feat: ship download-ready Nova Desktop Node

[warheart1984-ctrl]

What

Publishes the updated Lawful Nova shell as a source-only, download-ready standalone branch for agentic-coding-agent.

This branch includes:

• the governed Nova Node backend under nova/node
• the Nova Desktop Electron/Monaco app under desktop
• Windows and macOS/Linux quickstart scripts
• packaging scripts for local Windows/macOS zips
• GITHUB-10-MINUTE-START.md for clone-to-running setup
• a GitHub smoke workflow that verifies the download path and uploads source bundles

Why

The goal is that someone can download or clone this repository from GitHub and have the Node plus desktop shell working in about ten minutes, without cloud orchestration, committed binaries, node_modules, or generated zip artifacts.

How to run

Windows:

powershell -NoProfile -ExecutionPolicy Bypass -File .\quickstart.ps1

macOS/Linux:

chmod +x quickstart.sh bin/nova setup/*.sh
./quickstart.sh

Then open:

• Node API: http://127.0.0.1:8080
• Nova Desktop: launched by npm start from desktop/

Verification

Source workspace:

• ..\.venv\Scripts\python.exe -m pytest tests -q -> 61 passed, 1 warning
• npm test in desktop/ -> 8 passed

Standalone export:

• E:\project-infi\.venv\Scripts\python.exe -m pytest tests -q -> 61 passed, 1 warning
• npm ci in desktop/ -> installed cleanly, 0 vulnerabilities
• npm test in desktop/ -> 8 passed
• git diff --cached --check before commit -> OK
• generated/binary artifact scan before commit -> OK

Notes

This is intentionally a source-only export of lawful-nova-shell into the repository root. Generated zips, Electron build outputs, runtime state, node_modules, and packaged executables are excluded. The included GitHub workflow can produce downloadable source artifacts from the branch.

[warheart1984-ctrl]

CI note from Codex: the initial download-smoke workflow did not execute any checkout/test steps.

GitHub returned this check-run annotation:

The job was not started because your account is locked due to a billing issue.

Local and standalone-export verification passed before publishing; rerun the workflow after the GitHub billing/account lock is cleared.