fix(gitea-bot): add write:organization scope so bot can create repos

Without this the bot PAT 403s on POST /orgs/{org}/repos, which is
the single most important operation — creating new project repos
inside the workspace's Gitea org.

Made-with: Cursor

public/sw.js

@@ -1,38 +1,43 @@
-// VIBN Service Worker — enables PWA install + basic offline shell
+// VIBN Service Worker — PWA shell (production). Must always resolve respondWith to a Response.
 const CACHE = 'vibn-v1';
 
-// Cache the app shell on install
 self.addEventListener('install', (e) => {
   e.waitUntil(
-    caches.open(CACHE).then(cache =>
-      cache.addAll(['/', '/manifest.json'])
-    )
+    caches.open(CACHE).then((cache) => cache.addAll(['/', '/manifest.json']))
   );
   self.skipWaiting();
 });
 
 self.addEventListener('activate', () => self.clients.claim());
 
-// Network-first for API calls, cache-first for static assets
 self.addEventListener('fetch', (e) => {
   const { request } = e;
   const url = new URL(request.url);
 
-  // Never cache API calls
-  if (url.pathname.startsWith('/api/')) return;
+  // Let the browser handle Next.js RSC, Turbopack/HMR, and dev endpoints — do not intercept.
+  if (
+    url.pathname.startsWith('/_next/') ||
+    url.pathname.includes('__nextjs') ||
+    url.search.includes('_rsc=')
+  ) {
+    return;
+  }
+
+  if (url.pathname.startsWith('/api/')) {
+    return;
+  }
 
-  // Cache-first for static assets
   if (
     request.destination === 'image' ||
     request.destination === 'font' ||
     url.pathname.startsWith('/_next/static/')
   ) {
     e.respondWith(
-      caches.match(request).then(cached => {
+      caches.match(request).then((cached) => {
         if (cached) return cached;
-        return fetch(request).then(res => {
+        return fetch(request).then((res) => {
           const clone = res.clone();
-          caches.open(CACHE).then(c => c.put(request, clone));
+          caches.open(CACHE).then((c) => c.put(request, clone));
           return res;
         });
       })
@@ -40,8 +45,17 @@ self.addEventListener('fetch', (e) => {
     return;
   }
 
-  // Network-first for everything else (HTML pages)
+  // Network-first; cache fallback must be a real Response (undefined breaks FetchEvent).
   e.respondWith(
-    fetch(request).catch(() => caches.match(request))
+    fetch(request)
+      .catch(() => caches.match(request))
+      .then((cachedOrFailed) => {
+        if (cachedOrFailed instanceof Response) return cachedOrFailed;
+        return new Response('Offline', {
+          status: 503,
+          statusText: 'Service Unavailable',
+          headers: { 'Content-Type': 'text/plain' },
+        });
+      })
   );
 });