constellai 0.3.0

package/bin/worker.mjs

@@ -0,0 +1,142 @@
+// Headless 24/7 runner + workspace file-watcher. Runs independent of any browser, alongside the web
+// server. Self-contained: imports only node built-ins + chokidar and talks to the running server over
+// HTTP — so it ships in the compiled distribution with no `src/` source. Started by:
+//   - bin/constella.mjs (the published CLI launch), and
+//   - scripts/start-all.mjs (dev `pnpm start`).
+import { homedir } from "node:os";
+import { join, relative, sep, isAbsolute, resolve } from "node:path";
+import { setMaxListeners } from "node:events";
+import chokidar from "chokidar";
+
+// Raise Node's default 10-listener ceiling: undici registers a per-request "terminated" listener on
+// its shared internal `[Fetch]` controller, so the tick + telegram + sync fetches trip a benign
+// MaxListenersExceededWarning under load. Bounded (not 0) so a real leak still surfaces.
+setMaxListeners(64);
+
+const BASE = process.env.CONSTELLA_BASE_URL ?? "http://localhost:3000";
+const SECRET = process.env.CONSTELLA_WORKER_SECRET ?? "";
+const INTERVAL = Number(process.env.CONSTELLA_WORKER_INTERVAL_MS ?? 60_000);
+// Anchor a relative CONSTELLA_HOME to the launch dir (INIT_CWD), exactly like the app's
+// resolveRuntimePath — otherwise the worker watches a different tree than the app reads/writes.
+const _rawHome = process.env.CONSTELLA_HOME;
+const HOME = _rawHome
+  ? (isAbsolute(_rawHome) ? _rawHome : resolve(process.env.INIT_CWD || process.cwd(), _rawHome))
+  : join(homedir(), ".constella");
+const ORGS = join(HOME, "organizations");
+
+// SSRF / secret-exfil guard: the worker attaches the privileged x-worker-secret to every call, so it
+// must only ever talk to the local server. Whoever controls the env (systemd unit, Docker env, shell)
+// could otherwise point CONSTELLA_BASE_URL at an attacker host and harvest the secret. The launcher
+// always sets BASE=http://127.0.0.1:<port> (loopback even in vps/portable), so loopback-only breaks
+// nothing legitimate; a genuine remote worker must opt in explicitly.
+const ALLOW_REMOTE = process.env.CONSTELLA_ALLOW_REMOTE_WORKER_BASE_URL === "1";
+let baseHost = "";
+try { baseHost = new URL(BASE).hostname; }
+catch { console.error("✖ Invalid CONSTELLA_BASE_URL:", BASE); process.exit(1); }
+const isLoopback = ["localhost", "127.0.0.1", "::1", "[::1]"].includes(baseHost);
+if (!isLoopback && !ALLOW_REMOTE) {
+  console.error(`✖ Refusing to send the worker secret to a non-loopback host (${baseHost}). Set CONSTELLA_ALLOW_REMOTE_WORKER_BASE_URL=1 to override.`);
+  process.exit(1);
+}
+if (!isLoopback && ALLOW_REMOTE && new URL(BASE).protocol !== "https:") {
+  console.warn(`• CONSTELLA_BASE_URL is a remote http:// host (${baseHost}) — the worker secret will travel in cleartext. Use https://.`);
+}
+const headers = (SECRET && (isLoopback || ALLOW_REMOTE)) ? { "x-worker-secret": SECRET } : {};
+
+/* ---- 24/7 tick ---- */
+async function tick() {
+  try {
+    const res = await fetch(BASE + "/api/cron/tick", { method: "POST", headers });
+    const body = await res.json().catch(() => ({}));
+    console.log(new Date().toISOString(), "tick", res.status, JSON.stringify(body).slice(0, 200));
+  } catch (e) {
+    console.error(new Date().toISOString(), "tick failed:", e?.message ?? e);
+  }
+}
+
+/* ---- file-watcher: disk -> DB index ---- */
+// Only these prefixes are indexed (skills/agents/docs/PO/reports as Markdown).
+const INDEXED = /^(\.claude\/skills\/.+\.md|\.claude\/agents\/[^/]+\/(Agent|skills)\.md|DOCS\/.+\.md|PO\/.+\.md|Reports\/.+\.md)$/;
+
+function parse(abs) {
+  const r = relative(ORGS, abs);                 // <orgId>/workspace/<rel...>
+  if (r.startsWith("..")) return null;
+  const parts = r.split(sep);
+  if (parts.length < 3 || parts[1] !== "workspace") return null;
+  const orgId = parts[0];
+  const rel = parts.slice(2).join("/");
+  if (!INDEXED.test(rel)) return null;
+  return { orgId, rel };
+}
+
+const pending = new Map();
+async function syncFile(orgId, rel, event) {
+  try {
+    const res = await fetch(BASE + "/api/sync/file", {
+      method: "POST",
+      headers: { ...headers, "content-type": "application/json" },
+      body: JSON.stringify({ orgId, rel, event }),
+    });
+    console.log(new Date().toISOString(), "sync", event, rel, res.status);
+  } catch (e) {
+    console.error(new Date().toISOString(), "sync failed:", e?.message ?? e);
+  }
+}
+function schedule(abs, event) {
+  const hit = parse(abs);
+  if (!hit) return;
+  const key = hit.orgId + "::" + hit.rel;
+  clearTimeout(pending.get(key));
+  pending.set(key, setTimeout(() => { pending.delete(key); syncFile(hit.orgId, hit.rel, event); }, 400));
+}
+
+function startWatcher() {
+  const watcher = chokidar.watch(ORGS, {
+    ignoreInitial: true,
+    ignored: /(^|[/\\])(\.git|node_modules)([/\\]|$)/,
+    awaitWriteFinish: { stabilityThreshold: 300, pollInterval: 100 },
+  });
+  watcher
+    .on("add", (p) => schedule(p, "add"))
+    .on("change", (p) => schedule(p, "change"))
+    .on("unlink", (p) => schedule(p, "unlink"))
+    .on("ready", () => console.log("watching", ORGS))
+    .on("error", (e) => console.error("watcher error:", e?.message ?? e));
+}
+
+/* ---- Telegram bot poll (long-poll loop; getUpdates waits ~25s server-side) ---- */
+async function telegramLoop() {
+  for (;;) {
+    try {
+      const res = await fetch(BASE + "/api/telegram/poll", { method: "POST", headers });
+      if (res.status === 401) { await new Promise((r) => setTimeout(r, 30_000)); continue; } // not configured/secret
+      const body = await res.json().catch(() => ({}));
+      if (body?.updates) console.log(new Date().toISOString(), "telegram", body.updates, "update(s)");
+    } catch (e) {
+      console.error(new Date().toISOString(), "telegram poll failed:", e?.message ?? e);
+      await new Promise((r) => setTimeout(r, 5_000));
+    }
+    await new Promise((r) => setTimeout(r, 1_000)); // brief gap between long-polls
+  }
+}
+
+/* ---- wait for the web server before the first tick ---- */
+// The launcher starts us a beat after `next start`, but Next can still be warming up — firing the
+// first tick into a not-yet-listening server printed an alarming "fetch failed". Probe quietly until
+// the server answers (any HTTP status = up), THEN start ticking. Bounded so we never hang forever.
+async function waitForServer() {
+  for (let i = 0; i < 90; i++) {
+    try { await fetch(BASE, { method: "GET" }); return true; } // any response means it's listening
+    catch { await new Promise((r) => setTimeout(r, 1000)); }
+  }
+  return false; // give up after ~90s — tick()'s own error handling takes over
+}
+
+console.log(`Constella worker → tick ${BASE}/api/cron/tick every ${INTERVAL}ms; telegram poll; watching ${ORGS}`);
+startWatcher();
+(async () => {
+  await waitForServer();
+  tick();
+  setInterval(tick, INTERVAL);
+  telegramLoop();
+})();

package/docs/UPDATE.md

@@ -0,0 +1,150 @@
+# 🚀 Updating Constella
+
+[🇧🇷 Português](./pt/UPDATE.md) · [Deep-dive (how it works)](./en/UPDATE.md) · [✦ Constella](../README.md)
+
+![](./assets/divider-orbit.svg)
+
+**Current stable release: `v0.3.0`** — the first clean public release. See what changed in the
+[Changelog](../CHANGELOG.md) (the Update module also shows it inline as “What's new”).
+
+> This is the page the **Update** module's “docs” button opens. It tells you, in plain terms, how to move Constella
+> to a newer version — from the app or the terminal — and how to roll back if you ever need to. Your data
+> (`~/.constella`: database, secrets, login, workspaces) is **always preserved**, and a backup of your `.env` + database
+> is taken **before** any update runs.
+
+Constella checks npm for a newer release, shows you the changelog, and applies the update **the way that fits how it's
+running** — a global install, dev source, `npx`, a native VPS, or a portable USB drive. It never fabricates a “success”
+it didn't earn: the updater writes the real result and the screen reflects it truthfully.
+
+---
+
+## ✦ Update from the app (recommended)
+
+Open the **Update** module (the rocket icon, or `/update`):
+
+1. **Installed → Latest** shows your current version and the newest one on npm, with a `major` / `minor` / `patch` pill.
+2. The line under it tells you **how this copy runs** (global install, dev, VPS, portable…), which decides what the
+   update button can do.
+3. If an update exists, read **“What's new in v…”** — the changelog for that release.
+4. Click **Update now**:
+   - **Global npm install** → Constella updates **in place** in the background. Watch the live status
+     (`running → installed`), then **restart** Constella to load the new version.
+   - **Every other environment** (dev / npx / VPS / portable) → Constella shows you the **exact command** to run in
+     your terminal (it can't safely update those from inside the running web server).
+5. **Check now** re-queries npm immediately (the check is cached for 6 hours otherwise).
+6. The **“Backup saved”** line shows where your `.env` + database were copied before the update.
+
+> Updates pause while an agent is actively working — the button waits so a build is never interrupted mid-flight.
+
+---
+
+## ✦ Update from the terminal
+
+```bash
+# Just check — prints "Constella x.y.z · latest a.b.c"
+constella update --check
+
+# Check + apply (global install path)
+constella update
+```
+
+- `--check` prints the versions and exits.
+- If npm is unreachable, or you're already current, it says so and exits cleanly.
+- If it detects a **source checkout** (a `.git` + `src/`), it tells you to `git pull && pnpm install && pnpm build`.
+- Otherwise it runs `npm install -g constellai@latest`, then asks you to restart.
+
+---
+
+## 🌌 How it updates, per environment
+
+The first match wins. Only a **global npm install** updates itself automatically — everything else hands you the precise
+command, because running it from the web server would be environment-specific.
+
+| Environment | Auto-updates? | What to run |
+| --- | --- | --- |
+| **Global npm install** | ✅ in the background | `npm install -g constellai@latest` (Constella runs this for you) → then restart |
+| **Dev (from source)** | ❌ | `git pull && pnpm install && pnpm build` |
+| **npx** | ❌ | `npx constellai@latest` |
+| **VPS (native service)** | ❌ | `bash scripts/vps-update.sh` (or the curl one-liner below) |
+| **Portable (USB)** | ❌ | `npm install -g constellai@latest` (after a free-space + backup check) |
+
+---
+
+## 🛰️ VPS update
+
+Run **one** of these on the VPS host. Data in `~/.constella` is preserved, and the database migrations run automatically
+on the next boot.
+
+```bash
+# Native install — pull the updater straight from GitHub (no repo checkout needed):
+curl -fsSL https://raw.githubusercontent.com/gabriel7silva/constella/main/scripts/vps-update.sh | bash
+
+# Pin a specific version:
+curl -fsSL https://raw.githubusercontent.com/gabriel7silva/constella/main/scripts/vps-update.sh | bash -s -- 0.2.30
+
+# From a repo checkout:
+bash scripts/vps-update.sh            # → latest on npm
+bash scripts/vps-update.sh 0.2.30     # → a specific version
+
+# Fully manual:
+sudo npm install -g constellai@latest && sudo systemctl restart constella
+```
+
+> **No manual stop needed.** `npm install -g` swaps the package on disk without touching the live process;
+> `systemctl restart constella` cycles in the new version in a ~2–3s blip. Roll back any time by pinning the old
+> version. See **[VPS_MODE](./en/VPS_MODE.md)** for the full service setup.
+
+---
+
+## 💾 Portable (USB drive)
+
+A portable copy checks free space and backs up the drive before updating, then runs the standard global install
+(`npm install -g constellai@latest`). Restart to load the new version. See **[PORTABLE_MODE](./en/PORTABLE_MODE.md)**.
+
+---
+
+## 🛟 Backup & rollback
+
+- **Backup is automatic and first.** Before any update, Constella copies your `.env` and SQLite database (and the
+  WAL/SHM files) to `~/.constella/backups/<timestamp>/`. A copy failure never blocks the update — it's skipped.
+- **Roll back** by reinstalling the previous version:
+  ```bash
+  # Global / portable:
+  npm install -g constellai@<old-version>
+  # VPS:
+  curl -fsSL https://raw.githubusercontent.com/gabriel7silva/constella/main/scripts/vps-update.sh | bash -s -- <old-version>
+  ```
+  Then restart. Your `~/.constella` data is untouched, so you're back exactly where you were. If needed, restore the
+  `.env` / database from the `backups/<timestamp>/` folder taken before the update.
+
+---
+
+## 🌠 Troubleshooting
+
+| Symptom | Likely cause | Fix |
+| --- | --- | --- |
+| “registry unavailable”, no button | Offline / npm down / firewall | Retry later; check you can reach `registry.npmjs.org`. |
+| Latest looks stale | The check is cached 6h | Hit **Check now** (or `constella update --check`). |
+| Global update stuck on “running” | npm still installing or blocked | Wait; if it never resolves, run `npm install -g constellai@latest` by hand. |
+| Update failed (poll: error) | npm exited non-zero (often permissions) | Re-run with the right permissions; roll back with `npm i -g constellai@<current>`. |
+| Still the old version after restart | The old process is still running | Fully stop and relaunch Constella so it re-reads its version. |
+| Dev copy won't auto-update | Intentional | Run `git pull && pnpm install && pnpm build`. |
+
+---
+
+## 🔒 Safety
+
+- **Auth-gated** — the update action requires a logged-in workspace before doing anything.
+- **Backup first, always** — `.env` + the database are copied before any update path.
+- **Fail-closed checks** — the npm/changelog look-ups time out and fail silent; a dead or hostile network can't hang or
+  crash the update screen, it just reports “no update”.
+- **Honest results** — the background updater records the real install exit code; the screen shows `done` / `error`
+  truthfully and never claims a success it didn't get.
+
+---
+
+## ✦ Related
+
+[Português](./pt/UPDATE.md) · [Update — deep-dive](./en/UPDATE.md) · [VPS mode](./en/VPS_MODE.md) ·
+[Portable mode](./en/PORTABLE_MODE.md) · [Installation](./en/INSTALLATION.md) · [Operations](./en/OPERATIONS.md) ·
+[Changelog](../CHANGELOG.md) · [Report an issue](../ISSUE.md)

package/docs/assets/arch-orbit.svg

@@ -0,0 +1,56 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 640 620" width="640" height="620" role="img" aria-label="Constella control plane and its orbiting agent constellation">
+  <defs>
+    <radialGradient id="sky" cx="50%" cy="42%" r="75%">
+      <stop offset="0%" stop-color="#140e33"/>
+      <stop offset="100%" stop-color="#050416"/>
+    </radialGradient>
+    <linearGradient id="hub" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0" stop-color="#a78bfa"/>
+      <stop offset="0.5" stop-color="#22d3ee"/>
+      <stop offset="1" stop-color="#e879f9"/>
+    </linearGradient>
+    <filter id="gl" x="-60%" y="-60%" width="220%" height="220%">
+      <feGaussianBlur stdDeviation="3.5" result="b"/><feMerge><feMergeNode in="b"/><feMergeNode in="SourceGraphic"/></feMerge>
+    </filter>
+  </defs>
+  <rect width="640" height="620" fill="url(#sky)"/>
+
+  <!-- orbit rings -->
+  <g fill="none" stroke="#3b3168" stroke-width="1.2" opacity="0.8">
+    <circle cx="320" cy="320" r="120" stroke-dasharray="4 8"><animateTransform attributeName="transform" type="rotate" from="0 320 320" to="360 320 320" dur="40s" repeatCount="indefinite"/></circle>
+    <circle cx="320" cy="320" r="245" stroke-dasharray="3 10"><animateTransform attributeName="transform" type="rotate" from="360 320 320" to="0 320 320" dur="70s" repeatCount="indefinite"/></circle>
+  </g>
+
+  <!-- spokes -->
+  <g stroke="#22d3ee" stroke-width="0.7" opacity="0.18">
+    <line x1="320" y1="320" x2="320" y2="200"/><line x1="320" y1="320" x2="216" y2="380"/><line x1="320" y1="320" x2="424" y2="380"/>
+    <line x1="320" y1="320" x2="320" y2="75"/><line x1="320" y1="320" x2="129" y2="167"/><line x1="320" y1="320" x2="81" y2="375"/>
+    <line x1="320" y1="320" x2="214" y2="541"/><line x1="320" y1="320" x2="426" y2="541"/><line x1="320" y1="320" x2="559" y2="375"/><line x1="320" y1="320" x2="511" y2="167"/>
+  </g>
+
+  <!-- central control plane -->
+  <g filter="url(#gl)">
+    <polygon points="320,288 352,320 320,352 288,320" fill="url(#hub)"/>
+  </g>
+  <text x="320" y="378" text-anchor="middle" font-family="'Segoe UI',Arial,sans-serif" font-size="14" font-weight="700" fill="#e2e8f0">CONSTELLA</text>
+  <text x="320" y="394" text-anchor="middle" font-family="'Segoe UI',Arial,sans-serif" font-size="9" fill="#64748b" letter-spacing="2">CONTROL PLANE</text>
+
+  <!-- agent nodes -->
+  <g font-family="'Segoe UI',Arial,sans-serif" font-size="11" fill="#cbd5e1" text-anchor="middle">
+    <g><circle cx="320" cy="200" r="6.5" fill="#e879f9" filter="url(#gl)"/><text x="320" y="184">Ada · CEO</text></g>
+    <g><circle cx="216" cy="380" r="6" fill="#e879f9"/><text x="196" y="398">Linus · CTO</text></g>
+    <g><circle cx="424" cy="380" r="6" fill="#22d3ee"/><text x="448" y="398">Donald · PO</text></g>
+    <g><circle cx="320" cy="75" r="6" fill="#22d3ee"/><text x="320" y="60">Margaret · Backend</text></g>
+    <g><circle cx="129" cy="167" r="6" fill="#22d3ee"/><text x="129" y="152">Grace · Frontend</text></g>
+    <g><circle cx="81" cy="375" r="6" fill="#22d3ee"/><text x="78" y="359">Edsger · QA</text></g>
+    <g><circle cx="214" cy="541" r="6" fill="#22d3ee"/><text x="214" y="562">Werner · DevOps</text></g>
+    <g><circle cx="426" cy="541" r="6" fill="#a78bfa"/><text x="426" y="562">Barbara · Docs</text></g>
+    <g><circle cx="559" cy="375" r="6.5" fill="#e879f9" filter="url(#gl)"/><text x="559" y="359">Whitfield · CyberSec</text></g>
+    <g><circle cx="511" cy="167" r="6" fill="#a78bfa"/><text x="511" y="152">Vannevar · Knowledge</text></g>
+  </g>
+
+  <!-- travelling photon on the inner orbit -->
+  <circle r="3.5" fill="#ffffff" filter="url(#gl)">
+    <animateMotion dur="9s" repeatCount="indefinite" path="M 320 200 A 120 120 0 1 1 320 440 A 120 120 0 1 1 320 200"/>
+  </circle>
+</svg>

package/docs/assets/blackhole.svg

@@ -0,0 +1,37 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 360 360" width="360" height="360" role="img" aria-label="black hole — context as gravity">
+  <defs>
+    <radialGradient id="bg" cx="50%" cy="50%" r="60%">
+      <stop offset="0%" stop-color="#0a0820"/>
+      <stop offset="100%" stop-color="#050416"/>
+    </radialGradient>
+    <radialGradient id="core" cx="50%" cy="50%" r="50%">
+      <stop offset="0%" stop-color="#000000"/>
+      <stop offset="70%" stop-color="#000000"/>
+      <stop offset="100%" stop-color="#1a0f3a"/>
+    </radialGradient>
+    <linearGradient id="ring" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0" stop-color="#e879f9"/>
+      <stop offset="0.4" stop-color="#a78bfa"/>
+      <stop offset="0.7" stop-color="#22d3ee"/>
+      <stop offset="1" stop-color="#f59e0b"/>
+    </linearGradient>
+    <filter id="bh" x="-40%" y="-40%" width="180%" height="180%"><feGaussianBlur stdDeviation="4"/></filter>
+  </defs>
+  <rect width="360" height="360" fill="url(#bg)"/>
+  <g transform="translate(180 180)">
+    <g filter="url(#bh)">
+      <ellipse rx="150" ry="44" fill="none" stroke="url(#ring)" stroke-width="10" opacity="0.85">
+        <animateTransform attributeName="transform" type="rotate" from="0" to="360" dur="12s" repeatCount="indefinite"/>
+      </ellipse>
+      <ellipse rx="150" ry="44" fill="none" stroke="url(#ring)" stroke-width="4" opacity="0.5" transform="rotate(60)">
+        <animateTransform attributeName="transform" type="rotate" from="60" to="420" dur="18s" repeatCount="indefinite"/>
+      </ellipse>
+    </g>
+    <circle r="62" fill="url(#core)"/>
+    <circle r="62" fill="none" stroke="#1a0f3a" stroke-width="2"/>
+    <circle r="70" fill="none" stroke="#22d3ee" stroke-width="1" opacity="0.4">
+      <animate attributeName="r" values="64;80;64" dur="5s" repeatCount="indefinite"/>
+      <animate attributeName="opacity" values="0.5;0;0.5" dur="5s" repeatCount="indefinite"/>
+    </circle>
+  </g>
+</svg>

package/docs/assets/divider-orbit.svg

@@ -0,0 +1,23 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1200 28" width="1200" height="28" role="img" aria-label="orbit divider">
+  <defs>
+    <linearGradient id="dl" x1="0" y1="0" x2="1" y2="0">
+      <stop offset="0" stop-color="#0d0a26" stop-opacity="0"/>
+      <stop offset="0.2" stop-color="#60a5fa" stop-opacity="0.55"/>
+      <stop offset="0.5" stop-color="#22d3ee" stop-opacity="0.9"/>
+      <stop offset="0.8" stop-color="#a78bfa" stop-opacity="0.55"/>
+      <stop offset="1" stop-color="#0d0a26" stop-opacity="0"/>
+    </linearGradient>
+    <filter id="g" x="-50%" y="-50%" width="200%" height="200%"><feGaussianBlur stdDeviation="1.5"/></filter>
+  </defs>
+  <line x1="0" y1="14" x2="1200" y2="14" stroke="url(#dl)" stroke-width="1.4"/>
+  <g fill="#e2e8f0">
+    <circle cx="120" cy="14" r="1" opacity="0.6"/>
+    <circle cx="360" cy="14" r="1.2" opacity="0.5"/>
+    <circle cx="840" cy="14" r="1" opacity="0.6"/>
+    <circle cx="1080" cy="14" r="1.2" opacity="0.5"/>
+  </g>
+  <circle cx="0" cy="14" r="3.2" fill="#22d3ee" filter="url(#g)">
+    <animate attributeName="cx" values="120;1080;120" dur="9s" repeatCount="indefinite"/>
+    <animate attributeName="fill" values="#22d3ee;#e879f9;#22d3ee" dur="9s" repeatCount="indefinite"/>
+  </circle>
+</svg>

package/docs/assets/hero-constella.svg

@@ -0,0 +1,72 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1200 340" width="1200" height="340" role="img" aria-label="Constella — a cosmic control plane for autonomous AI agent-companies">
+  <defs>
+    <radialGradient id="space" cx="50%" cy="38%" r="85%">
+      <stop offset="0%" stop-color="#1b1140"/>
+      <stop offset="45%" stop-color="#0d0a26"/>
+      <stop offset="100%" stop-color="#050416"/>
+    </radialGradient>
+    <linearGradient id="title" gradientUnits="userSpaceOnUse" x1="0" y1="0" x2="520" y2="0" spreadMethod="reflect">
+      <stop offset="0" stop-color="#a78bfa"/>
+      <stop offset="0.25" stop-color="#60a5fa"/>
+      <stop offset="0.5" stop-color="#22d3ee"/>
+      <stop offset="0.75" stop-color="#e879f9"/>
+      <stop offset="1" stop-color="#a78bfa"/>
+      <animateTransform attributeName="gradientTransform" type="translate" from="-520 0" to="520 0" dur="6s" repeatCount="indefinite"/>
+    </linearGradient>
+    <linearGradient id="orbitline" x1="0" y1="0" x2="1" y2="0">
+      <stop offset="0" stop-color="#22d3ee" stop-opacity="0"/>
+      <stop offset="0.5" stop-color="#22d3ee" stop-opacity="0.7"/>
+      <stop offset="1" stop-color="#a78bfa" stop-opacity="0"/>
+    </linearGradient>
+    <filter id="glow" x="-30%" y="-30%" width="160%" height="160%">
+      <feGaussianBlur stdDeviation="6" result="b"/>
+      <feMerge><feMergeNode in="b"/><feMergeNode in="SourceGraphic"/></feMerge>
+    </filter>
+    <filter id="soft" x="-50%" y="-50%" width="200%" height="200%">
+      <feGaussianBlur stdDeviation="1.2"/>
+    </filter>
+  </defs>
+
+  <rect width="1200" height="340" fill="url(#space)"/>
+
+  <!-- starfield -->
+  <g fill="#ffffff" filter="url(#soft)">
+    <circle cx="80" cy="60" r="1.4" opacity="0.8"><animate attributeName="opacity" values="0.2;1;0.2" dur="3.1s" repeatCount="indefinite"/></circle>
+    <circle cx="180" cy="120" r="1" opacity="0.5"><animate attributeName="opacity" values="0.5;0.1;0.5" dur="2.4s" repeatCount="indefinite"/></circle>
+    <circle cx="260" cy="40" r="1.2" opacity="0.7"><animate attributeName="opacity" values="0.3;0.9;0.3" dur="4.2s" repeatCount="indefinite"/></circle>
+    <circle cx="340" cy="200" r="1" opacity="0.6"/>
+    <circle cx="120" cy="240" r="1.6" opacity="0.9"><animate attributeName="opacity" values="0.4;1;0.4" dur="3.7s" repeatCount="indefinite"/></circle>
+    <circle cx="430" cy="80" r="1" opacity="0.5"><animate attributeName="opacity" values="0.6;0.15;0.6" dur="2.9s" repeatCount="indefinite"/></circle>
+    <circle cx="520" cy="280" r="1.3" opacity="0.7"/>
+    <circle cx="700" cy="50" r="1.1" opacity="0.6"><animate attributeName="opacity" values="0.2;0.85;0.2" dur="3.3s" repeatCount="indefinite"/></circle>
+    <circle cx="780" cy="150" r="1" opacity="0.5"/>
+    <circle cx="860" cy="60" r="1.5" opacity="0.85"><animate attributeName="opacity" values="0.3;1;0.3" dur="4.6s" repeatCount="indefinite"/></circle>
+    <circle cx="940" cy="220" r="1.1" opacity="0.6"><animate attributeName="opacity" values="0.5;0.1;0.5" dur="2.6s" repeatCount="indefinite"/></circle>
+    <circle cx="1020" cy="100" r="1.3" opacity="0.7"/>
+    <circle cx="1100" cy="180" r="1" opacity="0.5"><animate attributeName="opacity" values="0.2;0.9;0.2" dur="3.9s" repeatCount="indefinite"/></circle>
+    <circle cx="1140" cy="70" r="1.5" opacity="0.85"><animate attributeName="opacity" values="0.4;1;0.4" dur="3.2s" repeatCount="indefinite"/></circle>
+    <circle cx="610" cy="120" r="1" opacity="0.5"/>
+    <circle cx="40" cy="160" r="1.1" opacity="0.6"><animate attributeName="opacity" values="0.6;0.2;0.6" dur="2.7s" repeatCount="indefinite"/></circle>
+    <circle cx="980" cy="40" r="1" opacity="0.5"/>
+    <circle cx="300" cy="290" r="1.2" opacity="0.7"><animate attributeName="opacity" values="0.3;0.95;0.3" dur="4.1s" repeatCount="indefinite"/></circle>
+  </g>
+
+  <!-- orbit with travelling planet -->
+  <g transform="translate(600 250)">
+    <ellipse rx="430" ry="56" fill="none" stroke="url(#orbitline)" stroke-width="1.5" opacity="0.7"/>
+    <circle r="5" fill="#22d3ee" filter="url(#glow)">
+      <animateMotion dur="14s" repeatCount="indefinite" path="M 430 0 A 430 56 0 1 1 -430 0 A 430 56 0 1 1 430 0"/>
+    </circle>
+    <circle r="3" fill="#e879f9" filter="url(#glow)">
+      <animateMotion dur="14s" begin="-7s" repeatCount="indefinite" path="M 430 0 A 430 56 0 1 1 -430 0 A 430 56 0 1 1 430 0"/>
+    </circle>
+  </g>
+
+  <!-- wordmark -->
+  <g text-anchor="middle" font-family="'Segoe UI',Helvetica,Arial,sans-serif">
+    <text x="600" y="150" font-size="92" font-weight="800" letter-spacing="2" fill="url(#title)" filter="url(#glow)">Constella</text>
+    <text x="600" y="150" font-size="92" font-weight="800" letter-spacing="2" fill="url(#title)" opacity="0.9">Constella</text>
+    <text x="600" y="196" font-size="21" fill="#cbd5e1" letter-spacing="3" font-weight="500">✦ ⋆ ｡˚  A COSMIC CONTROL PLANE FOR AUTONOMOUS AI AGENT-COMPANIES  ˚｡ ⋆ ✦</text>
+    <text x="600" y="226" font-size="15" fill="#64748b" letter-spacing="1">Real claude / codex agents that plan, build, review and ship — your machine, your models, your rules.</text>
+  </g>
+</svg>