minutework 0.1.29 → 0.1.31

package/EXTERNAL_ALPHA.md

@@ -1,35 +1,35 @@
-# MinuteWork CLI External Alpha
+# PandaWork CLI External Alpha
 
-This document is the operator-facing onboarding contract for the first external MinuteWork CLI alpha.
+This document is the operator-facing onboarding contract for the first external PandaWork CLI alpha.
 
 ## Supported paths
 
 Every supported external path starts with the same workspace/bootstrap flow:
 
 ```bash
-npx minutework init my-site --starter tenant-app
+npx pandawork init my-site --starter tenant-app
 cd my-site
-npx minutework login
-npx minutework link
+npx pandawork login
+npx pandawork link
 ```
 
 From there, the current external alpha supports two post-link lanes.
 
 The shipped `tenant-app` starter is the combined web surface: public routes at
-the root, a private `/app` workspace, and a MinuteWork-managed public-content
+the root, a private `/app` workspace, and a PandaWork-managed public-content
 path over the runtime-baseline `mw.core.site` contract.
 
 ### Developer-local broker lane
 
-Use `minutework session` when you want MinuteWork to assemble the workspace
+Use `pandawork session` when you want PandaWork to assemble the workspace
 snapshot, choose a local workflow mode, and optionally launch the first shipped
 local coding engine.
 
 ```bash
-minutework session start --mode human
-minutework session start --mode ai --engine claude
-minutework session status
-minutework session resume
+pandawork session start --mode human
+pandawork session start --mode ai --engine claude
+pandawork session status
+pandawork session resume
 ```
 
 - `start` stores or updates the workspace preference, writes a bounded context
@@ -41,10 +41,10 @@ minutework session resume
 - `human` and `ai` are alternative start modes, not a required sequence.
 - Claude is the only supported local coding engine today.
 - AI mode now auto-installs and auto-updates managed Claude Code under the
-  machine-local MinuteWork CLI state root and prefers that managed binary over
+  machine-local PandaWork CLI state root and prefers that managed binary over
   any `claude` already on `PATH`.
-- Claude authentication still happens outside MinuteWork. If Claude needs local
-  login or approval, complete that in Claude itself and rerun the MinuteWork
+- Claude authentication still happens outside PandaWork. If Claude needs local
+  login or approval, complete that in Claude itself and rerun the PandaWork
   broker command.
 
 The broker state model is intentionally split:
@@ -52,7 +52,7 @@ The broker state model is intentionally split:
 - repo-local pointer and lock state under `.minutework/` tracks the current
   workspace session
 - machine-local preferences, per-session context packs, transcripts, and
-  session history stay under the MinuteWork CLI state root
+  session history stay under the PandaWork CLI state root
 
 The broker fails closed when a live session is already active, the selected
 engine is missing, a prior running record has gone stale, or the launch is
@@ -74,7 +74,7 @@ trusted projects); `mcp/claude-desktop.sample.json` is included for Claude
 Desktop.
 
 Generated guidance and MCP wiring can be reconciled later with
-`minutework workspace sync-assets`.
+`pandawork workspace sync-assets`.
 
 Runtime-only Claude hooks remain excluded from the generated workspace export.
 
@@ -84,28 +84,28 @@ Use the existing local preview/test loop and hosted preview deploy lane when
 you want to run the generated app locally or submit a hosted preview:
 
 ```bash
-minutework dev
-minutework test
-minutework deploy --preview
+pandawork dev
+pandawork test
+pandawork deploy --preview
 ```
 
-Combined **tenant-app + sidecar** workspaces keep sidecar setup explicit. Root `pnpm install` stays Node-only and does not run `poetry install` for you. If you need the sidecar, run `pnpm run install:sidecar` from the workspace root or `cd sidecar && poetry install` yourself before `minutework dev` or `minutework test`.
+Combined **tenant-app + sidecar** workspaces keep sidecar setup explicit. Root `pnpm install` stays Node-only and does not run `poetry install` for you. If you need the sidecar, run `pnpm run install:sidecar` from the workspace root or `cd sidecar && poetry install` yourself before `pandawork dev` or `pandawork test`.
 
 For direct third-party web hosts such as Vercel, deploy `tenant-app` only. In Vercel, point the project Root Directory at `tenant-app`; the optional sidecar remains a separate Poetry-managed surface.
 
 For native mobile clients, use the `mobile` starter. It is a standalone Expo /
 React Native client that authenticates directly against the platform with the
 native session-token flow; it is distributed through EAS/App Store/Play Store
-instead of `minutework deploy`.
+instead of `pandawork deploy`.
 
 Anything outside these lanes remains deferred, including `--live`,
 runtime-backed deploy targets, and additional local coding engines.
 
-If you run `minutework init` **without** `--starter` in an interactive terminal, the CLI prompts for tenant-app, sidecar, mobile, common combinations, or base-only. In CI or scripts, use `--starter` or set `MW_CLI_NONINTERACTIVE=1` to skip the prompt (base-only scaffold).
+If you run `pandawork init` **without** `--starter` in an interactive terminal, the CLI prompts for tenant-app, sidecar, mobile, common combinations, or base-only. In CI or scripts, use `--starter` or set `MW_CLI_NONINTERACTIVE=1` to skip the prompt (base-only scaffold).
 
 ## What `link` does
 
-`minutework link` is no longer tenant-only. It now:
+`pandawork link` is no longer tenant-only. It now:
 
 1. Resolves the active auth profile and workspace platform.
 2. Resolves or creates the tenant-scoped `PublishedWebProperty`.
@@ -133,7 +133,7 @@ If the workspace cannot compile hosted preview release metadata for the linked p
 
 ## What `deploy --preview` does
 
-`minutework deploy --preview` is preview-only and guarded:
+`pandawork deploy --preview` is preview-only and guarded:
 
 1. Loads the active auth profile and linked workspace property.
 2. Re-runs validate and compile.
@@ -153,12 +153,12 @@ The CLI does not fabricate success. If the backend cannot materialize a hosted p
 
 ## Failure semantics
 
-- Missing auth: run `minutework login`
-- Missing binding: run `minutework link`
-- Missing stored broker preference before resume: run `minutework session start --mode <human|ai>`
-- Missing Claude binary or local Claude auth for AI mode: let MinuteWork retry the managed install when network access is available, or complete Claude authentication locally, then rerun `minutework session start --mode ai --engine claude`
-- Live or stale local broker session state: inspect `minutework session status`, let the live process exit, or rerun `minutework session resume`
-- Missing property-scoped release metadata: fix `tenant-app/.env.example` and re-run `minutework compile`
+- Missing auth: run `pandawork login`
+- Missing binding: run `pandawork link`
+- Missing stored broker preference before resume: run `pandawork session start --mode <human|ai>`
+- Missing Claude binary or local Claude auth for AI mode: let PandaWork retry the managed install when network access is available, or complete Claude authentication locally, then rerun `pandawork session start --mode ai --engine claude`
+- Live or stale local broker session state: inspect `pandawork session status`, let the live process exit, or rerun `pandawork session resume`
+- Missing property-scoped release metadata: fix `tenant-app/.env.example` and re-run `pandawork compile`
 - Unsupported release class: external alpha only supports hosted `ssr_container`
 - Missing provider/receipt substrate: deploy returns a typed failure receipt
 - Failed preview deploy with an existing preview target: the platform reports `rolled_back` with `previous_preview_preserved`
@@ -166,9 +166,9 @@ The CLI does not fabricate success. If the backend cannot materialize a hosted p
 ## CLI bug reports
 
 - The CLI automatically submits a sanitized bug report for failed commands unless `MW_CLI_BUG_REPORTS=never` is set (machine-readable `--json` verbs suppress this automatically).
-- Automatic reports keep a local JSON bundle under the MinuteWork CLI state root for retry and support follow-up.
-- `minutework report-bug --note "..."` sends a manual report for UX issues or suspicious behavior that did not crash.
-- `minutework report-bug --last --note "..."` resends the last saved bundle with extra context.
+- Automatic reports keep a local JSON bundle under the PandaWork CLI state root for retry and support follow-up.
+- `pandawork report-bug --note "..."` sends a manual report for UX issues or suspicious behavior that did not crash.
+- `pandawork report-bug --last --note "..."` resends the last saved bundle with extra context.
 - Support should always ask for the printed `report_id` before requesting extra screenshots or logs.
 
 ## Release notes for operators

package/README.md

@@ -1,29 +1,31 @@
-# `minutework`
+# PandaWork CLI
 
-MinuteWork CLI for initializing a workspace, authenticating against a MinuteWork platform, linking a repo to a tenant-scoped public-site property, launching developer-local session broker flows, running local preview/test loops, submitting hosted preview deploys, and publishing app packs to the marketplace through the publication-review gate.
+PandaWork CLI for initializing a workspace, authenticating against a PandaWork platform, linking a repo to a tenant-scoped public-site property, launching developer-local session broker flows, running local preview/test loops, submitting hosted preview deploys, and publishing app packs to the marketplace through the publication-review gate.
+
+The npm package is still published as `minutework` for compatibility. Use `pandawork` for new commands; the existing `minutework` command remains supported.
 
 ## External alpha scope
 
 The current external alpha is intentionally narrow:
 
 - Starters: `tenant-app` (the deployable web surface), `sidecar` (local/internal runtime surface), and `mobile` (init-only native client)
-- Developer-local broker surface: `minutework session start|resume|status`
+- Developer-local broker surface: `pandawork session start|resume|status`
 - Hosted release class: `ssr_container`
-- Deploy surface: `minutework deploy --preview`
+- Deploy surface: `pandawork deploy --preview`
 - Deferred: `--live`, additional local coding engines, sidecar/runtime-backed deploys, and the commercial marketplace listing/pricing layer
-- Marketplace publish: `minutework publish` submits the compiled, digest-bound app pack through the platform publication-review + attestation gate and publishes it to the public marketplace catalog **only** on an approved (or approved-with-warnings) attestation; a rejected attestation prints the review findings and exits 1 without publishing
+- Marketplace publish: `pandawork publish` submits the compiled, digest-bound app pack through the platform publication-review + attestation gate and publishes it to the public marketplace catalog **only** on an approved (or approved-with-warnings) attestation; a rejected attestation prints the review findings and exits 1 without publishing
 
 The shipped `tenant-app` starter is the combined web surface: public routes at
 the root plus a private `/app` workspace. Public-site content follows the
-MinuteWork-managed `mw.core.site` baseline and published-snapshot flow.
+PandaWork-managed `mw.core.site` baseline and published-snapshot flow.
 
 The CLI fails closed when the backend cannot provide typed release metadata, deploy status, receipts, activation state, or rollback state. It does not claim a successful deploy when the provider substrate is unavailable.
 
 ## Install
 
 ```bash
-npx minutework --help
-npx minutework --version
+npx pandawork --help
+npx pandawork --version
 ```
 
 For repeat use in a local environment:
@@ -39,10 +41,10 @@ The package currently ships on a `0.x` alpha channel. Publish from this repo wit
 Start with the shared setup:
 
 ```bash
-npx minutework init my-site --starter tenant-app
+npx pandawork init my-site --starter tenant-app
 cd my-site
-npx minutework login
-npx minutework link
+npx pandawork login
+npx pandawork link
 ```
 
 After `link`, the current alpha has two supported lanes (both `tenant-app`).
@@ -50,7 +52,7 @@ After `link`, the current alpha has two supported lanes (both `tenant-app`).
 For a native mobile client, scaffold the **`mobile`** starter instead:
 
 ```bash
-npx minutework init my-app --starter mobile
+npx pandawork init my-app --starter mobile
 ```
 
 It is **init-only** and bring-your-own-UI: a minimal Expo (React Native) client
@@ -58,34 +60,34 @@ that authenticates **directly** against the platform with a native device-flow
 session token (PKCE authorize -> exchange -> bearer + refresh in the device
 keychain), not the `tenant-app` BFF cookie path. There is no `link`/`deploy`
 lane for it — distribution is your own EAS pipeline (`eas build`/`eas submit`,
-EAS Update), not `minutework deploy`.
+EAS Update), not `pandawork deploy`.
 
 ### Developer-local broker lane
 
-Use this lane when you want MinuteWork to assemble a bounded workspace context,
+Use this lane when you want PandaWork to assemble a bounded workspace context,
 persist broker state locally, and either prepare a human-mode session or launch
 the first supported local coding engine.
 
 ```bash
-minutework session start --mode human
-minutework session start --mode ai --engine claude
-minutework session status
-minutework session resume
+pandawork session start --mode human
+pandawork session start --mode ai --engine claude
+pandawork session status
+pandawork session resume
 ```
 
 - `human` and `ai` are alternative start modes, not a required sequence.
 - Claude is the only supported local coding engine today.
 - AI mode launches Claude with explicit workspace MCP bootstrap plus a bounded
-  MinuteWork context pack instead of relying on implicit shell state.
-- MinuteWork now installs and updates managed Claude Code automatically under
+  PandaWork context pack instead of relying on implicit shell state.
+- PandaWork now installs and updates managed Claude Code automatically under
   the machine-local CLI state root when AI mode needs it, and prefers that
   managed Claude binary over any `claude` already on `PATH`.
-- Claude authentication still happens outside MinuteWork. If Claude needs local
+- Claude authentication still happens outside PandaWork. If Claude needs local
   login or account approval, complete that in Claude itself and rerun the
-  MinuteWork session command.
+  PandaWork session command.
 - Current-session coordination stays repo-local under `.minutework/`, while
   preferences, per-session context packs, transcripts, and session history stay
-  machine-local under the MinuteWork CLI state root.
+  machine-local under the PandaWork CLI state root.
 - The broker fails closed on live overlap, missing engine binaries, stale
   session records, interrupts, and launch failures instead of allowing
   overlapping phantom sessions.
@@ -102,7 +104,7 @@ minutework session resume
   trusted projects); `mcp/claude-desktop.sample.json` is included for Claude
   Desktop.
 - Managed guidance and MCP wiring can be refreshed later with
-  `minutework workspace sync-assets`.
+  `pandawork workspace sync-assets`.
 - Runtime-only Claude hooks are not exported into the generated workspace.
 
 ### Local preview and deploy lane
@@ -111,12 +113,12 @@ Use this lane when you want the workspace-local preview/test loop or a hosted
 preview deploy:
 
 ```bash
-minutework dev
-minutework test
-minutework deploy --preview
+pandawork dev
+pandawork test
+pandawork deploy --preview
 ```
 
-Combined **tenant-app + sidecar** workspaces keep sidecar setup explicit. Root `pnpm install` stays Node-only and does not run `poetry install` for you. If you need the sidecar, run `pnpm run install:sidecar` from the workspace root or `cd sidecar && poetry install` yourself before `minutework dev` or `minutework test`. Sidecar-only scaffolds have no root `package.json`; install Python deps once inside `sidecar/` before running local sidecar workflows.
+Combined **tenant-app + sidecar** workspaces keep sidecar setup explicit. Root `pnpm install` stays Node-only and does not run `poetry install` for you. If you need the sidecar, run `pnpm run install:sidecar` from the workspace root or `cd sidecar && poetry install` yourself before `pandawork dev` or `pandawork test`. Sidecar-only scaffolds have no root `package.json`; install Python deps once inside `sidecar/` before running local sidecar workflows.
 
 For direct third-party web hosts such as Vercel, deploy `tenant-app` only. In Vercel, point the project Root Directory at `tenant-app`; the optional sidecar remains a separate Poetry-managed surface.
 
@@ -146,20 +148,20 @@ For direct third-party web hosts such as Vercel, deploy `tenant-app` only. In Ve
 
 ## Bug reporting
 
-CLI failures automatically send a sanitized diagnostic report to the MinuteWork platform unless `MW_CLI_BUG_REPORTS=never` is set.
+CLI failures automatically send a sanitized diagnostic report to the PandaWork platform unless `MW_CLI_BUG_REPORTS=never` is set.
 
 - Machine-readable verbs run with `--json` suppress automatic reporting; rely on the result envelope and exit code instead.
 
 - Automatic reports never include raw `.env` contents, tokens, source files, or full local paths.
-- The CLI keeps a local report bundle under the MinuteWork state root so you can retry or inspect what was sent.
-- Use `minutework report-bug --note "what happened"` for manual reports.
-- Use `minutework report-bug --last --note "extra context"` to resend the last saved bundle with more detail.
+- The CLI keeps a local report bundle under the PandaWork state root so you can retry or inspect what was sent.
+- Use `pandawork report-bug --note "what happened"` for manual reports.
+- Use `pandawork report-bug --last --note "extra context"` to resend the last saved bundle with more detail.
 
 ## Requirements
 
 - Node.js 18 or newer
 - [Poetry](https://python-poetry.org/) on `PATH` when your workspace includes the FastAPI sidecar and you plan to run it locally (then run `pnpm run install:sidecar` or `cd sidecar && poetry install`)
-- A MinuteWork platform that exposes the developer CLI auth and public-site preview deploy endpoints
+- A PandaWork platform that exposes the developer CLI auth and public-site preview deploy endpoints
 - An auth profile with interactive developer access, or a deploy token that includes `deploy.preview.request`
 
 If the hosted preview provider is not configured, preview deploy returns a typed failure or rollback-preserved receipt instead of a fake success.

package/assets/claude-local/CLAUDE.md.template

@@ -1,6 +1,6 @@
-# MinuteWork Builder
+# PandaWork Builder
 
-Use this workspace to build or extend MinuteWork app packs. `tenant-app`,
+Use this workspace to build or extend PandaWork app packs. `tenant-app`,
 `sidecar`, and optional `mobile` are implementation surfaces; choose the
 smallest surface that fits the request.
 
@@ -10,27 +10,27 @@ private authenticated workspace under `/app`.
 `mobile` is the standalone Expo/React Native client starter. It talks directly
 to the platform with native device-flow auth and bearer tokens; it is not a
 `tenant-app` BFF cookie client and not a `sidecar`. It ships through the
-developer's own EAS/App Store/Play Store pipeline, not `minutework deploy`.
+developer's own EAS/App Store/Play Store pipeline, not `pandawork deploy`.
 
 ## Refresh Managed Guidance
 
 If this workspace's exported guidance looks stale or a newly added skill is
-missing, run `minutework workspace sync-assets` from the workspace root. See
+missing, run `pandawork workspace sync-assets` from the workspace root. See
 `skills/workspace-guidance-refresh/SKILL.md` for the managed refresh flow.
 
 ## Workspace MCP
 
-The MinuteWork workspace MCP server exposes read-only context tools (workspace
+The PandaWork workspace MCP server exposes read-only context tools (workspace
 snapshot, schema status, capability inventory, deploy status, and a workspace
 doctor; tool names are prefixed `minutework_`). Prefer these over guessing at
 workspace state. It is wired for Cursor (`.cursor/mcp.json`) and Codex
 (`.codex/config.toml`, loaded for trusted projects); for Claude Desktop, copy
 `mcp/claude-desktop.sample.json`. Refresh all of this with
-`minutework workspace sync-assets`.
+`pandawork workspace sync-assets`.
 
 ## Skills
 
-This workspace includes MinuteWork architecture skills under `skills/`. Your IDE
+This workspace includes PandaWork architecture skills under `skills/`. Your IDE
 coding agent can use them as reference: browse `skills/` and read the relevant
 `SKILL.md` when a topic matches your task. In Claude Code these skills load
 automatically and `/skill-name` invokes one directly; other agents (Codex,
@@ -39,7 +39,7 @@ Cursor) can open the files directly or ask "What skills are available?".
 ## Project Orientation Fast Path
 
 When the user asks broad context questions like "what is this project about?",
-"what can we build with MinuteWork?", "can we build our own product or make an
+"what can we build with PandaWork?", "can we build our own product or make an
 existing product agentic?", "how do OSS products fit?", or "what is the
 ontology/network effect?", do not wait for them to name skills one by one. Read
 `skills/project-overview-and-strategy/SKILL.md` first, then pull the routed
@@ -108,7 +108,7 @@ a concrete backend responsibility such as:
 - Builder may adopt open-source libraries, frameworks, and products inside the
   sandbox when that produces a better result than bespoke code.
 - Prefer this solution order before writing greenfield code:
-  - existing MinuteWork substrate
+  - existing PandaWork substrate
   - reviewed capability skill or `catalog_native`
   - app-pack/schema/flow extension
   - adopt OSS when it clearly fits
@@ -118,11 +118,11 @@ a concrete backend responsibility such as:
 - If a strong OSS product already solves the problem well, prefer integrating,
   wrapping, or governing it instead of rebuilding it from scratch.
 - Never treat imported OSS as a direct runtime install contract; normalize it
-  into governed MinuteWork artifacts or keep it external through `attached_app`.
+  into governed PandaWork artifacts or keep it external through `attached_app`.
 
 ## Compose Before Rebuild
 
-- Compose shared MinuteWork substrate first: baseline capabilities, runtime
+- Compose shared PandaWork substrate first: baseline capabilities, runtime
   primitives, reviewed capability skills, app packs, overlays, and hosted
   publication flows.
 - For external collaboration, start from the native substrate: shadow tenant,
@@ -234,7 +234,7 @@ a concrete backend responsibility such as:
   the property uses `runtime_local_sidecar`; publish immutable runtime content
   first.
 - Do not treat `attached_app` as a third serving mode; keep the foreign renderer
-  and deploy pipeline external while MinuteWork governs drafts, approvals, and
+  and deploy pipeline external while PandaWork governs drafts, approvals, and
   publish actions.
 - Do not invent a separate guest-account or inbox-routing model when the
   existing shadow identity, alias, route, and thread substrate fits.

package/assets/claude-local/skills/README.md

@@ -1,6 +1,6 @@
 # Builder Skills
 
-Place focused MinuteWork architecture skills here.
+Place focused PandaWork architecture skills here.
 
 These files are part of the canonical Builder common bundle and are allowlisted
 for developer-local export. Skills are shared across all engine renderers.

package/assets/claude-local/skills/app-pack-authoring/SKILL.md

@@ -7,12 +7,12 @@ description: "Deciding the shipped product shape, choosing between tenant-app an
 
 An `app pack` is the shipped product unit.
 
-- Compose shared MinuteWork substrate first: baseline capabilities, runtime
+- Compose shared PandaWork substrate first: baseline capabilities, runtime
   primitives, reviewed capability skills, app packs, overlays, and hosted
   publication flows.
 - Templates are governed starters, not the full limit of what Builder may use.
 - Builder may adopt open-source libraries, frameworks, and products inside the
-  sandbox when that reduces bespoke code and still preserves the MinuteWork
+  sandbox when that reduces bespoke code and still preserves the PandaWork
   contract boundaries.
 - Start with declarative schema/manifests and add code surfaces only when needed.
 - Use `tenant-app` for the combined public-site plus private-app web surface.
@@ -42,7 +42,7 @@ An `app pack` is the shipped product unit.
 - Public-site authoring should stay CMS/runtime-backed, while anonymous live
   delivery should prefer published snapshots.
 - Prefer this decision order before writing greenfield code:
-  - reuse existing MinuteWork substrate or a reviewed capability skill
+  - reuse existing PandaWork substrate or a reviewed capability skill
   - extend app-pack/schema/flow surfaces
   - adopt a strong OSS library or product when it clearly fits
   - use `attached_app` when the foreign system should stay its own subsystem

package/assets/claude-local/skills/capability-gap-reporting/SKILL.md

@@ -1,12 +1,12 @@
 ---
 name: capability-gap-reporting
-description: "A request does not cleanly fit current MinuteWork substrate and a capability gap needs to be recorded."
+description: "A request does not cleanly fit current PandaWork substrate and a capability gap needs to be recorded."
 ---
 
 # Capability Gap Reporting
 
 Use this skill when a generated workspace discovers that the requested
-implementation does not cleanly fit current MinuteWork substrate.
+implementation does not cleanly fit current PandaWork substrate.
 
 - Record architecture gaps in `.minutework/runtime/capability-gap-report.json`.
 - Keep the report sanitized and tenant-safe. Do not include secrets, raw
@@ -52,5 +52,5 @@ implementation does not cleanly fit current MinuteWork substrate.
   - `attached_app` when the right home is an attached-app integration surface
     rather than shared core substrate.
 - Prefer one concrete gap per missing shared capability.
-- Use gap reports to tell humans where MinuteWork needs new substrate. Do not
+- Use gap reports to tell humans where PandaWork needs new substrate. Do not
   treat them as automatic implementation instructions.

package/assets/claude-local/skills/generated-workspace-architecture/SKILL.md

@@ -8,10 +8,10 @@ description: "Reasoning from a CLI-generated Builder workspace rather than the m
 Use this skill when reasoning from a CLI-generated Builder workspace rather than
 the monorepo or a live tenant runtime.
 
-- A generated workspace is a developer-local authoring client of MinuteWork, not
+- A generated workspace is a developer-local authoring client of PandaWork, not
   the runtime itself.
 - Treat these as separate surfaces with different trust boundaries:
-  - developer-local broker/orchestrator (`minutework session ...`)
+  - developer-local broker/orchestrator (`pandawork session ...`)
   - runtime-local Builder host inside the tenant runtime
   - runtime-local non-coding assistant inside the tenant product
 - The clearest layering model is:
@@ -27,7 +27,8 @@ the monorepo or a live tenant runtime.
   `tenant-app` or `sidecar`. It is a direct platform API client that consumes
   the platform native-token API (`/api/v1/native/...`) directly with a
   platform-issued native session token, rather than the `tenant-app` BFF cookie
-  session.
+  session. The mobile starter remains npm-owned standalone app code and should
+  not be added to the generated root `pnpm-workspace.yaml`.
 - If the `mobile` starter is enabled (`starters.mobile.enabled`), read
   `standalone-mobile-client/SKILL.md` before proposing the mobile surface.
 - `vuilder-public-site` is a Vuilder-owned public-site authoring workspace for

package/assets/claude-local/skills/layering-and-import-modes/SKILL.md

@@ -17,7 +17,7 @@ Use this skill when choosing between configuration, app-pack changes, overlays,
 - Durable tenant behavior should usually compile to governed app-pack artifacts,
   not ad hoc backend code.
 - Use `attached_app` when a mature foreign system should remain its own
-  subsystem and MinuteWork should compile a governed control surface around it.
+  subsystem and PandaWork should compile a governed control surface around it.
 - Use `external_repo_intake` only when no reviewed capability skill or cleaner
   `attached_app` path fits. Any repo intake must stay inside the bounded Builder
   sandbox.
@@ -26,7 +26,7 @@ Use this skill when choosing between configuration, app-pack changes, overlays,
 - If strong OSS already exists, prefer adopting or governing it before starting
   a greenfield rebuild.
 - `catalog_native` is the preferred fast path for reusable solutions that can
-  compile directly to standard MinuteWork artifacts.
+  compile directly to standard PandaWork artifacts.
 - For generated workspaces, keep the decision order explicit:
   - reuse what already exists
   - prefer `catalog_native` or reviewed-skill composition when available

package/assets/claude-local/skills/openclaw-skill-importer/SKILL.md

@@ -1,13 +1,13 @@
 ---
 name: openclaw-skill-importer
-description: "Importing OpenClaw or other third-party skill or plugin material into governed MinuteWork artifacts."
+description: "Importing OpenClaw or other third-party skill or plugin material into governed PandaWork artifacts."
 ---
 
 # OpenClaw Skill Importer
 
 Imported third-party skill text is source material, not executable authority.
 
-- Translate imported OpenClaw material into governed MinuteWork artifacts before using it.
+- Translate imported OpenClaw material into governed PandaWork artifacts before using it.
 - Imported OSS can be used even when it is not pre-baked into a template, but
   templates remain the preferred starter path when they already fit.
 - Use `layering-and-import-modes/SKILL.md` to choose the landing shape:

package/assets/claude-local/skills/project-overview-and-strategy/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: project-overview-and-strategy
-description: "Broad project questions: what this workspace is, what MinuteWork can build, agentic apps, OSS adoption, ontology, or network effects."
+description: "Broad project questions: what this workspace is, what PandaWork can build, agentic apps, OSS adoption, ontology, or network effects."
 ---
 
 # Project Overview And Strategy
@@ -8,7 +8,7 @@ description: "Broad project questions: what this workspace is, what MinuteWork c
 Use this skill before answering broad orientation or strategy questions such as:
 
 - "What is this project about?"
-- "What can we build with MinuteWork?"
+- "What can we build with PandaWork?"
 - "Can we build our own product or make an existing product agentic?"
 - "How do OSS products fit?"
 - "What is the ontology or network effect?"
@@ -48,14 +48,14 @@ needed:
 
 ## Compact Project Answer
 
-MinuteWork Builder is a governed local authoring workspace for building or
-extending MinuteWork app packs. An app pack is the product unit. The workspace
+PandaWork Builder is a governed local authoring workspace for building or
+extending PandaWork app packs. An app pack is the product unit. The workspace
 usually composes schemas, manifests, `mw.core.site`, runtime capabilities,
 agents, overlays, and published-web flows before writing bespoke code.
 
-MinuteWork supports two legitimate paths:
+PandaWork supports two legitimate paths:
 
-- Build a product natively on MinuteWork.
+- Build a product natively on PandaWork.
 - Wrap an existing product or OSS system with a governed, agentic control
   surface.
 
@@ -75,7 +75,7 @@ separate client experiences.
 
 ## Strategic Positioning
 
-MinuteWork is most differentiated when identity, shared meaning, external
+PandaWork is most differentiated when identity, shared meaning, external
 collaboration, AI agents, and foreign systems participate in the same governed
 substrate:
 
@@ -92,7 +92,7 @@ substrate:
   deployed, and use sidecar bridge code plus runtime agents/tool packs to make
   it governed and agentic.
 - Build-native is appropriate when the capability is central, reusable, and
-  should become MinuteWork substrate. Greenfield is last after existing
+  should become PandaWork substrate. Greenfield is last after existing
   substrate, reviewed skills, app-pack extension, OSS adoption, and
   `attached_app` have been considered.
 

package/assets/claude-local/skills/published-web-and-mw-core-site/SKILL.md

@@ -1,12 +1,12 @@
 ---
 name: published-web-and-mw-core-site
-description: "Public-site delivery, published-web flows, mw.core.site baseline, or the default MinuteWork site model."
+description: "Public-site delivery, published-web flows, mw.core.site baseline, or the default PandaWork site model."
 ---
 
 # Published Web And mw.core.site
 
 Use this skill when the request touches public-site delivery, published-web
-flows, or the default MinuteWork site model.
+flows, or the default PandaWork site model.
 
 - Treat `mw.core.site` as a runtime baseline capability that already exists.
 - For Vuilder-owned public websites, read

package/assets/claude-local/skills/runtime-capability-inventory/SKILL.md

@@ -87,11 +87,16 @@ generated Builder workspace.
 - Current active primitives by family:
   - `records`: `records.query`, `records.upsert`
   - `workflow`: `workflow.run_action`, `workflow.schedule_timer`,
-    `workflow.resume_checkpoint`
+    `workflow.resume_checkpoint`, `workflow.cancel_on_thread_activity`
   - `projection`: `projection.publish_receipt`
   - `integrations`: `integrations.query_provider`,
     `integrations.execute_automation`
   - `communication`: `communication.send_email`, `communication.send_sms`
+  - `consent`: `consent.check_channel`
+  - `scheduling`: `scheduling.book_appointment`
+  - `discovery`: `discovery.request_proposal`
+  - `voice`: `voice.initiate_call`, `voice.hangup_call`,
+    `voice.get_call_status`
   - `ontology`: `ontology.resolve_local`, `ontology.propose_candidate`
   - `command_exec`: `command_exec.run_template`
 <!-- builder-doc-sync:active-primitives:end -->

package/assets/claude-local/skills/standalone-mobile-client/SKILL.md

@@ -14,6 +14,10 @@ The answer is yes, and the shape is fixed. Do not flip-flop on it.
 - A native mobile app is a **standalone-client exception**. It is authored in
   the `mobile` starter (`destinationDirectory: mobile`), enabled via the
   workspace config key `starters.mobile = { enabled: true, path: "mobile" }`.
+- The `mobile` starter is npm-owned standalone app code even when generated
+  beside `tenant-app` in a root pnpm workspace. Run mobile commands from
+  `mobile/` with `npm install` and `npx expo start`; do not add `mobile` to the
+  root `pnpm-workspace.yaml`.
 - It is **not** part of `tenant-app`, and **not** part of `sidecar`. Do not put
   native code, Expo config, or React Native screens inside either of those
   surfaces.
@@ -31,6 +35,9 @@ The answer is yes, and the shape is fixed. Do not flip-flop on it.
   tokens after browser-assisted login or a device flow
   (`reference/mwv3-dj6-docs/auth_and_credential_contract.md`, Rule 7).
 - The app reads the platform base URL from `EXPO_PUBLIC_MW_PLATFORM_BASE_URL`.
+  In local development the starter defaults to `http://127.0.0.1:8000` so a
+  fresh scaffold can boot before `.env` exists; set the env var for physical
+  devices, tunneled platforms, deployed platforms, and anything shipped.
 
 ## Endpoints (shipped)
 
@@ -102,4 +109,4 @@ boundary.
 - The `mobile` starter is **init-only**. Scaffolding it lands the app in the
   workspace; it does not deploy it.
 - Distribution is the developer's own pipeline: EAS Build, TestFlight, and the
-  Play Store. It is **not** `minutework deploy`.
+  Play Store. It is **not** `pandawork deploy`.