avorelo 0.1.0 → 0.3.0

package/LICENSE

@@ -1,21 +1,28 @@
-MIT License
+Avorelo — Proprietary Software License
+Copyright (c) 2026 HappyLifeSaaS. All rights reserved.
 
-Copyright (c) 2026 ClaudeCode Optimizer contributors
+This software and its source code, documentation, and associated materials
+(collectively, the "Software") are proprietary and confidential to HappyLifeSaaS
+(the "Owner").
 
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
+No license or right is granted to any person or entity to use, copy, modify,
+merge, publish, distribute, sublicense, sell, or create derivative works of the
+Software, in whole or in part, except under a separate written agreement signed
+by the Owner. In the absence of such an agreement, all rights are reserved.
 
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
+Possession of, or access to, the Software does not transfer any ownership or
+intellectual-property rights. Any unauthorized use, reproduction, or
+distribution is prohibited.
 
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT. IN NO EVENT SHALL THE OWNER BE
+LIABLE FOR ANY CLAIM, DAMAGES, OR OTHER LIABILITY, WHETHER IN AN ACTION OF
+CONTRACT, TORT, OR OTHERWISE, ARISING FROM, OUT OF, OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+This notice is a pre-publication placeholder reflecting a proprietary /
+all-rights-reserved posture. Final license terms are subject to the Owner's
+legal review before any public distribution or publication.
+
+For licensing inquiries, contact the Owner: HappyLifeSaaS.

package/README.md

@@ -1,56 +1,95 @@
 # Avorelo
 
-Avorelo is a local-first trust-and-reduction layer for AI coding work, centered on runtime intervention and guided recovery.
-It reduces waste, setup burden, and trust failures at the moment of work, then helps the user continue cleanly and wrap up with confidence.
-
-## Positioning
-- Works locally first. Team integrations can come later.
-- Get value in workflow before you connect anything.
-- Free for individual developers. Valuable from the first session.
-- Avorelo is not a dashboard-first product, governance suite, agent platform, or generic analytics layer.
-- The product center is runtime intervention plus guided recovery.
-- Evidence, reports, usage visibility, and commands matter because they support trust, proof of value, and re-entry.
-
-## Primary Docs
-- Install and activation: `docs/INSTALL.md`
-- Activation flow details: `docs/ACTIVATION.md`
-- Public website activation copy: `docs/WEBSITE-ACTIVATION-COPY.md`
-- Distribution truth: `node bin/avorelo public-distribution --json`
-- Production web source-of-record decision: `docs/AVORELO-PRODUCTION-WEB-DECISION.md`
-- Public website source-of-record and deploy contract: `docs/AVORELO-PUBLIC-WEBSITE.md`
-- Live rollout status: see `docs/AVORELO-DOMAIN-DEPLOYMENT.md`
-- Wasp hosting recommendation: `docs/AVORELO-WASP-HOSTING.md`
-
-## Distribution Status
-
-> **Distribution status: ready to publish, verification pending.** `npx avorelo@latest activate` is the public install command we are preparing for npm. Do not treat it as a verified live install path until npm publication and public smoke verification pass.
->
-> Current verified path: `npm run avorelo:activate` (from this repository) or `node bin/avorelo activate`.
->
-> Run `node bin/avorelo public-distribution --json` to see current distribution truth status.
-
-## Public Brand
-- Product name: `Avorelo`
-- CLI name: `avorelo`
-- Target public activation command: `npx avorelo@latest activate`
-- Repo-local activation command: `npm run avorelo:activate`
-- Public site target: `https://avorelo.com`
-- Public website source-of-record: `apps/public-web/`
-- Support: `support@avorelo.com`
-
-## First-Use Path
-
-> Use the public `npx` commands only after npm publication is verified. Until then, use `npm run avorelo:activate` from this repository.
-
-1. Open a terminal inside the project where you use Claude Code, Codex, VS Code, Cursor, or Windsurf.
-2. Run `npx avorelo@latest activate` after npm publication is verified.
-3. If you already have an account token, optionally run `npx avorelo@latest activate --connect <token>` after npm publication is verified.
-4. Continue in local/free mode even if account connection is skipped or fails.
-5. Let Avorelo stay quiet unless it needs to intervene, guide recovery, or support wrap-up and re-entry.
+**AI Work Control.** Avorelo runs *around* your AI coding tool. It does not generate code — it keeps the
+work focused, keeps secrets out of the model and out of cloud, and saves proof of what actually happened,
+locally.
 
-## License
-- MIT
+> Status: **private alpha** (`0.2.0`). Local-first and deterministic. See the limitations below.
+
+## Quickstart
+
+No signup, no cloud account, no credentials, no network required.
+
+```
+npx avorelo@latest activate        # detect your project, set up local state, start getting value
+npx avorelo@latest status          # what's the workspace state? what's next?
+npx avorelo@latest run "run tests" # run your first focused task
+npx avorelo@latest control-center  # read-only local operator view
+```
+
+Run `npx avorelo@latest activate` to start with the latest validated Avorelo CLI.
+Global install: `npm install -g avorelo` — then run `avorelo doctor` to check for updates.
+
+`activate` writes only local metadata under `.avorelo/` (gitignored) — no source, env, or secrets.
+`status` always tells you the next command. `readiness` is the *canonical phase gate* (most meaningful
+against the Avorelo repo itself); `status` is the per-workspace readiness signal for your own repo.
+
+## What it does
+
+One command starts a focused session and runs a coherent, local-first flow:
+
+```
+avorelo run "fix the login redirect bug in src/auth" --target .
+```
+
+That single command:
+
+1. **Routes** the task through a deterministic **Secret Boundary** — a pasted credential is detected and
+   never printed, persisted, or sent to the model; an unsafe task is blocked.
+2. Starts a **session** around whatever AI coding tool you already use.
+3. Compiles a **bounded, source-aware context** (references, never raw dumps).
+4. Carries forward **next-run continuity** so the next session resumes safely.
+5. Records **token & cost evidence** — honestly labelled `measured` / `imported` / `estimated` /
+   `inferred` / `unavailable`. Unavailable is never reported as zero, and numbers are never fabricated.
+6. Builds a **proof report** — savings are **refused** unless there is comparative evidence to back them.
+7. Updates a **value ledger** of compact, confidence-labelled cards.
+8. Prepares a **sanitized metadata sync** — **dry-run only**, local queue, no network.
 
-## Support
+Everything is written locally under `.avorelo/`. See it all in one read-only view:
+
+```
+avorelo control-center --target .
+```
+
+## Other commands
+
+| Command | What it does |
+|---|---|
+| `avorelo run "<task>"` | The runtime product flow above |
+| `avorelo control-center` | Read-only local view of all session/proof/value state |
+| `avorelo open` | Local receipts dashboard (HTML/text/json) |
+| `avorelo readiness` | Canonical readiness gate for this workspace |
+| `avorelo secret-boundary scan` | Detect + redact secrets in content (local, no network) |
+| `avorelo context compile "<task>"` | Show the bounded context packet |
+| `avorelo report build` · `avorelo value cards` | Proof report · value cards |
+| `avorelo loop check "<task>"` | Pre-flight readiness check for AI loop |
+| `avorelo loop start "<task>"` | Start a bounded AI loop |
+| `avorelo loop latest` | Show the most recent loop result |
+| `avorelo loop resume` | Display continuation plan for latest loop |
+| `avorelo loop doctor` | Check environment readiness for looping |
+| `avorelo --version` · `avorelo --help` | Version · full command list |
+
+## Principles
+
+- **Local-first.** No login and no network are required to run the core flow. Only sanitized **metadata
+  projections** are ever eligible for cloud sync, and v1 ships dry-run only.
+- **Secrets stay out.** Detection happens before context, redaction before the model, blocking before an
+  unsafe action. Durable artifacts hold safe references, never raw secret values.
+- **Evidence over assertion.** Confidence labels are mandatory; savings are refused without evidence;
+  "done" requires real proof, not a label.
+
+## Requirements
+
+Node.js >= 24.
+
+## Current Limitations
+
+- Cloud sync is **dry-run + local-queue only** — no live credentialed transmission in this version.
+- No hosted dashboard; no billing or pricing active.
+
+## License
 
-For customer support and activation help, contact `support@avorelo.com`.
+**Proprietary — all rights reserved.** Copyright (c) 2026 HappyLifeSaaS. This software is not open source.
+No permission is granted to use, copy, modify, distribute, or sell it except under a separate written
+agreement with the Owner. See [`LICENSE`](LICENSE). `package.json` declares `"license": "UNLICENSED"`.
+This posture is a pre-publication placeholder pending final legal review.

package/bin/avorelo.mjs

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+// Avorelo CLI entry point for npm package distribution.
+// Loads the pre-built JS bundle so it works inside node_modules.
+import { fileURLToPath, pathToFileURL } from "node:url";
+import { resolve, dirname } from "node:path";
+const dist = resolve(dirname(fileURLToPath(import.meta.url)), "..", "dist", "avorelo.mjs");
+await import(pathToFileURL(dist).href);