bun-distribution/PLAN.md

Integration plan

Delivered in this batch

• Merge Bun OS and Bun Libraries histories into this checkout on branch os.
• Preserve the 16 library repositories and Bun runtime as pinned submodules.
• Consolidate OS, library, video, artifacts, and desktop JS packages under one root Bun workspace and one bun.lock.
• Provide one bun run setup entry point for recursive submodule setup and frozen Bun installation.
• Consolidate formatting configuration and root quality commands.
• Configure shared Cargo build and install destinations and ignore rules.
• Preserve first-party attribution and imported licenses/notices.

Material source ownership follow-up — 2026-10-13

• Advance the exported Material pin to the current os owner revision and synchronize both M3 references to the single aphrody-m3-os-themes owner.
• Resolve equivalent stale machine aliases to the selected workspace Bun checkout while preserving explicit per-build checkout configuration.
• Validate the source graph through the distribution plan and run native Bun typecheck, lint and format gates.

Runtime source preflight — 2026-10-13

• Report the locked Bun revision, selected checkout revision, worktree cleanliness and build eligibility in the read-only distribution plan.
• Use the shared bounded process owner for Git inspection; never infer a reproducible runtime build from a checkout path alone.

Integrated Craft fonts and shared quality — 2026-10-13

• Integrate craft-fonts and its licensed assets into the Bun OS Cargo workspace; preserve the source repository and publish its os integration commit f1bfd5fd75f24619cad085230c7290f17ee7821e.
• Route Cargo metadata/check through the bounded workspace process owner. Locked metadata resolves craft-fonts and craft-fonts-tests; cargo check --locked passes on native Windows.
• Route cargo fmt --all -- --check through the same serialized native owner; root Rust formatting passes.
• Align Bun OS quality script names with Bun Libraries: typecheck, lint, and format:check. Native bun run check passes on 91 files, lint, and format.
• Document source ownership, asset provenance, license boundaries, and the optional font embedding contract.
• Qualify the font Git-submodule batch under the root nightly: 12 Rust tests and 4 workspace routing tests pass. A remote CI build remains unqualified until runner access and target runtime are wired.

Still required for full consolidation

• Integrate the four library SDK owners into flat root Bun packages; internal dependencies use workspace:*. Remove superseded artifact and video adapters after reference checks. Root quality passes on 107 files; seven Bun packages share version 1.4.4 and one lockfile.

• Preserve the complete imported Libraries SDK source history through 7b5816ac06631bdc6ff772fb1f52c4cd7e66e8e6 in the parent ancestry.

• Compile and execute the Windows standalone product API server from dc7b3b67d92c8e8d29567e63b1952617444a5ab8. Health and authenticated status/apps return 200; anonymous source catalog returns 401. Its SHA-256 is 0aa964312f88242a5fc58ed441c15490c4c73e227894ec7aad93454d1e93cd34. Linux service deployment remains a separate gate.

• Inspect immutable Cargo source manifests and dependency identities, reporting collisions and declared workspace members before migration.

• Convert the font pilot into two private, pinned Git submodules directly under crates/, preserving split histories, licenses and asset tests.

• Pin the root nightly to nightly-2026-09-15; serialize jobs and route Cargo intermediate outputs to build/rust, artifacts to target.

• Apply the same per-crate Git ownership to all remaining product owners.

• Extract craft-atomic with its source history and exact code licenses, pin its forge os revision, and inherit Rustix 1.1.5 from the root. Native Windows qualification passes: 18 tests, Clippy and formatting.

• Deliver idempotent forge identities/repositories and runner credentials through Aphrody Infra and protected secret stores.

• Deliver the first Infra provisioning batch (aphrody/main bae198e935): distribution mirror and three private crate repositories, two successful applications, protected runner key and a dedicated secrets contract.

• Self-host all Aphrody Labs repositories: complete inventory 239, preserve 205 public and 34 private visibility states, admit mirror jobs against real host storage and qualify the canonical source portal.

• Migrate Rust crate manifests and workspace inheritance out of the 16 nested library workspaces and the Bun runtime workspace into one root Cargo workspace. Until then, Cargo workspaces remain separate.

• Consolidate the runtime's vendored sources and native build outputs into root-owned directories after its build scripts support those locations.

• Migrate the Bun runtime's nested aphrody-m3 source owner without changing its active checkout or concurrent work.

• Prove all library consumers resolve through the root Bun workspace and remove any redundant per-project install/build paths after verification.

• Run the unified setup and root quality gates; qualify desktop/native builds separately on their supported hosts.

• Commit the integrated batch and push branch os after remote ancestry verification.

Product/server and offline sources — 2026-10-13

• Root Cargo owns twenty-five flat pinned crate submodules, shared direct dependencies, one nightly and one target/build/install configuration. Locked offline cargo check --workspace --all-features passed for the previous 24-member snapshot. Full build, new-crate tests and Clippy remain pending; see docs/NATIVE-QUALIFICATION.md for the observed launcher interruption.
• Add the canonical Bun Jev owner with its history, nullable token usage, shared direct dependencies and optional client/server features. Its locked offline all-feature check passes; protected Aphrody adapters remain pending consumer migration.
• Commit the root Cargo vendor snapshot: 543 dependency source packages, 568 full-graph identities including twenty-five product crates. Locked offline metadata passes. Preserve exact source bytes and license notices.
• Qualify an offline native build before enabling vendor replacement in the active Cargo configuration. Runtime/vendor migrations remain open.
• Add automatic standalone binary verification with fifteen HTTP checks. The Windows staging candidate from f964e89b passes with runtime 4b8dee0bc69d2c290111001f2249e63e1dc95b70.
• Replace the installed binary and activate the Infra product service. Automatic approval review rejected both actions; deployment stays false. See docs/PRODUCT-SERVER.md for distinct candidate/installed identities.
• Expose the same server, crate inventory and vendor tools through Just.
• Qualify HTTPS on the canonical source.aphrody.app forge portal.
• Complete all 239 source mirrors, including private and archived owners, with full ref/visibility checks and actual storage reservations. DBFR remains reserved for production; temporary storage is not mirror capacity.

Constraints

The workspace integration does not by itself qualify a distribution image, desktop binary, native app, production deployment, or locked runtime build. Preserve active Bun checkout/processes and protected stores. Keep each imported license and notice with its source. Do not force-push.