docs(v1.0.1): refresh all stale counts and architecture claims post-migration

- TOPOLOGY.md: 97 → 112 cartridges, date updated to 2026-04-25
- ROADMAP.adoc: v1.0.1 items updated to 112 (was 106)
- EXPLAINME.adoc: counts 96→112, mcp-bridge TS references replaced with
  Elixir/BEAM + Deno worker pool reality, file map updated to real paths,
  test section now lists actual ExUnit suites
- QUICKSTART-USER.adoc: 99→112, V-lang build steps replaced with
  Elixir run, test command updated, project structure updated
- llm-warmup-dev.md: major rewrite — V-lang layer replaced with
  Deno/JS adapter layer, build flow updated, JS conventions added,
  credential forwarding section added, invariant #10 V-lang ban, 70→112
- cartridges/academic-workflow-mcp, ephapax-mcp, fireflag-mcp,
  sanctify-mcp: added missing domain/tier/auth/ffi.so_path fields
  (required for CRG C catalog test coverage)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: hyperpolymath

EXPLAINME.adoc

@@ -7,20 +7,20 @@ The README makes claims. This file backs them up.
 
 [quote, README]
 ____
-BoJ (Bundle of Joy) is a unified MCP server that consolidates all hyperpolymath tooling into a single endpoint — GitHub, GitLab, Cloudflare, Vercel, Verpex, Gmail, Calendar, browser automation, research, ML, and 50+ open-source cartridges.
+BoJ (Bundle of Joy) is a unified MCP server that consolidates all hyperpolymath tooling into a single endpoint — GitHub, GitLab, Cloudflare, Vercel, Verpex, Gmail, Calendar, browser automation, research, ML, and 110+ open-source cartridges.
 ____
 
-This is the Model-Controller-Processor pattern: cartridges are pluggable service wrappers (90+ total), the MCP bridge translates Claude tool calls to cartridge invocations, and a REST API provides non-MCP access.
+This is the Model-Controller-Processor pattern: cartridges are pluggable service wrappers (112 total), the Elixir/BEAM REST layer dispatches tool calls to cartridge invocations (Zig FFI path for `.so` cartridges, Deno worker pool for JS cartridges), and a REST API provides non-MCP access.
 
 == Two Verifiable Claims from How-It-Works
 
 === Claim 1: Cartridge Orchestration Via Auto-Discovery
 
-**Location**: `mcp-bridge/lib/cartridge-loader.ts` (TypeScript cartridge discovery and initialization)
+**Location**: `elixir/lib/boj_rest/catalog.ex` (Elixir GenServer cartridge discovery and initialization)
 
-**How verified**: The cartridge loader scans `cartridges/*/cartridge.json`, reads tool schemas from each, and registers them dynamically with the MCP server. README (§Features) claims "50+ open-source cartridges." The loader validates each manifest, checks for required `name`, `version`, `tools` fields, and prevents duplicate tool names. This enables the "unified endpoint" claim: a single MCP server exposes the union of all cartridges' tools without hardcoding each one.
+**How verified**: `BojRest.Catalog` scans `cartridges/*/cartridge.json` at startup, reads tool schemas from each, and stores them in an ETS table. It validates `name`, `version`, `tools` required fields and prevents duplicate names. 112 cartridges are auto-discovered. This enables the "unified endpoint" claim: a single REST server exposes the union of all cartridges' tools without hardcoding each one.
 
-**Caveat**: Auto-discovery is runtime dynamic; there is no compile-time verification that all cartridge schemas are valid JSON Schema. A malformed `cartridge.json` will error at MCP startup, not build time. The authoritative manifest format is Nickel (closed decision `boj-cartridge-manifest-format-dd.md`); migration from JSON is future work.
+**Caveat**: Auto-discovery is runtime dynamic; there is no compile-time verification that all cartridge schemas are valid JSON Schema. A malformed `cartridge.json` is silently skipped at startup. The authoritative manifest format is Nickel (closed decision `boj-cartridge-manifest-format-dd.md`); migration from JSON is future work.
 
 === Claim 2: PanLL Grid Layout Auto-Wiring for Panel Cartridges
 
@@ -41,19 +41,19 @@ This is the Model-Controller-Processor pattern: cartridges are pluggable service
 | gossamer, burble, ephapax, hypatia, verisimdb, typed-wasm — universal ABI/FFI pattern across the estate
 
 | *Pluggable cartridge architecture*
-| 96 cartridge directories (`cartridges/*/`), each with `abi/`, `ffi/`, `adapter/` structure; auto-discovered at startup via manifest scan
+| 112 cartridge directories (`cartridges/*/`), each with `abi/`, `ffi/`, `mod.js` structure; auto-discovered at startup via manifest scan
 | echidna (prover orchestration as cartridges), hypatia (rule composition), gitbot-fleet (bot cartridges per service)
 
 | *PanLL ReScript workspace layer*
 | `panll/` — ReScript/TEA panel framework, autowiring constraint solver, 108 panels for UI
 | idaptik (game UI panels), gossamer-powered SPAs, PanLL monorepo panels estate-wide
 
 | *panic-attack security gate*
-| Pre-commit `panic-attack assail` enforces PA001-PA025 across all 96 cartridges; security module (`lib/security.js`) tests cover injection, unicode bypass, SSRF
+| Pre-commit `panic-attack assail` enforces PA001-PA025 across all 112 cartridges; security module tests cover injection, unicode bypass, SSRF
 | Every RSR repo in the estate; panicbot wraps it in CI
 
-| *Deno runtime*
-| MCP bridge (`mcp-bridge/`) uses Deno-compatible patterns; cartridge test harness (`tests/*.ts`) runs under Deno
+| *Elixir/BEAM + Deno runtime*
+| `elixir/` REST layer dispatches invocations: Zig FFI path (`.so` cartridges) or persistent `BojRest.JsWorkerPool` (112 JS cartridges via Deno); X25519/ChaCha20-Poly1305 credential forwarding
 | nextgen-languages (Deno test runner), standards (Deno axel-protocol tests), 0-ai-gatekeeper-protocol (Deno 36 tests)
 |===
 
@@ -63,26 +63,25 @@ This is the Model-Controller-Processor pattern: cartridges are pluggable service
 |===
 | Path | What's There
 
-| `mcp-bridge/main.js` | MCP server entry point; JSON-RPC stdio transport for Claude Code
-| `mcp-bridge/lib/security.js` | Prompt injection detection, rate limiting, input validation, error sanitization
-| `mcp-bridge/lib/api-clients.js` | GitHub, GitLab API passthroughs and BoJ REST API wrappers
-| `mcp-bridge/lib/tools.js` | MCP tool schema definitions for all cartridge tools
-| `mcp-bridge/lib/logger.js` | Structured JSON logging to stderr
-| `mcp-bridge/lib/version.js` | Single source of truth for server name and version
-| `mcp-bridge/lib/offline-menu.js` | Static cartridge catalogue for offline/inspection mode
-| `cartridges/*/` | 96 cartridge directories, each with abi/, ffi/, adapter/ structure
+| `elixir/lib/boj_rest/router.ex` | Plug router — health, pubkey, menu, invoke dispatch
+| `elixir/lib/boj_rest/catalog.ex` | ETS-backed cartridge registry; scans cartridges/*/cartridge.json at startup
+| `elixir/lib/boj_rest/js_worker_pool.ex` | Persistent Deno worker pool; consistent hash on mod path for cache locality
+| `elixir/lib/boj_rest/js_worker.ex` | GenServer wrapping a single Deno port; newline-delimited JSON protocol
+| `elixir/lib/boj_rest/node_key.ex` | X25519 keypair persistence; ChaCha20-Poly1305 credential decryption
+| `elixir/priv/js_pool_worker.js` | Deno-side pool worker; module cache, env isolation per request
+| `cartridges/*/` | 112 cartridge directories, each with abi/, ffi/, mod.js structure
 | `src/abi/Boj/` | Idris2 ABI definitions (Protocol, Domain, Catalogue, Safety, etc.)
 | `panll/` | ReScript/TEA panel framework for UI workspace layer
 |===
 
 == Testing Critical Paths
 
-* **Security module**: `tests/security_test.js` — injection detection, unicode bypass prevention, rate limiting, input validation
-* **Smoke tests**: `tests/smoke_test.ts` — CLI, MCP protocol, health check, cartridge schemas
-* **E2E tests**: `tests/e2e_mcp_test.ts` — MCP server lifecycle, tool invocation, error handling
-* **Property tests**: `tests/p2p_cartridge_properties_test.ts` — cartridge invariants, schema compliance
-* **Aspect security**: `tests/aspect_security_test.ts` — injection, sandboxing, credential handling, SSRF prevention
-* **Integration**: `tests/integration.sh` — end-to-end MCP server ↔ cartridge invocation
+* **Catalog**: `elixir/test/catalog_test.exs` — 11 tests; required fields, tool registry, auth method, tier validation
+* **Router**: `elixir/test/router_test.exs` — 12 tests; health, pubkey, menu, dispatch, 400/404 error paths
+* **Credential decryption**: `elixir/test/credential_decryptor_test.exs` — 12 tests; X25519 ECDH round-trip, ChaCha20-Poly1305
+* **Node keypair**: `elixir/test/node_key_test.exs` — 7 tests; ECDH consistency, persistence
+* **JS invoker**: `elixir/test/js_invoker_test.exs` — 8 tests; deno_path detection, mod missing, E2E invoke
+* **Property tests**: StreamData installed (`stream_data ~> 1.1`); harnesses pending (see `TEST-NEEDS.md`)
 
 == Questions?
 

QUICKSTART-USER.adoc

@@ -10,7 +10,7 @@ toc::[]
 
 == What is BoJ Server?
 
-Bundle of Joy (BoJ) Server is a cartridge-based MCP protocol gateway. Each cartridge (database-mcp, fleet-mcp, nesy-mcp, etc.) is a formally verified Idris2 ABI + Zig FFI + unified adapter triple. The server exposes REST (port 7700), gRPC (7701), GraphQL (7702), and SSE (7703) endpoints. 99 cartridges cover databases, clouds, messaging, CI/CD, git forges, secrets, queues, proofs, and more.
+Bundle of Joy (BoJ) Server is a cartridge-based MCP protocol gateway. Each cartridge (database-mcp, fleet-mcp, nesy-mcp, etc.) is a formally verified Idris2 ABI + Zig FFI + Deno/JS adapter triple. The server exposes REST (port 7700) via Elixir/BEAM with Zig FFI for `.so` cartridges and a persistent Deno worker pool for JS cartridges. 112 cartridges cover databases, clouds, messaging, CI/CD, git forges, secrets, queues, proofs, and more.
 
 Three-class architecture: Class 1 (simple CLI), Class 2 (orchestrator with webhooks/MQTT), Class 3 (BEAM multiplier for global scale).
 
@@ -69,18 +69,16 @@ just build
 
 == First Run
 
-Build the V-lang adapter and start the server:
+Start the Elixir/BEAM server:
 
 [source,bash]
 ----
 just run
 ----
 
-This builds the Zig FFI, then compiles the V-lang adapter, then starts:
+This starts the BEAM application, auto-discovers all 112 cartridges, and launches the Deno worker pool for JS dispatch:
 
 - REST API on http://localhost:7700
-- gRPC on port 7701
-- GraphQL on port 7702
 
 Check health:
 
@@ -98,7 +96,7 @@ Type-check the core ABI and run one FFI test:
 just test-smoke
 ----
 
-Full test suite (catalogue + 17 cartridge FFIs):
+Full test suite (Elixir ExUnit — catalog, router, crypto, JS dispatch):
 
 [source,bash]
 ----
@@ -175,9 +173,9 @@ just heal     # Attempt automatic repair
 ----
 src/abi/               Idris2 ABI (Catalogue.idr, Protocol.idr, etc.)
 ffi/zig/               Zig FFI (catalogue.zig, loader.zig)
-adapter/v/             V-lang triple adapter (REST+gRPC+GraphQL)
-cartridges/            One dir per cartridge (70+ total)
-  database-mcp/        Example: Idris2 ABI + Zig FFI + V adapter
+elixir/                Elixir/BEAM REST server (Catalog, Router, JsWorkerPool)
+cartridges/            One dir per cartridge (112 total)
+  database-mcp/        Example: Idris2 ABI + Zig FFI + mod.js adapter
 container/             Stapeln container ecosystem
 tools/cartridge-minter Rust CLI for minting new cartridges
 .machine_readable/     State, policies, contractiles

ROADMAP.adoc

@@ -8,12 +8,12 @@ A distributed, formally verified catalogue of developer server capabilities. AI
 
 == Current Status: v1.0.1 Recovery (Grade D Alpha)
 
-Core architecture through v1.0.0 is in place (18 cartridges with shared-library
-loading, 307 tests passing, Umoja federation, PanLL panel), but a migration
-inventory gap remains. As of 2026-04-12 there are 56 V-lang adapter files still
-present under `cartridges/` (excluding sidelined notes), with metadata coverage at
-65 `cartridge.json` files and 64 `mod.js` files. Priority is adapter retirement +
-metadata parity before Grade C dogfooding.
+Core Elixir/BEAM REST layer is live: 112 cartridges auto-discovered at startup,
+JS dispatch via persistent Deno worker pool, Zig FFI path for `.so` cartridges,
+X25519/ChaCha20-Poly1305 Option A credential forwarding, 50 ExUnit tests passing.
+V-lang adapter migration complete (0 `.v` files). All 112 cartridges have
+`cartridge.json` metadata + `mod.js` tool handlers.  Grade C dogfooding requires
+expanding to 165+ tests (see `TEST-NEEDS.md`).
 
 == Milestones
 
@@ -73,8 +73,8 @@ metadata parity before Grade C dogfooding.
 === v1.0.1 — Adapter Migration Recovery (P0, In Progress)
 
 * [x] Remove remaining V-lang adapters across `cartridges/` (confirmed 0 `.v` files 2026-04-25 — cleanup completed 2026-04-12)
-* [x] Ensure every cartridge has `cartridge.json` metadata (all 106 cartridges covered 2026-04-25)
-* [x] Ensure every cartridge has `mod.js` tool handlers (all 106 cartridges covered 2026-04-25)
+* [x] Ensure every cartridge has `cartridge.json` metadata (all 112 cartridges covered 2026-04-25)
+* [x] Ensure every cartridge has `mod.js` tool handlers (all 112 cartridges covered 2026-04-25)
 * [ ] Re-run cartridge matrix build/tests and update `TEST-NEEDS.md` with current evidence
 * [ ] Refresh repo documentation claims after migration closure (counts, completion text, handover docs)
 

TOPOLOGY.md

@@ -1,7 +1,7 @@
 # SPDX-License-Identifier: PMPL-1.0-or-later
 # TOPOLOGY.md — BoJ Server Component Matrix
 #
-# Auto-generated 2026-04-09. 97 cartridges across 6 tiers.
+# Updated 2026-04-25. 112 cartridges across 6 tiers.
 
 ## Ports
 
@@ -13,7 +13,7 @@
 | 7703 | SSE (Server-Sent Events) | Running |
 | 7745 | local-coord-mcp (loopback only) | Running |
 
-## Cartridge Matrix (97 total)
+## Cartridge Matrix (112 total)
 
 ### Tier 1 — High-Value APIs (11)
 | Cartridge | Domain |

cartridges/academic-workflow-mcp/cartridge.json

@@ -2,6 +2,9 @@
   "name": "academic-workflow-mcp",
   "version": "1.0.0",
   "description": "Academic workflow — Zotero integration, citations, paper review",
+  "domain": "Research",
+  "tier": "Ayo",
+  "auth": { "method": "none" },
   "author": "Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>",
   "license": "PMPL-1.0-or-later",
   "tools": [
@@ -42,7 +45,8 @@
   },
   "ffi": {
     "language": "zig",
-    "entry": "ffi/academic_ffi.zig"
+    "entry": "ffi/academic_ffi.zig",
+    "so_path": "libacademic_workflow_mcp.so"
   },
   "adapter": {
     "language": "typescript",

cartridges/ephapax-mcp/cartridge.json

@@ -5,6 +5,9 @@
   "name": "ephapax-mcp",
   "version": "1.0.0",
   "description": "Ephapax Cartridge — Proof-compiler query tools for formal verification workflows",
+  "domain": "Formal Verification",
+  "tier": "Ayo",
+  "auth": { "method": "none" },
   "author": "Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>",
   "license": "PMPL-1.0-or-later",
   "tools": [
@@ -40,7 +43,8 @@
   },
   "ffi": {
     "language": "zig",
-    "entry": "ffi/ephapax_ffi.zig"
+    "entry": "ffi/ephapax_ffi.zig",
+    "so_path": "libephapax_mcp.so"
   },
   "adapter": {
     "language": "typescript",

cartridges/fireflag-mcp/cartridge.json

@@ -5,6 +5,9 @@
   "name": "fireflag-mcp",
   "version": "1.0.0",
   "description": "Fireflag Cartridge — Extension-to-MCP mapping and discovery tools",
+  "domain": "Developer Tools",
+  "tier": "Ayo",
+  "auth": { "method": "none" },
   "author": "Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>",
   "license": "PMPL-1.0-or-later",
   "tools": [
@@ -40,7 +43,8 @@
   },
   "ffi": {
     "language": "zig",
-    "entry": "ffi/fireflag_ffi.zig"
+    "entry": "ffi/fireflag_ffi.zig",
+    "so_path": "libfireflag_mcp.so"
   },
   "adapter": {
     "language": "typescript",

cartridges/sanctify-mcp/cartridge.json

@@ -5,6 +5,9 @@
   "name": "sanctify-mcp",
   "version": "1.0.0",
   "description": "Sanctify Cartridge — PHP lint and deviation detection tools",
+  "domain": "Code Quality",
+  "tier": "Ayo",
+  "auth": { "method": "none" },
   "author": "Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>",
   "license": "PMPL-1.0-or-later",
   "tools": [
@@ -40,7 +43,8 @@
   },
   "ffi": {
     "language": "zig",
-    "entry": "ffi/sanctify_ffi.zig"
+    "entry": "ffi/sanctify_ffi.zig",
+    "so_path": "libsanctify_mcp.so"
   },
   "adapter": {
     "language": "typescript",