archy/.claude/plans/reflective-meandering-castle.md

# Archipelago Overnight Loop Plan

## Context

After getting Claude Max OAuth working on the live server, hardening the deploy script, and setting up automatic token refresh, the user wants a comprehensive overnight automation plan. This plan covers UI fixes, service wiring, feature additions, and strategic research. The plan is informed by a detailed StartOS/Start9 transcript comparison.

**Key constraint**: Deploy after each task with `./scripts/deploy-to-target.sh --live` and verify at `http://192.168.1.228`.

---

## Phase 1: Quick UI Fixes (Tasks 1-9) — ~2 hours

### Task 1: AIUI close button margin fix [DONE]
- **Files**: `neode-ui/src/style.css` (`.chat-mode-pill` rule)
- **Change**: Increase mobile insets from `0.75rem` to `1.25rem` for both `top` and `right`
- **Verify**: Open `/dashboard/chat` on mobile viewport, pill not flush against edges

### Task 2: AIUI close button mobile UX [DONE]
- **Files**: `neode-ui/src/views/Chat.vue`, `neode-ui/src/style.css`
- **Change**: On mobile (`md:hidden`), move close pill to bottom-center using `useMobileBackButton` composable. Hide top-right pill on mobile (`hidden md:flex`). Add a second close button at bottom that's thumb-reachable.
- **Verify**: Mobile: close button at bottom (easy reach). Desktop: pill at top-right unchanged.

### Task 3: Mobile viewport scaling fix [DONE]
- **Files**: `neode-ui/index.html`
- **Change**: Update viewport meta to: `width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no, viewport-fit=cover, interactive-widget=resizes-content`
- **Verify**: On phone, keyboard pushes content up rather than scaling/shrinking the page

### Task 4: PWA icons and installability fix [DONE]
- **Files**: `neode-ui/index.html`, `neode-ui/vite.config.ts`, `neode-ui/public/manifest.json`
- **Change**: Ensure `<link rel="manifest" href="/manifest.webmanifest">` is in index.html (Vite PWA generates this). Verify all icon files exist at referenced paths. Check HTTPS is working (PWA requires secure context). Remove conflicting static manifest.json if Vite PWA plugin generates its own.
- **Verify**: On phone (HTTPS), check DevTools > Application for manifest. Test Add to Home Screen.

### Task 5: Remove mobile headings on Cloud/Network/Apps/Store [DONE]
- **Files**: `neode-ui/src/views/Marketplace.vue`, `neode-ui/src/views/Home.vue`
- **Change**: Marketplace.vue line 76: add `hidden md:flex` to header container. Home.vue: reduce `mb-8` to `mb-4 md:mb-8` on welcome header. Apps.vue, Cloud.vue, Server.vue already have `hidden md:block` — confirmed correct.
- **Verify**: All views on mobile viewport — headings hidden, no wasted space

### Task 6: Verify mobile back button positioning [DONE]
- **Files**: `neode-ui/src/views/Dashboard.vue` (check for `data-mobile-tab-bar` attribute)
- **Change**: Ensure tab bar element has `data-mobile-tab-bar` attribute so `useMobileBackButton` composable works. CloudFolder.vue already uses this correctly.
- **Verify**: CloudFolder on mobile — "Back to Cloud" button floats 8px above tab bar

### Task 7: Cloud homepage real data [DONE]
- **Files**: `neode-ui/src/views/Home.vue`, `neode-ui/src/api/filebrowser-client.ts`
- **Change**: Add `getUsage()` method to filebrowser-client. In Home.vue, replace hardcoded "2.4 GB" and "5" folders with real data from FileBrowser API. Add `formatBytes()` helper. Show loading state while fetching.
- **Verify**: Home Cloud card shows real storage numbers from FileBrowser

### Task 8: Cloud file drag-and-drop upload [DONE]
- **Files**: `neode-ui/src/views/CloudFolder.vue`, `neode-ui/src/style.css`
- **Change**: Add drag-and-drop overlay with `@dragover.prevent` and `@drop.prevent`. Show visual drop zone when dragging. Extract files from `dataTransfer` and call existing `handleUpload()`.
- **Verify**: Drag a file over CloudFolder — drop zone overlay appears, dropping uploads file

### Task 9: Route persistence on refresh
- **Files**: `neode-ui/src/router/index.ts`
- **Change**: In `router.beforeEach`, when `checkSessionWithTimeout` times out, check `store.isAuthenticated` from localStorage. If true, allow navigation and revalidate in background. Only redirect to `/login` if genuinely no stored token.
- **Verify**: Navigate to `/dashboard/cloud`, hit browser refresh — stays on cloud page

---

## Phase 2: Service Wiring & Search (Tasks 10-16) — ~2.5 hours

### Task 10: CMD-K app search and launch
- **Files**: `neode-ui/src/components/SpotlightSearch.vue`
- **Change**: Import `useAppStore` and `useAppLauncherStore`. Create computed `dynamicAppItems` from `store.packages`. Merge with static help tree items in Fuse search. When app item selected, call `launchApp()`.
- **Verify**: CMD+K, type app name, appears in results, click to launch

### Task 11: Setup/Dashboard tabs on Home
- **Files**: `neode-ui/src/views/Home.vue`, `neode-ui/src/style.css`
- **Change**: Add tab bar with "Dashboard" and "Setup" tabs below welcome header. Dashboard tab: current overview cards. Setup tab: EasyHome goal cards (already imported). After completing all setup wizards, default to Dashboard. Use `.mode-switcher` pattern for tab styling.
- **Verify**: Both tabs visible, Dashboard shows live data, Setup shows goal wizards

### Task 12: Wire up Home.vue Network card with real data
- **Files**: `neode-ui/src/views/Home.vue`, `neode-ui/src/views/Server.vue`
- **Change**: Replace hardcoded "All Running", "Connected", "12" with computed values from `useAppStore`. Check `runningCount === appCount` for services status. Use `store.isConnected` for connectivity.
- **Verify**: Network card reflects actual service states

### Task 13: Full app interface wiring audit
- **Files**: `core/archipelago/src/api/rpc/package.rs`, `core/archipelago/src/container/docker_packages.rs`, `image-recipe/configs/nginx-archipelago.conf`
- **Change**: Compare `get_app_config()` port mappings with nginx proxies. Add missing nginx proxies for: Grafana (3000), Jellyfin (8096), Uptime Kuma (3001), Portainer (9000), OnlyOffice (9980). Add to both HTTP and HTTPS blocks. Verify `extract_lan_address()` correctness.
- **Verify**: Each app launches correctly from Apps page

### Task 14: Local search within Apps view
- **Files**: `neode-ui/src/views/Apps.vue`
- **Change**: Add search input with `ref('')`. Filter `sortedPackageEntries` by query against `manifest.title` and `manifest.description.short`. Style like Marketplace search.
- **Verify**: Type in search — only matching apps shown

### Task 15: AIUI context broker integration test
- **Files**: `neode-ui/src/services/contextBroker.ts`
- **Change**: Verify each category (apps, system, network, bitcoin, wallet, media, files, search, ai-local, notes) returns real data. Wire any that send placeholder/empty data to real store data.
- **Verify**: Chat mode, ask AI about installed apps, gets real context

### Task 16: Deploy script improvements
- **Files**: `scripts/deploy-to-target.sh`
- **Change**: Add SSH connectivity pre-flight check. Add `--frontend-only` flag for CSS/Vue-only deploys (skip Rust build + container rebuilds). Add timing output per section.
- **Verify**: `--frontend-only` works, `--live` still works fully

---

## Phase 3: Hardening & Features (Tasks 17-22) — ~2.5 hours

### Task 17: Web5 DID creation functionality
- **Files**: `neode-ui/src/views/Web5.vue`
- **Change**: Add "Create DID" button calling backend DID RPC endpoint. Display DID once created. Show Nostr relay status. Store DID in localStorage until backend persistence ready.
- **Verify**: Web5 page, Create DID, DID displayed

### Task 18: Fedimint setup wizard
- **Files**: `neode-ui/src/data/goals.ts`
- **Change**: Add `setup-fedimint` goal with steps: (1) Install Fedimint, (2) Access Guardian UI (port 8175), (3) Configure federation name, (4) Share invite code. Use "Create a Community" vernacular. Each step checks app state.
- **Verify**: New Fedimint goal appears in goals, wizard steps work

### Task 19: Security hardening audit
- **Files**: `core/archipelago/src/api/rpc/package.rs`
- **Change**: Add security flags to default container `run_args`: `--read-only` (with tmpfs for /tmp), `--cap-drop=ALL`, `--security-opt=no-new-privileges:true`. Create per-app capability mapping for apps that need specific caps.
- **Verify**: Install an app, `podman inspect` shows security constraints

### Task 20: ISO build script sync
- **Files**: `image-recipe/configs/nginx-archipelago.conf`, `image-recipe/configs/archipelago.service`
- **Change**: Ensure all recent nginx changes (new app proxies, AIUI proxies) are in the image-recipe config. Verify systemd service is current. Check that the auto-installer includes dummy content files for Cloud sections.
- **Verify**: Configs match live server state

### Task 21: AIUI re-integration test loop
- **Files**: Multiple (deploy + test cycle)
- **Change**: Deploy latest AIUI build. Test chat mode end-to-end. If broken, fix and redeploy. Verify: (1) AIUI loads in iframe, (2) Claude responds via proxy, (3) Context broker sends real data, (4) Close button works on mobile and desktop.
- **Verify**: Full chat conversation works without errors

### Task 22: Security report
- **Change**: Audit all new features (cloud file upload, AIUI iframe, context broker, filebrowser proxy). Check for XSS in file names, path traversal in filebrowser-client, origin validation in context broker postMessage, CSRF in RPC endpoints. Produce report.
- **Verify**: Written report with findings and mitigations

---

## Phase 4: Research & Strategic Planning (Tasks 23-25) — ~1.5 hours

### Task 23: Native browser wrapper research
- **Research**: Capacitor vs TWA for wrapping PWA in native shell. Capacitor supports iOS + Android, requires `@capacitor/core`. TWA is Android-only but simpler. Given PWA is well-configured, Capacitor would wrap with minimal changes. Document setup steps.

### Task 24: StartOS architecture comparison
Compare Archipelago vs StartOS on:
- **Package format**: StartOS `.s9pk` vs Archy raw Docker/Podman
- **Service discovery**: StartOS built-in discovery vs Archy manual port mapping
- **Update mechanism**: StartOS signed updates vs Archy manual deploy
- **Backup/restore**: StartOS full system backup vs Archy per-app data dirs
- **Networking**: StartOS Tor + clearnet publishing ("a couple buttons") vs Archy Tor + nginx proxy
- **AI integration**: StartOS planning agent-driven management with MCP server on CLI + live WebSocket state in side drawer — Archy has AIUI iframe with context broker
- **Router**: StartOS building StartWRT (OpenWrt-based) for sovereign networking — Archy could integrate with MikroTik
- **Key insight from transcript**: "We can match cloud computing UX except forgot password" — aligns with Archy's seed phrase backup flow
- **Key insight**: Matt Hill on configurable nodes — node operators (and their representatives like Start9/Umbrel/Archy) should control defaults, not protocol devs. This validates Archy's approach of curated app defaults.
- **Key insight**: "Express desire, have it fulfilled by superintelligence" — the AIUI agent integration is exactly this vision applied to sovereign computing

### Task 25: 2-Year Product Roadmap

**Q2 2026 — Foundation**
- Package format standardization (`.apkg` manifest + signed container images)
- Health check system (per-app health endpoints, auto-restart, dashboard indicators)
- Backup/restore system (full system + per-app, encrypted, downloadable)
- `--frontend-only` deploy for faster iteration

**Q3 2026 — Networking & AI**
- Router integration (MikroTik REST API management from UI)
- Clearnet publishing (reverse proxy + Let's Encrypt from UI, "a couple buttons" like StartOS)
- AI agent with MCP server on top of Archy CLI (inspired by StartOS approach)
- Local inference with Ollama (already have app, need agent integration)

**Q4 2026 — Sovereignty**
- App dependency graph with auto-start (Bitcoin -> LND -> BTCPay chain)
- Tor v3 per-app onion services (already partially implemented)
- Bitcoin domain names (Handshake/BNS research, DNS integration)
- Fedimint communities (ecash payments between nodes for services)

**Q1 2027 — Mobile & Scale**
- Capacitor native app shell (iOS + Android)
- Remote management via Tor (manage server from anywhere)
- App auto-updates with Cosign signature verification
- ARM64 optimization (RPi 5, Orange Pi)

**Q2-Q3 2027 — Ecosystem**
- Multi-user support (family/community server, per-user permissions)
- Community app registry (third-party apps, review system)
- Web5 DWN sync across nodes (decentralized web nodes)
- P2P service marketplace (nodes pay each other with ecash for bandwidth, storage, compute)

**Q4 2027 — Maturity**
- Enterprise hardening (SELinux, formal security audit)
- Clustering (multi-server, distributed storage)
- Sovereign AI assistant (local LLM with root access, MCP tools, privacy-first)
- "Express desire, have it fulfilled" UX (natural language server management)

---

## Execution Notes

- **Total estimated time**: ~8 hours
- **Deploy cadence**: After every task, `./scripts/deploy-to-target.sh --live`
- **Failure handling**: If a task fails deploy/verify, log error and move to next. Retry failed tasks at end.
- **Phase 4 is research-only**: No code changes, documentation only
- **Priority order**: Phase 1 > Phase 2 > Phase 3 > Phase 4
- **MikroTik note**: User has a MikroTik router — plan networking integration around RouterOS v7 REST API
- **Bitcoin domain names**: Long-term research, start with Handshake feasibility study
- **Nostr**: Wire up existing relay integration in Web5.vue, use for node discovery