avorelo 0.3.8 → 0.4.0-rc.2

package/LICENSE

@@ -1,28 +1,21 @@
-Avorelo — Proprietary Software License
-Copyright (c) 2026 HappyLifeSaaS. All rights reserved.
+MIT License
 
-This software and its source code, documentation, and associated materials
-(collectively, the "Software") are proprietary and confidential to HappyLifeSaaS
-(the "Owner").
+Copyright (c) 2026 ClaudeCode Optimizer contributors
 
-No license or right is granted to any person or entity to use, copy, modify,
-merge, publish, distribute, sublicense, sell, or create derivative works of the
-Software, in whole or in part, except under a separate written agreement signed
-by the Owner. In the absence of such an agreement, all rights are reserved.
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
 
-Possession of, or access to, the Software does not transfer any ownership or
-intellectual-property rights. Any unauthorized use, reproduction, or
-distribution is prohibited.
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
 
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
-FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT. IN NO EVENT SHALL THE OWNER BE
-LIABLE FOR ANY CLAIM, DAMAGES, OR OTHER LIABILITY, WHETHER IN AN ACTION OF
-CONTRACT, TORT, OR OTHERWISE, ARISING FROM, OUT OF, OR IN CONNECTION WITH THE
-SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-
-This notice is a pre-publication placeholder reflecting a proprietary /
-all-rights-reserved posture. Final license terms are subject to the Owner's
-legal review before any public distribution or publication.
-
-For licensing inquiries, contact the Owner: HappyLifeSaaS.
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,77 +1,67 @@
 # Avorelo
 
-**AI Work Control.** Avorelo runs *around* your AI coding tool. It does not generate code — it keeps the
-work focused, keeps secrets out of the model and out of cloud, and saves proof of what actually happened,
-locally.
-
-> Version: `0.3.4`. Local-first and deterministic.
-
-## Quickstart
-
-**Recommended: copy the agent prompt.** Visit [avorelo.com](https://avorelo.com), click **Start with AI**, and copy the agent prompt into Claude Code, Codex, or Cursor. The agent handles activation safely.
-
-**Local activation (no account needed):**
-
-```
-npx -y avorelo@latest activate --scope project-wide
-```
-
-**Account-linked activation (optional):**
-
-```
-npx -y avorelo@latest activate --scope project-wide --link-code YOUR_CODE
-```
-
-Generate a short-lived account link code from your [dashboard](https://avorelo.com/dashboard). Codes expire in 15 minutes.
-
-**Other commands:**
-
-```
-npx avorelo@latest status          # workspace state and next step
-npx avorelo@latest doctor          # health check
-npx avorelo@latest preflight       # diagnose environment before activating
-```
-
-`activate` writes only local metadata under `.avorelo/` (gitignored) — no source, env, or secrets.
-
-## What it does
-
-Avorelo automates the operational layer around AI coding sessions:
-
-- **Context** — compiles bounded, source-aware context automatically
-- **Routing** — picks the right model and workflow for the task
-- **Scope** — enforces boundaries on what agents should touch
-- **Safety** — catches drift, risky edits, and unbounded runs; blocks secret leakage
-- **Proof** — creates local receipts of what changed and why
-- **Handoff** — moves work cleanly between sessions and tools
-
-Works with Claude Code, Codex, Cursor, and other AI coding tools. Runs locally. No workflow switch required.
-
-## Commands
-
-| Command | What it does |
-|---|---|
-| `avorelo activate` | Detect workspace, set up local state, verify setup |
-| `avorelo status` | Current workspace state and next step |
-| `avorelo doctor` | Health check |
-| `avorelo preflight` | Environment diagnostics before activation |
-| `avorelo run "<task>"` | Focused session with context, scope, and proof |
-| `avorelo open` | Local receipts dashboard |
-| `avorelo readiness` | Canonical readiness gate |
-| `avorelo --version` | Version |
-
-## Principles
-
-- **Local-first.** No login and no network required for core activation. Cloud sync is opt-in and claim-based.
-- **Secrets stay out.** Detection before context, redaction before the model, blocking before unsafe action.
-- **Evidence over assertion.** Confidence labels are mandatory; savings are refused without evidence.
-
-## Requirements
-
-Node.js >= 24.
+Avorelo is a local-first trust-and-reduction layer for AI coding work, centered on runtime intervention and guided recovery.
+It reduces waste, setup burden, and trust failures at the moment of work, then helps the user continue cleanly and wrap up with confidence.
+
+## Positioning
+- Works locally first. Team integrations can come later.
+- Get value in workflow before you connect anything.
+- Free for individual developers. Valuable from the first session.
+- Avorelo is not a dashboard-first product, governance suite, agent platform, or generic analytics layer.
+- The product center is runtime intervention plus guided recovery.
+- Evidence, reports, usage visibility, and commands matter because they support trust, proof of value, and re-entry.
+
+## Primary Docs
+- Install and activation: `docs/INSTALL.md`
+- Activation flow details: `docs/ACTIVATION.md`
+- Support diagnostics: `docs/SUPPORT-DIAGNOSTICS.md`
+- Public website activation copy: `docs/WEBSITE-ACTIVATION-COPY.md`
+- Distribution truth: `node bin/avorelo public-distribution --json`
+- Production web source-of-record decision: `docs/AVORELO-PRODUCTION-WEB-DECISION.md`
+- Public website source-of-record and deploy contract: `docs/AVORELO-PUBLIC-WEBSITE.md`
+- Live rollout status: see `docs/AVORELO-DOMAIN-DEPLOYMENT.md`
+- Wasp hosting recommendation: `docs/AVORELO-WASP-HOSTING.md`
+
+## Distribution Status
+
+> **Distribution status: ready to publish.** `npx avorelo@latest activate` is the target public install command, pending npm publication verification.
+>
+> Target public commands: `npx avorelo@latest activate` and `npx avorelo@latest activate --connect <token>`. These commands will work once npm publication is verified.
+>
+> Repo-local developer path: `npm run avorelo:activate` (from this repository) or `node bin/avorelo activate`.
+>
+> Run `node bin/avorelo public-distribution --json` to see current distribution truth status.
+
+## Public Brand
+- Product name: `Avorelo`
+- CLI name: `avorelo`
+- Public activation command: `npx avorelo@latest activate`
+- Repo-local activation command: `npm run avorelo:activate`
+- Public site target: `https://avorelo.com`
+- Public website source-of-record: `apps/public-web/`
+- Support: `support@avorelo.com`
+- Compatibility reference only. No partnership or endorsement implied.
+
+## First-Use Path
+
+> Use `npx avorelo@latest activate` in the project where you want Avorelo to run. Use `npm run avorelo:activate` when you are developing Avorelo from this repository.
+
+1. Open a terminal inside the project where you use Claude Code, Codex, VS Code, Cursor, or Windsurf.
+2. Run `npx avorelo@latest activate`.
+3. If you already have an account token, optionally run `npx avorelo@latest activate --connect <token>`.
+4. Continue in local/free mode even if account connection is skipped or fails.
+5. Let Avorelo stay quiet unless it needs to intervene, guide recovery, or support wrap-up and re-entry.
+
+If something does not work, run:
+
+- `npx avorelo@latest support --text`
+- `npx avorelo@latest support --json`
+
+Then review the output before sharing.
 
 ## License
+- MIT
+
+## Support
 
-**Proprietary — all rights reserved.** Copyright (c) 2026 HappyLifeSaaS. This software is not open source.
-No permission is granted to use, copy, modify, distribute, or sell it except under a separate written
-agreement with the Owner. See [`LICENSE`](LICENSE). `package.json` declares `"license": "UNLICENSED"`.
+For customer support and activation help, contact `support@avorelo.com`.

package/bin/avorelo

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+"use strict";
+
+const { main } = require("../scripts/lib/public-cli");
+
+main().catch((error) => {
+  console.error("[avorelo] Error:", error.message);
+  process.exit(1);
+});

package/package.json

@@ -1,157 +1,165 @@
 {
   "name": "avorelo",
-  "version": "0.3.8",
+  "version": "0.4.0-rc.2",
   "private": false,
-  "license": "UNLICENSED",
-  "description": "Avorelo — AI Work Control. One command. Keep using your AI coding tool. Avorelo quietly keeps the work focused and saves proof.",
+  "avoreloDistributionState": "ready_to_publish",
+  "description": "Avorelo local-first activation, safety, and optimization runtime.",
   "homepage": "https://avorelo.com",
-  "bugs": { "url": "https://avorelo.com/contact" },
-  "keywords": ["ai-coding", "coding-agent", "ai-workflow", "developer-tools", "local-first", "ai-safety", "agentic-coding", "proof-of-work", "cli", "typescript"],
-  "type": "module",
-  "engines": {
-    "node": ">=24"
+  "bugs": {
+    "url": "https://avorelo.com",
+    "email": "support@avorelo.com"
   },
   "bin": {
-    "avorelo": "bin/avorelo.mjs"
+    "avorelo": "bin/avorelo"
+  },
+  "publishConfig": {
+    "access": "public"
   },
   "files": [
-    "bin/avorelo.mjs",
-    "dist/avorelo.mjs",
+    "bin/avorelo",
+    "scripts/cco-pretooluse.js",
+    "scripts/cco-posttooluse.js",
+    "scripts/cco-stop.js",
+    "scripts/cco-userprompt-submit.js",
+    "scripts/cco-status.js",
+    "scripts/cco-dashboard.js",
+    "scripts/wuz-doctor.js",
+    "scripts/avorelo-session-collision-guard.js",
+    "scripts/avorelo-workstream-preflight.js",
+    "scripts/lib/**/*.js",
     "README.md",
     "LICENSE"
   ],
   "scripts": {
-    "build": "npx esbuild src/avorelo/surfaces/cli/avorelo.ts --bundle --platform=node --format=esm --outfile=dist/avorelo.mjs --target=node24 --external:better-auth --external:drizzle-orm --external:postgres --external:hono --external:@hono/node-server",
-    "prepack": "npm run build",
-    "worktree:check": "powershell -ExecutionPolicy Bypass -File scripts/check-worktree-safety.ps1",
-    "package:check": "node -e \"const fs=require('fs');const p=require('./package.json');const ok=[];const fail=[];fs.existsSync('dist/avorelo.mjs')?ok.push('dist/avorelo.mjs exists'):fail.push('dist/avorelo.mjs missing');fs.existsSync('bin/avorelo.mjs')?ok.push('bin/avorelo.mjs exists'):fail.push('bin/avorelo.mjs missing');p.files.includes('dist/avorelo.mjs')?ok.push('dist in files'):fail.push('dist not in files');!p.files.some(f=>f.includes('.avorelo'))?ok.push('no .avorelo in files'):fail.push('.avorelo in files');!p.files.some(f=>f.includes('test'))?ok.push('no tests in files'):fail.push('tests in files');!p.files.some(f=>f.includes('artifact'))?ok.push('no artifacts in files'):fail.push('artifacts in files');console.log(JSON.stringify({ok:ok,fail:fail,pass:fail.length===0}));if(fail.length>0)process.exit(1)\"",
-    "start": "node src/avorelo/surfaces/cloud-api/server.ts",
-    "test": "npm run test:local",
-    "test:local": "node --test \"tests/*.test.ts\"",
-    "test:phase": "node --test tests/phase1-foundation.test.ts tests/secret-boundary.test.ts tests/workcontract-routing.test.ts tests/context-compiler.test.ts tests/context-check.test.ts tests/continuity.test.ts tests/token-cost-evidence.test.ts tests/proof-report.test.ts tests/value-ledger.test.ts tests/efficiency-sync.test.ts tests/canonical-readiness.test.ts tests/proof-adapter-pack.test.ts tests/context-pack.test.ts tests/multi-agent-review.test.ts tests/future-executor-adapters.test.ts tests/persistent-adapter-health.test.ts tests/cost-benchmarking.test.ts tests/team-policy.test.ts tests/task-queue.test.ts",
-    "test:integration": "node --test \"tests/*.itest.ts\"",
-    "test:surface": "node --test \"tests/*.stest.ts\"",
-    "test:all": "npm run test:local && npm run test:surface && npm run test:integration",
-    "test:full": "node --test",
-    "test:ci": "npm run build && npm run naming-check && npm run test:local && npm run dogfood:all && npm run readiness:local",
-    "readiness:local": "node src/avorelo/surfaces/cli/avorelo.ts readiness --target .",
-    "cli:local": "node src/avorelo/surfaces/cli/avorelo.ts",
-    "dogfood:all": "npm run dogfood:phase1 && npm run dogfood:secret-boundary && npm run dogfood:workcontract-routing && npm run dogfood:context-compiler && npm run dogfood:context-engineering && npm run dogfood:context-check && npm run dogfood:context-control && npm run dogfood:continuity && npm run dogfood:token-cost && npm run dogfood:proof-report && npm run dogfood:value-ledger && npm run dogfood:efficiency-sync && npm run dogfood:runtime-flow && npm run dogfood:work-intelligence && npm run dogfood:control-center && npm run dogfood:activation && npm run dogfood:core-readiness && npm run dogfood:canonical-readiness && npm run dogfood:migration && npm run dogfood:adapter-secret-boundary && npm run dogfood:architecture-invariants && npm run dogfood:package-safety && npm run dogfood:settings && npm run dogfood:update-channel && npm run dogfood:dogfood-learning && npm run dogfood:dogfood-learning-e2e && npm run dogfood:model-routing-usage && npm run dogfood:tool-adapter-orchestration && npm run dogfood:tool-adapter-usage && npm run dogfood:avorelo-orchestration-e2e && npm run dogfood:real-tool-execution && npm run dogfood:claude-code-adapter && npm run dogfood:codex-adapter && npm run dogfood:tool-adapters:local && npm run dogfood:semgrep-adapter && npm run dogfood:playwright-proof-adapter && npm run dogfood:github-actions-proof-adapter && npm run dogfood:multi-agent-review && npm run dogfood:multi-agent-efficiency && npm run dogfood:avorelo-real-execution-e2e && npm run dogfood:generic-delegated-execution && npm run dogfood:seamless-ux && npm run dogfood:execution-verifier && npm run dogfood:skills-layer && npm run dogfood:control-router-alignment && npm run dogfood:routing-efficiency && npm run dogfood:future-executor-adapters && npm run dogfood:persistent-adapter-health && npm run dogfood:cost-benchmarking && npm run dogfood:team-policy && npm run dogfood:task-queue && npm run dogfood:roadmap-closure && npm run dogfood:artifact-guard",
-    "dogfood": "node src/avorelo/dogfood/slice1.ts",
-    "dogfood:slice2": "node src/avorelo/dogfood/slice2.ts",
-    "dogfood:slice3": "node src/avorelo/dogfood/slice3.ts",
-    "dogfood:slice4": "node src/avorelo/dogfood/slice4.ts",
-    "dogfood:slice5": "node src/avorelo/dogfood/slice5.ts",
-    "dogfood:migration": "node src/avorelo/dogfood/migration.ts",
-    "dogfood:phase1": "node src/avorelo/dogfood/phase1-foundation.ts",
-    "dogfood:secret-boundary": "node src/avorelo/dogfood/secret-boundary.ts",
-    "dogfood:workcontract-routing": "node src/avorelo/dogfood/workcontract-routing.ts",
-    "dogfood:context-compiler": "node src/avorelo/dogfood/context-compiler.ts",
-    "dogfood:context-engineering": "node src/avorelo/dogfood/context-engineering.ts",
-    "dogfood:context-check": "node src/avorelo/dogfood/context-check.ts",
-    "dogfood:continuity": "node src/avorelo/dogfood/continuity.ts",
-    "dogfood:token-cost": "node src/avorelo/dogfood/token-cost.ts",
-    "dogfood:proof-report": "node src/avorelo/dogfood/proof-report.ts",
-    "dogfood:value-ledger": "node src/avorelo/dogfood/value-ledger.ts",
-    "dogfood:efficiency-sync": "node src/avorelo/dogfood/efficiency-sync.ts",
-    "dogfood:runtime-flow": "node src/avorelo/dogfood/runtime-flow.ts",
-    "dogfood:work-intelligence": "node src/avorelo/dogfood/work-intelligence.ts",
-    "dogfood:control-center": "node src/avorelo/dogfood/control-center.ts",
-    "dogfood:core-readiness": "node src/avorelo/dogfood/core-readiness.ts",
-    "dogfood:canonical-readiness": "node src/avorelo/dogfood/canonical-readiness.ts",
-    "dogfood:live": "node tools/live-activation-dogfood-runner.ts",
-    "dogfood:integration": "npm run dogfood:cloud-sync",
-    "dogfood:extended": "npm run dogfood:activation && npm run dogfood:billing && npm run dogfood:connected-flow && npm run dogfood:company-loop && npm run dogfood:control-router && npm run dogfood:model-routing && npm run dogfood:scanners && npm run dogfood:skill-adoption && npm run dogfood:skills-os && npm run dogfood:product-control && npm run dogfood:core && npm run dogfood:founder && npm run dogfood:slice2 && npm run dogfood:slice3 && npm run dogfood:slice4 && npm run dogfood:slice5",
-    "build:site": "node src/avorelo/surfaces/cli/avorelo.ts site --target . --out dist/site",
-    "site:preview": "node src/avorelo/surfaces/cli/avorelo.ts serve --port 3847",
-    "site:check": "node tools/site-check.ts",
-    "dogfood:core": "node src/avorelo/dogfood/core.ts",
-    "dogfood:product-control": "node src/avorelo/dogfood/product-control.ts",
-    "measure:core": "node tools/measure-core.ts",
-    "review:core": "node tools/review-core.ts",
-    "review:references": "node tools/review-references.ts",
-    "review:architecture-deep": "node tools/review-architecture-deep.ts",
-    "audit:old-core-parity": "node tools/audit-old-core-parity.ts",
-    "measure:value": "node tools/measure-value.ts",
-    "adopt:skill-batch": "node tools/adopt-skill-batch.ts",
-    "dogfood:skill-adoption": "node src/avorelo/dogfood/skill-adoption.ts",
-    "dogfood:skills-os": "node src/avorelo/dogfood/skills-os.ts",
-    "skills:registry": "node tools/skills-registry.ts",
-    "skills:route": "node tools/skills-route.ts",
-    "measure:skills-os": "node tools/measure-skills-os.ts",
-    "scanners:run": "node tools/scanners-run.ts",
-    "dogfood:scanners": "node src/avorelo/dogfood/scanners.ts",
-    "route:primitive": "node tools/route-primitive.ts",
-    "dogfood:model-routing": "node src/avorelo/dogfood/model-routing.ts",
-    "dogfood:model-routing-usage": "node src/avorelo/dogfood/model-routing-usage.ts",
-    "dogfood:kernel-model-routing": "node src/avorelo/dogfood/kernel-model-routing.ts",
-    "dogfood:control-router": "node src/avorelo/dogfood/control-router.ts",
-    "dogfood:company-loop": "node src/avorelo/dogfood/company-loop.ts",
-    "control:route": "node tools/route-primitive.ts",
-    "company-loop": "node tools/generate-founder.ts",
-    "generate:founder": "node tools/generate-founder.ts",
-    "skills:outputs": "node tools/collect-skill-outputs.ts",
-    "naming-check": "node tools/naming-check.ts",
-    "avorelo": "node src/avorelo/surfaces/cli/avorelo.ts",
-    "activate": "node src/avorelo/surfaces/cli/avorelo.ts activate",
-    "activation:status": "node src/avorelo/surfaces/cli/avorelo.ts status",
-    "activation:verify": "node src/avorelo/surfaces/cli/avorelo.ts verify",
-    "billing:status": "node -e \"const{buildBillingState}=require('./src/avorelo/capabilities/billing/index.ts');console.log(JSON.stringify(buildBillingState(),null,2))\"",
-    "dogfood:settings": "node src/avorelo/dogfood/settings.ts",
-    "dogfood:update-channel": "node src/avorelo/dogfood/update-channel.ts",
-    "dogfood:dogfood-learning": "node src/avorelo/dogfood/dogfood-learning.ts",
-    "dogfood:dogfood-learning-e2e": "node src/avorelo/dogfood/dogfood-learning-e2e.ts",
-    "dogfood:cloud-sync": "node src/avorelo/dogfood/cloud-sync.ts",
-    "dogfood:activation": "node src/avorelo/dogfood/activation.ts",
-    "dogfood:connected-flow": "node src/avorelo/dogfood/connected-flow.ts",
-    "dogfood:founder": "node src/avorelo/dogfood/founder.ts",
-    "dogfood:billing": "node src/avorelo/dogfood/billing.ts",
-    "webhook:serve": "node src/avorelo/surfaces/cli/avorelo.ts webhook",
-    "cloud:dev": "node src/avorelo/surfaces/cloud-api/server.ts",
-    "db:generate": "npx drizzle-kit generate",
-    "db:migrate": "npx drizzle-kit migrate",
-    "db:studio": "npx drizzle-kit studio",
-    "connected-preview:check": "node tools/connected-preview-check.ts",
-    "dogfood:adapter-secret-boundary": "node src/avorelo/dogfood/adapter-secret-boundary.ts",
-    "dogfood:architecture-invariants": "node src/avorelo/dogfood/architecture-invariants.ts",
-    "dogfood:package-safety": "node src/avorelo/dogfood/package-safety.ts",
-    "dogfood:tool-adapter-orchestration": "node src/avorelo/dogfood/tool-adapter-orchestration.ts",
-    "dogfood:tool-adapter-usage": "node src/avorelo/dogfood/tool-adapter-usage.ts",
-    "dogfood:avorelo-orchestration-e2e": "node src/avorelo/dogfood/avorelo-orchestration-e2e.ts",
-    "evaluate:routing": "node tools/evaluate-routing-fixtures.ts",
-    "dogfood:real-tool-execution": "node src/avorelo/dogfood/real-tool-execution.ts",
-    "dogfood:claude-code-adapter": "node src/avorelo/dogfood/claude-code-adapter.ts",
-    "dogfood:codex-adapter": "node src/avorelo/dogfood/codex-adapter.ts",
-    "dogfood:tool-adapters:local": "node src/avorelo/dogfood/tool-adapters-local.ts",
-    "dogfood:semgrep-adapter": "node src/avorelo/dogfood/semgrep-adapter.ts",
-    "dogfood:playwright-proof-adapter": "node src/avorelo/dogfood/playwright-proof-adapter.ts",
-    "dogfood:github-actions-proof-adapter": "node src/avorelo/dogfood/github-actions-proof-adapter.ts",
-    "dogfood:multi-agent-review": "node src/avorelo/dogfood/multi-agent-review.ts",
-    "dogfood:multi-agent-efficiency": "node src/avorelo/dogfood/multi-agent-efficiency.ts",
-    "dogfood:avorelo-real-execution-e2e": "node src/avorelo/dogfood/avorelo-real-execution-e2e.ts",
-    "dogfood:generic-delegated-execution": "node src/avorelo/dogfood/generic-delegated-execution.ts",
-    "dogfood:seamless-ux": "node src/avorelo/dogfood/seamless-ux.ts",
-    "dogfood:execution-verifier": "node src/avorelo/dogfood/execution-verifier.ts",
-    "dogfood:skills-layer": "node src/avorelo/dogfood/skills-layer.ts",
-    "dogfood:control-router-alignment": "node src/avorelo/dogfood/control-router-alignment.ts",
-    "dogfood:routing-efficiency": "node src/avorelo/dogfood/routing-efficiency.ts",
-    "dogfood:future-executor-adapters": "node src/avorelo/dogfood/future-executor-adapters.ts",
-    "dogfood:persistent-adapter-health": "node src/avorelo/dogfood/persistent-adapter-health.ts",
-    "dogfood:cost-benchmarking": "node src/avorelo/dogfood/cost-benchmarking.ts",
-    "dogfood:team-policy": "node src/avorelo/dogfood/team-policy.ts",
-    "dogfood:task-queue": "node src/avorelo/dogfood/task-queue.ts",
-    "dogfood:roadmap-closure": "node src/avorelo/dogfood/roadmap-closure.ts",
-    "dogfood:artifact-guard": "node src/avorelo/dogfood/artifact-guard.ts",
-    "dogfood:context-control": "node src/avorelo/dogfood/context-control.ts"
+    "test": "node --test --test-timeout=60000 --test-concurrency=4 tests/*.test.js tests/dogfood/*.test.js tests/integration/*.test.js",
+    "brand:check": "node scripts/check-brand-leaks.js",
+    "test:brand": "node scripts/check-brand-leaks.js",
+    "brand:fix": "node scripts/fix-brand-leaks.js --write",
+    "brand:fix:dry-run": "node scripts/fix-brand-leaks.js",
+    "test:task-compiler": "vitest run src/core-flow/task-compiler/task-compiler.test.ts",
+    "test:output-profiles": "vitest run src/output_profiles/output-profiles.test.ts",
+    "build": "npm run public-web:build",
+    "public-web:dev": "npm --prefix apps/public-web run dev",
+    "public-web:build": "npm --prefix apps/public-web run build",
+    "public-web:preview": "npm --prefix apps/public-web run preview",
+    "public-web:check": "npm --prefix apps/public-web run check",
+    "avorelo:activate": "node bin/avorelo activate",
+    "avorelo:doctor": "node bin/avorelo doctor",
+    "avorelo:summary": "node bin/avorelo summary",
+    "avorelo:production-confidence": "node bin/avorelo production-confidence --json",
+    "production-confidence": "node scripts/production-confidence.js --text",
+    "wuz:score": "node scripts/cco-score.js",
+    "cco:init": "node scripts/cco-init.js",
+    "cco:install-helper": "node scripts/cco-install-helper.js",
+    "cco:reuse-cues": "node scripts/cco-reuse-cues.js",
+    "verify:tree": "node scripts/verify-repo-tree.js",
+    "verify:contracts": "node scripts/verify-contracts.js",
+    "verify:tier-matrix": "node scripts/verify-tier-matrix.js",
+    "verify:tier-runtime": "node scripts/verify-tier-runtime.js",
+    "validate:e2e-local": "node scripts/validate-e2e-local.js",
+    "validate:panel-local": "node scripts/validate-panel-local.js",
+    "validate:release-checklist": "node scripts/validate-release-checklist.js",
+    "validate:persona-pack": "node scripts/validate-persona-pack.js",
+    "validate:adapter-conformance": "node scripts/validate-adapter-conformance.js",
+    "validate:cursor-conformance": "node scripts/validate-cursor-conformance.js",
+    "validate:memory-efficiency": "node scripts/validate-memory-efficiency.js",
+    "validate:batch-compact": "node scripts/validate-batch-compact.js",
+    "validate:cloud-unified": "node scripts/validate-cloud-unified.js",
+    "validate:cloud-dashboard-local": "node scripts/validate-cloud-dashboard-local.js",
+    "validate:http-hook": "node scripts/validate-http-hook.js",
+    "validate:voice-alpha": "node scripts/validate-voice-alpha.js",
+    "validate:intel-agent": "node scripts/validate-intel-agent.js",
+    "validate:gh-cli": "node scripts/validate-gh-cli.js",
+    "validate:ccusage-bridge": "node scripts/validate-ccusage-bridge.js",
+    "validate:skill-intake-security": "node scripts/validate-skill-intake-security.js",
+    "validate:outcome-events": "node scripts/validate-outcome-events.js",
+    "validate:proof-system": "node scripts/validate-proof-system.js",
+    "validate:operating-layer": "node scripts/validate-operating-layer.js",
+    "validate:capability-contracts": "node scripts/validate-capability-contracts.js",
+    "validate:context-compiler": "node scripts/validate-context-compiler.js",
+    "validate:run-contract": "node scripts/validate-run-contract.js",
+    "validate:public-narrative": "node scripts/validate-public-narrative.js",
+    "proof:e2e": "node scripts/proof-e2e.js",
+    "validate:runtime-proof": "node scripts/runtime-proof.js",
+    "validate:latency-proof": "node scripts/latency-proof.js",
+    "validate:launch-readiness": "node -e \"const lr = require('./scripts/lib/launch-readiness').buildLaunchReadiness(process.cwd()); if (lr.verdict !== 'LAUNCH_GATE_PASS') { console.error('LAUNCH GATE FAIL:', lr); process.exit(1); } console.log('LAUNCH_GATE_PASS', lr.summary.pass + '/' + lr.summary.total);\"",
+    "validate:capability-ownership": "node scripts/validate-capability-ownership.js",
+    "validate:roadmap-state": "node scripts/validate-roadmap-state-ledger.js",
+    "validate:follow-up-debt": "node scripts/validate-follow-up-debt.js",
+    "validate:roadmap-ownership-reconciliation": "node scripts/validate-roadmap-ownership-reconciliation.js",
+    "validate:validation-registry": "node scripts/validate-validation-registry.js",
+    "validate:session-collision-guard": "node --test tests/session-collision-guard.test.js",
+    "cco:value": "node scripts/cco-value.js",
+    "wuz:agent-security-check": "node scripts/cco-agent-security-check.js",
+    "wuz:activate": "node scripts/wuz-activate.js",
+    "wuz:doctor": "node scripts/wuz-doctor.js",
+    "wuz:summary": "node scripts/wuz-post-run.js",
+    "dev": "wasp start",
+    "start:founder-local": "powershell -ExecutionPolicy Bypass -File app-scripts/start-wuz-local.ps1",
+    "db:start": "wasp start db",
+    "db:migrate": "wasp db migrate-dev",
+    "db:seed": "wasp db seed",
+    "bootstrap:branding": "node app-scripts/bootstrap-branding.mjs",
+    "build:install-artifacts": "node app-scripts/build-install-artifacts.mjs",
+    "verify:install-delivery": "node app-scripts/validate-install-delivery.mjs",
+    "verify:env": "node app-scripts/verify-env.mjs host",
+    "verify:env:wasp": "node app-scripts/verify-env.mjs wasp",
+    "verify:env:prod": "node app-scripts/verify-env.mjs prod",
+    "verify:env:all": "node app-scripts/verify-env.mjs all",
+    "health:repo": "node app-scripts/repo-health-check.mjs",
+    "test:critical-path": "npm --prefix e2e-tests test",
+    "test:e2e": "npm --prefix e2e-tests test",
+    "deploy:railway:setup": "wasp deploy railway setup wuz-beta",
+    "deploy:railway": "wasp deploy railway deploy wuz-beta",
+    "hub:ingest-local": "node scripts/hub-ingest-local.js",
+    "hub:ingest-neon": "FOUNDER_ORG_ID=f731f0be-1854-4f07-967c-096f0a860aee FOUNDER_USER_ID=512d2c69-5aef-4fe2-853f-799d34e9a9d0 node scripts/hub-ingest-local.js",
+    "verify:db-env": "node scripts/verify-db-env.js",
+    "verify:production-foundation": "node scripts/verify-production-foundation.js",
+    "confidence:product": "node scripts/confidence/verify-product-proof.mjs"
   },
+  "workspaces": [".wasp/out/*", ".wasp/out/sdk/wasp"],
   "dependencies": {
-    "@hono/node-server": "^2.0.4",
-    "better-auth": "^1.6.15",
-    "drizzle-orm": "^0.45.2",
-    "hono": "^4.12.25",
-    "postgres": "^3.4.9"
+    "react": "^19.2.1",
+    "react-dom": "^19.2.1",
+    "react-router": "^7.12.0"
   },
   "devDependencies": {
-    "drizzle-kit": "^0.31.10"
+    "@growthbook/growthbook": "^1.6.5",
+    "@growthbook/growthbook-react": "^1.6.5",
+    "@faker-js/faker": "8.3.1",
+    "@hookform/resolvers": "^5.1.1",
+    "@radix-ui/react-accordion": "^1.2.11",
+    "@radix-ui/react-avatar": "^1.1.10",
+    "@radix-ui/react-checkbox": "^1.3.2",
+    "@radix-ui/react-dialog": "^1.1.14",
+    "@radix-ui/react-dropdown-menu": "^2.1.15",
+    "@radix-ui/react-label": "^2.1.7",
+    "@radix-ui/react-progress": "^1.1.7",
+    "@radix-ui/react-select": "^2.2.5",
+    "@radix-ui/react-separator": "^1.1.7",
+    "@radix-ui/react-slot": "^1.2.3",
+    "@radix-ui/react-switch": "^1.2.5",
+    "@radix-ui/react-toast": "^1.2.14",
+    "@tailwindcss/forms": "^0.5.11",
+    "@tailwindcss/typography": "^0.5.19",
+    "@tailwindcss/vite": "^4.1.18",
+    "@types/express": "^5.0.0",
+    "@types/node": "^22.0.0",
+    "@types/react": "^19.2.7",
+    "class-variance-authority": "^0.7.1",
+    "clsx": "^2.1.1",
+    "gpt-tokenizer": "^2.8.1",
+    "lucide-react": "^0.525.0",
+    "prettier": "3.1.1",
+    "prettier-plugin-tailwindcss": "^0.7.2",
+    "prisma": "5.19.1",
+    "react-hook-form": "^7.60.0",
+    "tailwind-merge": "^2.2.1",
+    "tailwindcss": "^4.1.18",
+    "tailwindcss-animate": "^1.0.7",
+    "typescript": "5.8.2",
+    "vite": "^7.0.6",
+    "vitest": "^4.1.2",
+    "zod": "^4.3.6"
   }
 }

package/scripts/README.md

@@ -0,0 +1,40 @@
+# Scripts Surface Status
+
+`scripts/` contains multiple classes of surfaces. They are not all equally central.
+
+## Core runtime entrypoints
+- `cco-session-start.js`
+- `cco-pretooluse.js`
+- `cco-posttooluse.js`
+- `cco-sessionend.js`
+
+These define the central Wuz runtime intervention and guided recovery loop.
+
+## Supporting operator surfaces
+- `cco-status.js`
+- `cco-audit.js`
+- `cco-optimize` equivalent command surfaces
+- `cco-settings.js`
+- `cco-init.js`
+
+These support the product, but they do not replace the runtime center.
+
+## Optional overlays or experiments
+- panel
+- cloud sync
+- batch
+- voice
+- broader validation or experiment scripts
+
+These may remain useful, but they must not redefine the product identity.
+
+## Internal or breadth surfaces
+- intel-related scripts
+- broad validation scaffolding
+- experimental workflow scripts
+
+These should be treated as supporting infrastructure, not as product center.
+
+Canonical references:
+- `../docs/Wuz-Canonical-Runtime-Model.md`
+- `../docs/Wuz-Surface-Taxonomy.md`