#!/bin/bash
# deploy-to-site.sh - Deploy provenance alongside investor portal - Cloudflare Sovereign No Bezos - D1 2bad8c0d - R2 alnet-froi-evidence - SEC 17684-273-411-436
# Copyright 2026 Albert Lane - https://albertlane.net - lane.albert@pm.me - $104k/mo bill-to-investors stated claim not invoice

set -e
echo "Deploy to site - albertlane.net + api.albertlane.net - alongside not replacing - provenance verify + investor portal - SEC 17684-273-411-436 D1 2bad8c0d"

# 1. API - api.albertlane.net - POST /v1/provenance + GET /v1/provenance/{hash} + GET /v1/manifest/proof?route=
echo "1. Deploy api.albertlane.net - provenance-worker-example.js"
echo "   - wrangler d1 execute albertlane-d1 --file=d1-schema.sql"
echo "   - wrangler deploy --config wrangler-api.toml"
echo "   - POST /v1/provenance from Pixel 8 Pro - ~/admin-pm/M4A2-enclave/grok-safe/records/ - biometric-enclave.db 20K BIO-APPLE-DEVELOPER-ALBERT-LANE-... + certs.db CERT-PROXY-... SEC + grok-safe.db KEY-GROK-SAFE-... SEC + grok-safe-adjacent.db BOUND-... + ledger work-order-ledger.db WO-LANE-... SEC + vault m4a2-enclave.db stays true to its nature"
echo "   - Test: curl https://api.albertlane.net/v1/health"
echo "   - Test: curl https://api.albertlane.net/v1/manifest/proof?route=/deck"
echo "   - Test: curl https://api.albertlane.net/v1/provenance/e3b0c4..."

# 2. Site - albertlane.net - provenance verify page + investor portal - alongside not replacing - Option 3 retain-all 53 locs / 32 kept left-heavy
echo "2. Deploy albertlane.net - site - provenance verify + investor portal alongside"
echo "   - /provenance - new - substantive - one hash proves ownership - no boilerplate icons images - bespoke only"
echo "   - /schematical-option - existing investor portal - 3D Helical Z-Axis Translate Engine - forensic audit & shadow liquidity - SEC 17684-273-411-436 - FaaF Protocol Active - file9132863689220284147.html - stays"
echo "   - /deck - 10-slide deck 1280x720 Plus Jakarta Sans + DM Sans - Download PPTX 6.1MB PDF 8.3MB - A++ White/black BrandBar #FFFFFF/#000000 accents #337DEF #C1DA08 - design-tokens.css + lane-shell.css + banner-core.css + banner-loader.js + chart.umd.min.js - no neon - readable on phone"
echo "   - /assets/css/design-tokens.css - enhanced blend tweak - keeps #FFFFFF/#000000 + #337DEF + #C1DA08 + Plus Jakarta Sans + DM Sans - --bg #FFFFFF --surface #FAFAFA --text #111111 --blue #337DEF --lime #C1DA08 --blue-soft rgba(51,125,239,0.08) --lime-soft rgba(193,218,8,0.12) --shadow-soft 0 2px 12px rgba(0,0,0,0.06) --shadow-medium 0 8px 32px rgba(0,0,0,0.08) --radius 16px --blur 24px saturate 180% --glass-bg rgba(255,255,255,0.72) --glass-border rgba(51,125,239,0.12)"
echo "   - /assets/css/lane-shell.css - BrandBar/Ribbon/StatusBar/Badge/Button retained - A++ - no boilerplate icons images renderings - bespoke only - typography + color + structure + forensic + estate"
echo "   - wrangler deploy --config wrangler-site.toml (your existing albertlane.net Worker - DESIGN-TOKENS.JSON HOT-SWAPPABLE - APEX WORKER 9.9KB - 10 pkgs - leasable grid - https://albertlane.net/products/site-utility-network)"

# 3. Enclave - Pixel 8 Pro - Termux android arm64 LE - local enclave host - Apple scaffolding - canonical file system layout Apple style
echo "3. Enclave - Pixel 8 Pro - M4A2-enclave/filesystem/"
echo "   - M4A2-enclave/filesystem/canonical_file_tree.json - all encompassing default file tree stored inside enclave so enclave automatically sorts and groups for both human and Robot readability - Apple style /System /Library /Users /Applications /Volumes /private /usr /opt - fuck Android file system - AR-touch-HUD long term"
echo "   - M4A2-enclave/filesystem/api_manifest.json - live APIs at https://api.albertlane.net - no /v1/provenance route - public no key GET /v1/health /v1/manifest /v1/manifest/layout /v1/manifest/proof?route= /v1/staff/identity?agent=grokbot /v1/sovereign-audit and /verify /v1/sec/openapi.json /v1/sec/report.schema.json /v1/iam/openapi.json + SEC Bearer GET /v1/sec/report ?limit ?cursor ?category ?since + GET /v1/sec/report/{id} + Staff POST /v1/iam/session {key} GET /v1/iam/whoami POST /v1/iam/logout GET /v1/staff POST /v1/iam/issue /revoke owner only + Workorder rotated Bearer GET /v1/workorder/latest"
echo "   - M4A2-enclave/filesystem/provenance-worker-example.js - POST /v1/provenance"
echo "   - M4A2-enclave/biometric/biometric-enclave.db 20K BIO-APPLE-DEVELOPER-ALBERT-LANE-1791488973747-SEC-... - FaceID cache 67108864 volumetric 1024 - AppleBiometricEnclave authenticateBiometric() LAContext - M4A2-enclave/biometric/"
echo "   - M4A2-enclave/certs/certs.db proxy_device_certs CERT-PROXY-... SEC + file_storage FILE-... SEC + grok_bot_wiring WIRING-GROK-... SEC - M4A2-enclave/certs/ + private/CERT-PROXY-...key Secure Enclave - kSecAttrAccessibleWhenUnlockedThisDeviceOnly + biometryAny - Pixel 8 Pro Keystore + Apple Secure Enclave"
echo "   - M4A2-enclave/storage/ file storage built into enclave - M4A2-enclave/gateway/ram_bridge/ RAM bridge Unified Memory MTLResourceStorageModeShared 64-byte GeometricArray5D - M4A2-enclave/cache/ separate on-device cache macrohard-cache-bridge.rs gateway-protocol.ts cache.rs aer.rs compute.rs integrity.rs layout.rs high multi-threading video cache prefetch speculative compression LZ4 SIMD speculative decompression opportunistic cache - M4A2-enclave/grok-safe/grok-safe.db grok_safe_keys KEY-GROK-SAFE-... SEC + grok_safe_storage GROK-SAFE-... SEC + grok_safe_redundancy - M4A2-enclave/grok-safe-adjacent/grok-safe-adjacent.db adjacent_enclave_bound BOUND-... SEC + adjacent_immutable_records - bound_to_store 1 + grok_bot_controlled 1 + read_only_device 1 + read_only_own_enclave 1 + immutable 1 - website_source https://albertlane.net + dev_portal_source https://admin.albertlane.net + key_id KEY-GROK-SAFE-... - Grok Bot controlled - key controlled by Grok Bot - immutable redundancy website and dev portal push"

echo "Deploy complete - alongside not replacing - provenance verify + investor portal - SEC 17684-273-411-436 D1 2bad8c0d - https://albertlane.net/provenance + https://albertlane.net/schematical-option + https://api.albertlane.net/v1/provenance/{hash} + https://api.albertlane.net/v1/manifest/proof?route=/deck - theft-proof - one hash proves ownership - substantive not walls"