Builder destinations and publication workflow

Sidekick chooses a destination for every build it does — code, docs, files, runtime — based on what your workspace has pinned. Managed defaults work without setup; pinned connectors route work to your owned tools (GitHub for code, Notion for docs, OneDrive for files). Risky publication steps go through approval before Sidekick proceeds.

How destinations get chosen#

Sidekick resolves a destination per role at build time:

  1. Pinned destination — if you've pinned a connector for that role (e.g. GitHub for code_host), Sidekick uses it.
  2. Managed default — if nothing is pinned, Sidekick falls back to the matching managed default (managed artifacts for files, managed runtime for execution).
  3. Approval — if the destination is gated by autonomy policy, Sidekick pauses for approval before publishing.

Roles and what they cover#

RoleTypical destinationManaged fallback
code_hostGitHubInternal code bundle or manual export; pull requests require a connected code host
document_storeNotion, OneDriveManaged artifacts
artifact_storeOneDrive, GitHub ReleasesManaged artifacts
deployment_hostYour deployment provider or CI/CD pipelineNo public deployment; manual export or PR-ready handoff
runtime_targetConnected runtime / fleetManaged runtime

Pinning a destination#

In Sidekick → Settings → Destination defaults, choose a connector for each role you want to override. Unpinned roles continue to use the managed default.

Publication approval#

For destinations marked as approval-gated by your autonomy policy, Sidekick:

  1. Drafts the change in its isolated worktree
  2. Surfaces a publication approval in the Approvals inbox
  3. Publishes only after the approval resolves

Capability boundary#

Sidekick won't pin a destination on your behalf. The first time it touches a role with no pin and no connector, it uses the managed default and records that decision in the evidence trail so you can opt in to a different destination later.

If there is no deployment host connected, Sidekick may produce a deployable output, export bundle, or pull request, but it should not claim that a public URL exists. Public hosting starts only after a deployment destination is connected and the deployment action is approved.

info See Outputs, artifacts, and destinations for the plain-language boundary between internal outputs and public hosting.