aio-connect 1.1.0

package/PRD.md

@@ -0,0 +1,213 @@
+# PRD — aio (all-in-one-repo)
+
+| | |
+|---|---|
+| **Product** | `aio` — All-In-One auto-connect layer for AI coding agents |
+| **Package** | `aio-connect` (npm registry; GitHub repo `MRaihan-XXL/all-in-one-repo`) |
+| **Version** | 1.1.0 |
+| **Status** | Approved for implementation |
+| **License** | GPL-3.0 |
+| **Docs language** | English (international) |
+
+---
+
+## 1. Background
+
+Developers increasingly run several AI coding agents side by side (opencode,
+Claude Code, Kimi Code, jcode, freebuff, Hermes, Codex, Gemini — plus whatever
+comes next).
+Each agent keeps its own session, its own config, and its own way of loading
+context. Locally cloned repositories, installed CLI tools, and agent skills
+live in separate places, so every new session starts "cold": the agent does not
+know what is on the machine, and the user has to re-explain context or type
+slash-commands (`/skill`, `/mcp-tool`, …) to reach the right capability.
+
+`aio` solves this with a single command: it scans the machine, writes one
+generated **context manifest** (repositories + tools + skills), injects a small
+idempotent **auto-use rule block** into every supported agent's instruction
+file, and keeps everything fresh on later runs. After setup the user opens any
+agent directly and prompts in plain language — no slash commands.
+
+## 2. Goals
+
+- **G1** One command (`aio`) wires every installed AI agent to the local
+  repositories, tools, and skills — permanently (config survives until changed).
+- **G2** Zero slash-commands: routing decisions are made by the agent from the
+  manifest, from plain-language prompts.
+- **G3** The manifest covers **repositories AND tools** (commands, versions,
+  locations, links, descriptions) — not just code folders.
+- **G4** Stays correct over time: adding repositories or updating features only
+  requires re-running `aio` (rescan + block regeneration).
+- **G5** Every agent reply that uses a local repo/tool **discloses it**: tool
+  name, kind, and function (see FR6).
+- **G6** Self-updatable (`aio update`), rollback-able (`aio rollback`), and
+  safe to publish (public repo, no local/sensitive data).
+
+## 3. Users
+
+1. **Primary** — the owner: power user running 8 agents + 97 cloned repos +
+   a local tools database on one Windows machine.
+2. **Secondary** — public GitHub users: anyone installing
+   `npm install -g aio-connect` on their own machine with
+   their own repos/agents (data folder optional).
+
+## 4. Functional requirements
+
+### FR1 — Agent detection & permanent wiring
+`aio` detects installed agents by `PATH` binary **or** their configuration
+directory (minimum set: `opencode`, `claude`, `kimi`, `jcode`, `freebuff`,
+`hermes`, `codex`, `gemini`) and writes the auto-use block into each
+agent's canonical instruction file (`AGENTS.md` / `CLAUDE.md` / `GEMINI.md`,
+global `~/AGENTS.md` as fallback). Configuration
+persists: after one run, every later agent session is already wired.
+
+**Acceptance:** running `aio` reports per-agent status
+(detected / instruction file / block / MCP / fallback).
+
+### FR2 — No slash-commands (auto-use)
+The injected block tells the agent: match the user's prompt against the
+manifest and route itself to the right repository/tool/skill automatically.
+The user never types `/…` for routing.
+
+**Acceptance:** block content contains explicit "never ask the user to type
+a slash-command" rule.
+
+### FR3 — Manifest = repositories + tools + skills
+Generated file `aio-context.md` with three sections:
+- **REPOS** — name, URL (from real `.git/config`), local path, category.
+- **TOOLS** — name, command/access, version, location, link, description.
+  Source: local `ai-tools.db` (SQLite) first, `TOOLS-INDEX.md` parse as
+  fallback, nothing if both absent.
+- **SKILLS** — names + locations of global agent skill directories.
+
+**Acceptance:** after setup the manifest lists all three sections with correct
+counts for the machine.
+
+### FR4 — Update resilience (repos & features)
+- `aio` **rescans** on every run: a repository added to the repos directory
+  appears in the manifest after a re-run.
+- The injected block is marker-delimited (`aio:auto-config:v1`) and
+  **regenerated** from the running package version: updating `aio` and
+  re-running replaces block content in place — never duplicated, never stale.
+
+**Acceptance:** run `aio` twice → block appears exactly once; add a dummy repo
+folder → re-run → manifest count increases.
+
+### FR5 — Auto-update
+`aio update` reinstalls the package from npm (`npm install -g aio-connect`;
+GitHub `github:<owner>/all-in-one-repo` remains a fallback source) and then
+automatically re-runs setup with the new code, so rules/manifest pick up the
+new version.
+
+**Acceptance:** `aio update` exits 0 on success, prints new version + setup
+report; offline → clear error, exit 1, no partial damage.
+
+### FR6 — Usage disclosure in agent output
+The injected block mandates: whenever an agent uses a repository or tool from
+the manifest, it must start that step with:
+
+```
+[aio] Using <name> (<type>) — <function>
+```
+
+where `<function>` is the manifest description (what the tool/repo does).
+
+**Acceptance:** rule present in block with that exact format **and** emitted
+by real agents in live sessions (proven on this machine: claude, jcode via
+antigravity, and opencode all printed the line unprompted).
+
+### FR7 — Backup & rollback
+Every file is backed up to `~/.aio/backups/` before first modification.
+`aio rollback` surgically removes the auto-use block and any MCP entry `aio`
+added (recorded in a ledger) — user edits outside the block are preserved.
+
+**Acceptance:** `node --test` proves inject-twice idempotency and exact
+rollback restore.
+
+### FR8 — Publication without local/sensitive data
+Public GitHub repository; `.gitignore` excludes the local tools database,
+screenshots, tracking/registry logs, generated context manifest, and env
+files. No machine-specific absolute paths or secrets in committed code —
+paths are resolved at runtime (env var / config / discovery), README examples
+use placeholders.
+
+**Acceptance:** `git ls-files` contains none of the excluded files; secret
+scan (tokens/passwords/usernames) on tracked files passes.
+
+## 5. Non-functional requirements
+
+- **NFR1** Idempotent: any run may be repeated without duplication.
+- **NFR2** Zero runtime dependencies (Node.js standard library only);
+  Node ≥ 22 (uses `node:sqlite` when present, degrades gracefully otherwise).
+- **NFR3** Fail loudly: non-zero exit codes and explicit messages; never
+  silently swallow errors.
+- **NFR4** Windows-first, cross-platform-friendly (PATH/PATHEXT detection,
+  `os.homedir()`).
+- **NFR5** Backups before mutation; rollback available.
+- **NFR6** Branding: `aio` prints a logo banner; README shows logo +
+  animated flowchart (see §7).
+
+## 6. Commands (CLI surface)
+
+| Command | Behavior |
+|---|---|
+| `aio` | Full setup: scan → manifest → inject → MCP ensure → path fix → status table |
+| `aio update` | Reinstall latest from npm → re-run setup automatically |
+| `aio rollback` | Remove injected block + reverse MCP additions from ledger |
+| `aio --help` | Usage + branding |
+| `aio --version` | Print package version |
+
+Options: `--repos <dir>` (repositories directory), `--home <dir>` (data folder
+containing `ai-tools.db` / `TOOLS-INDEX.md`). Environment overrides:
+`AIO_REPOS_DIR`, `AIO_HOME`.
+
+## 7. Branding & documentation deliverables
+
+- **Logo system** `assets/` — "three streams, one node" motif: tile, mark,
+  wordmark, lockups, monochrome, favicon + presentation page
+  `assets/logo-gallery.html`; `docs/logo.svg` mirrors the tile for README.
+- **Animated flowchart** `docs/flow.svg` — SMIL-animated diagram:
+  prompt → agent → manifest (repos/tools/skills) → disclosed output;
+  explained in `docs/flow.md`.
+- **Banner** — strict-grid ASCII wordmark printed by every `aio` command
+  (regression-tested for alignment).
+- **README.md** (English) — badges, logo, flowchart, quick start, commands,
+  update & privacy sections.
+- **docs/CONFIG.md** — every file `aio` touches, rollback, troubleshooting.
+- **docs/SCREENSHOTS.md** — homepage screenshot evidence, method + 97-row index.
+
+## 8. Out of scope
+
+- Background daemon / autostart service (config-only persistence by decision).
+- ~~Publishing to the public npm registry~~ — **superseded**: v1.1.0 publishes
+  as `aio-connect` (the name `aio` was taken).
+- Cloud sync of the manifest; web UI; per-prompt live version checks.
+
+## 9. Acceptance checklist
+
+- [x] `node --test` passes (idempotency, rollback, scan, tool fallback,
+      disclosure format, TOML/JSON ensure, banner grid) — 9/9.
+- [x] On the owner machine: block in **7** instruction files (exactly 1× each),
+      MCP entries unchanged/complete, 2 stale registry paths repaired.
+- [x] Manifest shows REPOS + TOOLS + SKILLS with counts (97 · 23 · 67).
+- [x] Re-run `aio` → no duplicates (FR4); setup → rollback → setup cycle
+      removes/restores 7/7 blocks.
+- [x] Public repo pushed; tracked-files secret scan clean (FR8).
+- [x] Fresh install → `aio --help` works; `aio update` exits 0 (FR5).
+- [x] FR6 emitted by real agents in live sessions (claude, jcode, opencode).
+- [ ] npm publish of `aio-connect@1.1.0` (blocked on interactive `npm login`)
+      + fresh-install verification from the registry.
+
+Verified 2026-09-28: tests 9/9; setup → rollback → setup cycle proven on the
+owner machine (blocks removed/restored **7/7**, pre-existing MCP entries never
+touched, ledger-driven MCP reversal for the entries aio created); manifest
+`REPOS 97 · TOOLS 23 · SKILLS 67`; 97/97 homepage screenshots; repo
+`MRaihan-XXL/all-in-one-repo` public; FR6 live-tested on three agents.
+
+## 10. Revision history
+
+| Date | Change |
+|---|---|
+| 2026-09-14 | v1 — initial PRD (FR1–FR8, branding, auto-update, disclosure) |
+| 2026-09-28 | v1.1 — acceptance checklist signed off after end-to-end verification |
+| 2026-09-28 | v1.2 — 8 agents (codex/gemini, dir-based detection, 6 MCP formats), npm `aio-connect`, FR6 live proof, brand kit, screenshot evidence index |

package/README.md

@@ -0,0 +1,139 @@
+<p align="center">
+  <img src="./docs/logo.svg" width="110" alt="aio logo">
+</p>
+
+<h1 align="center">aio — all-in-one-repo</h1>
+
+<p align="center">
+  <b>Auto-connect your AI coding agents to your local repos, tools &amp; skills.</b><br>
+  No slash-commands. No manual config. One command.
+</p>
+
+<p align="center">
+  <img src="https://img.shields.io/badge/license-GPL--3.0-blue.svg" alt="license: GPL-3.0">
+  <img src="https://img.shields.io/badge/node-%3E%3D22-brightgreen.svg" alt="node >= 22">
+  <img src="https://img.shields.io/badge/npm-aio--connect-orange.svg" alt="npm: aio-connect">
+  <img src="https://img.shields.io/badge/agents-8-orange.svg" alt="8 agents supported">
+  <img src="https://img.shields.io/badge/zero%20runtime%20deps-stdlib-lightgrey.svg" alt="zero runtime dependencies">
+</p>
+
+<p align="center">
+  <img src="./docs/flow.svg" width="100%" alt="How aio works: your prompt → AI agent (fed by the aio manifest) → answer with disclosed usage">
+</p>
+
+---
+
+## Why
+
+Local AI agents (opencode, claude, kimi, …) know nothing about your machine:
+which repositories you cloned, which tools you installed, which skills you
+collected. You end up explaining it every session — or wiring MCP servers and
+instruction files by hand.
+
+`aio` does the wiring once, then keeps it fresh:
+
+1. **Scan** — detects installed agents, your repos directory, your tools
+   catalog, and your global skills.
+2. **Generate** — writes a context manifest (`aio-context.md`) listing
+   `REPOS · TOOLS · SKILLS`.
+3. **Inject** — appends a marker-delimited *auto-use block* to each agent's
+   instruction file (idempotent — always exactly one copy).
+4. **Ensure** — adds `codebase-memory-mcp` to opencode / claude / kimi /
+   jcode / codex / gemini configs when the binary exists and the entry is
+   missing.
+5. **Repair** — fixes stale path references after folder renames.
+
+Then you just open an agent and write normal, plain-language prompts. The agent
+routes itself through the manifest and **must disclose what it used**:
+
+```text
+[aio] Using <name> (<type>) — <function>
+```
+
+## Install
+
+```bash
+npm install -g aio-connect
+```
+
+> The npm name `aio` was already taken — the package is published as
+> **`aio-connect`**, the binary stays `aio`. (Installing straight from GitHub
+> with `npm install -g github:MRaihan-XXL/all-in-one-repo` also works.)
+
+Requires **Node.js ≥ 22** (uses the built-in `node:sqlite`, optional).
+
+## Usage
+
+```bash
+aio                # scan + generate + inject (default command)
+aio update         # update from npm, then re-run setup
+aio rollback       # surgically remove everything aio injected
+aio --help         # full help
+```
+
+Options:
+
+| Option | Env | Default |
+|---|---|---|
+| `--repos <dir>` | `AIO_REPOS_DIR` | `D:\Tools\github` (if it exists) |
+| `--home <dir>` | `AIO_HOME` | persisted state → walk up from cwd |
+
+## What changes on your machine
+
+Everything aio writes is documented in **[docs/CONFIG.md](./docs/CONFIG.md)**.
+Short version:
+
+- `aio-context.md` — generated manifest (yours to delete anytime)
+- one `AIO AUTO-CONTEXT` block in each agent's instruction file
+  (`~/.config/opencode/AGENTS.md`, `~/.claude/CLAUDE.md`,
+  `~/.kimi-code/AGENTS.md`, `~/.jcode/AGENTS.md`, `~/.codex/AGENTS.md`,
+  `~/.gemini/GEMINI.md`, `~/AGENTS.md`)
+- MCP entry for `codebase-memory-mcp` — only if missing, only if detected
+- a file backup of every file before it is modified → `~/.aio/backups/`
+
+Nothing else is touched. Local data (`ai-tools.db`, `TOOLS-INDEX.md`,
+`TRACKING.md`, screenshots) is **git-ignored** and never uploaded.
+
+## Keeping it fresh
+
+- **Clone a new repo?** Run `aio` again — it rescans on every run, so new
+  repositories and tools appear in the manifest automatically.
+- **Agent updated its config format?** `aio update` pulls the latest rules
+  from npm and re-runs setup.
+- **Want your machine back?** `aio rollback` removes the injected block and
+  any MCP entry that *aio itself* added (your own entries are never touched;
+  file backups are kept as a safety net).
+
+## Supported agents
+
+| Agent | Where the auto-use block lands | MCP ensured |
+|---|---|---|
+| `opencode` | `~/.config/opencode/AGENTS.md` | ✅ `opencode.jsonc` |
+| `claude` | `~/.claude/CLAUDE.md` | ✅ `~/.claude.json` |
+| `kimi` | `~/.kimi-code/AGENTS.md` | ✅ `~/.kimi-code/mcp.json` |
+| `jcode` | `~/.jcode/AGENTS.md` (fallback `~/AGENTS.md`) | ✅ `~/.jcode/mcp.json` |
+| `codex` | `~/.codex/AGENTS.md` | ✅ `~/.codex/config.toml` |
+| `gemini` | `~/.gemini/GEMINI.md` | ✅ `~/.gemini/settings.json` |
+| `freebuff` | `~/AGENTS.md` (fallback) | — |
+| `hermes` | `~/AGENTS.md` | — |
+
+Detection is by `PATH` binary **or** the agent's config directory — codex and
+gemini are wired even without a shell wrapper.
+
+## Brand kit
+
+The identity ("three streams, one node"), palette, favicon sizes, CLI banner
+grid and usage rules live in
+**[assets/logo-gallery.html](./assets/logo-gallery.html)** (open it in a
+browser); source SVGs are in [`assets/`](./assets/).
+
+## Development
+
+```bash
+npm test          # node --test — self-checks for injection/rollback/scan
+node bin/aio.js   # run from a checkout without installing
+```
+
+## License
+
+[GPL-3.0](./LICENSE) © MRaihan-XXL

package/assets/logo-favicon.svg

@@ -0,0 +1,9 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32" width="32" height="32" role="img" aria-label="aio favicon">
+  <rect width="32" height="32" rx="7" fill="#101418"/>
+  <g fill="none" stroke="#F7F5F2" stroke-width="3" stroke-linecap="round" stroke-linejoin="round">
+    <path d="M4.5 8 L11.5 13.5 Q15.5 16 21 16"/>
+    <path d="M3.5 16 H21"/>
+    <path d="M4.5 24 L11.5 18.5 Q15.5 16 21 16"/>
+  </g>
+  <circle cx="25.7" cy="16" r="3.1" fill="#FF4A1C"/>
+</svg>

package/assets/logo-gallery.html

@@ -0,0 +1,150 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>aio — brand kit</title>
+<style>
+  :root{
+    --ink:#101418; --paper:#F7F5F2; --accent:#FF4A1C;
+    --line:#E4E0DA; --mute:#6B6862;
+  }
+  *{box-sizing:border-box}
+  body{margin:0;background:var(--paper);color:var(--ink);
+    font:15px/1.6 ui-sans-serif,system-ui,"Segoe UI",sans-serif}
+  .wrap{max-width:1080px;margin:0 auto;padding:64px 40px 96px}
+  .kicker{font:600 11px/1 ui-monospace,Consolas,monospace;letter-spacing:.16em;
+    text-transform:uppercase;color:var(--accent)}
+  h1{font-size:44px;line-height:1.05;letter-spacing:-.02em;margin:14px 0 10px;font-weight:680}
+  h2{font-size:20px;letter-spacing:-.01em;margin:56px 0 6px;font-weight:640}
+  .sub{color:var(--mute);margin:0 0 8px;max-width:64ch}
+  .rule{border:0;border-top:1px solid var(--line);margin:56px 0 0}
+  .grid{display:grid;gap:16px;margin-top:20px}
+  .g2{grid-template-columns:1fr 1fr}
+  .g4{grid-template-columns:repeat(4,1fr)}
+  .card{background:#fff;border:1px solid var(--line);border-radius:14px;
+    padding:28px;display:flex;align-items:center;justify-content:center;min-height:170px}
+  .card.dark{background:var(--ink);border-color:var(--ink)}
+  .card.tall{min-height:230px}
+  .cap{font:600 11px/1.5 ui-monospace,Consolas,monospace;color:var(--mute);
+    letter-spacing:.08em;text-transform:uppercase;margin-top:8px}
+  .sizes{display:flex;align-items:flex-end;gap:24px;padding:8px 0}
+  .sizes figure{margin:0;text-align:center}
+  .swatches{display:grid;grid-template-columns:repeat(3,1fr);gap:16px;margin-top:20px}
+  .sw{border:1px solid var(--line);border-radius:14px;overflow:hidden;background:#fff}
+  .sw .chip{height:92px}
+  .sw .meta{padding:12px 14px;font:13px/1.5 ui-monospace,Consolas,monospace}
+  .sw .meta b{display:block;font-family:ui-sans-serif,system-ui,sans-serif;font-size:13px}
+  .sw .meta span{color:var(--mute)}
+  pre.cli{background:var(--ink);color:var(--paper);border-radius:14px;
+    padding:26px 30px;overflow:auto;font:14px/1.45 ui-monospace,Consolas,monospace}
+  pre.cli .a{color:#FF6A45}
+  pre.cli .d{color:#8A9099}
+  .rules{display:grid;grid-template-columns:1fr 1fr;gap:16px;margin-top:20px}
+  .rules ul{margin:0;padding:18px 18px 18px 38px;background:#fff;border:1px solid var(--line);
+    border-radius:14px}
+  .rules li{margin:6px 0}
+  .rules .no li::marker{content:"✗  ";color:var(--accent)}
+  .rules .yes li::marker{content:"✓  ";color:#1B7F4B}
+  code{font:13px ui-monospace,Consolas,monospace;background:#EEEAE4;padding:1px 6px;border-radius:6px}
+</style>
+</head>
+<body>
+<div class="wrap">
+
+  <div class="kicker">Brand kit · v1.1.0</div>
+  <h1>aio — all-in-one-repo</h1>
+  <p class="sub">Identity system for the auto-connect layer of AI coding agents.
+  Motif: <b>three streams, one node</b> — many agents, repos and tools converging
+  into a single context. Flat, geometric, no gradients.</p>
+
+  <hr class="rule">
+
+  <h2>Lockup</h2>
+  <p class="sub">Primary horizontal lockup: app tile + geometric wordmark. The i-dot
+  carries the accent, echoing the convergence node.</p>
+  <div class="grid g2">
+    <div class="card tall"><img src="logo-lockup.svg" alt="aio lockup" width="420"></div>
+    <div class="card dark tall"><img src="logo-lockup-reversed.svg" alt="aio lockup on dark" width="420"></div>
+  </div>
+  <div class="cap">left: paper background · right: ink background (reversed treatment)</div>
+
+  <h2>Mark &amp; tile</h2>
+  <div class="grid g4">
+    <div class="card"><img src="logo-tile.svg" alt="tile" width="112"></div>
+    <div class="card"><img src="logo-mark.svg" alt="mark" width="112"></div>
+    <div class="card dark"><img src="logo-mark-reversed.svg" alt="mark reversed" width="112"></div>
+    <div class="card"><img src="logo-favicon.svg" alt="favicon" width="112"></div>
+  </div>
+  <div class="cap">app tile · mark on light · mark on ink · favicon (same geometry, tuned for 32 px)</div>
+
+  <h2>Wordmark</h2>
+  <div class="grid g2">
+    <div class="card"><img src="logo-wordmark.svg" alt="wordmark" width="300"></div>
+    <div class="card"><img src="logo-mono-black.svg" alt="mono black" width="400"></div>
+  </div>
+  <div class="cap">single-color letterforms (constructed paths — no font dependency)</div>
+
+  <h2>Monochrome</h2>
+  <div class="grid g2">
+    <div class="card"><img src="logo-mono-black.svg" alt="mono black" width="400"></div>
+    <div class="card dark"><img src="logo-mono-white.svg" alt="mono white" width="400"></div>
+  </div>
+  <div class="cap">single-ink fallbacks for embossing, fax-grade contexts and print</div>
+
+  <h2>Real sizes</h2>
+  <div class="card" style="justify-content:flex-start">
+    <div class="sizes">
+      <figure><img src="logo-favicon.svg" width="16" height="16" alt="16"><figcaption class="cap">16</figcaption></figure>
+      <figure><img src="logo-favicon.svg" width="32" height="32" alt="32"><figcaption class="cap">32</figcaption></figure>
+      <figure><img src="logo-tile.svg" width="48" height="48" alt="48"><figcaption class="cap">48</figcaption></figure>
+      <figure><img src="logo-tile.svg" width="64" height="64" alt="64"><figcaption class="cap">64</figcaption></figure>
+      <figure><img src="logo-tile.svg" width="96" height="96" alt="96"><figcaption class="cap">96</figcaption></figure>
+    </div>
+  </div>
+
+  <h2>Palette</h2>
+  <div class="swatches">
+    <div class="sw"><div class="chip" style="background:#101418"></div>
+      <div class="meta"><b>Ink</b><span>#101418 · surfaces, type</span></div></div>
+    <div class="sw"><div class="chip" style="background:#FF4A1C"></div>
+      <div class="meta"><b>Vermilion</b><span>#FF4A1C · the node, accents only</span></div></div>
+    <div class="sw"><div class="chip" style="background:#F7F5F2;border-bottom:1px solid var(--line)"></div>
+      <div class="meta"><b>Paper</b><span>#F7F5F2 · background, reversed mark</span></div></div>
+  </div>
+
+  <h2>CLI banner</h2>
+  <p class="sub">Console identity: strict 22-column grid — glyphs are joined
+  row-by-row from fixed-width parts, so the letters can never drift out of alignment.</p>
+  <pre class="cli"><span class="a"> ██████  ████  ██████
+██    ██  ██  ██    ██
+██    ██  ██  ██    ██
+████████  ██  ██    ██
+██    ██  ██  ██    ██
+██    ██ ████  ██████ </span>
+<span class="d">  all-in-one-repo v1.1.0 — auto-connect AI agents to your repos, tools &amp; skills
+  GPL-3.0 · https://github.com/MRaihan-XXL/all-in-one-repo</span></pre>
+
+  <h2>Usage rules</h2>
+  <div class="rules">
+    <div class="yes">
+      <ul>
+        <li>Keep clear space equal to the node diameter around the mark.</li>
+        <li>Use the accent only for the node / i-dot — never for body text.</li>
+        <li>Reverse to paper-on-ink on dark surfaces.</li>
+        <li>Scale the favicon geometry below 64 px; full mark above.</li>
+      </ul>
+    </div>
+    <div class="no">
+      <ul>
+        <li>No gradients, glows, or starbursts on the mark.</li>
+        <li>Don’t stretch, rotate, or recolor the streams.</li>
+        <li>Don’t outline the tile or add drop shadows.</li>
+        <li>Don’t place the ink mark on busy photos.</li>
+      </ul>
+    </div>
+  </div>
+
+</div>
+</body>
+</html>

package/assets/logo-lockup-reversed.svg

@@ -0,0 +1,19 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 480 128" width="480" height="128" role="img" aria-label="aio lockup reversed">
+  <!-- reversed lockup for ink backgrounds: paper tile, ink streams, paper wordmark -->
+  <rect width="128" height="128" rx="28" fill="#F7F5F2"/>
+  <g fill="none" stroke="#101418" stroke-width="11" stroke-linecap="round" stroke-linejoin="round">
+    <path d="M18 32 L46 54 Q62 64 84 64"/>
+    <path d="M14 64 H84"/>
+    <path d="M18 96 L46 74 Q62 64 84 64"/>
+  </g>
+  <circle cx="103" cy="64" r="9.5" fill="#FF4A1C"/>
+  <g transform="translate(168,0)">
+    <g fill="none" stroke="#F7F5F2" stroke-width="12" stroke-linecap="round" stroke-linejoin="round">
+      <circle cx="44" cy="70" r="26"/>
+      <path d="M70 44 V100"/>
+      <path d="M110 44 V100"/>
+      <circle cx="164" cy="70" r="26"/>
+    </g>
+    <circle cx="110" cy="24" r="8" fill="#FF4A1C"/>
+  </g>
+</svg>

package/assets/logo-lockup.svg

@@ -0,0 +1,19 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 480 128" width="480" height="128" role="img" aria-label="aio lockup">
+  <!-- tile + wordmark lockup -->
+  <rect width="128" height="128" rx="28" fill="#101418"/>
+  <g fill="none" stroke="#F7F5F2" stroke-width="11" stroke-linecap="round" stroke-linejoin="round">
+    <path d="M18 32 L46 54 Q62 64 84 64"/>
+    <path d="M14 64 H84"/>
+    <path d="M18 96 L46 74 Q62 64 84 64"/>
+  </g>
+  <circle cx="103" cy="64" r="9.5" fill="#FF4A1C"/>
+  <g transform="translate(168,0)">
+    <g fill="none" stroke="#101418" stroke-width="12" stroke-linecap="round" stroke-linejoin="round">
+      <circle cx="44" cy="70" r="26"/>
+      <path d="M70 44 V100"/>
+      <path d="M110 44 V100"/>
+      <circle cx="164" cy="70" r="26"/>
+    </g>
+    <circle cx="110" cy="24" r="8" fill="#FF4A1C"/>
+  </g>
+</svg>

package/assets/logo-mark-reversed.svg

@@ -0,0 +1,8 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 128 128" width="128" height="128" role="img" aria-label="aio mark reversed">
+  <g fill="none" stroke="#F7F5F2" stroke-width="11" stroke-linecap="round" stroke-linejoin="round">
+    <path d="M18 32 L46 54 Q62 64 84 64"/>
+    <path d="M14 64 H84"/>
+    <path d="M18 96 L46 74 Q62 64 84 64"/>
+  </g>
+  <circle cx="103" cy="64" r="9.5" fill="#FF4A1C"/>
+</svg>

package/assets/logo-mark.svg

@@ -0,0 +1,8 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 128 128" width="128" height="128" role="img" aria-label="aio mark">
+  <g fill="none" stroke="#101418" stroke-width="11" stroke-linecap="round" stroke-linejoin="round">
+    <path d="M18 32 L46 54 Q62 64 84 64"/>
+    <path d="M14 64 H84"/>
+    <path d="M18 96 L46 74 Q62 64 84 64"/>
+  </g>
+  <circle cx="103" cy="64" r="9.5" fill="#FF4A1C"/>
+</svg>

package/assets/logo-mono-black.svg

@@ -0,0 +1,18 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 480 128" width="480" height="128" role="img" aria-label="aio lockup mono black">
+  <rect width="128" height="128" rx="28" fill="#000000"/>
+  <g fill="none" stroke="#FFFFFF" stroke-width="11" stroke-linecap="round" stroke-linejoin="round">
+    <path d="M18 32 L46 54 Q62 64 84 64"/>
+    <path d="M14 64 H84"/>
+    <path d="M18 96 L46 74 Q62 64 84 64"/>
+  </g>
+  <circle cx="103" cy="64" r="9.5" fill="#FFFFFF"/>
+  <g transform="translate(168,0)">
+    <g fill="none" stroke="#000000" stroke-width="12" stroke-linecap="round" stroke-linejoin="round">
+      <circle cx="44" cy="70" r="26"/>
+      <path d="M70 44 V100"/>
+      <path d="M110 44 V100"/>
+      <circle cx="164" cy="70" r="26"/>
+    </g>
+    <circle cx="110" cy="24" r="8" fill="#000000"/>
+  </g>
+</svg>

package/assets/logo-mono-white.svg

@@ -0,0 +1,18 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 480 128" width="480" height="128" role="img" aria-label="aio lockup mono white">
+  <rect width="128" height="128" rx="28" fill="#FFFFFF"/>
+  <g fill="none" stroke="#000000" stroke-width="11" stroke-linecap="round" stroke-linejoin="round">
+    <path d="M18 32 L46 54 Q62 64 84 64"/>
+    <path d="M14 64 H84"/>
+    <path d="M18 96 L46 74 Q62 64 84 64"/>
+  </g>
+  <circle cx="103" cy="64" r="9.5" fill="#000000"/>
+  <g transform="translate(168,0)">
+    <g fill="none" stroke="#FFFFFF" stroke-width="12" stroke-linecap="round" stroke-linejoin="round">
+      <circle cx="44" cy="70" r="26"/>
+      <path d="M70 44 V100"/>
+      <path d="M110 44 V100"/>
+      <circle cx="164" cy="70" r="26"/>
+    </g>
+    <circle cx="110" cy="24" r="8" fill="#FFFFFF"/>
+  </g>
+</svg>

package/assets/logo-tile.svg

@@ -0,0 +1,10 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 128 128" width="128" height="128" role="img" aria-label="aio app tile">
+  <!-- motif: three streams converging into one node (all-in-one) -->
+  <rect width="128" height="128" rx="28" fill="#101418"/>
+  <g fill="none" stroke="#F7F5F2" stroke-width="11" stroke-linecap="round" stroke-linejoin="round">
+    <path d="M18 32 L46 54 Q62 64 84 64"/>
+    <path d="M14 64 H84"/>
+    <path d="M18 96 L46 74 Q62 64 84 64"/>
+  </g>
+  <circle cx="103" cy="64" r="9.5" fill="#FF4A1C"/>
+</svg>

package/assets/logo-wordmark.svg

@@ -0,0 +1,10 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 210 128" width="210" height="128" role="img" aria-label="aio wordmark">
+  <!-- geometric single-story letterforms: constructed paths, no fonts -->
+  <g fill="none" stroke="#101418" stroke-width="12" stroke-linecap="round" stroke-linejoin="round">
+    <circle cx="44" cy="70" r="26"/>          <!-- a: bowl -->
+    <path d="M70 44 V100"/>                   <!-- a: stem -->
+    <path d="M110 44 V100"/>                  <!-- i -->
+    <circle cx="164" cy="70" r="26"/>         <!-- o -->
+  </g>
+  <circle cx="110" cy="24" r="8" fill="#FF4A1C"/> <!-- i: dot = accent -->
+</svg>