feat: repurpose fireflag as Firefox/Gecko flag management extension

BREAKING CHANGE: Repo repurposed from feature flag library to browser extension

- Reset repo structure for Firefox extension (backed up old code to branch)
- Add Manifest V3 with granular permissions (browserSettings, privacy, tabs)
- Create flag database with safety classification (safe/experimental/dangerous)
- Build ReScript types for flag management and browser APIs
- Import Idris2 FFI modules from proven (SafeJson, SafeUrl, SafeQueue, SafeLRU)
- Add custom Idris2 safety proofs for flag modifications
- Create popup UI structure (HTML + CSS)
- Sync rsr-template-repo workflows (17 standard workflows)
- Update STATE.scm with v0.1-v1.0 milestones
- Update ECOSYSTEM.scm with project relationships

Tech stack: ReScript + Idris2 + Zig + WASM + Deno
Target browsers: Firefox, Librewolf, Waterfox, Pale Moon

Next: Complete UI components, developer tracking, security integration

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

Author: Jonathan D.A. Jewell

.github/PROVEN-INTEGRATION.md

@@ -1,6 +1,10 @@
 # SPDX-License-Identifier: PMPL-1.0-or-later
+# Dependabot configuration for RSR-compliant repositories
+# Covers common ecosystems - remove unused ones for your project
+
 version: 2
 updates:
+  # GitHub Actions - always include
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
@@ -9,3 +13,36 @@ updates:
       actions:
         patterns:
           - "*"
+
+  # Rust/Cargo
+  - package-ecosystem: "cargo"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    ignore:
+      - dependency-name: "*"
+        update-types: ["version-update:semver-patch"]
+
+  # Elixir/Mix
+  - package-ecosystem: "mix"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+
+  # Node.js/npm
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+
+  # Python/pip
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+
+  # Nix flakes
+  - package-ecosystem: "nix"
+    directory: "/"
+    schedule:
+      interval: "weekly"

.github/dependabot.yml

@@ -0,0 +1,66 @@
+# SPDX-License-Identifier: PMPL-1.0-or-later
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
+
+# Sample workflow for building and deploying a Jekyll site to GitHub Pages
+name: Deploy Jekyll site to Pages
+
+on:
+  # Runs on pushes targeting the default branch
+  push:
+    branches: ["main"]
+
+  # Allows you to run this workflow manually from the Actions tab
+  workflow_dispatch:
+
+# Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages
+permissions:
+  contents: read
+  pages: write
+  id-token: write
+
+# Allow only one concurrent deployment, skipping runs queued between the run in-progress and latest queued.
+# However, do NOT cancel in-progress runs as we want to allow these production deployments to complete.
+concurrency:
+  group: "pages"
+  cancel-in-progress: false
+
+jobs:
+  # Build job
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6.0.1
+      - name: Setup Ruby
+        # https://github.com/ruby/setup-ruby/releases/tag/v1.207.0
+        uses: ruby/setup-ruby@708024e6c902387ab41de36e1669e43b5ee7085e
+        with:
+          ruby-version: '3.1' # Not needed with a .ruby-version file
+          bundler-cache: true # runs 'bundle install' and caches installed gems automatically
+          cache-version: 0 # Increment this number if you need to re-download cached gems
+      - name: Setup Pages
+        id: pages
+        uses: actions/configure-pages@v5
+      - name: Build with Jekyll
+        # Outputs to the './_site' directory by default
+        run: bundle exec jekyll build --baseurl "${{ steps.pages.outputs.base_path }}"
+        env:
+          JEKYLL_ENV: production
+      - name: Upload artifact
+        # Automatically uploads an artifact from the './_site' directory by default
+        uses: actions/upload-pages-artifact@v4
+
+  # Deployment job
+  deploy:
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    runs-on: ubuntu-latest
+    needs: build
+    steps:
+      - name: Deploy to GitHub Pages
+        id: deployment
+        uses: actions/deploy-pages@v4

.github/workflows/jekyll.yml

@@ -4,17 +4,45 @@
 (ecosystem
   (version "1.0")
   (name "fireflag")
-  (type "project")
-  (purpose "image:https://img.shields.io/badge/License-MPL_2.0-blue.svg[MPL-2.0,link=\"https:")
+  (type "browser-extension")
+  (purpose "Safe Firefox/Gecko flag management for experimentation and development")
 
   (position-in-ecosystem
-    (role "component")
+    (role "end-user-tool")
     (layer "application")
-    (description "image:https://img.shields.io/badge/License-MPL_2.0-blue.svg[MPL-2.0,link=\"https:"))
+    (description "Browser extension that helps users and developers safely manage Firefox/Gecko flags (about:config, experimental features, developer flags) with safety classification, tracking, and analytics"))
 
-  (related-projects . ())
+  (related-projects
+    ((proven
+      . ((relationship . "dependency")
+         (description . "Provides Idris2 FFI modules for compile-time safety guarantees (SafeJson, SafeUrl, SafeQueue, SafeLRU)")
+         (url . "https://github.com/hyperpolymath/proven")))
+     (svalin
+      . ((relationship . "build-tool")
+         (description . "Static analysis security scanner for extension code")
+         (url . "https://github.com/hyperpolymath/svalin")))
+     (vordr
+      . ((relationship . "build-tool")
+         (description . "Runtime verification for browser API usage")
+         (url . "https://github.com/hyperpolymath/vordr")))
+     (selur
+      . ((relationship . "build-tool")
+         (description . "Secrets detection for extension security")
+         (url . "https://github.com/hyperpolymath/selur")))
+     (cerro-terro
+      . ((relationship . "build-tool")
+         (description . "Build orchestration for containerized compilation")
+         (url . "https://github.com/hyperpolymath/cerro-terro")))
+     (rsr-template-repo
+      . ((relationship . "template")
+         (description . "Provides standard RSR workflows and infrastructure")
+         (url . "https://github.com/hyperpolymath/rsr-template-repo")))))
 
   (what-this-is
-    "image:https://img.shields.io/badge/License-MPL_2.0-blue.svg[MPL-2.0,link=\"https:")
+    "FireFlag is a Firefox/Gecko browser extension that makes it safe and easy to experiment with browser flags. For regular users, it provides curated lists of safe flags to enable experimental features. For developers, it offers tracking, analytics, and export capabilities to understand how flag changes affect their applications and workflows.")
 
-  (what-this-is-not . ()))
+  (what-this-is-not
+    ("A general feature flag management library (see backup-feature-flag-library branch)"
+     "A Chrome/Chromium extension (Gecko browsers only)"
+     "A tool for modifying Firefox source code"
+     "A replacement for Firefox's built-in about:config interface")))

ECOSYSTEM.scm

@@ -1,10 +1,12 @@
-= fireflag
+= FireFlag
 
-image:https://img.shields.io/badge/License-PMPL--1.0-blue.svg[License: PMPL-1.0,link="https://github.com/hyperpolymath/palimpsest-license"]
-image:https://img.shields.io/badge/Philosophy-Palimpsest-indigo.svg[Palimpsest,link="https://github.com/hyperpolymath/palimpsest-license"]
+image:https://img.shields.io/badge/License-PMPL--1.0-indigo.svg[License: PMPL-1.0,link="https://github.com/hyperpolymath/palimpsest-license"]
+image:https://img.shields.io/badge/RSR-Certified-gold[RSR Certified,link=https://github.com/hyperpolymath/rhodium-standard-repositories]
+image:https://img.shields.io/badge/Status-Active%20Development-yellow[Status]
 
+**Safe Firefox/Gecko flag management for users and developers**
 
-Jonathan D.A. Jewell <jonathan.jewell@gmail.com>
+Jonathan D.A. Jewell <jonathan.jewell@open.ac.uk>
 :toc: macro
 :toclevels: 3
 :icons: font

README.adoc

@@ -3,32 +3,115 @@
 
 (define project-state
   `((metadata
-      ((version . "1.0.0")
+      ((version . "0.1.0")
        (schema-version . "1")
        (created . "2026-01-10T13:49:37+00:00")
-       (updated . "2026-01-10T13:49:37+00:00")
+       (updated . "2026-02-04T10:30:00+00:00")
        (project . "fireflag")
        (repo . "fireflag")))
 
+    (project-context
+      ((name . "FireFlag")
+       (tagline . "Safe Firefox/Gecko flag management for users and developers")
+       (tech-stack . ("ReScript" "Idris2" "Zig" "WASM" "Deno"))))
+
     (current-position
       ((phase . "Active Development")
-       (overall-completion . 50)
+       (overall-completion . 10)
+       (components
+         ((manifest . 100)
+          (directory-structure . 100)
+          (flag-database . 0)
+          (rescript-core . 0)
+          (idris-ffi . 0)
+          (ui-popup . 0)
+          (ui-sidebar . 0)
+          (ui-options . 0)
+          (security-integration . 0)
+          (containerization . 0)))
        (working-features . ())))
 
     (route-to-mvp
       ((milestones
-        ((v1.0 . ((items . ("Initial setup" "Core functionality"))
-                  (status . "in-progress")))))))
+        ((v0.1.0-structure
+          . ((items . ("Manifest V3 setup"
+                       "Extension directory structure"
+                       "rsr-template-repo workflows"))
+             (status . "in-progress")))
+         (v0.2.0-core
+          . ((items . ("Flag database with safety levels"
+                       "ReScript core types"
+                       "Idris FFI integration from proven"
+                       "WASM optimizations"))
+             (status . "pending")))
+         (v0.3.0-ui
+          . ((items . ("Browser action popup"
+                       "Sidebar panel"
+                       "Options page"
+                       "Granular permission UI"))
+             (status . "pending")))
+         (v0.4.0-features
+          . ((items . ("Flag tracking (before/after)"
+                       "Export reports"
+                       "DevTools integration"
+                       "Performance metrics"))
+             (status . "pending")))
+         (v0.5.0-security
+          . ((items . ("svalin static analysis"
+                       "vordr runtime verification"
+                       "selur secrets detection"
+                       "Security audit"))
+             (status . "pending")))
+         (v0.6.0-build
+          . ((items . ("cerro-terro containerization"
+                       "chainguard base images"
+                       "Guix channel setup"
+                       "Reproducible builds"))
+             (status . "pending")))
+         (v1.0.0-release
+          . ((items . ("Mozilla Add-ons submission"
+                       "Multi-browser testing (Firefox, Librewolf, Waterfox, Pale Moon)"
+                       "Store listing with screenshots"
+                       "Privacy policy and documentation"))
+             (status . "pending")))))))
 
     (blockers-and-issues
       ((critical . ())
-       (high . ())
-       (medium . ())
+       (high . ("Flag database needs curation - combine Firefox docs + our analysis"))
+       (medium . ("Test Pale Moon compatibility (different Gecko version)"
+                  "Determine WASM module size limits for extension"))
        (low . ())))
 
     (critical-next-actions
-      ((immediate . ())
-       (this-week . ())
-       (this-month . ())))
+      ((immediate . ("Create flag database schema"
+                     "Import proven Idris FFI modules"
+                     "Build ReScript core types for browser flags"))
+       (this-week . ("Implement all three UI components"
+                     "Add granular permission feedback system"
+                     "Set up flag safety classification"))
+       (this-month . ("Complete developer tracking features"
+                      "Integrate security scanning (svalin/vordr/selur)"
+                      "Build containerized environment"
+                      "Test on all target browsers"))))
+
+    (session-history
+      ((session-1
+        . ((timestamp . "2026-02-04T10:30:00+00:00")
+           (accomplishments . ("Backed up old feature flag library code to branch"
+                               "Reset repo structure for browser extension"
+                               "Created Manifest V3 configuration"
+                               "Set up extension directory structure"
+                               "Synced rsr-template-repo workflows"
+                               "Updated STATE.scm with new project goals"
+                               "Created task list (10 tasks)"))))))))
+
+;; Helper functions
+(define (get-completion-percentage state)
+  (let ((components (cdr (assoc 'components (cdr (assoc 'current-position state))))))
+    (/ (apply + (map cdr components)) (length components))))
+
+(define (get-blockers state severity)
+  (cdr (assoc severity (cdr (assoc 'blockers-and-issues state)))))
 
-    (session-history . ())))
+(define (get-milestone state name)
+  (assoc name (cdr (assoc 'milestones (cdr (assoc 'route-to-mvp state))))))