V48 (specification-implementation): Modularize full deposit stack across uapi and packages

Split all major deposit-touched modules into SRP units while preserving
public import paths: depository-search (types/scoring/evidence/normalize/run),
deposit option policy/admission/options/earnings/demand (types+helpers+source-safe
utils), depository-supply-index (types/helpers/build-record/projections),
asset-packs-synthesis (catalogs/inventory/neediness/validate), deposit agents
(schema/prompts/checks), pipeline-hosts harness (constants/runners/builder),
uapi deposit UI (option card, source field grid, aside, obfuscations),
synthesize-options (parse+dispatch), and reads deposit workbench (panels/hooks/
evidence models). Restate rebuild law in SPEC G3-14a and NOTES/PARITY.

Author: geraldarthurdavis

BITCODE_SPEC_V48.md

@@ -592,6 +592,13 @@ The `/deposits` commercial surface is modular by SRP, not a single god client:
 6. Rebuilders must follow `internal-docs/BITCODE_SOURCE_LAYOUT.md`; do not
    reassemble deposit law into a single multi-thousand-line page client.
 
+Package modularization (deposit domain): depository-search, deposit option
+policy/admission/options/earnings/demand, depository-supply-index, and
+asset-packs-synthesis are split into types/helpers/builders with stable public
+entry paths under `@bitcode/pipeline-asset-pack/*`. Harness plan builder is
+split from in-box runner templates. Agents co-locate schema/prompts/checks.
+
+
 ### G3-15 Gate 3 completion condition
 
 Gate 3 is closed when:

BITCODE_SPEC_V48_NOTES.md

@@ -1427,3 +1427,27 @@ Canonical filesystem and co-location rules live in
   co-located `hooks/`, `styles/`, `__tests__/`
 - Domain pure logic prefers `packages/`; pages stay thin
 - Terminal remains deleted
+
+
+### Deposit full-stack modularization landing (Garrett, 2026-07-13 — aggressive pass)
+
+**packages/pipelines/asset-pack**
+- `depository-search` → types / scoring / evidence / normalize / run + barrel (1898→43)
+- deposit option domain → types + helpers + shared `deposit-source-safe-utils`
+- `depository-supply-index` → types / helpers / build-record / projections
+- `asset-packs-synthesis` → types / catalogs / neediness / inventory / validate + barrel
+- deposit agents → schema / prompts / checks co-located under agents/
+
+**packages/pipeline-hosts**
+- `asset-pack-harness` → constants + runners templates + plan builder
+
+**uapi deposits**
+- Option card, source field grid, aside panels, obfuscations controls
+- synthesize-options: parse body + dispatch modules; thin route
+
+**uapi reads (deposit workbench)**
+- ReadsDepositReadWorkbench orchestrator + hooks + stage panels
+- deposit-read-workbench models split; evidence types/extract/row-builders
+
+Public package export paths preserved. Jest deposit/depository/synthesis suites green.
+

BITCODE_SPEC_V48_PARITY_MATRIX.md

@@ -69,7 +69,7 @@ storage readback, wallet/provider receipts, and repository delivery receipts.
 | BTD journal / operational health naming | Package modules use `journal` and `operational-health` (non-Terminal); temporary Terminal aliases until callers migrate | substantially advanced | `packages/btd/src/journal.ts` + `operational-health.ts` canonical; `terminal-journal` / `terminal-operational-health` shims | version/v48 workstream |
 | Package-first utilities | Generalizable pure logic from uapi `lib/` and pure terminal models live in `packages/` or Bitcode models | substantially advanced| Law specified; wallet/cancel/analytics extractions planned Phase 7 | version/v48 workstream |
 | God-client modularization | Deposit/Read/Packs page clients thin; logic in experience subcomponents/hooks/models (SRP) | substantially advanced | Packs shell ~187 LOC; DepositPageClient ~677 LOC orchestration with models + hooks (live runs, demand, URL, VCS inventory, option actions, activity recording, synthesis lifecycle); DepositSourceSelection ~682 render + VCS hook; Read still pending | version/v48 workstream |
-| Deposit modular units | Pure deposit projections + hooks unit-tested; G3-14 source map lists modular paths | substantially advanced | Models + 9 page-client hooks + VCS hook + named UI units under `uapi/components/deposits/`; jest allowlist includes `depositActivityLedger`, `depositSourceCriticality`, `depositRunStatus` | version/v48 workstream |
+| Deposit modular units | Pure deposit projections + hooks unit-tested; G3-14 source map lists modular paths | substantially advanced | UAPI deposits+reads workbench modular; packages asset-pack depository-search/options/supply/synthesis + agents + harness split with stable exports; jest deposit/depository/synthesis green | version/v48 workstream |
 
 ## Grouped closure gates
 

packages/pipeline-hosts/src/asset-pack-harness-constants.ts

@@ -0,0 +1,19 @@
+/**
+ * AssetPack sandbox harness path and timeout constants.
+ * Shared by harness plan builder and in-box runner templates.
+ */
+
+export const HARNESS_DIRECTORY = '.bitcode/pipeline-harness';
+export const MANIFEST_PATH = `${HARNESS_DIRECTORY}/manifest.json`;
+export const HOST_SMOKE_RUNNER_PATH = `${HARNESS_DIRECTORY}/run-host-smoke.mjs`;
+export const LIVE_PIPELINE_RUNNER_PATH = `${HARNESS_DIRECTORY}/run-live-asset-pack-pipeline.ts`;
+export const SOURCE_OVERLAY_PATCH_PATH = `${HARNESS_DIRECTORY}/source-overlay.patch`;
+export const EVIDENCE_PATH = `${HARNESS_DIRECTORY}/evidence.json`;
+export const TELEMETRY_PATH = `${HARNESS_DIRECTORY}/telemetry.jsonl`;
+export const TSCONFIG_PATHS_REGISTER_PATH = `${HARNESS_DIRECTORY}/node_modules/tsconfig-paths/register`;
+export const PIPELINE_STDOUT_PATH = `${HARNESS_DIRECTORY}/pipeline.stdout.log`;
+export const PIPELINE_STDERR_PATH = `${HARNESS_DIRECTORY}/pipeline.stderr.log`;
+export const PIPELINE_EXIT_CODE_PATH = `${HARNESS_DIRECTORY}/pipeline.exit-code`;
+export const SANDBOX_WORKING_DIRECTORY = '/vercel/sandbox' as const;
+export const DEFAULT_LONG_TIMEOUT_MS = 45 * 60 * 1000;
+export const SANDBOX_PNPM_VERSION = '10.33.0';