GEOFlow

Route

Instance: installed geoflow help/profile, whoami, capabilities, doctor; CLI. Source optional; edits: scripts/discover_geoflow_workspace.py <workspace>.

• development: workflow, discovery.
• operations: Updater, boundaries, commands, capabilities.
• public_frontend: resources, site map.
• channel_frontend: resources, contract.
• legacy_migration: templates, skill IDs.

Topics/tasks/themes, libraries.

Boundaries

One mode: source/tests→development; runtime writes→operations; themes/payloads→frontend. Forms/sync/activation/publication need authorization. Discover→implement→verify→authorized finalize.

• Follow repository rules/tests; preserve auth, CSRF, scopes, contracts, readback and secret redaction.
• Helpers: macOS/Linux/WSL, Python 3.10+, Bash; preflight curl; live channel PHP/artisan. Missing tools: read-only discovery, name unverified layers.
• Use the client/instance capability intersection. Preview supports drafts/links; publish, rollback, configuration, large-file staging and full administration are unavailable. Report gaps; never invent routes or substitute uploads.
• Keep enqueue request IDs. No receipt, including prepared-journal 404, authorizes replay: reconcile business state before an explicitly authorized new request. Lost draft create/change responses: inspect state before retry.
• Updater: actual v2 capabilities, explicit updater scopes, saved plan, stable request ID; follow its workflow for protected credential input/recovery. Held work needs attention and retained receipts.
• Native edits: explicit code scope and password reauthentication; protected secret input.
• Separate preview/import/sync/activation/publication/update/rollback. High-risk actions: exact target and explicit authorization.
• Report mode/redacted identity, changes/checks, state/limits.