boxglow 0.5.2 → 0.6.1

package/examples/notes-app/boxglow.json

@@ -39,7 +39,10 @@
       "collapsed": false,
       "artifacts": [],
       "activity": null,
-      "decisions": []
+      "decisions": [],
+      "scope": {
+        "acceptance": "The released URL works end to end (B5)"
+      }
     },
     "ZMFSNdn0cY": {
       "id": "ZMFSNdn0cY",
@@ -68,14 +71,17 @@
       "status": "gray",
       "assigneeIds": [],
       "position": {
-        "x": 667.1999999999998,
+        "x": 624,
         "y": 76
       },
       "collapsed": true,
       "artifacts": [],
       "activity": null,
       "decisions": [],
-      "category": "build"
+      "category": "build",
+      "scope": {
+        "acceptance": "All API boxes done and the deployed URL answers (B14)"
+      }
     },
     "3u5hKihF4D": {
       "id": "3u5hKihF4D",
@@ -86,14 +92,17 @@
       "status": "gray",
       "assigneeIds": [],
       "position": {
-        "x": 1201.1999999999996,
+        "x": 1128,
         "y": 76
       },
       "collapsed": true,
       "artifacts": [],
       "activity": null,
       "decisions": [],
-      "category": "ui"
+      "category": "ui",
+      "scope": {
+        "acceptance": "All screens done and bundled (B18)"
+      }
     },
     "0fkP95FsUN": {
       "id": "0fkP95FsUN",
@@ -104,14 +113,17 @@
       "status": "gray",
       "assigneeIds": [],
       "position": {
-        "x": 1741.7999999999993,
+        "x": 1632,
         "y": 76
       },
       "collapsed": true,
       "artifacts": [],
       "activity": null,
       "decisions": [],
-      "category": "ops"
+      "category": "ops",
+      "scope": {
+        "acceptance": "E2E report green, guide written, production deployed (B19-B21)"
+      }
     },
     "LYc11K8ruJ": {
       "id": "LYc11K8ruJ",
@@ -139,7 +151,7 @@
       "status": "white",
       "assigneeIds": [],
       "position": {
-        "x": 719.9999999999998,
+        "x": 624,
         "y": 76
       },
       "collapsed": false,
@@ -156,8 +168,8 @@
       "status": "white",
       "assigneeIds": [],
       "position": {
-        "x": 719.9999999999998,
-        "y": 270
+        "x": 624,
+        "y": 460
       },
       "collapsed": false,
       "artifacts": [],
@@ -173,7 +185,7 @@
       "status": "white",
       "assigneeIds": [],
       "position": {
-        "x": 1372.7999999999995,
+        "x": 1128,
         "y": 76
       },
       "collapsed": false,
@@ -207,7 +219,7 @@
       "status": "white",
       "assigneeIds": [],
       "position": {
-        "x": 713.3999999999997,
+        "x": 624,
         "y": 76
       },
       "collapsed": false,
@@ -224,7 +236,7 @@
       "status": "gray",
       "assigneeIds": [],
       "position": {
-        "x": 1306.7999999999995,
+        "x": 1128,
         "y": 76
       },
       "collapsed": false,
@@ -235,7 +247,10 @@
         "note": "Indexing titles and bodies with SQLite FTS5",
         "since": "2026-10-03T14:45:46.115Z"
       },
-      "decisions": []
+      "decisions": [],
+      "scope": {
+        "acceptance": "Searching a word in a title or body returns the note; the FTS index is rebuilt on write (unit tests in src/api/search.test.ts)"
+      }
     },
     "TH10H5-u24": {
       "id": "TH10H5-u24",
@@ -246,8 +261,8 @@
       "status": "black",
       "assigneeIds": [],
       "position": {
-        "x": 713.3999999999997,
-        "y": 270
+        "x": 624,
+        "y": 476
       },
       "collapsed": false,
       "artifacts": [],
@@ -270,7 +285,10 @@
           "askedAt": "2026-10-03T14:45:46.216Z",
           "context": "Magic link: no password to store, needs an email sender (about 2 days). GitHub OAuth: fastest for developers, excludes non-developers (about 1 day). Both: covers everyone, about 4 days and two flows to test. The choice decides what the sign-in screen looks like."
         }
-      ]
+      ],
+      "scope": {
+        "acceptance": "A user can sign in with the chosen method and the session survives a reload; unauthenticated requests get 401"
+      }
     },
     "22rKT8w03M": {
       "id": "22rKT8w03M",
@@ -281,13 +299,16 @@
       "status": "black",
       "assigneeIds": [],
       "position": {
-        "x": 1886.9999999999993,
+        "x": 1632,
         "y": 76
       },
       "collapsed": false,
       "artifacts": [],
       "activity": null,
-      "decisions": []
+      "decisions": [],
+      "scope": {
+        "acceptance": "GET /notes on the deployed URL returns 200 with the seed data; the deploy is repeatable from CI"
+      }
     },
     "YidubvffQz": {
       "id": "YidubvffQz",
@@ -305,7 +326,10 @@
       "artifacts": [],
       "activity": null,
       "decisions": [],
-      "dueDate": "2026-10-20"
+      "dueDate": "2026-10-20",
+      "scope": {
+        "acceptance": "A note can be created, edited and saved through the API; autosave within 2 s of the last keystroke"
+      }
     },
     "XDtu3zwWAn": {
       "id": "XDtu3zwWAn",
@@ -317,12 +341,15 @@
       "assigneeIds": [],
       "position": {
         "x": 120,
-        "y": 296
+        "y": 524
       },
       "collapsed": false,
       "artifacts": [],
       "activity": null,
-      "decisions": []
+      "decisions": [],
+      "scope": {
+        "acceptance": "The list shows the latest notes first and the search box filters through the Search API"
+      }
     },
     "xYvOHBC1DN": {
       "id": "xYvOHBC1DN",
@@ -334,12 +361,15 @@
       "assigneeIds": [],
       "position": {
         "x": 120,
-        "y": 516
+        "y": 956
       },
       "collapsed": false,
       "artifacts": [],
       "activity": null,
-      "decisions": []
+      "decisions": [],
+      "scope": {
+        "acceptance": "Sign-in works with the method chosen in B13 and redirects back to the list"
+      }
     },
     "uZTNlTes5s": {
       "id": "uZTNlTes5s",
@@ -350,13 +380,16 @@
       "status": "black",
       "assigneeIds": [],
       "position": {
-        "x": 680.3999999999999,
+        "x": 624,
         "y": 76
       },
       "collapsed": false,
       "artifacts": [],
       "activity": null,
-      "decisions": []
+      "decisions": [],
+      "scope": {
+        "acceptance": "npm run build produces dist/web under 500 KB gzipped and the app loads from it"
+      }
     },
     "yxW1zNrZz8": {
       "id": "yxW1zNrZz8",
@@ -373,7 +406,10 @@
       "collapsed": false,
       "artifacts": [],
       "activity": null,
-      "decisions": []
+      "decisions": [],
+      "scope": {
+        "acceptance": "Create, search, edit and sign-in flows pass in Chromium; the report is attached to the release"
+      }
     },
     "lBs6ymPFkU": {
       "id": "lBs6ymPFkU",
@@ -385,12 +421,15 @@
       "assigneeIds": [],
       "position": {
         "x": 120,
-        "y": 296
+        "y": 508
       },
       "collapsed": false,
       "artifacts": [],
       "activity": null,
-      "decisions": []
+      "decisions": [],
+      "scope": {
+        "acceptance": "A new user can create a note and find it again by following the guide only"
+      }
     },
     "w5GL5rLmcl": {
       "id": "w5GL5rLmcl",
@@ -401,13 +440,16 @@
       "status": "black",
       "assigneeIds": [],
       "position": {
-        "x": 673.7999999999998,
+        "x": 624,
         "y": 76
       },
       "collapsed": false,
       "artifacts": [],
       "activity": null,
-      "decisions": []
+      "decisions": [],
+      "scope": {
+        "acceptance": "The production URL serves the built app against the deployed API; rollback is documented"
+      }
     }
   },
   "ports": {
@@ -427,7 +469,11 @@
       "name": "Released notes app (URL)",
       "description": "",
       "required": true,
-      "artifacts": []
+      "artifacts": [],
+      "expect": {
+        "kind": "url",
+        "hint": "https://notes.example.com"
+      }
     },
     "PSs2GnRQRn": {
       "id": "PSs2GnRQRn",
@@ -491,7 +537,11 @@
       "name": "API (src/api, deployed)",
       "description": "",
       "required": true,
-      "artifacts": []
+      "artifacts": [],
+      "expect": {
+        "kind": "url",
+        "hint": "https://notes-api.example.workers.dev"
+      }
     },
     "LZ1_Z0bw-y": {
       "id": "LZ1_Z0bw-y",
@@ -500,7 +550,11 @@
       "name": "Web app (src/web, built)",
       "description": "",
       "required": true,
-      "artifacts": []
+      "artifacts": [],
+      "expect": {
+        "kind": "dir",
+        "hint": "dist/web"
+      }
     },
     "tUS4gnPoks": {
       "id": "tUS4gnPoks",
@@ -509,7 +563,11 @@
       "name": "Released notes app (URL)",
       "description": "",
       "required": true,
-      "artifacts": []
+      "artifacts": [],
+      "expect": {
+        "kind": "url",
+        "hint": "https://notes.example.com"
+      }
     },
     "kRGZ8bJsm_": {
       "id": "kRGZ8bJsm_",
@@ -746,7 +804,11 @@
       "name": "Search API (src/api/search.ts)",
       "description": "",
       "required": true,
-      "artifacts": []
+      "artifacts": [],
+      "expect": {
+        "kind": "file",
+        "hint": "src/api/search.ts"
+      }
     },
     "sbj2_geCFp": {
       "id": "sbj2_geCFp",
@@ -764,7 +826,11 @@
       "name": "Auth (src/api/auth.ts)",
       "description": "",
       "required": true,
-      "artifacts": []
+      "artifacts": [],
+      "expect": {
+        "kind": "file",
+        "hint": "src/api/auth.ts"
+      }
     },
     "icdYMYD9rs": {
       "id": "icdYMYD9rs",
@@ -782,7 +848,11 @@
       "name": "API (src/api, deployed)",
       "description": "",
       "required": true,
-      "artifacts": []
+      "artifacts": [],
+      "expect": {
+        "kind": "url",
+        "hint": "https://notes-api.example.workers.dev"
+      }
     },
     "i_49kXPJfx": {
       "id": "i_49kXPJfx",
@@ -809,7 +879,11 @@
       "name": "Editor (src/web/Editor.tsx)",
       "description": "",
       "required": true,
-      "artifacts": []
+      "artifacts": [],
+      "expect": {
+        "kind": "file",
+        "hint": "src/web/Editor.tsx"
+      }
     },
     "h-iarMzqdp": {
       "id": "h-iarMzqdp",
@@ -836,7 +910,11 @@
       "name": "List (src/web/List.tsx)",
       "description": "",
       "required": true,
-      "artifacts": []
+      "artifacts": [],
+      "expect": {
+        "kind": "file",
+        "hint": "src/web/List.tsx"
+      }
     },
     "LpjkcfJmGt": {
       "id": "LpjkcfJmGt",
@@ -863,7 +941,11 @@
       "name": "Sign-in (src/web/SignIn.tsx)",
       "description": "",
       "required": true,
-      "artifacts": []
+      "artifacts": [],
+      "expect": {
+        "kind": "file",
+        "hint": "src/web/SignIn.tsx"
+      }
     },
     "YS3uMOQeJ9": {
       "id": "YS3uMOQeJ9",
@@ -881,7 +963,11 @@
       "name": "Web app (src/web, built)",
       "description": "",
       "required": true,
-      "artifacts": []
+      "artifacts": [],
+      "expect": {
+        "kind": "dir",
+        "hint": "dist/web"
+      }
     },
     "XW_sE-OnYM": {
       "id": "XW_sE-OnYM",
@@ -917,7 +1003,11 @@
       "name": "Test report (e2e/report.html)",
       "description": "",
       "required": true,
-      "artifacts": []
+      "artifacts": [],
+      "expect": {
+        "kind": "file",
+        "hint": "e2e/report.html"
+      }
     },
     "SgY1T3yM5i": {
       "id": "SgY1T3yM5i",
@@ -944,7 +1034,11 @@
       "name": "Guide (docs/guide.md)",
       "description": "",
       "required": true,
-      "artifacts": []
+      "artifacts": [],
+      "expect": {
+        "kind": "doc",
+        "hint": "docs/guide.md"
+      }
     },
     "o5XAY1mhi6": {
       "id": "o5XAY1mhi6",
@@ -962,7 +1056,11 @@
       "name": "Released notes app (URL)",
       "description": "",
       "required": true,
-      "artifacts": []
+      "artifacts": [],
+      "expect": {
+        "kind": "url",
+        "hint": "https://notes.example.com"
+      }
     },
     "5wPahGjQb0": {
       "id": "5wPahGjQb0",
@@ -1517,11 +1615,11 @@
   "terminals": {
     "in": {
       "x": 0,
-      "y": 165
+      "y": 280
     },
     "out": {
-      "x": 2728.999999999999,
-      "y": 178
+      "x": 2576,
+      "y": 293
     }
   },
   "log": [

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "boxglow",
   "private": false,
-  "version": "0.5.2",
+  "version": "0.6.1",
   "type": "module",
   "description": "See at a glance what your AI agents and your team are working on: tasks as input/output boxes that go from BlackBox to WhiteBox. Web app + CLI, one boxglow.json in your repo.",
   "scripts": {
@@ -12,27 +12,41 @@
     "e2e": "bash e2e/run.sh",
     "test:watch": "vitest",
     "typecheck": "tsc -b",
-    "build:cli": "esbuild cli/main.ts --bundle --loader:.md=text --platform=node --format=esm --target=node18 --external:@modelcontextprotocol/sdk --external:zod --outfile=bin/boxglow.js --banner:js='#!/usr/bin/env node'",
+    "build:cli": "esbuild cli/entry.ts --bundle --loader:.md=text --platform=node --format=esm --target=node18 --external:@modelcontextprotocol/sdk --external:zod --outfile=bin/boxglow.js --banner:js='#!/usr/bin/env node'",
     "prepare": "npm run build:cli",
     "prepublishOnly": "npm run build",
-    "build:pages": "tsc -b && VITE_BASE=/ vite build --outDir dist-pages && npm run build:cli",
+    "build:pages": "tsc -b && VITE_BASE=/ vite build --outDir dist-pages && npm run build:cli && npm run build:legal",
     "deploy:pages": "npm run build:pages && npx --yes wrangler@4 pages deploy dist-pages --project-name=boxglow --commit-dirty=true",
     "waitlist:list": "npx --yes wrangler@4 kv key list --binding WAITLIST --prefix email: --remote",
     "waitlist:get": "npx --yes wrangler@4 kv key get --binding WAITLIST --remote",
-    "build:vscode": "npm run build && rm -rf vscode/media && cp -r dist vscode/media && rm -rf vscode/media/waitlist && cp docs/logo/boxglow-128.png vscode/media/icon-128.png && cd vscode && npm run compile"
+    "build:vscode": "npm run build && rm -rf vscode/media && cp -r dist vscode/media && rm -rf vscode/media/waitlist && cp docs/logo/boxglow-128.png vscode/media/icon-128.png && cd vscode && npm run compile",
+    "build:legal": "node scripts/build-legal.mjs --out dist-pages",
+    "build:hosted": "esbuild cli/hosted.ts --bundle --loader:.md=text --platform=node --format=esm --target=es2022 --alias:node:fs=./cli/shims/node-fs.ts --alias:node:os=./cli/shims/node-os.ts --alias:node:child_process=./cli/shims/node-child_process.ts --alias:node:http=./cli/shims/node-http.ts --outfile=dist/hosted-mcp.mjs"
   },
   "dependencies": {
+    "@codemirror/commands": "^6.11.1",
+    "@codemirror/lang-markdown": "^6.5.2",
+    "@codemirror/language": "^6.13.1",
+    "@codemirror/state": "^6.7.6",
+    "@codemirror/view": "^6.43.14",
+    "@lezer/common": "^1.5.3",
+    "@lezer/markdown": "^1.8.0",
     "@modelcontextprotocol/sdk": "^1.32.0",
+    "dompurify": "^3.4.17",
+    "marked": "^18.1.1",
+    "smol-toml": "^1.9.1",
     "zod": "^4.6.5"
   },
   "devDependencies": {
     "@tailwindcss/vite": "^4.3.3",
+    "@types/dompurify": "^3.0.5",
     "@types/node": "^26.6.3",
     "@types/react": "^19.3.0",
     "@types/react-dom": "^19.3.0",
     "@vitejs/plugin-react": "^6.1.1",
     "@xyflow/react": "^12.12.0",
     "esbuild": "^0.28.2",
+    "fake-indexeddb": "^6.2.6",
     "idb-keyval": "^6.3.0",
     "nanoid": "^6.0.1",
     "react": "^19.3.0",