intelligence-terminal/.codex/project.md

# Intelligence Terminal Project Notes

## Purpose

Production-ready Crucix fork for Docker, Dockge, Pangolin, local OSINT sweeps, source health diagnostics, and configurable LLM analysis.

## Stack

- Node.js 22 ESM
- Express 5
- Native `fetch`
- Optional `discord.js`
- Docker image published to Gitea Registry

## Authoritative Commands

- `npm start`
- `npm run test:unit`
- `npm test`
- `docker compose config`
- `docker build -t git.wilkensxl.de/code-inc/intelligence-terminal:latest .`

Heavy install/build/audit/release work should run on Gitea Ubuntu runners where possible. Local work should stay limited to targeted verification and Docker checks required for this deployment.

## Runtime State

- `runs/latest.json` stores the latest raw sweep.
- `runs/memory/` stores hot/cold delta memory.
- `runs/intelligence.db` stores phase-1 memory when `node:sqlite` is available.
- `.env` is operator-owned and must not be committed.

## Security

- Never log API keys or bot tokens.
- Manual remote sweeps require `SWEEP_TOKEN`; without it `POST /api/sweep` is local-only.
- Missing source keys must degrade visibly rather than silently falling back to demo data.