BrightTurn website

Public site: https://brightturn.harvolution.com

Git: https://git.harvolution.com/brightturn/website

This page is for Niki and her Grok Build agent. Replace it with the real site, then push. The live site has no login.

Forgejo Actions published this page. If you can read BrightTurn here, the last deploy succeeded.

One-time setup

1. Open https://git.harvolution.com and sign in with Authentik as niki.
2. Profile → SSH Keys → add an Ed25519 key (ssh-keygen -t ed25519 -C niki).
3. Clone with git clone git@git.harvolution.com:brightturn/website.git and cd website.
4. Copy the grok.com / Grok Build project into this clone. Keep .forgejo/ unless you are changing CI.
5. If the project has package.json (TanStack): pin Node (.nvmrc or engines), commit the lockfile, make npm run build emit static files, and point scripts/build.sh at that output (dist/, .output/public, …).
6. Branch, commit, push, open a pull request. Niki merges — including workflow changes. main only requires the verify check; Ben does not have to approve.
7. When Actions is green on main, hard-refresh https://brightturn.harvolution.com.

House DNS, Caddy, and the edge deploy helper live in ben/proxmox. Product, content, and CI live here.

If CI needs changes

• Edit .forgejo/workflows/verify-build-deploy.yml and scripts/build.sh on a branch.
• Pin Node and commit package-lock.json. Do not use unpinned npx as the builder.
• Keep verify secret-free: no production SSH keys, no live .env.
• The artifact must be a static tree in dist/ (HTML/JS/CSS). Deploy publishes dist/ to the public site.
• If the app needs Node at runtime (SSR / TanStack Start server): stop and tell Niki and Ben. This host is Caddy file_server, not a Node VM. Do not add a VM from this repo.
• Never commit .env, API keys, or OpenBao tokens.

Work in a clone with the Grok Build CLI (curl -fsSL https://x.ai/cli/install.sh | bash, then grok in this directory). Do not force-push main.

Grok skills (Forgejo / git)

harvolution-repository and forgejo-repository-operations help Grok keep Forgejo work attributed: check identity, use developer-tools git / MCP, and never use Ben's login. They are optional for the SSH-as-niki steps above.

Grok Build loads .agents/skills/ in this clone. Install the pinned copy:

pin=$(jq -r .commit .developer-tools.json)
git clone https://git.harvolution.com/harvolution/developer-tools.git /tmp/developer-tools
git -C /tmp/developer-tools checkout "$pin"
/tmp/developer-tools/scripts/install.sh --repo "$PWD"

That needs Go. If install.sh cannot run, copy only harvolution-repository and forgejo-repository-operations from that same checkout into .agents/skills/. Do not use a different commit than .developer-tools.json.

If developer-tools whoami does not report an agent-* session, keep using git SSH as niki.