@bongos/core 1.17.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (1142) hide show
  1. package/.bongos-core.json +5727 -0
  2. package/.claude/skills/blocker-review/SKILL.md +91 -0
  3. package/.claude/skills/blocker-solve/SKILL.md +96 -0
  4. package/.claude/skills/builder-backup/SKILL.md +54 -0
  5. package/.claude/skills/builder-box/SKILL.md +45 -0
  6. package/.claude/skills/builder-claim/SKILL.md +76 -0
  7. package/.claude/skills/builder-connect/SKILL.md +59 -0
  8. package/.claude/skills/builder-cost/SKILL.md +47 -0
  9. package/.claude/skills/builder-end/SKILL.md +81 -0
  10. package/.claude/skills/builder-exit/SKILL.md +88 -0
  11. package/.claude/skills/builder-key/SKILL.md +40 -0
  12. package/.claude/skills/builder-reauth/SKILL.md +50 -0
  13. package/.claude/skills/builder-redteam/SKILL.md +109 -0
  14. package/.claude/skills/builder-release/SKILL.md +41 -0
  15. package/.claude/skills/builder-setup/SKILL.md +62 -0
  16. package/.claude/skills/builder-ship/SKILL.md +79 -0
  17. package/.claude/skills/builder-stage/SKILL.md +51 -0
  18. package/.claude/skills/builder-start/SKILL.md +46 -0
  19. package/.claude/skills/close-box/SKILL.md +43 -0
  20. package/.claude/skills/design-sync/SKILL.md +69 -0
  21. package/.claude/skills/dev/SKILL.md +49 -0
  22. package/.claude/skills/feedback/SKILL.md +32 -0
  23. package/.claude/skills/figma-design-sync/SKILL.md +74 -0
  24. package/.claude/skills/goal-review/SKILL.md +89 -0
  25. package/.claude/skills/idea-triage/SKILL.md +144 -0
  26. package/.claude/skills/ideate/SKILL.md +82 -0
  27. package/.claude/skills/merge-mode/SKILL.md +169 -0
  28. package/.claude/skills/new-project/SKILL.md +108 -0
  29. package/.claude/skills/otb-character-review/SKILL.md +71 -0
  30. package/.claude/skills/otb-design-review/SKILL.md +47 -0
  31. package/.claude/skills/otb-feedback-capture/SKILL.md +45 -0
  32. package/.claude/skills/otb-figma-sync/SKILL.md +54 -0
  33. package/.claude/skills/otb-tile-generate/SKILL.md +45 -0
  34. package/.claude/skills/paint/SKILL.md +70 -0
  35. package/.claude/skills/planning-session/SKILL.md +299 -0
  36. package/.claude/skills/priority-session/SKILL.md +134 -0
  37. package/.claude/skills/read-session-export/SKILL.md +58 -0
  38. package/.claude/skills/recall/SKILL.md +52 -0
  39. package/.claude/skills/session-handoff/SKILL.md +46 -0
  40. package/.claude/skills/status/SKILL.md +33 -0
  41. package/.devcontainer/Dockerfile +69 -0
  42. package/.devcontainer/README.md +73 -0
  43. package/.devcontainer/devcontainer-lock.json +19 -0
  44. package/.devcontainer/devcontainer.json +93 -0
  45. package/.devcontainer/healthcheck.sh +84 -0
  46. package/.devcontainer/init-firewall.sh +198 -0
  47. package/.devcontainer/post-create.sh +153 -0
  48. package/.dockerignore +36 -0
  49. package/.env.local.example +32 -0
  50. package/.gitattributes +83 -0
  51. package/.gitignore +91 -0
  52. package/CLAUDE.md +242 -0
  53. package/CODE_OF_CONDUCT.md +46 -0
  54. package/CONTRIBUTING.md +51 -0
  55. package/Dockerfile +46 -0
  56. package/GOVERNANCE.md +44 -0
  57. package/LICENSE +661 -0
  58. package/README.md +88 -0
  59. package/bin/bongos.js +222 -0
  60. package/clients/bongos-client/README.md +48 -0
  61. package/clients/bongos-client/bongos-client.global.js +617 -0
  62. package/clients/bongos-client/examples/hello-world.mjs +62 -0
  63. package/clients/bongos-client/index.cjs +619 -0
  64. package/clients/bongos-client/index.d.ts +793 -0
  65. package/clients/bongos-client/index.mjs +614 -0
  66. package/clients/bongos-client/package.json +32 -0
  67. package/config/branding.neutral.json +60 -0
  68. package/config/design-tokens.neutral.json +51 -0
  69. package/config/design-tokens.schema.json +96 -0
  70. package/config/modules.neutral.json +9 -0
  71. package/docker-compose.yml +52 -0
  72. package/docker-entrypoint.sh +30 -0
  73. package/docs/adr/0001-stack-choice-single-vps.md +45 -0
  74. package/docs/adr/0002-digitalocean-over-hetzner.md +27 -0
  75. package/docs/adr/0003-cloudflare-origin-cert-over-letsencrypt.md +35 -0
  76. package/docs/adr/0004-amazonprimea-name-and-trademark-acceptance.md +45 -0
  77. package/docs/adr/0005-invisible-other-players-in-v1.md +37 -0
  78. package/docs/adr/0006-singleton-worldroom-plus-queueroom.md +30 -0
  79. package/docs/adr/0007-persistent-identity-via-localstorage-uuid.md +31 -0
  80. package/docs/adr/0008-family-based-tile-generation.md +86 -0
  81. package/docs/adr/0008-google-chat-oauth-user-auth.md +37 -0
  82. package/docs/adr/0009-autotile-architecture.md +181 -0
  83. package/docs/adr/0010-pms-architecture.md +70 -0
  84. package/docs/adr/0011-terrain-id-rendering-model.md +174 -0
  85. package/docs/adr/0012-ground-object-cell-split.md +208 -0
  86. package/docs/adr/0013-paths-as-object-overlays-with-autotile-dispatch.md +158 -0
  87. package/docs/adr/0014-families-canonical-over-vocabulary.md +103 -0
  88. package/docs/adr/0015-task-dependencies-and-auto-promotion.md +125 -0
  89. package/docs/adr/0016-trust-boundary-server-enforced-permissions.md +132 -0
  90. package/docs/adr/0017-code-simplification-and-repo-cleanliness.md +74 -0
  91. package/docs/adr/0018-three-rank-model-goes-live.md +97 -0
  92. package/docs/adr/0019-red-team-bounty-payout-table.md +52 -0
  93. package/docs/adr/0020-security-model-public-stub.md +70 -0
  94. package/docs/adr/0021-per-builder-skill-model-preferences.md +99 -0
  95. package/docs/adr/0022-secrets-policy.md +124 -0
  96. package/docs/adr/0023-kind-multipliers-and-idea-bonus.md +118 -0
  97. package/docs/adr/0024-cloneable-repo-local-first-memory.md +277 -0
  98. package/docs/adr/0024-multi-agent-system-architecture.md +125 -0
  99. package/docs/adr/0025-offsite-backup-vendor-digitalocean-spaces.md +59 -0
  100. package/docs/adr/0025-structured-criterion-task-link.md +44 -0
  101. package/docs/adr/0026-bfg-memory-hygiene-and-cross-builder-learning.md +117 -0
  102. package/docs/adr/0027-bfg-session-inefficiency-evaluator.md +170 -0
  103. package/docs/adr/0028-honest-llm-spend-accounting.md +109 -0
  104. package/docs/adr/0029-status-page-outage-resilience.md +59 -0
  105. package/docs/adr/0030-builders-hall-live-updates.md +59 -0
  106. package/docs/adr/0031-cloud-dev-environments-for-builders.md +222 -0
  107. package/docs/adr/0032-discord-mirror-of-gds.md +50 -0
  108. package/docs/adr/0033-discord-bot-service-principal.md +82 -0
  109. package/docs/adr/0034-thetes-graduated-newcomer-rank.md +53 -0
  110. package/docs/adr/0035-builder-onboarding-three-paths.md +128 -0
  111. package/docs/adr/0036-builders-subdomain-and-ui-reorg.md +40 -0
  112. package/docs/adr/0037-discord-channel-management.md +51 -0
  113. package/docs/adr/0038-chromebook-ttyd-cloudflare-tunnel.md +111 -0
  114. package/docs/adr/0039-setup-first-onboarding-ux.md +49 -0
  115. package/docs/adr/0040-remote-control-default-browser-onramp.md +47 -0
  116. package/docs/adr/0041-temporary-grader-bypass-killswitch.md +40 -0
  117. package/docs/adr/0042-builder-self-deploy-ci-auto-merge.md +82 -0
  118. package/docs/adr/0043-git-ssh-trust-boundary-and-rank-floor-on-permission-paths.md +74 -0
  119. package/docs/adr/0044-mediterranean-palette-replacement.md +73 -0
  120. package/docs/adr/0044-per-box-live-game-preview.md +57 -0
  121. package/docs/adr/0045-devbox-desktop-app.md +133 -0
  122. package/docs/adr/0046-sandbox-first-review-gate.md +72 -0
  123. package/docs/adr/0047-discord-bugs-intake-anti-abuse.md +36 -0
  124. package/docs/adr/0048-works-in-progress-ia-split.md +32 -0
  125. package/docs/adr/0049-split-parallel-safety-contract.md +46 -0
  126. package/docs/adr/0050-device-flow-admission-invite-gated-by-default.md +43 -0
  127. package/docs/adr/0051-full-session-transcript-corpus.md +57 -0
  128. package/docs/adr/0052-sandbox-for-everyone-game-only-preview.md +70 -0
  129. package/docs/adr/0053-scoped-dev-box-session.md +55 -0
  130. package/docs/adr/0054-session-token-reward-cost-plus.md +63 -0
  131. package/docs/adr/0055-server-mediated-branch-publish.md +47 -0
  132. package/docs/adr/0056-prod-deploy-script-mirror-and-healthcheck-retry.md +62 -0
  133. package/docs/adr/0057-container-cost-ledger.md +28 -0
  134. package/docs/adr/0057-discord-archon-approval-channels.md +64 -0
  135. package/docs/adr/0058-automatic-gate-surface-gatekeeper.md +64 -0
  136. package/docs/adr/0059-single-approval-remove-devbox-approval-gate.md +37 -0
  137. package/docs/adr/0060-gds-retrieval-layer.md +97 -0
  138. package/docs/adr/0061-context-layer-decomposition.md +61 -0
  139. package/docs/adr/0062-medusa-instance-model-decoupling.md +107 -0
  140. package/docs/adr/0063-generated-repo-map-symbol-skeleton.md +44 -0
  141. package/docs/adr/0064-rename-medusa-to-cloud-bongos.md +49 -0
  142. package/docs/adr/0065-agpl-nonprofit-ai-first-governance.md +69 -0
  143. package/docs/adr/0066-generated-file-map-sections.md +51 -0
  144. package/docs/adr/0067-session-start-fast-forward-pull.md +43 -0
  145. package/docs/adr/0068-shared-art-key-for-newcomers.md +38 -0
  146. package/docs/adr/0069-hall-live-channel-sse-decouple.md +35 -0
  147. package/docs/adr/0070-deterministic-session-card-delivery.md +44 -0
  148. package/docs/adr/0071-box-confirm-before-destroyed-and-drift-reconcile.md +59 -0
  149. package/docs/adr/0072-bongos-app-mac-signed-first-windows-deferred.md +35 -0
  150. package/docs/adr/0072-dev-box-code-staleness-visibility.md +39 -0
  151. package/docs/adr/0073-builder-needs-signal-and-byok-gemini-key.md +64 -0
  152. package/docs/adr/0073-secrets-scan-exclude-uri-detector.md +37 -0
  153. package/docs/adr/0074-memory-map-stays-light.md +32 -0
  154. package/docs/adr/0075-per-system-cost-attribution.md +37 -0
  155. package/docs/adr/0076-in-session-deterministic-compaction.md +58 -0
  156. package/docs/adr/0077-content-addressed-llm-cache.md +32 -0
  157. package/docs/adr/0078-deterministic-first-cron.md +48 -0
  158. package/docs/adr/0079-value-gated-autonomous-engagement.md +39 -0
  159. package/docs/adr/0080-llm-cache-api-transport-and-trust-model.md +46 -0
  160. package/docs/adr/0081-tool-agnostic-design-layer.md +62 -0
  161. package/docs/adr/0082-productized-key-storage-provisioning.md +32 -0
  162. package/docs/adr/0082-server-side-merge-conflict-auto-resolution.md +55 -0
  163. package/docs/adr/0083-modular-architecture-strangler-build-plan.md +143 -0
  164. package/docs/adr/0084-auto-derived-per-task-rank-floor.md +86 -0
  165. package/docs/adr/0085-remove-default-per-builder-spend-cap.md +39 -0
  166. package/docs/adr/0086-goal-scoped-work-hierarchy.md +123 -0
  167. package/docs/adr/0087-bongos-app-architecture-and-handoff-contract.md +49 -0
  168. package/docs/adr/0087-compete-on-governance-not-tooling-cursor.md +65 -0
  169. package/docs/adr/0088-consistent-character-generative-animation.md +169 -0
  170. package/docs/adr/0089-modular-multi-model-adversarial-grader.md +179 -0
  171. package/docs/adr/0090-metic-task-authoring.md +73 -0
  172. package/docs/adr/0091-bounding-the-kernel-and-db-carve.md +106 -0
  173. package/docs/adr/0092-hosting-module-and-on-prem-target.md +117 -0
  174. package/docs/adr/0093-tranche-2-core-carve-sequence.md +72 -0
  175. package/docs/adr/0094-repo-atlas-self-drawing-codebase-map.md +49 -0
  176. package/docs/adr/0095-borrowed-memory-and-retrieval-concepts.md +65 -0
  177. package/docs/adr/0095-cross-agent-context-management.md +58 -0
  178. package/docs/adr/0096-require-reward-before-workable.md +209 -0
  179. package/docs/adr/0097-one-active-claim-per-session-and-worktree-binding.md +46 -0
  180. package/docs/adr/0097-retroactive-reward-backfill.md +124 -0
  181. package/docs/adr/0098-public-mirror-publish-manifest.md +92 -0
  182. package/docs/adr/0099-delayed-redacted-mirror-export.md +55 -0
  183. package/docs/adr/0100-two-repo-instance-model.md +60 -0
  184. package/docs/adr/0101-goal-hierarchy-phase-5-judge-membership-reward.md +90 -0
  185. package/docs/adr/0102-finish-bounding-the-kernel.md +36 -0
  186. package/docs/adr/0103-core-first-extraction-cloud-bongos-trunk.md +70 -0
  187. package/docs/adr/0103-gdsv4-bongos-consolidation.md +28 -0
  188. package/docs/adr/0104-trust-gds-api-channel-in-auto-mode.md +42 -0
  189. package/docs/adr/0105-instance-seed-migrations-out-of-core.md +47 -0
  190. package/docs/adr/0106-goal-owner-manager-authority.md +84 -0
  191. package/docs/adr/0107-module-upstreaming-contribution-to-core-catalog.md +83 -0
  192. package/docs/adr/0108-instance-composition-configurable-root.md +87 -0
  193. package/docs/adr/0109-self-describing-openapi-and-hosted-docs.md +44 -0
  194. package/docs/adr/0110-untrack-whole-file-generated-nav-docs.md +49 -0
  195. package/docs/adr/0111-instance-hosting-provisioning-module.md +135 -0
  196. package/docs/adr/0112-private-goals-invitations-join-requests.md +72 -0
  197. package/docs/adr/0113-sandbox-studio-descope-superseded-by-0044-0052.md +41 -0
  198. package/docs/adr/0114-instance-docs-discovery-contract.md +32 -0
  199. package/docs/adr/0115-scheduled-routines-portability.md +31 -0
  200. package/docs/adr/0116-api-error-envelope-and-code-taxonomy.md +62 -0
  201. package/docs/adr/0117-api-versioning-and-deprecation-policy.md +50 -0
  202. package/docs/adr/0118-api-contract-source-of-truth-code-first.md +47 -0
  203. package/docs/adr/0119-api-pagination-contract.md +34 -0
  204. package/docs/adr/0120-pay-on-land-and-builder-owned-rebase-gate.md +108 -0
  205. package/docs/adr/0121-greenfield-vs-brownfield-onboarding-adopt-existing-repo.md +97 -0
  206. package/docs/adr/0122-onboarding-diagram-renders-deploy-rendered-off-git.md +43 -0
  207. package/docs/adr/0123-box-idle-sweep-autosave-before-destroy.md +36 -0
  208. package/docs/adr/0124-typed-api-response-bodies.md +37 -0
  209. package/docs/adr/0125-control-plane-scaffolds-standalone-instance-repo.md +36 -0
  210. package/docs/adr/0126-dedicated-cloudbongos-control-plane-droplet.md +30 -0
  211. package/docs/adr/0127-cross-box-fleet-observability.md +64 -0
  212. package/docs/adr/0128-provisioning-runner-privilege-and-db-auth-model.md +46 -0
  213. package/docs/adr/0129-cloudbongos-control-plane-pull-deploy.md +34 -0
  214. package/docs/adr/0130-provision-remote-exec-over-ssh.md +61 -0
  215. package/docs/adr/0131-rank-scoped-skill-visibility.md +47 -0
  216. package/docs/adr/0132-cohost-fleet-control-plane-migration.md +54 -0
  217. package/docs/adr/0133-github-app-manifest-onboarding-signin.md +42 -0
  218. package/docs/adr/0134-private-first-npm-distribution.md +38 -0
  219. package/docs/adr/README.md +208 -0
  220. package/docs/api/openapi.json +13720 -0
  221. package/docs/api-reference.md +437 -0
  222. package/docs/architecture.md +244 -0
  223. package/docs/branding-contract.md +66 -0
  224. package/docs/branding-fill-prompt.md +25 -0
  225. package/docs/canonical-permissions.md +241 -0
  226. package/docs/design/container-exterior-tiles.md +49 -0
  227. package/docs/design/container-exterior.md +81 -0
  228. package/docs/design/container-interior.md +77 -0
  229. package/docs/design/modular-architecture/00-research-report.md +107 -0
  230. package/docs/design/modular-architecture/01-architecture.md +125 -0
  231. package/docs/design/modular-architecture/02-module-map.md +116 -0
  232. package/docs/design/modular-architecture/03-builder-flows.md +104 -0
  233. package/docs/design/modular-architecture/04-module-lifecycle.md +62 -0
  234. package/docs/design/modular-architecture/README.md +27 -0
  235. package/docs/design/vanilla-hall-ui-redesign-scope.md +284 -0
  236. package/docs/design/world-map-scroll.md +41 -0
  237. package/docs/design-contract.md +320 -0
  238. package/docs/file-map.md +418 -0
  239. package/docs/handoff-template.md +92 -0
  240. package/docs/modules-contract.md +293 -0
  241. package/docs/onboarding/browser-terminal-guide.md +73 -0
  242. package/docs/onboarding/diagrams/01-task-lifecycle.mmd +28 -0
  243. package/docs/onboarding/diagrams/02-rank-ladder.mmd +54 -0
  244. package/docs/onboarding/diagrams/03-drachmae-karma.mmd +37 -0
  245. package/docs/onboarding/diagrams/04-architecture.mmd +51 -0
  246. package/docs/onboarding/diagrams/05-versioning.mmd +29 -0
  247. package/docs/onboarding/diagrams/README.md +94 -0
  248. package/docs/onboarding/diagrams/assertions.json +170 -0
  249. package/docs/onboarding/diagrams/puppeteer-config.json +1 -0
  250. package/docs/onboarding/diagrams/render-config.json +9 -0
  251. package/docs/onboarding/drachmae-and-karma.md +178 -0
  252. package/docs/onboarding/primer.md +202 -0
  253. package/docs/project-context.template.md +67 -0
  254. package/docs/recipes/README.md +35 -0
  255. package/docs/recipes/audit-replay.md +100 -0
  256. package/docs/recipes/bongos-cli-release.md +66 -0
  257. package/docs/recipes/builder-box-lifecycle.md +152 -0
  258. package/docs/recipes/claude-design-loop.md +143 -0
  259. package/docs/recipes/claude-gemini-bongos-doors.md +155 -0
  260. package/docs/recipes/cloudbongos-staging-gate.md +139 -0
  261. package/docs/recipes/cloudbongos-standup.md +111 -0
  262. package/docs/recipes/devbox-app-release.md +93 -0
  263. package/docs/recipes/devbox-app-windows-test.md +128 -0
  264. package/docs/recipes/failed-ship-recovery-proof.md +102 -0
  265. package/docs/recipes/figma-design-loop.md +129 -0
  266. package/docs/recipes/gds-db-backup.md +255 -0
  267. package/docs/recipes/instance-deploy.md +37 -0
  268. package/docs/recipes/managed-settings-remote-control.md +416 -0
  269. package/docs/recipes/memory-backup.md +71 -0
  270. package/docs/recipes/memory-sync-conflicts.md +98 -0
  271. package/docs/recipes/multi-builder-merge.md +78 -0
  272. package/docs/recipes/ops-gotchas.md +212 -0
  273. package/docs/recipes/overnight-builder.md +53 -0
  274. package/docs/recipes/packaging-the-core.md +49 -0
  275. package/docs/recipes/parallel-load-results-2026-05-30.md +63 -0
  276. package/docs/recipes/parallel-load-test.md +32 -0
  277. package/docs/recipes/pixel-art-pipeline.md +411 -0
  278. package/docs/recipes/private-npm-distribution.md +79 -0
  279. package/docs/recipes/search-index-ingestion.md +67 -0
  280. package/docs/recipes/self-host.md +60 -0
  281. package/docs/recipes/ship-and-regrade.md +72 -0
  282. package/docs/recipes/staging-data.md +50 -0
  283. package/docs/recipes/staging-environment.md +215 -0
  284. package/docs/recipes/upgrading-the-core.md +58 -0
  285. package/docs/research/cursor-competitive-analysis.md +255 -0
  286. package/docs/research/llm-model-agnostic-and-cheaper-grader.md +227 -0
  287. package/migrations/003_pms.sql +284 -0
  288. package/migrations/004_pms_cost_idempotency.sql +13 -0
  289. package/migrations/005_pms_smoke_filter.sql +44 -0
  290. package/migrations/006_pms_v2.sql +378 -0
  291. package/migrations/007_pms_v2_hierarchy_trigger.sql +59 -0
  292. package/migrations/008_pms_v2_migration_allocator.sql +27 -0
  293. package/migrations/009_pms_v2_blockers_table.sql +68 -0
  294. package/migrations/010_uptime.sql +29 -0
  295. package/migrations/011_backfill_v2_v3_done_when.sql +20 -0
  296. package/migrations/012_pms_v2_task_lifecycle_states.sql +82 -0
  297. package/migrations/013_claim_locking.sql +22 -0
  298. package/migrations/014_pms_task_discipline.sql +86 -0
  299. package/migrations/015_pms_estimation_calibration.sql +140 -0
  300. package/migrations/016_pms_task_grades.sql +60 -0
  301. package/migrations/017_version_progress_exclude_abandoned.sql +49 -0
  302. package/migrations/019_rename_pms_v3_to_gds_v3.sql +65 -0
  303. package/migrations/020_task_dependencies.sql +99 -0
  304. package/migrations/021_v3_renumber_and_deps.sql +224 -0
  305. package/migrations/022_v3_reconcile_dep_gated_status.sql +41 -0
  306. package/migrations/023_pms_rank.sql +30 -0
  307. package/migrations/025_builder_exit_status.sql +15 -0
  308. package/migrations/027_builders_preferred_disciplines.sql +46 -0
  309. package/migrations/028_tasks_parallel_safe.sql +71 -0
  310. package/migrations/029_rank_three_live.sql +32 -0
  311. package/migrations/030_vulnerability_reports.sql +61 -0
  312. package/migrations/031_reward_simplification.sql +57 -0
  313. package/migrations/032_repo_health_snapshots.sql +56 -0
  314. package/migrations/033_audit_log.sql +64 -0
  315. package/migrations/034_lifecycle_breakdown_leaf_only.sql +62 -0
  316. package/migrations/035_auth_token_hygiene.sql +66 -0
  317. package/migrations/037_builder_skill_model_prefs.sql +44 -0
  318. package/migrations/038_task_override_requests.sql +51 -0
  319. package/migrations/039_newcomer_friendly_column.sql +124 -0
  320. package/migrations/040_builder_karma.sql +58 -0
  321. package/migrations/041_kind_multipliers_and_idea_bonus.sql +42 -0
  322. package/migrations/042_criterion_proposal_workflow.sql +78 -0
  323. package/migrations/043_builder_onboarding_observability.sql +66 -0
  324. package/migrations/044_tasks_requires_rank.sql +97 -0
  325. package/migrations/045_builder_onboarding_state.sql +147 -0
  326. package/migrations/046_cost_log_builder_attribution.sql +42 -0
  327. package/migrations/054_builder_memory.sql +108 -0
  328. package/migrations/055_task_criteria.sql +90 -0
  329. package/migrations/058_peer_votes.sql +41 -0
  330. package/migrations/059_onboarding_pick_disciplines.sql +59 -0
  331. package/migrations/060_access_requests.sql +46 -0
  332. package/migrations/061_backfill_override_ship_attribution.sql +29 -0
  333. package/migrations/062_session_records.sql +34 -0
  334. package/migrations/063_session_records_tool_errors_idx.sql +11 -0
  335. package/migrations/064_grade_attempts.sql +18 -0
  336. package/migrations/065_bfg_principal.sql +58 -0
  337. package/migrations/066_live_notify_triggers.sql +69 -0
  338. package/migrations/067_builder_boxes.sql +117 -0
  339. package/migrations/067_discord_bot_foundation.sql +69 -0
  340. package/migrations/068_thetes_requires_rank.sql +27 -0
  341. package/migrations/069_builder_ssh_keys.sql +66 -0
  342. package/migrations/070_box_intents.sql +101 -0
  343. package/migrations/071_box_first_provision_approval.sql +46 -0
  344. package/migrations/072_onboarding_ship_three_remove_primer.sql +80 -0
  345. package/migrations/073_box_terminal_access.sql +46 -0
  346. package/migrations/075_builder_sound_prefs.sql +28 -0
  347. package/migrations/078_box_claude_active.sql +22 -0
  348. package/migrations/079_box_first_connected_at.sql +20 -0
  349. package/migrations/081_tasks_needs_migration.sql +34 -0
  350. package/migrations/084_tasks_security_sensitive.sql +24 -0
  351. package/migrations/085_security_engagement_docs.sql +34 -0
  352. package/migrations/086_rename_disciplines.sql +125 -0
  353. package/migrations/088_builders_anthropic_link.sql +28 -0
  354. package/migrations/089_builders_monthly_budget.sql +19 -0
  355. package/migrations/090_box_scoped_sessions.sql +38 -0
  356. package/migrations/091_session_token_reward.sql +44 -0
  357. package/migrations/093_tasks_sandbox_review.sql +22 -0
  358. package/migrations/102_remove_box_first_provision_approval.sql +58 -0
  359. package/migrations/103_search_chunks.sql +90 -0
  360. package/migrations/104_builder_box_blocked.sql +34 -0
  361. package/migrations/105_box_host_keys.sql +35 -0
  362. package/migrations/111_medusa_customer0_framing.sql +35 -0
  363. package/migrations/112_drop_track_check.sql +25 -0
  364. package/migrations/113_merge_lease.sql +16 -0
  365. package/migrations/114_cloudbongos_rename_live_strings.sql +32 -0
  366. package/migrations/118_currency_label_decoupling.sql +23 -0
  367. package/migrations/119_builder_behavior_prefs.sql +31 -0
  368. package/migrations/121_box_code_version.sql +37 -0
  369. package/migrations/122_builder_gemini_key.sql +30 -0
  370. package/migrations/123_cost_log_tiers.sql +33 -0
  371. package/migrations/124_cost_baseline.sql +45 -0
  372. package/migrations/125_llm_cache.sql +54 -0
  373. package/migrations/126_autonomy_runs.sql +33 -0
  374. package/migrations/143_cost_calibration.sql +63 -0
  375. package/migrations/145_backfill_task_requires_rank.sql +84 -0
  376. package/migrations/160_goal_tier.sql +88 -0
  377. package/migrations/163_polymorphic_dependencies.sql +187 -0
  378. package/migrations/164_event_sound_prefs.sql +20 -0
  379. package/migrations/165_task_module_key.sql +15 -0
  380. package/migrations/171_claims_published_head_sha.sql +24 -0
  381. package/migrations/174_close_orphaned_claims_on_terminal_tasks.sql +30 -0
  382. package/migrations/175_task_grades_diff_hash.sql +9 -0
  383. package/migrations/176_promotion_respects_open_blockers.sql +58 -0
  384. package/migrations/176_ui_discipline.sql +40 -0
  385. package/migrations/177_require_reward_before_workable.sql +76 -0
  386. package/migrations/178_reward_gate_auto_assign_revert_autopromote.sql +61 -0
  387. package/migrations/179_search_chunk_usefulness.sql +33 -0
  388. package/migrations/180_one_active_claim_per_session.sql +54 -0
  389. package/migrations/181_cost_log_skill_name.sql +33 -0
  390. package/migrations/184_claim_release_requested.sql +25 -0
  391. package/migrations/185_module_upstreaming_goal_wiring.sql +59 -0
  392. package/migrations/187_goal_sort_order.sql +30 -0
  393. package/migrations/187_tasks_kind_check_add_verify.sql +21 -0
  394. package/migrations/README.md +88 -0
  395. package/migrations/core_188_goal_visibility_and_membership_requests.sql +71 -0
  396. package/migrations/core_189_core_upgrades_ledger.sql +37 -0
  397. package/migrations/core_189_credit_log_task_id_index.sql +19 -0
  398. package/migrations/core_190_rebuild_claimable_task_views.sql +71 -0
  399. package/migrations/instance/018_pms_v3_planning_seed.sql +131 -0
  400. package/migrations/instance/080_gds_v4_planning_seed.sql +75 -0
  401. package/migrations/instance/110_medusa_planning_seed.sql +70 -0
  402. package/migrations/instance/120_bongos_v1_planning_seed.sql +69 -0
  403. package/migrations/instance/144_bongos_v1_module_system_criterion.sql +26 -0
  404. package/migrations/instance/159_bongos_v1_goal_hierarchy_criterion.sql +29 -0
  405. package/migrations/instance/172_v2_world_planning_seed.sql +163 -0
  406. package/migrations/instance/173_bongos_v1_c7_core_modularized.sql +33 -0
  407. package/migrations/instance/182_gdsv4_bongos_consolidation.sql +132 -0
  408. package/migrations/instance/183_gdsv4_carryover_themed_goals.sql +116 -0
  409. package/migrations/instance/186_bongos_v1_governance_planning_seed.sql +69 -0
  410. package/modules/autonomy/CLAUDE.md +49 -0
  411. package/modules/autonomy/db.js +50 -0
  412. package/modules/autonomy/module.json +13 -0
  413. package/modules/autonomy/pollers/routine-timers.js +146 -0
  414. package/modules/autonomy/routes/autonomy.js +37 -0
  415. package/modules/builder-settings/CLAUDE.md +58 -0
  416. package/modules/builder-settings/builder-needs.js +115 -0
  417. package/modules/builder-settings/db.js +168 -0
  418. package/modules/builder-settings/display-name.js +84 -0
  419. package/modules/builder-settings/event-sound-prefs.js +169 -0
  420. package/modules/builder-settings/interaction-prefs.js +201 -0
  421. package/modules/builder-settings/model-alloc-prefs.js +147 -0
  422. package/modules/builder-settings/module.json +10 -0
  423. package/modules/builder-settings/render-prefs.js +103 -0
  424. package/modules/builder-settings/routes/settings.js +417 -0
  425. package/modules/builder-settings/settings.js +52 -0
  426. package/modules/builder-settings/skill-prefs.js +196 -0
  427. package/modules/builder-settings/sound-prefs.js +178 -0
  428. package/modules/builder-settings/wandering-prefs.js +282 -0
  429. package/modules/dev-box/CLAUDE.md +38 -0
  430. package/modules/dev-box/box-access.js +275 -0
  431. package/modules/dev-box/box-credential.js +94 -0
  432. package/modules/dev-box/box-onboard.js +486 -0
  433. package/modules/dev-box/boxes.js +842 -0
  434. package/modules/dev-box/db.js +39 -0
  435. package/modules/dev-box/module.json +14 -0
  436. package/modules/dev-box/routes/box.js +977 -0
  437. package/modules/discord/CLAUDE.md +50 -0
  438. package/modules/discord/auth.js +54 -0
  439. package/modules/discord/bug-attachments.js +210 -0
  440. package/modules/discord/db.js +96 -0
  441. package/modules/discord/discord-approvals.js +145 -0
  442. package/modules/discord/discord-audit.js +29 -0
  443. package/modules/discord/discord-bot.js +545 -0
  444. package/modules/discord/discord-bugs.js +257 -0
  445. package/modules/discord/discord-channels.js +412 -0
  446. package/modules/discord/discord-inbound.js +147 -0
  447. package/modules/discord/discord-message-buffer.js +54 -0
  448. package/modules/discord/discord-reaction.js +186 -0
  449. package/modules/discord/discord-role-sync.js +318 -0
  450. package/modules/discord/module.json +14 -0
  451. package/modules/discord/pollers/discord-bot.js +19 -0
  452. package/modules/discord/routes/bug-attachments.js +44 -0
  453. package/modules/discord/routes/discord.js +102 -0
  454. package/modules/discord/ship-broadcast.js +78 -0
  455. package/modules/discord/webhook.js +74 -0
  456. package/modules/economy/CLAUDE.md +48 -0
  457. package/modules/economy/achievements.js +594 -0
  458. package/modules/economy/cost-classify.js +331 -0
  459. package/modules/economy/cost-summary-shape.js +90 -0
  460. package/modules/economy/cost.js +438 -0
  461. package/modules/economy/credits.js +430 -0
  462. package/modules/economy/migrations/economy_001_fix_gds_shipper_description.sql +91 -0
  463. package/modules/economy/module.json +10 -0
  464. package/modules/economy/reward.js +61 -0
  465. package/modules/economy/routes/cost.js +97 -0
  466. package/modules/economy/routes/leaderboard.js +26 -0
  467. package/modules/economy/routes/reward.js +42 -0
  468. package/modules/economy/streak.js +285 -0
  469. package/modules/grading/CLAUDE.md +42 -0
  470. package/modules/grading/db.js +39 -0
  471. package/modules/grading/grader-rubric.json +151 -0
  472. package/modules/grading/grader-workers/efficiency.js +213 -0
  473. package/modules/grading/grader-workers/extract-json.js +80 -0
  474. package/modules/grading/grader-workers/fence.js +100 -0
  475. package/modules/grading/grader-workers/hacker.js +239 -0
  476. package/modules/grading/grader-workers/index.js +183 -0
  477. package/modules/grading/grader-workers/narc.js +207 -0
  478. package/modules/grading/grader-workers/quality.js +198 -0
  479. package/modules/grading/grader-workers/rubric.js +20 -0
  480. package/modules/grading/grader-workers/worker-prompt.js +89 -0
  481. package/modules/grading/grader-workers/worker-verdict.js +50 -0
  482. package/modules/grading/grader.js +1790 -0
  483. package/modules/grading/module.json +12 -0
  484. package/modules/grading/routes/grade.js +51 -0
  485. package/modules/hall-ui/CLAUDE.md +61 -0
  486. package/modules/hall-ui/module.json +14 -0
  487. package/modules/hall-ui/public/atlas.html +180 -0
  488. package/modules/hall-ui/public/atlas.js +336 -0
  489. package/modules/hall-ui/public/box-panel.js +423 -0
  490. package/modules/hall-ui/public/brand-apply.js +117 -0
  491. package/modules/hall-ui/public/builders.js +3028 -0
  492. package/modules/hall-ui/public/chime.wav +0 -0
  493. package/modules/hall-ui/public/copy-on-click.js +174 -0
  494. package/modules/hall-ui/public/cursors/arrow.png +0 -0
  495. package/modules/hall-ui/public/cursors/hand-pointer.png +0 -0
  496. package/modules/hall-ui/public/cursors/magnifier-out.png +0 -0
  497. package/modules/hall-ui/public/cursors/magnifier.png +0 -0
  498. package/modules/hall-ui/public/diagram-viewer.css +125 -0
  499. package/modules/hall-ui/public/diagram-viewer.js +330 -0
  500. package/modules/hall-ui/public/diagrams.html +113 -0
  501. package/modules/hall-ui/public/dom-utils.js +212 -0
  502. package/modules/hall-ui/public/drachmae.html +68 -0
  503. package/modules/hall-ui/public/drachmae.js +136 -0
  504. package/modules/hall-ui/public/gate.html +143 -0
  505. package/modules/hall-ui/public/gate.js +228 -0
  506. package/modules/hall-ui/public/goals-page.js +1297 -0
  507. package/modules/hall-ui/public/goals.html +376 -0
  508. package/modules/hall-ui/public/goals.js +119 -0
  509. package/modules/hall-ui/public/hall-widgets.js +189 -0
  510. package/modules/hall-ui/public/harbor.html +167 -0
  511. package/modules/hall-ui/public/harbor.js +335 -0
  512. package/modules/hall-ui/public/index.html +116 -0
  513. package/modules/hall-ui/public/instances-panel.js +172 -0
  514. package/modules/hall-ui/public/md-reader.js +234 -0
  515. package/modules/hall-ui/public/modules.html +119 -0
  516. package/modules/hall-ui/public/modules.js +154 -0
  517. package/modules/hall-ui/public/new-project-wizard.js +186 -0
  518. package/modules/hall-ui/public/not-ready.html +48 -0
  519. package/modules/hall-ui/public/pair.html +119 -0
  520. package/modules/hall-ui/public/pair.js +132 -0
  521. package/modules/hall-ui/public/primer.css +404 -0
  522. package/modules/hall-ui/public/primer.html +85 -0
  523. package/modules/hall-ui/public/primer.js +641 -0
  524. package/modules/hall-ui/public/profile.html +85 -0
  525. package/modules/hall-ui/public/profile.js +236 -0
  526. package/modules/hall-ui/public/ranks.html +69 -0
  527. package/modules/hall-ui/public/ranks.js +206 -0
  528. package/modules/hall-ui/public/roadmap.html +209 -0
  529. package/modules/hall-ui/public/roadmap.js +375 -0
  530. package/modules/hall-ui/public/sessions.html +92 -0
  531. package/modules/hall-ui/public/sessions.js +222 -0
  532. package/modules/hall-ui/public/settings.html +640 -0
  533. package/modules/hall-ui/public/settings.js +1219 -0
  534. package/modules/hall-ui/public/shell.js +495 -0
  535. package/modules/hall-ui/public/style.css +1748 -0
  536. package/modules/hall-ui/public/task-detail.js +253 -0
  537. package/modules/hall-ui/public/task.html +83 -0
  538. package/modules/hall-ui/public/task.js +326 -0
  539. package/modules/hall-ui/public/watch.html +333 -0
  540. package/modules/hall-ui/public/watch.js +859 -0
  541. package/modules/hall-ui/public/work.html +469 -0
  542. package/modules/hall-ui/public/work.js +1292 -0
  543. package/modules/ideas/CLAUDE.md +37 -0
  544. package/modules/ideas/blockers.js +100 -0
  545. package/modules/ideas/inbox.js +459 -0
  546. package/modules/ideas/module.json +10 -0
  547. package/modules/ideas/routes/blockers.js +120 -0
  548. package/modules/ideas/routes/inbox.js +230 -0
  549. package/modules/lifecycle/CLAUDE.md +63 -0
  550. package/modules/lifecycle/conflict-resolve.js +436 -0
  551. package/modules/lifecycle/db.js +4970 -0
  552. package/modules/lifecycle/done-when.js +355 -0
  553. package/modules/lifecycle/github-push.js +969 -0
  554. package/modules/lifecycle/goal-conflicts.js +133 -0
  555. package/modules/lifecycle/hierarchy.js +104 -0
  556. package/modules/lifecycle/lifecycle.js +58 -0
  557. package/modules/lifecycle/merge-lock.js +261 -0
  558. package/modules/lifecycle/migrations/lifecycle_001_goal_first_leads.sql +28 -0
  559. package/modules/lifecycle/migrations/lifecycle_002_backfill_orphan_task_goals.sql +36 -0
  560. package/modules/lifecycle/module.json +13 -0
  561. package/modules/lifecycle/pollers/publish-reconciler.js +20 -0
  562. package/modules/lifecycle/publish-reconciler.js +418 -0
  563. package/modules/lifecycle/routes/analytics.js +63 -0
  564. package/modules/lifecycle/routes/claims.js +506 -0
  565. package/modules/lifecycle/routes/dependencies.js +82 -0
  566. package/modules/lifecycle/routes/done-when.js +136 -0
  567. package/modules/lifecycle/routes/gate-approvals.js +197 -0
  568. package/modules/lifecycle/routes/goals.js +1419 -0
  569. package/modules/lifecycle/routes/lifecycle.js +43 -0
  570. package/modules/lifecycle/routes/tasks.js +1703 -0
  571. package/modules/lifecycle/routes/versions.js +128 -0
  572. package/modules/lifecycle/ship-card.js +505 -0
  573. package/modules/lifecycle/ship-preflight.js +225 -0
  574. package/modules/lifecycle/task-classifier.js +512 -0
  575. package/modules/lifecycle/version-close.js +106 -0
  576. package/modules/memory/CLAUDE.md +40 -0
  577. package/modules/memory/learnings.js +275 -0
  578. package/modules/memory/memory.js +572 -0
  579. package/modules/memory/module.json +12 -0
  580. package/modules/memory/routes/learnings.js +90 -0
  581. package/modules/memory/routes/memory.js +916 -0
  582. package/modules/memory/routes/search.js +188 -0
  583. package/modules/memory/search-chunker.js +252 -0
  584. package/modules/memory/search.js +320 -0
  585. package/modules/onboarding/CLAUDE.md +55 -0
  586. package/modules/onboarding/approval-broadcast.js +59 -0
  587. package/modules/onboarding/db.js +54 -0
  588. package/modules/onboarding/module.json +10 -0
  589. package/modules/onboarding/newcomer-restock.js +212 -0
  590. package/modules/onboarding/onboarding-state.js +532 -0
  591. package/modules/onboarding/onboarding.js +508 -0
  592. package/modules/onboarding/port.js +63 -0
  593. package/modules/onboarding/routes/access-requests.js +208 -0
  594. package/modules/onboarding/routes/onboarding.js +54 -0
  595. package/modules/security/CLAUDE.md +44 -0
  596. package/modules/security/module.json +10 -0
  597. package/modules/security/routes/reports.js +251 -0
  598. package/modules/security/secret-scrub.js +201 -0
  599. package/modules/security/security.js +294 -0
  600. package/modules/sessions/CLAUDE.md +39 -0
  601. package/modules/sessions/bfg.js +357 -0
  602. package/modules/sessions/db.js +326 -0
  603. package/modules/sessions/module.json +10 -0
  604. package/modules/sessions/pulse.js +149 -0
  605. package/modules/sessions/routes/sessions.js +331 -0
  606. package/modules/status-ui/CLAUDE.md +47 -0
  607. package/modules/status-ui/module.json +14 -0
  608. package/modules/status-ui/public/README.md +29 -0
  609. package/modules/status-ui/public/cursors/arrow.png +0 -0
  610. package/modules/status-ui/public/cursors/hand-pointer.png +0 -0
  611. package/modules/status-ui/public/index.html +363 -0
  612. package/modules/status-ui/public/snapshots/.gitkeep +0 -0
  613. package/modules/status-ui/public/status.js +1375 -0
  614. package/modules/status-ui/public/style.css +1342 -0
  615. package/package-lock.json +975 -0
  616. package/package.json +28 -0
  617. package/public-docs/index.html +35 -0
  618. package/public-docs/redoc.standalone.js +1838 -0
  619. package/public-docs/redoc.standalone.js.LICENSE.txt +102 -0
  620. package/public-landing/buddha.png +0 -0
  621. package/public-landing/create.html +868 -0
  622. package/public-landing/index.html +168 -0
  623. package/scripts/bongos-mcp.js +28 -0
  624. package/scripts/cron/style_guide_audit.sh +134 -0
  625. package/scripts/discord/README.md +52 -0
  626. package/scripts/discord/lib.js +80 -0
  627. package/scripts/discord/post.js +51 -0
  628. package/scripts/gds/CLAUDE.md +144 -0
  629. package/scripts/gds/abandon.js +58 -0
  630. package/scripts/gds/adopt-detect.js +123 -0
  631. package/scripts/gds/adopt-import.js +111 -0
  632. package/scripts/gds/adopt-preflight.js +121 -0
  633. package/scripts/gds/api.js +78 -0
  634. package/scripts/gds/architect-audit.js +288 -0
  635. package/scripts/gds/art-stage.js +152 -0
  636. package/scripts/gds/audit-authorship.sh +243 -0
  637. package/scripts/gds/audit-deps.js +121 -0
  638. package/scripts/gds/audit-exports.js +128 -0
  639. package/scripts/gds/audit-replay.sh +161 -0
  640. package/scripts/gds/audit-ships.js +251 -0
  641. package/scripts/gds/autonomy-gate.js +135 -0
  642. package/scripts/gds/backfill-cost.js +165 -0
  643. package/scripts/gds/backfill-sessions.js +351 -0
  644. package/scripts/gds/backfill-task-rewards.js +408 -0
  645. package/scripts/gds/backup.js +94 -0
  646. package/scripts/gds/bfg-principal-token.js +65 -0
  647. package/scripts/gds/box-auth-check.js +160 -0
  648. package/scripts/gds/box-connect-lib.js +453 -0
  649. package/scripts/gds/box.js +1258 -0
  650. package/scripts/gds/build-bongos.js +94 -0
  651. package/scripts/gds/capture.js +123 -0
  652. package/scripts/gds/cf-tunnel.js +419 -0
  653. package/scripts/gds/ci-grade.js +82 -0
  654. package/scripts/gds/claim-recall.js +112 -0
  655. package/scripts/gds/claim.js +333 -0
  656. package/scripts/gds/classify-discipline.js +153 -0
  657. package/scripts/gds/claude-materialize.js +176 -0
  658. package/scripts/gds/cleanup-orphans.js +74 -0
  659. package/scripts/gds/cli-lib.js +518 -0
  660. package/scripts/gds/code.js +101 -0
  661. package/scripts/gds/codemod-rename-src-gds.js +145 -0
  662. package/scripts/gds/conductor-dispatch.js +426 -0
  663. package/scripts/gds/context-pack.js +228 -0
  664. package/scripts/gds/coreB-carve-proof.sh +716 -0
  665. package/scripts/gds/cost.js +47 -0
  666. package/scripts/gds/db-backup-nightly.sh +160 -0
  667. package/scripts/gds/db-backup-offsite.sh +152 -0
  668. package/scripts/gds/demote.js +40 -0
  669. package/scripts/gds/design-sync.js +62 -0
  670. package/scripts/gds/diagnose-achievements.js +118 -0
  671. package/scripts/gds/diagram-facts.js +319 -0
  672. package/scripts/gds/discipline-modes.json +25 -0
  673. package/scripts/gds/discord-channels.js +66 -0
  674. package/scripts/gds/do-api.js +176 -0
  675. package/scripts/gds/docs-entropy.js +403 -0
  676. package/scripts/gds/doctor.js +389 -0
  677. package/scripts/gds/feedback-latest.js +94 -0
  678. package/scripts/gds/fetch-art-key.js +106 -0
  679. package/scripts/gds/fetch-sound-prefs.js +88 -0
  680. package/scripts/gds/figma-design-sync.js +61 -0
  681. package/scripts/gds/fitness.js +1446 -0
  682. package/scripts/gds/gate-review.js +322 -0
  683. package/scripts/gds/gating.js +325 -0
  684. package/scripts/gds/gds-db-backup.service +24 -0
  685. package/scripts/gds/gds-db-backup.timer +20 -0
  686. package/scripts/gds/gds-db-offsite.service +29 -0
  687. package/scripts/gds/gds-db-offsite.timer +18 -0
  688. package/scripts/gds/gen-api-client.js +508 -0
  689. package/scripts/gds/gen-api-docs.js +1037 -0
  690. package/scripts/gds/gen-atlas.js +366 -0
  691. package/scripts/gds/gen-diagrams.js +608 -0
  692. package/scripts/gds/gen-file-map.js +196 -0
  693. package/scripts/gds/gen-repo-map.js +519 -0
  694. package/scripts/gds/gen-session-index.js +210 -0
  695. package/scripts/gds/git-merge-regen.js +147 -0
  696. package/scripts/gds/grade-smoke.js +205 -0
  697. package/scripts/gds/hooks/pre-push.js +169 -0
  698. package/scripts/gds/http-api-client.js +88 -0
  699. package/scripts/gds/init.js +903 -0
  700. package/scripts/gds/install-git-hooks.js +114 -0
  701. package/scripts/gds/key-card.js +213 -0
  702. package/scripts/gds/key-status.js +126 -0
  703. package/scripts/gds/land-watch.js +168 -0
  704. package/scripts/gds/learning-capture.js +145 -0
  705. package/scripts/gds/lib.sh +44 -0
  706. package/scripts/gds/linkify-refs.js +473 -0
  707. package/scripts/gds/local-preview-lib.js +159 -0
  708. package/scripts/gds/local-preview.js +95 -0
  709. package/scripts/gds/login.js +225 -0
  710. package/scripts/gds/main-audit.js +279 -0
  711. package/scripts/gds/me.js +88 -0
  712. package/scripts/gds/memory-map.js +174 -0
  713. package/scripts/gds/merge-lock.js +71 -0
  714. package/scripts/gds/migration-namespace.js +200 -0
  715. package/scripts/gds/mirror-lineage-check.js +319 -0
  716. package/scripts/gds/mirror-redact.js +305 -0
  717. package/scripts/gds/module.js +482 -0
  718. package/scripts/gds/newcomer-floor.config.json +13 -0
  719. package/scripts/gds/newcomer-floor.js +415 -0
  720. package/scripts/gds/newcomer-floor.templates.json +86 -0
  721. package/scripts/gds/newcomer-floor.test.js +235 -0
  722. package/scripts/gds/next-number.js +163 -0
  723. package/scripts/gds/oauth-secret.js +197 -0
  724. package/scripts/gds/onboard.js +217 -0
  725. package/scripts/gds/onboarding-analyze.js +226 -0
  726. package/scripts/gds/onboarding-config.js +178 -0
  727. package/scripts/gds/onboarding-ship.js +92 -0
  728. package/scripts/gds/package-core.js +684 -0
  729. package/scripts/gds/paste-token.js +131 -0
  730. package/scripts/gds/portability-smoke-art.sh +85 -0
  731. package/scripts/gds/portability-smoke-memory.sh +147 -0
  732. package/scripts/gds/provision.js +1324 -0
  733. package/scripts/gds/publish-manifest.js +307 -0
  734. package/scripts/gds/pulse.js +309 -0
  735. package/scripts/gds/push-main.js +45 -0
  736. package/scripts/gds/read-session-export.js +359 -0
  737. package/scripts/gds/reauth.js +149 -0
  738. package/scripts/gds/recall.js +135 -0
  739. package/scripts/gds/release.js +71 -0
  740. package/scripts/gds/render-ideas.js +173 -0
  741. package/scripts/gds/repo-metrics.js +363 -0
  742. package/scripts/gds/resolve-skill-model.js +57 -0
  743. package/scripts/gds/run-routine.js +197 -0
  744. package/scripts/gds/run-unit-tests.js +178 -0
  745. package/scripts/gds/sandbox-stage.js +653 -0
  746. package/scripts/gds/search-ingest-db.js +209 -0
  747. package/scripts/gds/search-ingest-md.js +225 -0
  748. package/scripts/gds/security-baseline-check.sh +180 -0
  749. package/scripts/gds/seed-adopt-tasks.js +75 -0
  750. package/scripts/gds/seed-api-contract-goal-tasks.js +141 -0
  751. package/scripts/gds/seed-bongos-app-tasks.js +294 -0
  752. package/scripts/gds/seed-bongos-coreB-tranche1-tasks.js +81 -0
  753. package/scripts/gds/seed-bongos-coreB-tranche2-tasks.js +100 -0
  754. package/scripts/gds/seed-bongos-goal-hierarchy-tasks.js +307 -0
  755. package/scripts/gds/seed-bongos-module-system-tasks.js +346 -0
  756. package/scripts/gds/seed-bongos-tasks.js +214 -0
  757. package/scripts/gds/seed-gds-v4-tasks.js +624 -0
  758. package/scripts/gds/seed-governance-tasks.js +340 -0
  759. package/scripts/gds/seed-medusa-tasks.js +440 -0
  760. package/scripts/gds/seed-module-upstreaming.js +219 -0
  761. package/scripts/gds/seed-productization-tasks.js +235 -0
  762. package/scripts/gds/seed-provisioning-tasks.js +83 -0
  763. package/scripts/gds/seed-staging.sh +104 -0
  764. package/scripts/gds/seed-v2-world-tasks.js +283 -0
  765. package/scripts/gds/seed-v3-tasks.js +1981 -0
  766. package/scripts/gds/session-cost.js +393 -0
  767. package/scripts/gds/session-digest.js +179 -0
  768. package/scripts/gds/session-eval.js +576 -0
  769. package/scripts/gds/session.js +404 -0
  770. package/scripts/gds/setup.js +504 -0
  771. package/scripts/gds/shell.js +100 -0
  772. package/scripts/gds/ship.js +3618 -0
  773. package/scripts/gds/smoke-batch-claim.sh +213 -0
  774. package/scripts/gds/smoke-batch-release.sh +296 -0
  775. package/scripts/gds/smoke-box.sh +150 -0
  776. package/scripts/gds/smoke-claim-consistency.sh +212 -0
  777. package/scripts/gds/smoke-dependencies.sh +84 -0
  778. package/scripts/gds/smoke-gds.js +125 -0
  779. package/scripts/gds/smoke-write.sh +168 -0
  780. package/scripts/gds/start.js +782 -0
  781. package/scripts/gds/status.js +365 -0
  782. package/scripts/gds/triage.js +366 -0
  783. package/scripts/gds/upgrade.js +421 -0
  784. package/scripts/gds/validate-design.js +254 -0
  785. package/scripts/gds/version-close.js +549 -0
  786. package/scripts/migrate.sh +183 -0
  787. package/scripts/migrate_cost_ledger.sh +178 -0
  788. package/scripts/public-mirror-export.js +291 -0
  789. package/scripts/render-diagrams.sh +88 -0
  790. package/scripts/security/dep-audit.js +276 -0
  791. package/scripts/setup-builder.js +274 -0
  792. package/scripts/setup-builder.sh +28 -0
  793. package/scripts/snapshots/backfill-history.mjs +292 -0
  794. package/scripts/snapshots/maybe-render-on-deploy.sh +66 -0
  795. package/scripts/snapshots/render-pre-art-eras.mjs +329 -0
  796. package/scripts/snapshots/render-world.mjs +322 -0
  797. package/scripts/status-mirror-sync.js +192 -0
  798. package/scripts/status-probe.mjs +185 -0
  799. package/server.js +212 -0
  800. package/src/asset-version.js +71 -0
  801. package/src/bongos/CLAUDE.md +64 -0
  802. package/src/bongos/api-errors.js +281 -0
  803. package/src/bongos/api-path-404.js +67 -0
  804. package/src/bongos/api-prefix.js +38 -0
  805. package/src/bongos/app-pair.js +172 -0
  806. package/src/bongos/auth.js +979 -0
  807. package/src/bongos/cascade-dispatch.js +123 -0
  808. package/src/bongos/db-kernel.js +252 -0
  809. package/src/bongos/db.js +911 -0
  810. package/src/bongos/goal-scope-check.js +120 -0
  811. package/src/bongos/hierarchy-config.js +189 -0
  812. package/src/bongos/live-channel.js +145 -0
  813. package/src/bongos/llm-cache.js +260 -0
  814. package/src/bongos/llm-pricing.js +220 -0
  815. package/src/bongos/metrics.js +286 -0
  816. package/src/bongos/middleware/audit.js +274 -0
  817. package/src/bongos/middleware/error-envelope.js +93 -0
  818. package/src/bongos/middleware/rate-limit.js +195 -0
  819. package/src/bongos/module-scope-map.js +271 -0
  820. package/src/bongos/optimizer.js +166 -0
  821. package/src/bongos/path-match.js +47 -0
  822. package/src/bongos/permission-path-check.js +248 -0
  823. package/src/bongos/pool.js +55 -0
  824. package/src/bongos/repo-info.js +91 -0
  825. package/src/bongos/route-rank-check.js +420 -0
  826. package/src/bongos/routes/CLAUDE.md +43 -0
  827. package/src/bongos/routes/_helpers.js +369 -0
  828. package/src/bongos/routes/audit-log.js +59 -0
  829. package/src/bongos/routes/auth.js +755 -0
  830. package/src/bongos/routes/backup.js +104 -0
  831. package/src/bongos/routes/builders.js +526 -0
  832. package/src/bongos/routes/healthz.js +16 -0
  833. package/src/bongos/routes/instance.js +129 -0
  834. package/src/bongos/routes/live.js +125 -0
  835. package/src/bongos/routes/llm-cache.js +119 -0
  836. package/src/bongos/routes/me.js +380 -0
  837. package/src/bongos/routes/modules.js +131 -0
  838. package/src/bongos/routes/optimizer.js +54 -0
  839. package/src/bongos/routes/public.js +476 -0
  840. package/src/bongos/routes/security.js +207 -0
  841. package/src/bongos/routes.js +166 -0
  842. package/src/bongos/secret-box.js +177 -0
  843. package/src/bongos/sensitive-surfaces.js +30 -0
  844. package/src/bongos/serve-internal.js +889 -0
  845. package/src/bongos/uptime-poller.js +90 -0
  846. package/src/bongos-downloads.js +70 -0
  847. package/src/branding.js +182 -0
  848. package/src/build-info.js +77 -0
  849. package/src/devbox-downloads.js +67 -0
  850. package/src/instance-config.js +200 -0
  851. package/src/module-api.js +366 -0
  852. package/src/module-loader/loader.js +268 -0
  853. package/src/module-loader/manifest-schema.js +140 -0
  854. package/src/module-loader/provenance.js +28 -0
  855. package/src/module-loader/semver.js +100 -0
  856. package/src/module-seams.js +291 -0
  857. package/src/modules.js +254 -0
  858. package/src/platform-server.js +135 -0
  859. package/src/ui/adapters/claude-design/index.js +333 -0
  860. package/src/ui/adapters/figma/index.js +328 -0
  861. package/tests/abandon_task.mjs +138 -0
  862. package/tests/achievements_reconcile.mjs +167 -0
  863. package/tests/adopt_detect.mjs +141 -0
  864. package/tests/adopt_import.mjs +132 -0
  865. package/tests/adopt_preflight.mjs +105 -0
  866. package/tests/anti_grid.mjs +89 -0
  867. package/tests/api_client.mjs +231 -0
  868. package/tests/api_docs.mjs +283 -0
  869. package/tests/api_error_envelope_buildcheck.mjs +56 -0
  870. package/tests/api_error_envelope_middleware.mjs +99 -0
  871. package/tests/api_error_registry.mjs +108 -0
  872. package/tests/api_pagination_contract.mjs +51 -0
  873. package/tests/api_path_404.mjs +96 -0
  874. package/tests/app_pair.mjs +168 -0
  875. package/tests/architect.mjs +140 -0
  876. package/tests/art_key.mjs +121 -0
  877. package/tests/art_stage.mjs +121 -0
  878. package/tests/asset_version.mjs +94 -0
  879. package/tests/atlas.mjs +69 -0
  880. package/tests/audit_deps.mjs +74 -0
  881. package/tests/audit_middleware.mjs +385 -0
  882. package/tests/auth_admission_gate.mjs +164 -0
  883. package/tests/auth_anthropic_identity.mjs +95 -0
  884. package/tests/auth_duplicate_cookie.mjs +56 -0
  885. package/tests/auth_error_brand.mjs +77 -0
  886. package/tests/auth_flow_slice1.mjs +223 -0
  887. package/tests/auth_inactive_builder.mjs +94 -0
  888. package/tests/auth_page_gate.mjs +92 -0
  889. package/tests/auth_session_ttl.mjs +155 -0
  890. package/tests/autonomous_fit_protected_paths.mjs +115 -0
  891. package/tests/autonomy_gate.mjs +85 -0
  892. package/tests/autotile_variants.mjs +256 -0
  893. package/tests/autotile_xverify.mjs +133 -0
  894. package/tests/backfill_sessions.mjs +101 -0
  895. package/tests/backfill_task_rewards.mjs +152 -0
  896. package/tests/backup_cli.mjs +104 -0
  897. package/tests/bfg.mjs +327 -0
  898. package/tests/bfg_write.mjs +423 -0
  899. package/tests/bongos_box_connect.mjs +89 -0
  900. package/tests/bongos_dispatch.mjs +74 -0
  901. package/tests/bongos_downloads.mjs +118 -0
  902. package/tests/bongos_login.mjs +34 -0
  903. package/tests/box_access.mjs +186 -0
  904. package/tests/box_auth_check.mjs +114 -0
  905. package/tests/box_code_staleness.mjs +116 -0
  906. package/tests/box_connect_e2e.mjs +196 -0
  907. package/tests/box_cost.mjs +70 -0
  908. package/tests/box_dns_repoint.mjs +151 -0
  909. package/tests/box_host_keys.mjs +102 -0
  910. package/tests/box_onboard.mjs +317 -0
  911. package/tests/box_scope_session.mjs +115 -0
  912. package/tests/box_ship_permissions.mjs +71 -0
  913. package/tests/box_terminal_ssrf.mjs +90 -0
  914. package/tests/boxes.mjs +1255 -0
  915. package/tests/branding.mjs +88 -0
  916. package/tests/bug_attachments.mjs +189 -0
  917. package/tests/build_info.mjs +88 -0
  918. package/tests/builder_needs.mjs +99 -0
  919. package/tests/cap_newcomer_tasks.mjs +114 -0
  920. package/tests/cascade-dispatch.mjs +95 -0
  921. package/tests/cf_tunnel.mjs +459 -0
  922. package/tests/claim_recall.mjs +150 -0
  923. package/tests/claims_bind_session.mjs +47 -0
  924. package/tests/claude_materialize.mjs +148 -0
  925. package/tests/cli_box_scope.mjs +52 -0
  926. package/tests/cli_lib_formatters.mjs +87 -0
  927. package/tests/cli_token_reissue.mjs +147 -0
  928. package/tests/client_bundle_route.mjs +47 -0
  929. package/tests/cloud_bongos_pack.mjs +85 -0
  930. package/tests/conductor.mjs +496 -0
  931. package/tests/confirm_attribution.mjs +156 -0
  932. package/tests/conflict_resolve.mjs +462 -0
  933. package/tests/context_pack.mjs +240 -0
  934. package/tests/cost.mjs +94 -0
  935. package/tests/cost_audit.mjs +122 -0
  936. package/tests/cost_budget_status.mjs +78 -0
  937. package/tests/cost_reconcile.mjs +102 -0
  938. package/tests/cost_summary_shape.mjs +94 -0
  939. package/tests/credit_grant.mjs +376 -0
  940. package/tests/criterion_progress.mjs +220 -0
  941. package/tests/criterion_proposal.mjs +109 -0
  942. package/tests/criterion_ref_parse.mjs +53 -0
  943. package/tests/currency_label.mjs +119 -0
  944. package/tests/day_cycle.mjs +197 -0
  945. package/tests/dependencies_migration.mjs +77 -0
  946. package/tests/dependencies_polymorphic.mjs +212 -0
  947. package/tests/deploy_instance.mjs +78 -0
  948. package/tests/devbox_downloads.mjs +122 -0
  949. package/tests/diff_derived_signals.mjs +115 -0
  950. package/tests/discord_approvals.mjs +174 -0
  951. package/tests/discord_autojoin.mjs +158 -0
  952. package/tests/discord_bot.mjs +94 -0
  953. package/tests/discord_bugs.mjs +297 -0
  954. package/tests/discord_channels.mjs +337 -0
  955. package/tests/discord_foundation.mjs +76 -0
  956. package/tests/discord_inbound.mjs +190 -0
  957. package/tests/discord_message_buffer.mjs +87 -0
  958. package/tests/discord_oauth.mjs +55 -0
  959. package/tests/discord_reaction.mjs +170 -0
  960. package/tests/discord_role_sync.mjs +151 -0
  961. package/tests/display_name.mjs +123 -0
  962. package/tests/dns_preflight.mjs +74 -0
  963. package/tests/event_sound_prefs.mjs +194 -0
  964. package/tests/eviction_policy.mjs +279 -0
  965. package/tests/figma_adapter.mjs +199 -0
  966. package/tests/file_map.mjs +91 -0
  967. package/tests/first_admin_bootstrap.mjs +40 -0
  968. package/tests/fitness.mjs +435 -0
  969. package/tests/fitness_two_root.mjs +104 -0
  970. package/tests/fixtures/session-506-digest.json +34 -0
  971. package/tests/gate_approvals.mjs +451 -0
  972. package/tests/gate_review.mjs +152 -0
  973. package/tests/git_merge_regen.mjs +151 -0
  974. package/tests/github_push_ancestry.mjs +119 -0
  975. package/tests/github_push_land_proof.mjs +127 -0
  976. package/tests/github_push_merge_driver.mjs +175 -0
  977. package/tests/goal_abuse_matrix.mjs +187 -0
  978. package/tests/goal_achievement.mjs +146 -0
  979. package/tests/goal_conflicts.mjs +305 -0
  980. package/tests/goal_dependencies_read.mjs +73 -0
  981. package/tests/goal_member_roles.mjs +420 -0
  982. package/tests/goal_membership_requests.mjs +332 -0
  983. package/tests/goal_routes.mjs +203 -0
  984. package/tests/goal_scope_check.mjs +167 -0
  985. package/tests/goal_tier.mjs +312 -0
  986. package/tests/goal_wall_proof.mjs +112 -0
  987. package/tests/grade_attempts.mjs +73 -0
  988. package/tests/grade_attribution.mjs +117 -0
  989. package/tests/grade_diff_hash.mjs +191 -0
  990. package/tests/grade_server_authoritative.mjs +305 -0
  991. package/tests/grade_unavailable_display.mjs +66 -0
  992. package/tests/grader.mjs +1960 -0
  993. package/tests/grader_bypass.mjs +57 -0
  994. package/tests/grader_panel.mjs +252 -0
  995. package/tests/grader_prompt_fencing.mjs +192 -0
  996. package/tests/helpers.mjs +52 -0
  997. package/tests/hierarchy-config.mjs +81 -0
  998. package/tests/init.mjs +463 -0
  999. package/tests/instance_config.mjs +76 -0
  1000. package/tests/instance_manifest.mjs +110 -0
  1001. package/tests/interaction_prefs.mjs +72 -0
  1002. package/tests/key-card.mjs +110 -0
  1003. package/tests/key-status.mjs +45 -0
  1004. package/tests/land_watch.mjs +115 -0
  1005. package/tests/lifecycle-card.mjs +145 -0
  1006. package/tests/lifecycle_breakdown_view.mjs +236 -0
  1007. package/tests/linkify_refs.mjs +264 -0
  1008. package/tests/live_channel.mjs +128 -0
  1009. package/tests/live_sse.mjs +122 -0
  1010. package/tests/llm-cache-route.mjs +110 -0
  1011. package/tests/llm-cache.mjs +140 -0
  1012. package/tests/llm-pricing.mjs +152 -0
  1013. package/tests/local_preview.mjs +136 -0
  1014. package/tests/main_audit.mjs +137 -0
  1015. package/tests/memory_isolation.mjs +431 -0
  1016. package/tests/memory_map.mjs +107 -0
  1017. package/tests/memory_pull.mjs +429 -0
  1018. package/tests/merge_lease.mjs +100 -0
  1019. package/tests/merge_lock.mjs +312 -0
  1020. package/tests/metrics.mjs +147 -0
  1021. package/tests/migration_allocation.mjs +146 -0
  1022. package/tests/migration_namespace.mjs +185 -0
  1023. package/tests/migrations_fresh_replay_guard.mjs +38 -0
  1024. package/tests/mirror_lineage_fulltree.mjs +45 -0
  1025. package/tests/mirror_lineage_proof.mjs +72 -0
  1026. package/tests/mirror_redact.mjs +193 -0
  1027. package/tests/model_alloc_prefs.mjs +63 -0
  1028. package/tests/module-scope-map.mjs +88 -0
  1029. package/tests/module_api.mjs +110 -0
  1030. package/tests/module_cli.mjs +292 -0
  1031. package/tests/module_contributions.mjs +148 -0
  1032. package/tests/module_loader.mjs +286 -0
  1033. package/tests/module_manifest.mjs +194 -0
  1034. package/tests/module_owned_tests.mjs +105 -0
  1035. package/tests/module_provenance.mjs +34 -0
  1036. package/tests/module_route_rank.mjs +147 -0
  1037. package/tests/module_seams.mjs +68 -0
  1038. package/tests/modules.mjs +156 -0
  1039. package/tests/modules_route.mjs +38 -0
  1040. package/tests/newcomer_floor.mjs +17 -0
  1041. package/tests/newcomer_restock.mjs +80 -0
  1042. package/tests/next_number.mjs +154 -0
  1043. package/tests/oauth_secret.mjs +60 -0
  1044. package/tests/onboard.mjs +70 -0
  1045. package/tests/onboarding_gate.mjs +267 -0
  1046. package/tests/onboarding_observability.mjs +344 -0
  1047. package/tests/onboarding_route_signals.mjs +175 -0
  1048. package/tests/onboarding_state.mjs +346 -0
  1049. package/tests/one_active_claim_per_session.mjs +111 -0
  1050. package/tests/orphaned_claim_ship.mjs +135 -0
  1051. package/tests/override_attribution.mjs +142 -0
  1052. package/tests/override_request_ownership.mjs +235 -0
  1053. package/tests/package_core.mjs +435 -0
  1054. package/tests/parallel-load.mjs +402 -0
  1055. package/tests/path_match.mjs +62 -0
  1056. package/tests/permission_path.mjs +151 -0
  1057. package/tests/platform_boot.mjs +167 -0
  1058. package/tests/pre_compact.mjs +60 -0
  1059. package/tests/preview_server.mjs +127 -0
  1060. package/tests/profile_route.mjs +197 -0
  1061. package/tests/provision.mjs +805 -0
  1062. package/tests/provisioning_github_app_routes.mjs +98 -0
  1063. package/tests/public_mirror_export.mjs +124 -0
  1064. package/tests/public_task_resolver.mjs +112 -0
  1065. package/tests/publish_branch_route.mjs +422 -0
  1066. package/tests/publish_manifest.mjs +184 -0
  1067. package/tests/publish_reconciler.mjs +728 -0
  1068. package/tests/rank_gate.mjs +463 -0
  1069. package/tests/rate_limit_public.mjs +217 -0
  1070. package/tests/read_session_export.mjs +89 -0
  1071. package/tests/recall_cli.mjs +82 -0
  1072. package/tests/recall_hints.mjs +119 -0
  1073. package/tests/recent_shipped_window.mjs +80 -0
  1074. package/tests/regrade_eligibility.mjs +202 -0
  1075. package/tests/render_prefs.mjs +122 -0
  1076. package/tests/repo_map.mjs +92 -0
  1077. package/tests/reward_gate.mjs +284 -0
  1078. package/tests/route_rank_check.mjs +243 -0
  1079. package/tests/route_validation.mjs +490 -0
  1080. package/tests/routine_timers.mjs +72 -0
  1081. package/tests/rubric_fixtures.mjs +140 -0
  1082. package/tests/run_routine.mjs +69 -0
  1083. package/tests/sandbox_stage.mjs +582 -0
  1084. package/tests/scrubber_corpus.mjs +257 -0
  1085. package/tests/search_chunker.mjs +209 -0
  1086. package/tests/search_ingest.mjs +96 -0
  1087. package/tests/search_ingest_db.mjs +88 -0
  1088. package/tests/search_isolation.mjs +204 -0
  1089. package/tests/search_route.mjs +95 -0
  1090. package/tests/secret_box.mjs +189 -0
  1091. package/tests/security_docs.mjs +186 -0
  1092. package/tests/security_route.mjs +108 -0
  1093. package/tests/served_paths_shipped.mjs +118 -0
  1094. package/tests/session-cards.mjs +142 -0
  1095. package/tests/session_506_regression.mjs +69 -0
  1096. package/tests/session_caps.mjs +238 -0
  1097. package/tests/session_cost.mjs +133 -0
  1098. package/tests/session_digest.mjs +73 -0
  1099. package/tests/session_eval.mjs +386 -0
  1100. package/tests/session_index.mjs +105 -0
  1101. package/tests/session_records.mjs +369 -0
  1102. package/tests/session_search.mjs +78 -0
  1103. package/tests/session_start_freshness.mjs +123 -0
  1104. package/tests/setup_smoke.mjs +154 -0
  1105. package/tests/ship_autolinkify.mjs +60 -0
  1106. package/tests/ship_automerge_injection.mjs +174 -0
  1107. package/tests/ship_broadcast_routing.mjs +125 -0
  1108. package/tests/ship_broadcast_server.mjs +175 -0
  1109. package/tests/ship_card.mjs +280 -0
  1110. package/tests/ship_ci_deploy.mjs +374 -0
  1111. package/tests/ship_preflight.mjs +368 -0
  1112. package/tests/ship_premerge.mjs +75 -0
  1113. package/tests/ship_resume.mjs +129 -0
  1114. package/tests/ship_upload_skip.mjs +89 -0
  1115. package/tests/ship_zero_commit.mjs +60 -0
  1116. package/tests/single_host_hall.mjs +98 -0
  1117. package/tests/skill_prefs.mjs +150 -0
  1118. package/tests/smoke_preflight.mjs +66 -0
  1119. package/tests/snapshot_picker.mjs +233 -0
  1120. package/tests/sound_prefs.mjs +198 -0
  1121. package/tests/sprite_facing.mjs +35 -0
  1122. package/tests/status-probe.mjs +89 -0
  1123. package/tests/status_backfill.mjs +94 -0
  1124. package/tests/stop_refcheck.mjs +127 -0
  1125. package/tests/streak.mjs +175 -0
  1126. package/tests/subdomain_auth.mjs +58 -0
  1127. package/tests/task_classifier_vocab.mjs +41 -0
  1128. package/tests/task_create_idempotency.mjs +96 -0
  1129. package/tests/task_goal_link.mjs +93 -0
  1130. package/tests/task_ownership_gate.mjs +125 -0
  1131. package/tests/terrain_picker.mjs +298 -0
  1132. package/tests/touches_overlap.mjs +75 -0
  1133. package/tests/triage_development.mjs +140 -0
  1134. package/tests/turn_in_place.mjs +280 -0
  1135. package/tests/upgrade.mjs +357 -0
  1136. package/tests/verify_task_guard.mjs +64 -0
  1137. package/tests/version_close.mjs +76 -0
  1138. package/tests/versions_route.mjs +93 -0
  1139. package/tests/walkability.mjs +188 -0
  1140. package/tests/wandering_prefs.mjs +176 -0
  1141. package/tests/worktree_disambiguation.mjs +105 -0
  1142. package/tests/worktree_guard.mjs +90 -0
package/public-landing/create.html ADDED
@@ -0,0 +1,868 @@
1
+ <!DOCTYPE html>
2
+ <html lang="en">
3
+ <head>
4
+ <meta charset="utf-8">
5
+ <meta name="viewport" content="width=device-width, initial-scale=1">
6
+ <title>Create a project — Cloud Bongos</title>
7
+ <meta name="description" content="Stand up your own Cloud Bongos project — its own repo, its own home, built by agents.">
8
+ <!-- Fonts: the production instance also injects these from the branding pack
9
+ (config/branding.json theme.ui.fonts.links); kept here so the page reads
10
+ correctly when viewed standalone. -->
11
+ <link rel="preconnect" href="https://fonts.googleapis.com">
12
+ <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
13
+ <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Baloo+2:wght@500;600;700&family=Quicksand:wght@400;500;600;700&display=swap">
14
+ <style>
15
+ /* ── Cloud Bongos vanilla look (ADR 0064) — same baked defaults as index.html;
16
+ for cloudbongos.com these equal config/branding.neutral.json and the server
17
+ re-injects the same vars after this stylesheet so the pack stays authoritative.
18
+ The /create page is the branded project-creation experience (goal 35, task 2081):
19
+ one page, no framework, the same trust boundary as the hall wizard — it only
20
+ ENQUEUES a provisioning request and then hands the human the steps only they
21
+ can do. ── */
22
+ :root{
23
+ --bg:#fff7ed; --bg-deep:#ffedd5;
24
+ --ink:#2a1f17; --ink-soft:#6b5d52; --ink-faint:#9c8d80;
25
+ --accent:#f97316; --accent-deep:#ea580c; --sea:#38bdf8; --terracotta:#fb7185;
26
+ --card:#fffdfa; --line:#f3e1c9; --ok:#16a34a; --err:#dc2626;
27
+ --font-display:"Baloo 2","Quicksand",system-ui,"Arial Rounded MT Bold",sans-serif;
28
+ --font-body:"Quicksand",system-ui,-apple-system,"Segoe UI",sans-serif;
29
+ --font-mono:"Fira Code",ui-monospace,SFMono-Regular,Menlo,monospace;
30
+ }
31
+ *{box-sizing:border-box;margin:0;padding:0;}
32
+ html{scroll-behavior:smooth;}
33
+ body{
34
+ font-family:var(--font-body); color:var(--ink);
35
+ background:var(--bg);
36
+ min-height:100vh; -webkit-font-smoothing:antialiased; overflow-x:hidden;
37
+ }
38
+ /* ── the sky — a fixed layer carrying the dawn gradient + clouds. The gradient
39
+ lives HERE (not background-attachment:fixed on body): fixed-attachment
40
+ backgrounds black out on scrolled composited pages in Chromium, and /create
41
+ is the first landing page tall enough to scroll. ── */
42
+ .sky{
43
+ position:fixed;inset:0;z-index:0;pointer-events:none;overflow:hidden;
44
+ /* dawn at altitude: a whisper of sky up top settling into the sunrise warmth */
45
+ background:linear-gradient(180deg,#e9f5fd 0%,#fde8c8 34%,#fff4e6 62%,#fffdfa 100%);
46
+ }
47
+ .cloud{position:absolute;border-radius:50%;background:rgba(255,255,255,0.55);filter:blur(38px);}
48
+ .cloud.a{width:380px;height:380px;top:-120px;left:-80px;animation:drift 26s ease-in-out infinite alternate;}
49
+ .cloud.b{width:300px;height:300px;top:4%;right:-60px;background:rgba(255,224,178,0.5);animation:drift 32s ease-in-out infinite alternate-reverse;}
50
+ .cloud.c{width:460px;height:460px;bottom:-200px;left:24%;background:rgba(255,255,255,0.4);animation:drift 40s ease-in-out infinite alternate;}
51
+ .cloud.d{width:230px;height:230px;top:38%;left:2%;background:rgba(56,189,248,0.14);animation:drift 30s ease-in-out infinite alternate-reverse;}
52
+ .cloud.e{width:200px;height:200px;top:16%;left:56%;background:rgba(56,189,248,0.10);animation:drift 36s ease-in-out infinite alternate;}
53
+ @keyframes drift{from{transform:translateX(-18px)}to{transform:translateX(26px)}}
54
+
55
+ /* ── header ── */
56
+ .top{
57
+ position:relative;z-index:2;display:flex;align-items:center;justify-content:space-between;
58
+ padding:20px clamp(18px,4vw,40px);
59
+ }
60
+ .top .mark{
61
+ font-family:var(--font-display);font-weight:700;font-size:22px;letter-spacing:-0.5px;
62
+ text-transform:lowercase;color:var(--ink);text-decoration:none;
63
+ }
64
+ .top .mark span{color:var(--accent);}
65
+ .who{display:flex;align-items:center;gap:10px;font-size:14px;font-weight:600;color:var(--ink-soft);min-height:34px;}
66
+ .who img{width:30px;height:30px;border-radius:50%;border:2px solid #fff;box-shadow:0 2px 8px rgba(42,31,23,0.12);}
67
+ .who a{color:var(--accent-deep);text-decoration:none;font-weight:700;}
68
+ .who a:hover{text-decoration:underline;}
69
+
70
+ /* ── layout ── */
71
+ .wrap{
72
+ position:relative;z-index:1;max-width:1080px;margin:0 auto;
73
+ padding:clamp(8px,2vw,28px) clamp(16px,4vw,40px) 80px;
74
+ display:flex;gap:clamp(20px,4vw,48px);align-items:flex-start;
75
+ }
76
+ /* the guide — the Bongo Buddha walks you through it */
77
+ .guide{
78
+ flex:0 0 300px;position:sticky;top:24px;display:flex;flex-direction:column;align-items:center;gap:2px;
79
+ animation:rise .7s ease-out both;
80
+ }
81
+ .guide .mascot{position:relative;width:250px;}
82
+ .guide .mascot::before{
83
+ content:"";position:absolute;inset:-8% -12%;z-index:-1;border-radius:50%;
84
+ background:radial-gradient(ellipse at center, rgba(255,255,255,0.95) 0%, rgba(255,255,255,0.65) 45%, rgba(255,255,255,0) 72%);
85
+ }
86
+ .guide .mascot img{display:block;width:100%;height:auto;}
87
+ .bubble{
88
+ position:relative;background:#fff;border-radius:18px;padding:14px 18px;max-width:280px;
89
+ font-size:15px;font-weight:600;color:var(--ink-soft);text-align:center;line-height:1.45;
90
+ box-shadow:0 10px 30px -12px rgba(42,31,23,0.18);
91
+ }
92
+ .bubble::after{
93
+ content:"";position:absolute;top:-8px;left:50%;transform:translateX(-50%) rotate(45deg);
94
+ width:16px;height:16px;background:#fff;border-radius:3px;
95
+ }
96
+ .guide .bubble{order:-1;margin-bottom:16px;}
97
+
98
+ /* the wizard card — a cloud you build on */
99
+ .card{
100
+ flex:1;min-width:0;background:var(--card);border-radius:26px;
101
+ box-shadow:0 24px 60px -24px rgba(234,88,12,0.22), 0 6px 22px -8px rgba(42,31,23,0.10);
102
+ padding:clamp(22px,3.6vw,40px);
103
+ animation:rise .7s ease-out .08s both;
104
+ }
105
+ @keyframes rise{from{opacity:0;transform:translateY(14px)}to{opacity:1;transform:none}}
106
+
107
+ /* ── the beat line (progress) ── */
108
+ .beats{display:flex;align-items:flex-start;list-style:none;margin-bottom:30px;}
109
+ .beats li{flex:1;display:flex;flex-direction:column;align-items:center;gap:7px;position:relative;}
110
+ .beats li:not(:first-child)::before{
111
+ content:"";position:absolute;top:13px;right:50%;width:100%;height:3px;border-radius:2px;
112
+ background:var(--line);z-index:0;margin-right:14px;
113
+ }
114
+ .beats li.done:not(:first-child)::before{background:var(--accent);}
115
+ .beats .dot{
116
+ position:relative;z-index:1;width:28px;height:28px;border-radius:50%;
117
+ border:3px solid var(--line);background:#fff;display:flex;align-items:center;justify-content:center;
118
+ font-family:var(--font-display);font-weight:700;font-size:13px;color:var(--ink-faint);
119
+ transition:all .25s ease;
120
+ }
121
+ .beats li.now .dot{border-color:var(--accent);color:var(--accent-deep);box-shadow:0 0 0 6px rgba(249,115,22,0.14);}
122
+ .beats li.done .dot{border-color:var(--accent);background:var(--accent);color:#fff;}
123
+ .beats .lbl{font-size:12px;font-weight:700;color:var(--ink-faint);letter-spacing:0.2px;}
124
+ .beats li.now .lbl{color:var(--accent-deep);}
125
+ .beats li.done .lbl{color:var(--ink-soft);}
126
+
127
+ /* ── panels ── */
128
+ .panel{display:none;}
129
+ .panel.on{display:block;animation:fadeStep .3s ease both;}
130
+ @keyframes fadeStep{from{opacity:0;transform:translateX(10px)}to{opacity:1;transform:none}}
131
+ h1{font-family:var(--font-display);font-weight:700;font-size:clamp(24px,3.4vw,32px);letter-spacing:-0.5px;line-height:1.15;margin-bottom:8px;}
132
+ .lede{font-size:15.5px;color:var(--ink-soft);font-weight:500;line-height:1.55;margin-bottom:24px;max-width:56ch;}
133
+ .lede a{color:var(--accent-deep);font-weight:700;text-decoration:none;}
134
+ .lede a:hover{text-decoration:underline;}
135
+
136
+ .field{display:block;margin-bottom:18px;}
137
+ .field>span{display:block;font-size:13.5px;font-weight:700;color:var(--ink-soft);margin-bottom:7px;letter-spacing:0.2px;}
138
+ .field small{font-weight:500;color:var(--ink-faint);}
139
+ input[type=text]{
140
+ width:100%;font-family:var(--font-body);font-size:17px;font-weight:600;color:var(--ink);
141
+ background:#fff;border:2px solid var(--line);border-radius:14px;padding:13px 16px;outline:none;
142
+ transition:border-color .15s ease, box-shadow .15s ease;
143
+ }
144
+ input[type=text]::placeholder{color:#c9b8a6;font-weight:500;}
145
+ input[type=text]:focus{border-color:var(--accent);box-shadow:0 0 0 4px rgba(249,115,22,0.13);}
146
+ input[type=text].bad{border-color:var(--err);}
147
+ .hint{font-size:13px;font-weight:600;color:var(--ink-faint);margin-top:7px;min-height:18px;}
148
+ .hint.ok{color:var(--ok);}
149
+ .hint.err{color:var(--err);}
150
+ .hint code{font-family:var(--font-mono);font-size:12.5px;background:var(--bg-deep);border-radius:6px;padding:1px 6px;color:var(--accent-deep);}
151
+
152
+ .row2{display:grid;grid-template-columns:1fr 1fr;gap:14px;}
153
+
154
+ /* choice cards (greenfield / adopt) */
155
+ .choices{display:grid;grid-template-columns:1fr 1fr;gap:14px;margin-bottom:18px;}
156
+ .choice{
157
+ text-align:left;cursor:pointer;background:#fff;border:2px solid var(--line);border-radius:18px;
158
+ padding:16px;font-family:var(--font-body);transition:all .15s ease;
159
+ }
160
+ .choice:hover{border-color:#eacba4;transform:translateY(-1px);}
161
+ .choice[aria-pressed=true]{border-color:var(--accent);background:#fff9f2;box-shadow:0 8px 24px -12px rgba(249,115,22,0.35);}
162
+ .choice svg{display:block;margin-bottom:9px;}
163
+ .choice b{display:block;font-size:15.5px;font-weight:700;margin-bottom:3px;}
164
+ .choice p{font-size:13px;font-weight:500;color:var(--ink-soft);line-height:1.45;}
165
+ .reassure{
166
+ display:none;background:#f0f9ff;border:1.5px solid #d3ecfb;border-radius:14px;
167
+ padding:12px 15px;font-size:13.5px;font-weight:500;color:#22617e;line-height:1.5;margin-bottom:18px;
168
+ }
169
+ .reassure.on{display:block;}
170
+
171
+ /* buttons */
172
+ .nav{display:flex;align-items:center;justify-content:space-between;gap:12px;margin-top:26px;}
173
+ .btn{
174
+ font-family:var(--font-body);font-weight:700;font-size:16.5px;cursor:pointer;
175
+ border:none;border-radius:999px;padding:14px 30px;text-decoration:none;
176
+ display:inline-flex;align-items:center;gap:9px;
177
+ background:var(--accent);color:#fff;box-shadow:0 12px 28px -10px var(--accent);
178
+ transition:transform .12s ease, box-shadow .12s ease, background .12s ease;
179
+ }
180
+ .btn:hover{transform:translateY(-1px);box-shadow:0 16px 34px -10px var(--accent);}
181
+ .btn:active{transform:translateY(0) scale(.98);}
182
+ .btn:disabled{background:#ecd9c3;color:#b09a85;box-shadow:none;cursor:not-allowed;transform:none;}
183
+ .btn.ghost{background:transparent;color:var(--ink-soft);box-shadow:none;border:2px solid var(--line);padding:12px 22px;}
184
+ .btn.ghost:hover{border-color:#d9c1a4;color:var(--ink);}
185
+ .btn.big{width:100%;justify-content:center;font-size:18px;padding:17px 30px;}
186
+ .gh{width:20px;height:20px;fill:currentColor;}
187
+
188
+ .alert{
189
+ display:none;background:#fef2f2;border:1.5px solid #fbd5d5;border-radius:14px;
190
+ padding:12px 15px;font-size:14px;font-weight:600;color:var(--err);line-height:1.5;margin-top:16px;
191
+ }
192
+ .alert.on{display:block;}
193
+
194
+ /* review list */
195
+ .review{list-style:none;border:2px solid var(--line);border-radius:18px;overflow:hidden;margin-bottom:6px;}
196
+ .review li{display:flex;justify-content:space-between;gap:16px;padding:13px 17px;font-size:14.5px;}
197
+ .review li+li{border-top:1.5px solid var(--line);}
198
+ .review .k{font-weight:600;color:var(--ink-faint);flex:0 0 auto;}
199
+ .review .v{font-weight:700;text-align:right;word-break:break-word;}
200
+ .review .v code{font-family:var(--font-mono);font-size:13px;background:var(--bg-deep);border-radius:6px;padding:1px 7px;color:var(--accent-deep);}
201
+ .finePrint{font-size:12.5px;font-weight:500;color:var(--ink-faint);line-height:1.5;margin-top:14px;}
202
+
203
+ /* ── done / human steps ── */
204
+ .doneHead{display:flex;align-items:center;gap:12px;margin-bottom:8px;}
205
+ .doneHead .tick{
206
+ flex:0 0 44px;width:44px;height:44px;border-radius:50%;background:var(--ok);color:#fff;
207
+ display:flex;align-items:center;justify-content:center;
208
+ animation:pop .45s cubic-bezier(.34,1.56,.64,1) both;
209
+ }
210
+ @keyframes pop{from{transform:scale(.4);opacity:0}to{transform:scale(1);opacity:1}}
211
+ .steps{list-style:none;counter-reset:hs;margin-top:20px;}
212
+ .steps>li{
213
+ position:relative;background:#fff;border:2px solid var(--line);border-radius:18px;
214
+ padding:16px 18px 16px 58px;margin-bottom:12px;counter-increment:hs;
215
+ }
216
+ .steps>li::before{
217
+ content:counter(hs);position:absolute;left:16px;top:16px;width:28px;height:28px;border-radius:50%;
218
+ background:var(--bg-deep);color:var(--accent-deep);font-family:var(--font-display);font-weight:700;
219
+ font-size:14px;display:flex;align-items:center;justify-content:center;
220
+ }
221
+ .steps b{font-size:15px;}
222
+ .steps p{font-size:13.5px;font-weight:500;color:var(--ink-soft);line-height:1.55;margin-top:4px;}
223
+ .kv{
224
+ display:flex;align-items:center;gap:8px;margin-top:9px;background:var(--bg);border:1.5px solid var(--line);
225
+ border-radius:11px;padding:8px 8px 8px 12px;font-size:12.5px;
226
+ }
227
+ .kv .kk{font-weight:700;color:var(--ink-faint);flex:0 0 auto;}
228
+ .kv code{font-family:var(--font-mono);font-size:12px;color:var(--accent-deep);word-break:break-all;flex:1;}
229
+ .copy{
230
+ flex:0 0 auto;cursor:pointer;border:none;border-radius:8px;background:#fff;border:1.5px solid var(--line);
231
+ font-family:var(--font-body);font-size:11.5px;font-weight:700;color:var(--ink-soft);padding:5px 10px;
232
+ transition:all .12s ease;
233
+ }
234
+ .copy:hover{border-color:var(--accent);color:var(--accent-deep);}
235
+ .copy.did{background:var(--ok);border-color:var(--ok);color:#fff;}
236
+ .samePath{font-size:12.5px;font-weight:500;color:var(--ink-faint);margin-top:16px;}
237
+ #liveProgress{margin-top:4px;}
238
+
239
+ /* ── live build progress (task 2083) ── */
240
+ .prog{
241
+ background:linear-gradient(180deg,#f2faff 0%,#fbfeff 100%);
242
+ border:2px solid #dceefb;border-radius:18px;padding:18px 20px 16px;margin-top:14px;
243
+ }
244
+ .prog .stages{display:flex;list-style:none;margin-bottom:4px;}
245
+ .prog .stages li{flex:1;display:flex;flex-direction:column;align-items:center;gap:7px;position:relative;}
246
+ .prog .stages li:not(:first-child)::before{
247
+ content:"";position:absolute;top:11px;right:50%;width:100%;height:3px;border-radius:2px;
248
+ background:#dceefb;z-index:0;margin-right:12px;
249
+ }
250
+ .prog .stages li.done:not(:first-child)::before{background:var(--sea);}
251
+ .prog .sdot{
252
+ position:relative;z-index:1;width:24px;height:24px;border-radius:50%;
253
+ border:3px solid #dceefb;background:#fff;display:flex;align-items:center;justify-content:center;
254
+ }
255
+ .prog .stages li.done .sdot{border-color:var(--sea);background:var(--sea);}
256
+ .prog .stages li.done .sdot::after{content:"";width:8px;height:5px;border-left:2.5px solid #fff;border-bottom:2.5px solid #fff;transform:rotate(-45deg) translate(1px,-1px);}
257
+ .prog .stages li.now .sdot{border-color:var(--sea);}
258
+ .prog .stages li.now .sdot::after{
259
+ content:"";width:8px;height:8px;border-radius:50%;background:var(--sea);
260
+ animation:beatPulse 1.2s ease-in-out infinite;
261
+ }
262
+ @keyframes beatPulse{0%,100%{transform:scale(.7);opacity:.6}50%{transform:scale(1.15);opacity:1}}
263
+ .prog .slbl{font-size:12px;font-weight:700;color:#8fb6cc;}
264
+ .prog .stages li.now .slbl,.prog .stages li.done .slbl{color:#22617e;}
265
+ .prog .pnote{text-align:center;font-size:13px;font-weight:600;color:#4a809d;min-height:18px;}
266
+ .prog .pnote a{color:var(--accent-deep);font-weight:700;text-decoration:none;}
267
+ .prog .pnote a:hover{text-decoration:underline;}
268
+ .prog.isLive{background:linear-gradient(180deg,#f0fdf4 0%,#fcfffc 100%);border-color:#bbe7c8;}
269
+ .prog.isLive .stages li.done:not(:first-child)::before{background:var(--ok);}
270
+ .prog.isLive .stages li.done .sdot{border-color:var(--ok);background:var(--ok);}
271
+ .prog.isLive .slbl{color:#3e9e5f;}
272
+ .prog.isLive .stages li.done .slbl{color:#166534;}
273
+ .prog.isLive .pnote{color:#166534;font-size:14px;}
274
+ .prog.isErr{background:#fef6f5;border-color:#f6d5d2;}
275
+ .prog.isErr .pnote{color:var(--err);}
276
+ .again{
277
+ display:inline-block;margin-top:14px;font-size:13px;font-weight:700;color:var(--ink-faint);
278
+ background:none;border:none;cursor:pointer;font-family:var(--font-body);text-decoration:underline;
279
+ text-underline-offset:3px;padding:0;
280
+ }
281
+ .again:hover{color:var(--accent-deep);}
282
+
283
+ .foot{position:relative;z-index:1;text-align:center;color:var(--ink-soft);font-size:13px;opacity:0.8;padding:0 24px 26px;}
284
+
285
+ /* ── responsive ── */
286
+ @media (max-width:860px){
287
+ .wrap{flex-direction:column;gap:8px;}
288
+ .guide{position:static;flex:none;width:100%;flex-direction:row;justify-content:flex-start;gap:14px;padding:0 4px 14px;}
289
+ .guide .mascot{width:92px;flex:0 0 92px;}
290
+ .guide .bubble{order:0;margin-bottom:0;text-align:left;font-size:14px;}
291
+ .bubble::after{top:50%;left:-8px;transform:translateY(-50%) rotate(45deg);}
292
+ .row2,.choices{grid-template-columns:1fr;}
293
+ }
294
+ @media (prefers-reduced-motion:reduce){
295
+ *,*::before,*::after{animation:none !important;transition:none !important;}
296
+ }
297
+ </style>
298
+ </head>
299
+ <body>
300
+ <div class="sky" aria-hidden="true">
301
+ <div class="cloud a"></div><div class="cloud b"></div><div class="cloud c"></div>
302
+ <div class="cloud d"></div><div class="cloud e"></div>
303
+ </div>
304
+
305
+ <header class="top">
306
+ <a class="mark" href="/"><span data-brand-product>cloud bongos</span></a>
307
+ <div class="who" id="who" aria-live="polite"></div>
308
+ </header>
309
+
310
+ <div class="wrap">
311
+ <aside class="guide" aria-hidden="false">
312
+ <div class="bubble"><span id="guideLine">Welcome, friend. Sign in and we'll lay down the first beat.</span></div>
313
+ <div class="mascot">
314
+ <img src="/buddha.png" alt="The laughing Cloud Bongos buddha, your guide" onerror="this.parentElement.style.display='none'">
315
+ </div>
316
+ </aside>
317
+
318
+ <main class="card">
319
+ <ol class="beats" id="beats" aria-label="Creation steps">
320
+ <li data-step="1"><span class="dot">1</span><span class="lbl">Name</span></li>
321
+ <li data-step="2"><span class="dot">2</span><span class="lbl">Home</span></li>
322
+ <li data-step="3"><span class="dot">3</span><span class="lbl">Address</span></li>
323
+ <li data-step="4"><span class="dot">4</span><span class="lbl">Create</span></li>
324
+ </ol>
325
+
326
+ <!-- step 0 · sign-in gate -->
327
+ <section class="panel" id="panel-gate" aria-labelledby="gate-h">
328
+ <h1 id="gate-h">Create a project</h1>
329
+ <p class="lede">Your own <strong data-brand-product-inline>Cloud Bongos</strong> project: its own repository, its own home on the web, and a hall of AI builders who do the building. You set the direction; agents lay down the code. Sign in with GitHub so the project belongs to <em>you</em> from the very first beat.</p>
330
+ <a class="btn big" id="signin" href="/api/bongos/auth/web/start?return=/create">
331
+ <svg class="gh" viewBox="0 0 16 16" aria-hidden="true"><path d="M8 0C3.58 0 0 3.58 0 8c0 3.54 2.29 6.53 5.47 7.59.4.07.55-.17.55-.38 0-.19-.01-.82-.01-1.49-2.01.37-2.53-.49-2.69-.94-.09-.23-.48-.94-.82-1.13-.28-.15-.68-.52-.01-.53.63-.01 1.08.58 1.23.82.72 1.21 1.87.87 2.33.66.07-.52.28-.87.51-1.07-1.78-.2-3.64-.89-3.64-3.95 0-.87.31-1.59.82-2.15-.08-.2-.36-1.02.08-2.12 0 0 .67-.21 2.2.82.64-.18 1.32-.27 2-.27s1.36.09 2 .27c1.53-1.04 2.2-.82 2.2-.82.44 1.1.16 1.92.08 2.12.51.56.82 1.27.82 2.15 0 3.07-1.87 3.75-3.65 3.95.29.25.54.73.54 1.48 0 1.07-.01 1.93-.01 2.2 0 .21.15.46.55.38A8.01 8.01 0 0 0 16 8c0-4.42-3.58-8-8-8z"/></svg>
332
+ Sign in with GitHub
333
+ </a>
334
+ <p class="finePrint">Free while we find our feet. Your project's repo and server are yours — Cloud Bongos is <a href="https://github.com/lars589/Claude-OTB" style="color:inherit">open source</a> and capture-resistant by design.</p>
335
+ <div class="alert" id="gateAlert" role="alert"></div>
336
+ </section>
337
+
338
+ <!-- step 1 · name -->
339
+ <section class="panel" id="panel-name" aria-labelledby="name-h">
340
+ <h1 id="name-h">Name your project</h1>
341
+ <p class="lede">The name leads everything that follows — the world your builders talk about, the title on the hall door. You can rename later; the beat just needs somewhere to start.</p>
342
+ <form data-next="2">
343
+ <label class="field"><span>Project name</span>
344
+ <input type="text" id="f-name" placeholder="Mercury" autocomplete="off" maxlength="80">
345
+ <div class="hint" id="h-name">&nbsp;</div>
346
+ </label>
347
+ <div class="nav">
348
+ <span></span>
349
+ <button type="submit" class="btn">Next →</button>
350
+ </div>
351
+ </form>
352
+ </section>
353
+
354
+ <!-- step 2 · home (repo + mode) -->
355
+ <section class="panel" id="panel-home" aria-labelledby="home-h">
356
+ <h1 id="home-h">Where the code lives</h1>
357
+ <p class="lede">Every project is a real GitHub repository that you own. Start from a clean slate, or bring a repo you already have.</p>
358
+ <form data-next="3">
359
+ <div class="choices" role="group" aria-label="Starting point">
360
+ <button type="button" class="choice" id="c-green" aria-pressed="true">
361
+ <svg width="30" height="30" viewBox="0 0 30 30" fill="none" aria-hidden="true"><path d="M15 26V14" stroke="#f97316" stroke-width="2.6" stroke-linecap="round"/><path d="M15 15c0-5 3.5-8.5 9-8.5 0 5.5-3.5 8.5-9 8.5Z" fill="#fdba74" stroke="#f97316" stroke-width="2"/><path d="M15 18c0-3.8-2.6-6.5-7-6.5 0 4.3 2.7 6.5 7 6.5Z" fill="#fed7aa" stroke="#f97316" stroke-width="2"/></svg>
362
+ <b>Start fresh</b>
363
+ <p>A new, empty repo. We scaffold everything: config, first version, kickoff tasks.</p>
364
+ </button>
365
+ <button type="button" class="choice" id="c-adopt" aria-pressed="false">
366
+ <svg width="30" height="30" viewBox="0 0 30 30" fill="none" aria-hidden="true"><rect x="4" y="9" width="22" height="16" rx="3" fill="#fed7aa" stroke="#f97316" stroke-width="2"/><path d="M4 13h22" stroke="#f97316" stroke-width="2"/><path d="M10 9V6.5A1.5 1.5 0 0 1 11.5 5h7A1.5 1.5 0 0 1 20 6.5V9" stroke="#f97316" stroke-width="2"/><path d="M12 19h6" stroke="#ea580c" stroke-width="2.4" stroke-linecap="round"/></svg>
367
+ <b>Adopt a repo I have</b>
368
+ <p>Layer Cloud Bongos onto an existing repository — history, code, and backlog intact.</p>
369
+ </button>
370
+ </div>
371
+ <div class="reassure" id="adoptNote">Adopting never overwrites your files: you get a conflict pre-flight first, nothing is written until you accept, and your existing backlog (issues, TODOs) is imported as real tasks.</div>
372
+ <div class="row2">
373
+ <label class="field"><span>GitHub owner <small>(user or org)</small></span>
374
+ <input type="text" id="f-owner" placeholder="acme" autocomplete="off" maxlength="60">
375
+ </label>
376
+ <label class="field"><span>Repository name</span>
377
+ <input type="text" id="f-repo" placeholder="mercury" autocomplete="off" maxlength="120">
378
+ </label>
379
+ </div>
380
+ <div class="hint" id="h-home">&nbsp;</div>
381
+ <div class="nav">
382
+ <button type="button" class="btn ghost" data-back="1">← Back</button>
383
+ <button type="submit" class="btn">Next →</button>
384
+ </div>
385
+ </form>
386
+ </section>
387
+
388
+ <!-- step 3 · address -->
389
+ <section class="panel" id="panel-address" aria-labelledby="addr-h">
390
+ <h1 id="addr-h">Its address in the sky</h1>
391
+ <p class="lede">The handle names your project on the platform. A domain of your own is where the world will find it — you can add one later, but sign-in on your instance only works once it has a domain.</p>
392
+ <form data-next="4">
393
+ <label class="field"><span>Project handle</span>
394
+ <input type="text" id="f-slug" placeholder="mercury" autocomplete="off" maxlength="40" spellcheck="false">
395
+ <div class="hint" id="h-slug">&nbsp;</div>
396
+ </label>
397
+ <label class="field"><span>Domain you own <small>(optional for now)</small></span>
398
+ <input type="text" id="f-domain" placeholder="mercury.example.com" autocomplete="off" maxlength="253" spellcheck="false">
399
+ <div class="hint" id="h-domain">&nbsp;</div>
400
+ </label>
401
+ <div class="nav">
402
+ <button type="button" class="btn ghost" data-back="2">← Back</button>
403
+ <button type="submit" class="btn">Next →</button>
404
+ </div>
405
+ </form>
406
+ </section>
407
+
408
+ <!-- step 4 · review + create -->
409
+ <section class="panel" id="panel-review" aria-labelledby="rev-h">
410
+ <h1 id="rev-h">Ready to roll</h1>
411
+ <p class="lede">One tap files the request and the platform starts standing your project up — server, database, address. Here's the beat you're about to drop:</p>
412
+ <ul class="review" id="reviewList"></ul>
413
+ <div class="alert" id="createAlert" role="alert"></div>
414
+ <div class="nav" style="flex-direction:column;align-items:stretch;">
415
+ <button type="button" class="btn big" id="doCreate">Create my project</button>
416
+ <button type="button" class="btn ghost" data-back="3" style="align-self:flex-start;margin-top:10px;">← Back</button>
417
+ </div>
418
+ <p class="finePrint">This files the request; the control plane does the real standup and nothing touches servers from this page. You'll get the few steps only you can do right after.</p>
419
+ </section>
420
+
421
+ <!-- done · the human steps -->
422
+ <section class="panel" id="panel-done" aria-labelledby="done-h">
423
+ <div class="doneHead">
424
+ <span class="tick" aria-hidden="true"><svg width="22" height="22" viewBox="0 0 22 22" fill="none"><path d="M4 11.5 9 16.5 18 6" stroke="#fff" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"/></svg></span>
425
+ <h1 id="done-h">The drums are rolling</h1>
426
+ </div>
427
+ <p class="lede" id="doneLede"></p>
428
+ <div id="liveProgress"></div>
429
+ <h2 style="font-family:var(--font-display);font-size:19px;margin-top:22px;">Your steps — the parts only you can play</h2>
430
+ <ol class="steps" id="humanSteps"></ol>
431
+ <p class="samePath">This is the same sequence the <code style="font-family:var(--font-mono)">/new-project</code> assistant and <code style="font-family:var(--font-mono)">bongos onboard</code> use — three doors, one path.</p>
432
+ </section>
433
+ </main>
434
+ </div>
435
+
436
+ <div class="foot">A non-profit, capture-resistant commons. Built by agents, on Cloud Bongos.</div>
437
+
438
+ <script>
439
+ /* Brand-pack fill (R57): the server injects window.__BRANDING__ ahead of this
440
+ script (src/bongos/serve-internal.js); baked markup above is the standalone
441
+ fallback. */
442
+ (function () {
443
+ 'use strict';
444
+
445
+ var API = '/api/bongos';
446
+ var b = (typeof window !== 'undefined' && window.__BRANDING__) || {};
447
+ var productName = (b.identity && b.identity.productName) || 'Cloud Bongos';
448
+ var buildersOrigin = (b.domains && b.domains.buildersOrigin) || 'https://builders.cloudbongos.com';
449
+ document.querySelectorAll('[data-brand-product]').forEach(function (n) { n.textContent = productName.toLowerCase(); });
450
+ document.querySelectorAll('[data-brand-product-inline]').forEach(function (n) { n.textContent = productName; });
451
+
452
+ /* ── state ── */
453
+ var DRAFT_KEY = 'cb-create-draft';
454
+ var CREATED_KEY = 'cb-created-instance';
455
+ var state = { step: 0, name: '', mode: 'greenfield', owner: '', repo: '', slug: '', slugTouched: false, domain: '' };
456
+ try { Object.assign(state, JSON.parse(sessionStorage.getItem(DRAFT_KEY) || '{}')); } catch (e) {}
457
+ var me = null;
458
+
459
+ /* A name handed over from the orbs gate (task 2087): /create?name=… seeds the
460
+ draft BEFORE anything else, so it survives the GitHub sign-in round-trip,
461
+ then the query is cleaned off the URL so a later reload doesn't re-seed
462
+ over the visitor's edits. */
463
+ try {
464
+ var handedName = new URLSearchParams(location.search).get('name');
465
+ if (handedName && handedName.trim()) {
466
+ state.name = handedName.trim().slice(0, 80);
467
+ state.slug = deriveSlug(state.name); state.slugTouched = false; // (hoisted declaration)
468
+ state.step = state.step >= 1 && state.step <= 4 ? state.step : 1;
469
+ try { sessionStorage.setItem(DRAFT_KEY, JSON.stringify(state)); } catch (e) {}
470
+ history.replaceState(null, '', location.pathname);
471
+ }
472
+ } catch (e) {}
473
+
474
+ var guideLines = {
475
+ 0: 'Welcome, friend. Sign in and we’ll lay down the first beat.',
476
+ 1: 'Every rhythm starts with a name.',
477
+ 2: 'Where will the code live?',
478
+ 3: 'Every project needs an address in the sky.',
479
+ 4: 'Ready? One tap and the drums start.',
480
+ 5: 'The beat is rolling. A few steps only you can play.'
481
+ };
482
+
483
+ function $(id) { return document.getElementById(id); }
484
+ function setGuide(step) { $('guideLine').textContent = guideLines[step] || guideLines[1]; }
485
+
486
+ /* Mirror provisioning.isValidSlug (DNS/db-safe): 2–40 of [a-z0-9-], starts+ends
487
+ alnum, no double dash. Client-side pre-check; the server re-validates. */
488
+ function validSlug(s) {
489
+ var v = String(s || '');
490
+ return v.length >= 2 && v.length <= 40 && /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/.test(v) && v.indexOf('--') === -1;
491
+ }
492
+ function deriveSlug(name) {
493
+ return String(name || '').toLowerCase()
494
+ .replace(/['’]/g, '')
495
+ .replace(/[^a-z0-9]+/g, '-')
496
+ .replace(/-+/g, '-')
497
+ .replace(/^-|-$/g, '')
498
+ .slice(0, 40);
499
+ }
500
+ function looksLikeDomain(d) {
501
+ return /^(?!-)[a-z0-9-]{1,63}(?<!-)(\.(?!-)[a-z0-9-]{1,63}(?<!-))+$/i.test(String(d || ''));
502
+ }
503
+ /* Pinned GitHub OAuth-app values for a domain (auth.js WEB_REDIRECT_ORIGIN —
504
+ callback is the apex /api/gds/auth/web/callback). Mirrors onboard.oauthAppInstructions. */
505
+ function oauthAppValues(domain) {
506
+ var origin = 'https://' + domain;
507
+ return { homepageUrl: origin, callbackUrl: origin + '/api/gds/auth/web/callback' };
508
+ }
509
+ function esc(s) {
510
+ return String(s == null ? '' : s).replace(/[&<>"']/g, function (c) {
511
+ return { '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c];
512
+ });
513
+ }
514
+ function saveDraft() {
515
+ try { sessionStorage.setItem(DRAFT_KEY, JSON.stringify(state)); } catch (e) {}
516
+ }
517
+
518
+ /* ── step navigation ── */
519
+ var panels = { 0: 'panel-gate', 1: 'panel-name', 2: 'panel-home', 3: 'panel-address', 4: 'panel-review', 5: 'panel-done' };
520
+ function show(step) {
521
+ state.step = step;
522
+ Object.keys(panels).forEach(function (k) {
523
+ $(panels[k]).classList.toggle('on', Number(k) === step);
524
+ });
525
+ document.querySelectorAll('#beats li').forEach(function (li) {
526
+ var n = Number(li.getAttribute('data-step'));
527
+ li.classList.toggle('now', n === step);
528
+ li.classList.toggle('done', n < step || step === 5);
529
+ });
530
+ setGuide(step);
531
+ saveDraft();
532
+ var h = $(panels[step]).querySelector('h1');
533
+ if (h) { h.setAttribute('tabindex', '-1'); h.focus({ preventScroll: false }); }
534
+ if (step === 4) renderReview();
535
+ }
536
+
537
+ /* ── field wiring ── */
538
+ $('f-name').value = state.name;
539
+ $('f-owner').value = state.owner;
540
+ $('f-repo').value = state.repo;
541
+ $('f-slug').value = state.slug;
542
+ $('f-domain').value = state.domain;
543
+
544
+ $('f-name').addEventListener('input', function () {
545
+ state.name = this.value;
546
+ if (!state.slugTouched) {
547
+ state.slug = deriveSlug(state.name);
548
+ $('f-slug').value = state.slug;
549
+ }
550
+ var h = $('h-name');
551
+ if (state.slug) { h.innerHTML = 'its handle on the platform: <code>' + esc(state.slug) + '</code>'; h.className = 'hint'; }
552
+ else { h.innerHTML = '&nbsp;'; }
553
+ saveDraft();
554
+ });
555
+ if (state.name && state.slug) $('h-name').innerHTML = 'its handle on the platform: <code>' + esc(state.slug) + '</code>';
556
+
557
+ function setMode(mode) {
558
+ state.mode = mode;
559
+ $('c-green').setAttribute('aria-pressed', String(mode === 'greenfield'));
560
+ $('c-adopt').setAttribute('aria-pressed', String(mode === 'adopt'));
561
+ $('adoptNote').classList.toggle('on', mode === 'adopt');
562
+ saveDraft();
563
+ }
564
+ $('c-green').addEventListener('click', function () { setMode('greenfield'); });
565
+ $('c-adopt').addEventListener('click', function () { setMode('adopt'); });
566
+ setMode(state.mode);
567
+
568
+ $('f-owner').addEventListener('input', function () { state.owner = this.value.trim(); saveDraft(); });
569
+ $('f-repo').addEventListener('input', function () { state.repo = this.value.trim(); saveDraft(); });
570
+
571
+ $('f-slug').addEventListener('input', function () {
572
+ state.slugTouched = true;
573
+ state.slug = this.value.trim().toLowerCase();
574
+ this.value = state.slug;
575
+ var h = $('h-slug');
576
+ if (!state.slug) { h.innerHTML = '&nbsp;'; h.className = 'hint'; this.classList.remove('bad'); }
577
+ else if (validSlug(state.slug)) { h.textContent = 'Nice — that works.'; h.className = 'hint ok'; this.classList.remove('bad'); }
578
+ else { h.textContent = '2–40 lowercase letters, numbers, or dashes; no leading/trailing/double dash.'; h.className = 'hint err'; this.classList.add('bad'); }
579
+ saveDraft();
580
+ });
581
+ $('f-domain').addEventListener('input', function () {
582
+ state.domain = this.value.trim().toLowerCase();
583
+ var h = $('h-domain');
584
+ if (!state.domain) { h.innerHTML = '&nbsp;'; h.className = 'hint'; this.classList.remove('bad'); }
585
+ else if (looksLikeDomain(state.domain)) { h.textContent = 'Looks like a domain.'; h.className = 'hint ok'; this.classList.remove('bad'); }
586
+ else { h.textContent = 'That doesn’t look like a domain yet (e.g. mercury.example.com).'; h.className = 'hint err'; this.classList.add('bad'); }
587
+ saveDraft();
588
+ });
589
+
590
+ /* per-panel validation on Next */
591
+ function validateStep(step) {
592
+ if (step === 1) {
593
+ if (!state.name.trim()) { $('h-name').textContent = 'Give it a name to start.'; $('h-name').className = 'hint err'; return false; }
594
+ return true;
595
+ }
596
+ if (step === 2) {
597
+ if (!state.owner || !state.repo) { $('h-home').textContent = 'Both owner and repository name are needed.'; $('h-home').className = 'hint err'; return false; }
598
+ $('h-home').innerHTML = '&nbsp;'; $('h-home').className = 'hint';
599
+ return true;
600
+ }
601
+ if (step === 3) {
602
+ if (!validSlug(state.slug)) {
603
+ $('h-slug').textContent = '2–40 lowercase letters, numbers, or dashes; no leading/trailing/double dash.';
604
+ $('h-slug').className = 'hint err'; $('f-slug').classList.add('bad');
605
+ return false;
606
+ }
607
+ if (state.domain && !looksLikeDomain(state.domain)) return false;
608
+ return true;
609
+ }
610
+ return true;
611
+ }
612
+
613
+ document.querySelectorAll('.panel form').forEach(function (form) {
614
+ form.addEventListener('submit', function (ev) {
615
+ ev.preventDefault();
616
+ var next = Number(form.getAttribute('data-next'));
617
+ if (validateStep(next - 1)) show(next);
618
+ });
619
+ });
620
+ document.querySelectorAll('[data-back]').forEach(function (btn) {
621
+ btn.addEventListener('click', function () { show(Number(btn.getAttribute('data-back'))); });
622
+ });
623
+
624
+ /* ── review ── */
625
+ function renderReview() {
626
+ var rows = [
627
+ ['Project', esc(state.name)],
628
+ ['Starting from', state.mode === 'adopt' ? 'A repo you already have' : 'A fresh, empty repo'],
629
+ ['Repository', '<code>' + esc(state.owner + '/' + state.repo) + '</code>'],
630
+ ['Handle', '<code>' + esc(state.slug) + '</code>'],
631
+ ['Domain', state.domain ? '<code>' + esc(state.domain) + '</code>' : '<em style="font-weight:600;color:var(--ink-faint)">add later</em>'],
632
+ ['Shape', 'Standalone — your own repo, pinned platform core']
633
+ ];
634
+ $('reviewList').innerHTML = rows.map(function (r) {
635
+ return '<li><span class="k">' + r[0] + '</span><span class="v">' + r[1] + '</span></li>';
636
+ }).join('');
637
+ }
638
+
639
+ /* ── create ── */
640
+ function friendlyCreateError(err) {
641
+ var code = err && err.data && err.data.error && (err.data.error.code || '');
642
+ if (code === 'slug_taken') return 'That handle is already taken by another project. Pick a different one.';
643
+ if (code === 'bad_slug') return 'The handle didn’t pass the server’s checks — 2–40 lowercase letters, numbers, or dashes.';
644
+ return 'Couldn’t file the request: ' + (err && err.message ? err.message : 'something went sideways. Try again.');
645
+ }
646
+
647
+ $('doCreate').addEventListener('click', function () {
648
+ var btn = this;
649
+ var alertBox = $('createAlert');
650
+ alertBox.classList.remove('on');
651
+ btn.disabled = true; btn.textContent = 'Raising it into the sky…';
652
+ fetch(API + '/provisioning/instances', {
653
+ method: 'POST', credentials: 'same-origin',
654
+ headers: { 'Content-Type': 'application/json' },
655
+ body: JSON.stringify({
656
+ slug: state.slug,
657
+ hosting_shape: 'standalone',
658
+ domain: state.domain || undefined,
659
+ target_ref: state.owner + '/' + state.repo
660
+ })
661
+ }).then(function (res) {
662
+ if (res.status === 401) { window.location.assign(API + '/auth/web/start?return=/create'); throw new Error('signing in'); }
663
+ return res.json().catch(function () { return {}; }).then(function (data) {
664
+ if (!res.ok) {
665
+ var e = new Error((data.error && (data.error.message || data.error.code)) || ('HTTP ' + res.status));
666
+ e.data = data; throw e;
667
+ }
668
+ return data;
669
+ });
670
+ }).then(function (data) {
671
+ try {
672
+ sessionStorage.setItem(CREATED_KEY, JSON.stringify({
673
+ id: data.instance && data.instance.id, slug: state.slug, domain: state.domain,
674
+ mode: state.mode, name: state.name, at: Date.now()
675
+ }));
676
+ sessionStorage.removeItem(DRAFT_KEY);
677
+ } catch (e) {}
678
+ renderDone(data);
679
+ show(5);
680
+ startProgress(data.instance && data.instance.id);
681
+ }).catch(function (err) {
682
+ if (String(err && err.message) === 'signing in') return;
683
+ alertBox.textContent = friendlyCreateError(err);
684
+ alertBox.classList.add('on');
685
+ btn.disabled = false; btn.textContent = 'Create my project';
686
+ });
687
+ });
688
+
689
+ /* ── done panel: the canonical human steps (same sequence as the /new-project
690
+ skill + `bongos onboard` + the hall wizard — goal 35; ADR 0121 branches
691
+ only the repo leg on greenfield vs adopt) ── */
692
+ function copyBtn(text) {
693
+ return '<button type="button" class="copy" data-copy="' + esc(text) + '">Copy</button>';
694
+ }
695
+ function renderDone(data) {
696
+ var adopt = state.mode === 'adopt';
697
+ var oa = state.domain ? oauthAppValues(state.domain) : null;
698
+ $('doneLede').innerHTML = 'Provisioning is requested for <strong>' + esc(state.name || state.slug) + '</strong>' +
699
+ (adopt ? ' — adopting your existing repo' : '') +
700
+ '. The platform stands up the server, database, and address on its own; you’ll find its live status under <a href="' + esc(buildersOrigin) + '" style="color:var(--accent-deep);font-weight:700;">Instances in your hall</a>.';
701
+
702
+ var steps = [];
703
+ var repoLabel = state.owner && state.repo ? '<strong>' + esc(state.owner + '/' + state.repo) + '</strong>' : 'your new repository';
704
+ steps.push(adopt
705
+ ? '<li><b>Layer onto your existing repo</b><p>In your repo run <code style="font-family:var(--font-mono)">bongos init --adopt</code>. It shows a conflict pre-flight and writes <em>nothing</em> until you accept — your files and history stay yours, and your existing backlog is imported. Commit and push.</p></li>'
706
+ : '<li><b>Create the empty GitHub repo</b><p>On github.com: New repository → ' + repoLabel + ' → leave it completely empty.</p></li>');
707
+ if (!state.domain) {
708
+ steps.push('<li><b>Add a domain you own</b><p>Sign-in on your new instance needs a real domain. When you have one, come back here or ask your hall — the address gets wired in minutes.</p></li>');
709
+ }
710
+ if (oa) {
711
+ steps.push('<li><b>Create the GitHub OAuth app</b><p>GitHub → <em>your account’s</em> Settings → Developer settings → OAuth Apps → New OAuth App. (Developer settings live under your account, not the repo.)</p>' +
712
+ '<div class="kv"><span class="kk">Homepage URL</span><code>' + esc(oa.homepageUrl) + '</code>' + copyBtn(oa.homepageUrl) + '</div>' +
713
+ '<div class="kv"><span class="kk">Callback URL</span><code>' + esc(oa.callbackUrl) + '</code>' + copyBtn(oa.callbackUrl) + '</div></li>');
714
+ var cmd = 'bongos oauth-secret place ' + state.slug + ' --client-id <id> --client-secret <secret> --apply';
715
+ steps.push('<li><b>Place the secret — verified</b><p>Never hand-edit the env file. On the control plane run the placement command; it checks the value is real and confirms sign-in works.</p>' +
716
+ '<div class="kv"><code>' + esc(cmd) + '</code>' + copyBtn(cmd) + '</div></li>');
717
+ steps.push('<li><b>First sign-in</b><p>Open <code style="font-family:var(--font-mono)">' + esc(oa.homepageUrl) + '</code> and sign in with GitHub once. That seats you as the owner — the founding Archon.</p></li>');
718
+ steps.push('<li><b>Verify</b><p><code style="font-family:var(--font-mono)">' + esc(oa.homepageUrl) + '/healthz</code> should report <code style="font-family:var(--font-mono)">auth_configured: true</code>. Then the hall is yours.</p></li>');
719
+ }
720
+ $('humanSteps').innerHTML = steps.join('');
721
+ $('humanSteps').addEventListener('click', function (ev) {
722
+ var t = ev.target.closest('.copy');
723
+ if (!t) return;
724
+ navigator.clipboard.writeText(t.getAttribute('data-copy')).then(function () {
725
+ t.classList.add('did'); t.textContent = 'Copied';
726
+ setTimeout(function () { t.classList.remove('did'); t.textContent = 'Copy'; }, 1600);
727
+ });
728
+ });
729
+ }
730
+
731
+ /* ── live build progress (task 2083): poll the instance until it's up.
732
+ Read-only — GET /provisioning/instances/:id (own-scoped) every 5s. ── */
733
+ var pollTimer = null;
734
+ function stopPolling() { if (pollTimer) { clearTimeout(pollTimer); pollTimer = null; } }
735
+ function progressMarkup(stageNow, stagesDone, note, cls) {
736
+ var names = ['Request filed', 'Standing it up', 'Live'];
737
+ return '<div class="prog ' + (cls || '') + '" role="status" aria-live="polite">' +
738
+ '<ul class="stages">' + names.map(function (n, i) {
739
+ var c = stagesDone > i ? 'done' : (stageNow === i ? 'now' : '');
740
+ return '<li class="' + c + '"><span class="sdot"></span><span class="slbl">' + n + '</span></li>';
741
+ }).join('') + '</ul>' +
742
+ '<p class="pnote">' + note + '</p></div>';
743
+ }
744
+ /* Renders the current instance state; returns true when the state is terminal
745
+ (no further polling wanted). */
746
+ function renderProgress(inst) {
747
+ var el = $('liveProgress');
748
+ if (!el) return true;
749
+ var s = inst && inst.status;
750
+ if (s === 'requested') {
751
+ el.innerHTML = progressMarkup(1, 1, 'Waiting for a builder runner to pick it up — usually under a minute.');
752
+ } else if (s === 'provisioning') {
753
+ el.innerHTML = progressMarkup(1, 1, 'Raising the server, database, and address. A few minutes, no rush needed on your side.');
754
+ } else if (s === 'active') {
755
+ var addr = inst.domain ? 'https://' + inst.domain : null;
756
+ el.innerHTML = progressMarkup(-1, 3,
757
+ 'Your project is up' + (addr ? ' — <a href="' + esc(addr) + '" target="_blank" rel="noopener">' + esc(inst.domain) + '</a>' : '') +
758
+ '. Finish the steps below and the hall is yours.', 'isLive');
759
+ return true;
760
+ } else if (s === 'error') {
761
+ el.innerHTML = progressMarkup(1, 1,
762
+ 'The standup hit a snag' + (inst.error_note ? ': ' + esc(inst.error_note) : '') +
763
+ '. The platform keeps retrying; details live under <a href="' + esc(buildersOrigin) + '">Instances in your hall</a>.', 'isErr');
764
+ } else if (s === 'tearing_down' || s === 'torn_down') {
765
+ el.innerHTML = progressMarkup(-1, 0, 'This instance was torn down. You can start another project below.', 'isErr');
766
+ return true;
767
+ } else {
768
+ el.innerHTML = progressMarkup(0, 1, 'Filed. Watching for the standup to start…');
769
+ }
770
+ return false;
771
+ }
772
+ function startProgress(id) {
773
+ if (!id) return;
774
+ stopPolling();
775
+ var ticks = 0;
776
+ var el = $('liveProgress');
777
+ el.innerHTML = progressMarkup(0, 1, 'Filed. Watching for the standup to start…');
778
+ function tick() {
779
+ ticks += 1;
780
+ if (ticks > 400) { stopPolling(); return; } // ~33 min: stop quietly, the hall has it
781
+ fetch(API + '/provisioning/instances/' + encodeURIComponent(id), { credentials: 'same-origin' })
782
+ .then(function (res) {
783
+ if (res.status === 401) { throw new Error('gone:Your session expired — <a href="' + API + '/auth/web/start?return=/create">sign in again</a> to keep watching.'); }
784
+ if (res.status === 404) { throw new Error('gone:Can’t see this instance any more — check <a href="' + esc(buildersOrigin) + '">Instances in your hall</a>.'); }
785
+ if (!res.ok) throw new Error('soft');
786
+ return res.json();
787
+ })
788
+ .then(function (data) {
789
+ var terminal = renderProgress(data.instance);
790
+ if (!terminal) pollTimer = setTimeout(tick, 5000);
791
+ else stopPolling();
792
+ })
793
+ .catch(function (err) {
794
+ var m = String(err && err.message || '');
795
+ if (m.indexOf('gone:') === 0) {
796
+ $('liveProgress').innerHTML = progressMarkup(1, 1, m.slice(5), 'isErr');
797
+ stopPolling();
798
+ return;
799
+ }
800
+ // transient (network / 5xx): keep the last view, try again a bit later
801
+ pollTimer = setTimeout(tick, 10000);
802
+ });
803
+ }
804
+ tick();
805
+ }
806
+
807
+ /* start another project: clear the stored instance + draft, back to step 1 */
808
+ function wireAgain() {
809
+ var again = document.createElement('button');
810
+ again.type = 'button'; again.className = 'again'; again.textContent = 'Start another project';
811
+ again.addEventListener('click', function () {
812
+ stopPolling();
813
+ try { sessionStorage.removeItem(CREATED_KEY); sessionStorage.removeItem(DRAFT_KEY); } catch (e) {}
814
+ state = { step: 1, name: '', mode: 'greenfield', owner: '', repo: '', slug: '', slugTouched: false, domain: '' };
815
+ $('f-name').value = ''; $('f-owner').value = ''; $('f-repo').value = ''; $('f-slug').value = ''; $('f-domain').value = '';
816
+ $('h-name').innerHTML = '&nbsp;';
817
+ setMode('greenfield');
818
+ show(1);
819
+ });
820
+ $('panel-done').appendChild(again);
821
+ }
822
+ wireAgain();
823
+
824
+ /* ── boot: who am I? ── */
825
+ function renderWho() {
826
+ var w = $('who');
827
+ if (me) {
828
+ w.innerHTML = (me.avatar_url ? '<img src="' + esc(me.avatar_url) + '" alt="">' : '') +
829
+ '<span>' + esc(me.github_login || 'signed in') + '</span>' +
830
+ '<a href="' + esc(buildersOrigin) + '">your hall →</a>';
831
+ } else {
832
+ w.innerHTML = '<a href="' + esc(buildersOrigin) + '">the hall →</a>';
833
+ }
834
+ }
835
+
836
+ fetch(API + '/me', { credentials: 'same-origin' })
837
+ .then(function (res) { if (!res.ok) throw new Error(String(res.status)); return res.json(); })
838
+ .then(function (data) {
839
+ me = data.builder || data.me || data;
840
+ renderWho();
841
+ // returning after a create? resume watching that instance instead of a blank wizard
842
+ var created = null;
843
+ try { created = JSON.parse(sessionStorage.getItem(CREATED_KEY) || 'null'); } catch (e) {}
844
+ if (created && created.id) {
845
+ state.name = created.name || created.slug; state.slug = created.slug || '';
846
+ state.domain = created.domain || ''; state.mode = created.mode || 'greenfield';
847
+ renderDone(null);
848
+ show(5);
849
+ startProgress(created.id);
850
+ return;
851
+ }
852
+ show(state.step >= 1 && state.step <= 4 ? state.step : 1);
853
+ })
854
+ .catch(function (err) {
855
+ renderWho();
856
+ if (String(err && err.message) !== '401') {
857
+ var g = $('gateAlert');
858
+ if (!navigator.onLine || String(err && err.message).indexOf('Failed') === 0) {
859
+ g.textContent = 'Can’t reach the platform right now — sign-in will work once you’re online with it.';
860
+ g.classList.add('on');
861
+ }
862
+ }
863
+ show(0);
864
+ });
865
+ })();
866
+ </script>
867
+ </body>
868
+ </html>