Pre-launch — Gluecron is in final validation. Public signups and git hosting for non-owner users open after launch review.
ccantynz/Gluecron.com
CodeIssuesPull RequestsActionsSecurityInsightsSettings
✨ AI
ExplainAsk AIWorkspaceSpec to PRTestsNL SearchDebt MapArchaeology
More
CommitsDiscussionsWikiProjectsReleasesContributorsPulseGatesDeploymentsPipelineAgents
Blame · Line-by-line history

BUILD_BIBLE.md

Each line is annotated with the commit that last touched it. Click any SHA to jump to that commit and see the surrounding change.

Gluecron.com/BUILD_BIBLE.md
BUILD_BIBLE.mdBlame397 lines · 1 contributor
Normal viewRaw
9ab6971Claude1# GLUECRON BUILD BIBLE
2
3**This file is the single source of truth for the GlueCron build.**
4
5**Every Claude agent MUST read this file in full before touching code. No exceptions.**
6
7GlueCron is a GitHub replacement — AI-native code intelligence, green ecosystem enforcement, git hosting, automated CI. It is production infrastructure for multiple downstream platforms. Production cannot stop.
8
9---
10
11## 1. AGENT POLICY (READ FIRST, FOLLOW ALWAYS)
12
13### 1.1 Required reads at session start
141. `BUILD_BIBLE.md` (this file) — complete
152. `CLAUDE.md` — stack + architecture
163. `README.md` — user-facing overview
174. Most recent commit on the current branch (`git log -1 --stat`)
18
19### 1.2 Do-not-undo rule
20- Anything listed in **§4 LOCKED BLOCKS** is shipped and must not be deleted, renamed, or semantically altered without the owner's explicit written permission in the current session.
21- "Refactor" is not permission. "Clean up" is not permission. "Simplify" is not permission.
22- If a locked file seems wrong, open an issue in the plan and keep going on a new block.
23
24### 1.3 Continuous-build rule
25- The owner runs many parallel projects. Do not stop work to ask for clarification that can be inferred from this file.
26- Default behaviour when a block is partially complete: **finish it, run tests, commit, push, start the next block**.
27- Only stop for genuinely blocking decisions: destructive operations, architectural reversals, requests outside this plan, or repeated test failures you can't diagnose.
28- Never stop because "the session might run out." Commit what works and keep building.
29
30### 1.4 Branch + commit rules
31- Development branch: whatever the current session was told (check session opening message). Fall back to `main` if none given.
32- One commit per completed block. Message format: `feat(BLOCK-ID): <summary>`.
33- Push after every commit with `git push -u origin <branch>`.
34- Never force-push. Never `--no-verify`. Never amend published commits.
35
36### 1.5 Quality bars (non-negotiable)
37- `bun test` must pass before every commit.
38- New features ship with tests in `src/__tests__/`.
39- New routes use `softAuth` or `requireAuth` middleware.
40- New DB tables have a corresponding migration in `drizzle/`.
41- AI features use `isAiAvailable()` guards and degrade gracefully without `ANTHROPIC_API_KEY`.
42- Every user-facing failure mode has a fallback — no 500s reach the UI.
43
44### 1.6 Green-ecosystem-by-default
45- Every new repo auto-configures: gates on, branch protection on, labels seeded, CODEOWNERS synced, welcome issue posted.
46- Users can opt out per feature but defaults are maximum-green.
47- Nothing broken ever reaches production, the website, or the customer.
48
49---
50
51## 2. GITHUB PARITY SCORECARD
52
53Legend: ✅ shipped · 🟡 partial · ❌ not built
54
55### 2.1 Repository hosting
56| Feature | Status | Notes |
57|---|---|---|
58| Git Smart HTTP (clone / push / fetch) | ✅ | `src/routes/git.ts`, `src/git/protocol.ts` |
59| SSH keys | ✅ | `ssh_keys` table, `src/routes/settings.tsx` |
60| Public / private visibility | ✅ | `repositories.isPrivate` |
61| Forking | ✅ | `src/routes/fork.ts` |
62| Stars | ✅ | `stars` table, `/:owner/:repo/star` |
63| Topics | ✅ | `repo_topics` table |
64| Archive / disable repo | ❌ | schema has flags; no UI |
65| Repository transfer | ❌ | — |
66| Template repositories | ❌ | — |
67| Repository mirroring | ❌ | — |
68
69### 2.2 Code browsing
70| Feature | Status | Notes |
71|---|---|---|
72| File tree browser | ✅ | `src/routes/web.tsx` |
73| Syntax highlighting | ✅ | 40+ languages, `src/lib/highlight.ts` |
74| Commit history | ✅ | |
75| Diffs | ✅ | |
76| Blame | ✅ | |
77| Raw file download | ✅ | |
78| Branch switcher | ✅ | |
79| Tag listing | ✅ | new this build |
80| Code search (ILIKE) | ✅ | per-repo + global |
81| Semantic / embedding search | ❌ | pgvector not wired |
82| Symbol / xref navigation | ❌ | — |
83
84### 2.3 Collaboration
85| Feature | Status | Notes |
86|---|---|---|
87| Issues (CRUD / comments / labels / close) | ✅ | |
88| Milestones | ✅ | `src/routes/insights.tsx` |
89| Pull requests (CRUD / review / merge) | ✅ | |
90| PR inline comments | ✅ | file+line anchored |
6fc53bdClaude91| Draft PRs | ✅ | create as draft, ready-for-review toggle, dedicated tab, merge blocked until ready |
92| Reactions (emoji) | ✅ | 8 reactions, toggle via `POST /api/reactions/:t/:id/:emoji/toggle` on issues + PRs + comments |
9ab6971Claude93| Mentions + notifications | ✅ | `src/routes/notifications.tsx` |
94| Code owners | ✅ | `src/lib/codeowners.ts` |
24cf2caClaude95| Issue templates | ✅ | `.github/ISSUE_TEMPLATE.md` auto-prefills new issues; frontmatter stripped; `src/lib/templates.ts` |
96| PR templates | ✅ | `.github/PULL_REQUEST_TEMPLATE.md` auto-prefills new PRs; `src/lib/templates.ts` |
97| Saved replies | ✅ | per-user canned comments, unique-shortcut, `/settings/replies`, `/api/user/replies` |
9ab6971Claude98| Discussions / forums | ❌ | |
99| Wikis | ❌ | |
100| Projects / kanban | ❌ | |
101
102### 2.4 Automation + AI
103| Feature | Status | Notes |
104|---|---|---|
ad6d4adClaude105| Webhooks (outbound, HMAC signed) | ✅ | `src/routes/webhooks.tsx` |
106| GateTest inbound callback | ✅ | `POST /api/hooks/gatetest`, bearer or HMAC |
107| Backup PAT-auth gate ingest | ✅ | `POST /api/v1/gate-runs` |
9ab6971Claude108| Gate runs (test / secret / AI review) | ✅ | `gate_runs` table, `src/routes/gates.tsx` |
109| Branch protection | ✅ | `branch_protection` table + UI |
110| Auto-repair engine | ✅ | `src/lib/auto-repair.ts` |
111| Secret scanner | ✅ | 15 patterns, `src/lib/security-scan.ts` |
112| AI security review | ✅ | Sonnet 4, `src/lib/security-scan.ts` |
113| AI commit messages | ✅ | `src/lib/ai-generators.ts` |
114| AI PR summaries | ✅ | |
115| AI changelogs | ✅ | auto on release create |
116| AI code review | ✅ | `src/lib/ai-review.ts` |
117| AI merge conflict resolver | ✅ | `src/lib/merge-resolver.ts` |
118| AI chat (global + repo) | ✅ | `src/routes/ask.tsx` |
119| GitHub Actions equivalent (workflow runner) | ❌ | GateTest integrated, no generic runner |
120| Dependabot equivalent (AI dep bumper) | ❌ | |
121| Code scanning UI | 🟡 | data exists, no dedicated UI page |
122| Copilot code completion | ❌ | |
123
124### 2.5 Platform
125| Feature | Status | Notes |
126|---|---|---|
127| Dashboard | ✅ | `src/routes/dashboard.tsx` |
128| Explore / discover | ✅ | |
129| Global search | ✅ | repos / users / issues / PRs |
130| Insights (graph, contributors, green rate) | ✅ | `src/routes/insights.tsx` |
131| Releases + tags | ✅ | AI changelog |
132| Personal access tokens | ✅ | SHA-256 hashed |
133| OAuth app provider | ❌ | |
134| GitHub Apps equivalent | ❌ | |
135| GraphQL API | ❌ | REST only |
136| Organizations + teams | ❌ | user-owned only |
137| Enterprise SAML / SSO | ❌ | |
138| 2FA / TOTP | ❌ | |
139| Passkeys / WebAuthn | ❌ | |
140| Packages registry (npm / docker / etc) | ❌ | |
141| Pages / static hosting | ❌ | |
142| Gists | ❌ | |
143| Sponsors | ❌ | |
144| Marketplace | ❌ | |
24cf2caClaude145| Environments / deployment tracking | ✅ | `src/routes/deployments.tsx` — grouped by env, success-rate rollup, per-deploy detail |
9ab6971Claude146| Merge queues | ❌ | |
147| Required checks matrix | 🟡 | branch_protection has single flag, no matrix |
148
149### 2.6 Observability + safety
150| Feature | Status | Notes |
151|---|---|---|
152| Rate limiting | ✅ | `src/middleware/rate-limit.ts` |
153| Request-ID tracing | ✅ | `src/middleware/request-context.ts` |
154| Health / readiness / metrics | ✅ | `/healthz` `/readyz` `/metrics` |
155| Audit log (table) | ✅ | `audit_log` table |
6fc53bdClaude156| Audit log UI | ✅ | `/settings/audit` (personal) + `/:owner/:repo/settings/audit` (per-repo, owner-only) |
9ab6971Claude157| Traffic analytics per repo | ❌ | |
24cf2caClaude158| Email notifications | ✅ | opt-in per kind (mention/assign/gate-fail) via `/settings`; provider-pluggable `src/lib/email.ts` (log default, resend in prod) |
9ab6971Claude159| Email digest | ❌ | |
160| Mobile PWA | 🟡 | responsive CSS, no manifest |
161| Native mobile apps | ❌ | |
6fc53bdClaude162| Dark mode | ✅ | default |
163| Light-mode toggle | ✅ | `/theme/toggle` + `theme` cookie, pre-paint script avoids FOUC, nav sun/moon icon |
9ab6971Claude164| Keyboard shortcuts | ✅ | `/shortcuts` page |
165| Command palette | 🟡 | Cmd+K → Ask AI, no generic palette |
166
167---
168
169## 3. BUILD PLAN (BLOCKS)
170
171Each block is a self-contained unit. Order matters for dependencies. Each block ends with tests + commit + push.
172
173### BLOCK A — Hardening the current surface
174Polish what's shipped before adding more. **Priority: do this first if parity gaps are minor.**
6fc53bdClaude175- **A1** — Dark/light theme toggle (cookie, CSS variable swap) ✅
176- **A2** — Audit log UI page (`/settings/audit` + `/:owner/:repo/settings/audit`) ✅
177- **A3** — Reactions UI on issues / PRs / comments (data exists) ✅
178- **A4** — Draft PR toggle + filter ✅
24cf2caClaude179- **A5** — Issue + PR templates (`.github/*_TEMPLATE.md` auto-prefill) ✅
180- **A6** — Saved replies per user ✅
181- **A7** — Environments + deployment history UI (`deployments` table) ✅
182- **A8** — Email notifications (opt-in, provider-pluggable) ✅
183
184**BLOCK A COMPLETE.** Next: BLOCK B (Identity + orgs).
9ab6971Claude185
186### BLOCK B — Identity + orgs
187- **B1** — Organizations (schema: `organizations`, `org_members`, `teams`, `team_members`)
188- **B2** — Repos owned by orgs (nullable `repositories.orgId`)
189- **B3** — Team-based CODEOWNERS (`@org/team` resolution)
190- **B4** — 2FA / TOTP (enroll, recovery codes)
191- **B5** — WebAuthn / passkeys
192- **B6** — OAuth 2.0 provider (third-party apps can request access)
193
194### BLOCK C — Runtime + hosting
195- **C1** — Actions-equivalent workflow runner
196 - Workflow YAML parser (`.gluecron/workflows/*.yml`)
197 - Job queue + worker pool (Bun subprocesses)
198 - Artifact storage + log streaming
199 - Integrates with gates
200- **C2** — Package registry (npm + container protocol)
201- **C3** — Pages / static hosting (`gh-pages` branch → served at `<owner>.<repo>.pages.gluecron.com`)
202- **C4** — Environments (prod/staging/preview) with protected approvals
203
204### BLOCK D — AI-native differentiation
205This is where GlueCron beats GitHub outright. **Priority: ship these loud.**
206- **D1** — Semantic code search (pgvector + Claude embeddings)
207- **D2** — AI dependency updater (reads lockfile, opens PRs, verifies green)
208- **D3** — AI PR triage agent (auto-assigns reviewers, labels, milestones)
209- **D4** — AI incident responder (on deploy failure, opens issue with root cause)
210- **D5** — AI code reviewer that blocks merges (enforced via branch protection "AI approval required")
211- **D6** — AI "explain this codebase" on repo landing (auto-generated, cached)
212- **D7** — AI changelog for every commit range (`/:owner/:repo/ai/changelog?from=...&to=...`)
213- **D8** — AI-generated test suite (reads public API, generates failing tests)
214- **D9** — Copilot-style completion endpoint for IDE plugins
215
216### BLOCK E — Collaboration parity
217- **E1** — Projects / kanban boards (`projects`, `project_items`, `project_fields`)
218- **E2** — Discussions (forum threads per repo)
219- **E3** — Wikis (git-backed, separate bare repo per repo)
220- **E4** — Gists (user-owned tiny repos)
221- **E5** — Merge queues (serialised merge with re-test)
222- **E6** — Required status checks matrix (multiple named checks per branch protection rule)
223- **E7** — Protected tags
224
225### BLOCK F — Observability + admin
226- **F1** — Traffic analytics per repo (views, clones, unique visitors)
227- **F2** — Org-wide insights (green rate across all repos)
228- **F3** — Admin / superuser panel (user moderation, repo audit)
229- **F4** — Billing + quotas (storage, AI tokens, bandwidth)
230
231### BLOCK G — Mobile + client
232- **G1** — PWA manifest + service worker
233- **G2** — GraphQL API mirror of REST
234- **G3** — Official CLI (`gluecron` binary in Bun)
235- **G4** — VS Code extension
236
237### BLOCK H — Marketplace
238- **H1** — App marketplace (install third-party apps against a repo)
239- **H2** — GitHub Apps equivalent (bot identities with scoped permissions)
240
241---
242
243## 4. LOCKED BLOCKS (DO NOT UNDO)
244
245Everything below is committed, tested, and load-bearing. **Do not delete, rename, or semantically change without owner permission.**
246
247### 4.1 Infrastructure (locked)
248- `src/app.tsx` — route composition, middleware order, error handlers
249- `src/index.ts` — Bun server entry
250- `src/lib/config.ts` — env getters (late-binding)
251- `src/db/schema.ts` — 27 tables. New tables only via new migration.
252- `src/db/index.ts` — lazy proxy DB connection
253- `src/db/migrate.ts` — migration runner
254- `drizzle/0000_initial.sql`, `drizzle/0001_green_ecosystem.sql` — migrations
255
256### 4.2 Git layer (locked)
257- `src/git/repository.ts` — tree / blob / commits / diff / branches / blame / search / raw / tags / commitsBetween
258- `src/git/protocol.ts` — Smart HTTP pkt-line
259- `src/hooks/post-receive.ts` — CODEOWNERS sync, gates, auto-deploy, webhook fan-out
260
261### 4.3 Auth + security (locked)
262- `src/lib/auth.ts` — bcrypt, session tokens
263- `src/middleware/auth.ts` — softAuth + requireAuth
264- `src/middleware/rate-limit.ts` — fixed-window limiter
265- `src/middleware/request-context.ts` — request-ID
266- `src/lib/security-scan.ts` — `SECRET_PATTERNS` (exported) + `scanForSecrets` + `aiSecurityScan`
267- `src/lib/codeowners.ts` — parser + `ownersForPath` (last-match-wins)
268
269### 4.4 AI layer (locked)
270- `src/lib/ai-client.ts` — Anthropic client + model constants
271- `src/lib/ai-generators.ts` — commit / PR / changelog / issue-triage
272- `src/lib/ai-chat.ts` — conversational chat
273- `src/lib/ai-review.ts` — PR code review
274- `src/lib/auto-repair.ts` — worktree-backed repair commits
275- `src/lib/merge-resolver.ts` — AI merge conflict resolution
276
277### 4.5 Platform (locked)
24cf2caClaude278- `src/lib/notify.ts` — notification creation + audit log (swallow-failures pattern). Also fans out email to opted-in recipients for `mention|review_requested|assigned|gate_failed`. Exports `__internal` for tests.
279- `src/lib/email.ts` — provider-pluggable email sender (`log`|`resend`). `sendEmail()` never throws. `absoluteUrl()` joins paths against `APP_BASE_URL`.
280- `src/lib/templates.ts` — `loadIssueTemplate` / `loadPrTemplate`. Checks standard paths (`.github/`, `.gluecron/`, root, `docs/`) on the default branch, strips YAML frontmatter, 16KB cap, returns null on any failure.
9ab6971Claude281- `src/lib/unread.ts` — unread count helper (never throws)
282- `src/lib/repo-bootstrap.ts` — green defaults on repo creation
283- `src/lib/gate.ts` — gate orchestration + persistence
284- `src/lib/cache.ts` — LRU cache, git-cache invalidation
6fc53bdClaude285- `src/lib/reactions.ts` — `summariseReactions`, `toggleReaction`, `ALLOWED_EMOJIS`, `EMOJI_GLYPH`, `isAllowedEmoji`, `isAllowedTarget`
9ab6971Claude286
287### 4.6 Routes (locked endpoints — behaviour must be preserved)
288- `src/routes/git.ts` — Smart HTTP (clone/push)
289- `src/routes/api.ts` — REST (`POST /api/repos`, `GET /api/users/:u/repos`, `GET /api/repos/:o/:n`, `POST /api/setup`)
ad6d4adClaude290- `src/routes/hooks.ts` — `POST /api/hooks/gatetest` (bearer/HMAC), `GET /api/hooks/ping`, `POST /api/v1/gate-runs` (PAT backup), `GET /api/v1/gate-runs`. See `GATETEST_HOOK.md`.
6fc53bdClaude291- `src/routes/theme.ts` — `GET /theme/toggle`, `GET /theme/set?mode=`. Writes `theme` cookie (`dark`|`light`, 1-year). Layout reads via pre-paint inline script.
292- `src/routes/audit.tsx` — `GET /settings/audit` (personal) + `GET /:owner/:repo/settings/audit` (owner-only).
24cf2caClaude293- `src/routes/saved-replies.tsx` — `GET/POST /settings/replies`, `POST /settings/replies/:id`, `POST /settings/replies/:id/delete`, `GET /api/user/replies`. Unique constraint `saved_replies_user_shortcut`.
294- `src/routes/deployments.tsx` — `GET /:owner/:repo/deployments` (grouped by env, success-rate rollup), `GET /:owner/:repo/deployments/:id` (detail).
6fc53bdClaude295- `src/routes/reactions.ts` — `POST /api/reactions/:targetType/:targetId/:emoji/toggle` (authed, form- or fetch-compatible), `GET /api/reactions/:targetType/:targetId`. Targets: `issue|pr|issue_comment|pr_comment`. Emojis: 8 canonical.
9ab6971Claude296- `src/routes/auth.tsx` — register / login / logout
297- `src/routes/web.tsx` — home / new / browse / blob / commits / raw / blame / star / search / profile
298- `src/routes/issues.tsx` — issue CRUD + comments + labels + lock
299- `src/routes/pulls.tsx` — PR CRUD + review + merge + close
300- `src/routes/editor.tsx` — web file editor
301- `src/routes/compare.tsx` — base...head diff
24cf2caClaude302- `src/routes/settings.tsx` — profile + password + email notification preferences (`POST /settings/notifications`)
9ab6971Claude303- `src/routes/repo-settings.tsx` — repo settings + delete
304- `src/routes/webhooks.tsx` — webhook CRUD + test + `fireWebhooks`
305- `src/routes/fork.ts` — fork
306- `src/routes/explore.tsx` — discover
307- `src/routes/tokens.tsx` — personal access tokens
308- `src/routes/contributors.tsx` — contributor list
309- `src/routes/notifications.tsx` — inbox + unread API
310- `src/routes/dashboard.tsx` — authed home (`renderDashboard` exported)
311- `src/routes/ask.tsx` — global + repo AI chat + explain
312- `src/routes/releases.tsx` — tags + AI changelog
313- `src/routes/gates.tsx` — history + settings + branch protection UI
314- `src/routes/insights.tsx` — insights + milestones
315- `src/routes/search.tsx` — global search + `/shortcuts`
316- `src/routes/health.ts` — `/healthz` `/readyz` `/metrics`
317
318### 4.7 Views (locked contracts)
319- `src/views/layout.tsx` — `Layout` accepts `title`, `user`, `notificationCount`
320- `src/views/components.tsx` — `RepoHeader`, `RepoNav` (active: `code|issues|pulls|commits|releases|gates|insights|...`), `RepoCard`, etc.
6fc53bdClaude321- `src/views/reactions.tsx` — `ReactionsBar` (no-JS compatible, form-per-emoji)
322- Nav links: logo · search · theme-toggle · Explore · Ask · Notifications · New · Profile (or Sign in / Register)
9ab6971Claude323- Keyboard chords: `/`, `Cmd+K`, `?`, `n`, `g d`, `g n`, `g e`, `g a`
324
325### 4.8 Tests (locked)
326- `src/__tests__/green-ecosystem.test.ts` — secret scanner, codeowners, AI fallback, health, rate-limit headers, `/shortcuts`, `/search`
327- All other existing test files — do not delete without owner permission
328
329### 4.9 Invariants (never break these)
330- `isAiAvailable()` guard returns true fallback strings when no ANTHROPIC_API_KEY. AI features degrade gracefully.
331- `getUnreadCount` never throws; returns 0 on any error.
332- Rate-limit middleware adds `X-RateLimit-Limit` + `X-RateLimit-Remaining` to every response, including 500s.
333- `c.header("X-Request-Id", ...)` set by request-context on every response.
334- Secret scanner skips binary/lock paths (`shouldSkipPath`).
335- `SECRET_PATTERNS` is an exported array. Its shape is `{ type, regex, severity }`.
6fc53bdClaude336- Theme routes live outside `/settings/*` (they must work for logged-out visitors). Cookie name: `theme`, values: `dark|light`.
337- Draft PRs cannot be merged — `/pulls/:n/merge` returns a redirect with the draft error when `pr.isDraft=true`.
338- Reactions API accepts only `ALLOWED_EMOJIS` and `ALLOWED_TARGETS`. Toggle is idempotent per (user, target, emoji).
24cf2caClaude339- `sendEmail()` never throws — always resolves to `{ ok, provider, ... }`. Email failures never break notification delivery or the primary request path.
340- Email fan-out in `notify()` is scoped to kinds in `EMAIL_ELIGIBLE` (mention / review_requested / assigned / gate_failed). Each eligible kind maps to exactly one user preference column.
341- Issue + PR template loading must return `null` on any git-subprocess failure (templates are a convenience, not a requirement). Forms always render.
9ab6971Claude342
343---
344
345## 5. OPERATIONAL NOTES
346
347### 5.1 Running locally
348```bash
349bun install
350bun dev # hot reload
24cf2caClaude351bun test # 99 tests currently pass
9ab6971Claude352bun run db:migrate
353```
354
355### 5.2 Environment
356- `DATABASE_URL` — Neon Postgres
357- `ANTHROPIC_API_KEY` — unlocks AI features
358- `GIT_REPOS_PATH` — default `./repos`
359- `PORT` — default 3000
24cf2caClaude360- `EMAIL_PROVIDER` — `log` (default, stderr-only) or `resend`
361- `EMAIL_FROM` — sender address for outbound mail
362- `RESEND_API_KEY` — required when `EMAIL_PROVIDER=resend`
363- `APP_BASE_URL` — canonical URL used to build absolute links in emails
9ab6971Claude364
365### 5.3 Models
366- `claude-sonnet-4-20250514` — code review, security, chat
367- `claude-haiku-4-5-20251001` — commit messages, summaries, light tasks
368- Swap via `MODEL_SONNET` / `MODEL_HAIKU` constants in `src/lib/ai-client.ts`
369
370### 5.4 Deployment
371- `railway.toml` / `fly.toml` present
372- Crontech deploy on green push to default branch (can opt out via `autoDeployEnabled`)
373
374---
375
376## 6. SESSION WORKFLOW (WHAT THE NEXT AGENT DOES)
377
3781. Read this file, `CLAUDE.md`, `README.md`, `git log -1 --stat`.
3792. Check `git status` + current branch.
3803. Pick the next unfinished block from §3 (lowest letter + number first, unless owner specifies).
3814. Create a todo list that mirrors the sub-items of that block.
3825. Build. Write tests. Run `bun test`.
3836. Commit with `feat(<BLOCK-ID>): ...`.
3847. Push.
3858. Update this file:
386 - Move the block's row in §2 to ✅ where applicable.
387 - Add the block's files to §4 LOCKED BLOCKS.
388 - Commit + push again.
3899. Start the next block. **Do not stop to ask.**
390
391If a block is too large for a single session, split it into a sub-plan at the top of the session, ship what you can, and document what's left at the end of this file under a `## 7. IN-FLIGHT` section.
392
393---
394
395## 7. IN-FLIGHT
396
397(Intentionally empty. Add here if a block is partially complete at session end.)