refactor: move source tree into work/, multi-stage Docker build, fix satpass

- Move all application source (meshai/, dashboard-frontend/, tests/,
  config/, docs/, Dockerfile, etc.) into work/ directory
- Add Node.js multi-stage build to Dockerfile for frontend compilation;
  remove compiled static assets from git tracking
- Fix satpass missing time windows: consolidation was splitting wire on
  newline and only putting line 1 in event.title, dropping the time
  window line that the composer uses for precomposed broadcasts
- Fix satpass burst flooding: stagger consolidation timers (+60s per
  pending pass) so Central batch publishes don't blast the mesh
- Update CI workflow build context to work/
- Anchor lib/ and data/ gitignore patterns to repo root to prevent
  false matches on nested directories
- Add dashboard-frontend/node_modules/ to .dockerignore

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

work/tests/test_central_consumer.py

@@ -0,0 +1,221 @@
+"""v0.4 C.1: Central connector backend — normalization, lifecycle, source gate."""
+
+import asyncio
+import json
+
+import pytest
+
+from meshai.config import EnvironmentalConfig
+from meshai.central.consumer import CentralConsumer, map_category, map_severity
+from meshai.notifications.pipeline.bus import EventBus
+
+pytestmark = pytest.mark.skip(
+    reason="v0.5.13 default-deny: consumer-level tests assumed envelopes without a handler-synthesized wire still emit an Event with title fallback. New architecture (test_consumer_default_deny.py) verifies the inverse: default-deny when no handler synthesized. v0.6 will rebuild source-remap tests.")
+
+
+
+def make_consumer():
+    env = EnvironmentalConfig()
+    bus = EventBus()
+    rec = []
+    bus.subscribe(rec.append)
+    return CentralConsumer(env, bus), env, rec
+
+
+def envelope(adapter="usgs_quake", category="quake.event", severity=2,
+             eid="us6000abcd", centroid=(-114.5, 42.6), upstream=None,
+             time="2026-05-27T12:00:00Z", expires=None):
+    return {
+        "id": eid, "source": "central.echo6.co",
+        "type": f"central.{category}.v1", "time": time,
+        "centralcategory": category, "centralseverity": severity,
+        "specversion": "1.0", "datacontenttype": "application/json",
+        "data": {
+            "id": eid, "adapter": adapter, "category": category,
+            "time": time, "expires": expires, "severity": severity,
+            "geo": {"centroid": list(centroid), "bbox": None,
+                    "regions": ["US-ID"], "primary_region": "US-ID"},
+            "data": upstream if upstream is not None else {"magnitude": 4.2, "place": "near Twin Falls"},
+        },
+    }
+
+
+class FakeMsg:
+    def __init__(self, subject, env):
+        self.subject = subject
+        self.data = json.dumps(env).encode()
+        self.acked = False
+
+    async def ack(self):
+        self.acked = True
+
+
+# ---- subject derivation / source gate ----
+
+def test_no_subjects_when_all_native():
+    c, env, rec = make_consumer()
+    assert c.subjects() == []
+
+
+def test_subjects_when_central():
+    # v0.5.4: assert the legacy bare-wildcard form by clearing region.
+    # Region-aware subject shapes are covered by test_central_region_routing.py.
+    c, env, rec = make_consumer()
+    env.central.region = ""
+    env.usgs_quake.feed_source = "central"
+    assert "central.quake.>" in c.subjects()
+
+
+def test_source_central_skips_native_instantiation():
+    from meshai.env.store import EnvironmentalStore
+    env = EnvironmentalConfig()
+    env.enabled = True
+    env.usgs_quake.enabled = True
+    env.usgs_quake.feed_source = "central"   # should be skipped natively
+    env.nws.enabled = True              # native -> present
+    store = EnvironmentalStore(config=env, region_anchors=[], event_bus=None)
+    assert "usgs_quake" not in store._adapters
+    assert "nws" in store._adapters
+
+
+# ---- normalization ----
+
+def test_normalize_and_emit():
+    c, env, rec = make_consumer()
+    ev = c._handle("central.quake.event.moderate", json.dumps(envelope()).encode())
+    assert ev is not None
+    assert len(rec) == 1
+    e = rec[0]
+    assert e.source == "usgs_quake"
+    assert e.category == "earthquake_event"
+    assert e.severity == "priority"            # central severity 2
+    assert e.lat == 42.6 and e.lon == -114.5   # [lon,lat] -> (lat,lon)
+    assert e.group_key == "us6000abcd"
+    assert e.region == "US-ID"
+    assert e.data.get("magnitude") == 4.2      # upstream preserved verbatim
+
+
+def test_enriched_preserved_verbatim():
+    c, env, rec = make_consumer()
+    up = {"magnitude": 5.1, "_enriched": {"geocoder": {"state": "Idaho"}, "usgs_stats": {"x": 1}}}
+    ev = c._handle("central.quake.event.strong", json.dumps(envelope(severity=4, upstream=up)).encode())
+    assert ev.severity == "immediate"
+    assert ev.data["_enriched"]["geocoder"]["state"] == "Idaho"
+    assert ev.data["_enriched"]["usgs_stats"] == {"x": 1}
+
+
+def test_tombstone_translates_to_clear():
+    c, env, rec = make_consumer()
+    msg = envelope(adapter="gdacs", category="disaster.fl.removed", severity=0, eid="FL1103885:removed")
+    ev = c._handle("central.disaster.fl.removed.austria", json.dumps(msg).encode())
+    assert ev is not None
+    assert ev.group_key == "FL1103885"          # ':removed' stripped -> matches original
+    assert ev.data.get("_central_tombstone") is True
+
+
+def test_severity_mapping():
+    assert map_severity(0) == "routine"
+    assert map_severity(1) == "routine"
+    assert map_severity(2) == "priority"
+    assert map_severity(3) == "immediate"
+    assert map_severity(4) == "immediate"
+    assert map_severity(None) == "routine"
+
+
+def test_category_mapping():
+    assert map_category("wx.alert.severe_thunderstorm_warning") == "weather_warning"
+    assert map_category("quake.event") == "earthquake_event"
+    assert map_category("fire.hotspot.viirs_noaa20.high") == "wildfire_hotspot"
+    assert map_category("hydro.00060.usgs.06901250") == "stream_flow"
+
+
+# ---- async callback path ----
+
+def test_on_message_emits_and_acks():
+    c, env, rec = make_consumer()
+    msg = FakeMsg("central.quake.event.moderate", envelope())
+    asyncio.run(c._on_message(msg))
+    assert msg.acked is True
+    assert len(rec) == 1
+
+
+def test_start_no_op_when_all_native():
+    """start() is a no-op (no NATS connect) when no adapter is central."""
+    c, env, rec = make_consumer()
+    asyncio.run(c.start())   # must not raise / must not require NATS
+    assert c._nc is None
+
+
+def test_consumer_config_uses_deliver_policy_new():
+    """C.3.1: Central subscriptions use deliver_policy=NEW (no full-backlog replay)."""
+    from meshai.central.consumer import consumer_config
+    from nats.js.api import DeliverPolicy
+    assert consumer_config().deliver_policy == DeliverPolicy.NEW
+
+
+def test_subject_domain_fallback_for_unmapped_category():
+    """D.1: an unmapped category falls back to the subject domain instead
+    of returning 'other'.
+
+    v0.5.7-traffic note: 'work_zone.wzdx' is now MAPPED (-> 'work_zone'),
+    so we use a genuinely-unmapped category string here to exercise the
+    fallback path. The subject-domain fallback for central.traffic.* is
+    still 'traffic_congestion'.
+    """
+    import json
+    from meshai.central.consumer import CentralConsumer, category_from_subject
+    from meshai.config import EnvironmentalConfig
+    from meshai.notifications.pipeline.bus import EventBus
+    assert category_from_subject("central.traffic.work_zone.ok") == "traffic_congestion"
+    rec = []
+    bus = EventBus(); bus.subscribe(rec.append)
+    c = CentralConsumer(EnvironmentalConfig(), bus)
+    env = {"id": "wz1", "data": {"id": "wz1", "adapter": "wzdx",
+           "category": "telematics.unknown_thing", "time": "2026-05-28T00:00:00Z", "severity": 1,
+           "geo": {"centroid": [-96.2, 36.15], "primary_region": "US-OK", "regions": ["US-OK"]},
+           "data": {"road": "I-44"}}}
+    ev = c._handle("central.traffic.work_zone.ok", json.dumps(env).encode())
+    assert ev is not None and ev.category == "traffic_congestion"
+
+
+def test_v057_traffic_work_zone_now_mapped():
+    """v0.5.7-traffic: 'work_zone.wzdx' maps to the new 'work_zone' meshai
+    category (not flattened to traffic_congestion)."""
+    import json
+    from meshai.central.consumer import CentralConsumer
+    from meshai.config import EnvironmentalConfig
+    from meshai.notifications.pipeline.bus import EventBus
+    rec = []
+    bus = EventBus(); bus.subscribe(rec.append)
+    c = CentralConsumer(EnvironmentalConfig(), bus)
+    env = {"id": "wz2", "data": {"id": "wz2", "adapter": "wzdx",
+           "category": "work_zone.wzdx", "time": "2026-05-28T00:00:00Z", "severity": 1,
+           "geo": {"centroid": [-114.0, 42.0], "primary_region": "US-ID", "regions": ["US-ID"]},
+           "data": {"road": "I-84"}}}
+    ev = c._handle("central.traffic.work_zone.id", json.dumps(env).encode())
+    assert ev is not None and ev.category == "work_zone"
+
+
+@pytest.mark.parametrize("adapter,expected", [
+    ("wfigs_incidents", "fires"),
+    ("nwis", "usgs"),
+    ("swpc_alerts", "swpc"),
+    ("wzdx", "traffic"),
+    ("nws", "nws"),                       # 1:1 passthrough
+    ("experimental_foo", "experimental_foo"),  # unknown -> passthrough
+])
+def test_central_adapter_source_remap(adapter, expected):
+    """D.2: Central adapter names map to meshai source names (unknown passes through)."""
+    import json
+    from meshai.central.consumer import CentralConsumer
+    from meshai.config import EnvironmentalConfig
+    from meshai.notifications.pipeline.bus import EventBus
+    rec = []
+    bus = EventBus(); bus.subscribe(rec.append)
+    c = CentralConsumer(EnvironmentalConfig(), bus)
+    env = {"id": "e1", "data": {"id": "e1", "adapter": adapter, "category": "wx.alert.x",
+           "time": "2026-05-28T00:00:00Z", "severity": 1,
+           "geo": {"centroid": [-114.0, 42.0], "primary_region": "US-ID", "regions": ["US-ID"]},
+           "data": {}}}
+    ev = c._handle("central.wx.alert.x", json.dumps(env).encode())
+    assert ev is not None and ev.source == expected