@ashlr/hub 3.11.5 → 3.12.0

package/CHANGELOG.md

@@ -339,6 +339,76 @@ superseded, not a setup procedure. Use [runtime activation authority](docs/RUNTI
 and the [current architecture boundary](docs/ARCHITECTURE.md#legacy-fleet-activation-boundary).
 Neither the historical record nor a successful test activates a resident fleet.
 
+## [3.12.0] — 2026-09-26 UTC — your key is the trust root, and Verse says one clear next step
+
+**Your custody key is compiled in.** `src/core/authority/trust-roots.ts` now carries Mason's Secure Enclave key
+`se-p256-9c1330e3bd72cf3e` (#506, opened by `ashlr authority setup`), so a Touch ID–signed standing grant verifies on
+this build. Resident activation stays blocked in this release (see `ashlr authority setup`); the resident runtime,
+the host-verified `ashlr/verify` check and cloud-PR intake are the 3.13 work.
+
+The 3.11.5 package already contained the changes below; its notes described only the account-freshness repair. They
+are recorded here. 3.11.4 shipped a crash — Command and Fleet failed to load in the browser because a shared secret
+scrubber read `process.platform` at import time — fixed in #498 (and in 3.11.5). A new test walks everything the
+web UI loads and fails on any Node-only global touched at import.
+
+### Autonomy is off → one clear next step
+
+- Command, Fleet, Growth and Mind no longer show grids of empty cards while the fleet is dormant. One shared
+  "Autonomy is off" state says what is off and offers the single next action: **Approve grant** (opens the Touch ID
+  sheet) or the exact setup command with Copy (#490).
+- `ashlr authority setup --dry-run --json` prints the setup checklist for a UI: each step's status and what it
+  needs from you (sudo, Touch ID, browser, GitHub, terminal) (#492).
+- `ashlr authority setup` is safer to rerun: it finds a trust-root PR it already opened (or a key already merged),
+  creates the canary repo before protecting it, and ends with the daemon service's real launchd state (#492).
+- ⌘K gains the actions that matter: Autonomy Off / Propose / Autonomous, Approve grant…, Budget mode, Copy the
+  setup command, Run in cloud… — all through the same guarded paths as the Command bar (#494).
+
+### A calmer Command
+
+- One compact **Seats** strip replaces the tall burn-down cards; the full charts moved to Usage → Seat windows.
+  Seat status comes from the same model as the rail, and says "Status unknown" when sources disagree (#493).
+- The grid no longer leaves half-empty rows at medium widths; card menus sit in the card header (#493).
+- The first-run tour is a one-line "Getting started" chip, with a new "Turn on autonomy" step (#494).
+- About 85 strings rewritten: plain facts instead of defensive "X, not Y" sentences; route paths moved out of error
+  copy into a details disclosure; the double-period bug fixed (#489).
+
+### Accurate numbers
+
+- Charts keep their size at any window width: line, bar and burn-down charts measure their container and draw at a
+  fixed pixel height with 12 px labels (the 1900 px tokens chart used to stand 573 px tall) (#497).
+- Days are local: usage rollups, fleet history and "dark since" bucket by your local day, not UTC (#497).
+- Claude usage is no longer double-counted (one transcript line per content block repeated the full usage); this
+  also corrects the Claude capacity reader that feeds the budget gate (#498).
+- Local Ollama `name:tag` models cost $0 (#498). One context-window unit everywhere (64k, not 66k) and clean model
+  names ("gpt-oss 20B", "Qwen3.8 27B (64k)") (#500).
+- The cloud lane says "Not set up · ~$250 credits (estimate)" instead of showing unspent credits as live headroom (#500).
+- The rail tooltip says "resets" once (#495).
+
+### Fleet engine
+
+- The runtime probe no longer blocks the event loop: no `which llama-server` per poll, and `ps` output is parsed in
+  yielding slices (#481).
+- Adopted harness effort and sampling now reach every engine at dispatch (Claude `--effort` only on builds that accept
+  it) (#484). The seat router uses its λ cost/headroom/latency weights; default weights reproduce the previous order
+  exactly (#486).
+
+### Operations
+
+- Comms: requests older than 48 h (`comms.requestTtlHours`) expire, so one unanswered Telegram question no longer
+  blocks every later message and fails the nightly oversight job (#492).
+- `/api/verse/apps` is warmed at `ashlr verse` start; ⌘. during a running turn only stops the turn (#498, #500).
+- Test flakes fixed: fleet-live "mergedToday" near midnight, m142 under parallel load (#500).
+
+### Faster first paint
+
+- Chat's first-paint JavaScript fell from 351.8 KB to 333.1 KB under the unchanged 352 KB budget: the shell's
+  first-paint code ships as one chunk, and the ⌘K catalog, onboarding flow and delete dialog load on demand (#502).
+
+Released with `npm run gate -- --base v3.11.5`: build, typechecks, eslint, real-io lane, docs, first-paint and web tests
+passed; the backend run (757 files, 17,896/17,995 tests) failed 14 files on a machine at load ~200. Rerun alone with
+longer timeouts, 12 pass; `universe-hub-marker-campaign` and `universe-capacity-wait-integration` fail the same way on
+v3.11.5 and are pre-existing.
+
 ## [3.11.5] — 2026-09-26 UTC — keep account evidence honest through probe faults
 
 - Keep a verified account's last observed usage visible only for its original

package/dist/authority-surface.json

@@ -126,8 +126,8 @@
     },
     {
       "path": "dist/core/authority/trust-roots.js",
-      "sha256": "7ff5ca2601de703ea78bbbfbd27689ea78c54be2384537897acd7cf48f6e05c4",
-      "bytes": 466
+      "sha256": "96d0bdba94eede3935111e3afc8d6386d939114debb4cd246e99b0e4a8df8242",
+      "bytes": 768
     },
     {
       "path": "dist/core/authority/types.js",
@@ -3171,5 +3171,5 @@
     "dist/core/swarm/runner.js -> import(<computed>) x3",
     "dist/core/verse/session-engine.js -> import(<computed>) x1"
   ],
-  "digest": "16118607455cb6f0dc415f28aaa522c126e4f040582a7965f41e2bfdef2251f8"
+  "digest": "f69fba633cf34c741054b57c793024f6cc0232944c458abb97f9c280edccf365"
 }

package/dist/build-identity.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
-  "packageVersion": "3.11.5",
-  "revision": "13f8f7885cd6c1b22ea616b2cc7ef17a4d28e62b",
+  "packageVersion": "3.12.0",
+  "revision": "a18f1b5db282c1d96e9152dc4aef8158da1118f3",
   "dirty": false,
   "provenance": "git"
 }

package/dist/core/authority/trust-roots.js

@@ -1,5 +1,11 @@
 /** Intentionally empty until Mason commits his custody public key (Phase 0). */
-export const STANDING_GRANT_TRUST_ROOTS = Object.freeze([]);
+export const STANDING_GRANT_TRUST_ROOTS = Object.freeze([
+    Object.freeze({
+        keyId: 'se-p256-9c1330e3bd72cf3e',
+        alg: 'ES256',
+        publicKeyPem: '-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEaR0NPKbqxZLsqsQfvfPd8YgfPJQz\nkDLeyeUL4pzlpEVYn6gNi/Tfd8YsFjxyhqhrViApx3Kc5qGYVPULyaE+7g==\n-----END PUBLIC KEY-----\n',
+    }),
+]);
 /**
  * Key ids that must never be trusted again, even if a root with the id were
  * pasted in. A root set containing one is invalid as a whole (fail closed),

package/dist/core/authority/trust-roots.js.map

@@ -1 +1 @@
-{"version":3,"file":"trust-roots.js","sourceRoot":"","sources":["../../../src/core/authority/trust-roots.ts"],"names":[],"mappings":"AA0BA,gFAAgF;AAChF,MAAM,CAAC,MAAM,0BAA0B,GAAgD,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEzG;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAsB,MAAM,CAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"trust-roots.js","sourceRoot":"","sources":["../../../src/core/authority/trust-roots.ts"],"names":[],"mappings":"AA0BA,gFAAgF;AAChF,MAAM,CAAC,MAAM,0BAA0B,GAAgD,MAAM,CAAC,MAAM,CAAC;IACnG,MAAM,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,0BAA0B;QACjC,GAAG,EAAE,OAAgB;QACrB,YAAY,EAAE,wLAAwL;KACvM,CAAC;CACH,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAsB,MAAM,CAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC"}

package/dist/core/universe/builtins/preparation/manifest.json

@@ -1 +1 @@
-{"schemaVersion":1,"id":"preparation-measurement-v1","files":[{"name":"preparation-bridge.mjs","digest":"2d883696e13b6e8ef32afb9dfe4682fd2ee150319f1998b0290e83e477ba5a4f"},{"name":"preparation-verification-activity.mjs","digest":"bf0eb9f5cc3f059b6ae2b4075ba5934103511c1eed3e3bed2e398d07ed4ac2cf"},{"name":"preparation-verification-child.mjs","digest":"f89798b6b43006c72e00f53a2fabea8b27c121d4f4a55e081783974851b0ef37"},{"name":"preparation-verification-controller.mjs","digest":"4c7e80cb73a7f3b6df7a40301544273e9d08cdb28ee4d904223ae4e029c873bf"},{"name":"preparation-verification-fixtures.mjs","digest":"36cf123917862ef2a62c8b7278d12d5786a278402baa56c1e9a20bc54f9d6c77"},{"name":"preparation-verification-native.mjs","digest":"f61520b2dc6d3fb6d7e99afc167865ecefd0bb548df307166c32e2cac4787a5c"},{"name":"preparation-verification-protocol.mjs","digest":"9b9664097862c2391d0d9c12060905517a285e1fb8862e079e880bcb2ebb56c6"},{"name":"preparation-verification-tool.mjs","digest":"5e42f135f463c13f777e2ceef6751fabd252a02c2c11266dac550f13713e33e3"},{"name":"preparation-verification.mjs","digest":"f228f7767bb21fc49deb44a69632a644a88ecd71e75d1d61a00d8ba278eebd97"}]}
+{"schemaVersion":1,"id":"preparation-measurement-v1","files":[{"name":"preparation-bridge.mjs","digest":"9c99d9d4626f632d89e2a0d35c072fbc808ac02973c8fa80bf927b7b0667efc3"},{"name":"preparation-verification-activity.mjs","digest":"bf0eb9f5cc3f059b6ae2b4075ba5934103511c1eed3e3bed2e398d07ed4ac2cf"},{"name":"preparation-verification-child.mjs","digest":"f89798b6b43006c72e00f53a2fabea8b27c121d4f4a55e081783974851b0ef37"},{"name":"preparation-verification-controller.mjs","digest":"4c7e80cb73a7f3b6df7a40301544273e9d08cdb28ee4d904223ae4e029c873bf"},{"name":"preparation-verification-fixtures.mjs","digest":"abfc3d2fd1130bc79808a320c9d74b8722d2f6fc0bb4ba3c31103c155ce9f1a1"},{"name":"preparation-verification-native.mjs","digest":"f61520b2dc6d3fb6d7e99afc167865ecefd0bb548df307166c32e2cac4787a5c"},{"name":"preparation-verification-protocol.mjs","digest":"9b9664097862c2391d0d9c12060905517a285e1fb8862e079e880bcb2ebb56c6"},{"name":"preparation-verification-tool.mjs","digest":"5e42f135f463c13f777e2ceef6751fabd252a02c2c11266dac550f13713e33e3"},{"name":"preparation-verification.mjs","digest":"f228f7767bb21fc49deb44a69632a644a88ecd71e75d1d61a00d8ba278eebd97"}]}