groupthinking · vercel · Sep 13, 2026 · Sep 13, 2026 · Sep 13, 2026 · Sep 13, 2026
@@ -1,10 +1,12 @@
-# CLAUDE.md
+# UVAI — Claude Code Context
 
-This file provides context for Claude Code when working in the EventRelay repository.
+Read [AGENTS.md](AGENTS.md) first. Its locked product facts and scope take precedence over historical plans. The current execution boundary is [docs/NEXT-PHASE.md](docs/NEXT-PHASE.md); the evidence-based build-out plan is [docs/MASTER_ROADMAP.md](docs/MASTER_ROADMAP.md).
 
 ## Project Overview
 
-EventRelay is an AI-powered video automation platform that transforms YouTube videos into actionable workflows. It captures transcripts, extracts events, dispatches them to MCP (Model Context Protocol) agents, and builds a RAG-based knowledge store. The backend is Python/FastAPI and the frontend is a Next.js/React/TypeScript monorepo.
+UVAI (Universal Video Action Intelligence) turns a YouTube URL into a hashed Video Pack and grounded build rails. The public entry is `/`; `OneLoopStudio` at `/studio` is the canonical workbench, and legacy `/dashboard` skins redirect there. EventRelay is the internal Python/FastAPI runtime and repository name, not the public product. The web app uses Next.js App Router, React, and TypeScript.
+
+Video Pack extraction uses Gemini 3.8 Flash via Vercel AI Gateway. Production pack persistence is Upstash REST only. An App Builder workspace export is not proof of app recreation or deployment. Origin G.A.T.E. is the only authorized next cut; do not start adjacent product work or reopen held `asRecord` / claim work without the required authority.
 
 ## Repository Structure
 
@@ -54,22 +56,18 @@ mypy src/                                # Type check
 ### Frontend (Next.js)
 
 ```bash
-# Install all workspace dependencies
-npm install
-
-# Build (all workspaces via Turbo)
-turbo run build
-# or: npm run build
-
-# Dev server
-turbo run dev
-# or: npm run dev
-
-# Lint
-turbo run lint
-
-# Test
-turbo run test
+# Node.js >=22; packageManager is npm@10.8.0; root lockfile only
+npm ci
+
+# Root scripts invoke the local Turbo binary
+npm run build
+npm run dev
+npm run lint
+npm run test
+
+# Focus on the public web app
+npm run dev:web
+npm --workspace=apps/web run type-check
 ```
 
 ## Code Style
@@ -79,7 +77,7 @@ turbo run test
 - **Import sorting**: isort (profile: black)
 - **Linter**: Ruff (E, W, F, I, B, C4, UP rules; E501 ignored)
 - **Type checking**: mypy strict mode (`disallow_untyped_defs = true`)
-- Target Python 3.9+
+- Target Python 3.10+ (`pyproject.toml` is authoritative)
 - Config in `pyproject.toml`
 
 ### TypeScript/JavaScript
@@ -104,11 +102,12 @@ turbo run test
 
 - **Event-driven**: Events follow `<domain>.<entity>.<action>` naming (e.g. `youtube.video.captured`)
 - **Dependency injection**: Service container pattern in `backend/containers/`
-- **Multi-provider AI**: Routes to Gemini, OpenAI, Anthropic, or Grok
-- **MCP integration**: Agent orchestration via Model Context Protocol
-- **Database**: SQLite (dev), PostgreSQL (prod); migrations via Alembic
-- **Auth**: NextAuth.js (frontend), python-jose (backend)
-- **Monorepo**: Turbo for JS workspaces (`apps/*`, `packages/*`, `mcp-servers/*`)
+- **Product AI**: Video Pack extraction uses Gemini 3.8 Flash through Vercel AI Gateway; internal runtime paths also contain other provider integrations
+- **MCP integration**: Internal agent orchestration via Model Context Protocol
+- **Video Pack store**: Upstash REST only; never substitute a Redis TCP client or backend SQL store
+- **Other runtime data**: SQLAlchemy / Alembic and auxiliary stores exist; inspect the owning service before changing one
+- **Auth**: Existing NextAuth.js web configuration; backend auth has its own middleware policy. Do not infer one from the other
+- **Monorepo**: Turbo; root npm workspace membership is `apps/*`. Shared packages and MCP directories are not automatically npm workspaces
 
 ## Key Policies
 

@@ -1,18 +1,16 @@
-# EventRelay — Gemini CLI Context
+# UVAI — Gemini CLI Context
 
-This file provides project context for Gemini CLI when working in the EventRelay repository.
+Read [AGENTS.md](AGENTS.md) first; its locked facts and scope override historical plans. Use [docs/NEXT-PHASE.md](docs/NEXT-PHASE.md) for the next authorized cut and [docs/MASTER_ROADMAP.md](docs/MASTER_ROADMAP.md) for the remaining build-out.
 
 ## Project Overview
 
-EventRelay is an AI-powered video automation platform that transforms YouTube videos into
-actionable workflows. It captures transcripts, extracts events, dispatches them to MCP
-(Model Context Protocol) agents, and builds a RAG-based knowledge store. The backend is
-Python/FastAPI and the frontend is a Next.js/React/TypeScript monorepo.
+UVAI (Universal Video Action Intelligence) turns a YouTube URL into a hashed Video Pack and grounded build rails. EventRelay is the internal Python/FastAPI runtime and repository name, not a public product. The web app uses Next.js App Router, React, and TypeScript. `/` is the entry page; `OneLoopStudio` at `/studio` is the workbench. Legacy `/dashboard` skins redirect there.
 
 ## Single Workflow
 
-**EventRelay has ONE workflow:** YouTube link → transcript → events → agents → outputs.
-Never introduce alternative flows or manual triggers that bypass this pipeline.
+**One product loop:** YouTube URL → Video Pack → inspect evidence and build rails → export / act / attempt to ship. Do not introduce a parallel product or bypass evidence gating. A generated evidence workspace is not proof of recreating or deploying the source app.
+
+Origin G.A.T.E. is the only authorized next cut. Mission Workspace, Agent Factory, ExperienceOS, and held `asRecord` / claim work require the authority described in `AGENTS.md`.
 
 ## Repository Structure
 
@@ -75,11 +73,13 @@ mypy src/
 ### Frontend (Next.js / Turbo monorepo)
 
 ```bash
-npm install          # install all workspace deps
-turbo run build      # build all workspaces
-turbo run dev        # dev servers
-turbo run lint
-turbo run test
+# Node.js >=22; packageManager is npm@10.8.0; root lockfile only
+npm ci
+npm run build
+npm run dev
+npm run lint
+npm run test
+npm --workspace=apps/web run type-check
 ```
 
 ## Code Style
@@ -88,7 +88,7 @@ turbo run test
 - **Formatter**: Black, 88-char line length
 - **Linter**: Ruff (E, W, F, I, B, C4, UP; E501 ignored)
 - **Type checking**: mypy strict (`disallow_untyped_defs = true`)
-- Target Python 3.9+; config in `pyproject.toml`
+- Target Python 3.10+; `pyproject.toml` is authoritative
 
 ### TypeScript
 - Strict mode TypeScript (`apps/web/tsconfig.json`)
@@ -106,11 +106,12 @@ turbo run test
 
 - **Event-driven**: events follow `<domain>.<entity>.<action>` (e.g. `youtube.video.captured`)
 - **Dependency injection**: service container pattern in `backend/containers/`
-- **Multi-provider AI**: Gemini (primary), OpenAI, Anthropic, Grok
-- **MCP integration**: agent orchestration via Model Context Protocol
-- **Database**: SQLite (dev), PostgreSQL (prod) via SQLAlchemy / Alembic
-- **Auth**: NextAuth.js (frontend), python-jose (backend)
-- **Monorepo**: Turbo for JS workspaces (`apps/*`, `packages/*`, `mcp-servers/*`)
+- **Product AI**: Gemini 3.8 Flash via Vercel AI Gateway for Video Pack extraction; other providers remain in internal runtime paths
+- **MCP integration**: internal orchestration via Model Context Protocol
+- **Video Pack store**: Upstash REST only; Redis TCP and backend SQL are not the pack store
+- **Other runtime data**: inspect the owning service before modifying SQLAlchemy / Alembic or auxiliary integrations
+- **Auth**: existing NextAuth.js web configuration; backend middleware has a separate policy
+- **Monorepo**: Turbo; root npm workspaces are `apps/*`, not every shared-code or MCP directory
 
 ## Key Policies
 
@@ -120,13 +121,10 @@ turbo run test
 - **Type safety**: mypy strict (Python), TypeScript strict (frontend)
 - **Minimal changes**: make surgical, precise modifications; never delete working code without justification
 
-## Environment Variables (required)
+## Configuration boundaries
 
-```bash
-GEMINI_API_KEY=...        # Google Gemini API
-OPENAI_API_KEY=...        # OpenAI API
-YOUTUBE_API_KEY=...       # YouTube Data API v3
-DATABASE_URL=sqlite:///./.runtime/app.db
-GITHUB_TOKEN=...          # for github MCP server
-STITCH_ACCESS_TOKEN=...   # for stitch MCP server (optional)
-```
+- Video Pack AI uses Vercel AI Gateway; inspect the current extractor and runtime configuration instead of requiring every legacy provider key.
+- Production packs require `KV_REST_API_URL` + `KV_REST_API_TOKEN`, or the equivalent `UPSTASH_REDIS_REST_*` pair.
+- Backend-dependent actions use `BACKEND_URL` plus the backend's own configured credentials. Missing configuration is not evidence of a successful action.
+- Auth, billing, and CLI/MCP credentials belong to their existing integrations. Never print secrets or commit environment files.
+- Inspect `.gemini/settings.json` and run `/mcp` before assuming an optional tooling service is connected. See [README.md](README.md) for the current development path.