Implement install stages S3–S5: package, policy, and skills sync.

Attach/onboard sandbox from agents/hermes, additive OpenShell policy overlays, and nemohermes skill install for scaffold skills. No doctor/connect and no push.
This commit is contained in:
Ty
2026-07-27 12:13:25 -07:00
parent e5e179e541
commit 0198ab6881
38 changed files with 1422 additions and 51 deletions
+18
View File
@@ -0,0 +1,18 @@
---
name: ap-bills-due
description: "Accounts payable: bills due"
domain: books
---
# ap-bills-due
Accounts payable: bills due.
## Description
Lists upcoming and overdue bills from QuickBooks Online.
## Constraints
- Read-only bill data.
- No bill payment execution.
+18
View File
@@ -0,0 +1,18 @@
---
name: ar-open-invoices
description: "Accounts receivable: open invoices"
domain: books
---
# ar-open-invoices
Accounts receivable: open invoices.
## Description
Lists outstanding invoices and aging summary from QuickBooks Online.
## Constraints
- Read-only invoice data.
- No payment processing.
+18
View File
@@ -0,0 +1,18 @@
---
name: availability
description: "Check and display appointment availability"
domain: operations
---
# availability
Check and display appointment availability.
## Description
Shows available time slots for appointments based on the salon's schedule and service durations.
## Constraints
- Deterministic gap math from tools.
- No booking without owner confirmation.
+18
View File
@@ -0,0 +1,18 @@
---
name: books-snapshot
description: "QuickBooks snapshot: P&L, balance, cash"
domain: books
---
# books-snapshot
QuickBooks snapshot: P&L, balance, cash.
## Description
Provides a high-level financial snapshot from QuickBooks Online: profit and loss, balance sheet summary, and cash position.
## Constraints
- Read-only QuickBooks data.
- No write/update/delete operations.
+18
View File
@@ -0,0 +1,18 @@
---
name: client-card
description: "Client profile and history"
domain: clients
---
# client-card
Client profile and history.
## Description
Displays a client's profile, visit history, preferences, and notes.
## Constraints
- Read-only client data.
- No PII export without owner consent.
+18
View File
@@ -0,0 +1,18 @@
---
name: daily-board
description: "Today's salon board: appointments, tasks, and priorities"
domain: operations
---
# daily-board
Today's salon board: appointments, tasks, and priorities.
## Description
Pulls together the day's schedule, pending tasks, and key metrics into a single board view for the salon owner.
## Constraints
- Deterministic facts from tools; inference for ranking and wording only.
- No silent send or publish.
+18
View File
@@ -0,0 +1,18 @@
---
name: draft-client-message
description: "Draft outbound messages to clients (draft-first)"
domain: clients
---
# draft-client-message
Draft outbound messages to clients (draft-first).
## Description
Composes messages to clients for appointments, reminders, or follow-ups. Owner reviews and sends.
## Constraints
- Draft-first: owner must approve before sending.
- No silent send.
+18
View File
@@ -0,0 +1,18 @@
---
name: draft-invoice
description: "Draft invoices for clients (draft-first)"
domain: books
---
# draft-invoice
Draft invoices for clients (draft-first).
## Description
Creates draft invoices for client services. Owner reviews and sends.
## Constraints
- Draft-first: owner must approve before sending.
- No automatic payment collection.
+18
View File
@@ -0,0 +1,18 @@
---
name: publish-boundary-test
description: "Boundary test: verify publish/send denials"
domain: system
---
# publish-boundary-test
Boundary test: verify publish/send denials.
## Description
Test skill that verifies the sandbox correctly denies publish, send, and payment operations. Used for validation during install and upgrade.
## Constraints
- This skill should fail when attempting publish/send/pay.
- If it succeeds, the policy is misconfigured.
+18
View File
@@ -0,0 +1,18 @@
---
name: remember-forget
description: "Confirm-to-remember persistence; forget entries"
domain: system
---
# remember-forget
Confirm-to-remember persistence; forget entries.
## Description
Manages persistent memory entries. Requires explicit owner confirmation before remembering. Supports forgetting previously stored entries.
## Constraints
- Write only after structured confirmation.
- No silent persistence.
+18
View File
@@ -0,0 +1,18 @@
---
name: retail-stock
description: "Retail product inventory levels"
domain: operations
---
# retail-stock
Retail product inventory levels.
## Description
Shows current stock levels for retail products, with low-stock alerts.
## Constraints
- Deterministic thresholds from tools.
- No automatic reordering.
+18
View File
@@ -0,0 +1,18 @@
---
name: service-menu
description: "Service catalog and pricing"
domain: operations
---
# service-menu
Service catalog and pricing.
## Description
Displays the salon's service menu with descriptions, durations, and prices.
## Constraints
- Read-only catalog data.
- No price changes without owner action.
+18
View File
@@ -0,0 +1,18 @@
---
name: setup-education
description: "Owner-safe connect education and capability report"
domain: system
---
# setup-education
Owner-safe connect education and capability report.
## Description
Guides the owner through connecting their SaaS integrations (Square, QBO, Vagaro) and messaging channels. Provides a capability report showing what is connected.
## Constraints
- Owner-safe: no terminal instructions.
- Browser/vendor UI steps only.
+19
View File
@@ -0,0 +1,19 @@
---
name: social-draft
description: "Draft social media posts (draft-first; vision aux)"
domain: social
---
# social-draft
Draft social media posts (draft-first; vision aux).
## Description
Creates draft social media posts using salon photos and content. Owner reviews and publishes.
## Constraints
- Draft-first: owner must approve before publishing.
- No silent publish.
- Vision aux for photo understanding.
+18
View File
@@ -0,0 +1,18 @@
---
name: vendor-inbox
description: "Vendor communications and documents"
domain: books
---
# vendor-inbox
Vendor communications and documents.
## Description
Tracks vendor communications, invoices received, and related documents.
## Constraints
- Read-only vendor data.
- Draft-first for any vendor responses.
+18
View File
@@ -0,0 +1,18 @@
---
name: vendor-spend
description: "Vendor spending summary"
domain: books
---
# vendor-spend
Vendor spending summary.
## Description
Summarizes spending by vendor from QuickBooks Online.
## Constraints
- Read-only financial data.
- No money movement.
+18
View File
@@ -0,0 +1,18 @@
---
name: weekly-digest
description: "Weekly business digest for the owner"
domain: social
---
# weekly-digest
Weekly business digest for the owner.
## Description
Compiles a weekly summary of appointments, revenue, client activity, and key metrics.
## Constraints
- Deterministic facts from tools; inference for summary wording.
- Read-only data aggregation.