@ashlr/hub 3.11.3 → 3.12.0

package/CHANGELOG.md

@@ -339,6 +339,110 @@ superseded, not a setup procedure. Use [runtime activation authority](docs/RUNTI
 and the [current architecture boundary](docs/ARCHITECTURE.md#legacy-fleet-activation-boundary).
 Neither the historical record nor a successful test activates a resident fleet.
 
+## [3.12.0] — 2026-09-26 UTC — your key is the trust root, and Verse says one clear next step
+
+**Your custody key is compiled in.** `src/core/authority/trust-roots.ts` now carries Mason's Secure Enclave key
+`se-p256-9c1330e3bd72cf3e` (#506, opened by `ashlr authority setup`), so a Touch ID–signed standing grant verifies on
+this build. Resident activation stays blocked in this release (see `ashlr authority setup`); the resident runtime,
+the host-verified `ashlr/verify` check and cloud-PR intake are the 3.13 work.
+
+The 3.11.5 package already contained the changes below; its notes described only the account-freshness repair. They
+are recorded here. 3.11.4 shipped a crash — Command and Fleet failed to load in the browser because a shared secret
+scrubber read `process.platform` at import time — fixed in #498 (and in 3.11.5). A new test walks everything the
+web UI loads and fails on any Node-only global touched at import.
+
+### Autonomy is off → one clear next step
+
+- Command, Fleet, Growth and Mind no longer show grids of empty cards while the fleet is dormant. One shared
+  "Autonomy is off" state says what is off and offers the single next action: **Approve grant** (opens the Touch ID
+  sheet) or the exact setup command with Copy (#490).
+- `ashlr authority setup --dry-run --json` prints the setup checklist for a UI: each step's status and what it
+  needs from you (sudo, Touch ID, browser, GitHub, terminal) (#492).
+- `ashlr authority setup` is safer to rerun: it finds a trust-root PR it already opened (or a key already merged),
+  creates the canary repo before protecting it, and ends with the daemon service's real launchd state (#492).
+- ⌘K gains the actions that matter: Autonomy Off / Propose / Autonomous, Approve grant…, Budget mode, Copy the
+  setup command, Run in cloud… — all through the same guarded paths as the Command bar (#494).
+
+### A calmer Command
+
+- One compact **Seats** strip replaces the tall burn-down cards; the full charts moved to Usage → Seat windows.
+  Seat status comes from the same model as the rail, and says "Status unknown" when sources disagree (#493).
+- The grid no longer leaves half-empty rows at medium widths; card menus sit in the card header (#493).
+- The first-run tour is a one-line "Getting started" chip, with a new "Turn on autonomy" step (#494).
+- About 85 strings rewritten: plain facts instead of defensive "X, not Y" sentences; route paths moved out of error
+  copy into a details disclosure; the double-period bug fixed (#489).
+
+### Accurate numbers
+
+- Charts keep their size at any window width: line, bar and burn-down charts measure their container and draw at a
+  fixed pixel height with 12 px labels (the 1900 px tokens chart used to stand 573 px tall) (#497).
+- Days are local: usage rollups, fleet history and "dark since" bucket by your local day, not UTC (#497).
+- Claude usage is no longer double-counted (one transcript line per content block repeated the full usage); this
+  also corrects the Claude capacity reader that feeds the budget gate (#498).
+- Local Ollama `name:tag` models cost $0 (#498). One context-window unit everywhere (64k, not 66k) and clean model
+  names ("gpt-oss 20B", "Qwen3.8 27B (64k)") (#500).
+- The cloud lane says "Not set up · ~$250 credits (estimate)" instead of showing unspent credits as live headroom (#500).
+- The rail tooltip says "resets" once (#495).
+
+### Fleet engine
+
+- The runtime probe no longer blocks the event loop: no `which llama-server` per poll, and `ps` output is parsed in
+  yielding slices (#481).
+- Adopted harness effort and sampling now reach every engine at dispatch (Claude `--effort` only on builds that accept
+  it) (#484). The seat router uses its λ cost/headroom/latency weights; default weights reproduce the previous order
+  exactly (#486).
+
+### Operations
+
+- Comms: requests older than 48 h (`comms.requestTtlHours`) expire, so one unanswered Telegram question no longer
+  blocks every later message and fails the nightly oversight job (#492).
+- `/api/verse/apps` is warmed at `ashlr verse` start; ⌘. during a running turn only stops the turn (#498, #500).
+- Test flakes fixed: fleet-live "mergedToday" near midnight, m142 under parallel load (#500).
+
+### Faster first paint
+
+- Chat's first-paint JavaScript fell from 351.8 KB to 333.1 KB under the unchanged 352 KB budget: the shell's
+  first-paint code ships as one chunk, and the ⌘K catalog, onboarding flow and delete dialog load on demand (#502).
+
+Released with `npm run gate -- --base v3.11.5`: build, typechecks, eslint, real-io lane, docs, first-paint and web tests
+passed; the backend run (757 files, 17,896/17,995 tests) failed 14 files on a machine at load ~200. Rerun alone with
+longer timeouts, 12 pass; `universe-hub-marker-campaign` and `universe-capacity-wait-integration` fail the same way on
+v3.11.5 and are pre-existing.
+
+## [3.11.5] — 2026-09-26 UTC — keep account evidence honest through probe faults
+
+- Keep a verified account's last observed usage visible only for its original
+  freshness window when a native metadata probe fails. Show that the new check
+  failed and withhold usable/autonomous status until a fresh probe succeeds.
+- Expire retained readings at their original deadline and withdraw them on
+  account identity changes, sign-out or uncertain native process cleanup.
+- Treat individually expired shared readings and operator baselines as
+  historical evidence. Account cards and seat summaries no longer turn saved
+  credits or old percentages into a current access claim.
+- Start each nonoverlapping account probe cycle from its previous start time,
+  reducing false gaps in healthy Codex readings during slow provider checks.
+- Expire Claude and Grok readings between probes as well. Label retained
+  windows and credits as prior reports in the account card and detail view,
+  including accessible meter descriptions.
+- Honor local and shared collector denial signals while retaining unexpired
+  quota flags for context. Unknown or denied account evidence cannot become
+  autonomous routing headroom, even when a prior percentage is visible.
+
+## [3.11.4] — 2026-09-26 UTC — verify cloud deliveries before showing them
+
+- Cloud tracking binds a delivery to the requested repository, base, head and
+  exact pull-request identity. Ambiguous, changed or unavailable GitHub evidence
+  removes a previously shown PR from Needs you until it can be verified again.
+  A verified closed PR is watched for a bounded period so reopening it restores
+  Needs you. Bounded polling shares attention across tasks so old work is not starved.
+- The latest tagged cloud report is authoritative. A newer malformed, oversized
+  or unfinished revision withdraws the older report. Command and Needs you label
+  session-authored summaries as unverified claims.
+- Chat shortcut hints use the shared command catalog, displaying Ctrl on
+  Windows/Linux and Command on macOS.
+- The public site and guides distinguish the working cloud lane from the dormant
+  resident fleet, and update the measured first-paint result to 349.7 KB.
+
 ## [3.11.3] — 2026-09-25 UTC — ship:local installs the app icon too
 
 - `npm run ship:local -- --native` now also installs a newer `desktop/src-tauri/icons/icon.icns` into Ashlr.app. It

package/README.md

@@ -166,26 +166,35 @@ ID).
    turns to it. Model discovery stays on Ollama.
 6. **Optionally hand work to the cloud.** **New cloud task** on Command, or
    `ashlr cloud launch "<task>" --repo owner/name` ([cloud lane](#the-cloud-lane)).
-7. **Optionally turn on autonomy** with the one-time setup below.
+7. **Inspect autonomy preparation** with `ashlr authority setup --dry-run --json`
+   and `ashlr authority status`. Guided setup can prepare prerequisites after
+   your explicit actions; this build cannot activate resident fleet work.
 
 ---
 
-## Turn on autonomy: the one-time `ashlr authority setup`
+## Autonomy commissioning path (currently unavailable)
 
-Autonomy ships **dormant**. Nothing merges, and no standing grant exists, until
-you run the guided setup once on your Mac. Until a grant is signed, live fleet
-ticks refuse: the compiled daemon and conductor trust roots are empty, and a
-signed standing grant is the only other way a tick is admitted. The dry run
-still works.
+**Current release status:** `ashlr authority setup` is a resumable preparation
+workflow. Its dry run is read-only; a live run can create custody, GitHub and
+grant state after your explicit actions. It never installs or restarts the
+daemon. Service install, repair and restart authority is withheld, compiled
+daemon and conductor trust roots are empty, and the native resident-start broker
+is absent. Non-dry resident work remains dormant. The setup checklist reports
+this runtime block even if every preparatory step is complete.
+
+Autonomy ships **dormant**. Guided setup can help prepare a standing grant, but
+that grant alone does not admit resident activation. The compiled execution
+roots and native release boundary must be provisioned through reviewed releases.
 
 ```sh
 ashlr authority setup --dry-run   # print every step and what it would do
-ashlr authority setup             # do them, pausing only where you must act
+ashlr authority setup --dry-run --json  # machine-readable checklist and runtime block
+# ashlr authority setup           # live preparatory steps require your explicit actions
 ashlr authority status            # grant, switch, Stop, rollout stage, ledger, custody
 ```
 
-`setup` performs each step it can and **pauses only for the steps marked ✋**,
-which no agent may do. It prints exactly what it did and can be re-run safely.
+`setup` performs each available step and pauses for the steps marked ✋. It
+cannot complete resident commissioning in the current build.
 
 1. ✋ **Install the custody helper:** `sudo scripts/install-custody.sh`
    (root-owned, in `/usr/local/libexec/`).
@@ -210,8 +219,8 @@ which no agent may do. It prints exactly what it did and can be re-run safely.
 10. ✋ **Sign the first grant** (Touch ID) and, optionally, set the switch to
     Autonomous. The grant starts on the shadow stage of its rollout ladder.
 
-After that, the only recurring step is one Touch ID every 30 days, or after a
-deploy that changes authority code.
+After a future reviewed resident activation release, standing grants require
+Touch ID reapproval every 30 days or after authority code changes.
 
 **What a grant allows.** A standing grant names the repositories, engines, risk
 and size caps, spend ceiling and Leader classes, and is valid for at most 30
@@ -237,12 +246,28 @@ Your own chats ignore reserves.
 
 ## Resources, on every page
 
-Press **⌘.** (or click the tab on the right edge, or run "Show resources" from ⌘K) to open the Resources drawer:
+Press **⌘.** (or click the tab on the right edge, or run "Open Resources" from ⌘K) to open the Resources drawer:
 every Claude, Codex and Grok account with its live 5-hour and weekly windows, the share kept for you, reset times
 and Reconnect / Check again; your local models with runtime state and context windows; and your cloud credits.
 It opens over your work or pins as a column beside it, and a dot on the edge tab tells you at a glance whether
 everything is usable.
 
+Without opening anything, the **resource bar** in the rail foot keeps every resource in view. It shows one battery
+per account with how much of its window is left, plus your local models and your cloud credits. Each row carries
+the provider's own mark: Anthropic's Claude, OpenAI, xAI's Grok or Ollama. Hover a row for every window, its reset
+and the share kept for you, or click it to open the drawer. **Hide resource bar** is in the drawer's footer and in
+⌘K.
+
+## Working on Verse itself
+
+```sh
+npm run gate          # minutes, not half an hour: static checks + the tests your change can reach
+npm run ship:local    # build, install as your CLI, update Ashlr.app (--native: shell + icon), restart, verify
+```
+
+Then `npm publish` the tarball `ship:local` prints. `npm run gate:full` runs every suite. See
+[`docs/RELEASING-LOCALLY.md`](https://github.com/ashlrai/ashlr-hub/blob/master/docs/RELEASING-LOCALLY.md).
+
 ## The cloud lane
 
 New in 3.11. Verse can start **Claude Code cloud sessions** (claude.ai/code) and
@@ -254,10 +279,11 @@ credits, so they keep working after the subscription window is spent.
   also work through its own improvement backlog: **Improve Verse** launches the
   next item now, and with self-improvement on the server launches at most 4 a
   day on its own.
-- **Every task delivers to GitHub.** Verse cannot read a session back, so each
-  task pushes the branch `ashlr-cloud/<taskId>` and opens a **draft** PR with a
-  report block. Verse follows it with `gh` and lists it in Needs you when the PR
-  is open. **Nothing in the lane merges.**
+- **Each task is instructed to deliver to GitHub.** Verse cannot read a session
+  back, so it asks the session to push `ashlr-cloud/<taskId>` and open a **draft**
+  PR with a report block. Verse follows a matching PR with `gh` and lists it in
+  Needs you when open. Failed launches and missing PRs remain separate states.
+  **Nothing in the lane merges.**
 - **Spend is an estimate, and is labelled as one.** Claude does not expose the
   credit balance. Verse counts $3 per launched session against $250 by default,
   and you correct it after checking
@@ -953,7 +979,7 @@ preflight soft-warns *consider locus.firm for production* (non-blocking).
 | **3.5–3.8** | Ashlr Verse — the operator console, local seats on llama.cpp, a native folder picker, bounded run windows, local-only that actually prevents spend | Shipped |
 | **3.9** | Context — windows read from each CLI, visible compaction, standard and expansive modes, continue in a fresh chat, shared project memory | Shipped |
 | **3.10** | Autonomy with custody and the workbench — Touch ID grants, budget modes, the Leader, five surfaces, ⌘K and ⌘J, the dock, live reasoning, charts, burn-down history | Shipped |
-| **3.11** | The cloud lane — Claude Code cloud sessions on Claude credits, with an estimated budget and self-improvement — and the Resources drawer (⌘.) | Current |
+| **3.11** | The cloud lane: Claude Code cloud sessions on Claude credits, with an estimated budget and self-improvement. Also the Resources drawer (⌘.) and the always-on resource bar, provider logos, the Ashlr.AI mark, a 349 KB first paint, and `npm run gate` / `npm run ship:local` | 3.11.5 source; verify npm publication separately |
 
 Releases are built and published locally (GitHub Actions is off); the procedure
 is in [Releasing without CI](https://github.com/ashlrai/ashlr-hub/blob/master/docs/RELEASING-LOCALLY.md).

package/dist/authority-surface.json

@@ -126,8 +126,8 @@
     },
     {
       "path": "dist/core/authority/trust-roots.js",
-      "sha256": "7ff5ca2601de703ea78bbbfbd27689ea78c54be2384537897acd7cf48f6e05c4",
-      "bytes": 466
+      "sha256": "96d0bdba94eede3935111e3afc8d6386d939114debb4cd246e99b0e4a8df8242",
+      "bytes": 768
     },
     {
       "path": "dist/core/authority/types.js",
@@ -211,13 +211,13 @@
     },
     {
       "path": "dist/core/cloud/cloud-api.js",
-      "sha256": "f56466058c2a932af45349b2fe9d137b97e2466bea4897d271c84607c8e3cab0",
-      "bytes": 25620
+      "sha256": "5dbe8640930d6f8c81d9baafe62d15247f9b99db905e533ba5da3e62e678ce07",
+      "bytes": 25661
     },
     {
       "path": "dist/core/cloud/delivery-contract.js",
-      "sha256": "ea8bb76f0cb6b6731ebe1245291a3191670bdf9a8b0963ec2060b3141d8f9e2f",
-      "bytes": 6714
+      "sha256": "eb29a6035079d1eafc9a55b032a314a1cec320201e471095a509bf2a9137644a",
+      "bytes": 7014
     },
     {
       "path": "dist/core/cloud/improvement-backlog.js",
@@ -236,13 +236,13 @@
     },
     {
       "path": "dist/core/cloud/store.js",
-      "sha256": "fc56141115fbae8b3215d4fa944a572076e18a8030a619fe0d7e15f94632b307",
-      "bytes": 13524
+      "sha256": "9693dbf79a420cbeceed0f65eadfebce739178ee8132d951ae73e799557d7f9e",
+      "bytes": 13916
     },
     {
       "path": "dist/core/cloud/tracker.js",
-      "sha256": "a076198b200de95872a812d39fd10804a8bced2756a7bd382e5eec24c98a4b03",
-      "bytes": 6969
+      "sha256": "ed69dbec010d931e3f39f3abd73032c3ca882da44993bc99609b950028a94bbf",
+      "bytes": 12760
     },
     {
       "path": "dist/core/cloud/types.js",
@@ -271,8 +271,8 @@
     },
     {
       "path": "dist/core/comms/requests.js",
-      "sha256": "77f1bac024649573f874b7a4804490b40b1d0cda81e8700276b9bc7e48545eb9",
-      "bytes": 5579
+      "sha256": "c115871831ef3a7a83bef595959037144ac86195d34c1e01c0cffcd6f292237d",
+      "bytes": 7714
     },
     {
       "path": "dist/core/config.js",
@@ -326,8 +326,8 @@
     },
     {
       "path": "dist/core/daemon/loop.js",
-      "sha256": "9585699dbc0eb54030131b514a937a81c63a63e9a11cab807ce6d9cb7b3a3a3c",
-      "bytes": 489867
+      "sha256": "2b5410f10fdd697e1dab192c3eede9ebfbcb4b178c5c567d1d491fd5a3278543",
+      "bytes": 491464
     },
     {
       "path": "dist/core/daemon/overnight-status.js",
@@ -516,8 +516,8 @@
     },
     {
       "path": "dist/core/fabric/claude-usage.js",
-      "sha256": "a4347ce1f8ffe3930b99de1ee59fbe4a8053b2096bbd52e8a9736c63f9a4a9ae",
-      "bytes": 20098
+      "sha256": "31808151f346571a247b5f3993546a6adcf7bbba97e8fa7bda0731ae51a2e3c0",
+      "bytes": 21355
     },
     {
       "path": "dist/core/fabric/concurrent-dispatch.js",
@@ -671,8 +671,8 @@
     },
     {
       "path": "dist/core/fleet/dispatch-router.js",
-      "sha256": "961db160fa43dfc9d42bac0580f784b38e05da1c1c838dfd00c74f7c373747ea",
-      "bytes": 31152
+      "sha256": "b429b31ea773b5e0dab7b86254f263cc25b4067549a1215c33710a1cef5c48c7",
+      "bytes": 31223
     },
     {
       "path": "dist/core/fleet/engine-readiness.js",
@@ -1016,8 +1016,8 @@
     },
     {
       "path": "dist/core/fleet/tick-hooks-live.js",
-      "sha256": "fca470f6e8da115f7168ecc49cd06c31317b0a3ea0ccbb53405821b1dceacf8c",
-      "bytes": 88862
+      "sha256": "c47026f6d148f8fca585273bb1e7d161c40cff5bc5c591d9bc75202d6f9f3b2d",
+      "bytes": 89482
     },
     {
       "path": "dist/core/fleet/verdict-score.js",
@@ -1361,8 +1361,8 @@
     },
     {
       "path": "dist/core/local-runtime/llama/config.js",
-      "sha256": "9d46c1d01c3140b36dc7ab373a52367f597f3af57dfa87c51e90c842e758c3d8",
-      "bytes": 24801
+      "sha256": "974be7540d5d0d0e338a03cb43133ee20b1f50f67144ba9a90be17cacf778d9d",
+      "bytes": 25710
     },
     {
       "path": "dist/core/local-runtime/llama/health.js",
@@ -1391,8 +1391,8 @@
     },
     {
       "path": "dist/core/local-runtime/llama/process.js",
-      "sha256": "f1c0d1cfde0bee1fe5b44b15e9a92c3b97357642807e57df7a5ccfa6bec1b45f",
-      "bytes": 15311
+      "sha256": "574c40f8a3c5b2a90607120124316377a1edb3e4c44236f5da1e2d4df648e3be",
+      "bytes": 17396
     },
     {
       "path": "dist/core/local-runtime/llama/proxy-invocation.js",
@@ -1411,8 +1411,8 @@
     },
     {
       "path": "dist/core/local-runtime/llama/supervisor.js",
-      "sha256": "87458868246eba0b11ce6ad5b43cb46c1df8170674b57eb62518c65d1789dbe0",
-      "bytes": 23843
+      "sha256": "0fedcff07ea6a15395ea24f1b73433b98b8e2a713b080764423b2d4dd65f9a1a",
+      "bytes": 24352
     },
     {
       "path": "dist/core/mcp-argv-safety.js",
@@ -1481,8 +1481,8 @@
     },
     {
       "path": "dist/core/observability/rollup.js",
-      "sha256": "d316b4c6d891d4192b9924ace56d820b3607024b5836babaa12e78fef0c53b83",
-      "bytes": 27788
+      "sha256": "f47c13f460eff0007b4e757468eb2f2cccaaee0e0bbbc8c4848552512948a2ee",
+      "bytes": 29489
     },
     {
       "path": "dist/core/observability/telemetry-sink.js",
@@ -1491,8 +1491,8 @@
     },
     {
       "path": "dist/core/observability/usage-source.js",
-      "sha256": "f780ea8c594aa81a20d1b5476e01f0c2e0f8f5e24885f801aae2171c64f65d07",
-      "bytes": 12319
+      "sha256": "8e924a1424ac91d18f0cee555534109e4fdbe2e3203b5d61c2e286df9e0cbde2",
+      "bytes": 14481
     },
     {
       "path": "dist/core/orient.js",
@@ -1656,8 +1656,8 @@
     },
     {
       "path": "dist/core/resources/connection-monitor.js",
-      "sha256": "0817cf16c98570aaa57be08d5e04dd0e27b5a913adb2e0095da39cc39b73183c",
-      "bytes": 12118
+      "sha256": "9ae0d1d0ce1926b11bafa55babf376625f3751b9dfdc6e64914069c1ac31fb22",
+      "bytes": 15047
     },
     {
       "path": "dist/core/resources/grok-account-probe.js",
@@ -1786,8 +1786,8 @@
     },
     {
       "path": "dist/core/routing/headroom.js",
-      "sha256": "6ebf7b8492f7c1c3d836119bcc788bc7a906e7eff29cd4c1e513b8157b21bb3c",
-      "bytes": 15856
+      "sha256": "500b93cd3f5d08d8f258c3e29d7b904722fb55c85f337872c84e2eaec4ba6348",
+      "bytes": 16200
     },
     {
       "path": "dist/core/routing/policy.js",
@@ -1796,8 +1796,8 @@
     },
     {
       "path": "dist/core/routing/router.js",
-      "sha256": "d423745cce6d0346093ade049a4446ee625438b41761902e38466095e5f422ea",
-      "bytes": 12116
+      "sha256": "0f29740577343b2ab3be7a987469c0bee37617d0b5326eb37df6c641344beb6b",
+      "bytes": 17786
     },
     {
       "path": "dist/core/routing/seat-reasons.js",
@@ -1826,8 +1826,8 @@
     },
     {
       "path": "dist/core/run/best-of-n.js",
-      "sha256": "f0d8f750fd0bcee96059db06eeb7d19567254cdaa002b1e84987e5dfdc4c9994",
-      "bytes": 85236
+      "sha256": "beb3baaf44c0323b2a28ca37d4b680cbff06f9554e97953222228fdf0a66cff0",
+      "bytes": 85501
     },
     {
       "path": "dist/core/run/blast-radius.js",
@@ -1874,6 +1874,11 @@
       "sha256": "25b1151ade4848357c30f8529f0555df639efd4559ba384894d049f7d61e5abf",
       "bytes": 49361
     },
+    {
+      "path": "dist/core/run/harness-dispatch.js",
+      "sha256": "2af1d4b7d086c222386da00e4d971cbe9b9da4484bd72c156700059da43f9d11",
+      "bytes": 10994
+    },
     {
       "path": "dist/core/run/learned-router.js",
       "sha256": "339bcc34faf32262957128c766737992f16526e34cf8844fd863469d83de14e4",
@@ -1911,8 +1916,8 @@
     },
     {
       "path": "dist/core/run/orchestrator.js",
-      "sha256": "a2e602db559f4062e48aaed5ab9b13876e3aeff25a36d61e2f3fee06825e99e5",
-      "bytes": 204695
+      "sha256": "16e24bc8dd1eda80862240dd57ed72f34023d1b9333ad84e03cd075c68a70a0c",
+      "bytes": 204959
     },
     {
       "path": "dist/core/run/prompts/budget.js",
@@ -1936,8 +1941,8 @@
     },
     {
       "path": "dist/core/run/provider-client.js",
-      "sha256": "fc03b4f7282d9f41c23f775fc2844a0c460f5c9d84186a0025e5c1e5b111908d",
-      "bytes": 60359
+      "sha256": "d239d0f47d434c6bccdcf2ebe183ec9ec5a27ee09134e4125556f310354eafd0",
+      "bytes": 60582
     },
     {
       "path": "dist/core/run/repo-map.js",
@@ -1971,8 +1976,8 @@
     },
     {
       "path": "dist/core/run/sandboxed-engine.js",
-      "sha256": "1e8dad9bd5142df4124ad587f71a076ac47849a7baa726ca59c4f3c8202bd2bc",
-      "bytes": 174082
+      "sha256": "2a07ce96105645a9f04768ef76a549b09ef21d55672daba8a5a87a748e051a4a",
+      "bytes": 177500
     },
     {
       "path": "dist/core/run/self-heal.js",
@@ -2596,8 +2601,8 @@
     },
     {
       "path": "dist/core/util/scrub.js",
-      "sha256": "da2f01e3f2f69a41ce3d6081403b898bcca368f915aeaaa1928449354c86f1ff",
-      "bytes": 18799
+      "sha256": "0e47629ed96cebe11b72abed1f17f6500d3a594357dc2982d9fe12f763e6c56d",
+      "bytes": 19323
     },
     {
       "path": "dist/core/util/stable-file-read.js",
@@ -2611,8 +2616,8 @@
     },
     {
       "path": "dist/core/verse/accounts.js",
-      "sha256": "66d0a9d55ec2e7c4323d4250819ab4050cfec5b7d042336082aba1f2c560fa1a",
-      "bytes": 64334
+      "sha256": "48f3d09ba5cdca7e786856d80cd39f91df32190a5a1a1c58b9b5f3888e62b549",
+      "bytes": 66967
     },
     {
       "path": "dist/core/verse/activity-api.js",
@@ -2651,8 +2656,8 @@
     },
     {
       "path": "dist/core/verse/apps-api.js",
-      "sha256": "6aef949d52e5ec327d84bb786da26b7d625b61e95d5b4ca914924c3a9ee5fbcd",
-      "bytes": 6287
+      "sha256": "2404c52dbf0640acbe29757b5d051a87161afe009cd9989f7490f61f08eb14be",
+      "bytes": 7014
     },
     {
       "path": "dist/core/verse/apps-catalog.js",
@@ -2661,8 +2666,8 @@
     },
     {
       "path": "dist/core/verse/apps.js",
-      "sha256": "f42b09e1376478e0f10b9fa63058d337cd2a2cbcd593cd55890e01a755872a10",
-      "bytes": 41438
+      "sha256": "8af5e84301fa393e462e99ed108343e724456c2c08396da0a4523033a09bfe85",
+      "bytes": 42037
     },
     {
       "path": "dist/core/verse/attachments.js",
@@ -2781,8 +2786,8 @@
     },
     {
       "path": "dist/core/verse/local-models.js",
-      "sha256": "991ee0d088faae7d9fab0a2081fb939c29e465f5df7ebb1e1439ef198ab4e557",
-      "bytes": 35635
+      "sha256": "e31da3ae7a5f282fd13b82bba6459765f0380d72798f0c5babf4d34492d8513d",
+      "bytes": 35535
     },
     {
       "path": "dist/core/verse/login-path.js",
@@ -2814,6 +2819,11 @@
       "sha256": "59bc4daa06049df5f8fecb1a25d6a1fd094329eff2e338c1b2e3f2679d605442",
       "bytes": 14930
     },
+    {
+      "path": "dist/core/verse/model-display-name.js",
+      "sha256": "92bfbfe15c3d0a7b9633c1b5e37da984fb9f4223af8048378ab525850bb541ea",
+      "bytes": 5486
+    },
     {
       "path": "dist/core/verse/model-windows.js",
       "sha256": "0e2bf5df6694abad8034b3dbe460f8dd80e4382f20a636029920678d2a592318",
@@ -2866,8 +2876,8 @@
     },
     {
       "path": "dist/core/verse/seats.js",
-      "sha256": "fa24be316cc9f6d51f5a5bf562e5cf6d882385a981a77cbf9d0a102f8eb48cf1",
-      "bytes": 43611
+      "sha256": "06774be5a7a35a8f2a1dbea17508334b6f58ac628daf86b91d3ffe8d5dc12207",
+      "bytes": 44728
     },
     {
       "path": "dist/core/verse/session-controls-api.js",
@@ -2914,6 +2924,11 @@
       "sha256": "dab6a7ada24fd2ee1bcd5439559bdb6f73274725dc74b6f9d5b4e940c9829dc9",
       "bytes": 28493
     },
+    {
+      "path": "dist/core/verse/transient-events.js",
+      "sha256": "2005ec1bde8455bdd5eb829ca4685ca698da57427fd3ddf8d8c9a346c1746239",
+      "bytes": 410
+    },
     {
       "path": "dist/core/verse/turn-queue.js",
       "sha256": "8e8bd3e5be9328d6a916f15b66759a7f3930818fb3b14af9a45804008ef14eac",
@@ -2921,8 +2936,8 @@
     },
     {
       "path": "dist/core/verse/types.js",
-      "sha256": "23c1a91d98f2cd4e1351aba7af629d7be64861abb68e6112e092c5fa39530408",
-      "bytes": 7852
+      "sha256": "b415e0fbcd2c300deb942ff4b64bd7afee08088a4720b7b2ba13a7b0f68a9273",
+      "bytes": 6325
     },
     {
       "path": "dist/core/verse/verse-api.js",
@@ -3156,5 +3171,5 @@
     "dist/core/swarm/runner.js -> import(<computed>) x3",
     "dist/core/verse/session-engine.js -> import(<computed>) x1"
   ],
-  "digest": "248347e536e2686f44efc28018752e0679f0987e70b45932448d613536d43135"
+  "digest": "f69fba633cf34c741054b57c793024f6cc0232944c458abb97f9c280edccf365"
 }

package/dist/build-identity.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
-  "packageVersion": "3.11.3",
-  "revision": "c7e6e7459104f04efae8ecbe1834d2351c6e3424",
+  "packageVersion": "3.12.0",
+  "revision": "a18f1b5db282c1d96e9152dc4aef8158da1118f3",
   "dirty": false,
   "provenance": "git"
 }

package/dist/cli/authority.d.ts

@@ -19,7 +19,11 @@ export interface AuthorityCliDeps {
     openBrowser(url: string): void;
     fetch: typeof fetch;
     custody: typeof import('../core/authority/custody-client.js');
+    /** Read-only: the resident daemon service's state (setup's last step). Never changes launchd. */
+    daemonService(): Promise<DaemonServiceState>;
 }
+/** The resident daemon service as setup reports it. */
+export type DaemonServiceState = 'running' | 'loaded' | 'not-loaded' | 'absent' | 'unknown';
 /** `ashlr authority …` (the CLI's `(args) => exit code` shape). */
 export declare function runAuthorityCli(args: string[], injected?: Partial<AuthorityCliDeps>): Promise<number>;
 export declare const FLEET_RULESET_NAME = "ashlr-fleet: default branch";
@@ -83,3 +87,38 @@ export declare function renderTrustRootsWithKey(source: string, root: StandingGr
 export declare function validateCustodyRoot(root: StandingGrantTrustRoot, keyIdFor: (pem: string) => string): string | null;
 /** PURE: the canary repo's CI (addendum §7) — a test that can be turned red on purpose. */
 export declare const CANARY_WORKFLOW = "name: CI\non:\n  push:\n    branches: [main]\n  pull_request:\njobs:\n  test:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions/checkout@v4\n      - name: canary\n        run: |\n          if [ -f RED ]; then echo \"canary is red on purpose\"; exit 1; fi\n          echo \"canary green\"\n";
+type StepStatus = 'done' | 'already' | 'waiting-on-you' | 'skipped' | 'blocked' | 'failed';
+/** What a setup step needs from Mason himself (a UI renders these as badges). */
+export type SetupNeed = 'sudo' | 'touch-id' | 'browser' | 'github' | 'terminal';
+/** `ashlr authority setup --dry-run --json` — the checklist a UI can render. */
+export interface AuthoritySetupReportV1 {
+    schema: 'ashlr.authority-setup.v1';
+    dryRun: boolean;
+    /** Every step is done or already in place, including resident runtime admission. */
+    complete: boolean;
+    summary: {
+        done: number;
+        already: number;
+        waitingOnYou: number;
+        blocked: number;
+        failed: number;
+        planned: number;
+    };
+    steps: {
+        id: string;
+        step: string;
+        status: StepStatus;
+        detail: string;
+        needs: readonly SetupNeed[];
+    }[];
+    /** The first step that is not done or already in place (null when complete). */
+    next: string | null;
+}
+type SetupRow = {
+    step: string;
+    status: StepStatus;
+    detail: string;
+};
+/** PURE: the machine-readable form of a setup run. */
+export declare function authoritySetupReport(report: readonly SetupRow[], dryRun: boolean): AuthoritySetupReportV1;
+export {};