v0.1.0 front page and Design Bank Drive bootstrap

CHANGELOG.md

@@ -11,6 +11,7 @@ First OpenCodeHighEnd release. New product on OpenCode 2. Not OpenCodeBestFriend
 - Installer fails closed on OpenCode 1.x. Gate is major `>= 2`.
 - New identity: CLI `opencode-he`, overlay `~/.config/opencode/highend`, share `~/.local/share/opencode-highend`, AGENTS markers `OPENCODEHIGHEND:BEGIN/END`.
 - V1 plugins are not copied. `lsp` is not ported. Design Bank / Design V2 / SmartDoc remain user data, never git media.
+- Design Bank bootstrap: local valid bank first; `OPENCODE_DESIGN_BANK_URL` + `OPENCODE_DESIGN_BANK_SHA256` (URL without SHA fails closed); default Drive ZIP pin; GitHub `Design-bank.tgz` fallback. Uninstall never deletes `~/Design` or `~/DesignV2`.
 - Legacy V1 plugins (`impeccable-live-poll.ts`) quarantined to `~/.local/share/opencode-highend/quarantine/plugins/`; doctor reports `V1_PLUGIN_LEFTOVER`.
 - FOREIGN_ON_DEMAND MCP stay enable-gated: serena, stitch, reticle, ui-skills, markitdown; exa is never added/removed/overwritten.
 - Retired twins stay retired: `ask-matt`, `grilling`, `wait-what`, `matt-implement`.

README.md

@@ -1,10 +1,8 @@
 # OpenCodeHighEnd
 
-Production-ready capability layer for OpenCode:
-62 routed skills (core + Wave 2/3 warehouse specialists), MCP, Codebase Memory,
-Design Bank, Design Intelligence, SmartDoc, browser and verification tooling.
+OpenCode 2 overlay: 62 frozen routed skills, thin `AGENTS.md`, `opencode-he`.
 
-OpenCodeHighEnd is an installer and runtime overlay for [OpenCode 2](https://opencode.ai/v2/docs/). It is **not** Claude Code, **not** GrokBuild, **not** OpenCodeBestFriend runtime, **not** a model provider, and **not** a dump of a developer home directory.
+Installer and runtime overlay for [OpenCode 2](https://opencode.ai/v2/docs/). It is **not** Claude Code, **not** GrokBuild, **not** OpenCodeBestFriend runtime, **not** a model provider, and **not** a dump of a developer home directory.
 
 Version **0.1.0**. The 62-skill catalog is inherited from OpenCodeBestFriend 1.8.6 (`67142e4` / PR #29) and stays frozen. This is a new product on a new host.
 
@@ -39,6 +37,9 @@ cd OpenCodeHighEnd
 
 # optional: acquire the full user-owned Design Bank and build DesignV2
 ./install.sh --with-design-bank
+# or after install:
+# opencode-he design bootstrap
+# OPENCODE_DESIGN_BANK_URL=... OPENCODE_DESIGN_BANK_SHA256=... opencode-he design bootstrap
 
 # pick up OPENCODE_DISABLE_CLAUDE_CODE=1
 exec "$SHELL"
@@ -182,11 +183,18 @@ Normal `./install.sh` installs the engine only and never starts the multi-gigaby
 
 ```bash
 ./install.sh --with-design-bank
-# or after installation
 opencode-he design bootstrap
+OPENCODE_DESIGN_BANK_URL=... OPENCODE_DESIGN_BANK_SHA256=... opencode-he design bootstrap
 ```
 
-Bootstrap resolves `OPENCODE_DESIGN_BANK` → existing pointer → `~/Design`. It downloads the declared public artifact with curl, verifies SHA-256, safely extracts into a temporary directory, validates all four catalogs, and commits the bank without merging into an existing directory. `~/Design` and `~/DesignV2` are user data and uninstall never removes them. Google Drive is contacted only by bootstrap; retrieval remains offline.
+Two download sources (SHA-256 fail-closed; URL without SHA is refused):
+
+1. **Default Drive pin** in `lib/design_v2/bootstrap_sources.json` (ZIP). Google Drive is contacted only during bootstrap.
+2. **Fallback GitHub artifact** in `vendor/sources.json` (`GrokBestFriend` `Design-bank.tgz`, sha256 `9866f5a8…`). Used when the Drive pin is unavailable.
+
+Operator override: `OPENCODE_DESIGN_BANK_URL` + `OPENCODE_DESIGN_BANK_SHA256`. Drive view links (`/file/d/ID/view`) resolve to `uc?export=download`. A valid local bank (four catalogs at `OPENCODE_DESIGN_BANK` or `~/Design`) is used as-is — no download.
+
+Bootstrap verifies SHA-256, extracts to a temp directory, validates 21st / Aura / Refero / Motionsites catalogs, then commits into `~/Design` or `OPENCODE_DESIGN_BANK`. Uninstall never deletes `~/Design` or `~/DesignV2`. After bootstrap, retrieval stays offline.
 
 ## Design Intelligence
 

docs/design-bank.md

@@ -11,23 +11,51 @@ motionsites/library/catalog.json
 
 Normal `./install.sh` installs the engine only. It does not download Design Bank media.
 
-Run the optional bootstrap during or after install:
-
 ```bash
 ./install.sh --with-design-bank
 opencode-he design bootstrap
+OPENCODE_DESIGN_BANK_URL=... OPENCODE_DESIGN_BANK_SHA256=... opencode-he design bootstrap
+```
+
+## Priority
+
+1. Valid local bank (`OPENCODE_DESIGN_BANK` or `~/Design` with all four catalogs) → `already_present`, no download.
+2. `OPENCODE_DESIGN_BANK_URL` + `OPENCODE_DESIGN_BANK_SHA256`. URL without SHA-256 fails closed; nothing is downloaded.
+3. Default Google Drive ZIP pin in `lib/design_v2/bootstrap_sources.json`.
+4. Fallback GitHub `.tgz` in `vendor/sources.json` (`design-bank.artifactUrl` + `artifactSha256`).
+
+The target and generated `~/DesignV2` are user data, not installer-owned. Uninstall never deletes them.
+
+## Operator Drive archive
+
+Publish the ZIP (or `.tgz`) on Google Drive as anyone-with-the-link, or keep it restricted and download it yourself then point `OPENCODE_DESIGN_BANK` at the extracted tree.
+
+Compute the digest of the **archive file**, not of a folder:
+
+```bash
+sha256sum OpenCodeHighEnd-DesignBank-v1.zip
 ```
 
-Bootstrap target order: `OPENCODE_DESIGN_BANK` → existing supported pointer → `~/Design`. The target and generated `~/DesignV2` are user data, not installer-owned.
+Accepted URL shapes:
+
+- `https://drive.google.com/uc?export=download&id=FILE_ID`
+- `https://drive.google.com/file/d/FILE_ID/view`
+- a direct `https://` artifact
 
-The source declaration is `lib/design_v2/bootstrap_sources.json`. Network access is limited to checksum and archive acquisition. The archive is downloaded with curl, checked against both the downloaded checksum and the pinned SHA-256, bounded and checked for unsafe ZIP members, extracted to a temporary sibling, validated, then atomically committed. A healthy existing target returns `already_present`; an incompatible existing target is never overwritten.
+View links are rewritten to `uc?export=download`. Large Drive files may hit a virus-scan confirm page; bootstrap follows that token **once** with a temporary cookie jar. The jar is never written into git or `~/.config`.
 
-The local pointer remains:
+Drive is first-hop only. After the bank is committed, search, shortlist, inspect, doctor, dedupe, and rebuild stay offline. Aura and 21st live sites are never fetched.
+
+There is no gcloud user OAuth in the installer. Do not put the tarball in this git repository.
+
+## Pointer
 
 ```text
 ~/.config/opencode/highend/config/design-bank.json
 ```
 
-After commit, existing DesignV2 APIs pointer-ingest Refero, Motionsites, 21st, and Aura, then dedupe, rebuild, and doctor. Preview media remains only under the Design root. Search, shortlist, inspect, doctor, dedupe, and rebuild do not contact the network.
+Missing bank is `DEGRADED` in `opencode-he doctor`, not `FAIL`.
+
+After commit, Design V2 pointer-ingests Refero, Motionsites, 21st, and Aura, then dedupes, rebuilds, and doctors. Preview media remains only under the Design root.
 
 Design Intelligence ships in-tree (`design-intelligence/`) and stays lazy inside Impeccable.