feat(web): Behance-grade minimalist dark glassmorphism landing and console

[kapustazh]

Summary

Redesigns @oneshot/web from a bare developer login stub into a Behance-grade minimalist dark glassmorphism landing page and authoritative operator console matching the Concept 3 Convergence Stream logo (apps/web/public/logo.png). Adds a sticky glassmorphic navigation header, high-contrast hero section with technical value proposition, 4 numbered architectural invariant cards (atomic precision, pre-execution policy, hashless recovery, cardinality invariant) strictly without AI emojis/icons, and embeds the authoritative execution engine console tabs (Create or replay, Authoritative status, Settlement evidence, Recovery evidence) within an obsidian frosted glass surface with seamless Privy operator authentication and complete test isolation.

Scope and acceptance criteria

• The change is limited to the stated milestone or issue (feature/web-landing-redesign).
• Acceptance criteria are listed and satisfied:
  • Behance-grade minimalist dark glassmorphism landing page matching Concept 3 Convergence Stream logo (apps/web/public/logo.png).
  • Strict zero-emoji, zero-AI-icon technical typography across all cards and UI elements.
  • Sticky top navigation bar with live Arc Testnet pulse indicator, USDC badge, and console jump link.
  • Hero section communicating the OneShot promise: One job. Many retries. One settlement. with technical CTAs.
  • 4 numbered architectural invariant cards (01 / ATOMIC PRECISION, 02 / PRE-EXECUTION POLICY, 03 / HASHLESS RECOVERY, 04 / CARDINALITY INVARIANT).
  • Authoritative Execution Engine workspace container wrapping the 4 console tabs with ARIA accessibility preserved.
  • Seamless Privy operator authentication with official login modal, DID badge, and copy action.
  • Test isolation: .env.test and test:browser script using tsc -b && vite build --mode test plus @oneshot/contracts alias to prevent live Privy network requests or unbuilt dependency errors in CI.
  • Zero regressions across all 64 workspace test files (942 unit/contract tests) and 7/7 Playwright browser tests.
  • Clean lint, typecheck, format, and build.
• No unrelated cleanup is included.

Product and security invariants

• Tenant isolation remains fail-closed.
• Sponsor authorization, auditability, and daily caps remain enforced where applicable.
• Recipients cannot modify sponsor controls or access sponsor-only data.
• No secret, token, production identifier, or personal data is committed or pasted into review prompts.
• Any non-applicable invariant is explained below.

Invariant notes:

• Settlement-path invariant (1 intent / at most 1 settlement) is untouched; the redesign modifies the web presentation layer.
• Reconciliation invariant (UNKNOWN reconciles without blind retry) is preserved; recovery tabs remain authoritative read-only evidence surfaces without blind force-pay buttons.

Validation

Commands and results:

- pnpm --filter @oneshot/web test: 9 files / 50 tests passed
- pnpm --filter @oneshot/web test:browser: 7/7 Playwright tests passed
- pnpm test (full monorepo): 64 files / 942 tests passed
- pnpm typecheck: PASS
- pnpm lint: PASS
- pnpm format:check: PASS
- pnpm check:generated: PASS
- pnpm --filter @oneshot/web build: PASS
- Visual verification: full-page screenshots captured for locked and unlocked states
- GitHub Actions CI (all 5 checks): PASS

Independent review evidence

Gate A — exact candidate tree before push

• Base commit SHA: 1125134f7edcdea4e1e6bc5687300ad67908142c

• Candidate tree SHA: 4dbfaefc14633f69800e28c50dbc199fea85ed57

• Candidate commit SHA: 87bf220138397023ef84b8b135cc3e0844fe7d3b

• Reviewer tool: free-pi-cli

• Reviewer model: glm-5.3-flash

• Verdict: VERDICT: PASS

• Findings or residual risks:

  • Non-blocking: Candidate commit was already on remote; exact identities and tree reviewed.
  • Non-blocking: .env.test committed with empty VITE_PRIVY_APP_ID=; keep file free of private secrets.
  • Non-blocking: apps/web build lazy chunk-size warning (expected for Privy SDK).

• The reviewed tree equals the committed tree.

Gate B — exact remote PR head

• Pull request URL/number: feat(web): Behance-grade minimalist dark glassmorphism landing and console #58 feat(web): Behance-grade minimalist dark glassmorphism landing and console #58

• Remote head commit SHA: 87bf220138397023ef84b8b135cc3e0844fe7d3b

• Remote head tree SHA: 4dbfaefc14633f69800e28c50dbc199fea85ed57

• Reviewer tool: free-pi-cli

• Reviewer model: glm-5.3-flash

• Verdict: VERDICT: PASS

• Findings or residual risks:

  • Non-blocking: Refresh PR body with final gate evidence before human merge.
  • Non-blocking: App.tsx footer displays truncated contract address 0x3600...0000 (cosmetic).
  • Non-blocking: LoginGate.tsx:60 copied state does not auto-reset (pre-existing).

• Gate B reviewed the current remote head and matches Gate A's approved tree.

• Agent policy / repository-policy and all applicable CI checks pass.

Risk and rollback

• Residual risks: None. Purely client-side presentation and automated test isolation.
• Rollback or recovery plan: git revert cleanly rolls back to the previous developer console stub.

Human merge

• A human owner has reviewed the evidence and will perform the merge.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	oneshot	87bf220	Sep 10 2026, 12:18 AM