Continuum

An app builder, project engine and marketplace for bot work — a gateway into the Torii ecosystem.

Continuum treats every project like a nostr identity: portable, signable, yours. Projects, sessions, milestones, todos, and files are all shaped as nostr events (addressable kinds 30078–30082). MVP stores them in localStorage; the same objects flip to signed relay events without re-shaping.

What's here (v0.2.48-alpha)

Frontend (src/)

• Application-first root at #/ — logged out, root renders a dedicated branded Amber login page in place (NIP-07 / Plebeian Signer, no password auth, no secrets in the DOM); logged in (valid continuum.session.v1, or a safely-adopted onboarding session), root routes straight to #/dashboard. Routing/auth decisions live in the pure src/nav-guard.js; #/dashboard is guarded and expired/invalid sessions return to login without a loop.
• About / Discover at #/about — the marketing surface (sovereignty story, torii-arch hero, promises grid, freedom-tech pillars, live status roadmap) now isolated behind an explicit route, reachable from small non-primary links on the login page. Never the app root or an onboarding completion target.
• Projects — list, create, open. Import from GitHub or ngit. Cascades to sessions/milestones/todos/files.
• Project home — milestones ladder, session log, live todo list, files created. A per-project Overview · Board view switcher lives in the header.
• Kanban board — every project ships a board (default columns Todo · Doing · Done) at #/projects/:slug/board. Add/rename/reorder/delete custom columns (deleting a non-empty column forces a card move — cards are never lost), create/edit/delete cards (title, description, optional assignee + due date), and move cards by drag or accessible arrow controls for keyboard/touch. State is per-project, persisted, and Nostr-shaped (kinds 30083/30084).
• Kanban source sync (read-only) — boards can surface records imported by the agent from configured local Markdown todo files and public GitHub issues. Imported cards carry a source badge and external link, are never draggable and never mutate local cards, and repeated refreshes never duplicate them (stable per-source fingerprints). A sync bar exposes source/status filters, a manual refresh, and honest last-sync / partial / error / empty / loading states. Imports live only in ephemeral per-board state — never persisted to localStorage or written back to Markdown/GitHub.
• Marketplace — open AI-work tasks. Yours highlighted amber.
• Routstr — real Cashu wallet top-up when an agent is configured; mock behaviour on demo builds. Default coding model: DeepSeek-Coder-V2. Default chat model: DeepSeek Chat.
• Dashboard — cross-project oversight rundown. The Provider card surfaces an admin-gated wallet health row (disabled / reachable / degraded / unreachable, with sanitized reasons) alongside model reachability.
• AI chat dock — routes through your agent (POST /api/chat) when signed in; falls back to mock replies otherwise.
• NIP-07 login — sidebar button opens a Plebeian Signer flow, signs a kind 22242 challenge, and stores the returned session token locally.

Agent (agent/, Node 22 LTS >= 22.4.0 + Fastify)

A small daemon designed for one operator, one VPS, one npub. Owns:

• NIP-07 login verification (no nsec ever touches the VPS)
• Cashu wallet float on disk (memory/wallet/, mode 0600)
• Routstr chat calls (OpenAI-compat, DeepSeek-Chat by default, DeepSeek-Coder-V2 for coding, configurable fallback ladder, one Cashu token per request)
• Read-only project-source adapters (core/project-sources.mjs + lib/markdown-todo.mjs) that normalize configured local Markdown todo files and public GitHub issues into deduped, fingerprinted records. Strict configured allowlists for local paths and GitHub repos; traversal and symlink escapes are rejected; file size, response size, issue/page counts, redirects and timeouts are all bounded; no GitHub credential is used for public repos; content, tokens and full sensitive identifiers are never logged. Last valid snapshots are cached and retained across partial/offline failures.
• Non-mutating wallet health check (GET /api/wallet/health, admin-gated) that validates mint identity and balance via read-only cashu-ts v3 primitives without touching proofs or wallet state

See agent/README.md for the VPS bring-up runbook and agent/PRIVACY.md for the invariants.

Data shape (draft, not a NIP)

Kind	Purpose	d tag
30078	Project	<slug>
30079	Session	<slug>:<session-id>
30080	Milestone	<slug>:m<index>
30081	Todo	<slug>:<todo-id>
30082	File reference	<slug>:<path>
30083	Board column	<slug>:col:<column-id>
30084	Board card	<slug>:card:<card-id>
30090	Marketplace task listing	task id
30091	Routstr wallet + prefs	default

Dev

npm install
npm run dev       # http://127.0.0.1:5180
npm run build     # → dist/
npm run preview   # serve dist/

Roadmap

• M1 ✅ App shell + navigation
• M2 ✅ Projects + project home
• M3 ✅ Routstr + marketplace shells
• M4 ✅ NIP-07 signer, agent scaffold, landing page (v0.2.0-alpha)
• M5 ✅ Kanban boards, read-only source sync (local Markdown + public GitHub), wallet health (v0.2.47-alpha)
• Ops ✅ Deploy hardening: a code-only Ansible promotion restarts the agent before readiness, and readiness verifies the live /api/health version equals the deployed tag (v0.2.48-alpha, OPS-DEPLOY-1)
• Sovereign AI ✅ Genesis sovereign-bot birth + humanitarian constitution with tamper evidence and visible provenance (v0.2.78-alpha, GENESIS-1)
• Sovereign AI ✅ Three-layer principle architecture — Layer A constitution evolved to genesis-1.1.0 (version registry + historical verification), Layer B Code of Practice (cop-1.0.0), Layer C Reference Canon (canon-1.0.0); RAG/LoRA gated before any adaptive stage (v0.2.81-alpha, SOVEREIGN-COP-1)
• Sovereign AI ✅ Persistent memory — encrypted-at-rest (NIP-44, browser-sealed; agent never sees plaintext or a key), ciphertext-only from proposal creation onward (proposals are sealed in the browser before they reach the agent, reviewed by client-side decryption; nothing durable auto-persists; approval binds to the exact reviewed payload hash + single-use nonce and promotes the already-sealed blob), isolated by owner + bot + project, with manual owner-signed encrypted portability (export/import → quarantine, default-deny; never relay-published). No vector DB — similarity retrieval is deferred to RAG-1. Owner console at #/memory (v0.2.83-alpha privacy correction, superseding v0.2.82-alpha; MEMORY-1; see docs/sovereign-ai-memory-1-spec.md)
• Sovereign AI ✅ Guided first-run memory activation — a locked owner on #/memory gets a dominant, accessible activation panel with one primary CTA that walks a pure eight-state machine; the owner authorizes by signing a kind-22242 challenge in their own NIP-07 signer (same shape as login), the browser NIP-44-decrypts the ciphertexts, and the agent unlocks after owner-bound, single-use (replay-safe) signature verification with a metadata-only audit line. "Unlocked" is shown only after an authoritative unlocked_for_owner:true re-read — never optimistically (v0.2.87-alpha, MEMORY-ACTIVATION-1)
• M6 Local Ollama fallback, brain.write + todo.patch skills
• M7 Nostr event publishing (gift-wrap-only), own relay + sync

Related

• Torii Quest — the open-world arena shooter and Continuum's first surface.