Launch blockers: npm publish token and domain verification

[ElxMaj]

The code-owned public launch checks are green, but launch is still blocked by owner/account actions.

Evidence from pnpm launch:preflight on main at e7c6a05:

• GitHub CI passes.
• Launch site is live at https://marrow-six.vercel.app/.
• Canonical, hero capitalization, sitemap, Vercel inspect, benchmark honesty, and package file checks pass.
• npm registry still has 0.2.1; repo packages are 0.4.0.
• marrowhq.com is on Namecheap failed WHOIS/contact-verification nameservers.

Owner actions:

• Create an npm Automation token for the @marrowhq packages.
• Add it as repo secret NPM_TOKEN in ElxMaj/marrow.
• Publish @marrowhq/shared, @marrowhq/core, @marrowhq/web, @marrowhq/mcp-server, and @marrowhq/cli at 0.4.0.
• Verify npm view @marrowhq/cli version returns 0.4.0.
• Verify the Namecheap contact details for marrowhq.com so the failed-verification nameservers clear.
• Add marrowhq.com to the Vercel project once the registrar hold clears.
• Set DNS: apex A 76.76.21.21 and www CNAME cname.vercel-dns.com.
• Re-run pnpm launch:preflight from the public repo and confirm it passes.

[ElxMaj]

Update: PR #8 merged and public main CI is green at e63127b.

Latest pnpm launch:preflight now also has an explicit Vercel domain gate:

• PASS: public GitHub CI, launch site, canonical URL, hero capitalization, sitemap, Vercel inspect, benchmark/report honesty, package allowlists.
• FAIL: missing public NPM_TOKEN, local npm auth, npm package versions still 0.2.1 vs repo 0.4.0, marrowhq.com not visible to Vercel, Namecheap contact-verification hold, apex DNS parked at 198.54.117.242, no www CNAME.

[ElxMaj]

Update: PR #9 merged and public main CI is green at 70d0568.

New code-owned launch hardening is in place:

• Tagged release workflow now checks NPM_TOKEN, typecheck, lint, tests, packed smoke, and build before changeset publish.
• pnpm launch:preflight now verifies that release workflow contract and reports it as PASS.

Latest public preflight:

• PASS: public GitHub CI, release workflow, launch site, canonical URL, hero capitalization, sitemap, Vercel inspect, benchmark/report honesty, package allowlists.
• FAIL: missing public NPM_TOKEN, local npm auth, npm package versions still 0.2.1 vs repo 0.4.0, marrowhq.com not visible to Vercel, Namecheap contact-verification hold, apex DNS parked at 198.54.117.242, no www CNAME.

[ElxMaj]

Update: PR #10 merged and public main CI is green at 509ba2a.

Launch polish now live on https://marrow-six.vercel.app/:

• Visible copy says Postgres, not postgres.
• The ingest hint now says distillation uses your model key.
• Mobile masthead hides Support below 420px; browser verification at 390x844 showed no horizontal overflow and a 70px gap between the wordmark and Live demo.
• Desktop browser verification at 1440x1000 showed no horizontal overflow, Support visible, and corrected copy.

Latest public preflight still has the same owner/account blockers only:

• FAIL: missing public NPM_TOKEN, local npm auth, npm package versions still 0.2.1 vs repo 0.4.0, marrowhq.com not visible to Vercel, Namecheap contact-verification hold, apex DNS parked at 198.54.117.242, no www CNAME.

[ElxMaj]

Update: PR #11 merged and public main CI is green at 5ec4d9f.

New launch guard:

• pnpm launch:preflight now checks live npx @marrowhq/* command freshness.
• It fails while the site advertises npx @marrowhq/cli or npx -y @marrowhq/mcp-server and npm latest still lags the repo.

Latest public preflight now includes:

• FAIL live npx freshness: @marrowhq/cli and @marrowhq/mcp-server are still 0.2.1 on npm while the repo is 0.4.0.
• The same owner/account blockers remain: missing public NPM_TOKEN, local npm auth, package publish, Vercel domain access, Namecheap verification, apex DNS, and www CNAME.

[ElxMaj]

Update: PR #12 merged and public main CI is green at 3622e09.

This slice fixed the launch-facing source path:

• Removed the broken https://marrow-demo.vercel.app path from the landing page.
• Run demo and all demo/citation links now point to the on-page #start setup section.
• Landing, README, docs, and console first-run copy are source-first while npm latest is still 0.2.1.
• pnpm launch:preflight now validates the demo link target.

Latest public preflight improvements:

• PASS: hero capitalization.
• PASS: demo link, points at on-page #start.
• PASS: live npx freshness, no @marrowhq npx commands advertised.
• PASS: benchmark report and synthetic-eval honesty checks.

Remaining blockers are owner/account/domain actions only:

• Missing public NPM_TOKEN repo secret.
• Local npm auth is not available in this environment.
• npm latest for @marrowhq/shared, @marrowhq/core, @marrowhq/web, @marrowhq/mcp-server, and @marrowhq/cli is still 0.2.1; repo is 0.4.0.
• marrowhq.com is still not visible to Vercel under elxmaj.
• Namecheap contact-verification hold remains.
• Apex DNS is still parked at 198.54.117.242; www.marrowhq.com has no CNAME.

[ElxMaj]

Update: PR #13 merged and public main CI is green at b4052f4.

New launch-handoff guard is live:

• pnpm launch:preflight now prints a Next actions section for every failure or warning.
• pnpm launch:preflight -- --json now returns stable summary, checks, and nextActions for issue comments, release checklists, or automation.
• Root preflight report tests are now part of pnpm test, so CI guards the launch report contract.
• Public preflight can be retargeted with MARROW_PREFLIGHT_REPO, MARROW_PREFLIGHT_SITE_URL, MARROW_PREFLIGHT_CANONICAL_URL, MARROW_PREFLIGHT_APEX_DOMAIN, and MARROW_PREFLIGHT_WWW_DOMAIN.

Latest public JSON preflight from merged main still exits 1 with the same owner blockers: 11 failed, 0 warned, 16 passed. The first next actions are now explicit:

1. NPM_TOKEN secret -> gh secret set NPM_TOKEN --repo ElxMaj/marrow
2. npm auth -> npm login if publishing locally, or rely on release workflow after NPM_TOKEN exists
3. publish @marrowhq/shared / @marrowhq/core / @marrowhq/web / @marrowhq/mcp-server / @marrowhq/cli so npm latest reaches 0.4.0
4. clear Namecheap contact verification, add marrowhq.com to Vercel, set apex A 76.76.21.21, set www CNAME cname.vercel-dns.com

Code-owned launch checks remain green: public CI, release workflow, launch site, canonical, hero capitalization, demo link, live npx freshness, sitemap, Vercel inspect, benchmark honesty, and package allowlists.

[ElxMaj]

Update: PR #14 merged and public main CI is green at 4f2b4de.

Launch polish landed:

• Desktop hero title measure widened from 16ch to 20ch.
• Desktop standfirst measure widened from 70ch to 78ch.
• Browser verification at 1728x1117: title width increased from ~765px to ~956px, standfirst from ~835px to ~931px, standfirst dropped from 4 lines to 3, no horizontal overflow.
• Browser verification at 390x844: no horizontal overflow and mobile widths stayed unchanged.

Checks:

• PASS: public main CI, including typecheck, lint, tests, packed smoke.
• PASS: node landing/check-ids.mjs.
• PASS: pnpm lint.

Latest public preflight still exits 1 with the same owner blockers only: missing public NPM_TOKEN, local npm auth, npm latest still 0.2.1 for the public packages, Vercel domain access, Namecheap verification, apex DNS, and www CNAME.

[ElxMaj]

Source-first hero CTA slice is merged.

• PR: Point hero CTA at source setup #15
• main: 81e30c1
• change: first viewport now points to #start with Run from source instead of copying the stale pnpm marrow demo half-command
• guard: launch preflight now includes hero source path
• validation: PR checks green, public main CI green, local pnpm test, pnpm typecheck, pnpm lint, node landing/check-ids.mjs, browser desktop/mobile CTA verification
• latest public preflight: 11 failed, 0 warned, 17 passed

New pass: hero source path says hero points at source setup. Remaining blockers are still owner/account setup: NPM_TOKEN, local npm auth or release publish path, npm latest 0.2.1 vs repo 0.4.0, Vercel domain access, Namecheap contact verification, apex DNS, and www DNS.

[ElxMaj]

Demo-doc truth slice is merged.

• PR: Align demo docs with bundled slice #16
• main: 7a19af1
• change: README and docs/demo now describe the bundled design-partner / soft-delete demo instead of stale magic-link copy
• guard: launch preflight now includes demo docs truth and fails stale demo docs
• validation: public PR checks green, public main CI green including packed smoke, local pnpm test, pnpm typecheck, pnpm lint, focused red/green preflight test, node landing/check-ids.mjs via pnpm test
• latest public preflight: 10 failed, 0 warned, 18 passed

New pass: demo docs truth says demo docs match the bundled soft-delete slice.

External state changed since the last receipt: the Namecheap failed-verification nameserver check no longer appears, but the domain still is not launch-ready. Remaining blockers are: missing public NPM_TOKEN, local npm auth or release publish path, npm latest still 0.2.1 vs repo 0.4.0, Vercel domain access for marrowhq.com, apex A record currently 216.198.79.1 instead of 76.76.21.21, and missing www.marrowhq.com CNAME.

[ElxMaj]

Source setup migration slice is merged.

• PR: Run migrations in source quickstart #17
• Main SHA: 088569f5b6e854cb4eb9591d0289df7f5a8e8b32
• Change: README and landing source setup now run pnpm db:migrate after pnpm db:up and before pnpm marrow demo; launch preflight now guards that order.

Validation:

• Red first: node --test scripts/launch-preflight.test.mjs failed before evaluateSourceSetupPath existed.
• Focused: node --test scripts/launch-preflight.test.mjs, node landing/check-ids.mjs.
• Browser: desktop/mobile landing quickstart order, no horizontal overflow, no console errors.
• Full local: pnpm typecheck, pnpm lint, pnpm test.
• GitHub: PR checks green; post-merge main CI green at 088569f.
• Preflight: 10 failed, 0 warned, 19 passed, total 29; new source setup migration check passes.

Remaining blockers:

• Add public repo NPM_TOKEN secret.
• Publish @marrowhq/* packages at repo version 0.4.0; npm latest is still 0.2.1.
• Local npm auth is missing if publishing from this machine.
• Add marrowhq.com to Vercel after account/domain access is fixed.
• Set apex A to 76.76.21.21; set www CNAME to cname.vercel-dns.com.

Npm link note: the landing page intentionally stays source-first while npm latest is stale. Restoring visible npm/npmx links before publishing 0.4.0 would send launch users to old code.

[ElxMaj]

Live landing preflight slice is merged.

• PR: Check live source setup in preflight #18
• Main SHA: 2621feb0884121b61a7f0f5b5a39e820d91b4577
• Change: launch preflight now checks the live landing page includes pnpm db:migrate between pnpm db:up and pnpm marrow demo, so a stale Vercel deploy cannot pass while local files are correct.

Validation:

• Red first: node --test scripts/launch-preflight.test.mjs failed before evaluateLiveSourceSetupPath existed.
• Focused: node --test scripts/launch-preflight.test.mjs.
• Live HTTP: curl -fsSL https://marrow-six.vercel.app/ | rg -n "pnpm db:up|pnpm db:migrate|pnpm marrow demo" confirmed the live page order.
• Full local: pnpm typecheck, pnpm lint, pnpm test.
• GitHub: PR checks green; post-merge main CI green at 2621feb.
• Preflight: 10 failed, 0 warned, 20 passed, total 30; new live source setup migration check passes.

Note: an initial parallel public/internal pnpm test run collided through the same local Postgres and produced deadlocks. Sequential reruns passed cleanly.

Remaining blockers:

• Add public repo NPM_TOKEN secret.
• Publish @marrowhq/* packages at repo version 0.4.0; npm latest remains 0.2.1.
• Local npm auth is missing if publishing from this machine.
• Add marrowhq.com to Vercel after account/domain access is fixed.
• Set apex A to 76.76.21.21; set www CNAME to cname.vercel-dns.com.

Npm link note: keep landing source-first until npm latest matches the repo. Restoring visible npm/npx links before publishing 0.4.0 would send launch users to old code.

[ElxMaj]

Markdown launch handoff slice is merged.

• PR: Add markdown launch preflight handoff #19
• Main SHA: 740ddf5aa52fc959acb9bb1bafc4870a123d67a1
• Change: pnpm launch:preflight -- --markdown now renders a paste-ready owner handoff with open launch actions, commands, and passed checks.

Validation:

• Red first: node --test scripts/launch-preflight.test.mjs failed before formatMarkdownReport existed.
• Focused: node --test scripts/launch-preflight.test.mjs.
• Handoff: pnpm launch:preflight -- --markdown renders the current external blocker report and exits nonzero as expected.
• Full local: pnpm typecheck, pnpm lint, pnpm test.
• GitHub: PR checks green; post-merge main CI green at 740ddf5.
• Final markdown preflight: 10 failed, 0 warned, 20 passed, total 30.

Note: the first public full gate hit a one-off CLI watcher miss. The CLI package passed on rerun, and the full pnpm test command passed afterward.

Remaining blockers are unchanged:

• Add public repo NPM_TOKEN secret.
• Publish @marrowhq/* packages at repo version 0.4.0; npm latest remains 0.2.1.
• Local npm auth is missing if publishing from this machine.
• Add marrowhq.com to Vercel after account/domain access is fixed.
• Set apex A to 76.76.21.21; set www CNAME to cname.vercel-dns.com.

Npm link note: keep landing source-first until npm latest matches the repo. Restoring visible npm/npx links before publishing 0.4.0 would send launch users to old code.

[ElxMaj]

Domain handoff wording slice is merged.

• PR: Update domain launch handoff #20
• Main SHA: 56311e48c4af6c9c9ea9ebeaa3f10e1a8510e9d1
• Change: the Vercel domain-access action no longer assumes a registrar/contact-verification hold. It now says to add marrowhq.com to the Vercel project serving https://marrow-six.vercel.app/, then rerun domain inspection. Registrar hold guidance remains conditional under the separate Namecheap failed-WHOIS check.

Validation:

• Red first: node --test scripts/launch-preflight.test.mjs failed because the Vercel domain action still mentioned registrar hold.
• Focused: node --test scripts/launch-preflight.test.mjs.
• Current DNS evidence: normal Namecheap nameservers, apex A 216.198.79.1, missing www CNAME.
• Full local: pnpm typecheck, pnpm lint, pnpm test.
• GitHub: PR checks green; post-merge main CI green at 56311e4.
• Final markdown preflight: 10 failed, 0 warned, 20 passed, total 30; domain action now points at Vercel project/domain setup first.

Remaining blockers:

• Add public repo NPM_TOKEN secret.
• Publish @marrowhq/* packages at repo version 0.4.0; npm latest remains 0.2.1.
• Local npm auth is missing if publishing from this machine.
• Add marrowhq.com to the Vercel project that serves the launch URL.
• Set apex A to 76.76.21.21; set www CNAME to cname.vercel-dns.com.

Npm link note: keep landing source-first until npm latest matches the repo. Restoring visible npm/npx links before publishing 0.4.0 would send launch users to old code.

[ElxMaj]

Watcher stability slice merged.

PR: #21
Main SHA: cf7190bb8ee9d7bfcbd2a5ed0f7c5cd19ac99fdd

What changed:

• CLI folder watch now exposes an ingestion completion callback for deterministic tests.
• Watch startup now does a one-time catch-up scan after fs.watch registration, so files dropped during startup are not missed.
• The flaky fixed-sleep watcher test now waits for actual ingestion.

Validation:

• Focused red test failed before implementation with watch did not ingest the dropped file / catch-up scan did not ingest the dropped file.
• pnpm --filter @marrowhq/cli test -- src/cli.test.ts -t "watch" passed.
• pnpm typecheck passed.
• pnpm lint passed.
• pnpm test passed.
• PR checks passed: check, drift.
• Post-merge public main CI passed at cf7190b.
• pnpm launch:preflight -- --markdown now reports 10 failed, 0 warned, 20 passed, 30 total.

Remaining launch blockers:

• Add public repo NPM_TOKEN.
• Publish @marrowhq/* packages so npm latest moves from 0.2.1 to repo 0.4.0.
• Local npm auth is absent if publishing from this machine.
• Add marrowhq.com to the Vercel project serving https://marrow-six.vercel.app/.
• Fix DNS: apex A should be 76.76.21.21; www should CNAME cname.vercel-dns.com.

Npm nav note: repo CLI is 0.4.0 while npm latest is 0.2.1, so the landing intentionally stays source-first and does not advertise npm until publish is current.