fix(shell): pinned instances default to Build Corpora, not Record Collector's flow

Real bug on the live deploy, not hypothetical: every fresh sign-in at
augment.didi.sh landed on FLOWS[0] ('csvAugmentation' — Record
Collector's flow), whose remotes (recordCollector, recordDbResolver,
...) are deliberately unreachable on a humain-vc-pinned instance —
showing "remote exposes no mount function" as the very first thing a
new user saw after successfully signing in.

readStored() resolves at flows.svelte.ts's module-init time, before
workspace.list has ever resolved, so it can only ever fall back to
FLOWS[0] for a brand-new session — there was no way for it to know the
instance is pinned to humain-vc. Added activeFlow.applyPinnedDefault(),
called from a new $effect in App.svelte once workspace.pinned resolves
true; only overrides when the user has never made an explicit flow
choice (no localStorage key at all), and doesn't itself persist to
localStorage, so it stays a soft default rather than overriding a real
operator preference.

Files changed:
- shell/src/flows.svelte.ts
- shell/src/App.svelte

Author: mpstaton

shell/src/App.svelte

@@ -71,6 +71,18 @@
     workspace.didi_auth_mode === 'required' && !workspace.user?.didi_id,
   );
 
+  // A pinned (single-tenant) instance should default to Build Corpora, not
+  // FLOWS[0] (Improve a CSV — Record Collector's flow, whose remotes are
+  // deliberately unreachable on a humain-vc-pinned deploy). `pinned` only
+  // resolves after workspace.list, well after activeFlow's own module-init
+  // default was already chosen — this effect catches up once it's known.
+  // Real bug, not hypothetical: every fresh sign-in landed on Record
+  // Collector / DB Resolver first, both showing "remote exposes no mount
+  // function" on the deployed instance.
+  $effect(() => {
+    if (workspace.pinned) activeFlow.applyPinnedDefault();
+  });
+
   // ---- composite slots — active-member state ----------------------------
   // A composite slot hosts one-of-N remotes based on shared state. We
   // keep the active member id per composite as reactive state so the

shell/src/flows.svelte.ts

@@ -95,6 +95,26 @@ class ActiveFlowState {
     this.activeFlowId = id;
     if (typeof localStorage !== 'undefined') localStorage.setItem(STORAGE_KEY, id);
   }
+
+  /**
+   * Called once App.svelte learns the instance is pinned (workspace.pinned
+   * — a single-tenant deploy, per Build-Order Step 7). `readStored()` runs
+   * at module-init time, before workspace.list has resolved, so it can
+   * only ever fall back to FLOWS[0] ('csvAugmentation' — Record
+   * Collector's flow) for a brand-new session; on a humain-vc-pinned
+   * instance that flow's remotes are deliberately unreachable
+   * (client-side, real bug: every fresh sign-in landed there first).
+   * Only overrides when the user has never made an explicit choice
+   * (no localStorage key at all) — an operator who deliberately picked a
+   * different flow keeps that choice, and this never persists to
+   * localStorage itself, so it stays a soft default, not a hard commit.
+   */
+  applyPinnedDefault(): void {
+    if (typeof localStorage !== 'undefined' && localStorage.getItem(STORAGE_KEY) !== null) return;
+    if (this.activeFlowId === 'buildCorpora') return;
+    if (!FLOWS.some((f) => f.id === 'buildCorpora')) return;
+    this.activeFlowId = 'buildCorpora';
+  }
 }
 
 export const activeFlow = new ActiveFlowState();