the officer shell: designs per user, and the handoff desk

manifest, schema, router and two panels. the editor is hosted and
saving; the last step is not finished and the readme says so.

designs are rows scoped per user, with userId in every WHERE rather
than checked after the read — another person's design is 'not found',
so the id space cannot be probed. the Doc is stored whole as jsonb
because upstream adds fields to it constantly and none of them should
be a migration here.

the handoff is the reason the plugin exists and it is the part that
does not work: /api/chat has NO session-creation route, a session is
constructed by the browser opening a websocket, so a plugin has nothing
to POST to. onExport returns false and the clipboard still runs, which
is upstream's own behaviour — degraded, not broken. docs/handoff.md
names the one platform change that would finish it, and argues it
should be generic rather than ours.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

scripts/vendor.sh

@@ -42,6 +42,11 @@ cp "$WORK/src/app/page.tsx" "$DEST/Canvas.tsx"
 cp "$WORK/src/app/globals.css" "$DEST/globals.css"
 cp "$WORK/src/LICENSE" "$DEST/LICENSE"
 
+# Upstream's own tests are not taken. They import `vitest`, which this plugin has no runner for and
+# no reason to install — and a test that cannot run is worse than no test, because it reads as
+# coverage. Upstream runs them in its own CI, which is where they belong.
+find "$DEST" \( -name '*.test.ts' -o -name '*.test.tsx' -o -name '*.spec.ts' -o -name '*.spec.tsx' \) -delete
+
 # lib/ai.ts and components/AiPanel.tsx ARE vendored, despite being the parts Officer least needs.
 #
 # The first attempt deleted them — they keep model-provider API keys in localStorage and call the