…n bug

The gateway's config.yaml → env var bridge was missing docker_volumes,
so Docker volume mounts configured in config.yaml were ignored for
gateway sessions (Telegram, Discord, etc.) while working in CLI.

Also fixes list serialization: str() produces Python repr with single
quotes which json.loads() in terminal_tool.py can't parse. Now uses
json.dumps() for list values.

Based on PR #431 by @manuelschipper (applied manually due to stale branch).

…n bug

The gateway's config.yaml → env var bridge was missing docker_volumes,
so Docker volume mounts configured in config.yaml were ignored for
gateway sessions (Telegram, Discord, etc.) while working in CLI.

Also fixes list serialization: str() produces Python repr with single
quotes which json.loads() in terminal_tool.py can't parse. Now uses
json.dumps() for list values.

Based on PR NousResearch#431 by @manuelschipper (applied manually due to stale branch).

…n bug

The gateway's config.yaml → env var bridge was missing docker_volumes,
so Docker volume mounts configured in config.yaml were ignored for
gateway sessions (Telegram, Discord, etc.) while working in CLI.

Also fixes list serialization: str() produces Python repr with single
quotes which json.loads() in terminal_tool.py can't parse. Now uses
json.dumps() for list values.

Based on PR NousResearch#431 by @manuelschipper (applied manually due to stale branch).

…n bug

The gateway's config.yaml → env var bridge was missing docker_volumes,
so Docker volume mounts configured in config.yaml were ignored for
gateway sessions (Telegram, Discord, etc.) while working in CLI.

Also fixes list serialization: str() produces Python repr with single
quotes which json.loads() in terminal_tool.py can't parse. Now uses
json.dumps() for list values.

Based on PR NousResearch#431 by @manuelschipper (applied manually due to stale branch).

…irst-run wizard + mobile sidebar polish (#205)

Two deliverables — primary is the operator-onboarding wizard CC#2
flagged in #202 (paired with CC#1 NousResearch#431 per-tenant cost ladder + CC#3
NousResearch#430 Marvin runnable plugin for the pip-installable Kora bundle
vision), secondary is the small mobile-sidebar follow-on from #202.

A) KR-FE-OPERATOR-FIRST-RUN-WIZARD
   * 5-step wizard: Welcome+tenant / Anthropic / IsoKron+Slack /
     Tutorial probe / Promotion intro. First-run detection
     combines marker-file absence + audit-log emptiness → swaps
     "/" to render WizardPage instead of DashboardPage.
   * 6 BE endpoints, each ≤30 LoC of substantive logic:
     - GET  /api/wizard/state (resume + first-run signal)
     - POST /api/wizard/validate-anthropic (1-token test inference)
     - POST /api/wizard/validate-substrate (PostgREST ping)
     - POST /api/wizard/validate-slack (auth.test)
     - POST /api/wizard/trigger-tutorial-probe (synthetic wake)
     - POST /api/wizard/complete (marker write + tenant_id persist)
   * Marker file at $KORA_HOME/wizard_config.json. Operator can
     re-open the wizard anytime at /wizard URL.
   * tenant_id wired through every step + the .env download +
     the tutorial probe — NOT hardcoded "default" — feeds CC#1
     NousResearch#431's per-tenant cost-ladder foundation.
   * .env download flow: wizard NEVER mutates operator shell;
     surfaces downloadable .env operator copies to $KORA_HOME/.env
     then restarts Kora. Per the security posture: never modify
     operator env without explicit consent.
   * Validation badges (success / auth_failure / network_failure /
     timeout) render inline so operator knows immediately why a
     credential failed.
   * Drift-guards: _WIZARD_STEPS + _WIZARD_VALIDATION_RESULTS
     allowlists pinned across BE/FE/page.

B) KR-FE-SIDEBAR-MOBILE-COLLAPSE-UX (small follow-on to #202)
   * Collapse-all / Expand-all shortcut at the top of the sidebar
     (mobile + desktop). Label flips with state (allCollapsed →
     "Expand all"; otherwise "Collapse all"). Tappable on the
     375px mobile overlay.
   * useSidebarGroupCollapse hook extended with allCollapsed +
     setAll public surface methods backing the shortcut.
   * Badge overflow: formatBadgeCount caps display at "99+" so a
     long backlog can't break the narrow mobile chip. Numeric
     aria-label keeps the exact count for screen readers.

Tests: 52 new tests covering wizard endpoints (5 state behaviours,
4 validation paths, tutorial-probe audit emission, complete-flow,
2 drift-guards + 5 FE source-pins) + sidebar overflow + collapse-all
(5 pins). Full kora_cli regression: 0 new failures (76 vs 76 on
base via stash — pre-existing PTY / cron / panel-view / engine
failures unchanged).

Screenshots: web/docs/operator-first-run-wizard-and-sidebar-mobile-ux/
(5 wizard steps + before/after mobile sidebar).

Co-authored-by: CC#2 Kora Web <kora-pm@stormhavenenterprises.com>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

…n bug

The gateway's config.yaml → env var bridge was missing docker_volumes,
so Docker volume mounts configured in config.yaml were ignored for
gateway sessions (Telegram, Discord, etc.) while working in CLI.

Also fixes list serialization: str() produces Python repr with single
quotes which json.loads() in terminal_tool.py can't parse. Now uses
json.dumps() for list values.

Based on PR NousResearch#431 by @manuelschipper (applied manually due to stale branch).