spine-framework 0.3.125 → 0.3.127

package/custom/.devin/skills/spine-workbench-discovery/SKILL.md

@@ -0,0 +1,39 @@
+---
+name: spine-workbench-discovery
+description: "Promote an idea to discovery, run the Workbench Research Agent, and optionally link relevant code chunks."
+allowed-tools:
+  - mcp_call_tool
+  - read
+  - ask_user_question
+---
+
+# Spine Workbench — Discovery
+
+Promote an existing Workbench idea to a `workbench_discovery` and gather related code or knowledge.
+
+## When to invoke
+
+- The user wants to start discovery on an idea.
+- They want to investigate the problem, find related code, and decide whether to approve.
+
+## Steps
+
+1. **Identify the idea**
+   - Ask for the `idea_id` if not provided.
+   - If the user gave a title instead of an ID, search with `spine_cil_search_chunks` or list relevant work items to resolve it.
+
+2. **Start discovery**
+   - Call `spine_workbench_start_discovery` with the `idea_id` and `account_id`.
+   - Capture the returned `discovery.id`.
+
+3. **Run the Research Agent (optional)**
+   - Call `spine_workbench_run_research_agent` with the `idea_id` or new `discovery_id`.
+   - Summarize the retrieved sources and recommendations.
+
+4. **Link relevant code (optional)**
+   - Use `spine_cil_search_chunks` to find CIL chunks related to the discovery topic.
+   - For the strongest matches, call `spine_workbench_link_code` with `link_type: workbench_concerns_chunk`.
+
+5. **Return the result**
+   - Show the discovery `id`, `title`, `status`, and any linked code.
+   - Suggest next step: `spine-workbench-initiative` to approve, or `spine-workbench-plan` if it is small enough to skip the initiative stage.

package/custom/.devin/skills/spine-workbench-idea/SKILL.md

@@ -0,0 +1,36 @@
+---
+name: spine-workbench-idea
+description: "Capture a new idea in the Workbench and, if helpful, gather relevant context from CIL before tracking it."
+allowed-tools:
+  - mcp_call_tool
+  - read
+  - ask_user_question
+---
+
+# Spine Workbench — Idea
+
+Capture a new idea as a `workbench_work_item` with `work_type: idea`.
+
+## When to invoke
+
+- The user says "I have an idea", "track this", "capture a feature request", or similar.
+- They describe something that should go through the Workbench lifecycle (idea → discovery → initiative → plan → implement).
+
+## Steps
+
+1. **Confirm the title and description**
+   - If the user only mentioned a vague concept, ask for a 1-sentence title and a short description before side effects.
+   - If the input is clear, proceed directly.
+
+2. **Optionally gather context**
+   - If the idea relates to an existing file, chunk, or feature, call `spine_cil_search_chunks` to find relevant CIL context.
+   - Summarize the top 1-3 most relevant chunks in your reasoning.
+
+3. **Track the idea**
+   - Call `spine_workbench_track_idea` with:
+     - `account_id` — ask the user if not known.
+     - `title` and `description` from the input.
+
+4. **Return the result**
+   - Show the new idea's `id`, `title`, and `status`.
+   - Suggest next step: `spine-workbench-discovery` or `spine-workbench-plan`.

package/custom/.devin/skills/spine-workbench-implement/SKILL.md

@@ -0,0 +1,46 @@
+---
+name: spine-workbench-implement
+description: "Implement a Workbench work item: read context, edit code, verify with CIL, and post progress."
+allowed-tools:
+  - mcp_call_tool
+  - read
+  - edit
+  - write
+  - exec
+  - ask_user_question
+---
+
+# Spine Workbench — Implement
+
+Implement the code for a Workbench work item and keep CIL in sync.
+
+## When to invoke
+
+- The user says "implement this", "build it", "fix it", or is ready to code a planned work item.
+
+## Steps
+
+1. **Identify the work item**
+   - Ask for `work_item_id` if not provided.
+
+2. **Load context**
+   - Use `spine_cil_get_context` or `spine_cil_find_context` on the most relevant chunk(s) linked to the work item.
+   - If no chunks are linked, use `spine_cil_search_chunks` first.
+
+3. **Implement the change**
+   - Edit or create the files needed.
+   - Follow the Spine Way: core-vs-custom boundary, design schema, permissions, and admin-data for runtime records.
+
+4. **Re-index changed files in CIL**
+   - After saving, call `spine_cil_reindex_chunk` with `also_embed: true` for each changed chunk.
+   - Use `spine_cil_validate_file` to confirm no drift remains.
+
+5. **Run verification**
+   - Run the relevant build, lint, typecheck, or test commands for the changed code.
+   - If verification fails, fix the issues before finishing.
+
+6. **Post progress**
+   - Call `spine_workbench_add_thread_message` with an implementation summary.
+
+7. **Return the result**
+   - Summarize the files changed, verification status, and next step (e.g., open a PR, run end-to-end tests).

package/custom/.devin/skills/spine-workbench-initiative/SKILL.md

@@ -0,0 +1,28 @@
+---
+name: spine-workbench-initiative
+description: "Approve a discovery and promote it to a workbench_initiative."
+allowed-tools:
+  - mcp_call_tool
+  - read
+  - ask_user_question
+---
+
+# Spine Workbench — Initiative
+
+Approve an existing `workbench_discovery` and create a linked `workbench_initiative`.
+
+## When to invoke
+
+- The user says "approve discovery", "promote to initiative", or wants to move from discovery to roadmap.
+
+## Steps
+
+1. **Identify the discovery**
+   - Ask for the `discovery_id` if not provided.
+
+2. **Approve the discovery**
+   - Call `spine_workbench_approve_discovery` with the `discovery_id` and `account_id`.
+
+3. **Return the result**
+   - Show the new initiative `id`, `title`, and `status`.
+   - Suggest next step: `spine-workbench-plan`.

package/custom/.devin/skills/spine-workbench-plan/SKILL.md

@@ -0,0 +1,38 @@
+---
+name: spine-workbench-plan
+description: "Create documentation and test-plan tickets for a work item and link the code chunks it concerns."
+allowed-tools:
+  - mcp_call_tool
+  - read
+  - ask_user_question
+---
+
+# Spine Workbench — Plan
+
+Create planning artifacts for a work item: docs ticket, test plan, and code links.
+
+## When to invoke
+
+- The user wants to "write a test plan", "create docs", "link code", or generally prepare a work item for implementation.
+- The work item is an idea, discovery, or initiative.
+
+## Steps
+
+1. **Identify the work item**
+   - Ask for `work_item_id` if not provided.
+   - If the user mentions the initiative/discovery/idea by title, ask for the UUID or use search.
+
+2. **Create the planning artifacts**
+   - Call `spine_workbench_create_docs_ticket` to create a `workbench_docs_ticket`.
+   - Call `spine_workbench_create_test_plan` to create a `workbench_test_plan`.
+
+3. **Link relevant code**
+   - Use `spine_cil_search_chunks` to find the most relevant chunks/files for this work item.
+   - For each strongly relevant chunk, call `spine_workbench_link_code` with `work_item_id`, `chunk_id`, and `link_type: workbench_concerns_chunk`.
+
+4. **Log progress**
+   - Call `spine_workbench_add_thread_message` with a short progress note.
+
+5. **Return the result**
+   - Show the created docs ticket, test plan, and any code links.
+   - Suggest next step: `spine-workbench-implement`.

package/docs/README.md

@@ -1,136 +1,15 @@
-# Spine - Internal Dev Repo
+# Documentation
 
-**A multi-tenant, event-driven operational OS for modern SaaS systems.**
+This directory contains the documentation for the Spine framework.
 
-Spine is not a CRM, a helpdesk, or a workflow tool. It is the operational nervous system underneath applications — the central coordination layer that handles identity, state machines, audit trails, event emission, automation, webhooks, semantic intelligence, and theming so that vertical products don't have to rebuild these primitives.
+## Current documentation
 
-> See [docs/MANIFESTO.md](docs/MANIFESTO.md) for the full design philosophy.
+The canonical, up-to-date documentation lives in [`spine-framework-documentation/`](./spine-framework-documentation/README.md).
 
-## What Spine Knows
+- [`spine-framework-documentation/start-here.md`](./spine-framework-documentation/start-here.md) — find the right doc for your task.
+- [`spine-framework-documentation/quickstart.md`](./spine-framework-documentation/quickstart.md) — get a Spine project running locally.
+- [`spine-framework-documentation/concepts/spine-way.md`](./spine-framework-documentation/concepts/spine-way.md) — the ten fundamentals every extension must satisfy.
 
-| Primitive | Not Domain-Specific |
-|---|---|
-| Accounts | Not "companies" or "clients" |
-| Persons | Not "employees" or "candidates" |
-| Workflow Items | Not "deals" or "jobs" |
-| Events | Not "notifications" |
-| Automation Rules | Not "zapier zaps" |
-| Embeddings | Not "documents" |
+## Archived documentation
 
-Spine provides the operational backbone. Your vertical product provides the meaning.
-
-## Architecture
-
-- **Frontend**: React 18 + Vite + TailwindCSS + shadcn/ui
-- **API**: Netlify Functions (TypeScript)
-- **Database**: Supabase Postgres + pgvector
-- **Auth**: Supabase Auth (JWT) — browser handles login/session; all data access via API
-
-### Core Principles
-
-- **Event-driven**: Every state change produces an outbox event. Every event can trigger automations and webhooks.
-- **Multi-tenant**: Every row scoped by `account_id`. Every request resolves person, account, and role context.
-- **Automation-native**: Automation rules are first-class primitives with condition evaluation and action execution.
-- **Audit-first**: Every write emits `audit_log` (before/after diff) and `activity_event` records. Nothing mutates silently.
-- **AI-aware**: Multi-vector embeddings (pgvector) with auto-indexing on write and semantic search.
-- **API-first**: Frontend never touches the database. All reads/writes go through Netlify Functions.
-- **RBAC**: Two-tier — `account_role` (admin/operator/member) + `system_role` (system_admin/system_operator/support_operator).
-
-## Modules
-
-| Module | Description |
-|---|---|
-| **Identity & Tenancy** | Accounts, persons, profiles, memberships, invites, RBAC, auto-provisioning |
-| **Workflow Engine** | Definitions, stage builder, items, kanban, stage transitions, automation rules |
-| **Support** | Tickets, threaded messages, knowledge base articles |
-| **Activity & Audit** | Append-only activity feed + immutable audit log |
-| **Integrations** | Outbox events, webhook subscriptions, HMAC-signed deliveries with retry/backoff/dead-letter |
-| **Automation** | Event-triggered rules with conditions, actions (transition, emit, webhook, update) |
-| **Intelligence** | Multi-vector embeddings, auto-embed on write, semantic search UI |
-| **Theming** | DB-stored tokens, 3 presets (Clean/Bold/Muted), live Theme Editor |
-
-## Setup
-
-> ### TODO
-> - [ ] Enable **Leaked password protection** in Supabase: Dashboard → **Auth → Settings → Password security**.
-
-### Prerequisites
-
-- Node.js 18+
-- Netlify CLI (`npm i -g netlify-cli`)
-- Supabase project (with pgvector enabled)
-
-### Environment Variables
-
-Copy `.env.example` to `.env` and fill in:
-
-```
-VITE_SUPABASE_URL=https://your-project.supabase.co
-VITE_SUPABASE_ANON_KEY=your-anon-key
-SUPABASE_URL=https://your-project.supabase.co
-SUPABASE_SERVICE_ROLE_KEY=your-service-role-key
-```
-
-### Database Setup
-
-Apply migrations in order (001–016) via Supabase SQL editor or CLI:
-
-```bash
-# Each file in supabase/migrations/ should be applied sequentially
-```
-
-### Local Development
-
-```bash
-npm install
-netlify dev
-```
-
-This starts:
-- Vite dev server on port 5173
-- Netlify Functions proxy on port 8888
-- App at `http://localhost:8888`
-
-New users are auto-provisioned on first login — no manual database setup required.
-
-### Build
-
-```bash
-npm run build
-```
-
-## Project Structure
-
-```
-├── core/                         # Canonical Spine runtime (DO NOT EDIT)
-│   ├── functions/               # 59 endpoint handlers
-│   │   ├── _shared/              # Shared utilities (middleware, db, audit, etc.)
-│   │   └── *.ts                  # Core API endpoints
-│   └── src/                     # Core React frontend
-│       ├── components/           # UI components (ui/, layout/, shared/, etc.)
-│       ├── pages/                # Route pages (admin, portal, public)
-│       ├── lib/                  # Utilities (api, auth, config, theme, etc.)
-│       └── hooks/                # React hooks (useAuth, useCustomFields, etc.)
-├── custom/                       # Your extensions (MODIFY FREELY)
-│   ├── functions/               # Custom serverless functions (override/extend core)
-│   └── src/                     # Custom frontend code
-│       └── manifest/routes.ts   # Custom route + nav registrations
-├── src/                         # Assembled frontend output (auto-generated, .gitignored)
-├── netlify/functions/            # Assembled API output (auto-generated, .gitignored)
-├── supabase/
-│   └── migrations/              # 33 SQL migrations
-├── scripts/
-│   ├── assemble-functions.sh     # Merge core/functions + custom/functions
-│   ├── assemble-frontend.sh     # Merge core/src + custom/src → src/
-│   ├── build-manifest.sh         # Generate integrity hashes
-│   └── verify-integrity.sh       # Verify core integrity
-├── docs/
-│   ├── MANIFESTO.md              # Design philosophy
-│   ├── FRONTEND.md               # Frontend architecture
-│   ├── EXTENDING.md              # Extension guide
-│   └── API.md                    # API reference
-├── netlify.toml
-└── package.json
-```
-
-# Testing GIT flow
+Older documentation has been moved to [`archive/2026-07-28/`](./archive/2026-07-28/) and is kept for reference only. If a conflict exists between the new tree and an archived document, the new tree wins.

package/netlify.toml

@@ -11,7 +11,7 @@
 # Spine functions configuration - assembled from .framework + custom
 [functions]
   directory = ".assembled/netlify/functions"
-  included_files = [".assembled/netlify/functions/**"]
+  included_files = [".assembled/netlify/functions/_shared/**"]
   node_bundler = "esbuild"
 
 [dev]
@@ -27,10 +27,10 @@
 
 # CIL ingestion passes are long-running — extend timeout for local dev
 # TODO: migrate to background functions for production
-[functions."custom_cil-ingest"]
+[functions."cil-ingest"]
   timeout = 300
 
-[functions."custom_cil-embeddings"]
+[functions."cil-embeddings"]
   timeout = 300
 
 [[redirects]]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spine-framework",
-  "version": "0.3.125",
+  "version": "0.3.127",
   "description": "Multi-tenant, modular application platform for modern SaaS systems",
   "type": "module",
   "bin": {
@@ -16,28 +16,15 @@
     ".framework/cli/",
     ".framework/docs/",
     ".framework/functions/",
-    ".framework/migrations/001_schema.sql",
-    ".framework/migrations/002_rls_and_functions.sql",
-    ".framework/migrations/003_system_data.sql",
-    ".framework/migrations/004_enhancements.sql",
-    ".framework/migrations/005_auth_user_trigger.sql",
-    ".framework/migrations/006_fix_current_actor_id.sql",
-    ".framework/migrations/016_invites.sql",
-    ".framework/migrations/017_fix_get_account_apps.sql",
-    ".framework/migrations/018_apps_required_roles.sql",
-    ".framework/migrations/019_triggers_unique_constraint.sql",
-    ".framework/migrations/020_get_account_apps_role_filter.sql",
-    ".framework/migrations/021_app_domains.sql",
-    ".framework/migrations/022_route_prefix_domain_unique.sql",
-    ".framework/migrations/023_match_embeddings_rpc.sql",
-    ".framework/migrations/024_messages_account_id.sql",
-    ".framework/migrations/025_retype_threads_messages.sql",
-    ".framework/migrations/026_fix_rls_policies.sql",
-    ".framework/migrations/027_embedding_lifecycle.sql",
-    ".framework/migrations/028_fix_message_data_permissions.sql",
-    ".framework/migrations/029_tighten_support_triage_prompt.sql",
-    ".framework/migrations/030_messages_updated_by.sql",
-    ".framework/migrations/031_seed_upsert_constraints.sql",
+    ".framework/migrations/001_core_schema.sql",
+    ".framework/migrations/002_core_rls_and_functions.sql",
+    ".framework/migrations/003_core_system_data.sql",
+    ".framework/migrations/004_core_rpc_and_broker.sql",
+    ".framework/migrations/005_core_observability.sql",
+    ".framework/migrations/006_security_hardening_rls.sql",
+    ".framework/migrations/007_kb_article_list.sql",
+    ".framework/migrations/008_items_target.sql",
+    ".framework/migrations/009_roles_slug_unique.sql",
     ".framework/public/",
     ".framework/scripts/",
     ".framework/seeds/",
@@ -95,7 +82,8 @@
     "test:integration": "vitest run .framework/tests/integration",
     "test:boundary": "bash scripts/boundary-check.sh",
     "docs": "typedoc --entryPoints .framework/functions/_shared/index.ts --out docs/generated",
-    "mcp": "tsx custom/apps/cortex/mcp/index.ts"
+    "mcp": "tsx --env-file=.env .framework/mcp/index.ts",
+    "mcp:spine-framework": "tsx --env-file=.env .framework/mcp/index.ts"
   },
   "dependencies": {
     "@base-ui/react": "^1.4.1",
@@ -137,6 +125,7 @@
     "cmdk": "^1.1.1",
     "dagre": "^0.8.5",
     "date-fns": "^4.1.0",
+    "dompurify": "^3.4.13",
     "embla-carousel-react": "^8.6.0",
     "framer-motion": "^12.34.3",
     "github-markdown-css": "^5.9.0",
@@ -167,7 +156,6 @@
     "remark-gfm": "^4.0.1",
     "shadcn": "^4.7.0",
     "sonner": "^2.0.7",
-    "spine-framework-cortex": "^0.2.12",
     "tailwind-merge": "^3.5.0",
     "tailwindcss-animate": "^1.0.7",
     "tiptap-markdown": "^0.9.0",

package/scripts/kb-ingest-docs.ts

@@ -0,0 +1,203 @@
+import fs from 'fs/promises'
+import path from 'path'
+import yaml from 'js-yaml'
+import { create as adminCreate, update as adminUpdate } from '../.framework/functions/admin-data.ts'
+import { kbIngest } from '../.framework/functions/_shared/kb.ts'
+import { adminDb } from '../.framework/functions/_shared/db.ts'
+
+const DOCS_ROOT = 'docs/spine-framework-documentation'
+const MANIFEST_PATH = path.join(DOCS_ROOT, 'manifest.json')
+const TARGET_TYPE_SLUG = 'kb-spine-internal'
+const ACCOUNT_SLUG = 'spine-system'
+const CREATED_BY_PERSON_ID = '69fbb941-344a-446b-85ad-50a73cab9051'
+
+const VALID_TAGS = new Set(['support', 'how-to', 'faq', 'tutorial'])
+const VALID_CATEGORIES = new Set(['how-to', 'runbook', 'policy', 'faq', 'tutorial'])
+
+const LAYER_TO_CATEGORY: Record<string, string> = {
+  overview: 'how-to',
+  concept: 'how-to',
+  reference: 'runbook',
+  guide: 'tutorial',
+  quickstart: 'tutorial',
+  'task-guide': 'tutorial',
+  operations: 'runbook',
+}
+
+function normaliseTags(input: string[]): string[] {
+  return input
+    .map(t => {
+      const lower = String(t).toLowerCase()
+      if (lower.includes('faq')) return 'faq'
+      if (lower.includes('how-to') || lower.includes('howto') || lower.includes('guide')) return 'how-to'
+      if (lower.includes('tutorial')) return 'tutorial'
+      if (lower.includes('support')) return 'support'
+      return lower
+    })
+    .filter(t => VALID_TAGS.has(t))
+}
+
+function parseArrayValue(value: string): string[] {
+  const inside = value.replace(/^\[/, '').replace(/\]$/, '').trim()
+  if (!inside) return []
+  return inside
+    .split(/,\s*/)
+    .map(s => s.trim().replace(/^["']|["']$/g, ''))
+    .filter(Boolean)
+}
+
+function parseFrontmatter(raw: string): any {
+  const frontmatter: any = {}
+  const lines = raw.split('\n')
+  for (const line of lines) {
+    const idx = line.indexOf(':')
+    if (idx === -1) continue
+    const key = line.slice(0, idx).trim()
+    const value = line.slice(idx + 1).trim()
+    if (value.startsWith('[') && value.endsWith(']')) {
+      frontmatter[key] = parseArrayValue(value)
+    } else if (value === 'true' || value === 'false') {
+      frontmatter[key] = value === 'true'
+    } else {
+      frontmatter[key] = value.replace(/^["']|["']$/g, '')
+    }
+  }
+  return frontmatter
+}
+
+function parseMarkdown(filePath: string, content: string): { frontmatter: any; body: string } {
+  const match = content.match(/^---\n([\s\S]*?)\n---\n([\s\S]*)$/)
+  if (!match) {
+    return { frontmatter: {}, body: content.trim() }
+  }
+  const frontmatter = parseFrontmatter(match[1])
+  const body = match[2].trim()
+  return { frontmatter, body }
+}
+
+async function buildCtx(accountId: string) {
+  return {
+    requestId: `kb-ingest-${Date.now()}`,
+    accountId,
+    appId: null,
+    principal: {
+      id: CREATED_BY_PERSON_ID,
+      type: 'machine' as const,
+      roles: [{ slug: 'system_admin', is_system: true }],
+    },
+    db: adminDb,
+    query: {},
+    requestPath: '/admin-data',
+  } as any
+}
+
+async function main() {
+  const { data: account } = await adminDb
+    .from('accounts')
+    .select('id')
+    .eq('slug', ACCOUNT_SLUG)
+    .single()
+
+  if (!account) throw new Error(`Account not found: ${ACCOUNT_SLUG}`)
+  const accountId = account.id
+
+  const { data: typeRecord } = await adminDb
+    .from('types')
+    .select('id')
+    .eq('slug', TARGET_TYPE_SLUG)
+    .eq('kind', 'item')
+    .single()
+
+  if (!typeRecord) throw new Error(`Type not found: ${TARGET_TYPE_SLUG}`)
+  const typeId = typeRecord.id
+
+  const manifest = JSON.parse(await fs.readFile(MANIFEST_PATH, 'utf8'))
+  const pages: Array<{ path: string }> = []
+
+  function collectPages(obj: any) {
+    if (Array.isArray(obj)) {
+      for (const item of obj) collectPages(item)
+    } else if (typeof obj === 'object' && obj) {
+      if (obj.path) pages.push({ path: obj.path })
+      for (const key of Object.keys(obj)) collectPages(obj[key])
+    }
+  }
+  collectPages(manifest)
+
+  const stats = { created: 0, updated: 0, failed: 0, skipped: 0, errors: [] as string[] }
+
+  for (const page of pages) {
+    if (!page.path.endsWith('.md')) continue
+    const filePath = path.join(DOCS_ROOT, page.path)
+    const sourceFile = filePath.replace(/^docs\//, '')
+
+    try {
+      const raw = await fs.readFile(filePath, 'utf8')
+      const { frontmatter, body } = parseMarkdown(filePath, raw)
+
+      const title = frontmatter.title || path.basename(page.path, '.md')
+      const description = frontmatter.description || ''
+      const tags = normaliseTags(frontmatter.tags || [])
+      const layer = frontmatter.layer || 'overview'
+      const category = [LAYER_TO_CATEGORY[layer] || 'how-to'].filter(c => VALID_CATEGORIES.has(c))
+      const product = 'spine-framework'
+
+      const existing = await adminDb
+        .from('items')
+        .select('id')
+        .eq('type_id', typeId)
+        .eq('data->>source_file', sourceFile)
+        .eq('is_active', true)
+        .maybeSingle()
+
+      const ctx = await buildCtx(accountId)
+      const recordData: any = {
+        entity: 'items',
+        title,
+        description,
+        status: 'published',
+        data: {
+          content: body,
+          tags,
+          category,
+          product,
+          source_file: sourceFile,
+          version: frontmatter.version || '',
+          is_ai_generated: false,
+        },
+      }
+
+      let record: any
+      if (existing?.data?.id) {
+        recordData.id = existing.data.id
+        record = await adminUpdate(
+          { ...ctx, query: { entity: 'items', id: existing.data.id, method: 'PATCH' } },
+          recordData
+        )
+        stats.updated++
+      } else {
+        recordData.type_slug = TARGET_TYPE_SLUG
+        record = await adminCreate(
+          { ...ctx, query: { entity: 'items', method: 'POST' } },
+          recordData
+        )
+        stats.created++
+      }
+
+      await kbIngest(ctx, { id: record.id })
+      console.log(`[${existing?.data?.id ? 'updated' : 'created'}] ${sourceFile} -> ${record.id}`)
+    } catch (err: any) {
+      stats.failed++
+      const msg = `${sourceFile}: ${err?.message || err}`
+      stats.errors.push(msg)
+      console.error(`[failed] ${msg}`)
+    }
+  }
+
+  console.log(JSON.stringify({ stats }, null, 2))
+}
+
+main().catch(e => {
+  console.error(e)
+  process.exit(1)
+})