Portal runtime artifact

This directory is meant to run on production without the source tree.
Required persisted items to inherit on the host:
  .env
  MindSpace/
  data/
  users/
  .tailscale/
  public/plaza-covers/
  logs/

Bundled alongside server.mjs (required for sandbox-fs MCP):
  mindspace-sandbox-mcp.mjs  (esbuild bundle; includes schedule-service deps)

Post-deploy validation (scripts/check-mindspace-public-links.mjs):
  Scans MindSpace/*/public/*.html for missing relative href/src/cover targets.

Runtime install mode: bundle-node-modules
Bundle target: node24

Platform agent skills (synced into user workspaces):
  skills/
Key runtime differences must stay in .env, not in the artifact:
  DATABASE_URL / MYSQL_*
  H5_PUBLIC_BASE_URL
  TKMIND_API_TARGETS / TKMIND_API_TARGET / TKMIND_API_TARGET_1
  H5_USERS_ROOT / MINDSPACE_STORAGE_ROOT / MEMIND_SHARED_PUBLISH_ROOT

Deployment and operations transport:
  H5 public domain: mm.tkmind.cn
  Current public path: mm.tkmind.cn -> local nginx -> Portal :8081
  Legacy rollback-only path: m.tkmind.cn -> 105 nginx -> reverse SSH tunnel -> Portal :8081
  Future H5 traffic must not depend on 105 forwarding unless explicitly rolling back.

Streaming runtime operations:
  node scripts/check-stream-runtime.mjs
  node scripts/runtime-worker-drain.mjs status
  node scripts/runtime-worker-drain.mjs reconcile
  node scripts/runtime-worker-drain.mjs reconcile --apply
  node scripts/runtime-worker-metrics.mjs status
  node scripts/runtime-worker-metrics.mjs sample
  bash scripts/install-runtime-metrics-agent.sh
  node scripts/runtime-worker-heartbeat.mjs once
  node scripts/runtime-worker-heartbeat.mjs serve
  bash scripts/install-runtime-heartbeat-agent.sh
  node scripts/runtime-slo-report.mjs
  node scripts/runtime-slo-report.mjs --write-report
  node scripts/runtime-slo-report.mjs --write-report --prune --retention-days 30
  bash scripts/install-runtime-slo-report-agent.sh
  bash scripts/install-runtime-slo-soak-agent.sh
  node scripts/runtime-worker-drain.mjs drain goosed-3
  node scripts/runtime-worker-drain.mjs undrain goosed-3
  node scripts/check-tool-runtime.mjs
  node scripts/check-agent-code-run-entry.mjs
  curl -sk https://mm.tkmind.cn/api/runtime/status  # includes toolRuntime.queue
  node scripts/agent-run-worker.mjs --status
  node scripts/agent-run-worker.mjs --once
  bash scripts/install-agent-run-worker-agent.sh  # installs disabled by default
  node scripts/check-agent-run-worker.mjs  # read-only LaunchAgent/queue check
  node scripts/agent-run-guard.mjs  # dry-run auto-pause guard check
  node scripts/agent-run-guard.mjs --apply  # stop worker and disable code-run gate when thresholds trip
  bash scripts/install-agent-run-guard-agent.sh  # installs guard LaunchAgent