ATTOH App Builder Shell

Project builder_projects

Signed Backend Config window.APP_BUILDER_CONFIG

ModeStatic shellunsigned

Base URLnot injectedblocked

Proof rowmissingrequired

NetworkNo browser route calls in this filenone

Prompt /api/v1/chat

Assembly Log local shell

SystemShell is running in local preview mode. Claude proxy, auth and deploy endpoints are not called from this static prototype.

RegistrySelected template uses CLIENT_ENGINE sector shells, Snap tools and ATTOH token defaults.

ConfigExternal actions require server-side credentials; no provider token is read by the browser.

Chat seamSource proof is banked for structured assembly-plan responses; connected chat stays blocked until runtime URLs and signed tenant auth are proved.

Component Registry 394

Partner Composer composer feed

ComposerLoading static composer consumer.

Block Preview Gallery asset register

GalleryLoading static block preview gallery.

Monaco-style Editor preview sync

index.htmlsynced

Build Controls tier gates

Tier Theme Framework Deploy Target

Route Contracts handoff

ChatPOST /api/v1/chat -> assembly_plansource

ProjectPATCH /api/v1/project/{id} -> project_statesource

DeployPOST /api/v1/deploy/netlify -> deploy_intentsource

ExportPOST /api/v1/export -> artifact_urlsource

Source smoke proof is banked in `_logs/app-builder-backend-route-proof-2026-05-18.md`. Runtime activation still needs deployed Railway URLs, SQL 398-400, tenant/audit proof and server-side provider token proof.

Readiness release gates

RLS

SQL mapped

Quota

SQL 398 source ready

Deploy

Source proof banked

GitHub

OAuth runtime owed

Deploy Log audit trail

ShellMounted. No external API calls made.

PreviewIframe sandboxed with generated srcdoc.

RegistryComponent registry state ready for API wiring.

DeployDeploy and GitHub controls disabled until runtime URLs, OAuth and server-side provider tokens are proved.

Chat. Preview. Edit. Deploy.