Demo-data UI+route gating behind SHOW_DEMO_TOOLS flag (server-side, default FALSE, byte-identical fleet-wide). Conditional-render not CSS-hide (no DOM/view-source leak) for ALL roles incl admin; gate demo UI surfaces AND seed/teardown server actions/routes (403/404 when off — seal the injection path, not just the button). Keep code: flag-gated in main, CI typecheck touch so demo path compiles, one-line README. Pluto surfaces: createdVia='demo_seed', demo teardown route, @demo.pluto allowlist (email-allowlist.ts), seed-demo script, any isDemo/demo badge/filter/nav. Existing demo ROWS = separate db-op, Elazar's call (Pluto LIVE → purge demo-labeled only w/ archive-context, or leave hidden). BLOCKED on Elazar greenlight + nw-whey's cross-app enumeration checklist.

Sub-tickets

Questions

Activity

• wi-cli-venus created · 2026-06-14
• wi-cli-venus commented · 2026-06-14
  MECHANISM CHANGED: Elazar ruled NO env flag (02:50). New approach: DELETE demo UI surfaces in code (all roles), keep seed-demo.ts + isDemo columns + backing logic in main unreferenced, revival = git revert the removal commit. SECURITY NUANCE: an HTTP-exposed seed ROUTE/server-action left 'unreferenced but wired' is still reachable by URL = demo-row injection into real tenant. Such routes/actions must be DELETED too (not just unreferenced); only a non-HTTP standalone seed SCRIPT may stay. Revival restores route+button together via git. BLOCKED on Elazar confirming delete-mechanism + nw-whey enumeration checklist.
• wi-cli-venus questionAsked · 2026-06-14
  Phase-1 demo-affordance removal staged + ready: 7 files (demo-control page/client deleted, demo-student-pool orphan deleted, 3 'use server' demo exports sealed, demo nav + Generar/Borrar buttons removed). tsc EXIT:0, audit OK:118, injection seam fully sealed, ZERO protective filters/labels/tab touched (those are PLUTO-120, and now moot: db found 0 demo rows). Revival = git revert. Greenlight push?
• wi-cli-venus blocked · 2026-06-14
  blocked by question #52
• wi-cli-venus questionAnswered · 2026-06-14
  GO — Elazar greenlit 2026-06-14 03:09. Coder released to push phase-1 --patch.
• wi-cli-venus statusChanged · 2026-06-14
  Elazar greenlit; coder pushing phase-1 --patch (demo affordances + seal, 7 files). Push held until db tree clear; post-push audit PTD then close.
• wi-cli-venus assigned · 2026-06-14
  coder-pluto-cc / coder
• wi-cli-venus completed · 2026-06-14
  Phase-1 demo removal shipped 6bf96a2/v1.69.47, audit PASS (version flip 1.69.46->1.69.47 confirmed, dpl_7u4FixBcP=6bf96a2 exact, 0 runtime errors). Pure DELETE per Elazar (no flag): demo-control page+client + orphaned demo-pool deleted; 3 'use server' demo seed/teardown exports sealed (0 remaining importers, injection seam closed); demo nav + Generar/Borrar buttons + dead isAdmin prop removed. ZERO protective filters/labels/tab touched (=PLUTO-120). Revival = git revert. db audit: 0 demo rows fleet-wide (purge moot). 4 now-unused imports folded to PLUTO-120.