JoyOS Lab v1.2 - Mockup Gallery

Recently shipped to staging-next · synced 2026-09-02 (RUN revamp-2886180-1788333530)

revamp-sync delta through fc7145b3 — 75 commits not previously summarized: the local staging-next branch had run ahead of the most recent write-back; this run captured the missing 75 product commits into 5 themed clusters below (ff05518c–4284738c).

STDB auth model — JWT signing retired, SPACETIME_TOKEN is the only auth path: functions/lib/stdb-client.js simplified to authenticate via the SPACETIME_TOKEN env var alone (5ee0b113); the client-side JWT-signing path is fully removed from the auth flow, with a .gitignore update for the dropped creds file (c0654304, 80aec2bc, c4f33f30); src/lib/apiError.ts got a JSON.stringify regression that was reverted (cae01a03, ba22fb20); and the connection-architecture + new-endpoint-workflow docs landed in .claude/ to make the new auth shape the single source of truth (619bb30e).

Marketplace API — list-my-offers + offer lifecycle tests, List-my-offers cleanup: list-my-offers.js auto-committed after auth migration (9137d133); the stale list-my-offers.test.ts was deleted in favor of the JS+source-grep split (15901252); save-offer-draft.test.ts and list-my-offers.test.ts regenerated (725810c5); and archive-offer.test.ts/restore-offer.test.ts added to cover the full CRUD lifecycle (ebd76715).

Listing model — schema-complete coverage extended (slices 7-12 in plan): src/models/Listing.ts iterated to expand schema coverage; the schema-complete test suite now covers 17/32 columns (slug), 16/32 (request_id), 15/32 (inventory_count), 14/32 (currency) as plan status updates rolled in; new tests added and the Listing model adjusted to match (103a6d88, 106dfe0d, 14120054, 5cf10b20, 60ff3bb8, 45d33ba8, 938b3b1d, c0b5100b, a60e9b88, 748bf4cb, f2f0d9d1, e8d54394, bf6d4ba4, db89807d). BaseModel.test.ts is now in the schema-complete sweep as well.

Dev-stack + plans-doc + workflow hygiene: scripts/dev.sh auto-committed three times during the EACCES / WRANGLER_HOME / HOME-override hardening sequence (c5e0d6bf, 58f93709, 3c0bfd90); docs/plans/offer-builder-api-first/00-status.md got three tracking edits as slices 7-12 closed (22dccdbd, 70bc4d96, 539ae959, b34d658d, c65d348e); the Slice 7 cont. status rollups mark slug, request_id, inventory_count, currency DONE; .claude/SKILL.md updated (9fbeed03); the new src/router/creator-studio-file-based-moves.test.ts mirrors a route-table move (151f746c); and a src/pages/zz-sabotage-probe.vue/new.vue pair recorded intent (030f4134, b7722788, 3376a305).

Noise floor — owner-tool / create-mode / permission probes + SUMMARY.md rolls: 29 SUMMARY.md autocommit rolls (ecbc409d through 4284738c); a PROBE-perm-owner-20260830.txt intent file plus a create(tmp-create-mode-string-boolean-probe.txt) created via the edit-test tool (840224c0, f8043455); their follow-up cleanup commits removed both probe files (42b30907, 240d2744); a stray zz-sabotage-probe.vue / create-mode probe pair created then removed (b7722788); and root CLAUDE.md rolled (ff05518c, e4ab837c). These are scaffolding artefacts, not product work.

Offer-Builder Working Correctly plan — continued: 01-product.md trimmed with minor edits (4 insertions, 12 deletions) and a new 02-architecture.md committed (69 lines) as the next draft gate; 00-status.md also updated (16 insertions) — all part of the ongoing Gate 1 (Product) iteration within the offer-builder-fix plan (7a504eb6, 4797b90e, 5af14250). Plan lives in docs/ only — no app code touched.

Offer-Builder Working Correctly plan drafted: a new docs/plans/offer-builder-fix/ plan lays out the problem and DoD for the “Create Offer → marketplace” gap (wizard stuck, save fails, offer never reaches the catalog). Plan introduces a 4-gate flow (Product → Architecture → Program Design → Slice plan) and an explicit Slice 1 tracer-bullet. Status file: 00-status.md shows Gate 1 in progress (Product drafted, revised per Ethan, no mockup folder needed), Gates 2-4 pending (28c7344a, d86077b5, d57d16e9, 97b39768, 28da4bc7, 9f588119). Plan lives in docs/ only — no app code touched.
Mockup-Authoring-Tool scaffold + storyboard-dev iteration: a new .planning/mockup-authoring-tool/ directory started with SPEC.md (parameterized HTML components, event-driven, revisions log, 8-file scaffold: button.js, callout.js, card.js, event-bus.js, parameterized-view.js, revision-logger.js, structured-form.js; 2da9414d, 5ca89e5d, 3740e723, aca069d5, c2ed8285) and .planning/storyboard-dev/ iterated (main.js, package-lock.json; 4a7bcee4); root CLAUDE.md updated with local dev config context (b09a95ba). All in .planning/ only — no app routes or production surfaces touched.
Session-board storyboard v1 + v2 (HeroUI) scaffolds: a first-pass single-file storyboard at .planning/session-board-storyboard.html (f1fec829, 288 lines); a chore scaffold of the v2 file at .planning/session-board-storyboard-v2.html (9b8d7575); and the full v2 HeroUI build out — .planning/storyboard-dev/index.html, package.json, src/main.js, vite.config.js — alongside a 760-line session-board-storyboard-v2.html edit (80e58adf). All three land in .planning/ only; no app routes or production surfaces touched.
c5d56f07 docs(plans): add research-findings page for DEV_AUTH_BYPASS removal
_middleware.js public-endpoint exemption — login-401 regression fixed: functions/_middleware.js was applying requireAuthWithDevBypass to ALL /api/* routes including the login endpoint itself, 401-ing every fresh visitor before the handler ran. Now /api/exchange-token, /api/track-visit, /api/app-version and nine other public endpoints short-circuit the auth check. Pinned with an 84-line Playwright regression suite covering all 10 public endpoints, 8 private endpoints, exact-match boundary, prefix rejection, and case sensitivity (2c94cd0b, 95157e85, 79ab7534).
Dev tooling & docs hygiene: STDB JWT auth scaffolding captured in docs workflow guide (9515c1ab); JWT_SECRET auto-provisioning script added to dev setup (c30eabf2, d55a6992, b51940d1, d1183e0d); offer-builder API-first plan status updated (8a31c0f1); setup-stdb-token.sh dev script added and iterated (e8ebb260); functions middleware / list-my-offers updated (fb8bb4c2); new-endpoint workflow doc added to CLAUDE.md index (93b35abd)
STDB JWT signing removed — auth now uses SPACETIME_TOKEN only: the client-side JWT signing path in the SpacetimeDB auth flow is retired; the Pages Functions and Pages Dev tunnel now authenticate entirely through the SPACETIME_TOKEN environment variable, removing a code path that was producing tokens the client no longer needs to sign (c0654304, 80aec2bc). Companion: list-my-offers.js auto-synced to the new token shape (ef7b2758, 7baf332f); .gitignore updated (c4f33f30); and Purchase.ts/Purchase.test.ts model files auto-committed after the findByListingIds() addition (bd5a429b), with a matching purchase-status.js Pages Function and its source-grep test (f37d87df).
Requirements-wave skill + REQ registry expansion: a new requirements-wave skill shipped (53b5d099) for systematic requirement recording; .claude/SKILL.md updated to reflect the new skill and the joyos-requirements-wave skill (dba7c826, 5a48437e, e7af41d9); a goal-loop-offer-builder.md artifact captured the offer-builder API-first goals (0366d027, 97abba0b); and the src/editproof suite gained sum.ts (b943539d, c0ccfea3).
File-based routing migration continued — creator-studio + learning-lab trees moved: the creator-studio route subtree moved to file-based pages: /creator-studio/payouts (a1984d30), /creator-studio/gratitude and /creator-studio/communities (f2a5f128), /creator-studio/onboarding (b00966c8), and the offer-wizard entry route settled to one canonical name (d839c388); the learning-lab nested tree (layout + discover, library, listing, accelerator, settings) migrated to src/pages/learning-lab/ (39f4b664, files at c97e6085) with a Playwright live-browser pass verifying all 11 migrated routes (ad4d6bc2); a src/pages/CONVENTION.md records the page-folder co-location convention (a89bceb7); MyOffersView links repointed to /creator-studio/offers/new (1f89ab75); and an entry-gate guard extended into a full page-shape guard (7797697e), with a deterministic route-to-page migrator script for mechanical moves (e32560da).
Offer-Builder API-first — Slices 5–14 shipped, plan complete: the server-side create path wired through create-offer.js and useOfferBuilderSync (d656c585 to f7ec169b, ~13 commits), the CRUD round-trip completed via update-offer.js and save-offer-draft.js (f2f16f82 to b02a4a1d, ~22 commits), the Listing model column-add pass reached 29/32 columns (6f17a62a to 026ff24a, ~10 commits), the create_listing reducer + migration 0020 landed (3232f66c to fc6bbc5e, ~10 commits), Purchase.ts/Purchase.test.ts added with findByListingIds() (e85121b3, 7f0e1a4c), ListingView.ts/ListingView.test.ts added for the catalog view-model (a1b9d483, e74dd072), and list-listings.js re-wired through Listing.findActivePublic() (7157e307); the 00-status.md final cleanup recorded COLUMN GAP now 13/32 covered, 19 known-missing, plan fully complete.
Marketplace API trio — middleware auth, request logging, purchase-status endpoint: list-my-offers.js swapped from the dev-only requireAuthWithDevBypass path to prod-equivalent HMAC requireAuth + getCallerIdentity (4eb626c2, 5bb7615b), a body.filters pass-through added to narrow results server-side (eb5654e7), a .toLowerCase() on the email lookup fixed the casing-404 that prior auth was hiding; creator-stats.js and creator-orders.js fixed default imports for Purchase and ListingView (45bb3ee0, 5e9b72a4); a new functions/_middleware.js intercepts every /api/* request with wrapWithLogging, paired with functions/lib/api-logger.js for daily-rotated logs/api-requests.log.YYYY-MM-DD (50MB head-truncation, auth-header redaction, 2KB body preview); and a new purchase-status.js endpoint with its source-grep test covers the purchase state surface (f37d87df).
Edit-test tool rollout + staging ground-truth audit: the edit-test tool (tracked edit-plus-related-test runs) rolled out across the codebase, including intent-recorded dead-file removal (8367611a for src/pages/terms/index.vue, b943539d, c0ccfea3); a live staging audit of Creator Studio refuted the suspected duplicate-page and dropped-route defects (12411da1); test-mirror migration mapping captured (c32a5c4b); and full-suite failure triage notes recorded (d76e6c71).
Dev-stack hardening — Vite 8 + concurrent runner + self-healing hooks: scripts/dev.sh overridden HOME to a writable path and pinned WRANGLER_HOME (EACCES fix), scripts/run-tests.sh inherits HOME from dev.sh, the dev:wrangler script wires vite + wrangler pages dev through concurrently so SPA and Pages Functions start as one process group (934f7355 to 866d71f7, ~8 commits); .claude/hooks/dev-stack-status.sh now self-heals the tunnel + dev stack on every UserPrompt (e7e02b5c, 5f7ef23b); and the no-dev-auth-shipped.spec.ts source-grep guard prevents dev-only auth code from shipping to production (5a891e8a).
Middleware auth error surfacing in dev builds: on a dev build, the 401 body now reflects the actual requireAuthWithDevBypass error (e.g. "Invalid token signature", "Missing Authorization header") instead of the sanitized "not_signed_in". Production sanitization is preserved: with NODE_ENV=production, only the two known branches ("Token expired" -> "Token expired - please sign in again", everything else -> "not_signed_in") are exposed. Tied to NODE_ENV, not DEV_AUTH_BYPASS - the two are independent concepts. (b3960f7a)
Marketplace API — list-my-offers filter pass-through + creator-stats/creator-orders import fixes: list-my-offers.js gained a body.filters pass-through so the client can narrow results server-side (eb5654e7), the casing guard on the email lookup tightened (41d81505), creator-stats.js fixed default imports for Purchase and ListingView (45bb3ee0), and creator-orders.js fixed the Purchase default import (5e9b72a4) — completing the creator-dashboard API trio.
Offer-Builder API-first — Slices 8–11: Listing.findActivePublic, Purchase model, and creator API endpoint tests: Listing.ts gained findActivePublic() for the public /learning-lab catalog (457790be), the new Purchase.ts/Purchase.test.ts model layer with findByListingIds() (e85121b3, 7f0e1a4c), the ListingView.ts/ListingView.test.ts view-model for the catalog (a1b9d483, e74dd072), list-listings.js re-wired through Listing.findActivePublic() (7157e307), and the source-grep + test companions for creator-orders and creator-stats (c3b317f6, c145b70a, fae8105b, 0583ee1d) — plus the 00-status close-out marking Slice 10 done and Slice 11 underway (cebdf9eb, 22dccdbd, 70bc4d96, c4c7d13e).
Dev-stack hardening — Vite 8 + concurrent vite+wrangler runner + WRANGLER_HOME EACCES fix: vite.config.ts pinned to host 0.0.0.0 / port 8788 / allowedHosts:['joyos-lab.braceyourself.solutions'] so the cloudflared tunnel finally reaches the Vite dev server (was 502-ing before), scripts/dev.sh now overrides HOME to a writable dir and pins WRANGLER_HOME (EACCES fix), scripts/run-tests.sh inherits HOME from dev.sh, and the new concurrent dev:wrangler script wires vite + wrangler pages dev through concurrently so the SPA and Pages Functions start as one process group (934f7355, 5a591b56, e6fe22d8, 8c9b9c8b, 4c8ccd85, 9953163a, 41a4d602, 866d71f7).
STDB dev-tunnel routing — fresh joyos-labs-dev-v3 module: stdb-client.js now points the dev tunnel at the freshly-created joyos-labs-dev-v3 SpacetimeDB module (prior joyos-labs-dev has CREATE not UPDATE for that CLI token), with matching stdb-client.module-routing test updates and stdb-client.d.ts type companion — the dev tunnel now reaches a clean DB without a destructive re-seed (dc578397, 7a2d67cc, 594fee5b, 7321b4b0).
Auth+router hardening — sessionExpired guard, expired-login redirect, return-path capture fix, retry machinery: useAuth mocks now include sessionExpired so router guards behave correctly (8a6ac7b1), an expired login redirects at the router level before any page renders (2e6c1e72b), the return path is captured from window.location rather than the unresolved router (23236ba5a), the STDB auth-error dead-end is closed (ac01386f), the stranded-auth reassurance UI is replaced with a real sign-in prompt (2e1821c2), unsolicited "We're on it" error modal removed from client-error reporting (e672ac92), and the outbox-failure toast removed while keeping the retry machinery intact (f3f71eb90); list-my-offers.js refactored to use middleware requireAuth + getCallerIdentity instead of the dev-only requireAuthWithDevBypass path (4eb626c2).
Gratitude wall v2 + admin message notify gate + offer-builder draft scoping: Studio gratitude wall v2 shipped with deep avatar support (2437c539), admin route guard and message notify gate hardened (6cd56a88, a9971ffcd), offer-builder draft scoped to the route so an edit save no longer writes an unrelated draft (e674f261), and the useSpacetime composable fully spec‑covered for anon‑connect, identity‑link, reconnect, and appReady (3ebda600, a7ec3e4e, 0cc9b215).
Requirements registry + routing test-mirror convention: REQ‑066 (gratitude wall v2, shipped) and REQ‑067 (attribution‑consent fail‑open, open gap) recorded (6c7e9230); routing declared the test‑mirror convention and its guard as step 1 before any file moves (35aa96f2), then added the guard itself plus two rulings from Ethan (3f0e5152); dead component removed from the archived /start route (01ac1bb5); and four tests fixed that were still red from the earlier creator-studio and Learning Lab file‑based migrations (7dda640f).
RLS lockdown + privacy hardening: file-type deny list extended to cover nested patterns (a51db7ba), guest-readable feature flags locked down (fa339c72), community records writer removed from legacy path (b9c1aea7), wallview fetch stub race condition fixed (6631dc97), PII exposure on RLS closure closed (0acf20ae, 2768d8bb, be8f4129, 3e73bb9f), and Stripe idempotency key reconciled to prevent double-charges (d1c3df05).
Other notable fixes: expired login redirects to login instead of doing nothing (c0d369de6), offer-builder edit assertion and stale bindings restored (8dbafd6cb), offer-builder preview goes full screen above the sidebar (1342f333), offer-builder edit save actually updates the listing being edited (6ffd839f), offer-builder offer-edit route registered in the unflagged-route allowlist (1eb038b6), offer-builder category selection opened to all creators, not just admins (0a0b9cea), and the onboarding restart target fixed for the new file-based routing (2b6cab2f).
Marketplace API auth — HMAC requireAuth + central _middleware request logging: functions/api/marketplace/list-my-offers.js swapped from requireAuthWithDevBypass to the prod-equivalent HMAC requireAuth (so the dev tunnel signs in the same way prod does, not via a dev-only bypass), the matching list-my-offers.source-grep.test.js updated to assert the new auth function, and a .toLowerCase() on the email lookup fixes the casing-404 the prior auth was hiding — companion list-my-offers.test.js now uses a getCallerIdentity mock instead of raw SQL. New single-file functions/_middleware.js intercepts every /api/* request with a wrapWithLogging envelope, paired with functions/lib/api-logger.js for daily-rotated logs/api-requests.log.YYYY-MM-DD files (50MB head-truncation, auth-header redaction, 2KB body preview) — all logging lives in the middleware, no per-endpoint edits. .claude/hooks/dev-stack-status.sh now self-heals the tunnel + dev stack on every UserPrompt (49248fc8, a9ba5550, 5f7ef23b, 08092ab9, 5bb7615b).
Offer-Builder API-first — Listing model + Slice-7 column-add pass: completed the column-add tracer-bullet pass on Listing.ts, adding featured, currency, inventory_count, request_id, and slug to listingColumns (29/32 columns covered, 3 known-missing), the Listing.schema-complete guard updates, and a final plan-doc consolidation (6f17a62a, ef48e146, 3c22f883, 4e3df14a, 76d4762e, 5990a824, a68c8750).
Offer-Builder API-first — create_listing reducer + migration 0020: new create_listing reducer-logic API-gates test companion, the matching api-create-listing-gates reducer edits in spacetimedb/src/index.ts, and the up/down migrations 0020_api_create_listing.up.ts/0020_api_create_listing.down.ts so the new offer-builder API-first entry point ships behind a versioned schema bump (3232f66c, ac9e73dd, f1337607, aab90a1b, 897e953d, 473fc7e3, 6092b603, 4f1947ed, 1d6023bb, fc6bbc5e).
Offer-Builder API-first — useOfferBuilderSync + create-offer Pages Function: the new functions/api/marketplace/create-offer.js endpoint, its create-offer.test.ts companion, the useOfferBuilderSync category/edit-save/identity refinements, the offer-identity and category test files, and a slice-5 source-grep update — wiring the front-end offer-builder composer to the new server-side create path (d656c585, 718aff26, f5f509ad, 0b8dbe42, 55c1d0dc, a2ef95b8, d40f0025, 76f9eacb, f7776d17, 5adc2e00, 7bf2df5e, 8f92e954, 09fcf889, f7ec169b).
STDB dev-tunnel routing — fresh joyos-labs-dev-v3 module: stdb-client.js now points the dev tunnel at the freshly-created joyos-labs-dev-v3 SpacetimeDB module (the prior joyos-labs-dev has CREATE not UPDATE for that CLI token), with the matching stdb-client.module-routing test updates and a stdb-client.d.ts type companion — the dev tunnel now reaches a clean DB without a destructive re-seed (dc578397, 7a2d67cc, d5e8712f, a709a480, 594fee5b).
Sync-status composable — offline and subscription-error precedence: useSyncStatus.offline-outranks-auth.test.ts and useSyncStatus.subscription-error.test.ts lock in that an offline state takes precedence over an auth-error result, and that a SpacetimeDB subscription error surfaces as its own state rather than being misread as a sign-out — prevents the dead-end where a transient socket blip looks like a stranded-auth failure (1cb7fc72, a9063bc1).
Offer-Builder API-first planning — final cleanup + 00-status: the offer-builder API-first 00-status.md final cleanup (COLUMN GAP now 13/32 covered, 19 known-missing, plan fully complete), the Slice 3b + Slice 7 close-out, plus the corresponding 00-status.md/04-slices.md auto-commits tracking the column-add pass and the joyos-labs-dev-v3 fresh-DB transition (026ff24a, 594fee5b, b1efb890, 0b3c3525, 40059e90, 65020cd1, 4372e481, 370231cb).
Offer-builder API-first refinement (CRUD round-trip): Listing.ts/Listing.test.ts and save-offer-draft.js/save-offer-draft.test.ts tightening, plus update-offer.js save/identity/validation edits and the first list-my-offers.source-grep.test.js guard — completing the create/update/draft/test/guard slice for the offer-builder server-side path (f2f16f82, 135fe2f2, ecf610a1, 65e702d6, e4f6db4e, ff5a73aa, 7ea80eec, 76c78c32, d6e85e51, 52adb4e6, ea8373de, 53b7e281, e7e5a5b6, 0b3ab1b8, 40882a5c, 48fca1e7, 970a1162, f480597e, 985e74c3, 505fc0e5, 2e77b0a5, b02a4a1d).
Archive / Restore offer endpoints: new archive-offer.js and restore-offer.js Pages Functions — the API-side pieces of offer lifecycle (archive/restore) that pair with the new useListingArchive composable (7d99c93a, c8754464).
useListingArchive composable + tests: client-side lifecycle hook for archiving and restoring a listing from the Creator Studio, with the full test pass behind it (7e5cd5cc, 8c4f4eb1, c738e919, 96e234c1, 38e9c3ac, 9ecc959b, 75f163b1, 891f0af0, f561b864).
Slice-6 source-grep test + slice-5 spec companion: slice-6-source-grep.test.js for the offer-builder API-first plan, plus the newest slice-5-source-grep.test.ts update for the auth composable — the guard layer that keeps the implementation faithful to the spec (36bd8990, c52c757f, c88a0337).
Offer-builder API-first plan docs: 00-status.md and 04-slices.md updates (multiple), plus the planning 01-product.md and 02-architecture.md commits — refining the API-first slices, the model layer, and the source-grep guard contracts (0dbc1d77, 96eab494, 0295a04d, a8d9f04f, 7848c333, e67be60e, 326fcb36, 370231cb, f778ed1d, e60092f0, fe693a47, 789833a7, d31e595a).
Auth composable + dev-auth-shipped guard + CLAUDE/SKILL refresh: useAuth.ts edits, the new useAuth.dev-bypass.test.ts test companion, no-dev-auth-shipped.spec.ts source-grep guard so dev-bypass code can never reach production, CLAUDE.md refresh, and a SKILL.md update — the auth-side envelope hardening documented in CLAUDE.md's three-gate doctrine (a51c2e8b, 5a891e8b, 66a21925, dbc96b46, 97abba0b, 0366d027).
BaseModel + Listing model layer: BaseModel.ts stub + tests, Listing.ts stub + tests, stdb-client.d.ts, tsconfig.app.json — building the typed server-model foundation for the offer-builder API-first refactor (b6cd40f9, a709a480, b2c51454, 6b49ed96, 070686ae, aca392b6, 84cfb981, 36af9b47, be9e87b2, 91aab8cf, f634e5ba, c4d8c760).
Creator API endpoints: creator-orders.js, creator-stats.js, list-my-offers.js — CRUD endpoints for creator dashboard orders, stats, and offer listing (2390b3d9, 19160073, 720c0746, 7c9ba200, 78f4b4f9, c6ff1c92).
Tests for the new endpoints + model: creator-orders.test.ts, creator-stats.test.ts, list-my-offers.test.js, Listing.test.ts, logic.test.ts — coverage for the new creator API and model layer (5b101759, ec2b306a, 515dc583, c2bc570a, 05216bdf, 499c2ac3, 0216366d).
Creator Studio UI: MyOffersView.vue — creator-side offer list view wired to the new creator API endpoints (1230b73f).
Docs + CLAUDE refresh: offer-builder goal-loop, 00-status.md (twice), 04-slices.md, planning index.html, Vite config pin, CLAUDE.md — doc refresh for Vite 8 dev-tunnel port, goal-loop record, and planning state sync (9d93b57a, 43bbd369, a06536b6, 0618f6d1, eaf7ad4f, a5781b53, 9498c3e3, f852c1aa).
SpacetimeDB anon-connect test: a new useSpacetime.anon-connect.test.ts spec for the anonymous-connection path in useSpacetime.ts (covers the connect-without-identity behaviour the spacetime-client guard depends on) (3ebda600).
Offer-Builder API-first — Slices 8-11 + Purchase/ListingView model layer: Purchase.ts/Purchase.test.ts (initial model with findByListingIds()), the ListingView.ts/ListingView.test.ts view-model layer, the ListingsListView.test.ts hook for the new Slices 9-10, the list-listings.js route re-wired through Listing.findActivePublic(), the new creator-orders.js/creator-stats.js/creator-orders.source-grep.test.js/creator-stats.source-grep.test.js creator-side endpoints, and the docs/plans/offer-builder-api-first/00-status.md Slice-10-done / Slice-11-started close-out (7f0e1a4c, e85121b3, a1b9d483, e74dd072, 457790be, c981d857, 7157e307, 5c797d8d, 269a00cd, 515950d1, 6b505a9a, 5ca40b39, fed5885a, bbb6709b, eb5654e7, 41d81505, 7e8ea28c, c746c37e, c145b70a, dc2b6fd5, 0583ee1d, fae8105b, c3b317f6, 22dccdbd, 70bc4d96, cebdf9eb, c4c7d13e).
Dev-stack hardening — Vite 8 + wrangler concurrent runner: vite.config.ts pinned with host 0.0.0.0 / port 8788 / allowedHosts:['joyos-lab.braceyourself.solutions'] so the dev tunnel reaches the Vite server (was 502-ing through the cloudflared ingress), scripts/dev.sh now overrides HOME to a writable dir and pins WRANGLER_HOME (EACCES fix), scripts/run-tests.sh inherits HOME from dev.sh, and chore(dev): add concurrent dev:wrangler + make dev run vite+wrangler together wires vite + wrangler pages dev through concurrently so the SPA and the Pages Functions start as one process group (d5d5d091, 59e9d957, 5a591b56, 934f7355, e6fe22d8, 9953163a, 4c8ccd85, 41a4d602, 373e2f3b, 8c9b9c8b, 0c7adb2e, 5a483abc, 866d71f7, c1f1a7ce, dfa998dc).
SpacetimeDB useSpacetime composable — anon, identity-link, reconnect, and appReady tests: the useSpacetime.connect-refuses-anon-socket.test.ts, useSpacetime.identity-link-clears-auth-error.test.ts, useSpacetime.test.ts, useSpacetime.anon-gratitude-echo.test.ts, useSpacetime.appReady.test.ts, and useSpacetime.reconnect-anon-handoff.test.ts spec rollup — the auth-boundary, anonymous-gratitude-echo, appReady ladder, and reconnect-handoff behaviours the dev-bypass / 6pm hard-stop / dev-stack hooks all depend on (a7ec3e4e, 0cc9b215).
Per-turn tool-call cap + reminder hooks: .claude/settings.json edit pass plus the new tool-call-cap.sh, tool-call-cap-reset.sh, and user-prompt-cap-reminder.sh hook scripts — the per-turn tool-call cap (5 calls/turn, resets on the Stop hook) and the inbound-mail-replies reminder surface now ship from the project config, with an autocommit of all three hook files and the CLAUDE.md doctrine refresh that names them (e7af41d9, 5a48437e, dba7c826, 271d8fb7, 3047fe75, 008c7d72, 004880fd, aed0e332, ecb0614e, 435da446).
Offer Builder API-First planning: product spec (docs/plans/offer-builder-api-first/01-product.md) and architecture spec (02-architecture.md) committed, defining API-first CRUD with server model layer for create/update/draft/archive/restore/list paths (f912ffed, db57bf59, 99c40d1a).
Page-folder co-location: the offers page and its tests moved into the co-located src/pages convention, with the ROOT-depth import fixed in the moved tests (f8da4807, 3687f70b, 0c4eac03, merged 82f5a331).
Offer builder: category now lives on the identity card, the bottom bar clears on content changes, and category selection opened up to all creators, not just admins (0a0b9cea, merged c4fb3ae8).
Routing docs: recorded the applied page-folder slice, the wizard-indirection decision, and three serving-tree lessons in the routing skill (8e9c6c95).
Offer builder: price field now accepts any number >= 0 (0 means free) and the category select is gated on isAdmin to match what actually saves (e1015a7b, merged db66392a).
Routing/docs: declared the page-folder co-location convention and linked it from the routing README (a89bceb7, d0bd170f), plus a fix to a stale bare-repo step in the routing-change skill (bac30881).
Offer builder block-builder migration: price validation and category selection moved into the block builder (c008f6a9), with a follow-up fix for vitest mock-proxy access to myTier/isAdmin in the block builder (3fc4dfe2), plus supporting sync/hydration edits to useOfferBuilderSync and OfferBuilderView (ea6c1f8b, d05c1610).
Offer builder route consolidation: settled the offer-create route on one name, creator-studio-offer-wizard (d839c388), moved /creator-studio/payouts, /creator-studio/gratitude, /creator-studio/communities, and /creator-studio/onboarding to file-based src/pages (fd619101, f2a5f128, b00966c8), plus a retirement pass on OfferWizardView.test.ts against the dead step-wizard DOM (0c1fd080, 113c738d).
Router entry-gate hardening: added a full entry-gate-enumeration guard test and fixed MyOffersView link targets to repoint at /creator-studio/offers/new (0502b915, 1f89ab75, fd5f119b, 888081ba, bf2a5b28, d3433f8c).
Offer builder sync and hydration: edit-save identity and hydration fixes across useOfferBuilderSync, OfferBuilderView, CreatorOnboardingView, and CreatorStudioView, plus a router-side creator-compose-entry-points and marketplace-compose-view-retired test pass (09fcf889, ead2f955, 418e498a, de9c4559, 79832801, dee8e0d3, 6fa64c52, 66c52209).
Doctrine correction: confirmed and recorded that joyos-labs is now a live working copy of staging-next, not a bare repo, correcting the 2026-08-01 doctrine (e2d1d079).
Editing tooling and a staging ground-truth audit: rolled out the edit-test tool for tracked edit-plus-related-test runs, including a dead-file removal recorded by intent rather than inferred from absence (b943539d, c0ccfea3, 8367611a); a live staging audit of Creator Studio refuted a suspected duplicate-page and dropped-route defect (12411da1), plus test-mirror-migration mapping and full-suite failure triage notes (c32a5c4b, d76e6c71).
Routing: declared the test-mirror convention and its guard as step 1 before any file moves (35aa96f2), then added the test-mirror guard itself plus two rulings from Ethan (3f0e5152).
Routing cleanup on the file-based migration: removed a dead component left behind on the archived /start route (01ac1bb5), fixed the 4 tests still red from the earlier creator-studio and Learning Lab file-based-page migrations (7dda640f), plus a router index.ts autocommit (191ea41d).
Entry-gate guard extended into a full page-shape guard, part 1 (7797697e), plus bookkeeping autocommits for the router-cleanup route-table audit, typed-router types, and a file-based page edit (54658c97, 7f195761, 639ef619).
File-based routing migration continued: the /learning-lab nested tree (layout + 6 children -- discover, library, listing, accelerator, settings) moved to file-based pages (39f4b664, files landed at c97e6085), with a live-browser Playwright pass against staging verifying distinct rendered content and correct gate redirects for all 11 migrated routes so far (ad4d6bc2, verification scripts at 3a3e0b6c).
File-based routing migration: router directory audit and a deterministic script-not-model migrator (e32560da) moved 11 mechanically-eligible routes to file-based pages (afe2ab24), backed by a before/after route-name invariant check (7dd40e53) and a RED entry-gate currency guard (189c0ed9); dead pre-file-based-routing backup removed (0d7d3a65), plus planning notes (bdbaf811, eccbbda4).
8a6ac7b1 fix(router): add sessionExpired to remaining useAuth mocks (#961)
d507406c refactor(router): move the offer builder and its Creator Studio siblings to files
93cd5f4a feat(router): allow file-based routing via unplugin-vue-router
0c2fac4f fix(vite): watch a WHITELIST of app dirs, not a blacklist of worktrees
e7ebb104 fix(vite): stop watching .worktrees, which killed the dev server after the root move
b8916e12 land: frontend/SpacetimeDB boundary, client socket disabled (slice 1); paired with f59223de feat(stdb): add the boundary and disable the client socket.
2e1821c2 fix(auth): replace stranded-auth reassurance UI with a real sign-in prompt (#960)
e672ac92 fix: remove unsolicited "We're on it" error modal from client-error reporting (#959)
ac01386f fix(auth): close the resolveStdbToken fail-open and stop the STDB auth-error dead-end (#958)
6c7e9230 requirements: record REQ-066 (gratitude wall v2, shipped) and REQ-067 (attribution-consent fail-open, open gap)
2437c539 land: feat/studio-gratitude-wall-v2 (#957)
6cd56a88 land: guard-admin-route-gate (#956)
e674f261 fix(offer-builder): scope the draft to the route, and stop an edit save writing an unrelated draft (#955)
a9971ffcd land: fix-admin-message-notify-gate (#954)
a7b0ec665 chore(revamp-plan): sync gallery/index.html with live page (delta through f3f71eb90)
f3f71eb90 fix(outbox): removed the outbox-failure toast while keeping the retry machinery intact (#953); also parked the director-skills routing section, blocked on a permission gate (#952, b041b5919).
f4c533ea0 land: routing-doctrine-and-skill (#951)
23236ba5a fix(auth): capture the return path from window.location, not the unresolved router (#950)
2e6c1e72b land: an expired login now redirects at the router level, before any page renders (#945)
c2b6cfa96 fix(offer-builder, router): silence the casing guard on get-listing JSON, refresh stale route-count tests
2141bfd45 revamp-plan: sync gallery/index.html with the live page (delta through 8dbafd6cb)
8dbafd6cb fix(tests): restore re-export live bindings and update stale offer-builder edit assertion (#944)
c0d369de6 fix(auth): an expired login always redirects to login, a network blip never does (#943)
Offer Builder — expanded preview now goes full screen above the sidebar (1342f3334, #942), and Save actually updates the listing being edited (6ffd839f2, #941).
1eb038b6f fix(offer-builder): register creator-studio-offer-edit in the unflagged-route allowlist
ae243c8dd revamp-plan: sync recently-shipped with 04a72c48c, 30a231029
30a231029 offer builder: normal edit path + real ownership-gated listing hydration (#940)
04a72c48c docs(doctrine): staging-next tracks origin/main by default (standing rule) (#939)
8fcd06928 swarm-test-invocation: record the two things that cost a re-run
240baf865 Merge remote-tracking branch 'origin/staging-next' into sync/main-security-into-staging
ff84e3605 merge origin/main into staging-next: preserve the security fix AND all 420 product commits
f1cd542e0 promote(staging-next -> main): 338 commits, closes the schema_error_events PII leak
Security — 7741c0272 closes anonymous PII exposure on 9 SpacetimeDB tables via per-table RLS.
f852fbfc7 offer builder: Edit links to the builder, retire the edit modal, pin the Save row (#937)
04733f5b6 fix(offer-builder): send Authorization header on API-tier draft save (#934)
68e1ec1ef fix(offer-builder): stop SpacetimeSplash data-unavailable panel overlapping the sidebar (#936)
Auth — the SpacetimeDB socket can no longer sign anyone out or drop a member to Guest; a dropped or degraded realtime connection is now decoupled from who you are signed in as (97e377e52), merged to staging-next (2a8b00e85).
688a6685d offer builder: explicit Save control + API-tier fallback + My Offers shows local drafts (#932)
76f5554f6 fix(auth): defer the users-row-delete sign-out to the auth layer, the row check alone cannot see an RLS-scoped re-point.
32415f414 fix(auth): a moved users row is no longer read as a removed account — members stopped getting signed out mid-identity-migration.
51ff20852 fix(auth): stop signing out on a transient auth-refresh blip (SpacetimeSplash) (#928).
e300085d3 fix(notifications): defer the preference prompt off the offer-builder canvas.
f7e031807 fix(auth): retry exchange-token 5xx before showing a connection error (#927), making transient auth failures self-heal instead of surfacing a false error to the user.
Offer Builder — the embedded blocks mockup no longer swallows clicks: the full-bleed body class is stripped when the mockup is hosted inside the app (db6f4d5db, WO 4c9cd9f060e8), merged to staging-next (e599f39e1).
b9b512f27 fix(auth): repair an anonymous socket when a usable credential arrives late.
Offer Builder — honest publish confirmation now polls the real public endpoint instead of assuming success (adf9514e3, WO 4c9cd9f060e8), merged to staging-next (8e15e7871).
Offer Builder — the blocks mockup is now hosted live in OfferBuilderView, with a host-wiring race fixed under swarm test coverage and a grid-gap placeholder tile / black-background mismatch cleaned up (ee1e3d245, 4dd6a63ad, d01242816).
63955702b fix(auth): make an unusable identity fail loudly instead of running as Guest, merged via PR #920 (f73c62f36)
58769c288 requirements registry: REQ-064, land the payout code 80/20 / 90/10 (confirms REQ-008)
c10369a26/0cd1e9e46 chore(revamp-plan): sync worktree gallery/index.html to live page
8e75552fe research(payouts): work order eb9e9be45bd7 research stage artifact (#924)
Security / RLS lockdowns — closed anonymous read exposure on purchase_record_outcomes (652fbc531), feature_flag_overrides replaced with an authenticated endpoint (819c217bc, 3755ef8ca, 1855f46a9, 366a4853f), marketplace commerce table exposure closed (4983cf498), staging/production feedback table exposures closed (2480afb37, d06406066), 5 owner-only tables closed to anon PII (d4059cae8), deny-by-default public-table ratchet (e00b1354d), doctrine: every STDB table private, storefront via API (41eb325cb).
Offer Builder — identity fields (title/description/price) reach the reducer and pass validation (1e3e2bc37, 288a875de, af17d29b0), real create_listing coverage replacing the slice-1 tripwire (df7f24277), block canvas wired to a durable draft store + STDB sync REQ-060 (73924b326), production block-based Offer Builder slice 1 (fe9675a88), three structurally distinct builder options + preview registration (39239e8fe).
Auth / start-gate / onboarding — exchange-token reports the real identity-link outcome (1013bce35), post-OAuth loading state with a bounded hang and blocked double-submit (27d1eb2a4), REQ-061 archived the /start gratitude gate and fork door, REQ-062 post-login destination is Creator Studio (8c26e14df, 9c3243ce5), Google sign-in error surfaced where the button actually is (71c0f2587, be88028db), gratitude authorName redaction on the unauthenticated feed (a38c2241f).
Communities / cohorts — communities module + server-side flag guard (158ce09a4), the end-to-end usable communities surface (92fe7e154), three authorization gaps closed (min_tier, listing ownership, owner protection) (40be1b529), visible "name already taken" validation (09b753097), communities-containing-cohorts schema seam (cbbe5ad24), community creation as a named admin privilege (aee59ca96).
Explorer / marketplace — storefront reads public items through an API, not the database (7dab32a87), community-switcher interaction layer (9884d3d16), category-first browsing grounded in Kristin transcripts (32ef81d3a), marketplace shell redesign + real public listings wiring (b3a970934, d51de6f64), badge-conditional revenue split 80/20 standard / 90/10 founding member (2739132fe).
Requirements registry — REQ-061/062/063 archive /start gate + Creator Studio redirect + old gratitude wall (b92d1b242), REQ-025..033 community/cohort/product + access-model resolutions (2730bc9f6, bd3526f60), REQ-038..040 in-app promotion + delivery bar + internal-first launch (a0de1f6dc), REQ-048..051 gratitude wall/gate decisions (62c2cb835), REQ-055..059 anonymous-probe findings + private-table-via-API doctrine (203a28aae, 9d73581e0), structural guard against a registry write dropping an existing REQ id (b05220637).
CI / infra — kv-migration-purge auth fix against maincloud (a499bb97d), fs.deny list reconciled into one imported source (cb20e80f9), staging schema-drift gate re-auth fix (c5fa8ef13), run_seed_step retry-budget and backoff fixes (f6643a61e, a204da53c, 5bd7bed2e), staging-seed fails loudly instead of swallowing errors (b8306be20), fail-closed env resolution after the 2026-08-12 fail-open incident (c8b7fb95c), narrowed --yes on every spacetime publish (823beb644).
11e16d502 chore(revamp-plan): sync worktree gallery/index.html to live page (append 4983cf498)
4983cf498 fix(security): close anonymous exposure of marketplace commerce tables (#843)
b5aa2b86a chore(revamp-plan): sync worktree gallery/index.html to live page (append 2730bc9f6)
bd3526f60 requirements: record Ethan 2026-08-14 access-model resolution (REQ-031..033), resolves REQ-026 (#842)
2730bc9f6 requirements: record Ethan 2026-08-14 community/cohort/product interview answers (REQ-025..030), two supersessions
f3efc39fb chore(revamp-plan): sync worktree gallery/index.html to live page (append a8ff37cec..23583e14a, 9 commits)
a8ff37cec fix(stdb): merge unlanded ctx.sender auth fix for feature_flags/notification_types/tier_config seeds
725dfe6f8 chore(revamp-plan): sync worktree gallery/index.html to live page (append a204da53c, 69eb0fe15)
f6643a61e fix(ci): switch run_seed_step to flat 180s retry gap -- exponential backoff never converged
401abe505 fix: gate seedDefaultNotificationTypes/seedDefaultTierConfig by ctx.sender, not callerEmail
34686f570 fix(stdb): remove vestigial callerEmail param from seedDefaultFeatureFlags
be43ec2cf RED test: spoofed-email-arg case for seedDefaultFeatureFlags
fa02c0c83 agent-currency: exempt in-flight explorer PR files, re-stamp manifest
5b6103ab7 fix(stdb): stop using autoInc for feature_flags -- explicit ids at both insert sites
23583e14a fix(staging-seed): fail closed when the feature-flag seed fails
a204da53c fix(ci): widen run_seed_step retry budget to match seed_demo_data's proven 5 attempts
69eb0fe15 chore(revamp-plan): sync worktree gallery/index.html to live page (append 5bd7bed2e)
5bd7bed2e fix(ci): retry run_seed_step on transient post-publish 530s
5df9fc372 chore(revamp-plan): sync worktree gallery/index.html to live page (43 commits through 2026-08-13)
39239e8fe mockups(offer-builder): three structurally distinct builder options + preview registration
28bab552d Merge main into staging-next (ancestry only: every byte of main is already here)
2480afb37 fix(security): close live STAGING anonymous exposure of the feedback table (#838)
28b1c2f1d rescue: land requirements-registry + coverage guard from dangling laptop worktree (#814)
c0c94569e feat: seed real downloadable files for staging marketplace listings (#807)
32ef81d3a explorer: category-first browsing grounded in Kristin transcripts (#823)
aff2a28b6 test(feedback): fix stale suppressEntirely assertions blocking staging-next (#836)
d06406066 fix(security): close live production anonymous exposure of the feedback table (#835)
7940d319c Merge fix/staging-seed-failclosed into staging-next
b8306be20 fix(ci): staging-seed.sh fails loudly on genuine seeder errors instead of swallowing them
310bfc2d1 fix(stdb): feature_flags autoInc collides with corrupt sequence -- explicit ids at both insert sites (#830)
bdb89b56a fix(feedback): stop silently dropping connection/auth/InternalError reports
4efdd27d5 test: sabotage-proof runtime coverage for staging-seed.sh swallow bug (RED)
c7df6dbc6 Merge fix/env-config-fail-closed: fail-closed connection-target resolution
c8b7fb95c fix(env): fail-closed connection-target resolution (2026-08-12 fail-open incident)
e48b9a4a3 test(env): RED - fail-closed env resolution guard (2026-08-12 fail-open incident)
f96226638 fix(explorer): failed-read visual distinction + mockup toggle (#829)
99cfbe27a fix(explorer): W1/W2/W3 adversarial-pass fixes -- honest doc comment, distinct failed-read state, mockup ownership (#828)
c5fa8ef13 fix(ci): staging schema-drift gate never re-authenticated with STDB_PREVIEW_TOKEN (#826)
4b3454217 explorer: re-stamp ownership manifest for PR #820 content (ExplorerHomeView redesign, mockup registry entry) (#825)
cbbe5ad24 Communities-containing-cohorts: schema seam + mockup (deny-by-default, no reducers) (#822)
b3a970934 explorer: redesign marketplace shell (drop-in, seam-first mockup) (#820)
10afa40fc explorer: fix staging-next structural-guard redness (owner, flag registry, seed allowlist, casing) (#821)
50d920e39 explorer: close adversarial-verify warn findings on d51de6f64
b2e73f9dc explorer: style the coming-soon fallback (design-gate REFUSE fix)
d51de6f64 explorer: wire /explorer grid to real public marketplace_listings (active only)
7efc7fea2 feat: explorer marketplace public shell (login-to-purchase)
7290c14a5 docs: mark project-local explorer-surface agent superseded by global owner
8f666a630 fix(stripe-setup): register webhook with https URL behind Cloudflare Tunnel (#818)
57e2b9a92 swarm: job-1786201020-17308 (#817)
512245609 swarm: job-1786200692-31728 (#816)
9c75a6abb swarm: job-1786200971-3120 (#815)
70445fce2 docs: capture R2 + Stream ground-truth findings (2026-08-07)
cf6ff5280 chore(agents): create cohorts owner agent; cross-reference from live-chat-spaces
dfbb2bf08 chore(agents): land live-chat-spaces owner agent onto staging-next
2739132fe feat(commerce): badge-conditional marketplace revenue split (80/20 standard, 90/10 founding member) (#804)
a9bff2fcd fix: rename internal 'experiment' listing kind to 'live_session' (#802)
cf1ccb1f2 WIP: continue Catalyst->Creator tier rename (uncommitted work found during worktree cleanup audit, 2026-08-07) (#801)
81890f0ae feat(marketplace): shared Archive control for listings (admin + creator surfaces) (#798)
4ab701a66 docs(visual-verify): document the first-connection dev-login reload gotcha
7b06e3ea2 feat(offer-wizard): add visible action buttons to entry-step offer cards (#799)
037296bc5 fix(agent-currency): re-stamp StartForkView.vue for gate-autofocus promotion
cbe61d274 Promote: auto-focus gratitude gate input on page load (desktop only)
eefd19c43 Promote staging-next to main: 186 commits (schema resilience, RLS lockdowns, marketplace/creator-studio work, CI repairs, error-reporter timeout fix)
c700cb27d feat(offer-wizard): Live Cohort entry (Option C) goes live (#795)
a59ee8fd3 chore(revamp-plan): sync worktree gallery/index.html to live page
79253ac44 fix(marketplace): send sessionAt/sessionJoinUrlEnc on every create/update listing call (#796)
915b669a4 docs(agents): give the mockup preview harness an owner (joyos-labs-marketing) (#797)
ab324a161 docs(agents): correct offer-builder Bundle Builder claim to match live merge
5cbdb1452 Merge feat/offer-wizard-bundle-builder: Bundle Builder live on the Offer Wizard entry step
7b701688b chore(doctrine): repoint offer-builder ownership + re-stamp agent-currency manifest
ed4865acf fix(offer-wizard): skipImage() must also skip the session step for Bundle Builder
ce99061ed feat(offer-wizard): make Bundle Builder live -- kind 'bundle' via existing reducer, session step skipped
ad4356071 test(offer-wizard): RED tests for interactive Bundle Builder entry (kind=bundle, session step skipped)
5b7022df0 chore(revamp-plan): sync worktree gallery/index.html to live page
8cf2beda5 Merge fix/gate-autofocus-touch-guard: also skip autofocus on coarse-pointer touch tablets
06e4fb64a fix(start-gate): gate autofocus on pointer coarseness too, not just viewport width
73696c27d Merge fix/gate-input-autofocus: auto-focus gratitude gate input on page load (desktop only)
4ff988244 feat(start-gate): auto-focus gratitude input on page load, desktop only
0dd70b861 Landing mockups: 3 ground-up directions (Feed/Exchange/Wall) at /dev/mockups/* (#792)
3f9faac3b Merge branch 'refs/heads/feat/landing-fresh-ground-up-import' into staging-next
32ceb246e feat(landing): add depth and sections to all three fresh directions
be25a673d fix(landing): mobile-breakpoint defects on Exchange/Wall + drop seat-counter urgency
58d55fd5f fix: structural masonry for Wall (count-agnostic), regen non-wellness portrait, make reciprocity visible in Wall tiles
f19241b09 wip: three fresh landing-page mockup directions (feed/exchange/wall)
08388c893 fix(feedback): bound submit_client_error POST with a timeout (#790)
4634ecb8c fix(ci): repair 3 genuine RED failures at staging-next tip (#791)
0f32eced8 Merge fix/webhook-account-value-handlers-20260805 into staging-next
303087ec6 feat(stripe-webhook): enumeration guard proves every ACCOUNT_VALUE_EVENTS entry is handled or exempted
803cda575 docs: correct joyos-billing agent doc for new subscription handlers, re-stamp reviewed pairs
07d844043 Merge remote-tracking branch 'origin/staging-next' into fix/webhook-account-value-handlers-20260805
ea7315cd9 docs: add branch-inventory refresh and offer-builder buildout plan
64e4a52f0 fix(spacetimedb): resolve community_records binding-drift conflict on lockdown merge
b15153a13 Merge lockdown fix/lockdown-community-records-anon-exposure-20260805 (521bbaf99) into staging-next
521bbaf99 fix(spacetimedb): lock down community_records anonymous exposure
14ad98e7e fix(agent-currency): re-stamp after feedback_message index fix + stranded-identity reactive fix; record in-flight session-fields-serializer spec as known-absent (PR #782)
0cd4623e1 fix(stripe): handle subscription.created/paused/resumed events, no longer silent gap
cd612d721 docs: retire remaining per-PR-preview language, point verification at staging
64f627e0c chore: regenerate STDB bindings for feedback_message.feedback_id index
df6e7ea3b fix(spacetimedb): index feedback_message.feedback_id to unbreak admin subscriptions
1debbc325 fix(sync): detect a stranded identity reactively so it surfaces the sign-in path
b30472b77 Capture 2026-08-04 co-founder call roadmap items (planning only, no code)
accd8c47e Merge branch 'fix/dedupe-community-agent-def-20260802' into staging-next (PR #781, re-landed with preserved ancestry after squash-merge correction)
7cf9c8689 Revert "fix(agents): dedupe community.md / joyos-community.md agent definitions (#781)"
4b2cabea4 fix(agents): dedupe community.md / joyos-community.md agent definitions (#781)
d22c1a738 chore(agents): commit the community.md pre-merge backup (companion to acb4ef36e)
acb4ef36e fix(agents): dedupe community.md / joyos-community.md agent definitions
960b60cb8 Merge pull request #780 from braceyourself/docs/backlog-stale-instruction-fix-20260802
0201a7cf8 docs: correct stale merge-286-first instruction in sibling backlog docs
4a7f3277e docs: correct stale merge-286-first instruction in launch backlog
39ec49dba Merge pull request #779 from braceyourself/fix/legacy-writer-guard-anchor-fetch-20260802
9549e38c0 docs(community): record the anchored-fetch guard fix, re-stamp ownership manifest
e306a2cc5 fix(guard): anchor no-legacy-writer POST detection to fetch() call args, not proximity window
0ecba6298 Merge pull request #771 from braceyourself/fix/gratitude-roundtrip-probe-filter-collision
24e0088b7 docs(community): record the no-legacy-writer guard's proximity-regex false positive, then re-stamp ownership manifest
c0508bc5a fix(e2e): drop literal /api/community-gratitude text from a test title to stop a false-positive CI guard match
689a7ae52 fix(agent-currency): re-stage manifest re-stamp that was missed before the merge commit
bc0c61d2a Merge origin/staging-next into fix/gratitude-roundtrip-probe-filter-collision
68b875839 Merge pull request #778 from braceyourself/fix/retire-legacy-community-records-writer-20260802
8b223b35a fix(gratitude): remove the last live writers into the retired community_records table
cc8472f05 Merge pull request #777 from braceyourself/docs/recovered-doctrine-and-backup-path-fix-20260802
d701a4a97 docs: fold in two recovered doctrine sections, correct stale backup-path claim, mark bare-root shadow trap resolved
8b0d384b5 Merge pull request #776 from braceyourself/docs/admin-emails-collapse-doc-correction-20260802
2fba90da4 docs: correct stale ADMIN_EMAILS hand-copy claim after PR #770 collapse
37f152d38 Merge pull request #770 from braceyourself/refactor/admin-emails-collapse-to-3-sources
30a6548a6 fix(auth): re-arm the deferred sign-in redirect when 'online' fires during a flap (#775)
9ca89ce65 fix(agent-currency): retire the redundant adminEmailsParity guard, correct 3 stale agent docs
78b2927cd refactor(admin-emails): collapse 8 hand-copied ADMIN_EMAILS declarations to 3 canonical + 4 imports
d6aa60bc8 Merge pull request #774 from braceyourself/fix/agent-currency-distinguish-ownership-from-mention
006fad7de fix(agent-currency): refuse to write a manifest with an unexplained dead-file claim
7dd0851cc fix(auth): redirect an expired session to login, never a network failure (#772)
b4b87ca8a fix(agent-currency): probe module is .mjs, not .js, in the agent docs
49aff724a fix(gratitude): round-trip E2E probe text was blocklisted by the display filter
89a26327b Merge fix-agent-currency-582f: review joyos-start-gate, re-stamp ownership manifest
db5d750d3 fix(agent-currency): review joyos-start-gate against gratitudeWallLayout.ts C23 change, re-stamp manifest
05efd0e68 docs: correct stale gratitude-table claim in CLAUDE.md (2026-08-01 cutover)
808bb54e9 fix(start-gate): wall renders cards around the open gate modal at 900x640 (RECIPE C23)
d3350058b fix(agent-currency): correct community/joyos-community docs before re-stamping community-gratitude.js
23f82511d Merge wall-midsize-viewport-starvation: gratitude wall no longer renders zero cards at mid-size viewports (900x640)
150be7b82 chore(agent-currency): re-stamp joyos-start-gate after correcting its stale recipe index
60f066916 fix(start-gate): wall renders zero cards at mid-size viewports (900x640)
f94f142ea Collapse restated global safe-exec/no-verify rules to delta + cross-reference (context audit 2026-07-23)
a98c62f0f feat: add verification spec for feedback #99990312
cec9b3880 fix(start): own card no longer strands on resize -- drop fill:forwards from the release animation
1d234dbc6 fix(start-gate): narrow own-submission cancel exemption to a same-event time window, not permanent
ea0ffd0c8 fix(start-gate): own-submission card no longer cancelled by the same-event gate-close redistribution
7c3faf767 fix(gratitude): catch QA meta-commentary about the product UI in isTestGratitudeBody
0cfa49a84 test(gratitude): RED - add QA meta-commentary fixtures for isTestGratitudeBody
cd5d3d4ad fix(rls): close anonymous exposure of 1357 feedback_message rows; repair two RLS-guard parser blind spots (#769)
297c64a6f fix(rls): close anonymous exposure on user_identities, notification_preferences, archetype_responses (#767)
a2560c5de docs: correct stale RLS-closed HTTP-signature claim in CLAUDE.md (#768)
33e1023f6 chore(agent-currency): re-stamp manifest after PR726 conflict resolution
ef3488869 Merge remote-tracking branch 'origin/main' into resolve/pr726-conflict-20260801
e4d595e9b Merge PR #764: sync ADMIN_EMAILS across all copies, add drift guard
edc5bf0b6 chore(agents): re-stamp ownership manifest for the 3 admin-email files
c0a864d83 fix: sync ADMIN_EMAILS across all 8 copies, add drift guard
d5857c5e1 Merge pull request #763 from braceyourself/offer-attachments
f8f3aeccf Merge pull request #766 from braceyourself/doctrine-bare-root-ci-capacity-20260801
7e856c7a3 Merge pull request #765 from braceyourself/docs/landing-procedure-update
bf67a6d62 chore: regenerate ownership manifest + schema snapshot after rebase onto staging-next
945008d98 test: raise timeout on large-file digital-upload tests (env contention, not a bug)
40bd2a233 feat(creator-studio): let creators attach a digital file to an offer
7fa724d10 Merge pull request #760 from braceyourself/fix/gratitude-attribution-default-20260801
17eaa75f0 Merge pull request #762 from braceyourself/fix/ll-header-login-signup
4af8b42ab chore(agents): re-stamp ownership manifest after gratitude-attribution repurpose
a68312a79 feat(gratitude): expose consented attribution on the public feed + wire onboarding/settings
79e0a3f83 feat(gratitude): schema + reducer for public-attribution-by-default
90ab864ff docs: document bare-repo root stale-file trap, CI runner capacity, and agent-currency re-stamp rule
9f6dc3047 docs+guard: fix stale land-on-staging procedure claims, add orphaned-branch detector
aec834a6d Merge pull request #759 from braceyourself/fix/access-registry-agent-currency-manifest
aae28cf5d Merge pull request #756 from braceyourself/fix/library-bundle-fulfillment
562cc803f chore(agent-currency): re-stamp ownership manifest for LearningLabLayout.vue
608f83740 Merge pull request #758 from braceyourself/fix/gratitude-e2e-auth-determinism
453633b29 chore(agent-currency): re-stamp joyos-labs-learning-lab after MyLibraryView.vue change
270545fec fix(learning-lab): add Bundle fulfillment group and panel so a purchased bundle is reachable
7c6cf3f20 Merge pull request #761 from braceyourself/docs/offer-builder-doctrine-update
5d0b57a5f fix(e2e): deterministic auth gate + pathname-anchored wall assertion
ecd8f260c fix(learning-lab): relabel auth-broken header CTA to Login, add Signup link
08c93f3e3 docs: add Offer Builder update-on-semantics-change doctrine section
68f56697e fix(agents): stop backticking not-yet-built access-registry paths in prose
d793140da fix(e2e): correct wall-check root cause to URL-substring tautology, fail-safe on poll timeout, add real cutover E2E
aaf9c36e6 Merge pull request #757 from braceyourself/magic-link-verify-reducer-fail-loud
64533088b fix(auth): verify-magic-link reports reducer-call infra failure as 503, not 410
19fa611ad fix(e2e): replace fixed-timeout wall-auth check with a bounded poll for terminal state
ad71b997f Merge pull request #755 from braceyourself/fix/gratitude-single-source-of-truth
c851c630b docs(agents): correct stale gratitude-table claims after single-source-of-truth cutover
79aab17b0 feat(gratitude): single-source-of-truth cutover -- public gate reads gratitude_entries directly
ccfe6aeb3 fix(start): dedup wall pool by text before positional cycle (#754)
2da053fb3 Merge pull request #753 from braceyourself/fix/agent-currency-review-20260801
c24c9cb60 fix(agents): review and correct all 44 stale agent/file pairs, re-stamp
07376c79b Merge pull request #752 from braceyourself/fix/arch-map-tests-ci-tsconfig-20260801
e1e0809b1 fix(arch-map): add local tsconfig.json so CI does not walk up to root's
21c0c0dfc Merge pull request #751 from braceyourself/fix/deploy-blocking-tests-20260801
5ba263f0c fix(ci): clear 20 of 23 stale-test failures blocking main's deploy pipeline
022fc2f40 fix(admin): add kristin@joyos.global to the client ADMIN_EMAILS lists (#750)
8dcd5102c fix(ci): make merge-on-green fail closed when PR checks are absent (#748)
3d067e613 ci: restore PR-triggered vitest gate + add PR CI coverage watchdog (#745)
b72b17228 Merge pull request #747 from braceyourself/fix/arch-map-dead-tests-guard
a703b34db Merge pull request #746 from braceyourself/fix/dashboard-sections-year-labels
a39835f63 fix(dashboard): replace vacuous parity guard with a real epicPhases fixture
bd1a39d82 fix(arch-map): add local tsconfig.json so CI does not walk up to root's
c033fc5bc ci: run arch-map's own vitest suite and stop calling it dead
dec080eab chore(agent-currency): re-stamp joyos-dashboard after reviewing useAuth.ts, AppShell.vue, SettingsView.vue
72d646fc2 fix(dashboard): update YearSection sections.test.ts for removed epicPhases fallback
acb0190f2 Merge pull request #744 from braceyourself/fix/dashboard-tests-20260731
1031056a9 fix(dashboard): remove hardcoded epicPhases fallback + fix stale useStripe mocks
17cdd558a Merge pull request #742 from braceyourself/fix/auth-onboarding-tests-20260731
99c09e695 fix(auth): log exchange-token appToken verify failures; fix stale WelcomeHero aria-label assertion
b83774172 Merge pull request #743 from braceyourself/listing-id-reuse-marketplace-views-20260731
7185f1502 fix(marketplace): fold marketplace_listing_views into listing-id-reuse allocator
685c750ab Merge pull request #738 from braceyourself/fix/stdb-tests-20260731
8cfe89e3d Merge pull request #741 from braceyourself/fix/gratitude-anon-echo-test
600f264a2 fix(tests): update two stale STDB guard tests against deliberate later changes
b736d7ddb fix(test): update anon-gratitude-echo A.5.7 for deliberate /start banner narrowing
90344e49f test(outbox): tolerate additional named imports in the loadOutboxOnBoot wiring guard (#739)
1c4190a42 Merge pull request #740 from braceyourself/fix-billing-tests-20260731
f96a904d3 fix(tests): update myTier-reactivity mock to real SDK (ctx, row) callback signature
a0edab738 Merge pull request #737 from braceyourself/fix/env-scoped-row-counts-and-guard
bd17e26d9 fix(docs): qualify every gratitude-table row count with its environment+module, add structural guard
cbe21841c Merge PR #724 into staging-next: keep both RLS-guard fixes, drop neither
fe325df51 Merge pull request #736 from braceyourself/fix/learninglab-spec-honesty-20260731
0387c3625 test(router): fix brittle exact-string nav-link assertion in learning-lab-library-route spec
8804f004f test(learning-lab): fix stale vue-router/useSpacetime/useStripe mocks in LearningLabHomeView offline-render + ready-instrument specs
46a55cc3a Merge pull request #735 from braceyourself/fix/library-unreadable-container-css
7f9cb9fb4 fix(learning-lab): apply container styling to the unreadable-library state + correct an overstated comment
a02aa900a Merge pull request #734 from braceyourself/fix/library-unreadable-vs-empty
4f0f63351 fix(learning-lab): distinguish an unreadable library from a genuinely empty one
23b8f0c7f Merge pull request #733 from braceyourself/creator-dashboard-stats
e8ac8bc36 docs(creator-stats): document the no-Catalyst-check posture, mirroring creator-orders.js
ed813dc08 feat(creator-studio): add Performance stats/graphs panel to dashboard
7ba32883b Merge fix/settings-tabs-redesign into staging-next
4df00b5c8 fix(settings): redesign tab strip and demote sign-out for clarity
517e2fa7f Merge pull request #732 from braceyourself/fix/anon-connect-entry-appjwt-migrate-fallback
ac51606c0 fix(auth): close the identity-repair gap for ordinary OIDC token expiry
3c485be4b docs(skill): point stdb-rls-filter at the new total-coverage RLS guard
c01285659 test(security): add total-coverage RLS guard for every public STDB table
9c8e962fd Merge pull request #731 from braceyourself/fix/learning-lab-header-accountidentity-desync
1b106b999 fix(learning-lab): wire header identity to accountIdentity, not the stale cached claim
d10ea67bb Merge pull request #730 from braceyourself/auth-blocked-stuck-rls-probe
15b98e639 fix(auth): do not reconnect when it can only ever produce another anonymous identity
1f8936632 Merge pull request #729 from braceyourself/auth-blocked-stuck-rls-probe
b7e05a4ac GREEN: fix onInsert/onDelete/onUpdate listener callback arity to match the real SDK signature
85b38b5fa RED: fix mock callback arity to match real SDK (ctx, row) signature
a4e9539a1 Merge pull request #727 from braceyourself/fix/magic-link-identity-link-clears-auth-error
899b77b52 Merge pull request #728 from braceyourself/sec/swarm-test-skill-followup
c2333c63b docs(skills): targeted manifest re-stamp recipe, jobq node-version gotcha, scratchpad-not-private finding
e29facb6d fix(auth): clear stale auth-broken state once migrate_identity links a users row
fedacf079 Merge pull request #725 from braceyourself/sec/fix-privacy-guard-and-ci
97d4be19b fix(security): update split-privacy-release guard for users/waitlist_signups override
d1dfbbc53 test(security): unblock prod-down test gate on two RLS/privacy guards
e9c18b40a Merge pull request #723 from braceyourself/library-pending-purchase-card
4add3fc09 fix(learning-lab): render a pending purchase as a real library card, not a banner over an empty shelf
d711b6a0d fix(marketplace): resolve idempotent-purchase entitlement lookup, poll for pending-to-active
fdd9be56c Merge pull request #721 from braceyourself/creator-stats-stdb
6b94973f8 Merge pull request #722 from braceyourself/stripe-tier-derivation-fail-closed
7c48b347b docs(skill): warn against editing directly in the live shared staging-next worktree
5ab7d0e2a Merge pull request #720 from braceyourself/feat/gratitude-attribution-settings-toggle
ee9e87769 fix(stripe): fail-closed tier derivation, admin-configured prices reach Stripe
fe4c5acd8 fix: avoid literal */ inside block comments (mkt_views:*/mkt_views_daily:*)
b2e562b52 feat(creator-stats): switch purchases/views to stdb, retire KV read path
d190aa5be Merge pull request #719 from braceyourself/docs/swarm-skill-sabotage-recipe
3768edf9c feat(settings): add public-gratitude attribution toggle (reuses existing reducer)
625c1d765 docs(swarm-test-invocation): add the in-container sabotage recipe
ae1cd6e3b Merge pull request #718 from braceyourself/fix/stripe-prices-unchecked-stdb-read
ec856d6f2 fix(stripe-prices): distinguish an STDB read failure from an unpriced tier
6ab6d54d8 Merge pull request #717 from braceyourself/fix/seed-tier-config-price-columns
e2b7e1e2c fix(seed-tier-config): seed the two price columns, and derive the guard from the schema
68d516342 Merge pull request #715 from braceyourself/fix/stripe-prices-duplicate-formatpricestring
9dd6d3927 fix(tier-pricing): move the .d.ts out of functions/, which was 502ing staging
958f4ed90 Merge pull request #714 from braceyourself/fix/stripe-prices-duplicate-formatpricestring
a0987e042 fix(stripe-prices): remove duplicate formatPriceString that broke every staging deploy
f256a91e5 Merge pull request #713 from braceyourself/admin-tier-pricing-source-of-truth
5af19c1ad merge staging-next: combine loud tier-catalog faults with admin-configured pricing
3baef6630 feat(tiers): make the admin Tiers tab the source of truth for membership prices
467a2223f Merge pull request #712 from braceyourself/fix/public-tiers-loud-empty-and-seed
a82d531f0 fix(public-tiers): fail loudly on an empty or corrupt tier catalog, and seed it durably
0758f1ebf Merge pull request #711 from braceyourself/fix/shimmer-test-adversarial-corrections
16144bb47 fix(start-gate): shimmer test's setup-call assertion was toothless
f72918512 feat(creator-studio): build real Orders page from live purchase data
f6af14397 Merge pull request #710 from braceyourself/staging-next
c80c78a86 Merge pull request #708 from braceyourself/fix/users-rls-anon-exposure
0dcd60e35 Merge pull request #709 from braceyourself/fix/shimmer-ambient-no-hover-dependency
556fdd297 fix(start-gate): seam shimmer runs ambient, independent of pointer state
20a414d3a Merge pull request #707 from braceyourself/fix/pricing-truth-ai-prompts
fd50e5788 fix(security): activate dormant users/waitlist_signups RLS filters, close invites leak
ced6b1a86 docs(skills): record that the agent-currency gate is already red, so measure the delta
a990c3e5d fix(pricing): stop AI listing prompts anchoring on the retired $5.97 Joy Seeker price
1c02384c4 merge: sync staging-next before pricing-truth edits
6386b4a24 Merge pull request #706 from braceyourself/fix/wall-card-float-desync
07c2b5a07 fix(start-gate): desynchronize wall-card float paths for sequential ids
1f18ead01 Merge pull request #705 from braceyourself/fix/client-silent-write-audit
66694a619 fix(sync-reliability): syncStatus was swallowing a real subscription failure into 'live'
0321c14ce fix(learning-lab): purchase-confirmation banner must not claim Library entitlement before it lands
755ed6b70 Merge pull request #704 from braceyourself/fix/client-silent-write-audit
dc2af97d2 fix(sync-reliability): stop silent failures in useTable() and unify identity display with the connection's real auth state
34c6a03b1 fix(stdb): queryStdb failure can no longer masquerade as an empty result
405355278 fix(start-gate): clamp persisted wall-card jitter to the CURRENT reservation (Opus adversarial REFUTE)
dd65c545a test(learning-lab): pin guest browse has zero auth friction, login modal only at checkout
91854b757 Revert "Merge fix/own-card-emergence-identity: own submitted card emerges from centre again"
0e78e56a3 Merge fix/own-card-emergence-identity: own submitted card emerges from centre again
33073923b fix(start-gate): own submitted card emerges from centre again (identity-keyed bypass)
8e73b6586 test(start-gate): fix tautological seam-exclusion assertions found by sabotage
4ca9ad555 Merge origin/staging-next (PR #703) into local staging-next
0a9a8281b Merge pull request #703 from braceyourself/fix/wall-seam-jitter-avatar
e2f3f9603 fix(start-gate): wall cards get real per-axis jitter, avoid the split-line, and survive a resize without colliding
84b3b9ab3 fix(start-gate): reconcile capacity-count tests with the merged per-axis perimeter fix + seam exclusion
b81071958 fix(learning-lab): make pay-it-forward CTAs usable, not dead buttons
4a5b81024 fix(start-gate): wall cards get real per-axis jitter, avoid the split-line, and survive a resize without colliding
2aff3d349 Merge remote-tracking branch 'origin/fix/process-guard-test-runner-crash' into staging-next
0c257eab3 fix(tests): bind process.stdout.write/process.exit eagerly before mutating process
bd247d379 skill(swarm-test): exclude .wrangler and tolerate rsync exit 24 when mirroring the serving worktree
7c84059d7 fix(start-gate): per-axis perimeter margin -- short/landscape viewports no longer starve to zero wall slots
9a7384f87 docs(billing): document the unhandled-webhook default handler and the two live STDB shape traps
2fd1e25f0 fix(tests): isolate process-guard test in a child process to stop it crashing the test runner
6a9855565 Merge origin/staging-next (PR #702) into local staging-next
117364315 Merge pull request #702 from braceyourself/fix/syncstatus-auth-stuck
25931e2f7 fix(sync-status): surface auth-stuck in SyncStatusPill, closing PR #700's sibling gap
76fbb9a3c Merge fix/webhook-unhandled-notify: live-STDB shape fixes
cca24b5dc fix(webhook): admin lookup must not use IN, and identity arrives nested -- both found by live probe
f064d3475 Merge fix/webhook-unhandled-notify: unclaimed webhook events notify admins instead of a silent 200
d24ae2957 feat(webhook): GREEN -- an unclaimed webhook event notifies admins, never a silent 200
ea1403c13 test(webhook): RED -- an unclaimed inbound webhook event must notify admins
f5289b131 Merge origin/staging-next into local staging-next (reconcile with fix/wedge-hover-disable)
6b9f50c0a Merge branch 'fix/wedge-hover-disable' into staging-next-merge-tmp
1e26e22f8 Merge fix/wall-perimeter-edge-margin: perimeter keep-out margin for wall cards
21e662d53 fix(start-gate): disable wedge hover effect entirely, no resize/seal-shift/brightness on hover
ecc763cc7 Merge pull request #701 from braceyourself/fix/start-gate-trickle-and-pile
368834e58 fix(start-gate): an invisible gratitude card must also be inert (a11y)
88b393103 Merge fix/wall-edge-clip-and-random-placement: wall cards never clip a viewport edge + genuinely random placement
fe23f8f5e Merge origin/staging-next (PR #700 auth-blocked-recovery) into local staging-next
617eb1a42 fix(start-gate): perimeter keep-out margin so wall cards sit inboard, not near the edge
eab58cd02 fix(start-gate): wall cards never clip a viewport edge + placement is genuinely random per load
3d051b999 fix(stripe-webhook): an account-value event that fails is never a silent 200
e3cd47b09 Merge pull request #700 from braceyourself/fix/auth-blocked-actionable-recovery
329fdc1f4 fix(auth-blocked): stop claiming an automatic reconnect is ongoing once it genuinely has stopped
5f8f89ff1 Merge stripe-account-value-events: an account-value webhook event that fails is never a silent 200
03abc05f5 fix(stripe-webhook): an account-value event that fails is never a silent 200
de98c4fec Merge origin/staging-next (PR #699 queued/released-card fix) into local staging-next
f44e32a68 Merge pull request #699 from braceyourself/fix/start-gate-trickle-and-pile
eeebcb7ed fix(start-gate): queued and already-released cards stop piling opaque on the monogram
785d921fd Merge fix/wall-card-never-vanishes: an unanimated gratitude card no longer paints opaque on the monogram
f56da6655 fix(start-gate): an unanimated wall card sits at its own slot and still reveals
2a80a4931 Merge origin/staging-next
69c7776e9 fix(auth): name the missing config key when exchange-token cannot mint a session
5f50fe51c fix(auth): name the missing config key when exchange-token cannot mint a session
f370f4f29 Merge pull request #698 from braceyourself/fix/gratitude-trickle-release
d51fb12f2 fix(start-gate): batch-then-pump the release queue + fix radial-cards geometry test for the new one-at-a-time model
ac0015b05 fix(start-gate): trickle-release queue for fresh gratitude cards (one at a time, random order, paced, never repeats)
9c10fdd64 test(start-gate): RED tests for trickle release queue (one-at-a-time, random order, never-repeat)
82da7c8d0 fix(ci): guard process env access in stdb-client.js (Pages Functions has no process global)
d11d16641 Merge pull request #697 from braceyourself/fix/pinkbox-monogram-stranded-cards
8c0b1edb4 fix(start-gate): stop stranding fresh gratitude cards frozen on the monogram
9a1de1600 Merge origin/staging-next (PR #696) - disjoint from gratitude-anon-mirror-and-own-pin changes
626ebcb82 Merge pull request #696 from braceyourself/fix/start-gate-notification-and-anon-echo
b589a8df2 Merge fix/gratitude-anon-mirror-and-own-pin: anon gratitude reliably reaches the public wall + own-entry eviction pin
e54f275c5 fix(start-gate): hide the internal sync/outbox debug chrome on /start, keep it observable to us
f6a1d6d31 fix(gratitude): anon submissions reliably reach the public wall + own entry pinned against eviction
1c4e592b8 Merge fix/float-ongate-layer: fix parallel-render-tree float bug (Opus adversarial catch)
96f77b1ac fix(start-gate): hover/float vars were missing from the on-gate ambient layer (parallel-render-tree bug)
dc4463d46 Merge pull request #695 from braceyourself/chore/swarm-skill-full-output-and-control-run
c38797867 docs(skills): record two swarm-test-invocation gotchas from 2026-07-30 PR audit
45c1e6c04 Merge pull request #684 from braceyourself/feat/table-access-mode-classification
0ac5c1120 docs(onboarding): cross-domain onboarding research and a delta plan
5d9b2e211 docs(skills): correct visual-verify's banned local dev server and record swarm node-down bounds
c4a741bd3 feat(sync-reliability): classify every STDB table as subscription vs api
bc93aefcb Merge fix/gate-modal-community-signin: hover/float-in-place motion
57e64ec61 feat(start-gate): gratitude wall cards hover/float in place around their resting slot
9449964af Merge fix/gate-modal-community-signin: gate-modal copy fixes + wall-scatter banding fix
375b0459d fix(start-gate): remove in-card community list, reword sign-in copy, fix wall-scatter banding
825da6bc2 Merge pull request #694 from braceyourself/fix/wall-stale-angle-tests
4e0972b45 test(start-gate): update 2 stale data-angle assertions missed by the wall redesign
b621d9c2e docs(skills): add stripe-webhook-live-diagnosis procedural skill
e5f9a6087 Merge pull request #693 from braceyourself/feat/gate-wall-redesign
aa8fa340c fix(start-gate): fix 3 real bugs caught by Opus adversarial pass
56a746480 Merge pull request #692 from braceyourself/feat/gate-wall-redesign
06bfeecce fix(start-gate): shrink wall grid cells on narrow viewports (mobile starvation)
15195420e test(WallView): stub the community-pool fetch so its rejection cannot log after teardown
962d88359 Merge pull request #691 from braceyourself/feat/gate-wall-redesign
69d18b8ce feat(start-gate): replace drift-off-screen gratitude cards with a static wall
28009f4f8 fix(stripe-webhook): fail closed with 503 when a Stripe config value cannot be decrypted
85db54aa3 Merge fix-seal-teleport: no-teleport fix for the stale-origin correction (second Opus adversarial catch)
2468c0eec fix(start-gate): fix seal-hover teleport regression from the stale-origin fix
d2cff2266 Merge fix/card-acuity-and-slowfeed: acuity, teal-ink fix, stale-origin fix, own-submission slow-feed survival
fdea65a7c fix(start-gate): fix stale radial origin on seal hover-shift + teal ink invisible-over-dark-region bug
28c3161ab fix(start-gate): own-submission card survives a slow community-feed fetch
53bb9747c fix(start-gate): increase visual acuity of floating gratitude entries
ae01bd404 Merge pull request #683 from braceyourself/fix/phase911-test-home-isolation
c17f27e7d fix(test-infra): isolate HOME in phase-9.11-e2e-verify CLI-absent test
901478712 Merge pull request #682 from braceyourself/fix/rls-split-privacy-release-20260729
6f0609b81 fix(privacy-release): reword WallView comment to avoid tripping gratitude-pools disambiguation guard
e4c75a5bc fix(privacy): narrow RLS split release closing gratitude_entries/joy_profiles + 7 more
1836efdc9 Merge PR #690: RLS privacy release
a2ffb7472 chore(stdb): refresh schema snapshot timestamp after regen (no shape drift)
4db2b9842 fix(privacy-release): reword WallView comment to avoid tripping gratitude-pools disambiguation guard
85246716d fix(privacy): narrow RLS split release closing gratitude_entries/joy_profiles + 7 more
d558be3d5 Merge fix/monogram-origin-fade: gratitude cards originate at monogram + stay invisible until clearing it
4f4ea6fe8 fix(start-gate): gratitude cards originate at the monogram and stay invisible until clearing it
61ae9942f Merge PR #689: bounded API fetch timeout
11cd97357 fix(stdb-client): bound every outbound STDB fetch with a timeout
6a8ac2a6c Merge origin/staging-next (PR #680 outbox fix) into local staging-next
b6a236b42 Merge PR #680: outbox never drops writes
5ff3b2248 test(forms): harden textarea auto-grow wiring guard against comment-residue sabotage
add0be23e fix(outbox): never dead-letter writes; surface anon/rejected STDB auth as an honest, distinct status
6f1d0dd3b app-version: expose servedBranch/servedCommit/servedSince (staging-drift observability)
699c89305 fix(start): floating-gratitude ink tracks the wedge it is actually over
6dd087b49 feat(creator-studio): run onboarding as a modal from within Creator Studio
a670c38f4 docs(skills): rewrite visual-verify around the staging tunnel, not a banned local dev server
556994419 feat(router): retire the bare /app dashboard and point restart-onboarding at the creator side
31bfebbde fix(welcome): make hero tagline readable on cream card and remove tour link
74cf7fc0c ci: schedule on shared joyos-swarm label instead of pinning as3
a815ba7b8 docs: point to architecture decision map as source of truth
76b57b1f5 feat(creator-studio): make onboarding transient instead of a permanent tab
003d63698 feat(forms): make textarea auto-grow automatic app-wide, no per-site opt-in
6e505c581 remove dead community_records_v2 client subscription surface
e5da1e911 docs: findings writeup for the offer-wizard coaching-disabled fix (PR #681)
cada34464 fix(learning-lab): guard the in-page My Library link for guests
12e49a5ee docs(arch-map): record swarm, ui-verify and layout-backup recipes in the owning agent
954542d1a Merge feat/arch-map: decision record, layout persistence, map-currency doctrine
67ed576de fix(learning-lab): hide Home nav tab for guests + redirect guest direct access to Discover
124f43fc6 docs(arch-map): standing rule that every change updates the map; drift-guard design; ui and hmr verifiers
f6f659867 Merge fix/gratitude-spawn-radius-tight: box-overhang-aware spawn-radius floors
74c325d4e fix(start): fold card-box half-diagonal into halo/modal spawn-radius floors
690529c2d feat(arch-map): persist node layout outside the model; reset affordance
fbba053b9 Merge fix/gratitude-own-submission-emergence: optimistic post-submit card emergence
04e3d47e8 fix(start-gate): reset gateCompletedToday mock explicitly per test (own-submission-emergence tests)
d34c356bd test(start-gate): RED tests for own-submission emergence (fork-door)
08e8b436a feat(arch-map): decision record - durable log of decisions already made
c2924457e Merge fix/gratitude-spawn-radius-tight: tighten floating-gratitude-card spawn radius
ca2c1b6be fix(start): tighten floating-gratitude-card spawn radius to hug the center composition
488fe9432 feat(learning-lab): reactive buttons on the membership cards
e9b2da753 test: RED - spawn-radius geometry assertions (birth ring tightening + position-hold + modal floor)
5ed730b6c fix(arch-map): state the table enumeration gap instead of implying a total
f681dcceb feat(arch-map): use dagre LR layout so tiers stay legible
1a8632c8c feat(arch-map): live architecture decision map from static YAML
bfb240b12 Merge pull request #681 from braceyourself/fix/coaching-disabled-classification
059026648 fix(offer-wizard): classify listing kind by category, not live-session toggle
5fd8ab0c2 docs: record agent-currency closure, negative-control output and one observed incident
11672d95f docs(guard): warn that the ownership snapshot must be regenerated on the desktop
075423faf feat(guard): add agent-currency guard with staleness, dangling-skill and ownership detectors
407a872cb feat(agents): create owners for eight orphaned features, add swarm-test-invocation skill
b3ad9100e chore(agents): correct stale admin and billing agents, wire project skills into gen-1 agents
46b61117c Merge pull request #679 from braceyourself/feat/admin-waitlist-csv-export
29d15ec70 feat(admin): add CSV export to the waitlist admin tab
08e419cb9 Merge pull request #675 from braceyourself/docs/skill-safety-fixes-20260729
9a08d07ff Merge pull request #666 from braceyourself/fix/main-test-gates-20260728
2d2455e47 Merge pull request #678 from braceyourself/docs/serving-tree-detection-20260729
9ce4d5ae0 docs: correct the live-serving-tree detection recipe to the systemd unit
250eedd72 deploy.sh: guard push subcommand against non-main branch, multi-file, and spacetimedb changes
af3fd876d docs(skills): gate deploy skill on single-file-only direct push to main; use as3.local in minio skill
faea57ce1 docs: point community agent at the guarded gratitude accessor and fix a dead migration doc link
ebe84d628 docs: rewrite stdb-additive-migration skill to remove banned manual publish, wrong bindings path, and push-to-main
774180aae merge: reconcile PR #666 with staging-next f95813f9e
9fdcbb51a test(gratitude): pin buildGratitudeMirrorRows() 4th arg to attribution.userId
608aec6d7 fix(gratitude): anonymize public-by-default community mirror rows
7e5842a2a docs: findings for dead consent-export cleanup (collectOptedInIdentities)
8459b277a fix(gratitude): remove dead collectOptedInIdentities export, guard against recurrence
4ca59a3e1 docs(skill): fix stdb-additive-migration steps that violated repo hard rules
43365338a merge: reconcile PR #666 with main dad567f5b, keeping the 0003 migration
a59107171 docs(gratitude): reconcile the Two Gratitude Tables doctrine with the mirror
dad567f5b wip(job-1785259537-18545): post-agent checkpoint (claude exit 124) (#669)
2be521d0b fix(gratitude): exclude harness rows from the public /start feed
39173c1e5 feat(gratitude): public-by-default via G3 mirror, remove zero-row journal read
3f0e0bb5d chore(bindings): regenerate client bindings for visits public:false flip
223628017 fix(security): close visits table, make gratitude_entries public-by-default for display only
143e8fe97 fix(migrations): renumber admin_identities away from 0003, not community_records_is_test
d0fc8cd38 Revert "fix(migrations): remove duplicate 0003 community_records_is_test migration"
1a589acf2 test(nav): update stale creator-sidebar specs to match approved shape
6833ce157 fix(migrations): remove duplicate 0003 community_records_is_test migration
3d007f1e7 Merge pull request #637 from braceyourself/staging-next
d0487a774 Merge pull request #640 from braceyourself/fix/is-test-migration
278915bbf Declare the additive is_test columns in a migration (0003)
562ca4734 Merge pull request #638 from braceyourself/fix/schema-shape-is-test
0691a7d50 Update community_records/v2 schema-shape guards for the added is_test column
07c120e73 Merge pull request #677 from braceyourself/fix/gratitude-harness-filter-20260729
9e8f104db fix(gratitude): exclude harness rows from the public /start feed
b1dfa43dd swarm: job-1785301434-19926 -- gratitude pool guards, is_test filter parity, migration 0003/0005 dedupe (#676)
f95813f9e docs: update serving-tree-recipe port tracing method (#674)
d58907dec docs(stdb): add RLS service-reader grant patterns and proven findings
8bdb8ea14 fix(offer-wizard): wire AI description assist into the description step (#673)
7d7e840ec doc: add SpacetimeDB RLS exemption doctrine to Classic Issues section
a35ee9a0c fix(onboarding): restart onboarding navigates to /app, not /welcome (#671)
0d03f0322 fix(checkout): never report an RLS-hidden users table as "Not a registered user"
793ba95ae feat(tooling): add feature status tracker (computed, never hand-typed)
afd1b0db9 feat(staging): staging-currency guard (pre-push gate + checker + watchdog leg)
cba9012a A gratitude entry that fails to save now gets retried automatically on a timer, instead of sitting stuck until you happen to do something else
c4c9e4f0 Added the failing test that proves a stuck save is retried on its own with no other nudge
47a3d0a0 Dismissing the notification-preferences prompt now sticks for good instead of reappearing
5b6d1eee Added the failing test for the notification prompt staying dismissed
f5ac9010 Settings in the Learning Lab now opens as a panel over the page instead of taking you to a separate screen
d8ad3819 The welcome page is now a three-step sequence - intro, video, then consent
4bdad529 Corrected a stale note about how the creator sidebar is filtered
825a611d The creator navigation now respects the creator-onboarding switch, and old removal tests were retired
fbd9ffe2 Added the failing test for the onboarding nav item respecting its switch
a6d0fd04 Creator Studio's main area now matches the dark theme so the mobile bottom strip no longer looks off
8890e0b6 Creator onboarding is now limited to Catalyst members and admins, and the mobile top bar theme was fixed
557413a7 Retired the old staging web address - staging now lives at one place only, joyos-lab.braceyourself.solutions, so there is no confusion about which site is the real one
75bff0fd Creator Studio now has a first-pass guided setup walkthrough - four steps, hidden behind an admin-only switch while it is being shaped
bdddb521 Swept the live database for anything readable by the public and wrote down every table that is currently exposed
7550a8bd Corrected an earlier overstatement in the notes: the stray backup files left in the hooks folder are harmless and need no action
e1a23712 Counted every file sitting in leftover working copies that was never saved anywhere else - the remaining risk of losing work is low
cb1d5c96 Retracted an inaccurate claim about the project guidance file and recorded the date of the tree currently serving staging
68c0f0d9 Preserved the unsaved edits sitting in 27 leftover working copies, without disturbing any of them
5d44e84e Rescued the unpushed commits from 34 leftover working copies up to the backup remote, verified
e4052747 Read-only audit of the 237 leftover working copies on disk - identified roughly 72GB that can be reclaimed, nothing deleted yet
8eb7a7ec The landing page now has a clear primary button under the tagline that takes visitors straight into the entry gate
f1c35f20 Wrote down the purpose plainly in the project's own guidance: joy is the goal, and values, purpose and meaning are what follow from it
9b574de2 Triaged the open change requests and corrected the note explaining which schema check is intentionally skipped
20d40940 The floating gratitude cards on the entry gate no longer thin out when the layout tightens - the pool of cards is now independent of how densely they are placed
3abe9ca6 Locked in which gratitude source each surface reads from, so community posts and a member's own private entries can never be shown in the wrong place
58f289c1 Test-only sample entries are now filtered out no matter where the marker appears in the text, not just at the start
4ae8dd1b Added a check that the database client code was generated by the exact pinned tool version - the mismatch that caused last week's outage now fails the build instead of shipping
60228139 Creator Studio now has a Learning Lab link in its sidebar, and the entry gate at /start carries the joyOS monogram
570f9418 Community gratitude on the entry gate now draws from every post, shown in a random mix, instead of repeating the same three
4a8b9d9b Regenerated the database client code so the staging build matches the live schema again (prevents the class of crash that took the site down last week)
357a27b4 Email digest no longer dies on a single malformed row; a bad record is skipped instead of stopping the whole digest
20ee3ebb Turned on a Stripe test that had silently stopped running, plus a guard so no test file can go dead unnoticed again
d3f2623e New guard fails the build if the app ever tries to subscribe to a server-private table, closing the door on a whole class of data-exposure bug
8c1dc208 Deploy alerting now watches the staging site too, not just production, so a broken staging deploy is noticed immediately
9480d4e6 Removed a duplicate database migration that was blocking staging from deploying at all
4a9b0468 Test runner no longer picks up stray leftover checkouts, so test runs are consistent and trustworthy
562b39f2 Learning Lab pricing: the $597 Joy Catalyst card copy is now legible on its dark background, and the tier-count heading is correct
4e387d2a Build system recovered another orphaned in-progress work checkpoint and replayed it onto the current code base
ad738833 Build system: recovered an orphaned in-progress work checkpoint and replayed it onto the current code base so nothing was lost
8d90df9b Founding Hub avatars: profile-picture lookups were silently blocked by the site's security policy, so avatars never appeared. The lookup is now permitted and avatars load
f5319e9a Test data cleanup: the new “this is test content” marker on community gratitude is now declared properly in the database migration, so the change deploys cleanly
17e2850e Safety checks updated so the new test-content marker does not trip the guards that watch for accidental database shape changes
371b3d51 Community feed: gratitude posted while testing is now flagged as test content and hidden from the public feed, with a one-click purge for it
dc0f3fb8 Wrote the failing tests first proving the public gratitude feed must never show test content
3d1130e6 Deploy pipeline: fixed a staging build failure caused by missing database module dependencies
07a3cf38 Staging health check no longer flags the per-viewer message table as suspiciously empty, since it only fills in as people read
44492ff0 Security: admin group-chat message bodies were readable by anyone connected. Messages are now fanned out per recipient on the server so only the intended people can read them
acc71338 Wrote the failing test that reproduced the world-readable admin chat messages before fixing it
02f4a70a Finished wiring the app to the new per-recipient message read path
93652e49 Security: private one-to-one chat messages were visible across accounts. Reads are now scoped to your own identity
1477c409 Wrote the failing test that reproduced cross-account chat message readability
310cbcf9 Security: admin power was granted by matching an email address, which can be spoofed. Admin trust now comes from a verified identity, closed everywhere in the codebase
8859479f Personal data tables (invites, profiles, and friends) are now readable only by their owner
154c5837 Wrote the failing tests exposing the admin-escalation and missing data-privacy holes before any fix
f86f5f0a Declared the new verified-admin identity table in the migration so it deploys cleanly
9a994971 Deploy alarm: when the health check cannot tell what the live site is serving, it now says so plainly (“freshness unverified”) instead of wrongly claiming the site is out of date
eeb9ea81 Deploy alarm: proved the alarm for real — a failed deploy sends the email, four failures in a row shout louder, an out-of-date live site is caught, and repeat runs do not spam
8f91bfd1 Deploy alarm: the live site is now watched every 15 minutes from the always-on server, so a failed deploy or a stale live site raises an alert instead of going unnoticed for hours
28c61616 Gratitude gate: proved on the live staging site that /start shows real member gratitude — the words people actually wrote reach the screen, and both halves of the door stay clearly readable on desktop and phone
6abff0a8 Housekeeping: saved an in-progress build checkpoint so no work was lost when a long-running job timed out
bdcea184 Gratitude gate: the Creator Studio side now reports when it is genuinely ready, and anyone without Catalyst access is turned away immediately instead of being left waiting at the door
6dd95af5 Admin settings: the feature-flag on/off switch is now a real click target, so toggling a feature actually responds when you click it
09176864 Admin settings: added the failing check that reproduced the unclickable feature-flag switch, so it cannot silently come back
afa184cd Gratitude gate: the Learning Lab now reports for itself when it is genuinely ready, so the gate-open overlay lifts at the right moment — and lifts immediately rather than stranding anyone if the connection drops or the community is empty
46f42724 Gratitude gate: the floating gratitude cards now settle smoothly once the gate finishes opening, instead of stopping abruptly
028bedb7 Housekeeping: folded the fixes that were only on the live staging machine back into the shared staging line, together with the gate hand-off wiring
adf994bb Notes: wrote up the 2026-07-25 deploy hold-up (stale tests plus a schema check that could not authenticate) so it is not re-diagnosed from scratch next time
abc7b3c5 Deploy pipeline: the schema safety check can now sign in properly, so deploys stop failing on that step
55cd63d9 Deploy pipeline: refreshed old tests that still expected earlier versions of the gate and offer wizard, which were blocking every deploy
f5f4ab32 Gratitude gate: the two doors on /start are now live — choosing Learning Lab or Creator Studio opens the gate and hands you through to the right side
78aea09b Gratitude gate: the “how many floating gratitude cards” setting is now proven to actually change how many appear on /start
8fe171dd Gratitude gate: fixed a memory blow-up in the circular card layout, plus the stale tests that were masking it
ac1c38ce Gratitude gate: closed four issues an adversarial review found in the gate-open transition, so passing through the gate is smooth and correct
a6e4d127 Housekeeping: brought the live production line back into the staging line so staging is testing against everything that has shipped
81e06b43 Gratitude gate: fixed a crash that could blank the /start page when the floating gratitude cards were placed, and tightened the sign-in test doubles that were hiding it
a9ffd1a8 Gratitude gate: first two slices of the gate-open transition — the page now knows when the destination behind the gate is genuinely ready, and an overlay carries the visitor through instead of a hard cut
8e6696d1 Gratitude gate: fixed the floating cards’ geometry after an adversarial review, and they now recycle continuously so the field never thins out
744a4e24 Gratitude gate: the ambient gratitude snippets were all clumping in the top-left corner; they now scatter properly across the panel
31f3c522 Gratitude gate: added the ambient gratitude background layer to the /start fork door
b71f69e8 Creator side: the settings page moved to /creator-studio/settings, with the old address redirecting permanently so no existing link breaks
e605210d Reliability: pinned the SpacetimeDB command-line tool to one exact version in the deploy pipeline — a silent version drift there was the root cause of the 2026-07-22 production outage
52002b32 Reliability: three follow-on deploy-pipeline fixes so a production deploy can no longer hang or stop halfway after the database schema publishes
422745e0 Internal: wrote up the 2026-07-22 production incident and the resulting direction to keep the app and the database schema separated
81c44569 Reliability: a safety check was failing on the wording of a code comment rather than a real problem, blocking production deploys — reworded so real deploys get through
e2b643ab Gratitude gate: the floating gratitude cards had stopped moving once the gate closed — caught by measuring the live page, and now they keep drifting
3eea4ba9 Gratitude gate: gratitude cards now emanate outward from the centre with smoother motion, the call-to-action stays visible at all times, and the whole gate got a mobile pass
fb7b8a40 Marketplace: a change that would have shown an error when the browser blocks the post-purchase access popup was rolled back for now, so purchase behavior is unchanged
a0373bb3 Internal: the control-plane spec for the autonomous build system now answers 9 of its 13 open questions, checked against how the machines actually run today
e2c2f0f4 Gratitude gate: the floating gratitude on /start is brighter and drifts more slowly, hovering a card slows its neighbours and holds an entering card in place, and the cursor no longer changes where nothing is clickable
9f78b3dd Privacy settings: proved on live staging that flipping the AI personalization consent toggle really saves to the database in both directions, and locked in that the save still succeeds even if the audit-log write fails (#626)
1cd5a3d2 Gratitude gate: signed-out visitors were told “your gratitude hasn’t saved yet” even though it had — the visitor now sees their own entry come back from the server, so the false failure banner is gone (#625)
05fb70df Admin can now set how densely the floating gratitude cards scatter on the /start gate, instead of it being hardcoded (#624)
4496cdea Privacy settings: turning the AI personalization consent toggle off now actually saves — every consent change had been silently failing and rolling back since the feature shipped (#623)
17e5bf93 Marketplace: confirmed on staging that the seeded sample offers really landed in the database and render on the live Learning Lab at their real prices (#622)
6a70b61f Learning Lab: full end-to-end pass on staging — browsing, filters, listing detail, checkout start, My Library, Accelerator, settings save, and every legacy redirect all verified working (#621)
4b13fb0a Gratitude gate: the ambient floating gratitude on /start is now ghosted tone-on-tone text that floats bottom-to-top and stays fully on one side of the diagonal split, with card density set from an admin setting (#620)
3c442631 Marketplace: staging now seeds one real active offer of each type (digital, service, bundle, experiment) for the demo creator, so every offer surface renders with real data instead of placeholders (#619)
7cf9c4b2 Landing: the Enter the Lab button now sends signed-in members straight to the /start gate (#618)
dfd6162c Swarm build job checkpoint landed (#617)
0857a283 Creator Studio: the My Offers panel now lists the creator's real offers instead of a Coming Soon placeholder (#616)
b75d495d Staging freshness: the dev tunnel now serves the correct staging-next worktree with an exact refspec, so what you see is what shipped (#615)
bd2df6ff Swarm build job checkpoint landed (#614)
5b503c62 Creator Studio: RED tests for the My Offers real offer list, ahead of wiring it to live data (#613)
b067f901 Gratitude gate G3: the opt-in path is now live and E2E-verified on staging (#612)
b856ca16 Staging verify: E2E-confirmed the single-tab checkout, unified Creator Studio shell, and gratitude-gate fixes landed on the tunnel (#604/#605/#606, #609)
9dadf3b2 Gratitude fork background: the ambient scatter is now visible and passed the design gate (#UI1/#G4, #607)
d64d9523 Gratitude gate: an anonymous identity no longer wipes the daily gate flag (#606)
14d60dbc Creator Studio: all /creator-studio routes now share one shell, with the real Studio sub-routes wired in (#605)
dd2bda58 Marketplace checkout: clicking buy now opens a single tab instead of two (#604)
e9f7b698 Bindings: regenerated with the pinned SpacetimeDB CLI 2.6.1, restoring a procedures export that a drifted CLI had silently dropped (#603)
755f5c41 Swarm build job landed (#602)
2d1db687 Docs: reconciled the warm-Claude control-plane spec against the real worklog and tick formats (#601)
7fa641d8 Docs: warm-Claude control-plane design spec (spec only) (#600)
3a87491d Swarm build job landed (#599)
882bce9b test(gate-bg): real display-path E2E for ambient gratitude background on /start
7dc80e69 fix(fork): scatter gratitude-bg items via precomputed inline positions
717c68d3 feat(fork): add ambient gratitude background layer (UI1 GREEN)
3fe41e35 test(UI1): RED tests for gratitude ambient background on StartForkView
c5b8638f feat(router): GREEN - settings route moves to /creator-studio/settings with permanent redirect (#UI2)
8794a1bd test(router): RED - settings route moves to /creator-studio/settings with permanent redirect (#UI2)
6f0f9d46 Offline mode: when reconnect attempts run out, the app now falls back to a slow keep-alive retry and keeps showing “Connecting” instead of giving up
9ea46406 Schema-drift gate: fixed two false positives that were flagging every private table as a destructive drop, and added a tombstone allowlist — unblocks the staging schema publish
b095a80d Schema migrations: the migration runner now really applies and records migrations against SpacetimeDB, plus a drift check that catches an un-migrated schema change
4353fac6 STDB writes: failed writes are now LOUD instead of silently resolving to an empty result
6581d3b1 Hooks: stop running the test suite in git hooks on this branch
ae03b328 Creator Studio: creator-focused sidenav with separate Studio and Account lanes
a2b6dfbe Boot: removed the static initial-splash gate entirely — no full-page loading cover
ed1c4c51 Security: closed anonymous read access to magic-link nonces and Stripe subscriptions
c953f9fe Tests: resolved 5 inherited test failures on staging-next
5af18d35 CI: allowlist 4 write-on-use tables in the staging empty-table gate
7126bcdd CI: publish the staging schema only on pushes to staging-next
66e0c50a Schema-migration ledger — slice 2 integrated onto staging-next
4b7b0e27 Sign-in: drop the preview-token stranding path, keep the tunnel's anon build
e4b676eb Tests: remove hook-scope tests obsoleted by the no-tests-in-git-hooks change (#580)
b2d8ab25 Offline mode: re-landed the full offline-mode line (dev/live-tunnel) onto staging-next
77282048 Schema-migration ledger — GREEN slice 1: pure kernel, CLI + STDB driver, schema_migrations table + record_migration reducer (#582)
285626a9 Top-level 404 handler merged onto staging-next
7a1d6671 Router: add top-level 404 handler with NotFoundView
0302e51c Hooks: stop running vitest in git hooks + add regression guard (#580)
697686f8 Schema-migration ledger kernel — RED slice 1 tests + stub (#579)
a702e181 CI: allowlist the mutation_results empty-table gate on staging
536ef08 Live E2E proving periodic re-flush recovers a stuck outbox write
c70b038 Hotfix: exempt dev-auth-bypass sessions from the no-users-row grace timer
3196db4 Hotfix: close stranded-legacy-untagged-anon-token gap in the login-hang fix
7c71227 Hotfix: login-hang fix (signed-in-anon-socket authError + sticky-anon token guard)
470d432 Docs: staging/CI gotchas — dead AS3 runner, promote-head staleness, outbox re-flush, npm-shim hang
d7ea726 Docs: syncable contract spec for the local-first plan
975e146 Docs: preserve local-first inversion design of record
3e4d5d8 Backmerge of origin/main (login-hang hotfix) into staging-next
49b9788 Merged PRs #556, #576, #577, #578