Merge branch 'codex/production-intelligence-terminal' into codex/issue-8-doc-cleanup

README.md

@@ -123,6 +123,7 @@ PORT=3117
 REFRESH_INTERVAL_MINUTES=15
 AUTO_OPEN_BROWSER=false
 STALE_DATA_MAX_AGE_MINUTES=60
+TERMINAL_ACTIONS_ENABLED=true
 SWEEP_TOKEN=
 BRIEF_VERBOSITY=standard
 
@@ -175,6 +176,41 @@ LLM_MODEL=your-model
 
 For Pangolin or another reverse proxy, forward HTTP traffic to `intelligence-terminal:3117` (or the `PORT` you set). Missing API keys do not crash sweeps; affected sources are reported as degraded in `/api/health`.
 
+The dashboard Terminal Actions panel can trigger `status`, `sweep`, and `brief` through `/api/action`. Leave `TERMINAL_ACTIONS_ENABLED=true` for a private home-server deployment. For an internet-exposed deployment, set `SWEEP_TOKEN` and pass it through trusted automation, or set `TERMINAL_ACTIONS_ENABLED=false` to disable browser-triggered actions. If you protect actions with `SWEEP_TOKEN`, the browser can send it from `localStorage.crucix_sweep_token`.
+
+#### Scenario Watchlist
+
+Crucix can track operator hypotheses across sweeps with a runtime scenario file at `runs/scenarios.json`. On first run, the server creates three disabled starter examples:
+
+- Middle East energy shock
+- Macro stress spillover
+- Regional escalation risk
+
+Enable or add scenarios by editing `runs/scenarios.json`:
+
+```json
+{
+  "version": 1,
+  "scenarios": [
+    {
+      "id": "middle-east-energy-shock",
+      "enabled": true,
+      "name": "Middle East energy shock",
+      "description": "Energy supply risk building from regional conflict.",
+      "regions": ["Middle East", "Iran", "Strait of Hormuz"],
+      "categories": ["osint", "energy", "maritime"],
+      "keywords": ["missile", "strike", "hormuz", "oil"],
+      "thresholds": { "watching": 2, "building": 4, "confirmed": 7 },
+      "invalidation": "WTI normalizes and urgent regional signals fade."
+    }
+  ]
+}
+```
+
+Malformed scenario config degrades safely: sweeps continue and the dashboard shows the watchlist as a config issue. Scenario state is persisted in `runs/scenario-state.json`; delete that file to reset state transitions without deleting definitions.
+
+Scenario states are `dormant`, `watching`, `building`, and `confirmed`. The dashboard shows active scenario state, confidence, score, and recent trigger time. Briefings include a `Scenario Watchlist` section when one or more scenarios change state.
+
 #### Build And Publish Your Gitea Image
 
 ```bash
@@ -315,6 +351,9 @@ These three unlock the most valuable economic and satellite data. Each takes abo
 | `ACLED_EMAIL` + `ACLED_PASSWORD` | Armed conflict event data | [acleddata.com/register](https://acleddata.com/register/) — free, OAuth2 |
 | `AISSTREAM_API_KEY` | Maritime AIS vessel tracking | [aisstream.io](https://aisstream.io/) — free |
 | `ADSB_API_KEY` | Unfiltered flight tracking | [RapidAPI](https://rapidapi.com/adsbexchange/api/adsbexchange-com1) — ~$10/mo |
+| `REDDIT_CLIENT_ID` + `REDDIT_CLIENT_SECRET` | Reddit social sentiment | [reddit.com/prefs/apps](https://www.reddit.com/prefs/apps/) — create a script app |
+
+Reddit is OAuth-only in this fork. If the Reddit credentials are missing or rejected, the Reddit source is reported as degraded and no unauthenticated `reddit.com/.../hot.json` fallback is used.
 
 ### LLM Provider (optional, for AI-enhanced ideas)