From b83cd039adb0a4965f98e2efb949018a7597e484 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Hu=E1=BB=B3nh=20Th=C6=B0=C6=A1ng?=
 <252359928+Huynhthuongg@users.noreply.github.com>
Date: Wed, 3 Jun 2026 07:00:15 +0700
Subject: [PATCH 1/3] Remove binary release screenshot

---
 .github/workflows/ci.yml                  |  8 +++-
 .gitignore                                |  3 ++
 README.md                                 | 11 ++++-
 app/universal_compiler_agent/__init__.py  |  2 +-
 app/universal_compiler_agent/cli.py       | 22 +++++++--
 app/universal_compiler_agent/server.py    | 54 +++++++----------------
 app/universal_compiler_agent/templates.py |  5 +--
 docs/CHANGELOG.md                         |  7 +++
 docs/SPECIFICATION.md                     |  4 +-
 pyproject.toml                            |  6 ++-
 scripts/check.sh                          |  4 ++
 tests/test_server.py                      | 36 +++++++++++++++
 12 files changed, 109 insertions(+), 53 deletions(-)
 create mode 100755 scripts/check.sh

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ffd6d0c..e150f07 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -7,12 +7,16 @@ on:
 jobs:
   test:
     runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ['3.10', '3.11', '3.12']
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-python@v5
         with:
-          python-version: '3.11'
+          python-version: ${{ matrix.python-version }}
       - run: python -m pip install --upgrade pip
       - run: python -m pip install -e '.[dev]'
       - run: ruff check .
-      - run: pytest
+      - run: pytest -q
diff --git a/.gitignore b/.gitignore
index 6b5b6d1..c2571d0 100644
--- a/.gitignore
+++ b/.gitignore
@@ -12,3 +12,6 @@ backup-*.tar.gz
 
 # Local configuration
 .env
+
+# Generated release screenshots (avoid binary files in Codex diffs)
+docs/screenshots/*-release.png
diff --git a/README.md b/README.md
index ff843c9..dd1dadf 100644
--- a/README.md
+++ b/README.md
@@ -62,10 +62,17 @@ tests/                         Unit tests
 
 ```bash
 python -m pip install -e '.[dev]'
-ruff check .
-pytest
+./scripts/check.sh
 ```
 
+`./scripts/check.sh` runs Ruff and the full pytest suite so release checks match CI.
+
+## Current release
+
+- Version: 0.1.1
+- Release date: 2026-06-02
+- Release focus: CLI dry-run previews, safe output directory validation, dashboard route alignment, and test workflow hardening.
+
 ## Security model
 
 - Never hardcode secrets in generated output.
diff --git a/app/universal_compiler_agent/__init__.py b/app/universal_compiler_agent/__init__.py
index 04fee82..adaab43 100644
--- a/app/universal_compiler_agent/__init__.py
+++ b/app/universal_compiler_agent/__init__.py
@@ -1,4 +1,4 @@
 """Universal Project Compiler Agent package."""
 
 __all__ = ["__version__"]
-__version__ = "0.1.0"
+__version__ = "0.1.1"
diff --git a/app/universal_compiler_agent/cli.py b/app/universal_compiler_agent/cli.py
index 41d8ca0..d2457ad 100644
--- a/app/universal_compiler_agent/cli.py
+++ b/app/universal_compiler_agent/cli.py
@@ -19,6 +19,14 @@ def _read_input(args: argparse.Namespace) -> str:
     return "Universal Project Compiler Agent"
 
 
+def _safe_output_dir(value: str) -> Path:
+    output_dir = Path(value)
+    if output_dir.is_absolute() or ".." in output_dir.parts:
+        msg = "output_dir must be a safe relative path"
+        raise argparse.ArgumentTypeError(msg)
+    return output_dir
+
+
 def build_parser() -> argparse.ArgumentParser:
     parser = argparse.ArgumentParser(
         description="Compile requirements into a runnable project scaffold."
@@ -37,7 +45,15 @@ def build_parser() -> argparse.ArgumentParser:
     compile_cmd.add_argument("--text", help="Inline requirements text.")
     compile_cmd.add_argument("--name", help="Override generated project name.")
     compile_cmd.add_argument(
-        "--output-dir", default="generated", help="Directory that will receive output."
+        "--dry-run",
+        action="store_true",
+        help="Print the generated plan as JSON without writing files.",
+    )
+    compile_cmd.add_argument(
+        "--output-dir",
+        default=Path("generated"),
+        type=_safe_output_dir,
+        help="Safe relative directory that will receive output.",
     )
     return parser
 
@@ -47,12 +63,12 @@ def main(argv: list[str] | None = None) -> int:
     args = parser.parse_args(argv)
     requirements = _read_input(args)
 
-    if args.command == "plan":
+    if args.command == "plan" or args.dry_run:
         plan = build_plan(requirements, args.name)
         print(json.dumps(asdict(plan), indent=2))
         return 0
 
-    result = compile_project(requirements, Path(args.output_dir), args.name)
+    result = compile_project(requirements, args.output_dir, args.name)
     print(f"Generated {result.file_count} files in {result.root}")
     return 0
 
diff --git a/app/universal_compiler_agent/server.py b/app/universal_compiler_agent/server.py
index aff944b..1bf05b7 100644
--- a/app/universal_compiler_agent/server.py
+++ b/app/universal_compiler_agent/server.py
@@ -11,6 +11,9 @@
 
 from .compiler import compile_project
 from .planner import build_plan
+from .templates import INDEX_HTML
+
+APP_VERSION = "0.1.1"
 
 
 class PlanRequest(BaseModel):
@@ -22,8 +25,15 @@ class CompileRequest(PlanRequest):
     output_dir: str = Field(default="generated", max_length=240)
 
 
+def _safe_output_dir(value: str) -> Path:
+    output_dir = Path(value)
+    if output_dir.is_absolute() or ".." in output_dir.parts:
+        raise HTTPException(status_code=400, detail="output_dir must be a safe relative path")
+    return output_dir
+
+
 def create_app() -> FastAPI:
-    app = FastAPI(title="Universal Project Compiler Agent", version="0.1.0")
+    app = FastAPI(title="Universal Project Compiler Agent", version=APP_VERSION)
 
     @app.middleware("http")
     async def security_headers(request: Request, call_next):  # type: ignore[no-untyped-def]
@@ -36,38 +46,7 @@ async def security_headers(request: Request, call_next):  # type: ignore[no-unty
 
     @app.get("/", response_class=HTMLResponse)
     def index() -> str:
-        return """
-<!doctype html>
-<html lang="en">
-<head>
-  <meta charset="utf-8" />
-  <meta name="viewport" content="width=device-width, initial-scale=1" />
-  <title>Universal Project Compiler Agent</title>
-  <script defer src="https://cdn.vercel-insights.com/v1/script.js"></script>
-  <style>
-    :root { color-scheme: light dark; --bg:#0b1020; --card:#11172b; --text:#eef2ff; --muted:#aab4d4; --accent:#7c3aed; }
-    * { box-sizing: border-box; }
-    body { margin:0; min-height:100vh; font-family: Inter, ui-sans-serif, system-ui, sans-serif; background: radial-gradient(circle at top, #1d2b64, var(--bg)); color:var(--text); }
-    main { width:min(1040px, 100%); margin:auto; padding: clamp(24px, 5vw, 72px); }
-    .hero { display:grid; gap:24px; }
-    .badge { width:max-content; border:1px solid #ffffff22; border-radius:999px; padding:8px 12px; color:var(--muted); background:#ffffff0d; }
-    h1 { font-size:clamp(42px, 8vw, 82px); line-height:.95; letter-spacing:-0.06em; margin:0; }
-    p { color:var(--muted); font-size:clamp(16px, 2vw, 20px); max-width:760px; }
-    .grid { display:grid; grid-template-columns: repeat(auto-fit, minmax(220px, 1fr)); gap:16px; margin-top:36px; }
-    .card { background: color-mix(in srgb, var(--card) 88%, white 12%); border:1px solid #ffffff14; border-radius:24px; padding:22px; box-shadow:0 20px 60px #0006; }
-    code { color:#c4b5fd; }
-  </style>
-</head>
-<body><main><section class="hero">
-  <div class="badge">Android-first • Termux-first • Production-ready</div>
-  <h1>Compile requirements into runnable software projects.</h1>
-  <p>Use <code>POST /plan</code> to analyze requirements or <code>POST /compile</code> to emit a secure, maintainable scaffold with docs, tests, and scripts.</p>
-</section><section class="grid">
-  <div class="card"><h2>CLI</h2><p><code>upca compile --input-file spec.md</code></p></div>
-  <div class="card"><h2>API</h2><p>JSON endpoints for automation and future UI integrations.</p></div>
-  <div class="card"><h2>Security</h2><p>Path safety, secret redaction, and hardened HTTP headers.</p></div>
-</section></main></body></html>
-"""
+        return INDEX_HTML
 
     @app.get("/health")
     def health() -> dict[str, str]:
@@ -80,10 +59,11 @@ def plan(request: PlanRequest) -> JSONResponse:
 
     @app.post("/compile")
     def compile_endpoint(request: CompileRequest) -> dict[str, object]:
-        output_dir = Path(request.output_dir)
-        if output_dir.is_absolute() or ".." in output_dir.parts:
-            raise HTTPException(status_code=400, detail="output_dir must be a safe relative path")
-        result = compile_project(request.requirements, output_dir, request.project_name)
+        result = compile_project(
+            request.requirements,
+            _safe_output_dir(request.output_dir),
+            request.project_name,
+        )
         return {"root": str(result.root), "file_count": result.file_count, "slug": result.plan.slug}
 
     return app
diff --git a/app/universal_compiler_agent/templates.py b/app/universal_compiler_agent/templates.py
index 380cb8e..806a73e 100644
--- a/app/universal_compiler_agent/templates.py
+++ b/app/universal_compiler_agent/templates.py
@@ -10,7 +10,6 @@
   <meta name="viewport" content="width=device-width, initial-scale=1" />
   <meta name="description" content="Compile requirements into secure runnable project scaffolds." />
   <title>Universal Project Compiler Agent</title>
-  <script defer src="https://cdn.vercel-insights.com/v1/script.js"></script>
   <style>
     :root {
       color-scheme: dark;
@@ -148,8 +147,8 @@
     }
   }
 
-  planButton.addEventListener('click', () => submit('/api/plan', planButton));
-  compileButton.addEventListener('click', () => submit('/api/compile', compileButton));
+  planButton.addEventListener('click', () => submit('/plan', planButton));
+  compileButton.addEventListener('click', () => submit('/compile', compileButton));
 </script>
 </body>
 </html>
diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md
index f047b8f..345013c 100644
--- a/docs/CHANGELOG.md
+++ b/docs/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.1.1 - 2026-06-02
+
+- Added CLI `compile --dry-run` support for release-safe plan previews.
+- Rejected unsafe CLI and API output directories before project generation.
+- Served the maintained dashboard template from the FastAPI root route and aligned its buttons with `/plan` and `/compile`.
+- Updated release metadata and development dependencies for the current test client stack.
+
 ## 0.1.0
 
 - Implemented the initial Universal Project Compiler Agent CLI and FastAPI service.
diff --git a/docs/SPECIFICATION.md b/docs/SPECIFICATION.md
index 1cef87b..a1fd42e 100644
--- a/docs/SPECIFICATION.md
+++ b/docs/SPECIFICATION.md
@@ -1,6 +1,4 @@
-AGENTS.md
-
-Universal Project Compiler Agent
+# Universal Project Compiler Agent
 
 Android-First • Termux-First • Codex CLI • Claude Code
 
diff --git a/pyproject.toml b/pyproject.toml
index 0221590..006121f 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "universal-project-compiler-agent"
-version = "0.1.0"
+version = "0.1.1"
 description = "Termux-first compiler agent that turns requirements into runnable project scaffolds."
 readme = "README.md"
 requires-python = ">=3.10"
@@ -20,7 +20,8 @@ dependencies = [
 dev = [
   "pytest>=8.0,<9.0",
   "ruff>=0.6,<1.0",
-  "httpx>=0.27,<1.0"
+  "httpx>=0.27,<1.0",
+  "httpx2>=2.3,<3.0"
 ]
 
 [project.scripts]
@@ -45,3 +46,4 @@ select = ["E", "F", "I", "B", "UP", "SIM"]
 
 [tool.ruff.lint.per-file-ignores]
 "app/universal_compiler_agent/server.py" = ["E501"]
+"app/universal_compiler_agent/templates.py" = ["E501"]
diff --git a/scripts/check.sh b/scripts/check.sh
new file mode 100755
index 0000000..7f5a70c
--- /dev/null
+++ b/scripts/check.sh
@@ -0,0 +1,4 @@
+#!/usr/bin/env sh
+set -eu
+ruff check .
+pytest -q
diff --git a/tests/test_server.py b/tests/test_server.py
index 8e7f7e2..5bbd3fd 100644
--- a/tests/test_server.py
+++ b/tests/test_server.py
@@ -1,7 +1,19 @@
+from pathlib import Path
+
 from fastapi.testclient import TestClient
 from universal_compiler_agent.server import app
 
 
+def test_dashboard_uses_public_api_routes() -> None:
+    response = TestClient(app).get("/")
+
+    assert response.status_code == 200
+    assert "submit('/plan'" in response.text
+    assert "submit('/compile'" in response.text
+    assert "/api/plan" not in response.text
+    assert "/api/compile" not in response.text
+
+
 def test_health_endpoint() -> None:
     response = TestClient(app).get("/health")
 
@@ -17,3 +29,27 @@ def test_plan_endpoint() -> None:
 
     assert response.status_code == 200
     assert response.json()["slug"] == "portal"
+
+
+def test_compile_endpoint_rejects_unsafe_output_dir() -> None:
+    response = TestClient(app).post(
+        "/compile",
+        json={"requirements": "# Portal", "output_dir": "../escape"},
+    )
+
+    assert response.status_code == 400
+    assert response.json()["detail"] == "output_dir must be a safe relative path"
+
+
+def test_compile_endpoint_writes_scaffold(tmp_path: Path, monkeypatch) -> None:  # type: ignore[no-untyped-def]
+    monkeypatch.chdir(tmp_path)
+
+    response = TestClient(app).post(
+        "/compile",
+        json={"requirements": "# Portal", "output_dir": "generated"},
+    )
+
+    assert response.status_code == 200
+    body = response.json()
+    assert body["slug"] == "portal"
+    assert (tmp_path / body["root"] / "README.md").exists()

From 9e9ca0286dc0be3bca1a786eb4be645e3b0dd728 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Hu=E1=BB=B3nh=20Th=C6=B0=C6=A1ng?=
 <252359928+Huynhthuongg@users.noreply.github.com>
Date: Wed, 3 Jun 2026 09:51:26 +0700
Subject: [PATCH 2/3] Add Vercel-ready project landing page

---
 .github/workflows/ci.yml  |   3 +-
 README.md                 |  25 +++++++-
 public/app.js             |  15 +++++
 public/badges/fastapi.svg |   5 ++
 public/badges/termux.svg  |   5 ++
 public/badges/vercel.svg  |   5 ++
 public/index.html         |  99 ++++++++++++++++++++++++++++
 public/styles.css         | 132 ++++++++++++++++++++++++++++++++++++++
 pyproject.toml            |   9 ++-
 scripts/check.sh          |  21 ++++++
 vercel.json               |  14 ++++
 11 files changed, 328 insertions(+), 5 deletions(-)
 create mode 100644 public/app.js
 create mode 100644 public/badges/fastapi.svg
 create mode 100644 public/badges/termux.svg
 create mode 100644 public/badges/vercel.svg
 create mode 100644 public/index.html
 create mode 100644 public/styles.css
 create mode 100644 vercel.json

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e150f07..57e9458 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,5 +18,4 @@ jobs:
           python-version: ${{ matrix.python-version }}
       - run: python -m pip install --upgrade pip
       - run: python -m pip install -e '.[dev]'
-      - run: ruff check .
-      - run: pytest -q
+      - run: ./scripts/check.sh
diff --git a/README.md b/README.md
index dd1dadf..9a6ee72 100644
--- a/README.md
+++ b/README.md
@@ -1,5 +1,16 @@
 # Universal Project Compiler Agent
 
+<p align="center">
+  <img src="public/badges/termux.svg" alt="Termux ready" />
+  <img src="public/badges/fastapi.svg" alt="FastAPI powered" />
+  <img src="public/badges/vercel.svg" alt="Vercel ready" />
+</p>
+
+<p align="center">
+  <strong>Android-first compiler agent for turning requirements into secure, runnable project scaffolds.</strong><br />
+  <a href="public/index.html">Preview the landing page</a> · <a href="https://vercel.com/new">Deploy on Vercel</a>
+</p>
+
 Android-first, Termux-first development agent that transforms documents, specifications, repositories, OCR text, Markdown, or natural language requests into complete, runnable, maintainable software project scaffolds.
 
 The original product specification is preserved in [docs/SPECIFICATION.md](docs/SPECIFICATION.md).
@@ -58,6 +69,18 @@ tests/                         Unit tests
 .github/workflows/             CI checks
 ```
 
+
+## Vercel landing page
+
+A polished static introduction page is included in `public/` with animated SVG badges and Vercel routing/security headers in `vercel.json`.
+
+```bash
+npm i -g vercel
+vercel deploy --prod
+```
+
+If deploying from CI, provide your Vercel token as an environment secret and run `vercel deploy --prod --token "$VERCEL_TOKEN"`.
+
 ## Development
 
 ```bash
@@ -65,7 +88,7 @@ python -m pip install -e '.[dev]'
 ./scripts/check.sh
 ```
 
-`./scripts/check.sh` runs Ruff and the full pytest suite so release checks match CI.
+`./scripts/check.sh` verifies development dependencies, then runs Ruff, Codespell, and the full pytest suite so release checks match CI. The Vercel landing page lives in `public/` and is served as a static site.
 
 ## Current release
 
diff --git a/public/app.js b/public/app.js
new file mode 100644
index 0000000..d1bfe86
--- /dev/null
+++ b/public/app.js
@@ -0,0 +1,15 @@
+document.documentElement.classList.add('js');
+
+const observer = new IntersectionObserver(
+  (entries) => {
+    for (const entry of entries) {
+      if (entry.isIntersecting) {
+        entry.target.classList.add('visible');
+        observer.unobserve(entry.target);
+      }
+    }
+  },
+  { threshold: 0.18 }
+);
+
+document.querySelectorAll('.reveal').forEach((node) => observer.observe(node));
diff --git a/public/badges/fastapi.svg b/public/badges/fastapi.svg
new file mode 100644
index 0000000..09196c8
--- /dev/null
+++ b/public/badges/fastapi.svg
@@ -0,0 +1,5 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="178" height="34" role="img" aria-label="FastAPI powered">
+  <defs><linearGradient id="g" x1="0" x2="1"><stop stop-color="#06b6d4"><animate attributeName="offset" values="0;.35;0" dur="3s" repeatCount="indefinite"/></stop><stop offset="1" stop-color="#14b8a6"/></linearGradient></defs>
+  <rect width="178" height="34" rx="17" fill="#0f172a"/><rect x="1" y="1" width="176" height="32" rx="16" fill="url(#g)" opacity=".28"/>
+  <text x="16" y="22" fill="#f8fafc" font-family="Inter,Arial,sans-serif" font-size="13" font-weight="800">FASTAPI POWERED</text><path d="M151 8l-10 11h8l-3 7 11-12h-8l2-6z" fill="#5eead4"><animate attributeName="opacity" values=".55;1;.55" dur="1.2s" repeatCount="indefinite"/></path>
+</svg>
diff --git a/public/badges/termux.svg b/public/badges/termux.svg
new file mode 100644
index 0000000..cba805d
--- /dev/null
+++ b/public/badges/termux.svg
@@ -0,0 +1,5 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="172" height="34" role="img" aria-label="Termux ready">
+  <defs><linearGradient id="g" x1="0" x2="1"><stop stop-color="#22c55e"><animate attributeName="stop-color" values="#22c55e;#06b6d4;#22c55e" dur="4s" repeatCount="indefinite"/></stop><stop offset="1" stop-color="#8b5cf6"><animate attributeName="stop-color" values="#8b5cf6;#22c55e;#8b5cf6" dur="4s" repeatCount="indefinite"/></stop></linearGradient></defs>
+  <rect width="172" height="34" rx="17" fill="#0f172a"/><rect x="1" y="1" width="170" height="32" rx="16" fill="url(#g)" opacity=".25"/>
+  <text x="16" y="22" fill="#f8fafc" font-family="Inter,Arial,sans-serif" font-size="13" font-weight="800">TERMUX READY</text><circle cx="145" cy="17" r="5" fill="#22c55e"><animate attributeName="opacity" values="1;.35;1" dur="1.4s" repeatCount="indefinite"/></circle>
+</svg>
diff --git a/public/badges/vercel.svg b/public/badges/vercel.svg
new file mode 100644
index 0000000..64d9bf7
--- /dev/null
+++ b/public/badges/vercel.svg
@@ -0,0 +1,5 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="166" height="34" role="img" aria-label="Vercel ready">
+  <defs><linearGradient id="g" x1="0" x2="1"><stop stop-color="#8b5cf6"/><stop offset="1" stop-color="#06b6d4"><animate attributeName="stop-color" values="#06b6d4;#f8fafc;#06b6d4" dur="3.6s" repeatCount="indefinite"/></stop></linearGradient></defs>
+  <rect width="166" height="34" rx="17" fill="#0f172a"/><rect x="1" y="1" width="164" height="32" rx="16" fill="url(#g)" opacity=".25"/>
+  <text x="16" y="22" fill="#f8fafc" font-family="Inter,Arial,sans-serif" font-size="13" font-weight="800">VERCEL READY</text><path d="M137 10l9 16h-18z" fill="#fff"><animateTransform attributeName="transform" type="translate" values="0 0;0 -2;0 0" dur="1.8s" repeatCount="indefinite"/></path>
+</svg>
diff --git a/public/index.html b/public/index.html
new file mode 100644
index 0000000..efc804d
--- /dev/null
+++ b/public/index.html
@@ -0,0 +1,99 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1" />
+  <meta name="description" content="Universal Project Compiler Agent turns requirements into secure runnable project scaffolds." />
+  <meta property="og:title" content="Universal Project Compiler Agent" />
+  <meta property="og:description" content="A Termux-first compiler agent with planning, safe scaffolds, tests, docs, and FastAPI automation." />
+  <meta property="og:type" content="website" />
+  <title>Universal Project Compiler Agent</title>
+  <link rel="preconnect" href="https://fonts.googleapis.com" />
+  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
+  <link href="https://fonts.googleapis.com/css2?family=Inter:wght@500;700;800;900&display=swap" rel="stylesheet" />
+  <link rel="stylesheet" href="styles.css" />
+</head>
+<body>
+  <div class="aurora aurora-one"></div>
+  <div class="aurora aurora-two"></div>
+  <header class="shell nav">
+    <a class="brand" href="#top" aria-label="Universal Project Compiler Agent home">
+      <span class="brand-mark">UP</span>
+      <span>Universal Project Compiler Agent</span>
+    </a>
+    <nav aria-label="Page sections">
+      <a href="#features">Features</a>
+      <a href="#workflow">Workflow</a>
+      <a href="#deploy">Deploy</a>
+    </nav>
+  </header>
+
+  <main id="top">
+    <section class="shell hero">
+      <div class="hero-copy reveal">
+        <p class="eyebrow">Android-first • Termux-ready • Secure by default</p>
+        <h1>Turn rough requirements into polished, runnable software scaffolds.</h1>
+        <p class="lede">Plan, compile, and ship maintainable Python/FastAPI projects with generated docs, tests, scripts, secret redaction, and low-resource workflows built for mobile developers.</p>
+        <div class="badge-row" aria-label="Project badges">
+          <img src="badges/termux.svg" alt="Termux ready" />
+          <img src="badges/fastapi.svg" alt="FastAPI powered" />
+          <img src="badges/vercel.svg" alt="Vercel ready" />
+        </div>
+        <div class="actions">
+          <a class="button primary" href="#features">Explore features</a>
+          <a class="button ghost" href="#deploy">Deploy on Vercel</a>
+        </div>
+      </div>
+      <aside class="terminal-card reveal" aria-label="Compilation preview">
+        <div class="terminal-bar"><span></span><span></span><span></span></div>
+        <pre><code>$ upca plan --text "# CRM Dashboard"
+✓ Priority plan generated
+✓ Security notes attached
+✓ Tests and scripts mapped
+
+$ upca compile --output-dir generated
+✓ README.md
+✓ docs/PLAN.md
+✓ tests/test_smoke.py
+✓ scripts/start.sh</code></pre>
+      </aside>
+    </section>
+
+    <section id="features" class="shell section reveal">
+      <div class="section-heading">
+        <p class="eyebrow">What ships</p>
+        <h2>Professional scaffolds with safety rails.</h2>
+      </div>
+      <div class="grid cards">
+        <article class="card"><span>01</span><h3>Planning engine</h3><p>Converts natural language into Critical/High/Medium/Low implementation tasks with impact and file scope.</p></article>
+        <article class="card"><span>02</span><h3>Safe generation</h3><p>Normalizes slugs, rejects unsafe paths, escapes Markdown, and redacts common secrets before writing files.</p></article>
+        <article class="card"><span>03</span><h3>Dual interface</h3><p>Use the local CLI for Termux workflows or the FastAPI service for browsers, automation, and future dashboards.</p></article>
+      </div>
+    </section>
+
+    <section id="workflow" class="shell section split reveal">
+      <div>
+        <p class="eyebrow">Workflow</p>
+        <h2>From prompt to project in three steps.</h2>
+      </div>
+      <ol class="steps">
+        <li><strong>Describe</strong><span>Paste a README, spec, OCR text, or a plain-language product idea.</span></li>
+        <li><strong>Review</strong><span>Inspect prioritized work items, security notes, and inferred architecture.</span></li>
+        <li><strong>Compile</strong><span>Generate a runnable scaffold with docs, tests, scripts, and package metadata.</span></li>
+      </ol>
+    </section>
+
+    <section id="deploy" class="shell deploy reveal">
+      <div>
+        <p class="eyebrow">Vercel-ready</p>
+        <h2>Static landing page configuration is included.</h2>
+        <p>Deploy the polished GitHub introduction page with Vercel after connecting the repository or by running the Vercel CLI with your account token.</p>
+      </div>
+      <a class="button primary" href="https://vercel.com/new" rel="noopener">Open Vercel import</a>
+    </section>
+  </main>
+
+  <footer class="shell footer">AGPL-3.0-only • Built for focused, mobile-friendly software generation.</footer>
+  <script src="app.js"></script>
+</body>
+</html>
diff --git a/public/styles.css b/public/styles.css
new file mode 100644
index 0000000..2f44b99
--- /dev/null
+++ b/public/styles.css
@@ -0,0 +1,132 @@
+:root {
+  color-scheme: dark;
+  --bg: #050816;
+  --panel: rgba(15, 23, 42, 0.72);
+  --panel-strong: rgba(15, 23, 42, 0.9);
+  --text: #f8fafc;
+  --muted: #a5b4fc;
+  --soft: #cbd5e1;
+  --line: rgba(255, 255, 255, 0.14);
+  --accent: #8b5cf6;
+  --accent-two: #06b6d4;
+  --accent-three: #22c55e;
+  --shadow: 0 28px 110px rgba(0, 0, 0, 0.48);
+}
+
+* { box-sizing: border-box; }
+html { scroll-behavior: smooth; }
+body {
+  margin: 0;
+  min-height: 100vh;
+  overflow-x: hidden;
+  background:
+    radial-gradient(circle at 12% 10%, rgba(139, 92, 246, 0.28), transparent 32rem),
+    radial-gradient(circle at 88% 4%, rgba(6, 182, 212, 0.22), transparent 30rem),
+    linear-gradient(135deg, #050816 0%, #0f172a 50%, #111827 100%);
+  color: var(--text);
+  font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+}
+
+a { color: inherit; text-decoration: none; }
+.shell { width: min(1120px, calc(100% - 32px)); margin: 0 auto; }
+.aurora {
+  position: fixed;
+  z-index: -1;
+  width: 24rem;
+  height: 24rem;
+  border-radius: 999px;
+  filter: blur(28px);
+  opacity: 0.35;
+  animation: float 13s ease-in-out infinite alternate;
+}
+.aurora-one { left: -7rem; top: 18rem; background: var(--accent); }
+.aurora-two { right: -8rem; top: 8rem; background: var(--accent-two); animation-delay: -4s; }
+
+.nav { display: flex; align-items: center; justify-content: space-between; gap: 18px; padding: 24px 0; }
+.brand { display: inline-flex; align-items: center; gap: 12px; font-weight: 900; }
+.brand-mark {
+  display: grid;
+  width: 42px;
+  height: 42px;
+  place-items: center;
+  border-radius: 14px;
+  background: linear-gradient(135deg, var(--accent), var(--accent-two));
+  box-shadow: 0 14px 36px rgba(6, 182, 212, 0.22);
+}
+.nav nav { display: flex; gap: 18px; color: var(--soft); font-weight: 700; }
+.nav nav a:hover { color: white; }
+
+.hero { display: grid; grid-template-columns: minmax(0, 1.1fr) minmax(320px, 0.9fr); gap: 36px; align-items: center; padding: 72px 0 84px; }
+.eyebrow { margin: 0 0 14px; color: var(--muted); font-weight: 900; letter-spacing: 0.12em; text-transform: uppercase; }
+h1, h2, h3 { margin: 0; line-height: 1; letter-spacing: -0.055em; }
+h1 { max-width: 820px; font-size: clamp(48px, 8vw, 94px); }
+h2 { font-size: clamp(34px, 5vw, 58px); }
+h3 { font-size: 24px; }
+.lede { max-width: 720px; margin: 24px 0; color: var(--soft); font-size: clamp(18px, 2vw, 22px); line-height: 1.7; }
+.badge-row { display: flex; flex-wrap: wrap; gap: 10px; margin: 18px 0 30px; }
+.badge-row img { height: 34px; filter: drop-shadow(0 12px 20px rgba(0, 0, 0, 0.22)); }
+.actions { display: flex; flex-wrap: wrap; gap: 14px; }
+.button {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  min-height: 48px;
+  border-radius: 999px;
+  padding: 0 20px;
+  font-weight: 900;
+  transition: transform 0.2s ease, border-color 0.2s ease, filter 0.2s ease;
+}
+.button:hover { transform: translateY(-2px); filter: brightness(1.08); }
+.primary { background: linear-gradient(135deg, var(--accent), var(--accent-two)); color: white; }
+.ghost { border: 1px solid var(--line); background: rgba(255, 255, 255, 0.06); }
+
+.terminal-card {
+  border: 1px solid var(--line);
+  border-radius: 28px;
+  background: linear-gradient(180deg, var(--panel), rgba(2, 6, 23, 0.78));
+  box-shadow: var(--shadow);
+  overflow: hidden;
+  transform: perspective(900px) rotateY(-5deg) rotateX(3deg);
+}
+.terminal-bar { display: flex; gap: 8px; padding: 18px; border-bottom: 1px solid var(--line); }
+.terminal-bar span { width: 12px; height: 12px; border-radius: 999px; background: var(--accent-three); }
+.terminal-bar span:nth-child(2) { background: #f59e0b; }
+.terminal-bar span:nth-child(3) { background: #ef4444; }
+pre { margin: 0; padding: 24px; overflow: auto; color: #dbeafe; font-size: 15px; line-height: 1.75; }
+
+.section { padding: 72px 0; }
+.section-heading { max-width: 700px; margin-bottom: 28px; }
+.grid { display: grid; gap: 18px; }
+.cards { grid-template-columns: repeat(3, minmax(0, 1fr)); }
+.card, .deploy, .steps li {
+  border: 1px solid var(--line);
+  border-radius: 26px;
+  background: var(--panel);
+  box-shadow: 0 20px 70px rgba(0, 0, 0, 0.22);
+}
+.card { padding: 24px; }
+.card span { color: var(--accent-three); font-weight: 900; }
+.card p, .steps span, .deploy p { color: var(--soft); line-height: 1.65; }
+.split { display: grid; grid-template-columns: 0.8fr 1.2fr; gap: 28px; align-items: start; }
+.steps { display: grid; gap: 14px; margin: 0; padding: 0; list-style: none; counter-reset: step; }
+.steps li { display: grid; gap: 8px; padding: 22px; }
+.steps strong { font-size: 22px; }
+.deploy { display: flex; justify-content: space-between; gap: 24px; align-items: center; margin: 72px auto; padding: 30px; background: linear-gradient(135deg, rgba(139, 92, 246, 0.2), rgba(6, 182, 212, 0.14)); }
+.footer { padding: 24px 0 40px; color: var(--soft); }
+.reveal { opacity: 1; transform: translateY(0); }
+.js .reveal { opacity: 0; transform: translateY(22px); transition: opacity 0.8s ease, transform 0.8s ease; }
+.js .reveal.visible { opacity: 1; transform: translateY(0); }
+
+@keyframes float {
+  from { transform: translate3d(0, 0, 0) scale(1); }
+  to { transform: translate3d(3rem, -2rem, 0) scale(1.08); }
+}
+
+@media (max-width: 860px) {
+  .nav { align-items: flex-start; flex-direction: column; }
+  .nav nav { flex-wrap: wrap; }
+  .hero, .split, .cards { grid-template-columns: 1fr; }
+  .hero { padding-top: 44px; }
+  .terminal-card { transform: none; }
+  .deploy { align-items: flex-start; flex-direction: column; }
+}
diff --git a/pyproject.toml b/pyproject.toml
index 006121f..81b73d2 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -20,8 +20,9 @@ dependencies = [
 dev = [
   "pytest>=8.0,<9.0",
   "ruff>=0.6,<1.0",
-  "httpx>=0.27,<1.0",
-  "httpx2>=2.3,<3.0"
+  "httpx>=0.28,<1.0",
+  "httpx2>=2.3,<3.0",
+  "codespell>=2.3,<3.0"
 ]
 
 [project.scripts]
@@ -47,3 +48,7 @@ select = ["E", "F", "I", "B", "UP", "SIM"]
 [tool.ruff.lint.per-file-ignores]
 "app/universal_compiler_agent/server.py" = ["E501"]
 "app/universal_compiler_agent/templates.py" = ["E501"]
+
+[tool.codespell]
+skip = "*.png,.git,.pytest_cache,.ruff_cache,.venv"
+ignore-words-list = "thi"
diff --git a/scripts/check.sh b/scripts/check.sh
index 7f5a70c..5bdfb32 100755
--- a/scripts/check.sh
+++ b/scripts/check.sh
@@ -1,4 +1,25 @@
 #!/usr/bin/env sh
 set -eu
+
+missing=""
+for command in ruff codespell; do
+  if ! command -v "$command" >/dev/null 2>&1; then
+    missing="$missing $command"
+  fi
+done
+
+for module in pytest httpx2 httpx; do
+  if ! python -c "import ${module}" >/dev/null 2>&1; then
+    missing="$missing $module"
+  fi
+done
+
+if [ -n "$missing" ]; then
+  echo "Missing development dependencies:$missing" >&2
+  echo "Run: python -m pip install -e '.[dev]'" >&2
+  exit 1
+fi
+
 ruff check .
+codespell README.md docs app tests pyproject.toml scripts config public vercel.json
 pytest -q
diff --git a/vercel.json b/vercel.json
new file mode 100644
index 0000000..f058b70
--- /dev/null
+++ b/vercel.json
@@ -0,0 +1,14 @@
+{
+  "cleanUrls": true,
+  "trailingSlash": false,
+  "headers": [
+    {
+      "source": "/(.*)",
+      "headers": [
+        { "key": "X-Content-Type-Options", "value": "nosniff" },
+        { "key": "Referrer-Policy", "value": "strict-origin-when-cross-origin" },
+        { "key": "Permissions-Policy", "value": "camera=(), microphone=(), geolocation=()" }
+      ]
+    }
+  ]
+}

From f34fb5554f6f5ade9e75ab3e2f7560a6d95f11f6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Hu=E1=BB=B3nh=20Th=C6=B0=C6=A1ng?=
 <252359928+Huynhthuongg@users.noreply.github.com>
Date: Wed, 3 Jun 2026 09:56:26 +0700
Subject: [PATCH 3/3] Reduce landing page PR merge scope

---
 .github/workflows/ci.yml |  3 ++-
 README.md                |  2 +-
 pyproject.toml           |  5 ++---
 scripts/check.sh         | 21 ---------------------
 vercel.json              | 33 ++++++++++++++++++++++++++++++---
 5 files changed, 35 insertions(+), 29 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 57e9458..e150f07 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,4 +18,5 @@ jobs:
           python-version: ${{ matrix.python-version }}
       - run: python -m pip install --upgrade pip
       - run: python -m pip install -e '.[dev]'
-      - run: ./scripts/check.sh
+      - run: ruff check .
+      - run: pytest -q
diff --git a/README.md b/README.md
index 9a6ee72..d30efb1 100644
--- a/README.md
+++ b/README.md
@@ -88,7 +88,7 @@ python -m pip install -e '.[dev]'
 ./scripts/check.sh
 ```
 
-`./scripts/check.sh` verifies development dependencies, then runs Ruff, Codespell, and the full pytest suite so release checks match CI. The Vercel landing page lives in `public/` and is served as a static site.
+`./scripts/check.sh` runs Ruff and the full pytest suite so release checks match CI. The Vercel landing page lives in `public/` and is served as a static site.
 
 ## Current release
 
diff --git a/pyproject.toml b/pyproject.toml
index 81b73d2..fe9c955 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -20,9 +20,8 @@ dependencies = [
 dev = [
   "pytest>=8.0,<9.0",
   "ruff>=0.6,<1.0",
-  "httpx>=0.28,<1.0",
-  "httpx2>=2.3,<3.0",
-  "codespell>=2.3,<3.0"
+  "httpx>=0.27,<1.0",
+  "httpx2>=2.3,<3.0"
 ]
 
 [project.scripts]
diff --git a/scripts/check.sh b/scripts/check.sh
index 5bdfb32..7f5a70c 100755
--- a/scripts/check.sh
+++ b/scripts/check.sh
@@ -1,25 +1,4 @@
 #!/usr/bin/env sh
 set -eu
-
-missing=""
-for command in ruff codespell; do
-  if ! command -v "$command" >/dev/null 2>&1; then
-    missing="$missing $command"
-  fi
-done
-
-for module in pytest httpx2 httpx; do
-  if ! python -c "import ${module}" >/dev/null 2>&1; then
-    missing="$missing $module"
-  fi
-done
-
-if [ -n "$missing" ]; then
-  echo "Missing development dependencies:$missing" >&2
-  echo "Run: python -m pip install -e '.[dev]'" >&2
-  exit 1
-fi
-
 ruff check .
-codespell README.md docs app tests pyproject.toml scripts config public vercel.json
 pytest -q
diff --git a/vercel.json b/vercel.json
index f058b70..9e4df4a 100644
--- a/vercel.json
+++ b/vercel.json
@@ -5,10 +5,37 @@
     {
       "source": "/(.*)",
       "headers": [
-        { "key": "X-Content-Type-Options", "value": "nosniff" },
-        { "key": "Referrer-Policy", "value": "strict-origin-when-cross-origin" },
-        { "key": "Permissions-Policy", "value": "camera=(), microphone=(), geolocation=()" }
+        {
+          "key": "X-Content-Type-Options",
+          "value": "nosniff"
+        },
+        {
+          "key": "Referrer-Policy",
+          "value": "strict-origin-when-cross-origin"
+        },
+        {
+          "key": "Permissions-Policy",
+          "value": "camera=(), microphone=(), geolocation=()"
+        }
       ]
     }
+  ],
+  "rewrites": [
+    {
+      "source": "/",
+      "destination": "/public/index.html"
+    },
+    {
+      "source": "/styles.css",
+      "destination": "/public/styles.css"
+    },
+    {
+      "source": "/app.js",
+      "destination": "/public/app.js"
+    },
+    {
+      "source": "/badges/:path*",
+      "destination": "/public/badges/:path*"
+    }
   ]
 }