Brand onboarding

brand-onboarding — meta skill (Phase 12 Wave 1, W-G2)

10-step interactive wizard that captures brand identity + content settings + profile hint from Süleyman, validates against schemas/project-config.schema.json v1.5, and emits a staging-only config artifact under outputs/onboarding/. The wizard core (Steps 1-10) is non-destructive: it NEVER writes the canonical projects/{slug}/project.config.json — that full-config write is deferred to Phase 14 (workspace bring-up). The ONE sanctioned exception is Stage C of the Bank Seed Pipeline below: once a workspace exists, Stage C appends approved bank entries into the existing projects/{slug}/project.config.json (Step 6 + DURUR #5 carve-out). Pre-Phase-14 wizard-core invocations remain STAGING-ONLY (DURUR #5 surfaces an AMBER warning but does NOT block the wizard). Süleyman'ın manuel onayı (approval_received=true) zorunlu (DURUR #1) — onay yoksa events.jsonl'a yazma yapılmaz, hiçbir staging dosyası kalıcı kabul edilmez.

Foundational Principles enforcement (3-layer)

1. Truth-verifiable (Principle 1, R-27) — Süleyman'ın cevapları events.jsonl payload'una (notes field, event_kind=workflow discipline) birebir aktarılır. Skill kendi kafasından alan tahmin etmez; eksik alanı AMBER ile geri sorar (DURUR #3).
2. Profile-aware (Principle 2; profile-aware enforcement) — profile_hint 5-value enum'una (e-commerce | ymyl | local-service | b2b-saas | portfolio) type-safe kilitlenir. 6. değer reddedilir (DURUR #4). profile_hint boşsa domain heuristic suggest (TLD pattern, kelime regex) Süleyman'a sunulur — son kararı Süleyman verir (autonomy boundary).
3. AI suistimal yasağı — Skill brand_identity 20 + content_settings 14 alanını ASLA otomatik doldurmaz. Her alan Süleyman input prompt'undan gelir; Süleyman boş bıraktıysa default eklenmez, prompt yeniden iterate edilir (DURUR #3) ve seçim AMBER ile netleştirilir.

Inputs (frontmatter contract)

Name	Type	Required	Notes
project_slug	string	yes	kebab-case (^[a-z][a-z0-9-]*$) + reserved word + collision check.
domain	string	yes	URI format + socket.gethostbyname DNS sanity. AMBER fallback (#6).
profile_hint	string	no	5-value enum. Boşsa heuristic suggest. 6. değer REJECT (#4).

Outputs (artifacts produced)

• _state/events.jsonl — workflow lifecycle event (event_kind=workflow, workflow_action=done, workflow_run_id={generated}). Yazılır YALNIZCA Süleyman onayı geldikten sonra (DURUR #1).
• outputs/onboarding/{slug}-staging-config.json — project-config.schema.json v1.5 conformant staging artifact; validation amaçlı, projects/{slug}/project.config.json DEĞİLDİR (DURUR #5 STAGING-ONLY mode).

10-Step Body Protocol

Step 1 — Validate project_slug

Regex ^[a-z][a-z0-9-]*$ (project-config.schema.project_id pattern). Reserved word check: admin, system, root, api, www, config, static, assets, public, private, internal. Bu slug'lar workspace bootstrap pipe'ında çakışma yaratır → REJECT. Mevcut projects/{slug}/ dizini varsa DURUR #2.

Step 2 — Validate domain

URI format kontrolü (urllib.parse.urlparse scheme + netloc) + socket.gethostbyname(host) DNS sanity (Python stdlib, harici bağımlılık yok). DNS resolve fail olursa DURUR #6 — AMBER prompt ("Bu domain DNS'te bulunamadı. Manuel onay verir misin? [y/N]"). Süleyman onaylarsa devam, aksi halde ABORT.

Step 3 — Suggest profile

profile_hint set ise direkt geç. Değilse heuristic:

Heuristic	Suggest
Domain TLD .shop, .store, alt-domain mağaza, shop regex	e-commerce
Pattern klinik|hastane|saglik|hukuk|finans	ymyl
Pattern tamir|servis|nakliyat|temizlik + .com.tr	local-service
Pattern app|saas|platform|api + .io|.dev	b2b-saas
Pattern portfolyo|portfolio|kisisel	portfolio

Heuristic önerisini Süleyman'a göster, "Bu mu? [y/N + alternatif seç]" prompt. Son kararı Süleyman verir.

Step 4 — Brand identity 20-field interactive prompt

Her alan ayrı prompt; default YOK (AI suistimal yasağı). Skip edilen alan AMBER + iterate (DURUR #3). 20 alan sırası (v1.3 ADR-030 ile 18 → 20: pronoun_preference + formality canonical eklendi; eski hitap + tone 1-yıl deprecated alias):

1. logo_url — URI
2. primary_color — ^#[0-9a-fA-F]{6}$
3. secondary_color — ^#[0-9a-fA-F]{6}$
4. accent_color — ^#[0-9a-fA-F]{6}$
5. font_family_heading — string
6. font_family_body — string
7. header_template_id — enum [minimal, classic, ecom]
8. footer_template_id — enum [minimal, full]
9. source_url_for_sampling — URI
10. tone — enum [semi-pro, conversational, formal, casual] — DEPRECATED v1.3 (use formality)
11. formality — enum [semi-pro, conversational, formal, casual] — v1.3 canonical
12. hitap — enum [sen, siz] — DEPRECATED v1.3 (use pronoun_preference)
13. pronoun_preference — enum [sen, siz] — v1.3 canonical
14. anglicism_tolerance — enum [low, medium, high]
15. tone_phrases_blocklist — array<string>
16. font_heading — string (alias of #5)
17. font_body — string (alias of #6)
18. default_hero_url — URI
19. same_as_urls — array<URI>
20. image_style — enum [clean-illustration, product-photo, diagram-screenshot, location-photo, esnek]

Step 5 — Content settings 14-field interactive prompt

Aynı disiplin (default yok, skip = AMBER iterate). 14 alan:

1. toc_strategy — enum [none, static, sticky, auto-generate]
2. related_posts_strategy — enum [none, cluster, tag-based, manual]
3. author_strategy — enum [none, byline-required, byline-optional, person-schema-only]
4. css_strategy — enum [inline, external-tier, hybrid]
5. indexnow_enabled — boolean
6. ai_training_optin — boolean
7. video_integration — enum [none, youtube, vimeo, self-hosted]
8. internal_data_sharing — boolean
9. external_uniqueness_check — boolean
10. original_research_database — array<object>
11. experience_database — array<object>
12. video_database — array<object>
13. disclaimer_templates — object<string,string>
14. image_model — string (default-aware: nano-banana)

Step 6 — Wizard core: projects/{slug}/project.config.json YAZILMAZ

Phase 14 öncesi workspace yok ya da skill scope dışında. Bu adım explicit no-op: wizard core (Steps 1-10) projects/{slug}/project.config.json dosyasını ASLA oluşturmaz / full-config yazmaz — staging output (Step 7) otoritedir. STAGING-ONLY (DURUR #5).

Stage C carve-out: Bu mutlak SADECE wizard core (Steps 1-10) içindir. Aşağıdaki Bank Seed Pipeline'ın Stage C'si, bir workspace ZATEN varsa mevcut projects/{slug}/project.config.json'a onaylı bank entry'leri append eder (sanctioned bank-write — scripts/meta/brand_onboarding_write. write_bank_entries, R-44 enforced). Wizard core full-config yazmaz; Stage C yalnızca content_settings bank array'lerine ekleme yapar, başka alana dokunmaz.

Step 7 — Emit staging output package

outputs/onboarding/{slug}-staging-config.json yazılır. İçerik schemas/project-config.schema.json v1.5 ile (Draft7) validate edilir; başarısızsa DURUR #3 (eksik alan iterate). Schema PASS olunca artifact diske inilir. Bu staging output; init-project Phase 14'te bunu input olarak okuyabilir, ama buradaki dosya otoritatif değildir.

Step 8 — Süleyman onayı (DURUR #1)

Skill awaiting_approval durumuna geçer. Onaylanmadan:

• events.jsonl yazılmaz
• staging artifact "draft" işaretlidir (file_name suffix .draft yerine değil — onay öncesi zaten yazılmış olabilir; gerçek gating events.jsonl appendinde)
• ABORT path'i temizdir (no event, no portfolio touch)

Onay komutu: Süleyman explicit "evet/onaylıyorum/y" yazar → approval_received=true. Hayır/atlama → ABORT.

Step 9 — Append _state/events.jsonl (ONLY ON APPROVAL)

{
  "schema_version": "<events.schema $.const>",
  "event_kind": "workflow",
  "workflow_action": "done",
  "workflow_run_id": "<uuid>",
  "step_index": 8,
  "event_id": "brand_onboarded_<slug>_<timestamp>",
  "timestamp": "<ISO8601 UTC>",
  "project_id": "<project_slug>",
  "notes": "brand-onboarding wizard complete; semantic_marker=brand_onboarded; profile=<chosen>"
}

Schema-first override (Lesson 7+23): Brief event_type=brand_onboarded öneriyor; ancak events.schema.json event_type enum'u 12-value WORK-only kapalı liste (content_new, content_revise, ...). event_kind=workflow için doğru alanlar workflow_action (8-value lifecycle) + workflow_run_id. Semantic marker olarak brand_onboarded string'i notes field'una taşınır — schema invariant korunur, intent kaybolmaz.

Step 10 — Output report

Süleyman'a outputs/onboarding/{slug}-staging-config.json path, chosen profile, 20 brand_identity + 14 content_settings field özet tablosu, ve "Phase 14 init-project bu staging dosyasını input olarak okuyacak" notu raporlanır.

Bank Seed Pipeline (Stages A + B + C — Phase 3 G-AI-05)

After Step 10, the skill chains into a 3-stage hybrid bank-seed pipeline that populates content_settings.experience_database and content_settings.original_research_database so the May 2026 Core Update "original, helpful, people-first content" emphasis is met with real first-hand signals (R-105, R-114, R-119).

Stage A — Auto Discovery: scripts/meta/brand_onboarding_discovery.discover(project_slug) runs DFS + Scrapling probes against the project's public surface (WHOIS founding year, /hakkımızda parse, GBP listing for local-service, case-study HTML, top-20 keywords). Output: draft_experience_entries

• draft_research_entries + topic_candidates. F-16 budget pre-flight short-circuits to DURUR awaiting_approval if DFS daily credits are exhausted.

STAGING-ONLY (P1-12) — real discovery deferred. Stage A is stubbed today: discover() returns empty drafts until the live-MCP wiring lands (Phase 11 Wave 2) and the full staging→canonical flow goes live with workspace bring-up (Phase 14). It never spends paid credits and never writes project state — the 5 profile-aware questions below are the operator's manual fallback in the meantime.

Stage B — Operator Review: scripts/meta/brand_onboarding_review.generate_review_prompt() renders a markdown document listing every draft with a 3-action menu (approve / edit / reject); operator fills in decisions; calling layer hands the decisions dict to apply_review_decisions(discovery_output, decisions). Output: approved_experience + approved_research + topic_candidates.

Stage C — Atomic Bank Write: scripts/meta/brand_onboarding_write.write_bank_entries(project_slug, review_output) appends approved entries to project.config.json's bank arrays. R-44 evidence_url validation fires HERE — every experience entry MUST carry non-empty evidence_url; every research entry MUST carry non-empty url. Atomic batch contract: if any entry fails validation, the file stays untouched.

5 Profile-Aware Questions (when Stage A returns empty)

#	Question	Profile gate	Bank target
1	Sektör tecrübesi (yıl + sertifika + partner)	all profiles	experience_database
2	3 müşteri vaka hikayesi	all profiles	experience_database
3	Yönetici sektörel deneyimi	YMYL + b2b-saas	experience_database
4	Şirket içi anket / araştırma / case study	all (skip OK)	original_research_database
5	First-hand somut olaylar (canlı vaka)	YMYL + b2b-saas	experience_database

Bank Seed DURUR Cascades (additive to the 6 below)

• DURUR #7 — BANK-SEED-DISCOVERY-EMPTY: Stage A returns 0 candidates across all 5 sources → awaiting_approval, operator must supply manually via the 5 questions above.
• DURUR #8 — BANK-SEED-EVIDENCE-MISSING: Stage C rejects an approved entry without evidence_url (R-44). Operator edits to add URL or removes the entry.
• DURUR #9 — BANK-SEED-PROFILE-MIN-NOT-MET: YMYL project with fewer than 3 approved experience entries after Stage C → awaiting_approval. Non-YMYL projects: ≥1 entry or operator explicit-skip.

DURUR conditions (6)

Stop and flag the manager — do not patch, do not fall back silently.

1. DURUR #1 — Süleyman onayı yok. approval_received != true → ABORT. events.jsonl yazılmaz, staging artifact orphan kalır (cleanup audit ledger sorumluluğu).
2. DURUR #2 — project_slug çakışması. projects/{slug}/ dizini var ya da reserved word listesi (admin/system/root/api/www vs.) ile çakışıyor → REJECT.
3. DURUR #3 — Brand identity / content settings zorunlu alan eksik. Süleyman alan atladı → AMBER + prompt yeniden iterate. Skill default doldurmaz (AI suistimal yasağı).
4. DURUR #4 — profile_hint enum dışı. 5-value (e-commerce, ymyl, local-service, b2b-saas, portfolio) dışı seçim → REJECT. Type-safe assert; 6. değer kabul edilmez.
5. DURUR #5 — Workspace yok (Phase 14 öncesi). projects/ dizini engine repo'sunda yok → STAGING-ONLY mode (warning, devam). Wizard core (Steps 1-10) projects/{slug}/project.config.json'ı ASLA yazmaz. (Workspace VARSA, Stage C bu dosyanın content_settings bank array'lerine append edebilir — Step 6 Stage C carve-out; bu DURUR yalnızca workspace YOKKEN wizard core'u staging'e kilitler.)
6. DURUR #6 — Domain DNS resolve fail. socket.gethostbyname exception fırlatır → AMBER prompt; Süleyman manual confirm verirse devam, "no" derse ABORT.

Plugin agnostik invariant (F-16)

Bu skill .mcp.json dosyasına ASLA yazmaz, MCP tool sözleşmesi yoktur (mcp_tools.required = [], mcp_tools.optional = []). Phase 11+ plugin agnostik MCP boundary korunur; byte-hash sentinel test'le doğrulanır (tests/skills/test_brand_onboarding.py).

Cross-references

• Schemas: schemas/skill-frontmatter.schema.json (frontmatter contract), schemas/project-config.schema.json v1.5 (staging artifact validation), schemas/events.schema.json v1.0 (workflow event_kind discipline ADR-020).
• Skills: init-project (Phase 14 staging consumer), load-context, whats-next (meta peer skills).
• Lessons: 7+23 (worker schema-first override yetkisi), 28 (manager mop-up matrisi), 30 (plugin agnostik MCP boundary F-16), 32 (atomic phase paterni).
• Tests: tests/skills/test_brand_onboarding.py (15 case; frontmatter + 6 DURUR + plugin agnostik + 3-layer principles + schema staging conformance).