clean up

Author: elliotBraem

.agent/skills/bos/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: bos
-description: CLI alias for everything-dev Module Federation projects. Use when creating new BOS projects, publishing bos.config.json to the FastKV registry, syncing with remote configs (every.near/everything.dev), running development servers (`everything-dev dev` or `bos dev`), or building/deploying federated apps. Deploy → publish → sync workflow for shared configuration.
+description: CLI alias for everything-dev Module Federation projects. Use when creating new BOS projects, publishing bos.config.json to the temporary dev.everything.near FastKV registry, syncing with remote configs (every.near/everything.dev), running development servers (`everything-dev dev` or `bos dev`), or building/deploying federated apps. Build/deploy → publish → sync workflow for shared configuration.
 ---
 
 # everything-dev CLI (`bos` alias)
@@ -57,10 +57,10 @@ bos start --no-interactive   # All remotes, production URLs
 The core workflow for sharing configuration:
 
 ```bash
-# 1. Deploy apps to Zephyr (updates bos.config.json with production URLs)
-bos deploy
+# 1. Build/deploy all workspaces when needed (updates bos.config.json with production URLs)
+bos publish --deploy
 
-# 2. Publish config to the FastKV registry
+# 2. Publish config to the temporary FastKV registry
 bos publish
 
 # 3. Others sync from your published config
@@ -78,8 +78,7 @@ bos sync --account your.near --gateway your-gateway.com
 | `bos dev` | Development (auto-detects missing packages) |
 | `bos start --no-interactive` | Production mode |
 | `bos build` | Build existing packages (skips missing) |
-| `bos deploy` | Deploy existing packages to Zephyr |
-| `bos publish` | Publish config to the FastKV registry |
+| `bos publish` | Publish config to the temporary FastKV registry |
 | `bos info` | Show current configuration |
 | `bos status` | Check remote health |
 
@@ -116,7 +115,7 @@ Commands automatically detect which packages exist locally:
 |---------|-------------------------|
 | `bos dev` | Uses remote mode |
 | `bos build` | Skips package |
-| `bos deploy` | Skips package |
+| `bos publish --deploy` | Skips package |
 
 ### Process Management
 
@@ -130,21 +129,14 @@ Process tracking uses `.bos/pids.json` to track spawned processes for cleanup.
 
 ### Docker Commands
 
-| Command | Description |
-|---------|-------------|
-| `bos docker build` | Build production Docker image |
-| `bos docker build --target development` | Build development/agent-ready image |
-| `bos docker build --no-cache` | Build without cache |
-| `bos docker run` | Run container in production mode |
-| `bos docker run --detach` | Run container in background |
-| `bos docker run --target development --mode serve` | Run agent-ready container (RPC exposed) |
-| `bos docker stop <containerId>` | Stop specific container |
-| `bos docker stop --all` | Stop all BOS containers |
-
-**Docker modes:**
-- `start` (default): Production mode, fetches config from the FastKV registry
-- `serve`: Exposes CLI as RPC API (agent-ready)
-- `dev`: Full development mode
+Use the repo `Dockerfile` directly for production containers.
+
+```bash
+docker build -t everything-dev .
+docker run -p 3000:3000 everything-dev
+```
+
+The container uses `bun run start` and fetches config from the FastKV registry.
 
 For full command reference, see [commands.md](docs/commands.md).
 
@@ -172,6 +164,6 @@ For detailed workflow guides, see [workflows.md](docs/workflows.md):
 Key files for understanding the system:
 
 - `bos.config.json` - Runtime configuration
-- `demo/cli/src/types.ts` - BosConfig schema
-- `demo/cli/src/cli.ts` - CLI implementation
-- `demo/cli/src/plugin.ts` - Command handlers
+- `packages/everything-dev/src/types.ts` - BosConfig schema
+- `packages/everything-dev/src/cli.ts` - CLI implementation
+- `packages/everything-dev/src/bos-plugin.ts` - Command handlers

.agent/skills/bos/docs/commands.md

@@ -56,24 +56,18 @@ bos build --force            # Force rebuild (ignore cache)
 
 ### `bos deploy`
 
-Build and deploy to Zephyr Cloud. Updates `bos.config.json` with production Zephyr URLs after successful deployment.
-
-```bash
-bos deploy                   # Deploy all
-bos deploy ui                # Deploy UI only
-bos deploy --force           # Force rebuild
-```
-
-Requires `ZE_SERVER_TOKEN` and `ZE_USER_EMAIL` in `.env.bos` for CI/CD.
+`bos deploy` is not a standalone command in the current CLI. Use `bos publish --deploy` to build/deploy all workspaces and then publish the updated config.
 
 ### `bos publish`
 
-Publish `bos.config.json` to the FastKV registry.
+Publish `bos.config.json` to the temporary `dev.everything.near` FastKV registry.
 
 ```bash
-bos publish                  # Mainnet
+bos publish                  # Publish only
+bos publish --deploy         # Build/deploy all workspaces, then publish
 bos publish --network testnet
 bos publish --dry-run        # Preview without sending
+bos publish --packages ui,api
 ```
 
 ### `bos clean`
@@ -251,34 +245,14 @@ Process tracking uses `.bos/pids.json` to track spawned processes.
 
 ## Docker
 
-### `bos docker build`
-
-Build Docker image for production or development.
-
-```bash
-bos docker build                         # Production image (Dockerfile)
-bos docker build --target development    # Dev image (Dockerfile.dev)
-bos docker build --tag my-tag            # Custom tag
-bos docker build --no-cache              # Build without cache
-```
-
-### `bos docker run`
-
-Run container with configurable modes.
+Use the repo `Dockerfile` directly, or build the image in CI and push to GHCR.
 
 ```bash
-bos docker run                                    # Production mode
-bos docker run --detach                           # Run in background
-bos docker run --port 8080                        # Custom port
-bos docker run --target development --mode serve  # Agent-ready (RPC exposed)
-bos docker run --target development --mode dev    # Full dev mode
-bos docker run --env KEY=value                    # Pass env vars
+docker build -t everything-dev .
+docker run -p 3000:3000 everything-dev
 ```
 
-**Modes:**
-- `start` (default): Production mode, fetches config from the FastKV registry
-- `serve`: Exposes CLI as RPC API at `/api/rpc` (agent-ready)
-- `dev`: Full development mode with hot reload
+The container uses `bun run start` and fetches config from the FastKV registry.
 
 ### `bos docker stop`
 

.agent/skills/bos/docs/types.md

@@ -2,7 +2,7 @@
 
 The `bos.config.json` file is the single source of truth for all runtime configuration.
 
-## Schema (from `demo/cli/src/types.ts`)
+## Schema (from `packages/everything-dev/src/types.ts`)
 
 ```typescript
 interface BosConfig {

.agent/skills/bos/docs/workflows.md

@@ -100,26 +100,28 @@ The core sharing workflow:
 
 ### 1. Publish (Full Release)
 
-`bos publish` builds, deploys to Zephyr Cloud, and publishes config to the FastKV registry in one step:
+`bos publish` publishes `bos.config.json` to the temporary `dev.everything.near` FastKV registry. Add `--deploy` to build/deploy all workspaces first:
 
 ```bash
 # Preview first
 bos publish --dry-run
 
-# Full release: build + deploy + publish to mainnet
+# Publish only
 bos publish
 
+# Build/deploy all workspaces, then publish
+bos publish --deploy
+
 # Publish to testnet
 bos publish --network testnet
 
 # Publish specific packages only
-bos publish ui,api
+bos publish --packages ui,api
 ```
 
 The publish command:
-1. Builds packages locally (`bun run build`)
-2. Deploys to Zephyr Cloud (updates `production` URLs in config)
-3. Publishes config to the FastKV registry
+1. Optionally builds/deploys all workspaces when `--deploy` is set
+2. Publishes config to the FastKV registry
 
 Your config is now at: `{account}/bos/gateways/{gateway}/bos.config.json`
 
@@ -297,39 +299,24 @@ bos secrets sync --env .env.my-tenant
 
 Each tenant can have their own:
 - `bos.config.json` with their account
-- Published config in the FastKV registry
+- Published config in the temporary FastKV registry
 - NOVA secrets group
 
 ## Docker Deployment
 
 ### Production Container
 
-Build and run a production container that fetches config from the FastKV registry:
+Build and run the repo Docker image that fetches config from the FastKV registry:
 
 ```bash
-# Build production image
-bos docker build
-
-# Run in background
-bos docker run --detach
+docker build -t everything-dev .
 
-# Stop all containers
-bos docker stop --all
+docker run -p 3000:3000 everything-dev
 ```
 
 ### Agent-Ready Container
 
-For AI agents that need to interact via RPC:
-
-```bash
-# Build development image
-bos docker build --target development
-
-# Run with RPC exposed
-bos docker run --target development --mode serve --detach
-
-# RPC available at http://localhost:4000/api/rpc
-```
+The repo Dockerfile is production-oriented. Use the CLI directly for agent workflows.
 
 ### Container Management
 
@@ -342,9 +329,6 @@ bos kill
 
 # Force kill
 bos kill --force
-
-# Stop specific container
-bos docker stop <containerId>
 ```
 
 ## Debugging

.changeset/auth-fix.md

@@ -0,0 +1,5 @@
+---
+"host": patch
+---
+
+Fix authentication flow in host program with proper session handling and proxy test coverage

.changeset/fastkv-publish-registry-fix.md

@@ -0,0 +1,7 @@
+---
+"api": patch
+"ui": patch
+"everything-dev": patch
+---
+
+Fix published app discovery and FastKV publish flow so registry reads use the stored manifest data, publish can succeed after FastKV indexing, and the app explorer links directly to the FastKV config record.

.changeset/plugins-support.md

@@ -0,0 +1,8 @@
+---
+"api": patch
+"host": patch
+"everything-dev": patch
+"every-plugin": patch
+---
+
+Add plugin support with improved module federation service, shared dependencies handling, and auth client integration

.changeset/security-hardening.md

@@ -0,0 +1,5 @@
+---
+"host": patch
+---
+
+Add security hardening with Dependabot configuration, SECURITY.md policy, and axios vulnerability mitigation

.changeset/splash-metadata-brand-assets.md

@@ -0,0 +1,6 @@
+---
+"everything-dev": patch
+"ui": patch
+---
+
+Refresh the splash-based social metadata and brand assets so the UI ships a stable preview image and matching black-dot favicon set.

.changeset/under-construction-page.md

@@ -0,0 +1,6 @@
+---
+"ui": patch
+"everything-dev": patch
+---
+
+Add under construction page with NEAR CLI integration for session management and development tooling