Add opt-in synthetic participation storage and compute simulators

.github/copilot-instructions.md

@@ -0,0 +1,24 @@
+# CalorieApp project continuity
+
+- Continue the existing checkpoint; never rebuild the CalorieVerse concept from
+  scratch. Read `docs/CALORIEVERSE_PREVIEW_CHECKPOINT.md` before changing it.
+- Draft PR #150, branch `feat/participation-node-simulator`, continues from
+  `f8711ee1a7d3c6e43c300fc6b1123ebe0329ad44`. No merge or deployment is authorized
+  for this work. Keep the PR a draft; do not change live services or WordPress.
+- `/gameverse/preview` is the small meadow review route. `/gameverse` retains
+  the larger existing draft with Studio, identity and participation integrations.
+  The extra route is a review boundary, not a second world or product version.
+- CalorieVerse grows continuously: preserve the original world/starter IDs,
+  module IDs, storage keys and earned progress. Never require a player reset.
+- Reuse the eleven-language display registry. Keep UI copy out of reducers.
+- Content packs, pure activity reducers, rendering and persistence are separate.
+  Unknown module fields must survive; unsupported formats must not be overwritten.
+- Ordinary play requires no account, wallet, storage contribution, compute role
+  or reward. Participation is separately opt-in, capped and reversible, with
+  independent storage/compute consent and pause/resume/full-stop controls.
+- Local guest progress is untrusted and cannot authorize calT/CAL/XRP rewards.
+  Synthetic simulators are not an active network or settlement system.
+- Never place private food logs, identity, credentials or age records in public
+  participant data. Preserve the existing private PostgreSQL boundary.
+- Keep deferred architecture, publication and governance work in repository docs;
+  never store secrets or temporary chat credentials here.

.github/workflows/ci.yml

@@ -53,6 +53,7 @@ jobs:
           python tools/sync_identity_contracts.py --check
           python -m unittest tools.tests.test_identity_contracts
           python -m unittest tools.tests.test_localization_contracts
+          python -m unittest tools.tests.test_build_total_review_package
 
       - name: Test mobile, offline custody and tracked-secret guards
         run: |
@@ -63,6 +64,17 @@ jobs:
           python -m unittest tools.tests.test_offline_age_custody
           python -m unittest tools.tests.test_tracked_secret_patterns
 
+      - name: Test local synthetic participation simulators
+        run: |
+          python -m unittest tools.tests.test_participation_simulator
+          python -m unittest tools.tests.test_participation_compute_simulator
+          python -m unittest tools.tests.test_participation_ui_adapter
+          python -m unittest tools.tests.test_participation_growth_simulator
+          python -m unittest tools.tests.test_participation_reliability_simulator
+          python -m unittest tools.tests.test_participation_data_release_simulator
+          python -m unittest tools.tests.test_participation_resource_policy
+          python -m unittest tools.tests.test_gameverse_character_identity
+
   wordpress-plugin-release-check:
     name: WordPress plugin release check
     runs-on: ubuntu-latest
@@ -76,7 +88,10 @@ jobs:
         run: find wordpress-plugins -type f -name '*.php' -print0 | xargs -0 -n1 php -l
 
       - name: Validate standalone Site Style package
-        run: node --test tools/tests/wordpress_site_style_package.test.mjs tools/tests/wordpress_app_origin.test.mjs
+        run: node --test tools/tests/wordpress_site_style_package.test.mjs tools/tests/wordpress_app_origin.test.mjs tools/tests/wordpress_cookie_controls.test.mjs
+
+      - name: Test read-only Site Style review inventory
+        run: php tools/tests/wordpress_site_style_review.test.php
 
       - name: Test legal footer compatibility
         shell: bash
@@ -134,6 +149,11 @@ jobs:
       - name: Build and inspect release archive
         run: python tools/build_wordpress_plugin_release.py
 
+      - name: Build and verify Site Style release
+        run: |
+          python -m unittest tools.tests.test_build_site_style_release
+          python tools/build_site_style_release.py
+
   backend-tests:
     name: Backend tests (Python 3.11)
     runs-on: ubuntu-latest
@@ -304,34 +324,21 @@ jobs:
         working-directory: frontend
         run: npm ci
 
-      - name: Audit frontend production dependencies
+      - name: Audit frontend runtime and development dependencies
         working-directory: frontend
-        run: npm audit --omit=dev --audit-level=critical
+        run: npm audit --audit-level=high
 
       - name: Lint frontend
         working-directory: frontend
         run: npm run lint
 
-      - name: Test embedded login and private account controls
-        run: >-
-          node --test
-          tools/tests/auth_callback_return.test.mjs
-          tools/tests/account_data_import_ui.test.mjs
-          tools/tests/account_data_export_validation.test.mjs
-          tools/tests/account_erasure_ui.test.mjs
-          tools/tests/account_privacy_locales.test.mjs
-          tools/tests/account_privacy_display.test.mjs
-          tools/tests/display_language_protocol.test.mjs
-          tools/tests/display_language_ui.test.mjs
-          tools/tests/testnet_entry.test.mjs
-          tools/tests/backend_proxy_logout_fallback.test.mjs
-          tools/tests/backend_warmup_rate_limit.test.mjs
-          tools/tests/calorieapp_embed_readiness.test.mjs
-          tools/tests/food_logging_ui.test.mjs
-          tools/tests/food_search_deadline.test.mjs
-          tools/tests/identity_locales.test.mjs
-          tools/tests/xaman_logout_request.test.mjs
-          tools/tests/xaman_login_start_retry.test.mjs
+      - name: Test all frontend and WordPress user flows
+        # Discover new test files automatically so follow-up checks cannot be
+        # forgotten in a manually maintained list.
+        run: node --test tools/tests/*.test.mjs
+
+      - name: Test participation control state machine
+        run: node --test tools/tests/participation_lab_state.test.mjs
 
       - name: Build frontend
         working-directory: frontend

.github/workflows/food-ux-isolated-check.yml

@@ -0,0 +1,124 @@
+name: Food UX isolated check
+
+on:
+  push:
+    branches: [repair/food-ux-integration-20260915]
+  pull_request:
+    branches: [herstel/vervolg-20260915]
+    paths:
+      - 'frontend/**'
+      - 'backend/app/**'
+      - 'backend/tests/**'
+      - 'wordpress-plugins/calorieapp-account-profile/**'
+      - 'backend/app/schemas.py'
+      - 'backend/app/services/open_food_facts.py'
+      - 'backend/tests/test_food_log_view.py'
+      - 'backend/tests/test_open_food_facts_normalization.py'
+      - 'tools/tests/**'
+      - 'tools/build_heading_repair_release.py'
+      - 'wordpress-plugins/calorietoken-heading-repair/**'
+      - '.github/workflows/food-ux-isolated-check.yml'
+
+permissions:
+  contents: read
+
+concurrency:
+  group: food-ux-isolated-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  verify:
+    runs-on: ubuntu-latest
+    timeout-minutes: 12
+    env:
+      NEXT_TELEMETRY_DISABLED: '1'
+      CI: 'true'
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+      - name: Record the source under test
+        run: |
+          mkdir -p ux-check-evidence
+          git rev-parse HEAD > ux-check-evidence/verified-commit.txt
+          git rev-parse 'HEAD^{tree}' > ux-check-evidence/verified-tree.txt
+          git archive --format=tar.gz -o ux-check-evidence/verified-source.tar.gz HEAD
+      - name: Install locked dependencies and test tools
+        run: |
+          npm ci --prefix frontend --no-audit --no-fund
+          python -m pip install -r backend/requirements.txt 'playwright==1.57.0'
+          python -m playwright install --with-deps chromium
+      - name: Full regression suite and production build
+        shell: bash
+        run: |
+          set -euo pipefail
+          node --test tools/tests/*.test.mjs 2>&1 | tee ux-check-evidence/regressions.log
+          PYTHONPATH=backend python -m pytest -q \
+            backend/tests/test_account_profile.py \
+            backend/tests/test_account_data_export.py \
+            backend/tests/test_account_data_import.py \
+            backend/tests/test_account_erasure.py \
+            backend/tests/test_database.py \
+            backend/tests/test_identity_endpoints.py \
+            backend/tests/test_inactive_account_erasure_execution.py \
+            backend/tests/test_food_log_view.py \
+            backend/tests/test_open_food_facts_normalization.py \
+            2>&1 | tee ux-check-evidence/backend-food-tests.log
+          python -m unittest tools.tests.test_build_heading_repair_release 2>&1 | tee ux-check-evidence/heading-release-tests.log
+          find wordpress-plugins/calorietoken-heading-repair -type f -name '*.php' -print0 \
+            | xargs -0 -n1 php -l 2>&1 | tee ux-check-evidence/heading-php-lint.log
+          php -l wordpress-plugins/calorieapp-account-profile/calorieapp-account-profile.php
+          php wordpress-plugins/calorieapp-account-profile/tests/profile-test.php
+          python tools/build_heading_repair_release.py \
+            --output-dir ux-check-evidence/heading-release \
+            2>&1 | tee ux-check-evidence/heading-release.log
+          cd frontend
+          ./node_modules/.bin/tsc --noEmit 2>&1 | tee ../ux-check-evidence/typecheck.log
+          npm run build 2>&1 | tee ../ux-check-evidence/build.log
+      - name: Production-browser check with synthetic backend only
+        shell: bash
+        run: |
+          set -euo pipefail
+          npm run start --prefix frontend -- --hostname 127.0.0.1 --port 3100 > ux-check-evidence/server.log 2>&1 &
+          server_pid=$!
+          trap 'kill "$server_pid" 2>/dev/null || true' EXIT
+          for i in $(seq 1 30); do curl --silent --fail http://127.0.0.1:3100/ > /dev/null && break; sleep 1; done
+          curl --silent --fail http://127.0.0.1:3100/ > /dev/null
+          # Collect every independent browser result even if one flow fails.
+          browser_failed=0
+          python tools/tests/browser_food_ux.py 2>&1 | tee ux-check-evidence/browser.log || browser_failed=1
+          python tools/tests/browser_account_profile.py 2>&1 | tee ux-check-evidence/account-profile-browser.log || browser_failed=1
+          python tools/tests/browser_account_guides.py 2>&1 | tee ux-check-evidence/account-guides-browser.log || browser_failed=1
+          HEADING_NUTRITION_EVIDENCE_DIR=ux-check-evidence/heading-nutrition-browser \
+            python tools/tests/browser_heading_nutrition.py \
+            2>&1 | tee ux-check-evidence/heading-nutrition-browser.log || browser_failed=1
+          test "$browser_failed" -eq 0
+          python - <<'PY'
+          import json
+          from pathlib import Path
+          profile=json.loads(Path('ux-check-evidence/account-profile-browser/report.json').read_text())
+          assert profile['status']=='passed' and not profile['errors'] and len(profile['checks'])>=40, profile
+          r=json.loads(Path('ux-check-evidence/browser/report.json').read_text())
+          assert r['status']=='passed' and not r['errors'], r
+          assert len(r['checks']) >= 55 and len(r['writes']) == 1, r
+          h=json.loads(Path('ux-check-evidence/heading-nutrition-browser/report.json').read_text())
+          assert h['status']=='passed' and not h['errors'], h
+          assert len(h['checks']) >= 57, h
+          a=json.loads(Path('ux-check-evidence/account-guides-browser/report.json').read_text())
+          assert a['status']=='passed' and not a['errors'] and not a['unexpected_requests'], a
+          assert len(a['checks']) >= 40 and a['faucet_requests']==1, a
+          PY
+      - name: Retain test evidence (no publication or deployment)
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: food-ux-browser-evidence
+          path: ux-check-evidence/
+          retention-days: 3
+          if-no-files-found: error

.github/workflows/wordpress-content-check.yml

@@ -0,0 +1,52 @@
+name: WordPress content styling check
+on:
+  push:
+    branches: [repair/food-ux-integration-20260915]
+    paths:
+      - 'wordpress-plugins/calorietoken-heading-repair/**'
+      - 'tools/tests/browser_wordpress_content.py'
+      - 'tools/tests/fixtures/wordpress-content/**'
+      - '.github/workflows/wordpress-content-check.yml'
+  pull_request:
+    branches: [herstel/vervolg-20260915]
+    paths:
+      - 'wordpress-plugins/calorietoken-heading-repair/**'
+      - 'tools/tests/browser_wordpress_content.py'
+      - 'tools/tests/fixtures/wordpress-content/**'
+      - '.github/workflows/wordpress-content-check.yml'
+permissions:
+  contents: read
+concurrency:
+  group: wordpress-content-${{ github.ref }}
+  cancel-in-progress: true
+jobs:
+  verify:
+    runs-on: ubuntu-latest
+    timeout-minutes: 8
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+      - name: Install isolated browser tools
+        run: |
+          python -m pip install 'playwright==1.57.0'
+          python -m playwright install --with-deps chromium
+      - name: Verify package and render public-content fixtures
+        run: |
+          mkdir -p ux-check-evidence
+          git rev-parse HEAD > ux-check-evidence/verified-commit.txt
+          git rev-parse 'HEAD^{tree}' > ux-check-evidence/verified-tree.txt
+          php -l wordpress-plugins/calorietoken-heading-repair/calorietoken-heading-repair.php
+          python -m unittest tools.tests.test_build_heading_repair_release
+          python tools/build_heading_repair_release.py --output-dir ux-check-evidence/heading-release
+          python tools/tests/browser_wordpress_content.py
+      - name: Retain preview and verification evidence
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: wordpress-content-style-evidence
+          path: ux-check-evidence/
+          retention-days: 5

CONTRIBUTING.md

@@ -5,6 +5,22 @@ Do not submit code, documentation, designs, data, or other material unless you
 have the right to do so and the project owner has agreed in writing to review
 the contribution.
 
+## Independent ecosystem projects
+
+Building an independent compatible project is different from contributing code
+to the official repository.
+
+An independent project does not need prior operator approval merely to create
+its own lawful implementation against public ecosystem interfaces, provided it
+uses its own namespace/branding, respects applicable licences and third-party
+rights, and does not claim official status or access private production state.
+
+The official repository still has its own inbound contribution requirements
+below. Open compatibility does not silently relicense official source code.
+
+See `docs/ECOSYSTEM_OPEN_STEWARDSHIP_AND_FUNDING.md` and
+`contracts/ecosystem/v2/open-stewardship-and-funding.json`.
+
 ## No implied acceptance or transfer
 
 - Opening an issue or pull request does not mean a contribution is accepted.

DATA_LICENSING.md

@@ -56,6 +56,32 @@ The current frontend bundles three dated reference-food records from USDA FoodDa
 
 The interface does not silently combine alternative energy methods, treat missing data as measured zero, or import these examples into a private diary. USDA reference provenance remains separate from Open Food Facts licensing and private user records. External names and marks retain their own rights.
 
+## USDA search catalogue — live since 15 September 2026
+
+The food-discovery continuation adds a separate, dated snapshot in
+`frontend/public/data/usda-search-foods.json`: 363 Foundation records from April
+2026 and 7,793 SR Legacy records from April 2018. It does not claim to cover all
+FoodData Central collections. The original three-food reference remains intact.
+
+The catalogue preserves FDC identifiers, English source descriptions, collection,
+edition, nutrient units and original numeric precision. Its source manifest records
+the original download URLs and archive SHA-256 values. The builder is
+`tools/build_usda_search_catalog.py`; the catalogue is kept separate from OFF data.
+FoodData Central's official [download page](https://fdc.nal.usda.gov/download-datasets/)
+and [documentation](https://fdc.nal.usda.gov/data-documentation/) describe these
+collections and reuse conditions.
+
+The browser requests one fixed first-party catalogue file only after a USDA
+search is submitted. Search matching then runs locally; no search phrase or
+account identifier is sent to USDA. Opening a source link visits USDA separately.
+Saving requires the existing explicit portion confirmation and authenticated
+backend route. The diary entry retains the USDA source, FDC identifier and chosen
+gram basis; it has no fabricated barcode or Nutri-Score.
+
+Name-based alternatives help visitors inspect other records. They are not
+personalised nutrition recommendations, allergen checks or claims of healthier
+equivalence. The visitor must check the actual label, preparation and portion.
+
 ## User and identity data
 
 Authentication identifiers and food logs are application data, not assets

IP_CLEARANCE.md

@@ -5,3 +5,23 @@ This repository publishes reviewed application expression; it does not claim own
 Contributions require documented provenance and compatible rights. Dependencies, datasets, images, names and marks retain their own licences and restrictions. Open Food Facts reuse must preserve the attribution and database-licence requirements described in `DATA_LICENSING.md`.
 
 A fresh legal and technical review is required before adding financial execution, wallet custody, regulated claims, bulk datasets, biometric or health profiling, new branding, restrictive SDKs or copied third-party material. This document is an engineering boundary, not legal advice or a freedom-to-operate opinion.
+
+
+## CalorieVerse / open ecosystem clearance gates
+
+The proposed CalorieVerse name has not been declared cleared merely because no
+obvious conflict appeared in a general web search. Before a commercial public
+launch or filing, perform an exact trade-mark clearance search across the
+relevant EUIPO/TMview/BOIP records, classes and similar names, and retain the
+search evidence.
+
+The long-term intention to let third parties build on ecosystem protocols does
+not automatically change this repository's current licence. Existing code,
+assets and documentation require a rights/provenance audit before they can be
+placed into an open-licence manifest. Newly created protocol/SDK components may
+use a recognised open-source licence only after the relevant rights holder has
+approved that licence and the component is explicitly identified.
+
+Creator-uploaded content needs its own production terms, rights warranty,
+licence scope, notice/takedown process and moderation rules before public
+hosting is enabled.