salt-command

The Salt Command desk as an installable phone app. Same desk as the laptop, deployed as a Cloudflare Worker with a KV-backed queue so a transaction added on the phone reaches the ledger.

It is behind Cloudflare Access (his decision of 05 Oct 2026; the Worker's own JWT check on since 6 Oct 2026), the owner's email alone, writes also gated by X-Salt-Key. See "Access, two locks; the write gate" in CLAUDE.md.

• Read CLAUDE.md before editing anything. It carries the hard rules, the three-surface model, the queue loop and the deploy runbook.
• The desk is not edited in public/. The only editable source is master/salt_command.html, which moved into this repo from Per-Crm01\30_Published\ on 20 Aug 2026 so the cloud fold no longer needs the laptop; public/desk.html is built from it by npm run build.
• Plaintext names never reach the cloud: the phone shows codes, and names only after a password, from an encrypted vault.

Quick start

npm install
npm run build      # master -> public/desk.html
npm test           # the full suite, split across processes, 5 to 12 minutes, no network
npm run deploy     # build, then wrangler deploy

Then create the KV namespace as set out in docs/DESK.md, "First-time Cloudflare, and local work". The Desk's Worker-side Access check is on (REQUIRE_ACCESS "1"); a new account needs its own owner-only Access application, and its team and audience in wrangler.jsonc, before the first deploy, or the owner is locked out.

What lives where

• master/salt_command.html is the desk itself and the ONLY editable source. What stayed behind in Per-Crm01 is what must never be committed: the plaintext directory, the vault and the queue files.
• public/ is everything served: the built desk, the service worker, the manifest, the icons, the headers. public/desk.html is committed on purpose (the data is meant to live in the repo) but is a build output, never hand-edited.
• src/worker.js is the cloud stand-in for the laptop's serve_desk.py.
• tools/ holds the build, the KV drain and the icon generator.
• test/verify.mjs is the suite.

This repo is private: it holds the real trading ledger.