Phase 1: Application spine (Reflex + reflex-local-auth + worker + admin auth)

.claude/skills/pdda/SKILL.md

@@ -14,14 +14,14 @@ A thin re-orientation pass. It does not re-specify any contract; it points at th
 3. **Report current PDDA state** by running the deterministic surface:
 
    ```bash
-   utils/pdda/pdda.sh run
+   bash "$(git rev-parse --show-toplevel 2>/dev/null)/utils/pdda/pdda.sh" run
    ```
 
-   If the user only wants a quick state read, a narrower check is fine (`utils/pdda/pdda.sh status-table`, `utils/pdda/pdda.sh roadmap-coverage`). Report deterministic findings first; do not override them with prose.
+   If the user only wants a quick state read, a narrower check is fine (`bash "$(git rev-parse --show-toplevel 2>/dev/null)/utils/pdda/pdda.sh" status-table`, `bash "$(git rev-parse --show-toplevel 2>/dev/null)/utils/pdda/pdda.sh" roadmap-coverage`). Report deterministic findings first; do not override them with prose.
 4. **Give the operator a short orientation**: current enforcement mode (`.pdda-mode`), what active work `PROJECT/2-WORKING` holds, and any findings worth attention — then the recommended next action.
 
 ## Keep it dumb
 
 - Do not paste the contract, the roadmap rules, or the changelog rules — link to where they live.
 - Do not edit anything. This is a read + report pass.
-- If `utils/pdda/pdda.sh` is absent, PDDA isn't installed here; say so and stop.
+- If `$(git rev-parse --show-toplevel 2>/dev/null)/utils/pdda/pdda.sh` is absent, PDDA isn't installed here; say so and stop.

.github/workflows/ci.yml

@@ -0,0 +1,16 @@
+name: CI
+on: [push, pull_request]
+jobs:
+  quality:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v5
+      - uses: actions/setup-python@v5
+        with: { python-version: "3.11" }
+      - run: uv sync --all-packages
+      - run: uv run ruff check apps packages migrations
+      - run: uv run pyright apps packages
+      - run: uv run pytest -m "not database"
+      - run: uv run reflex export --frontend-only --no-zip
+        working-directory: apps/web

.github/workflows/database-image.yml

@@ -28,6 +28,8 @@ jobs:
       - run: docker compose -f compose.test.yaml build postgres
       - run: docker compose -f compose.test.yaml up -d postgres
       - run: ./scripts/verify-extensions
+      - run: uv sync --all-packages
+      - run: uv run alembic upgrade head
       - run: uv run pytest -m "database or integration"
       - if: always()
         run: docker compose -f compose.test.yaml logs postgres

.gitignore

@@ -7,7 +7,14 @@ __pycache__/
 .venv/
 .pytest_cache/
 
-# Marathon/relay driver run artifacts (transcripts, not deliverables)
-/phases/
-/relay-system/
+# .tick/ is the harness's own per-device coordination state -- never committed.
+# NOTE: phases/ and relay-system/ are deliberately NOT ignored here: marathon-drive.sh
+# commits its own relay file under phases/<name>--<id>/RELAY.md as part of firing a
+# phase, and refuses (git add fails without -f) if that path is gitignored. Before
+# merging a marathon branch, manually `git rm -r phases/ relay-system/` -- see the
+# "chore: stop tracking marathon-driver run artifacts" commit for the pattern.
 .tick/
+
+# Aider Studio (auto-added)
+REPO_MAP.md
+.aider/

.xyz/XYZ.json

@@ -0,0 +1,122 @@
+[
+	{
+		"harness": "relay",
+		"sessionId": "p1-alpha-merge-qa",
+		"health": "orange",
+		"title": "RELAY \u00b7 Phase 1 alpha-merge QA \u2014 is `marathon/reflex-hybrid-analytics-starter-p1-2026-07-21` safe to merge to `main`?",
+		"description": "Relay session ended: STATUS Open (health orange).",
+		"updatedAt": "2026-07-21T22:26:01Z"
+	},
+	{
+		"harness": "marathon",
+		"sessionId": "MARATHON",
+		"health": "red",
+		"title": "MARATHON",
+		"description": "halted at phase 1 of 7 (p0) \u2014 pre-advance gate failed",
+		"updatedAt": "2026-07-21T17:54:08Z"
+	},
+	{
+		"harness": "marathon",
+		"sessionId": "MARATHON-p1",
+		"health": "red",
+		"title": "MARATHON-p1",
+		"description": "halted at phase 1 of 1 (p1) \u2014 containment violation",
+		"updatedAt": "2026-07-21T15:27:17Z"
+	},
+	{
+		"harness": "marathon",
+		"sessionId": "MARATHON-p1",
+		"health": "red",
+		"title": "MARATHON-p1",
+		"description": "halted at phase 1 of 1 (p1) \u2014 containment violation",
+		"updatedAt": "2026-07-21T15:18:48Z"
+	},
+	{
+		"harness": "marathon",
+		"sessionId": "MARATHON-p1",
+		"health": "red",
+		"title": "MARATHON-p1",
+		"description": "halted at phase 1 of 1 (p1) \u2014 marathon-drive exit 8",
+		"updatedAt": "2026-07-21T15:06:01Z"
+	},
+	{
+		"harness": "marathon",
+		"sessionId": "MARATHON-p1",
+		"health": "red",
+		"title": "MARATHON-p1",
+		"description": "halted at phase 1 of 1 (p1) \u2014 containment violation",
+		"updatedAt": "2026-07-21T15:04:14Z"
+	},
+	{
+		"harness": "marathon",
+		"sessionId": "MARATHON-p1",
+		"health": "red",
+		"title": "MARATHON-p1",
+		"description": "halted at phase 1 of 1 (p1) \u2014 containment violation",
+		"updatedAt": "2026-07-21T14:50:31Z"
+	},
+	{
+		"harness": "marathon",
+		"sessionId": "MARATHON-p1",
+		"health": "red",
+		"title": "MARATHON-p1",
+		"description": "halted at phase 1 of 1 (p1) \u2014 marathon-drive exit 1",
+		"updatedAt": "2026-07-21T14:42:19Z"
+	},
+	{
+		"harness": "marathon",
+		"sessionId": "MARATHON-p0",
+		"health": "red",
+		"title": "MARATHON-p0",
+		"description": "halted at phase 1 of 1 (p0) \u2014 pre-advance gate failed",
+		"updatedAt": "2026-07-21T07:52:55Z"
+	},
+	{
+		"harness": "relay",
+		"sessionId": "marathon-plan-qa",
+		"health": "green",
+		"title": "RELAY \u00b7 QA the Reflex Starter marathon plan",
+		"description": "Relay session ended: STATUS Approved (health green).",
+		"updatedAt": "2026-07-21T07:38:36Z"
+	},
+	{
+		"harness": "relay",
+		"sessionId": "marathon-plan-qa",
+		"health": "orange",
+		"title": "RELAY \u00b7 QA the Reflex Starter marathon plan",
+		"description": "Relay session ended: STATUS Escalated (health orange).",
+		"updatedAt": "2026-07-21T07:31:44Z"
+	},
+	{
+		"harness": "relay",
+		"sessionId": "marathon-plan-qa",
+		"health": "orange",
+		"title": "RELAY \u00b7 QA the Reflex Starter marathon plan",
+		"description": "Relay session ended: STATUS Escalated (health orange).",
+		"updatedAt": "2026-07-21T07:26:44Z"
+	},
+	{
+		"harness": "relay",
+		"sessionId": "marathon-plan-qa",
+		"health": "orange",
+		"title": "RELAY \u00b7 QA the Reflex Starter marathon plan",
+		"description": "Relay session ended: STATUS Open (health orange).",
+		"updatedAt": "2026-07-21T06:28:43Z"
+	},
+	{
+		"harness": "relay",
+		"sessionId": "marathon-plan-qa",
+		"health": "red",
+		"title": "RELAY \u00b7 QA the Reflex Starter marathon plan",
+		"description": "Relay session ended: STATUS Open (health red).",
+		"updatedAt": "2026-07-21T06:25:18Z"
+	},
+	{
+		"harness": "marathon",
+		"sessionId": "MARATHON",
+		"health": "red",
+		"title": "MARATHON",
+		"description": "halted at phase 1 of 7 (p0) \u2014 marathon-drive exit 2",
+		"updatedAt": "2026-07-21T06:17:38Z"
+	}
+]