>q,runtime:()=>r});var e=c(75338),f=c(75879);c(68633);var g=c(16780),h=c(82161),i=c(86893),j=c(83963),k=c(60105),l=a([j,k]);[j,k]=l.then?(await l)():l;let q="force-dynamic",r="nodejs",s={executive:"Executive",manager:"Manager",team_lead:"Team Lead",individual_contributor:"Contributor"},t={executive:"mars",manager:"ready",team_lead:"warn",individual_contributor:"neutral"};function m(a=""){return a.split(/\s+/).map(a=>a[0]).filter(Boolean).slice(0,2).join("").toUpperCase()||"\xb7"}let u=async function(a){let b=String(a.get("agent_id")||"").trim();if(!b)return;let c=String(a.get("reports_to")||"").trim(),d={reports_to:""===c?null:c},e=String(a.get("role")||"").trim();e&&(d.role=e);let f=String(a.get("title")||"").trim();(f||a.has("title"))&&(d.title=f||null);try{(0,j.jN)(b,d)}catch(a){console.warn("updateAgentOrg failed",a?.message)}(0,g.revalidatePath)("/org"),(0,g.revalidatePath)("/agents"),(0,h.redirect)("/org")};function n({node:a,workloadById:b}){let c=function(a){if(a.role&&s[a.role])return a.role;let b=a.reports?.length||0;return b>=4?"executive":b>=2?"manager":1===b?"team_lead":"individual_contributor"}(a),d=s[c],f=t[c],g=a.reports?.length||0,h=b.get(a.id),j=Number(h?.active_tasks||0),k=Number(h?.blocked_tasks||0),l=Number(h?.completed_tasks||0),n=a.status||"created";return(0,e.jsxs)("article",{className:`org-card org-card--${c}`,"data-reports":g>0?"has":"none",children:[(0,e.jsxs)("div",{className:"org-card-head",children:[(0,e.jsx)("div",{className:"org-card-avatar","aria-hidden":"true",children:m(a.name)}),(0,e.jsxs)("div",{className:"org-card-identity",children:[(0,e.jsx)("div",{className:"org-card-name",children:a.name}),(0,e.jsx)("div",{className:"org-card-title",children:a.title||a.mission?.slice(0,64)||"No title set"})]})]}),(0,e.jsxs)("div",{className:"org-card-meta",children:[(0,e.jsx)(i.qs,{tone:f,children:d}),(0,e.jsx)(i.qs,{tone:"heartbeat ok"===n?"ready":"terminated"===n?"danger":"neutral",children:n}),g>0?(0,e.jsxs)(i.qs,{tone:"neutral",children:[g," report",1===g?"":"s"]}):null]}),(0,e.jsxs)("dl",{className:"org-card-stats",children:[(0,e.jsxs)("div",{children:[(0,e.jsx)("dt",{children:"Active"}),(0,e.jsx)("dd",{children:j})]}),(0,e.jsxs)("div",{children:[(0,e.jsx)("dt",{children:"Blocked"}),(0,e.jsx)("dd",{className:k?"is-warn":"",children:k})]}),(0,e.jsxs)("div",{children:[(0,e.jsx)("dt",{children:"Done"}),(0,e.jsx)("dd",{children:l})]})]})]})}function o({node:a,workloadById:b}){let c=(a.reports||[]).length>0;return(0,e.jsxs)("li",{className:"org-branch",children:[(0,e.jsx)(n,{node:a,workloadById:b}),c?(0,e.jsx)("ul",{className:"org-children",children:a.reports.map(a=>(0,e.jsx)(o,{node:a,workloadById:b},a.id))}):null]})}function p(){let a=(0,j.zP)(),b=(0,j.hC)(),c=(0,k.vc)(),d=new Map((b.workload||[]).map(a=>[a.agent_id,a])),f=c.filter(a=>c.some(b=>b.reports_to===a.id)).length,g=c.filter(a=>!a.reports_to&&a.id).length;return(0,e.jsxs)(i.iN,{title:"Agent chart",description:"Company-style structure for your agent workforce. Set managers, define roles, and see workload at a glance.",children:[(0,e.jsxs)("section",{className:"admin-stats",children:[(0,e.jsx)(i.hI,{label:"Headcount",value:b.totals.active_agents}),(0,e.jsx)(i.hI,{label:"Leaders",value:f}),(0,e.jsx)(i.hI,{label:"Root nodes",value:g}),(0,e.jsx)(i.hI,{label:"Active tasks",value:b.totals.active_tasks})]}),(0,e.jsxs)("section",{className:"admin-panel",children:[(0,e.jsxs)("div",{className:"admin-panel-head",children:[(0,e.jsx)("span",{children:"Agent chart"}),(0,e.jsx)("small",{children:"Top-down hierarchy. Each card shows role, status, and current workload."})]}),a.length?(0,e.jsx)("div",{className:"org-chart-scroll",children:(0,e.jsx)("ul",{className:"org-chart",children:a.map(a=>(0,e.jsx)(o,{node:a,workloadById:d},a.id))})}):(0,e.jsx)(i.pp,{title:"No agents yet",children:"Create an agent on the Agents page, then come back here to assign managers."})]}),(0,e.jsxs)("section",{className:"admin-grid reports-layout",children:[(0,e.jsxs)("div",{className:"admin-panel",children:[(0,e.jsxs)("div",{className:"admin-panel-head",children:[(0,e.jsx)("span",{children:"Reporting lines"}),(0,e.jsx)("small",{children:"Re-parent any agent. Cycles are blocked automatically."})]}),c.length?(0,e.jsx)("div",{className:"admin-card-list compact",children:c.map(a=>{let b=a.reports_to?c.find(b=>b.id===a.reports_to):null,d=c.filter(b=>b.id!==a.id),f=a.role&&s[a.role]?a.role:"individual_contributor";return(0,e.jsxs)("form",{action:u,className:"org-reporting-row",children:[(0,e.jsx)("input",{type:"hidden",name:"agent_id",value:a.id}),(0,e.jsxs)("div",{className:"org-reporting-identity",children:[(0,e.jsx)("div",{className:"org-card-avatar small","aria-hidden":"true",children:m(a.name)}),(0,e.jsxs)("div",{children:[(0,e.jsx)("div",{className:"org-reporting-name",children:a.name}),(0,e.jsx)("div",{className:"org-reporting-sub",children:b?`Reports to ${b.name}`:"Top of chain"})]})]}),(0,e.jsxs)("div",{className:"org-reporting-fields",children:[(0,e.jsxs)("label",{className:"org-reporting-field",children:[(0,e.jsx)("span",{children:"Title"}),(0,e.jsx)("input",{type:"text",name:"title",defaultValue:a.title||"",placeholder:"e.g. Marketing Manager"})]}),(0,e.jsxs)("label",{className:"org-reporting-field",children:[(0,e.jsx)("span",{children:"Role"}),(0,e.jsx)("select",{name:"role",defaultValue:f,children:Object.entries(s).map(([a,b])=>(0,e.jsx)("option",{value:a,children:b},a))})]}),(0,e.jsxs)("label",{className:"org-reporting-field",children:[(0,e.jsx)("span",{children:"Manager"}),(0,e.jsxs)("select",{name:"reports_to",defaultValue:a.reports_to||"",children:[(0,e.jsx)("option",{value:"",children:"— None (top of chain)"}),d.map(a=>(0,e.jsx)("option",{value:a.id,children:a.name},a.id))]})]}),(0,e.jsx)("button",{className:"admin-button",type:"submit",children:"Save"})]})]},a.id)})}):(0,e.jsx)(i.pp,{title:"No agents yet",children:"Create agents to start building your org."})]}),(0,e.jsxs)("div",{className:"admin-panel",children:[(0,e.jsxs)("div",{className:"admin-panel-head",children:[(0,e.jsx)("span",{children:"Workload by agent"}),(0,e.jsx)("small",{children:"Derived from active tasks."})]}),b.workload.length?(0,e.jsx)("div",{className:"admin-card-list compact",children:b.workload.map(a=>(0,e.jsxs)("div",{className:"admin-record compact",children:[(0,e.jsxs)("div",{className:"admin-record-top",children:[(0,e.jsx)("b",{children:a.agent_name||a.agent_id}),(0,e.jsxs)(i.qs,{tone:a.blocked_tasks?"danger":a.active_tasks?"ready":"neutral",children:[a.active_tasks," active"]})]}),(0,e.jsxs)("p",{children:[a.total_tasks," total \xb7 ",a.blocked_tasks," blocked \xb7 ",a.completed_tasks," complete"]})]},a.agent_id))}):(0,e.jsx)(i.pp,{title:"No workload data",children:"Assign tasks to see workload distribution."})]})]})]})}(0,f.A)(u,"40731e16fca771cf253d8b5506395ac08dbbbbfdd2",null),d()}catch(a){d(a)}})},94657:(a,b,c)=>{"use strict";c.d(b,{default:()=>f});var d=c(21124),e=c(38301);function f(){let[a,b]=(0,e.useState)([]),[c,f]=(0,e.useState)("");return(0,d.jsx)("div",{className:"project-switcher","data-project-switcher":!0,children:(0,d.jsxs)("select",{value:c,onChange:a=>{var b;f(b=a.target.value),b?localStorage.setItem("madarx.activeProjectId",b):localStorage.removeItem("madarx.activeProjectId"),window.dispatchEvent(new CustomEvent("madarx:project-change",{detail:{project_id:b||null}}))},"aria-label":"Active project",children:[(0,d.jsx)("option",{value:"",children:"All projects"}),a.map(a=>(0,d.jsx)("option",{value:a.id,children:a.name},a.id))]})})}}};