# Upload to a normal PHP web server

Phase X is deliberately a **zero-build** demo. It does not require Termux, Python, SQLite, Composer, npm, or an OpenAI API key.

## Fastest deployment

1. Upload `the_being_phase10_php_flatfile.zip` with your hosting file manager.
2. Extract it.
3. Move the **contents** of `the_being_phase10_php_flatfile/` into the directory you want to visit in the browser, or leave it in that subdirectory.
4. Visit `index.php` / the folder URL.
5. If the page says storage is not writable, use the file manager to give the `storage/` directory write permission for PHP (commonly 755 or 775 depending on the host).
6. Visit `health.php` if you want a quick diagnostic.

The flat-file state store is created automatically at:

`storage/state.json`

The app protects that directory with an Apache `.htaccess` file and a deny-all `index.php`. For a production deployment, the storage path should ideally live outside the public web root.

## PayPal.Me

Copy `config.local.example.php` to `config.local.php`, then set:

```php
'paypal_me_handle' => 'YOUR_HANDLE',
```

Do not add the full URL. The demo builds the payment handoff from the configured currency and Book price.

The current `Unlock for this demo` confirmation is deliberately not secure payment verification. It exists to test the reading/purchase flow.

## AI

No AI key is required for this release. The thought interpreter is deterministic so you can test the product without spending API credit.

The AI adapter boundary is already present in `providers/openai_adapter.php`. When the production provider layer is connected later, the secret must remain server-side and never be exposed in `assets/app.js`, HTML, or another browser-delivered file.
