Web-first resurrection: UI builds and runs on the WASM Rust core, real CI, docs truth reset (#22)

* build: resurrect the toolchain — Deno-only JS deps, esbuild pipeline, root cargo workspace

- deno.json: nodeModulesDir + pinned npm: specifiers (rescript 11.1.4,
  @rescript/core 1.6.1, @rescript/react 0.13.1, react 18.3.1, esbuild
  0.28.1); real deno.lock (was 0 bytes); tasks for setup/dev/build/
  build:wasm/test that actually run. Removes the npm-CLI setup task that
  violated the Deno-only MUST (see docs/adr/0002).
- ui/rescript.json: drop unused rescript-tea and unresolvable
  cadre-tea-router; open RescriptCore (was a hidden compile blocker);
  esmodule output; compile ui/tests as dev sources.
- scripts/: esbuild bundle + dev server + wasm build (cargo +
  wasm-bindgen) entry points.
- Root Cargo.toml workspace: members=[core], exclude=[desktop] so the
  missing gossamer sibling can never break root builds; release profile
  opt-level=z + lto for the wasm artifact.
- Justfile: real setup/build/build-wasm/test/run/check recipes.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PAEqVP7Y3bZDhtAaPUTbps

* core: wasm bindings, backlink hardening, contract + property tests

- core/src/wasm.rs (feature "wasm"): WasmNotebook browser API. Granular
  mutations return only the changed note, or a {changed, removed,
  backlinks} delta for topology ops — never the whole notebook. View
  types serialize camelCase to match the UI records; the snake_case
  on-disk format is untouched. Errors are real JS Errors.
- fix(notebook): link_notes(a, a) corrupted the backlink index —
  Note::add_link refused the self-link silently but the backlink was
  recorded anyway. Now rejected with the existing CircularLink error.
  Found by the new property test on its first run.
- notebook: rebuild_backlinks() — loading never trusts a stored index
  (storage::load and wasm from_json both rebuild).
- core/tests/golden.rs + tests/fixtures/notebook.golden.json: on-disk
  format contract, shared with ui/tests/contract.test.js.
- core/tests/invariants.rs (proptest): backlinks are the exact inverse
  of outgoing links after any op sequence; serde roundtrip.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PAEqVP7Y3bZDhtAaPUTbps

* ui: run on the wasm core — store seam, real persistence, tests

The UI no longer reimplements notebook logic client-side. All mutations
delegate to the Rust core (compiled to WebAssembly) through a store seam
and patch a read model with what the core returns; ids and timestamps
come from the core (Types.res no longer fabricates random ids).

- ui/src/store/WasmStore.res: bindings + current-notebook handle; the
  operation set deliberately mirrors the desktop shell commands so a
  GossamerStore can swap in later with zero UI changes.
- ui/src/store/Persist.res (+ idb.js, fileio.js): debounced autosave to
  IndexedDB; Save downloads .nexia.json; Load via file picker — the
  former SaveNotebook/LoadNotebook no-ops now work.
- ui/src/Update.res: delegates to the store; self-link/delete guards;
  fix: update was recursive without rec (never compiled).
- ui/src/Main.res: async boot (init wasm -> restore autosave -> mount);
  local DomBindings.res replaces the undeclared rescript-webapi dep and
  the %raw handler hack; the delete-while-editing guard moved into
  update where it sees current state (was a stale closure).
- ui/tests/: TEA update suite (UpdateTests.res) and golden-fixture
  contract tests, run by deno test against the real wasm core.
- web/index.html: loads the bundled ./app.js; noscript + aria-live.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PAEqVP7Y3bZDhtAaPUTbps

* ci: add product build/test workflows (rust-ci, ui-ci)

The repo previously had no workflow that built or tested the product —
all eleven existing workflows are estate governance/scanning (and
governance.yml's own comment referenced a rust-ci.yml that didn't
exist). Now:

- rust-ci.yml: cargo fmt --check, clippy -D warnings (incl. the wasm
  feature), cargo test (unit + golden + property), plus a wasm32 build
  + wasm-bindgen job. Never touches desktop/ (external sibling dep).
- ui-ci.yml: Deno 2.9.1 + ReScript compile, wasm core build, deno test
  (TEA update + contract tests), esbuild bundle, deno lint.
- workflows/README.md: which checks verify the product vs. which are
  estate plumbing expected to no-op outside hyperpolymath.
- dependabot: track cargo deps for /core (desktop excluded — its path
  dep cannot resolve here).

Actions are SHA-pinned, reusing the pins already present in the repo;
no new third-party actions introduced.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PAEqVP7Y3bZDhtAaPUTbps

* docs: truth reset — make every document match the code

TOPOLOGY claimed ~70% complete with petgraph/tantivy/Nickel at 100%;
none of those exist. STATE.a2ml said 0%. ROADMAP had everything
unchecked. Several governance files still carried {{PLACEHOLDER}}
tokens, and Quickstarts/CONTRIBUTING referenced deleted files
(flake.nix, .scm state, nonexistent just recipes).

- README/TOPOLOGY/ROADMAP: describe the real web-first architecture
  (ReScript UI -> wasm Rust core -> IndexedDB/file persistence; desktop
  = optional external Gossamer shell); honest completion dashboard
  (~35%); aspirational tech moved to a labelled Future section.
- STATE.a2ml 35%, ai.txt pointers fixed to 6a2/*.a2ml, CONTRIBUTING and
  all three Quickstarts now give commands that exist, placeholders
  filled in INTENT.contractile/methodology.a2ml/Intentfile.a2ml.
- New: READINESS.md (Grade D, per the 2026-04-15 audit), desktop/README
  (external-sibling containment + resume path), ADR-0001 (wasm core,
  web-first) and ADR-0002 (Deno-only interpretation).
- TEST-NEEDS.md: real test matrix (was "0 test files" — wrong even
  then).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PAEqVP7Y3bZDhtAaPUTbps

---------

Co-authored-by: Claude <noreply@anthropic.com>

Author: hyperpolymath

.github/dependabot.yml

@@ -8,3 +8,14 @@ updates:
       actions:
         patterns:
           - "*"
+  # Rust core crate. NOTE: deliberately no entry for /desktop — its path
+  # dependency on an external sibling checkout (../../gossamer) would make
+  # dependabot error.
+  - package-ecosystem: "cargo"
+    directory: "/core"
+    schedule:
+      interval: "weekly"
+    groups:
+      cargo:
+        patterns:
+          - "*"

.github/workflows/README.md

@@ -0,0 +1,33 @@
+<!-- SPDX-License-Identifier: CC-BY-SA-4.0 -->
+# Workflows
+
+## Product CI (required checks)
+
+These build and test the actual product and are self-contained — they run
+anywhere, including forks:
+
+| Workflow | What it verifies |
+|---|---|
+| `rust-ci.yml` | `cargo fmt --check`, `clippy -D warnings`, `cargo test` (unit + golden contract + property tests), wasm32 build + wasm-bindgen |
+| `ui-ci.yml` | ReScript compile under Deno, wasm core build, `deno test` (TEA update tests + golden-fixture contract tests), esbuild bundle, `deno lint` |
+
+The same commands run locally: `just test`, `just build`, `just check`
+(or the underlying `deno task …` / `cargo …` equivalents).
+
+## Estate workflows (expected to no-op or fail outside hyperpolymath)
+
+Everything else in this directory is governance/scanning plumbing tied to
+private or sibling `hyperpolymath` repos (`standards` reusable workflows,
+`hypatia`, `casket-ssg`, `a2ml`/`k9` validate actions, `.git-private-farm`,
+`boj-server`). On forks or in isolated environments they cannot run and are
+**not** indicators of product health:
+
+`boj-build.yml`, `casket-pages.yml`, `dogfood-gate.yml`, `governance.yml`,
+`hypatia-scan.yml`, `instant-sync.yml`, `mirror.yml`,
+`push-email-notify.yml`, `secret-scanner.yml`
+
+`codeql.yml` and `scorecard.yml` are standard GitHub scanning and run
+anywhere.
+
+Branch protection should require `rust-ci` and `ui-ci`; estate workflows
+should stay non-required.

.github/workflows/rust-ci.yml

@@ -0,0 +1,66 @@
+# SPDX-License-Identifier: MPL-2.0
+# Product CI (Rust): the load-bearing build/test workflow for core/.
+# desktop/ is intentionally NOT built here — it needs a sibling checkout of
+# hyperpolymath/gossamer (see desktop/README.md) and is excluded from the
+# workspace in the root Cargo.toml.
+name: rust-ci
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: rust-ci-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  test:
+    name: fmt + clippy + test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - name: Install stable toolchain
+        run: |
+          rustup toolchain install stable --profile minimal --component rustfmt --component clippy
+          rustup default stable
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+        with:
+          path: |
+            ~/.cargo/registry
+            target
+          key: rust-test-${{ runner.os }}-${{ hashFiles('Cargo.lock') }}
+      - name: Format check
+        run: cargo fmt --check
+      - name: Clippy (including the wasm feature, compiled for host)
+        run: cargo clippy --all-targets --features wasm -- -D warnings
+      - name: Tests (unit + golden contract + property)
+        run: cargo test
+
+  wasm:
+    name: wasm build
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - name: Install stable toolchain with wasm target
+        run: |
+          rustup toolchain install stable --profile minimal
+          rustup default stable
+          rustup target add wasm32-unknown-unknown
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+        with:
+          path: |
+            ~/.cargo/registry
+            ~/.cargo/bin
+            target
+          key: rust-wasm-${{ runner.os }}-${{ hashFiles('Cargo.lock') }}
+      - name: Install wasm-bindgen-cli
+        run: command -v wasm-bindgen >/dev/null || cargo install wasm-bindgen-cli --version 0.2.126 --locked
+      - name: Build core for wasm32
+        run: cargo build --release --target wasm32-unknown-unknown --features wasm -p nexia-core
+      - name: Generate JS bindings
+        run: wasm-bindgen target/wasm32-unknown-unknown/release/nexia_core.wasm --target web --no-typescript --out-dir web/wasm

.github/workflows/ui-ci.yml

@@ -0,0 +1,64 @@
+# SPDX-License-Identifier: MPL-2.0
+# Product CI (UI/web): compiles the ReScript UI under Deno, builds the wasm
+# core, runs the UI + contract tests, and produces the web bundle.
+name: ui-ci
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ui-ci-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  build-test:
+    name: rescript + wasm + deno test + bundle
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
+      - name: Install Deno
+        run: |
+          curl -fsSL https://deno.land/install.sh | DENO_INSTALL="$HOME/.deno" sh -s v2.9.1
+          echo "$HOME/.deno/bin" >> "$GITHUB_PATH"
+
+      - name: Install stable Rust with wasm target
+        run: |
+          rustup toolchain install stable --profile minimal
+          rustup default stable
+          rustup target add wasm32-unknown-unknown
+
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+        with:
+          path: |
+            ~/.cargo/registry
+            ~/.cargo/bin
+            target
+          key: rust-wasm-${{ runner.os }}-${{ hashFiles('Cargo.lock') }}
+
+      - name: Install wasm-bindgen-cli
+        run: command -v wasm-bindgen >/dev/null || cargo install wasm-bindgen-cli --version 0.2.126 --locked
+
+      - name: Install JS dependencies (Deno-only, npm registry)
+        run: deno task setup
+
+      - name: Compile ReScript
+        run: deno task build:res
+
+      - name: Build wasm core
+        run: deno task build:wasm
+
+      - name: UI + contract tests
+        run: deno task test:ui
+
+      - name: Bundle web app
+        run: deno task build:web
+
+      - name: Lint
+        run: deno lint

.gitignore

@@ -40,6 +40,13 @@ erl_crash.dump
 # ReScript
 /lib/bs/
 /.bsb.lock
+ui/lib/
+ui/src/**/*.res.js
+ui/tests/**/*.res.js
+
+# Generated web artifacts
+web/dist/
+web/wasm/
 
 # Python (SaltStack only)
 __pycache__/

.machine_readable/6a2/STATE.a2ml

@@ -5,10 +5,11 @@
 [metadata]
 project = "nexia-list"
 version = "0.1.0"
-last-updated = "2026-03-15"
+last-updated = "2026-07-02"
 status = "active"
 
 [project-context]
 name = "nexia-list"
-completion-percentage = 0
-phase = "In development"
+completion-percentage = 35
+phase = "active development — web-first build resurrection"
+focus = "wasm core integration (wasm-bindgen bridge to browser), then product CI, tests, canvas drag-and-drop, PWA (service worker)"

.machine_readable/INTENT.contractile

@@ -35,38 +35,36 @@
 
   ; === Purpose (what this repo IS) ===
   (purpose
-    "{{ONE_PARAGRAPH_PURPOSE}}"
+    "Nexia is a local-first, spatial personal knowledge management tool: notes arranged on a spatial canvas, first-class bidirectional links between them, and (planned) agents implemented as persistent queries that continuously organise the notebook. It is web-first — a ReScript TEA-style UI drives a Rust core compiled to WASM in the browser — and all user data lives on the user's device in human-readable JSON."
   )
 
   ; === Anti-Purpose (what this repo is NOT — prevents scope creep) ===
   (anti-purpose
-    "{{ONE_PARAGRAPH_ANTI_PURPOSE}}"
-    ; Examples:
-    ; "This is NOT a general-purpose database — it solves one specific problem."
-    ; "This is NOT a framework — it is a library with a focused API."
-    ; "This does NOT handle authentication — that is delegated to [other repo]."
+    "This is NOT a cloud or SaaS product — no server-side component, no account, no required network. It does NOT do real-time collaboration — local-first means single-user focus. It must NOT introduce vendor lock-in — data is always exportable in open formats. It is NOT an outliner clone — the spatial canvas and link graph are the primary organising metaphors, not a hierarchy."
   )
 
   ; === Key Architectural Decisions That Must Not Be Reversed ===
   (architectural-invariants
-    ; *REMINDER: List the foundational decisions*
-    ; ("Idris2 for ABI definitions — dependent types prove interface correctness")
-    ; ("Zig for FFI — zero-cost C ABI compatibility")
-    ; ("Elixir for supervision — OTP fault tolerance")
+    ("Web-first: the browser is the primary target; desktop (Gossamer) is an optional external shell over the same bundle")
+    ("The Rust core is the single source of truth for note/notebook semantics — the UI must not fork the data model")
+    ("Rust core is compiled to WASM (wasm-bindgen) so the browser runs the real engine")
+    ("Deno is the only JS runtime/package manager — no npm/bun/yarn/pnpm CLIs")
+    ("Local-first: no core feature may require network access")
+    ("User data stored in human-readable JSON")
   )
 
   ; === Sensitive Areas (if in doubt, ask) ===
   (ask-before-touching
-    ; *REMINDER: List areas where LLMs should check before modifying*
-    ; "src/abi/ — formal proofs, changes require re-verification"
-    ; "ffi/zig/ — C ABI boundary, changes affect all language bindings"
-    ; ".machine_readable/ — checkpoint files, format is specified"
+    ".machine_readable/ — checkpoint files, format is specified"
+    ".github/workflows/ — estate governance workflows; removal requires approval"
+    "LICENSE and SPDX headers — never remove or modify"
+    "core/src/ data model — semantics mirrored by the UI; changes ripple across the WASM boundary"
   )
 
   ; === Ecosystem Position ===
   (ecosystem
-    (belongs-to "{{MONOREPO_OR_STANDALONE}}")
-    (depends-on ("{{DEP1}}" "{{DEP2}}"))
-    (depended-on-by ("{{CONSUMER1}}" "{{CONSUMER2}}"))
+    (belongs-to "standalone repo within the hyperpolymath estate")
+    (depends-on ("gossamer (optional — desktop shell only, external sibling checkout)"))
+    (depended-on-by ())
   )
 )

.machine_readable/agent_instructions/methodology.a2ml

@@ -55,7 +55,7 @@ perfective = 10   # % for SPDX headers, doc updates, formatting, style
 # Customise this per project — the template default is generic.
 
 [methodology.unique-strength]
-description = "{{PROJECT_UNIQUE_STRENGTH}}"
+description = "Typed end-to-end: the Rust core compiled to WASM is the single source of truth for note/notebook semantics, driven by an exhaustively pattern-matched TEA-style ReScript UI — no type drift between engine and interface"
 deepen-not-broaden = true
 
 # ============================================================================

.tool-versions

@@ -1 +1,2 @@
 just 1.36.0
+deno 2.9.1

.well-known/ai.txt

@@ -12,9 +12,9 @@ Allow: /
 Manifest: /0-AI-MANIFEST.a2ml
 
 # Machine-readable metadata
-Metadata: /.machine_readable/STATE.scm
-Metadata: /.machine_readable/META.scm
-Metadata: /.machine_readable/ECOSYSTEM.scm
+Metadata: /.machine_readable/6a2/STATE.a2ml
+Metadata: /.machine_readable/6a2/META.a2ml
+Metadata: /.machine_readable/6a2/ECOSYSTEM.a2ml
 
 # License
 License: MPL-2.0