25 components · 22 repositories
Every component belongs to exactly one repository, from the manifest. 2 repositories hold more than one: Bulgar Studio (studio-website, superfit-gym-app) · AKH Peptides (frontend, payment-frontend, backend).
lockfileVersion 3, name bulgar-studio, and the packages object is EMPTY - it describes zero packages. No root package.json exists in ANY of the 8 remote branches. It dates to the Initial commit from Create Next App, before the repo was split into studio-website and superfit-gym-app.
No lockfile at HEAD, and no yarn, pnpm or bun artefacts or rc files anywhere. History is decisive: package-lock.json was ADDED by aaa7c22 (Initial commit from Create Next App) and DELETED by d4ee8f0 (the fight-week sponsorship build, committed off one disk). npm is the intended manager and the deletion was collateral damage during the rescue.
The canonical copy has 185 tracked files, a src tree and real assets under public/brand and public/smoothies. The standalone repo sarafski7979/superfit-gym-app has 19 tracked files, ONE commit titled Initial commit from Create Next App, and its entire content is the default scaffold: app/page.tsx, app/globals.css, public/next.svg, public/vercel.svg.
SOURCE FOUND AND TRACKED - correcting an earlier claim in this file that there was no source on this machine. That was wrong: the search that produced it used a depth limit that stopped one level short. The Tauri app is 67 tracked files at studio-website/src-tauri, productName BULGAR Editor, identifier pro.bulgar.editor, crate bulgar-editor 0.1.0, with Cargo.lock committed. It lives on a branch that tracks a remote, so the source is backed up, not disk-only. B:ulgar-editor-build is build OUTPUT of this crate and is not a second copy. It is listed here as not in the estate because it is NOT a cloud worker target: Windows packaging, Explorer integration, Premiere launching, export watchers and installer signing are WINDOWS-NATIVE work that Linux tests must never stand in for. The macOS path of app bundle, DMG, Developer ID and notarisation stays open.
Closed by decision in the August audit: disposable working material, excluded entirely. Never Git, never LFS.
Cloudflare D1 + R2 bindings in production (Sites hosting) — declared in the manifest as services_required. Without them a gate is NOT_RUN, never FAIL.
postgres + api — declared in the manifest as services_required. Without them a gate is NOT_RUN, never FAIL.