@@ -4,6 +4,7 @@ paths:
   - "apps/sim/platform/embedded/app/(shell)/{settings,people,integrations,links,home}/**"
   - "apps/sim/platform/design-system/components/{status,modal,picker,settings-section,search-field,activity-row}/**"
   - "apps/sim/app/o/*/**"
+  - "apps/sim/app/o/*/settings/**"
 ---
 
 # Organization Views
 
@@ -1,6 +1,6 @@
 ---
 description: "One pattern per job across the organization views (Settings, People, Integrations, Links, Home)"
-globs: ["apps/sim/platform/embedded/app/(shell)/{settings,people,integrations,links,home}/**","apps/sim/platform/design-system/components/{status,modal,picker,settings-section,search-field,activity-row}/**","apps/sim/app/o/*/**"]
+globs: ["apps/sim/platform/embedded/app/(shell)/{settings,people,integrations,links,home}/**","apps/sim/platform/design-system/components/{status,modal,picker,settings-section,search-field,activity-row}/**","apps/sim/app/o/*/**","apps/sim/app/o/*/settings/**"]
 ---
 
 <!-- Generated from .claude/rules/sim-platform-views.md by `bun run skills:sync`. Edit the source, not this file. -->
 
@@ -40,8 +40,12 @@ WebKit acceptance on Blacksmith uses the matching, digest-pinned Playwright brow
 
 HTTP and docs browser installation first asks the pinned Playwright driver to simulate its OS dependency installation. When the simulation requires no package changes, the runner avoids an apt update; missing dependencies, proposed upgrades, or an unsuccessful simulation use the normal dependency installer. Browser selection and downloads still use the pinned driver, including full native Chromium for extension acceptance.
 
+`app/o` bundles `platform/embedded` and `platform/design-system`, so both are build and `ci:shared` inputs: an edit to either changes the build hash and selects every boundary. The Platform zone (`platform/{app,lib,fixtures,checks,docs,preview,public}` and its own configs) is a separate Next app that the embedded tree may not import, reached only through the `/org` rewrite, and is excluded by name so that a new `platform/` folder stays an input until it is declared zone-only. A zone-only edit selects `platform-design.yml` and the app's unit tests, and no main-app build or acceptance job.
+
 Every HTTP and browser group consumes the same production build in an isolated job/database. Electron also uses that build and skips its development-route warm-up. Local HTTP and Electron development runs retain their dev-server behavior. Build inputs exclude test-only files so a harness edit can reuse an unchanged production build.
 
+The Platform's fixture and live suites stay in `platform-design.yml`, outside `checks / ci`. The HTTP and production matrices consume one `next-build` artifact, built without `SIM_PLATFORM_ORIGIN`, while the `zone` topology bakes that origin into its rewrite and also builds the Platform app, so it needs its own job, gate flag and plan output rather than a suite entry. A task that depends on `ci:shared` would select two 16-vCPU jobs of up to 75 minutes for nearly every app PR and hold every staging push's deployment gate on them. The cost is that a red run is advisory, and a path-filtered workflow cannot be a required check: one that never starts never reports, so the status does not block a merge until the suite joins the aggregate.
+
 Desktop inbox protocol, assistant actions UI, and organization search UI run as three parallel HTTP jobs with isolated databases, apps, and reports. Each harness owns its acceptance task, so an edit selects its own job. The inbox protocol task depends on server and realtime code; the browser tasks also depend on workspace UI. Desktop inbox needs no browser. The UI jobs and browser extension install Chromium while their app starts, waiting for both before executing assertions; browser-install failures still fail the job and preserve the install log. No acceptance assertions are removed by the split.
 
 Live Electron acceptance tracks its live-app suite, fixtures, and Playwright configuration separately from shell-only smoke tests. Changing a shell-only smoke case runs the dedicated desktop workflow without starting the app's production build and live lease checks.
 
@@ -170,7 +170,9 @@ start_platform() {
 # platform_live_environment: one hosted Enterprise organization, the deterministic seed its specs
 # read, and a scripted worker in place of the model. Hosted is decided by the app's hostname, which
 # the job maps to loopback. Google and Microsoft answer only to real credentials, so those clients
-# are fixtures, and what no fixture can reach is reported by the specs as a skip.
+# are fixtures, and what no fixture can reach is reported by the specs as a skip. Each group starts
+# the realtime server after its app, as org-redesign does, and holds the same tripwire and tool
+# permissions, so a route that passes one suite cannot fail on the same stack in the other.
 platform_live_environment() {
   app_server=start
   export REDIS_URL=redis://127.0.0.1:6379
@@ -186,6 +188,9 @@ platform_live_environment() {
   export NEXT_PUBLIC_ACCESS_CONTROL_ENABLED=true
   export SIM_LINKS=true PEOPLE=true
   export INTERNAL_API_SECRET=platform-live-ci-local-secret-at-least-32-characters
+  export COPILOT_TOOL_PERMISSIONS_ENABLED=true
+  export DB_TX_TRIPWIRE=throw
+  export NEXT_PUBLIC_SOCKET_URL=http://127.0.0.1:3030 SOCKET_SERVER_URL=http://127.0.0.1:3030
   export COPILOT_API_KEY=platform-live-ci-local-copilot-key MOTHERSHIP_SIM_TRANSPORT=direct
   export SIM_AGENT_API_URL=http://127.0.0.1:3029
   export GOOGLE_CLIENT_ID=platform-live-google-client GOOGLE_CLIENT_SECRET=platform-live-google-secret
@@ -491,6 +496,7 @@ JS
     export SIM_PLATFORM_ORIGIN=http://127.0.0.1:3028
     start_browser_install platform-live --only-shell chromium
     PLATFORM_ORG_UI=true start_app platform-live 3027 'Platform main' record-http-status
+    start_realtime platform-live 3030
     start_platform 3028
     bun --no-env-file platform/checks/live/support/scripted-agent.ts 3029 \
       > "$report_dir/platform-live-agent.log" 2>&1 &
@@ -510,6 +516,7 @@ JS
     export PLATFORM_ORG_UI=true
     start_browser_install platform-live --only-shell chromium
     start_app platform-live-flag-off 3027 'Main, no zone' record-http-status
+    start_realtime platform-live-flag-off 3030
     wait_for_browsers
     run_platform_live flag-off platform-live-flag-off
     ;;
 
@@ -2,12 +2,35 @@ name: platform-design
 
 on:
   pull_request:
+    # The zone and the seam it reads through: the main app that mounts and proxies it, the contracts,
+    # hooks and enterprise domains its data layer wraps, and the chat modules it drives unchanged.
+    # A pattern's order matters: the ledger follows the docs exclusion so an edit to it still meets
+    # the report-based parity check. `*` stands for `[workspaceId]`, which a filter would read as a
+    # character class.
     paths:
       - 'apps/sim/platform/**'
       - '!apps/sim/platform/docs/**'
       - '!apps/sim/platform/README.md'
+      - 'apps/sim/platform/docs/org-parity.md'
+      - 'apps/sim/app/o/**'
+      - 'apps/sim/lib/platform/**'
+      - 'apps/sim/proxy.ts'
+      - 'apps/sim/next.config.ts'
+      - 'apps/sim/lib/api/contracts/**'
+      - 'apps/sim/hooks/queries/**'
+      - 'apps/sim/ee/**'
+      - 'apps/sim/app/workspace/*/home/hooks/**'
+      - 'apps/sim/app/workspace/*/home/types.ts'
+      - 'apps/sim/app/workspace/*/home/search-params.ts'
+      - 'apps/sim/app/workspace/*/home/components/message-content/**'
+      - 'apps/sim/app/workspace/*/home/components/knowledge-search-results/utils.ts'
+      - 'apps/sim/app/workspace/*/w/*/components/panel/components/copilot/components/user-input/hooks/**'
+      - 'apps/sim/scripts/platform-live-seed.ts'
       - 'apps/sim/package.json'
+      - 'apps/realtime/**'
       - 'scripts/check-platform-design*'
+      - 'scripts/check-platform-parity*'
+      - 'scripts/platform-search-source-catalog.ts'
       - 'scripts/platform-variant-usage.ts'
       - 'scripts/sync-platform-*.ts'
       - '.github/workflows/platform-design.yml'
 
@@ -1,6 +1,6 @@
 # Platform design contract
 
-Applies to this independent Next.js application. In this tree “EMCN” means the Sim Platform design system in `design-system/`. The existing app and `packages/emcn` remain isolated. For new work or design drift, run the repository's `$implement-platform` skill. Its Paper companion is `$sim-paper-design`. Never import the legacy app, styles, chrome, business logic or providers across this boundary. Real data crosses only through the [data seam](#phase-3-data-seam).
+Applies to this independent Next.js application, the zone served at `/org`, and to `design-system/`. `embedded/` is not part of that application; it has [its own section](#embedded-in-the-organization-surface). In this tree “EMCN” means the Sim Platform design system in `design-system/`. The existing app and `packages/emcn` remain isolated. For new work or design drift, run the repository's `$implement-platform` skill. Its Paper companion is `$sim-paper-design`. Never import the legacy app, styles, chrome, business logic or providers across this boundary. Real data crosses only through the [data seam](#phase-3-data-seam).
 
 ## Ownership
 
@@ -74,7 +74,13 @@ Gates live on the server and arrive as data. Hiding an entry is navigation, not
 
 ## Embedded in the organization surface
 
-The main app's `app/o/[organizationId]/` also mounts these views, on routes flag-off organizations still use. That route is the only legacy code that may import `@/platform/*`; `check:platform-css` holds every other entry out. Whatever needs legacy chrome (`WorkspaceChrome`, the legacy composer, Search's source cards) lives in `platform/embedded/`, which holds the organization surface's own views and data and which the zone never imports. A view shared by both takes what differs as props or slots. `lib/data` modules read `useOrganization()`, which the host's layout fills from the same surface read this app makes, with `routePrefix` set to `/o/<id>`, so `surfaceHref` and `legacyRoutes` serve both. Notices go through `usePlatformNotices`, which a host may redirect, and `PlatformSurface` collapses inside another, so a part can wrap itself when it alternates with legacy chrome.
+`embedded/` holds the organization views and their data (`embedded/app`, `embedded/lib`). It is not a Next app and has no pages: the main app's `app/o/[organizationId]/` routes mount it, for every organization, whatever the `platform-org-ui` flag says. An edit here ships in the main app's build. It is built on the host, not on this project: it imports the host's hooks, stores, providers and packages, legacy chrome included (`WorkspaceChrome`, the legacy composer, Search's source cards), and the data seam and seam closure do not apply to it. `check:boundaries` sets its own seam: views read data through `embedded/lib/data`, and that layer points away from views and routes.
+
+The zone and `embedded/` share only `design-system/`. Neither imports the other, not even for a type (`check:platform-design` rule `zone-embedded`, `check:boundaries` rule 7), so a change to a view here does not change the zone, and a similar view in each is two views. `app/o` is the only legacy code that may import `@/platform/*`, and only those two trees; `check:platform-css` holds every other entry out, and `check:platform-design` holds `app/o` out of the zone.
+
+Org context comes from a different place in each. A view here calls `useOrganization()` from `@/lib/organizations/provider`, which the `app/o` layout fills from `getOrganizationSurfaceContext`. The zone calls its own from `@/platform/lib/data/organization`. `surfaceHref`, `legacyRoutes` and `routePrefix` are the zone's and do not exist here: a link here is a host route (`@/lib/navigation/paths`). Each tree has its own `usePlatformNotices`. `PlatformSurface` collapses inside another, so a part can wrap itself when it alternates with legacy chrome.
+
+The design rules in this contract hold here too. `check:platform-design` walks `embedded/`, excepting its imports of the host and the host tokens it names, and counts what predates that per file and rule in the shrink-only `scripts/check-platform-design.baseline.json`.
 
 ## Product UI and desktop
 
 
@@ -32,7 +32,17 @@
   "exclude": [
     "node_modules",
     ".next",
-    "platform",
+    "platform/app",
+    "platform/lib",
+    "platform/fixtures",
+    "platform/checks",
+    "platform/preview",
+    "platform/design-system",
+    "platform/.next",
+    "platform/node_modules",
+    "platform/next-env.d.ts",
+    "platform/next.config.ts",
+    "platform/proxy.ts",
     "**/*.test.ts",
     "**/*.test.tsx",
     "vitest.config.ts",
 
@@ -1,4 +1,20 @@
 {
   "extends": "./tsconfig.json",
-  "exclude": ["node_modules", ".next", "platform", "vitest.config.ts", "vitest.setup.ts"]
+  "exclude": [
+    "node_modules",
+    ".next",
+    "platform/app",
+    "platform/lib",
+    "platform/fixtures",
+    "platform/checks",
+    "platform/preview",
+    "platform/design-system",
+    "platform/.next",
+    "platform/node_modules",
+    "platform/next-env.d.ts",
+    "platform/next.config.ts",
+    "platform/proxy.ts",
+    "vitest.config.ts",
+    "vitest.setup.ts"
+  ]
 }
@@ -3,8 +3,26 @@
   "tasks": {
     "ci:shared": {
       "dependsOn": ["^ci:runtime"],
+      // The Platform zone is a separate Next app with its own workflow (platform-design.yml), so an
+      // edit that touches only the zone selects no main-app job. `platform/embedded` and
+      // `platform/design-system` ship inside `app/o`, so they stay inputs. Each zone path is named so
+      // that a new `platform/` folder is an input until someone decides otherwise.
       "inputs": [
         "$TURBO_DEFAULT$",
+        "!platform/app/**",
+        "!platform/lib/**",
+        "!platform/fixtures/**",
+        "!platform/checks/**",
+        "!platform/docs/**",
+        "!platform/preview/**",
+        "!platform/public/**",
+        "!platform/next.config.ts",
+        "!platform/proxy.ts",
+        "!platform/postcss.config.mjs",
+        "!platform/package.json",
+        "!platform/tsconfig.json",
+        "!platform/README.md",
+        "!scripts/platform-live-*",
         "!app/workspace/**",
         "!app/(landing)/**",
         "!app/api/**",
@@ -214,13 +232,28 @@
       ]
     },
     "build": {
-      // next.config bakes the Platform rewrite from SIM_PLATFORM_ORIGIN, and the main app imports
-      // nothing from its separate `platform/` zone or the seed of its live checks.
+      // next.config bakes the Platform rewrite from SIM_PLATFORM_ORIGIN. `app/o` bundles
+      // `platform/embedded` and `platform/design-system`, so those are inputs: leaving them out would
+      // restore a stale `.next` and ship an old UI. The zone paths below are its own Next app, reached
+      // only through that rewrite, and the embedded tree imports none of them
+      // (check:platform-design rule `zone-embedded`, check:boundaries).
       "env": ["NEXT_BUILD_SKIP_TYPE_CHECK", "SIM_PLATFORM_ORIGIN"],
       "inputs": [
         "$TURBO_DEFAULT$",
         ".env*",
-        "!platform/**",
+        "!platform/app/**",
+        "!platform/lib/**",
+        "!platform/fixtures/**",
+        "!platform/checks/**",
+        "!platform/docs/**",
+        "!platform/preview/**",
+        "!platform/public/**",
+        "!platform/next.config.ts",
+        "!platform/proxy.ts",
+        "!platform/postcss.config.mjs",
+        "!platform/package.json",
+        "!platform/tsconfig.json",
+        "!platform/README.md",
         "!scripts/platform-live-*",
         "!**/*.test.*",
         "!**/*.spec.*",
 
@@ -45,5 +45,55 @@
     "apps/sim/platform/embedded/lib/data/chat-list.ts": 1,
     "apps/sim/platform/embedded/lib/data/organization-search.ts": 1,
     "apps/sim/platform/embedded/lib/data/settings-navigation.ts": 1
+  },
+  "viewsToWorkspace": {
+    "apps/sim/platform/embedded/app/(shell)/_components/conversation/dialogs.tsx": 1,
+    "apps/sim/platform/embedded/app/(shell)/_components/conversation/page-composer.tsx": 3,
+    "apps/sim/platform/embedded/app/(shell)/_components/conversation/page-conversation.tsx": 5,
+    "apps/sim/platform/embedded/app/(shell)/_components/conversation/response-actions.tsx": 1,
+    "apps/sim/platform/embedded/app/(shell)/_components/conversation/search-input-bar.tsx": 2,
+    "apps/sim/platform/embedded/app/(shell)/_components/conversation/share-dialog.tsx": 1,
+    "apps/sim/platform/embedded/app/(shell)/_components/conversation/skeletons.tsx": 1,
+    "apps/sim/platform/embedded/app/(shell)/_components/conversation/use-page-conversation-effects.ts": 2,
+    "apps/sim/platform/embedded/app/(shell)/_components/search/search-results.tsx": 3,
+    "apps/sim/platform/embedded/app/(shell)/_components/search/source-row.tsx": 4,
+    "apps/sim/platform/embedded/app/(shell)/_components/sidebar/chats-section.tsx": 2,
+    "apps/sim/platform/embedded/app/(shell)/_components/sidebar/rail-flyout.tsx": 1,
+    "apps/sim/platform/embedded/app/(shell)/_components/sidebar/sidebar.tsx": 5,
+    "apps/sim/platform/embedded/app/(shell)/home/_components/home-dashboard/home-dashboard.tsx": 1,
+    "apps/sim/platform/embedded/app/(shell)/integrations/_components/integrations-page/integrations-route.tsx": 1,
+    "apps/sim/platform/embedded/app/(shell)/integrations/_components/search-connection-request/search-connection-request.tsx": 1,
+    "apps/sim/platform/embedded/app/(shell)/search/_components/search-surface/search-surface.tsx": 1,
+    "apps/sim/platform/embedded/app/(shell)/settings/_components/sections/admin/add-user-modal.tsx": 1,
+    "apps/sim/platform/embedded/app/(shell)/settings/_components/sections/admin/admin-section.tsx": 1,
+    "apps/sim/platform/embedded/app/(shell)/settings/_components/sections/connected-accounts/group-providers.tsx": 1,
+    "apps/sim/platform/embedded/app/(shell)/settings/_components/sections/integrations/api-key-field.tsx": 2,
+    "apps/sim/platform/embedded/app/(shell)/settings/_components/sections/integrations/connector-access.tsx": 1,
+    "apps/sim/platform/embedded/app/(shell)/settings/_components/sections/integrations/connector-config-fields.tsx": 3,
+    "apps/sim/platform/embedded/app/(shell)/settings/_components/sections/integrations/connector-settings-fields.tsx": 3,
+    "apps/sim/platform/embedded/app/(shell)/settings/_components/sections/integrations/source-detail.tsx": 3,
+    "apps/sim/platform/embedded/app/(shell)/settings/_components/sections/integrations/source-setup.tsx": 3,
+    "apps/sim/platform/embedded/app/(shell)/settings/_components/sections/mothership/mothership-section.tsx": 3
+  },
+  "zoneLibToViewTypes": {
+    "apps/sim/platform/lib/data/admin.ts": 1,
+    "apps/sim/platform/lib/data/chat-composer.ts": 2,
+    "apps/sim/platform/lib/data/chat-credentials/rows.ts": 1,
+    "apps/sim/platform/lib/data/chat-draft.ts": 1,
+    "apps/sim/platform/lib/data/chat-list.ts": 1,
+    "apps/sim/platform/lib/data/chat-model.ts": 2,
+    "apps/sim/platform/lib/data/chat-panel.ts": 2,
+    "apps/sim/platform/lib/data/chat-review.ts": 1,
+    "apps/sim/platform/lib/data/chat.ts": 1,
+    "apps/sim/platform/lib/data/credential-groups.ts": 1,
+    "apps/sim/platform/lib/data/home-model.ts": 1,
+    "apps/sim/platform/lib/data/home.ts": 2,
+    "apps/sim/platform/lib/data/search.ts": 2,
+    "apps/sim/platform/lib/data/settings-navigation.ts": 1,
+    "apps/sim/platform/lib/data/shell-actions.ts": 1,
+    "apps/sim/platform/lib/data/shell-context.ts": 1,
+    "apps/sim/platform/lib/data/shell.ts": 1,
+    "apps/sim/platform/lib/data/source-settings.ts": 1,
+    "apps/sim/platform/lib/data/workspaces.ts": 1
   }
 }