@ibgib/space-gib 0.0.21 → 0.0.22

package/dist/client/privacy.html

@@ -165,19 +165,19 @@
     </header>
 
     <main>
-      <h1 class="policy-title">Privacy Policy</h1>
-<p><strong>Status</strong>: DRAFT (Active Development)  </p>
-<p><strong>Effective Date</strong>: August 21, 2026  </p>
-<p><strong>Last Updated</strong>: August 21, 2026  </p>
+      <h1 id="privacypolicy" class="policy-title">Privacy Policy</h1>
+<p><strong>Status</strong>: DRAFT (Active Development)</p>
+<p><strong>Effective Date</strong>: August 21, 2026</p>
+<p><strong>Last Updated</strong>: August 21, 2026</p>
 <div class="alert-box alert-warning"><div class="alert-icon">⚠️</div><div class="alert-body"><strong>Draft Notice &amp; Active Development Disclaimer</strong>:<br>This Privacy Policy is currently in <strong>draft status</strong>. The <code>ibGib</code> platform, underlying cryptographic keystone engine, and decentralized data graph architecture are under <strong>active research and development</strong>. This document expresses our architectural intent, privacy commitments, and operational principles; however, as the technology is actively evolving, certain features, administrative tooling, and data workflows described herein may be experimental, partially implemented, or subject to change.</div></div>
 <hr class="divider">
-<h2 class="policy-h2">1. Introduction &amp; Overview</h2>
-<p>Welcome to <strong>ibGib</strong>. We are committed to transparency, cryptographic self-sovereignty, and user privacy. </p>
-<p>This Privacy Policy explains how <code>ibGib</code> (including <code>ibgib.space</code>, <code>ibgib.com</code>, and related open-source applications in this monorepo) collects, uses, stores, and protects your information when you interact with our network, services, and applications. </p>
+<h2 id="1introductionovervie" class="policy-h2">1. Introduction &amp; Overview</h2>
+<p>Welcome to <strong>ibGib</strong>. We are committed to transparency, cryptographic self-sovereignty, and user privacy.</p>
+<p>This Privacy Policy explains how <code>ibGib</code> (including <code>ibgib.space</code>, <code>ibgib.com</code>, and related open-source applications in this monorepo) collects, uses, stores, and protects your information when you interact with our network, services, and applications.</p>
 <div class="alert-box alert-important"><div class="alert-icon">ℹ️</div><div class="alert-body"><strong>Summary for Everyone</strong>:<br>* <strong>Public Directory</strong>: Just like a public PGP key or public DNS record, your chosen <strong>username</strong>, <strong>registered email address</strong>, and <strong>identity keystone</strong> are part of the public graph so people and your devices can find and authenticate you.<br>* <strong>No Passwords on the Wire</strong>: Your master passphrase, biometric data (Touch ID / Face ID / Windows Hello), and physical security keys (YubiKeys) <strong>never</strong> leave your local device.<br>* <strong>No Data Selling</strong>: We do <strong>not</strong> sell, rent, monetize, or share your personal data with third-party advertisers or data brokers.<br>* <strong>Standard Transport Security</strong>: All communications between your devices and our servers operate over industry-standard <strong>TLS 1.3 / HTTPS</strong> encryption.</div></div>
 <hr class="divider">
-<h2 class="policy-h2">2. Categories of Information We Collect</h2>
-<h3 class="policy-h3">A. Identity &amp; Public Directory Data</h3>
+<h2 id="2categoriesofinforma" class="policy-h2">2. Categories of Information We Collect</h2>
+<h3 id="aidentitypublicdirec" class="policy-h3">A. Identity &amp; Public Directory Data</h3>
 <p>When you create an account or link authentication methods, the following information is recorded in your identity keystone:</p>
 <ul>
 <li><strong>Chosen Username</strong>: A human-readable identifier (e.g. <code>alice</code>).</li>
@@ -185,7 +185,7 @@
 <li><strong>Public Keystone DAG Addresses &amp; Challenge Hashes</strong>: Cryptographic addresses and mathematical challenge hashes (<code class="math">H = \text{Hash}(S)</code>) that define your identity's evolution timeline.</li>
 <li><strong>Registered Device Delegate Tags</strong>: Public labels for devices authorized to sync on your behalf (e.g. <code>pwd-alice-desk-a9a0</code>, <code>passkey-mobile-b4c1</code>).</li>
 </ul>
-<h3 class="policy-h3">B. Technical, Connection &amp; Log Data</h3>
+<h3 id="btechnicalconnection" class="policy-h3">B. Technical, Connection &amp; Log Data</h3>
 <p>When accessing our hosted web nodes, standard operational connection data may be logged:</p>
 <ul>
 <li><strong>Internet Protocol (IP) Address</strong> and approximate geographic origin.</li>
@@ -193,15 +193,15 @@
 <li><strong>User-Agent Strings</strong>: Browser type, operating system, and client application version.</li>
 <li><strong>Retention</strong>: Operational and access logs are retained for a bounded window (typically <strong>30 to 90 days</strong>) strictly for system reliability, rate limiting, intrusion detection, and security forensics, after which they are automatically rotated and deleted.</li>
 </ul>
-<h3 class="policy-h3">C. Workspace &amp; Application Data</h3>
+<h3 id="cworkspaceapplicatio" class="policy-h3">C. Workspace &amp; Application Data</h3>
 <ul>
 <li><strong>User-Created Content</strong>: Notes, comments, graph nodes, and files stored within your tenant workspace.</li>
 <li><strong>Storage Status</strong>: Workspace data is stored in tenant-isolated domain spaces. Data in transit is encrypted via TLS 1.3. Data at rest on the server is currently stored unencrypted within your isolated space directory (client-side data encryption is planned as a future capability).</li>
 </ul>
 <hr class="divider">
-<h2 class="policy-h2">3. Public Directory Nature of Identity Keystones</h2>
-<div class="alert-box alert-warning"><div class="alert-icon">⚠️</div><div class="alert-body"><strong>Experimental Architecture Notice</strong>:<br>Identity Keystones are built on an innovative Zero-Knowledge Proof (ZKP) Distributed Ledger Technology (DLT) architecture. While designed to eliminate reliance on central certificate authorities, this technology is experimental. See <a href="#7-security-architecture--experimental-protocol-notice" target="_blank" rel="noopener">Section 7</a> for detailed security context.</div></div>
-<h3 class="policy-h3">Innovative ZKP DLT vs. Conventional PKI</h3>
+<h2 id="3publicdirectorynatu" class="policy-h2">3. Public Directory Nature of Identity Keystones</h2>
+<div class="alert-box alert-warning"><div class="alert-icon">⚠️</div><div class="alert-body"><strong>Experimental Architecture Notice</strong>:<br>Identity Keystones are built on an innovative Zero-Knowledge Proof (ZKP) Distributed Ledger Technology (DLT) architecture. While designed to eliminate reliance on central certificate authorities, this technology is experimental. See <a href="#7securityarchitectur">Section 7</a> for detailed security context.</div></div>
+<h3 id="innovativezkpdltvsco" class="policy-h3">Innovative ZKP DLT vs. Conventional PKI</h3>
 <p><code>ibGib</code> is built upon public-key cryptographic principles, but <strong>is not conventional Public Key Infrastructure (PKI)</strong>:</p>
 <ul>
 <li>Instead of relying on asymmetric digital signatures (RSA, ECDSA) and centralized X.509 Certificate Authorities (CAs), <code>ibGib</code> identities utilize a <strong>Zero-Knowledge Proof (ZKP) Distributed Ledger Technology (DLT)</strong> architecture with symmetric hash-reveal challenge-response pools.</li>
@@ -212,7 +212,7 @@
 <li>Hardware biometrics (fingerprints, facial recognition) and security keys operate exclusively within your device's hardware Secure Enclave / TPM via the W3C WebAuthn standard. Raw biometric data is never transmitted over the network or accessible to our servers.</li>
 </ul>
 <hr class="divider">
-<h2 class="policy-h2">4. How We Use Your Information</h2>
+<h2 id="4howweuseyourinforma" class="policy-h2">4. How We Use Your Information</h2>
 <p>We process personal and cryptographic data solely for the following legitimate purposes:</p>
 <ol>
 <li><strong>Identity Resolution &amp; Discovery</strong>: Matching incoming authentication requests and email lookups to the correct tenant domain space.</li>
@@ -222,7 +222,7 @@
 </ol>
 <p>We do <strong>not</strong> use your data for profiling, automated decision-making, or third-party targeted advertising.</p>
 <hr class="divider">
-<h2 class="policy-h2">5. Third-Party Service Providers</h2>
+<h2 id="5third-partyservicep" class="policy-h2">5. Third-Party Service Providers</h2>
 <p>We utilize minimal third-party services essential to core platform functionality:</p>
 <ul>
 <li><strong>Single Sign-On (SSO) Authentication (Optional)</strong>:</li>
@@ -233,29 +233,29 @@
 <li><strong>Cloud Server &amp; Storage Nodes</strong>: Web nodes, domain space storage, and network routing are hosted on secure cloud infrastructure located in the United States.</li>
 </ul>
 <hr class="divider">
-<h2 class="policy-h2">6. Immutable Timeline Integrity, Revocations &amp; Data Deletion</h2>
-<h3 class="policy-h3">Cryptographic Timeline Integrity</h3>
+<h2 id="6immutabletimelinein" class="policy-h2">6. Immutable Timeline Integrity, Revocations &amp; Data Deletion</h2>
+<h3 id="cryptographictimelin" class="policy-h3">Cryptographic Timeline Integrity</h3>
 <p><code>ibGib</code> is built on an <strong>append-only, directed acyclic graph (DAG) architecture</strong>. Similar to version control systems (like Git) and cryptographic ledgers (like Bitcoin), timeline records are mathematically linked using cryptographic hashes to ensure data integrity and tamper-evidence. Just as past blocks in a blockchain cannot be modified without destroying cryptographic integrity, historical keystone frames remain part of the verifiable audit chain.</p>
-<h3 class="policy-h3">Revocations &amp; Tombstones</h3>
+<h3 id="revocationstombstone" class="policy-h3">Revocations &amp; Tombstones</h3>
 <p>When you modify your identity permissions—such as unlinking a Google SSO provider or revoking a lost device passkey:</p>
 <ul>
 <li>The system publishes a cryptographically signed <strong>tombstone evolution frame</strong> (<code class="math">n \to n+1</code>).</li>
 <li>This frame officially revokes that authority and unlinks the provider from server-side reverse lookup indices.</li>
 </ul>
-<h3 class="policy-h3">Content Takedowns &amp; Full Account Erasure</h3>
+<h3 id="contenttakedownsfull" class="policy-h3">Content Takedowns &amp; Full Account Erasure</h3>
 <ol>
 <li><strong>Content &amp; Asset Takedowns</strong>: Standalone content nodes and binary file payloads can be unlinked, de-indexed, or removed from server storage upon authorized request or valid legal takedown without compromising structural timeline history.</li>
 <li><strong>Complete Tenant Erasure</strong>: If you request complete account deletion, your entire tenant domain space (including all hosted keystones, delegate frames, and stored data) and reverse email index entries will be permanently purged and removed from server storage.</li>
 <li><strong>Local Device Data Control</strong>: You maintain full control over all data stored locally on your physical devices. You may clear your local cryptographic tokens, delegates, and cached workspace data at any time via the application settings or by clearing your browser's IndexedDB / local storage.</li>
 </ol>
 <hr class="divider">
-<h2 class="policy-h2">7. Security Architecture &amp; Experimental Protocol Notice</h2>
-<h3 class="policy-h3">Innovative &amp; Experimental Nature</h3>
+<h2 id="7securityarchitectur" class="policy-h2">7. Security Architecture &amp; Experimental Protocol Notice</h2>
+<h3 id="innovativeexperiment" class="policy-h3">Innovative &amp; Experimental Nature</h3>
 <p>Identity Keystones, multi-pool challenge-response mechanisms, and decentralized sync delegates represent innovative, experimental cryptographic protocols. While we apply diligent best efforts in cryptanalysis and utilize industry-standard, proven cryptographic primitives (such as SHA-256, SHA-512, AES, and WebAuthn PRF), the composite architecture is actively evolving. Users should evaluate this platform understanding its experimental research nature.</p>
-<h3 class="policy-h3">Conventional Security Foundations</h3>
+<h3 id="conventionalsecurity" class="policy-h3">Conventional Security Foundations</h3>
 <p>All communications, API endpoints, and authentication exchanges between your client devices and our server infrastructure operate strictly over industry-standard <strong>TLS 1.3 / HTTPS</strong> encryption. Server-side data isolation, atomic file indexing, and timing side-channel protections are implemented following standard enterprise security practices.</p>
 <hr class="divider">
-<h2 class="policy-h2">8. Your Privacy Rights (Texas TDPSA &amp; US State Privacy Laws)</h2>
+<h2 id="8yourprivacyrightste" class="policy-h2">8. Your Privacy Rights (Texas TDPSA &amp; US State Privacy Laws)</h2>
 <p>If you are a resident of Texas (governed by the <strong>Texas Data Privacy and Security Act - TDPSA</strong>) or other jurisdictions with applicable privacy legislation, you have the following rights regarding your personal data:</p>
 <ul>
 <li><strong>Right to Know / Access</strong>: You have the right to confirm whether we process your personal data and to access such data.</li>
@@ -265,23 +265,23 @@
 <li><strong>Right to Opt-Out of Sale / Targeted Advertising</strong>: We do <strong>not</strong> sell your personal data or process it for targeted advertising, so no opt-out is necessary.</li>
 <li><strong>Right to Non-Discrimination</strong>: We will never discriminate against you, deny services, or alter pricing for exercising your privacy rights.</li>
 </ul>
-<h3 class="policy-h3">How to Exercise Your Rights</h3>
+<h3 id="howtoexerciseyourrig" class="policy-h3">How to Exercise Your Rights</h3>
 <p>To submit a privacy inquiry, request data export, or request permanent deletion of your tenant domain space, please contact us using the information in Section 9 below. We will verify your identity (using your registered email or cryptographic keystone proof) and respond within the statutory timeframe (typically 45 days).</p>
 <hr class="divider">
-<h2 class="policy-h2">9. Contact Information &amp; Policy Updates</h2>
-<h3 class="policy-h3">Contact Us</h3>
+<h2 id="9contactinformationp" class="policy-h2">9. Contact Information &amp; Policy Updates</h2>
+<h3 id="contactus" class="policy-h3">Contact Us</h3>
 <p>If you have questions, comments, or requests regarding this Privacy Policy or our data handling practices, please reach out to us:</p>
 <ul>
 <li><strong>Open-Source Packages</strong>: Published on <strong>npm</strong> under the <code>@ibgib</code> scope.</li>
 <li><strong>Email / Privacy Inquiries</strong>: <code>ibgib.info@gmail.com</code></li>
 </ul>
-<h3 class="policy-h3">Updates to This Policy</h3>
+<h3 id="updatestothispolicy" class="policy-h3">Updates to This Policy</h3>
 <p>We may update this Privacy Policy from time to time to reflect architectural advancements, legal requirements, or operational changes. When changes are made, the "Last Updated" date at the top of this document will be updated. We encourage you to review this policy periodically.</p>
     </main>
 
     <footer class="footer-bar">
       <span>© ibgib contributors</span>
-      <span><a href="https://ibgib.space">ibgib.space</a> · <a href="https://github.com/ibgib" target="_blank" rel="noopener">GitHub</a></span>
+      <span><a href="https://ibgib.space">ibgib.space</a></span>
     </footer>
   </div>
 </body>

package/dist/client/script.mjs

@@ -1 +1 @@
-import{p as e}from"./chunk-7YXHRAEW.mjs";import"./chunk-M2IO3EMM.mjs";console.log("space-gib early script executing...");e();
+import{l as e}from"./chunk-O6EUMDNJ.mjs";import"./chunk-XZM4L3U6.mjs";console.log("space-gib early script executing...");e();

package/dist/server/server.mjs

@@ -7171,9 +7171,11 @@ async function getDependencyGraph({ ibGib, ibGibs, ibGibAddr, ibGibAddrs, live,
       timeLogName,
       mapTjpAddrToLatestAddrsInSpace
     });
-    Object.values(graph).filter((ibGib2) => ibGib2.ib.startsWith("comment ")).forEach((ibGib2) => {
-      console.table(ibGib2);
-    });
+    if (logalot11) {
+      Object.values(graph).filter((ibGib2) => ibGib2.ib.startsWith("comment ")).forEach((ibGib2) => {
+        console.table(ibGib2);
+      });
+    }
     if (logalot11) {
       console.log(`${lc2} graph size: ${Object.keys(graph).length} (I: c6cb5e7e1e2611d35b9006fac6503d22)`);
       const ibs = Object.values(graph).filter((ibGib2) => ibGib2.ib.startsWith("comment ") || ibGib2.ib.startsWith("pic ")).map((ibGib2) => ibGib2.ib);
@@ -21553,7 +21555,7 @@ var KeystoneService_V1 = class _KeystoneService_V1 {
    * from aggregated detail maps/arrays.
    */
   pruneTombstoneNulls(obj) {
-    if (!obj || typeof obj !== "object") {
+    if (obj === null || obj === void 0 || typeof obj !== "object") {
       return obj;
     }
     if (Array.isArray(obj)) {
@@ -21562,7 +21564,7 @@ var KeystoneService_V1 = class _KeystoneService_V1 {
     for (const key of Object.keys(obj)) {
       if (obj[key] === null) {
         delete obj[key];
-      } else if (typeof obj[key] === "object") {
+      } else if (obj[key] !== null && typeof obj[key] === "object") {
         this.pruneTombstoneNulls(obj[key]);
       }
     }

package/generate-privacy-html.js

@@ -198,7 +198,7 @@ const fullHtml = `<!DOCTYPE html>
 
     <footer class="footer-bar">
       <span>© ibgib contributors</span>
-      <span><a href="https://ibgib.space">ibgib.space</a> · <a href="https://github.com/ibgib" target="_blank" rel="noopener">GitHub</a></span>
+      <span><a href="https://ibgib.space">ibgib.space</a></span>
     </footer>
   </div>
 </body>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ibgib/space-gib",
-  "version": "0.0.21",
+  "version": "0.0.22",
   "type": "module",
   "description": "ibgib storage and provider service — SaaS at ibgib.space",
   "scripts": {
@@ -12,11 +12,11 @@
     "build:test": "tsc -p tsconfig.test.json"
   },
   "dependencies": {
-    "@ibgib/core-gib": "^0.1.77",
+    "@ibgib/core-gib": "^0.1.78",
     "@ibgib/helper-gib": "^0.0.37",
     "@ibgib/ts-gib": "^0.5.34",
-    "@ibgib/web-gib": "^0.0.63",
-    "@ibgib/node-gib": "^0.0.22"
+    "@ibgib/web-gib": "^0.0.64",
+    "@ibgib/node-gib": "^0.0.23"
   },
   "engines": {
     "node": ">=20.0.0"

package/src/client/AUTO-GENERATED-version.mts

@@ -8,4 +8,4 @@
 /**
  * Version of space-gib, auto-updated by the build process.
  */
-export const AUTO_GENERATED_VERSION = '0.0.21';
+export const AUTO_GENERATED_VERSION = '0.0.22';

package/src/client/dev-tools/vcs-workspace.mts

@@ -0,0 +1,330 @@
+/**
+ * @module client/dev-tools/vcs-workspace
+ *
+ * Dev Tools panel button handlers for in-memory VCS Workspace Projection testing in space-gib.
+ * Utilizes the isomorphic VcsRepository facade and WebInMemoryWorkspaceProjectionSpace_V1.
+ */
+
+import { extractErrorMsg } from '@ibgib/helper-gib/dist/helpers/utils-helper.mjs';
+import { getGlobalMetaspace_waitIfNeeded } from '@ibgib/web-gib/dist/helpers.mjs';
+import { WebInMemoryWorkspaceProjectionSpace_V1 } from '@ibgib/web-gib/dist/witness/space/web-in-memory-workspace-projection-space/web-in-memory-workspace-projection-space-v1.mjs';
+import { InnerSpace_V1 } from '@ibgib/core-gib/dist/witness/space/inner-space/inner-space-v1.mjs';
+import { DEFAULT_INNER_SPACE_DATA_V1 } from '@ibgib/core-gib/dist/witness/space/inner-space/inner-space-types.mjs';
+import { getB2tFSBranchSpaceName } from '@ibgib/core-gib/dist/vcs/branch/branch-helper.mjs';
+import { VcsRepository } from '@ibgib/core-gib/dist/vcs/vcs-repository.mjs';
+
+import { devLog, lc } from './common.mjs';
+
+interface VcsDevState {
+    backingSpace?: InnerSpace_V1;
+    wsSpace?: WebInMemoryWorkspaceProjectionSpace_V1;
+    repo?: VcsRepository;
+}
+
+export const vcsDevState: VcsDevState = {};
+(window as any).vcsDevState = vcsDevState;
+
+/**
+ * 1. Initialize in-memory branch CAS space, VcsRepository session, and seed sample files.
+ */
+export function initVcsInitButton(): void {
+    const btn = document.getElementById('btn-vcs-init') as HTMLButtonElement | null;
+    if (!btn) { return; }
+
+    btn.addEventListener('click', async () => {
+        const lc_fn = `${lc}[btn-vcs-init]`;
+        try {
+            btn.disabled = true;
+            devLog('⏳ Initializing in-memory branch space & sample repo via VcsRepository...');
+
+            const metaspace = await getGlobalMetaspace_waitIfNeeded();
+
+            // 1. Create dedicated in-memory branch space
+            const branchSpaceName = getB2tFSBranchSpaceName('main');
+            const backingSpace = new InnerSpace_V1({
+                ...DEFAULT_INNER_SPACE_DATA_V1,
+                name: branchSpaceName,
+                spaceSubPath: branchSpaceName,
+                uuid: 'ws_backing_cas_space_uuid',
+            });
+            await backingSpace.initialized;
+            vcsDevState.backingSpace = backingSpace;
+
+            // Register backingSpace in metaspace local user spaces
+            try {
+                if ((metaspace as any).localUserSpaces && !(metaspace as any).localUserSpaces.includes(backingSpace)) {
+                    (metaspace as any).localUserSpaces.push(backingSpace);
+                }
+                if ((metaspace as any).spaces && !(metaspace as any).spaces.includes(backingSpace)) {
+                    (metaspace as any).spaces.push(backingSpace);
+                }
+            } catch {
+                // Ignore
+            }
+
+            // 2. Instantiate WebInMemoryWorkspaceProjectionSpace_V1
+            const wsSpace = new WebInMemoryWorkspaceProjectionSpace_V1({
+                initialData: {
+                    name: 'web_ws_space_main',
+                    uuid: 'web_ws_uuid',
+                    workspaceRoot: '/',
+                    vcsFolderName: '.vcsgib',
+                },
+                backingSpace,
+            });
+            await wsSpace.initialized;
+            vcsDevState.wsSpace = wsSpace;
+
+            // 3. Create VcsRepository session
+            const repo = new VcsRepository({
+                metaspace,
+                workspaceSpace: wsSpace,
+                localSpace: backingSpace,
+                activeBranchSpace: backingSpace,
+                enableBranchLocking: true,
+            });
+            vcsDevState.repo = repo;
+
+            // 4. Initialize repository
+            await repo.init({
+                rootFolderName: 'my-app',
+                defaultBranchName: 'main',
+            });
+
+            // 5. Seed initial files into virtual workspace
+            wsSpace.setVirtualFile('README.md', '# Space-Gib In-Memory Repo\n\nThis entire repository is projected in memory inside the browser.');
+            wsSpace.setVirtualFile('src/index.ts', 'export const app = "space-gib in-memory demo";\nconsole.log(app);');
+            wsSpace.setVirtualFile('src/helper.ts', 'export function add(a: number, b: number): number {\n    return a + b;\n}');
+            wsSpace.setVirtualFile('.ibgibignore', 'node_modules/\n*.log\n');
+
+            // 6. Initial stage & commit
+            await repo.add([], { all: true });
+            const commitRes = await repo.commit({ message: 'Initial repository commit' });
+
+            devLog(`✅ In-Memory Repo initialized via VcsRepository!\n  Commit: ${commitRes.commitAddr.slice(0, 8)}\n  Files: ${wsSpace.listVirtualPaths().join(', ')}`);
+
+            // Enable action buttons
+            setBtnDisabled('btn-vcs-list', false);
+            setBtnDisabled('btn-vcs-status', false);
+            setBtnDisabled('btn-vcs-modify', false);
+            setBtnDisabled('btn-vcs-reset', false);
+        } catch (error) {
+            devLog(`❌ Init failed: ${extractErrorMsg(error)}`);
+            console.error(`${lc_fn}`, error);
+        } finally {
+            btn.disabled = true;
+        }
+    });
+}
+
+/**
+ * 2. List virtual files in in-memory projection space in a single formatted card.
+ */
+export function initVcsListButton(): void {
+    const btn = document.getElementById('btn-vcs-list') as HTMLButtonElement | null;
+    if (!btn) { return; }
+
+    btn.addEventListener('click', () => {
+        try {
+            const wsSpace = vcsDevState.wsSpace;
+            if (!wsSpace) {
+                devLog('⚠️ Repo not initialized yet. Click (1) first.');
+                return;
+            }
+
+            const paths = wsSpace.listVirtualPaths();
+            const lines: string[] = [
+                `📁 --- IN-MEMORY VIRTUAL FILES (${paths.length} entries) ---`
+            ];
+
+            for (const p of paths) {
+                const text = wsSpace.getVirtualText(p);
+                const isDir = text === undefined || wsSpace.getVirtualFile(p)?.length === 0;
+                if (isDir) {
+                    lines.push(`  📁 [DIR]  ${p}`);
+                } else {
+                    const preview = (text || '').replace(/\n/g, ' ').slice(0, 40);
+                    lines.push(`  📄 [FILE] ${p.padEnd(22)} (${String(text?.length || 0).padStart(3)} chars) -> "${preview}..."`);
+                }
+            }
+
+            devLog(lines.join('\n'));
+        } catch (error) {
+            devLog(`❌ List failed: ${extractErrorMsg(error)}`);
+        }
+    });
+}
+
+/**
+ * 3. Inspect repository status via VcsRepository in a single formatted card.
+ */
+export function initVcsStatusButton(): void {
+    const btn = document.getElementById('btn-vcs-status') as HTMLButtonElement | null;
+    if (!btn) { return; }
+
+    btn.addEventListener('click', async () => {
+        try {
+            const repo = vcsDevState.repo;
+            if (!repo) {
+                devLog('⚠️ Repo not initialized yet.');
+                return;
+            }
+
+            const status = await repo.status();
+            const lines: string[] = [
+                `📋 --- VCS STATUS (Branch: ${status.branchName}) ---`
+            ];
+
+            if (status.staged.length === 0 && status.modified.length === 0 && status.deleted.length === 0 && status.untracked.length === 0 && status.pendingComments.length === 0) {
+                lines.push('  ✨ Working tree clean (no changes)');
+            } else {
+                if (status.staged.length > 0) {
+                    lines.push(`  🟢 Staged changes (${status.staged.length}):`);
+                    for (const s of status.staged) { lines.push(`     staged: ${s.path}`); }
+                }
+
+                if (status.modified.length > 0) {
+                    lines.push(`  🟡 Changes not staged for commit (${status.modified.length}):`);
+                    for (const m of status.modified) { lines.push(`     modified: ${m.path}`); }
+                }
+
+                if (status.deleted.length > 0) {
+                    lines.push(`  🔴 Deleted files (${status.deleted.length}):`);
+                    for (const d of status.deleted) { lines.push(`     deleted: ${d.path}`); }
+                }
+
+                if (status.untracked.length > 0) {
+                    lines.push(`  ⚪ Untracked files (${status.untracked.length}):`);
+                    for (const u of status.untracked) { lines.push(`     untracked: ${u.path}`); }
+                }
+
+                if (status.pendingComments.length > 0) {
+                    lines.push(`  💬 Pending companion comments (${status.pendingComments.length}):`);
+                    for (const c of status.pendingComments) { lines.push(`     note for: ${c.targetRelPath} (${c.commentRelPath})`); }
+                }
+            }
+
+            devLog(lines.join('\n'));
+        } catch (error) {
+            devLog(`❌ Status check failed: ${extractErrorMsg(error)}`);
+        }
+    });
+}
+
+/**
+ * 4. Modify virtual file and add an untracked file directly in memory.
+ */
+export function initVcsModifyButton(): void {
+    const btn = document.getElementById('btn-vcs-modify') as HTMLButtonElement | null;
+    if (!btn) { return; }
+
+    btn.addEventListener('click', () => {
+        try {
+            const wsSpace = vcsDevState.wsSpace;
+            if (!wsSpace) {
+                devLog('⚠️ Repo not initialized yet.');
+                return;
+            }
+
+            const lines: string[] = [
+                '✏️ Simulating user edits in in-browser editor...'
+            ];
+
+            // Modify existing file
+            const newContent = 'export const app = "space-gib (EDITED LIVE IN BROWSER!)";\nconsole.log(app);\nexport const timestamp = ' + Date.now() + ';';
+            wsSpace.setVirtualFile('src/index.ts', newContent);
+            lines.push('  ✏️ Updated "src/index.ts" with new code content.');
+
+            // Add an untracked file
+            wsSpace.setVirtualFile('src/new-component.ts', 'export const Component = () => "<div>New UI</div>";');
+            lines.push('  ➕ Created untracked file "src/new-component.ts".');
+
+            // Add a companion comment file
+            wsSpace.setVirtualFile('src/.ib.index.ts.md', '# Architectural Note on index.ts\nEdited live from Dev Tools!');
+            lines.push('  💬 Added companion comment file "src/.ib.index.ts.md".');
+            lines.push('👉 Click (3) VCS Status to view detected changes, or (5) to commit!');
+
+            devLog(lines.join('\n'));
+            setBtnDisabled('btn-vcs-commit', false);
+        } catch (error) {
+            devLog(`❌ Modify failed: ${extractErrorMsg(error)}`);
+        }
+    });
+}
+
+/**
+ * 5. Stage and commit modified files using VcsRepository.
+ */
+export function initVcsCommitButton(): void {
+    const btn = document.getElementById('btn-vcs-commit') as HTMLButtonElement | null;
+    if (!btn) { return; }
+
+    btn.addEventListener('click', async () => {
+        try {
+            btn.disabled = true;
+            const repo = vcsDevState.repo;
+            if (!repo) {
+                devLog('⚠️ Repo not initialized yet.');
+                return;
+            }
+
+            devLog('💾 Staging and committing changes via VcsRepository...');
+
+            // Stage all modified and new files
+            const addRes = await repo.add([], { all: true });
+
+            // Commit with message
+            const commitRes = await repo.commit({
+                message: 'Update index.ts and add new component with companion comment',
+            });
+
+            const lines: string[] = [
+                `🎉 Committed successfully via VcsRepository!`,
+                `  Commit: ${commitRes.commitAddr.slice(0, 8)}`,
+                `  Files Changed: ${commitRes.committedPaths.join(', ')}`,
+                `  Companion Comments Attached: ${commitRes.ingestedCommentsCount}`,
+                `👉 Click (3) VCS Status to verify clean working tree.`
+            ];
+
+            devLog(lines.join('\n'));
+        } catch (error) {
+            devLog(`❌ Commit failed: ${extractErrorMsg(error)}`);
+            console.error(`${lc}[btn-vcs-commit]`, error);
+        } finally {
+            btn.disabled = false;
+        }
+    });
+}
+
+/**
+ * 6. Discard working tree changes by restoring from snapshot via VcsRepository.
+ */
+export function initVcsResetButton(): void {
+    const btn = document.getElementById('btn-vcs-reset') as HTMLButtonElement | null;
+    if (!btn) { return; }
+
+    btn.addEventListener('click', async () => {
+        try {
+            const { wsSpace, repo } = vcsDevState;
+            if (!wsSpace || !repo) {
+                devLog('⚠️ Repo not initialized yet.');
+                return;
+            }
+
+            devLog('🔄 Resetting virtual working tree from branch snapshot via VcsRepository...');
+            await repo.restore({ all: true });
+
+            // Keep .ibgibignore in place
+            wsSpace.setVirtualFile('.ibgibignore', 'node_modules/\n*.log\n');
+
+            devLog('✅ Working tree restored! All uncommitted edits discarded.\n👉 Click (3) VCS Status to confirm clean state.');
+        } catch (error) {
+            devLog(`❌ Reset failed: ${extractErrorMsg(error)}`);
+        }
+    });
+}
+
+function setBtnDisabled(id: string, disabled: boolean): void {
+    const el = document.getElementById(id) as HTMLButtonElement | null;
+    if (el) { el.disabled = disabled; }
+}

package/src/client/dev-tools.mts

@@ -25,8 +25,13 @@ import { init4_7bSetupButton, init4_7bSyncButton, init4_7bCheckButton } from './
 import { init4_8bSetupButton, init4_8bSyncButton, init4_8bCheckButton } from './dev-tools/phase-4-8.mjs';
 import { init4_9bSetupButton, init4_9bSyncButton, init4_9bCheckButton } from './dev-tools/phase-4-9.mjs';
 import { init4_10bSetupButton, init4_10bSyncButton, init4_10bCheckButton } from './dev-tools/phase-4-10.mjs';
+import {
+    initVcsInitButton, initVcsListButton, initVcsStatusButton,
+    initVcsModifyButton, initVcsCommitButton, initVcsResetButton,
+    vcsDevState
+} from './dev-tools/vcs-workspace.mjs';
 
-export { devLog, debugState };
+export { devLog, debugState, vcsDevState };
 
 /**
  * Call once inside DOMContentLoaded to wire up all dev-tool buttons.
@@ -96,6 +101,13 @@ export function initDevTools(): void {
         init4_10bSetupButton();
         init4_10bSyncButton();
         init4_10bCheckButton();
+
+        initVcsInitButton();
+        initVcsListButton();
+        initVcsStatusButton();
+        initVcsModifyButton();
+        initVcsCommitButton();
+        initVcsResetButton();
     } catch (error) {
         console.error(`${lc_fn} ${extractErrorMsg(error)}`);
     }

package/src/client/index.html

@@ -123,6 +123,7 @@
                 <option value="4.8B">Row 4.8B (Phase 4.8B)</option>
                 <option value="4.9B">Row 4.9B (Phase 4.9B)</option>
                 <option value="4.10B">Row 4.10B (Phase 4.10B)</option>
+                <option value="VCS">Row VCS (In-Memory Workspace)</option>
               </select>
             </div>
 
@@ -270,6 +271,19 @@
               </div>
             </div>
 
+            <!-- Row VCS: In-Memory Workspace Projection & VCS Engine -->
+            <div class="dev-panel-row-container" data-row-id="VCS">
+              <span class="dev-panel-row-label">VCS</span>
+              <div class="dev-panel-row">
+                <button id="btn-vcs-init" class="dev-btn">1. Init In-Memory Repo</button>
+                <button id="btn-vcs-list" class="dev-btn" disabled>2. List Virtual Files</button>
+                <button id="btn-vcs-status" class="dev-btn" disabled>3. VCS Status</button>
+                <button id="btn-vcs-modify" class="dev-btn" disabled>4. Edit app.ts</button>
+                <button id="btn-vcs-commit" class="dev-btn" disabled>5. Commit Edits</button>
+                <button id="btn-vcs-reset" class="dev-btn" disabled>6. Reset / Restore</button>
+              </div>
+            </div>
+
             <pre id="dev-panel-log" class="dev-panel-log" aria-live="polite" aria-label="Dev log"></pre>
           </section>
         </div>