rebrand to notevi: one CLI over the jj sidecar

vr and vrsite become a single binary. vrsite/ folds into a web package in
one module (0x4200.cafe/notevi); "notevi web" serves and exports exactly
what vrsite did, and "notevi read/grep/note/query" is unchanged.

The sidecar is renamed with it: notevi_log, notevi-log.jsonl, and the
description "private: notevi log". The pre-rebrand names are still
recognized, so an old repository opens and reads; it is renamed in place
on the first write, or up front with "notevi migrate DIR...".

That rename cannot be a single mv inside jj run. jj only auto-tracks a
*new* file in the run working copy below a size limit it does not take
from the command line, so writing a whole log under a name the change has
never held is silently dropped while jj reports success. ensureLogFile
creates the file empty first and lets every later byte be a modification
of a tracked file, which snapshots at any size; that also fixes the same
latent bug when importing a large legacy vr-log.jsonl.

Adds a bem-te-vi mark (favicon and nav brand) and a README.

Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>

1 files changed, 0 insertions, 44 deletions

diff --git a/constrain/vr-only.rules b/constrain/vr-only.rules
deleted file mode 100644
index 54d3392..0000000
--- a/constrain/vr-only.rules
+++ /dev/null
@@ -1,44 +0,0 @@
-# codex execpolicy: force file reading through vr (which logs every read).
-# Activate:   cp vr-only.rules ~/.codex/rules/
-# Deactivate: rm ~/.codex/rules/vr-only.rules
-# The engine parses through `/bin/zsh -lc '...'` wrappers, so these match the
-# inner command. Editing tools (apply_patch) are unaffected — this only
-# constrains reading. Known hole: scripting runtimes can still open files;
-# uncomment the last block to close it at the cost of breaking legit scripts.
-
-prefix_rule(pattern=["vr"], decision="allow")
-
-prefix_rule(pattern=["cat"], decision="forbidden")
-prefix_rule(pattern=["head"], decision="forbidden")
-prefix_rule(pattern=["tail"], decision="forbidden")
-prefix_rule(pattern=["less"], decision="forbidden")
-prefix_rule(pattern=["more"], decision="forbidden")
-prefix_rule(pattern=["sed"], decision="forbidden")
-prefix_rule(pattern=["awk"], decision="forbidden")
-prefix_rule(pattern=["cut"], decision="forbidden")
-prefix_rule(pattern=["rg"], decision="forbidden")
-prefix_rule(pattern=["grep"], decision="forbidden")
-prefix_rule(pattern=["egrep"], decision="forbidden")
-prefix_rule(pattern=["fgrep"], decision="forbidden")
-prefix_rule(pattern=["find"], decision="forbidden")
-prefix_rule(pattern=["fd"], decision="forbidden")
-prefix_rule(pattern=["strings"], decision="forbidden")
-prefix_rule(pattern=["xxd"], decision="forbidden")
-prefix_rule(pattern=["hexdump"], decision="forbidden")
-prefix_rule(pattern=["od"], decision="forbidden")
-prefix_rule(pattern=["tac"], decision="forbidden")
-prefix_rule(pattern=["nl"], decision="forbidden")
-prefix_rule(pattern=["jj", "file", "show"], decision="forbidden")
-prefix_rule(pattern=["jj", "diff"], decision="forbidden")
-prefix_rule(pattern=["git", "show"], decision="forbidden")
-prefix_rule(pattern=["git", "diff"], decision="forbidden")
-prefix_rule(pattern=["git", "grep"], decision="forbidden")
-prefix_rule(pattern=["git", "cat-file"], decision="forbidden")
-prefix_rule(pattern=["git", "blame"], decision="forbidden")
-prefix_rule(pattern=["git", "log"], decision="forbidden")
-
-# prefix_rule(pattern=["python3"], decision="forbidden")
-# prefix_rule(pattern=["python"], decision="forbidden")
-# prefix_rule(pattern=["node"], decision="forbidden")
-# prefix_rule(pattern=["perl"], decision="forbidden")
-# prefix_rule(pattern=["ruby"], decision="forbidden")