[jacobprall]

Brings the template in line with the launch checklist (code review and docs).

Code

• Split src/types.ts into focused modules: question.ts (public API contract), investigation.ts, manifest.ts, bot-config.ts, util.ts, runner/protocol.ts, runner/providers.ts.
• Split src/slack.ts into src/slack/ (events, client, transcript, format, routes).
• Broke the runner's main.ts/session.ts import cycle with runner/events.ts and runner/model.ts.
• Unified logging on createLog across the API, Slack adapter, sandbox client, and cron. Event names and fields are unchanged; every line now also carries level and msg.
• SANDBOX_PROVISION_TIMEOUT_MS now actually bounds opening an investigation Sandbox (restore, boot, verify.sh, manifest read). Before, it only padded the task timeout.
• The internal network policy type uses the API's type/domains names; wirePolicy is still the single conversion point.
• A failed investigation now logs investigation_failed with the runner's (redacted) message, so a bad model key isn't invisible.
• The snapshot build now fails if the builder can't confirm the runner is non-dumpable, instead of producing a snapshot every restore would refuse.
• Fixed the API service's buildFilter in render.yaml (it pointed at the deleted src/slack.ts and missed src/log.ts), stale comments, a shadowed config, and the decorative banners.

Docs

• README.md is now focused on what it is, why it matters, and getting running (100 lines, down from ~500).
• New docs/QUICKSTART.md (setup, deploy, Slack, local dev, customizing, config reference, operations), docs/WALKTHROUGH.md (architecture, layout, question API, workflow, sandboxes, runner, security boundary), and docs/TAKEAWAYS.md (reusable patterns).
• docs/design.md, docs/sandboxes.md, and docs/channels.md are folded into the new docs and removed. Several claims in them that no longer matched the code were corrected.

Tests

• Cut from about 250 tests to 96 (95 run, plus the live model smoke test that's skipped without a key). They test through public entry points (HTTP routes, workflow tasks, sandbox providers, the runner CLI) and keep the security-relevant properties: credential ordering, egress refusal, the non-dumpable check, citation validation, signature checks, and the read-only shell policy.

pnpm typecheck and pnpm test pass locally.

Made with Cursor