Rename Rip Server to Rip Sites and ship tray/Janus harness work

.github/secret_scanning.yml

@@ -1,5 +1,5 @@
 # Intentionally committed development-only private key for the publicly
 # trusted ripdev.io certificate. The zone resolves only to loopback; see
-# packages/server/Caddyfile.
+# packages/sites/Caddyfile.
 paths-ignore:
-  - "packages/server/ripdev.io.key"
+  - "packages/sites/ripdev.io.key"

.github/workflows/cart.yml

@@ -1,4 +1,4 @@
-# Live Cart certification is explicit because it boots Rip Server, Manager,
+# Live Cart certification is explicit because it boots Rip Site, Manager,
 # workers, a Janus-shaped edge, and Chromium. Pull requests use the deterministic
 # browser smoke matrix in test.yml; this workflow preserves the full-stack
 # contract without making that mutable process harness the edit loop.

.gitignore

@@ -16,3 +16,7 @@ dist/browser/*
 tmp-*
 /packages/tray/macos/.build
 /packages/tray/dist
+
+# Rip tray launcher state (generated by bin/rip-tray)
+bin/.rip-tray.plist
+bin/.rip-tray.log

AGENTS.md

@@ -7,7 +7,7 @@ support.
 Permanent documentation:
 
 - [README.md](README.md) — repository orientation and entry points.
-- [docs/SERVER.md](docs/SERVER.md) — Rip Server's system-wide
+- [docs/SERVER.md](docs/SERVER.md) — Rip Sites' system-wide
  Caddy/Janus/manager/worker architecture and lifecycle contract.
 - [docs/TYPES.md](docs/TYPES.md) — type and editor architecture.
 - [docs/WORKSPACE.md](docs/WORKSPACE.md) — the Rip Workspace
@@ -280,7 +280,7 @@ alters surface syntax updates ALL THREE in the same change.
   or choose the nearest idiomatic alternative; never paper over with
   curly-brace JS style. Read nearby `.rip` for the local dialect
   before writing new code.
-- **Workspace vocabulary (publication / apply):** Rip Server publishes
+- **Workspace vocabulary (publication / apply):** Rip Sites publishes
   applications. `bundle.json` is `{ hash, list }`; `list` is the complete
   canonical `[modulePath, source]` Rip program. Individual file hashes remain
   private to Manager. Watch-mode Hub messages carry one
@@ -402,7 +402,7 @@ the affected final gates again.
  browsers. CI runs its deterministic Chromium/Firefox/WebKit smoke
  matrix as a required job; the live Cart Server/Manager certification
  is explicit through `bun run test:cart` in that package and the manual
- `cart-certification` workflow. `packages/server` needs
+ `cart-certification` workflow. `packages/sites` needs
  `xcaddy` on PATH — `go install
  github.com/caddyserver/xcaddy/cmd/xcaddy@latest`, PLUS
  `$(go env GOPATH)/bin` on PATH, which it is not by default: without
@@ -412,7 +412,7 @@ the affected final gates again.
  `JANUS_CADDY=<path>` supplies a janus-enabled binary instead.
  Without either, the lane is fail-fast at `janus` and the six
  directories sorted after it do not run.
-- `bun run test` FROM a package (`packages/vscode`, `packages/server`,
+- `bun run test` FROM a package (`packages/vscode`, `packages/sites`,
  `packages/app`, …) — that package's own suite, and the inner loop
  for work on that package; the root fast loop excludes `packages/**`
  by bunfig, and `test:all` reaches these only by spawning them there
@@ -444,7 +444,7 @@ the affected final gates again.
  loudly if any `@rip-lang/*` name resolves outside this repo (e.g.
  shadowed by a sibling checkout's global links).
 - `rip` on a TTY (or `rip -r`) — the interactive REPL; `rip -e <code>`
- evaluates one entry; `rip schema`/`rip server`/`rip test` dispatch
+ evaluates one entry; `rip schema`/`rip site`/`rip test` dispatch
  their surfaces (`--help` on each).
 
 ## When Blocked

HANDOFF.md

@@ -12,7 +12,7 @@ lives in `docs/`; git history and pull requests retain completed-work detail.
   `packages/browser-tests: bun run test:cart`.
 - Server architecture: `docs/SERVER.md`.
 - Browser publication contract: `docs/WORKSPACE.md`.
-- Detailed lifecycle: `packages/server/README.md`.
+- Detailed lifecycle: `packages/sites/README.md`.
 - Testing cleanup plan: `TEST-DIET.md`.
 
 ## App publication contract
@@ -70,13 +70,13 @@ PR #210 true-merged the testing policy as `769bc2a`:
 - manual live Cart certification: `cart-certification` workflow;
 - package suites run at coherent layer milestones, not after every edit.
 
-`rip-app-publication` merged that mainline at `bd8f407`. The two isolated,
+`rip-sites-publication` merged that mainline at `bd8f407`. The two isolated,
 unsuccessful browser-harness experiments were removed by normal revert commits:
 
 - `e603ea2 Revert "Make Cart readiness nonblocking"`;
 - `e188acf Revert "Stabilize Cart harness readiness"`.
 
-Those experiments never modified Rip Server or Rip App production code.
+Those experiments never modified Rip Sites or Rip App production code.
 
 Arbitrary top-level ESM side effects execute while a candidate module graph is
 evaluated and cannot be rolled back. Workspace, renderer, source, route

README.md

@@ -45,7 +45,7 @@ bun run corpus-expected
 bun run audit
 ```
 
-`test:all` needs `xcaddy` on PATH for the `packages/server` janus lane:
+`test:all` needs `xcaddy` on PATH for the `packages/sites` janus lane:
 
 ```sh
 go install github.com/caddyserver/xcaddy/cmd/xcaddy@latest

TEST-DIET.md

@@ -215,7 +215,7 @@ shown to detect its claimed failure needs redesign.
 
 1. `packages/browser-tests`: separate browser-runtime smoke from the live Cart
    Server/Manager exemplar; make harness failures diagnostic and deterministic.
-2. `packages/server`: separate pure publication/registration contracts from
+2. `packages/sites`: separate pure publication/registration contracts from
    live Janus and process lifecycle certification.
 3. `packages/app`: consolidate repeated Workspace/apply scenarios around the
    transactional invariants they share.

bin/Rip.app/Contents/Info.plist

@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0"><dict>
+  <key>CFBundleDevelopmentRegion</key><string>en</string>
+  <key>CFBundleExecutable</key><string>rip-tray-host</string>
+  <key>CFBundleIdentifier</key><string>io.ripdev.apps</string>
+  <key>CFBundleInfoDictionaryVersion</key><string>6.0</string>
+  <key>CFBundleName</key><string>Rip</string>
+  <key>CFBundlePackageType</key><string>APPL</string>
+  <key>CFBundleShortVersionString</key><string>4.0.0</string>
+  <key>CFBundleVersion</key><string>1</string>
+  <key>LSMinimumSystemVersion</key><string>13.0</string>
+  <key>LSUIElement</key><true/>
+
+</dict></plist>