@aryacode/dsh-aryacode-polish 0.4.4 → 0.6.0

package/CHANGELOG.md

@@ -1,5 +1,61 @@
 # Changelog
 
+## [0.6.0] - 2026-10-28
+
+### Changed
+
+- **Adding a workspace moved into the Workspaces "+" menu.** A new switch
+  (`workspaceSources`) occupies `sidebar.workspaces.directoryFlow`, which is what
+  makes the Shell's **Add workspace…** row appear at all, and stands in for the
+  folder picker with the source menu the owner asked for: **On this PC** (a folder
+  browser driven by this bundle's own `api/polish.folders` route) and **GitHub
+  repository…** (the existing dialog). A finished clone hands its path to the
+  flow's `onPicked`, so the Shell creates the workspace exactly as it does for a
+  picked folder.
+
+### Added
+
+- The sidebar foot now carries the GitHub sign-in state next to the balance
+  (`GitHub · <login>` / `GitHub · signed out`); clicking it opens the repository
+  dialog. It replaced the foot's add-workspace row, which the "+" menu supersedes.
+
+### Fixed
+
+- "On this PC" lists folders instead of waiting on a chooser that cannot open. A
+  composed directory picker serves one capability, `browse` or `native`, and the
+  browser build composes the one with no chooser to show, so the previous
+  `directoryPicker.pick()` call simply never settled. The flow now walks folders
+  through its own route: roots, a `..` row for going back, directories only, and
+  hidden or system entries filtered out.
+
+## [0.5.0] - 2026-10-27
+
+### Added
+
+- **Add a workspace from GitHub.** A new switch (`githubWorkspace`) adds an
+  **Add workspace from GitHub** entry to the sidebar foot. It lists the
+  repositories the GitHub CLI session can clone, clones the chosen one into
+  `<home>\AryaCode\<owner>\<repo>`, and registers that folder as a workspace
+  through the same controller call the "+" menu uses. The token never reaches the
+  browser: the Host reads it with `gh auth token` and hands it to git as an
+  `http.extraHeader` in git's environment, so it stays out of the URL, the
+  command line, and any stored remote. See
+  [`docs/github-workspaces.md`](docs/github-workspaces.md).
+
+### Fixed
+
+- **A clone would have failed on a real machine.** `cloneRepo` spawned the
+  argument list without the `git` command name and passed the token as an option
+  the runner never read, so the clone carried no authentication at all. It now
+  spawns `git` with the token in `GIT_CONFIG_*`, which is what GitHub's git
+  server accepts, and `test/github.spec.mjs` pins the spawn shape.
+- **The signed-out reason told you nothing you could act on.** It now names the
+  command that fixes it (`gh auth login`).
+
+### Changed
+
+- `pnpm test` also runs `test/github.spec.mjs`; the suite is 87 tests.
+
 ## [0.4.4] - 2026-10-27
 
 ### Fixed
@@ -232,8 +288,8 @@
 
 ### Fixed
 
-- The pill's `≈` was stored as cp1252 mojibake (`≈`), so a real turn rendered
-  `≈$0.003` instead of `≈$0.003`. Same cause as the two strings repaired in
+- The pill's `≈` was stored as cp1252 mojibake (`≈`), so a real turn rendered
+  `≈$0.003` instead of `≈$0.003`. Same cause as the two strings repaired in
   0.2.1 — a PowerShell round-trip over the face source — and the last of that
   damage. Verified against a real turn in Dev AryaCode.
 

package/README.md

@@ -7,7 +7,7 @@ installed into and patches nothing. It is one package, one Plugins row, and one
 switch per feature, so a refinement that turns out to be wrong for a machine can
 be turned off without uninstalling anything.
 
-Status: **three features shipped.** The version is the package's, and the card
+Status: **five features shipped.** The version is the package's, and the card
 header already shows it.
 
 ## What it is
@@ -33,6 +33,8 @@ Configure page automatically.
 | **Estimated session cost** (`sessionCost`) | On | A `≈$0.39` pill in the composer dock that opens a breakdown card — cache hit, uncached input, cached input, output, requests, and the estimate — priced from the session's recorded usage at the published DeepSeek rates. |
 | **Account balance** (`accountBalance`) | On | The account's remaining wallet (`$17.33`) in the sidebar foot, above the account row. Renders nothing when the Host exposes no wallet, so it never shows a number nobody gave it. |
 | **Open workspace folder** (`openWorkspaceFolder`) | On | An **Open workspace folder** row in a Session's "…" menu that opens the Session's workspace in Explorer/Finder. Renders nothing when the Session has no workspace or the Host cannot open a path. See [Open a workspace folder](docs/workspace-folder.md) for why the request had to land here instead of on the workspace row itself. |
+| **Add a workspace from GitHub** (`githubWorkspace`) | On | Adds the GitHub half of the workspace sources: the dialog lists the repositories your GitHub CLI session can clone, and cloning one creates the workspace. The token never enters the browser — it is read on the Host, used only as git's http auth header, and never stored. The sidebar foot carries the sign-in state (`GitHub · <login>`). See [GitHub workspaces](docs/github-workspaces.md). |
+| **Add a workspace from this PC or GitHub** (`workspaceSources`) | On | The Workspaces **+** button gets a source menu: **On this PC** (the Host's OS chooser, or a folder list when the composition has no native chooser) and **GitHub repository…**. Off, the **+** button goes back to the shipped folder picker. |
 
 ### How the cost is computed
 
@@ -122,6 +124,7 @@ entries/polish.js    the row: Config derived from the registry, apply()
 entries/registry.js  the feature list — the one place a feature is declared
 entries/usage.js     the fold: model-attributed usage out of the session log
 entries/cost.js      the polishCost projection: rates, pricing, host mount
+entries/github.js    the GitHub route: gh token, repository list, clone, workspace
 entries/config.js    volatile-reference accessors (resolve/flag/list/text)
 lib/index.js         mount point re-exporting the row
 client/face.js       browser face source: the Configure page and every surface