From 88e795abd3866eae379332d7e91ec928b5f164a7 Mon Sep 17 00:00:00 2001 From: axiomlogicnexus Date: Mon, 22 Jun 2026 02:21:25 +0000 Subject: [PATCH] Add dashboard launch readiness status --- ...LING_AND_DISTRIBUTION_PACKET_2026-06-22.md | 8 +++++ .../HyperTwist/FEATURE_REGISTRY.md | 2 +- .../HyperTwist/ROADMAP.md | 4 ++- website/README.md | 1 + website/src/auth/auth-api.ts | 7 ++++ website/src/pages/app-pages.tsx | 34 ++++++++++++++++++- website/src/site-config.ts | 17 ++++++++-- 7 files changed, 68 insertions(+), 5 deletions(-) diff --git a/docs/ops/HYPERTWIST_PUBLIC_WEBSITE_AUTH_BILLING_AND_DISTRIBUTION_PACKET_2026-06-22.md b/docs/ops/HYPERTWIST_PUBLIC_WEBSITE_AUTH_BILLING_AND_DISTRIBUTION_PACKET_2026-06-22.md index e3ee137..ef77038 100644 --- a/docs/ops/HYPERTWIST_PUBLIC_WEBSITE_AUTH_BILLING_AND_DISTRIBUTION_PACKET_2026-06-22.md +++ b/docs/ops/HYPERTWIST_PUBLIC_WEBSITE_AUTH_BILLING_AND_DISTRIBUTION_PACKET_2026-06-22.md @@ -102,6 +102,7 @@ Protected browser dashboard routes now expose: - desktop-link token generation - download/release posture - billing and entitlement state +- launch-readiness configuration posture - browser-access boundary explanation - notices review @@ -111,6 +112,13 @@ That auth/server health surface now also reports: - the reported core API version when reachable - whether fallback posture is currently active and why +The protected dashboard now also has a first-party launch-readiness panel for: + +- public download URL presence by platform +- Paddle checkout-link presence by plan +- corresponding-source and open-source notices URL presence +- backend webhook-secret and billing-map configuration posture + This is browser-based user access for the operator/account surface. It is **not** a claim that the simulator itself is now browser-owned. diff --git a/docs/v6_5_deep_manual_pack/HyperTwist/FEATURE_REGISTRY.md b/docs/v6_5_deep_manual_pack/HyperTwist/FEATURE_REGISTRY.md index 7acf2b1..4972c76 100644 --- a/docs/v6_5_deep_manual_pack/HyperTwist/FEATURE_REGISTRY.md +++ b/docs/v6_5_deep_manual_pack/HyperTwist/FEATURE_REGISTRY.md @@ -264,7 +264,7 @@ repo. | Feature | Status | Primary authority | Notes | |---|---|---|---| | Public `hypertwist.app` marketing shell | Implemented now | first-party `website/` app + feature registry/roadmap authority | HyperTwist now has a dedicated first-party public web surface for homepage, about, resources, pricing, download, support, and legal routes. This lane is separate from the embedded Unreal browser runtime under `Content/Browser/` and does not claim browser-simulator parity. | -| Browser-based operator/account dashboard | Implemented now | first-party `website/` app + shared auth/dashboard packet | A protected browser dashboard is now live for operator access, account state, download posture, browser-access boundary explanation, notices review, and bounded billing/entitlement status. It reuses the shared SuperTokens auth posture proven in FamiliarOS and ScriptoriumAI while remaining HyperTwist-specific in product content and boundary claims, and the current auth-health surface now truthfully distinguishes configured versus reachable or ready shared-core posture while exposing fallback-active reason instead of hardcoding readiness. | +| Browser-based operator/account dashboard | Implemented now | first-party `website/` app + shared auth/dashboard packet | A protected browser dashboard is now live for operator access, account state, download posture, browser-access boundary explanation, notices review, and bounded billing/entitlement status. It reuses the shared SuperTokens auth posture proven in FamiliarOS and ScriptoriumAI while remaining HyperTwist-specific in product content and boundary claims, the current auth-health surface now truthfully distinguishes configured versus reachable or ready shared-core posture while exposing fallback-active reason instead of hardcoding readiness, and the same dashboard now also surfaces launch-readiness truth for download URLs, checkout links, source/notices URLs, and billing-secret/map configuration. | | Desktop download posture and browser-to-desktop pairing | Implemented now | first-party `website/` app + `website/server` desktop-link endpoints | Public download targets, dashboard-side release posture, and short-lived desktop-link token generation/verification are now first-party owned. The current server posture now enforces exact website-origin matching, bounded per-user issuance, one-time token consumption, and billing-backed plan/download entitlement resolution with focused `website/server` tests green on `2026-06-22`, and the verify handshake now returns the same resolved download-entitlement posture the dashboard sees instead of only identity plus plan/role. The public `/download` page now keeps raw download URLs behind the protected dashboard instead of exposing them directly. Actual release URLs remain deployment configuration rather than hardcoded product truth. | | Paddle-ready pricing and billing webhook seam | Implemented now | first-party `website/` app + `website/server` billing endpoint | The public pricing surface now exists with plan structure, checkout-link configuration seams, and the same `/api/billing/paddle/webhook` endpoint family used by the broader product website lane. The current server now verifies `Paddle-Signature` against `PADDLE_WEBHOOK_SECRET` using the documented raw-body HMAC flow, persists a bounded first-party billing state file, and applies verified Paddle events into account/download entitlement state that the browser dashboard consumes, with focused `website/server` tests green on `2026-06-22`. Production checkout URLs, secret management, and broader operator/admin billing workflows remain deployment/application tasks, not shipped-code omissions. | | Public open-source notices and corresponding-source surface | Implemented now | first-party `website/` app + `HYPERTWIST_MPL_DISTRIBUTION_PLACEMENT_CHECKLIST_2026-05-25.md` | HyperTwist now has a stable public `Open Source Notices` route linked from pricing, download, and footer surfaces, satisfying the requirement that public distribution surfaces expose notice and corresponding-source guidance when shipped builds contain `MPL`-covered material. The exact public corresponding-source URL still must be configured before external launch. | diff --git a/docs/v6_5_deep_manual_pack/HyperTwist/ROADMAP.md b/docs/v6_5_deep_manual_pack/HyperTwist/ROADMAP.md index a4c6074..4f56023 100644 --- a/docs/v6_5_deep_manual_pack/HyperTwist/ROADMAP.md +++ b/docs/v6_5_deep_manual_pack/HyperTwist/ROADMAP.md @@ -207,7 +207,9 @@ Current consolidated milestone snapshot: and the bounded auth-health probe now truthfully distinguishes configured versus reachable or ready shared SuperTokens core posture while reflecting fallback-active reason back into the protected dashboard rather than - hardcoding readiness, + hardcoding readiness, and the protected dashboard now also carries a + first-party launch-readiness panel for download/check-out/legal configuration + posture using the existing site-config and auth-health seams, persists a bounded first-party billing-state file, applies verified Paddle events into account/download entitlement state, and surfaces that resolved billing/download posture back through `/api/auth/me`, the protected browser diff --git a/website/README.md b/website/README.md index 62659c1..7aae4e8 100644 --- a/website/README.md +++ b/website/README.md @@ -7,6 +7,7 @@ First-party `hypertwist.app` surface for HyperTwist: - shared SuperTokens auth posture reused from the FamiliarOS and ScriptoriumAI website lane - desktop download posture and desktop-link handshake endpoints - Paddle-ready pricing/check-out wiring +- dashboard-side launch-readiness surface for download, checkout, auth, and notice configuration - public open-source notices surface required by HyperTwist's MPL distribution doctrine ## Why this app exists diff --git a/website/src/auth/auth-api.ts b/website/src/auth/auth-api.ts index 8172171..e5a6a68 100644 --- a/website/src/auth/auth-api.ts +++ b/website/src/auth/auth-api.ts @@ -67,6 +67,13 @@ export interface AuthHealthPayload { active?: boolean reason?: string | null } + billing: { + statePath: string + processedEventCount: number + pricePlanMapConfigured: boolean + productPlanMapConfigured: boolean + webhookSecretConfigured: boolean + } } export interface ApiBootstrapUserPayload { diff --git a/website/src/pages/app-pages.tsx b/website/src/pages/app-pages.tsx index 8f24dd1..b7a688c 100644 --- a/website/src/pages/app-pages.tsx +++ b/website/src/pages/app-pages.tsx @@ -2,7 +2,7 @@ import { useMemo } from 'react' import { useMutation, useQuery } from '@tanstack/react-query' import { buildAuthApiBaseUrls, createDesktopLinkToken, getAuthHealth } from '../auth/auth-api' import { usePlatformAuth } from '../auth/platform-auth' -import { downloadTargets, mplSourceUrl } from '../site-config' +import { downloadTargets, launchReadiness, mplSourceUrl } from '../site-config' import { roadmapHonestyCards } from '../site-data' function Panel({ @@ -42,6 +42,16 @@ export function DashboardOverviewPage() { return `${baseUrl}/api/auth/desktop-link/verify?token=${encodeURIComponent(token)}` }, [desktopLinkMutation.data?.token]) + const launchReadinessIssues = useMemo(() => { + const issues: string[] = [] + if (!launchReadiness.windowsDownloadConfigured) issues.push('Windows download URL missing') + if (!launchReadiness.operatorCheckoutConfigured) issues.push('Operator checkout URL missing') + if (!launchReadiness.mplSourceConfigured) issues.push('MPL corresponding-source URL missing') + if (!launchReadiness.openSourceRepoConfigured) issues.push('Open-source repository/notices URL missing') + if (healthQuery.data && !healthQuery.data.billing.webhookSecretConfigured) issues.push('Paddle webhook secret missing') + return issues + }, [healthQuery.data]) + return (
@@ -105,6 +115,28 @@ export function DashboardOverviewPage() { + +
    +
  • Windows download URL: {launchReadiness.windowsDownloadConfigured ? 'configured' : 'missing'}
    • +
  • macOS download URL: {launchReadiness.macDownloadConfigured ? 'configured' : 'missing'}
    • +
  • Linux download URL: {launchReadiness.linuxDownloadConfigured ? 'configured' : 'missing'}
    • +
  • Operator checkout URL: {launchReadiness.operatorCheckoutConfigured ? 'configured' : 'missing'}
    • +
  • Studio checkout URL: {launchReadiness.studioCheckoutConfigured ? 'configured' : 'missing'}
    • +
  • MPL corresponding-source URL: {launchReadiness.mplSourceConfigured ? 'configured' : 'missing'}
    • +
  • Open-source repo/notices URL: {launchReadiness.openSourceRepoConfigured ? 'configured' : 'missing'}
    • +
  • Paddle webhook secret: {!healthQuery.data ? 'checking' : (healthQuery.data.billing.webhookSecretConfigured ? 'configured' : 'missing')}
    • +
  • Billing product map: {!healthQuery.data ? 'checking' : (healthQuery.data.billing.productPlanMapConfigured ? 'configured' : 'missing')}
    • +
  • Billing price map: {!healthQuery.data ? 'checking' : (healthQuery.data.billing.pricePlanMapConfigured ? 'configured' : 'missing')}
    • +
+ {launchReadinessIssues.length > 0 ? ( +

+ Public launch is not fully configured yet: {launchReadinessIssues.join('; ')}. +

+ ) : ( +

Core public release configuration is present for the current bounded website lane.

+ )} + +
    {roadmapHonestyCards.map((item) => ( diff --git a/website/src/site-config.ts b/website/src/site-config.ts index 6394728..ff8bfdb 100644 --- a/website/src/site-config.ts +++ b/website/src/site-config.ts @@ -18,6 +18,9 @@ export const brandConfig = { }, } +const operatorCheckoutUrl = readTrimmedEnv('VITE_PADDLE_CHECKOUT_URL_OPERATOR') +const studioCheckoutUrl = readTrimmedEnv('VITE_PADDLE_CHECKOUT_URL_STUDIO') + export const planCatalog = [ { key: 'explorer', @@ -37,7 +40,7 @@ export const planCatalog = [ key: 'operator', name: 'Operator', price: readTrimmedEnv('VITE_PLAN_PRICE_OPERATOR', 'Launch pricing via Paddle'), - ctaLabel: readTrimmedEnv('VITE_PADDLE_CHECKOUT_URL_OPERATOR') ? 'Open Paddle checkout' : 'Request operator access', + ctaLabel: operatorCheckoutUrl ? 'Open Paddle checkout' : 'Request operator access', ctaHref: readTrimmedEnv('VITE_PADDLE_CHECKOUT_URL_OPERATOR', '/pricing'), notes: 'Desktop-first recognition, replay, training, and higher-dimensional runtime ownership for active training operators.', features: [ @@ -51,7 +54,7 @@ export const planCatalog = [ key: 'studio', name: 'Studio', price: readTrimmedEnv('VITE_PLAN_PRICE_STUDIO', 'Contact for launch readiness'), - ctaLabel: readTrimmedEnv('VITE_PADDLE_CHECKOUT_URL_STUDIO') ? 'Open Paddle checkout' : 'Talk to HyperTwist', + ctaLabel: studioCheckoutUrl ? 'Open Paddle checkout' : 'Talk to HyperTwist', ctaHref: readTrimmedEnv('VITE_PADDLE_CHECKOUT_URL_STUDIO', '/support'), notes: 'Higher-dimensional families, operator deployment support, and packaging/validation coordination for production lanes.', features: [ @@ -89,5 +92,15 @@ export const releaseNotesUrl = readTrimmedEnv('VITE_RELEASE_NOTES_URL') export const mplSourceUrl = readTrimmedEnv('VITE_MPL_SOURCE_URL') export const openSourceRepoUrl = readTrimmedEnv('VITE_OPEN_SOURCE_REPO_URL') +export const launchReadiness = { + operatorCheckoutConfigured: Boolean(operatorCheckoutUrl), + studioCheckoutConfigured: Boolean(studioCheckoutUrl), + windowsDownloadConfigured: Boolean(downloadTargets.find((target) => target.platform === 'Windows')?.href), + macDownloadConfigured: Boolean(downloadTargets.find((target) => target.platform === 'macOS')?.href), + linuxDownloadConfigured: Boolean(downloadTargets.find((target) => target.platform === 'Linux')?.href), + mplSourceConfigured: Boolean(mplSourceUrl), + openSourceRepoConfigured: Boolean(openSourceRepoUrl), +} as const + export const paddleReadyDescription = 'HyperTwist is a desktop-first training environment for classic cube, recognition-assisted reconstruction, replay explanation, coaching, higher-dimensional runtime ownership, and browser-based operator access. Delivery is digital-only through authenticated account access and desktop downloads. Pricing and checkout are wired for Paddle, while public legal surfaces stay responsible for open-source notices and corresponding-source disclosure when shipped builds contain MPL-covered components.'