interledger
diff --git a/‎.cursorrules‎
Lines changed: 103 additions & 0 deletions b/‎.cursorrules‎
Lines changed: 103 additions & 0 deletions
diff --git a/‎.env.example‎
Lines changed: 30 additions & 7 deletions b/‎.env.example‎
Lines changed: 30 additions & 7 deletions
diff --git a/‎.github/copilot-instructions.md‎
Lines changed: 20 additions & 12 deletions b/‎.github/copilot-instructions.md‎
Lines changed: 20 additions & 12 deletions
diff --git a/‎.github/workflows/lint.yml‎
Lines changed: 21 additions & 6 deletions b/‎.github/workflows/lint.yml‎
Lines changed: 21 additions & 6 deletions
diff --git a/‎.github/workflows/main-merge.yml‎
Lines changed: 0 additions & 68 deletions b/‎.github/workflows/main-merge.yml‎
Lines changed: 0 additions & 68 deletions
@@ -0,0 +1,103 @@
+# Developer Practices
+
+## Project
+
+- Stack: Astro, Tailwind, Strapi, TypeScript
+- Mobile-first design
+- Strapi is a headless data layer only. All presentation logic lives in Astro.
+- Astro is the source of truth for content structure, routing, and rendering
+
+## Astro Conventions
+
+- Use content collections and `getStaticPaths` for any route-driven content
+- Shared types live in `src/types/`, utilities in `src/utils/`, layouts in `src/layouts/`
+- Prefer static output (`output: 'static'`) unless a page explicitly needs SSR
+
+## Code Style
+
+- Optimize for the next reader. Clarity over cleverness.
+- Name things well — good names reduce the need for comments
+- Keep functions small and focused. If a function can't be described in one sentence, it's doing too much.
+- Logic functions over 50 lines are likely doing too much — suggest splitting. Astro component markup is exempt, but frontmatter should stay lean.
+- Prefer early returns over deep nesting
+- No magic numbers in logic — use named constants. Tailwind classes and markup content are fine inline.
+- Extract repeated logic into well-named utilities
+- Don't mix concerns (data fetching, transformation, rendering, side effects) in one function
+
+## TypeScript
+
+- Use strict typing everywhere
+- Prefer compile-time errors over runtime errors
+- Define shared interfaces in `src/types/` — don't redeclare shapes across files
+- Type API responses from Strapi explicitly; don't trust `any`
+
+## Styling
+
+- Use Tailwind utility classes
+- Prefer shared components and design tokens over one-off styles
+- If a style pattern appears three or more times, extract it into a component
+- Respect the existing design system before introducing new patterns
+
+## Dependencies
+
+- Before suggesting a new dependency, check if something already in the project solves it
+- Only suggest actively maintained, widely-used packages
+- Always suggest the latest stable version
+- Flag if a dependency seems unnecessary.
+
+## Error Handling & Edge Cases
+
+- Always consider edge cases and error states
+- Add error handling by default — don't leave happy-path-only code
+- Handle empty states, loading states, and API failures gracefully
+- Validate data at boundaries (API responses, user input, URL params)
+
+## Testing
+
+- Write tests for utility functions and data transformations
+- Test edge cases explicitly — empty arrays, null values, malformed input
+- If a bug is fixed, add a test that would have caught it
+
+## Accessibility
+
+- Accessibility is non-negotiable
+- Use semantic HTML
+- Ensure keyboard navigability and visible focus states
+- Add aria attributes only when semantic HTML isn't sufficient
+- Consider zoom, reduced motion preferences, and screen reader behavior
+- Interactive elements need accessible names and visible focus indicators
+
+## Performance
+
+- Watch bundle size — flag large imports
+- Prefer static output
+- Avoid unnecessary client-side JavaScript
+- Lazy-load images and heavy components
+- Optimize assets before committing
+- Prefer native HTML/CSS solutions over JS when possible
+
+## Git
+
+- Use Conventional Commits: `type(scope): description` (e.g., `feat(blog): add search filtering to index`, `fix(api): handle empty Strapi response`)
+- Types: `feat`, `fix`, `docs`, `style`, `refactor`, `perf`, `test`, `chore`, `ci`
+- Scope should match the area of the codebase affected
+- One logical change per commit
+- Branch naming: `type/short-description` (e.g., `feat/blog-search`, `fix/strapi-null-response`)
+- Branch from `main` (or `develop` if applicable) — keep branches short-lived
+- PR titles follow Conventional Commit format
+- Add linear ID in Git PR so it's linked
+- PR descriptions should explain _why_, not just _what_ — include context, decisions made, and anything reviewers should watch for
+
+## When Asked to Generate Code
+
+- Produce clean, readable, well-named, strongly typed code by default
+- Suggest splitting if a function is getting long
+- Flag any tradeoffs or edge cases in the implementation
+- If a new dependency is needed, explain why and confirm no existing alternative exists
+- Don't solve the local problem while breaking the global structure
+
+## When Asked to Review Code
+
+- Check for: edge cases, accessibility, performance, error handling, naming clarity, unnecessary complexity, mixed concerns, and missing types
+- Be direct. Say what's wrong and why. Suggest a fix.
+- Comments should be correct, necessary, and non-obvious. Flag any that just restate the code.
@@ -1,12 +1,35 @@
-# Server (generate with: pnpm dlx tsx -e "console.log('APP_KEYS=' + ...)" etc. - see cms/README.md)
-APP_KEYS=...
-API_TOKEN_SALT=...
-ADMIN_JWT_SECRET=...
-TRANSFER_TOKEN_SALT=...
+# Strapi core secrets — generate these with the commands in QUICKSTART.md
+APP_KEYS=key1,key2,key3,key4
+API_TOKEN_SALT=your-api-token-salt
+ADMIN_JWT_SECRET=your-admin-jwt-secret
+TRANSFER_TOKEN_SALT=your-transfer-token-salt
+JWT_SECRET=your-jwt-secret
 
-# Strapi API
+# Strapi server
+HOST=0.0.0.0
+PORT=1337
+
+# Database
+DATABASE_CLIENT=better-sqlite3
+DATABASE_FILENAME=.tmp/data.db
+
+# Strapi API (used by Astro to fetch content)
 STRAPI_URL=http://localhost:1337
 STRAPI_API_TOKEN=your-api-token
 
-# Optional: disable git sync during local development
+# Astro frontend URL (used by Strapi for preview iframe)
+ASTRO_PREVIEW_URL=http://localhost:1103
+
+# CORS — space-separated list of allowed frontend origins
+# FRONTEND_ORIGINS=http://localhost:1103
+
+# Media uploads
+# Only needed if uploads are hosted externally (CDN, S3, etc.).
+# When unset, upload URLs are kept as relative paths (/uploads/...).
+# STRAPI_UPLOADS_BASE_URL=https://cdn.example.com
+
+# Git sync
+# Set to "true" to disable automatic git commit + push after content changes.
+# Useful in local development to avoid committing every published change.
 # STRAPI_DISABLE_GIT_SYNC=true
+# STRAPI_GIT_SYNC_REPO_PATH
@@ -31,7 +31,7 @@ Ensure these are installed before running any commands:
 
 ### CI Validation Pipeline
 
-The GitHub Actions workflow (`.github/workflows/test-build.yml`) runs on every PR:
+The GitHub Actions workflow (`.github/workflows/lint.yml`) runs on every PR and push to main:
 1. Checkout code
 2. Setup Node.js (v18)
 3. Setup pnpm
@@ -41,6 +41,8 @@ The GitHub Actions workflow (`.github/workflows/test-build.yml`) runs on every P
 
 **To replicate CI locally**: Run `pnpm install && pnpm run lint && pnpm run build`. Both lint and build must pass with no output errors.
 
+**Note**: CI uses npm for installation despite Bun being the preferred local package manager. This is intentional for CI consistency.
+
 ### Important Caveats
 
 - **Node Version**: The system may have multiple Node versions. If build fails with "Node.js vX.X.X is not supported by Astro", upgrade to >=18.20.8. The .nvmrc specifies `lts/iron` (Node 20), which is recommended.
@@ -54,11 +56,11 @@ The GitHub Actions workflow (`.github/workflows/test-build.yml`) runs on every P
 ├── src/                       # Main Astro site
 │   ├── pages/                 # Route pages (catch-all in [...page].astro)
 │   ├── content/               # MDX content organized by section
-│   │   ├── blog/              # Blog posts (developers section)
-│   │   ├── developers/        # Developer documentation
+│   │   ├── foundation-blog-posts/ # Foundation blog posts (+ optional locale subdirs)
+│   │   ├── developers-blog-posts/ # Developer blog posts (+ optional locale subdirs)
 │   │   ├── docs/              # Specification documents
-│   │   ├── foundation-pages/  # Pages managed by Strapi CMS
-│   │   └── summit/            # Summit-specific content
+│   │   ├── foundation-pages/  # Pages managed by Strapi CMS (+ optional locale subdirs)
+│   │   └── summit-pages/      # Summit-specific content (+ optional locale subdirs)
 │   ├── layouts/               # Astro layout components
 │   ├── components/            # Reusable Astro components
 │   │   ├── blocks/            # Content blocks
@@ -98,7 +100,7 @@ The GitHub Actions workflow (`.github/workflows/test-build.yml`) runs on every P
 
 ## Content and Routing
 
-- **Main navigation**: Configured in `src/config/navigation.json`
+- **Foundation navigation**: Configured in `src/config/foundation-navigation.json`
 - **Summit navigation**: Configured in `src/config/summit-navigation.json`  
 - **Dynamic routing**: `src/pages/[...page].astro` handles catch-all routes
 - **Blog routing**: `src/pages/blog/[...page].astro` and `src/pages/developers/blog/[...page].astro` for dated blog content
@@ -109,6 +111,7 @@ The GitHub Actions workflow (`.github/workflows/test-build.yml`) runs on every P
 - **Branches**: `staging` is the preview environment, `main` is production.
 - **Strapi publishing**: Lifecycle hooks generate MDX and commit/push to `staging`.
 - **Netlify**: Auto-builds `staging` to preview and `main` to production.
+- **Self-hosted runner**: The `.github/workflows/staging-merge.yml` runs on push to `staging` via a self-hosted runner (`strapi-vm`). It automatically rebuilds Strapi CMS when `cms/` changes are detected, and syncs MDX to Strapi when `.md` or `.mdx` files change in `src/content/foundation-pages`, `src/content/summit-pages`, `src/content/foundation-blog-posts`, or `src/content/ambassadors`, including localized mirrors under `src/content/<locale>/...`.
 - **Promotion**: Content moves from `staging` to `main` via PR approval.
 - **Preview drafts**: Drafts can be previewed via SSR without publishing.
 
@@ -126,7 +129,7 @@ The GitHub Actions workflow (`.github/workflows/test-build.yml`) runs on every P
 
 1. **ESLint warnings in CMS**: The file `cms/src/api/page/content-types/page/lifecycles.ts` contains warnings about unused variables and `any` types. These exist in the repo and are pre-existing. They do not block the build but do prevent `pnpm run lint` from passing.
 
-2. **Node version mismatch in CI**: The GitHub Actions workflow uses Node 18, but newer patch versions (>=18.20.8) are required. The workflow's `actions/setup-node@v3` should install a compatible patch version automatically.
+2. **Translation structure commented out**: `src/config` in astro.config.mjs has an i18n config block commented with TODO. Do not enable without understanding the full routing implications.
 
 3. **Translation structure commented out**: `src/config` in astro.config.mjs has an i18n config block commented with TODO. Do not enable without understanding the full routing implications.
 
@@ -136,17 +139,23 @@ The GitHub Actions workflow (`.github/workflows/test-build.yml`) runs on every P
 
 The CMS (Strapi v5.31.3) runs independently and uses **pnpm**:
 ```bash
+# Local development (uses npm)
 cd cms
 pnpm install
 pnpm run develop  # Runs on localhost:1337/admin
 pnpm run build    # Production build
 ```
 
-Content published in the CMS automatically generates MDX files in `src/content/foundation-pages/` via lifecycle hooks. MDX generation is handled by `cms/scripts/sync-mdx.cjs`.
+**Production builds** (self-hosted runner on `staging` push):
+- Uses `pnpm install && pnpm run build` via `.github/workflows/staging-merge.yml`
+- Includes `NODE_OPTIONS="--max-old-space-size=4096"` to handle OOM errors during build
+- Automatically restarts the `strapi.service` after rebuild
+
+Content published in the CMS automatically generates MDX files in collection directories such as `src/content/foundation-pages/`, with localizations nested under the type directory (for example `src/content/foundation-pages/es/`). MDX generation is handled by `cms/scripts/sync-mdx/index.ts`.
 
-For pages and blog posts, those lifecycle hooks also run a git add/commit/pull --rebase/push to trigger preview builds. Grant tracks only write/delete MDX locally. Set `STRAPI_DISABLE_GIT_SYNC=true` to disable the git sync.
+For pages and blog posts, lifecycle hooks may trigger git synchronization for preview builds. Set `STRAPI_DISABLE_GIT_SYNC=true` to disable the git sync.
 
-CMS code changes are deployed to the Strapi VM when merged to `staging`. Content-only changes can be rebuilt into Strapi via `cms/scripts/sync-mdx.cjs`.
+CMS code changes are deployed to the Strapi VM when merged to `staging`. The self-hosted runner will automatically rebuild if `cms/` directory changes are detected.
 
 ## Making Changes
 
@@ -158,7 +167,7 @@ When making changes to Astro components, pages, or styles:
 5. If format fails due to ESLint warnings, address warnings manually (check files listed in format output)
 6. Verify `pnpm run build` succeeds (no output errors)
 
-For content changes (MDX files), they are hot-reloaded during dev. For navigation changes, edit `src/config/navigation.json` and verify the sidebar updates correctly.
+For content changes (MDX files), they are hot-reloaded during dev. For navigation changes, edit `src/config/foundation-navigation.json` or `src/config/summit-navigation.json` and verify the sidebar updates correctly.
 
 ## Files to Avoid Modifying
 
@@ -167,7 +176,6 @@ These files are auto-generated or have special constraints and should not be man
 - `cms/src/index.ts` – Generated by Strapi plugin (in eslint ignore list)
 - `cms/src/admin/app.tsx` – Generated by Strapi (in eslint ignore list)
 - `public/scripts/highlight.min.js` – Minified third-party library
-- `src/pages/financial-services.astro` – In eslint ignore list (pre-existing issues)
 - `.astro/` directory – Build cache
 
 ## Trust These Instructions
 
@@ -1,4 +1,4 @@
-name: Lint
+name: Lint and Build
 
 on:
   pull_request:
@@ -8,19 +8,34 @@ on:
 jobs:
   lint:
     runs-on: ubuntu-latest
-    
+
     steps:
       - uses: actions/checkout@v4
 
       - uses: pnpm/action-setup@v4
-        with:
-          version: 10
 
       - uses: actions/setup-node@v4
         with:
-          node-version: 18
+          node-version: 22
           cache: pnpm
 
-      - run: pnpm install --no-frozen-lockfile
+      - run: pnpm install --frozen-lockfile
 
       - run: pnpm run lint
+
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: pnpm/action-setup@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: pnpm
+
+      - run: pnpm install --frozen-lockfile
+
+      - run: pnpm run build