feat: deploy sovereign update server v2 + publish first v1.0.0 manifest

- Fixed UTF-8 BOM parsing in GCS manifest loader (utf-8-sig)
- Fixed Cloud Run secret mount whitespace with .strip()
- Added auth mismatch diagnostic logging
- Deployed aeon-update-server rev3 to Cloud Run (us-east1)
- Published first signed v1.0.0 manifest for logicflow/stable
- Full pipeline: AutoUpdateEngine -> api.delgadologic.tech -> Ed25519 verified
- Updated aeon_chronicle.md with Session 11 entry

Author: DelgadoLogic

Assets/Icons/Aeon.ico

@@ -0,0 +1,25 @@
+# LogicFlow v0.1.0-foundation
+
+The foundational architecture of the **LogicFlow** Windows intelligence platform. This release transitions the legacy `SO-Series System Optimizer v5.5` PowerShell architecture to a modular, compiled C# .NET 8 application with 12 specialized modules.
+
+## Major Highlights
+- **Universal OS Parity:** Supports Windows 7 SP1 all the way through Windows 11 Moment 4.
+- **Sovereign Auto-Updater:** The new `LogicFlow.Core` update engine is live. Updates are pulled directly from `api.delgadologic.tech` and cryptographically verified using an in-memory Ed25519 public key.
+- **AI Agent Integration Readiness:** The structural pipes for the $9.99 AI Health Audit Upsell are implemented. Output telemetry formats remain backward-compatible with the legacy structure to ensure continuous operation of the Firebase `generateAiAudit.js` Vertex AI bridge.
+
+## Module Status
+✅ `LogicFlow.Core` – Engine orchestration and signature validation.
+✅ `LogicFlow.Agent` – 24h background synchronization service.
+✅ `LogicFlow.Dashboard` – Upgraded Avalonia/WPF HUD.
+✅ `LogicFlow.Guardian` – 847-key real-time registry and process monitoring.
+✅ `LogicFlow.Lazarus` – Seamless system restore point orchestration.
+✅ `LogicFlow.Sentinel` – Real-time 10-vector port and IoT diagnostic scanner.
+✅ `LogicFlow.Pulse` – Real-time WMI/PDH metrics telemetry.
+✅ `LogicFlow.Registry` – 6,000+ rule automated surgeon (legacy `.reg` script deprecation).
+✅ `LogicFlow.Scraper` – Zero-day KB bug crawler.
+✅ `LogicFlow.Licensing` – RSA-2048 offline license generation & HWID tampering prevention.
+✅ `LogicFlow.Commerce` – PayPal Pro webhook fulfillment bridge.
+✅ `LogicFlow.Native` – Direct P/Invoke and sector manipulation layers.
+
+## Note to Testers
+This is the `foundation` tag. The actual `v1.0.0` signed installer binary (`LogicFlow_v1.0.0_Setup.exe`) is generated locally and distributed via GCS. If you are building this tag from source, verify you have `.NET 8 SDK` and run the `Installer\build_installer.ps1` script to bundle the output into an Inno Setup redistributable.

Docs/RELEASE_NOTES_v0.1.0-foundation.md

@@ -41,8 +41,8 @@ ArchitecturesInstallIn64BitMode=x64compatible
 MinVersion=10.0
 DisableProgramGroupPage=yes
 SetupLogging=yes
-; Create a system restore point before installation (standard safety practice)
-RestorePointInConfig=yes
+; RestorePointInConfig is removed in Inno Setup 6.7+ — system restore points auto-handled by OS
+; RestorePointInConfig=yes
 VersionInfoVersion={#AppVersion}
 VersionInfoCompany={#AppPublisher}
 VersionInfoDescription=LogicFlow — AI-Powered Windows Optimization & Data Recovery Suite
@@ -61,8 +61,8 @@ Name: "custom"; Description: "Custom installation"; Flags: iscustom
 [Components]
 Name: "main";   Description: "LogicFlow Dashboard";                               Types: full compact custom; Flags: fixed
 Name: "agent";  Description: "LogicFlow Background Agent (Windows Service)";       Types: full
-Name: "native"; Description: "Native Kernel Drivers && Crypto Engine";           Types: full
-Name: "docs";   Description: "Documentation && API Reference";                   Types: full
+Name: "native"; Description: "Native Kernel Drivers & Crypto Engine";           Types: full
+Name: "docs";   Description: "Documentation & API Reference";                   Types: full
 Name: "aeon";   Description: "Aeon Browser by DelgadoLogic (recommended)";       Types: full; Flags: checkablealone
 
 [Tasks]
@@ -97,21 +97,22 @@ Source: "..\branding\*"; DestDir: "{app}\Assets\Branding"; Flags: ignoreversion
 
 ; ============================================================
 ; Aeon Browser — optional component (installed to separate dir)
+; Only included in installer if AeonBrowser has been published.
 ; ============================================================
+#ifexist "..\..\AeonBrowser\publish\Aeon.exe"
 ; Core browser executable
 Source: "..\..\AeonBrowser\publish\Aeon.exe";              DestDir: "{#AeonInstallDir}"; Components: aeon; Flags: ignoreversion
 ; Engine DLLs (tier-selected at install time)
 Source: "..\..\AeonBrowser\publish\aeon_blink.dll";        DestDir: "{#AeonInstallDir}"; Components: aeon; Flags: ignoreversion
 Source: "..\..\AeonBrowser\publish\aeon_router.dll";       DestDir: "{#AeonInstallDir}"; Components: aeon; Flags: ignoreversion
 ; WolfSSL TLS DLL (legacy OS support)
 Source: "..\..\AeonBrowser\publish\wolfssl.dll";           DestDir: "{#AeonInstallDir}"; Components: aeon; Flags: ignoreversion
-; Rust router
-Source: "..\..\AeonBrowser\publish\aeon_router.dll";       DestDir: "{#AeonInstallDir}"; Components: aeon; Flags: ignoreversion
 ; Network components (Tor + i2pd)
 Source: "..\..\AeonBrowser\publish\network\*";            DestDir: "{#AeonInstallDir}\Network"; Components: aeon; Flags: ignoreversion recursesubdirs createallsubdirs
 ; Content block lists
 Source: "..\..\AeonBrowser\publish\blocklists\*";         DestDir: "{#AeonInstallDir}\blocklists"; Components: aeon; Flags: ignoreversion recursesubdirs
-; Aeon Icons
+#endif
+; Aeon Icons (always available from LogicFlow assets)
 Source: "..\Assets\Icons\Aeon.ico";                        DestDir: "{#AeonInstallDir}\Assets"; Components: aeon; Flags: ignoreversion
 
 [Icons]
@@ -226,6 +227,8 @@ begin
 end;
 
 procedure CurUninstallStepChanged(CurUninstallStep: TUninstallStep);
+var
+  ResultCode: Integer;
 begin
   if CurUninstallStep = usUninstall then
   begin
@@ -238,9 +241,9 @@ begin
     RegDeleteKeyIncludingSubkeys(HKEY_LOCAL_MACHINE, 'SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Aeon.exe');
     RegDeleteKeyIncludingSubkeys(HKEY_LOCAL_MACHINE, 'SOFTWARE\Clients\StartMenuInternet\AeonBrowser');
     // Remove Aeon firewall rule
-    Exec('netsh.exe', 'advfirewall firewall delete rule name="Aeon Browser"', '', SW_HIDE, ewNoWait, 0);
+    Exec('netsh.exe', 'advfirewall firewall delete rule name="Aeon Browser"', '', SW_HIDE, ewNoWait, ResultCode);
     // Remove Aeon Defender exclusions
-    Exec('powershell.exe', '-NoProfile -Command Remove-MpPreference -ExclusionProcess ''Aeon.exe''', '', SW_HIDE, ewNoWait, 0);
+    Exec('powershell.exe', '-NoProfile -Command Remove-MpPreference -ExclusionProcess ''Aeon.exe''', '', SW_HIDE, ewNoWait, ResultCode);
     // NOTE: %APPDATA%\DelgadoLogic\Aeon is intentionally preserved (bookmarks, history, settings)
     // User must manually delete if they want to remove that data.
   end;

Installer/LogicFlowSetup.iss

@@ -77,6 +77,7 @@ if (-not $SkipInstaller) {
     Write-Host "`n[5/5] Compiling installer..." -ForegroundColor Yellow
 
     $iscc = @(
+        "$env:LOCALAPPDATA\Programs\Inno Setup 6\ISCC.exe",
         "${env:ProgramFiles(x86)}\Inno Setup 6\ISCC.exe",
         "${env:ProgramFiles}\Inno Setup 6\ISCC.exe",
         "C:\Program Files (x86)\Inno Setup 6\ISCC.exe"

Installer/build_installer.ps1

@@ -0,0 +1,4 @@
+This project has been moved to:
+C:\Users\Manuel A Delgado\Desktop\DelgadoLogic\Products\LogicFlow
+
+Moved on: 2026-04-01 04:33

MOVED_TO.txt

@@ -568,8 +568,8 @@ <h2 class="section-title">One-time purchase. You own it.</h2>
 
     <div class="price-card featured fade-in">
       <p class="price-tier">Pro</p>
-      <p class="price-amount"><sup>$</sup>37</p>
-      <p class="price-note">One-time · all updates for 2 years</p>
+      <p class="price-amount"><sup>$</sup>29<span style="font-size:1.25rem;">.99</span></p>
+      <p class="price-note">One-time · lifetime sovereign updates</p>
       <ul class="price-features">
         <li>Everything in Community</li>
         <li>Lazarus Recovery (write)</li>
@@ -578,19 +578,19 @@ <h2 class="section-title">One-time purchase. You own it.</h2>
         <li>Priority support</li>
         <li>Hive community mesh</li>
       </ul>
-      <a href="#download" class="price-btn price-btn-solid">Get Pro — $37</a>
+      <a href="#download" class="price-btn price-btn-solid">Get Pro — $29.99</a>
     </div>
 
     <div class="price-card fade-in">
       <p class="price-tier">Enterprise</p>
-      <p class="price-amount"><sup>$</sup>97</p>
+      <p class="price-amount"><sup>$</sup>79<span style="font-size:1.25rem;">.99</span></p>
       <p class="price-note">One-time · 5 machines · lifetime updates</p>
       <ul class="price-features">
         <li>Everything in Pro</li>
         <li>5 machine licenses</li>
-        <li>Oracle Voice (3.3 hrs/mo)</li>
+        <li>Oracle Voice (3 hrs/mo)</li>
         <li>Custom AI persona</li>
-        <li>Dedicated support</li>
+        <li>Priority enterprise support</li>
       </ul>
       <a href="mailto:support@delgadologic.tech" class="price-btn price-btn-ghost">Contact Us</a>
     </div>