@ashlr/hub 3.5.0 → 3.7.0

package/CHANGELOG.md

@@ -339,6 +339,166 @@ superseded, not a setup procedure. Use [runtime activation authority](docs/RUNTI
 and the [current architecture boundary](docs/ARCHITECTURE.md#legacy-fleet-activation-boundary).
 Neither the historical record nor a successful test activates a resident fleet.
 
+## [3.7.0] — 2026-09-23 UTC — The console you can actually navigate, and a fleet that can be bounded
+
+### Verse
+
+- **The rail expands** (⌘\), with labels and ⌘-digits. Hover used to show the
+  *native browser tooltip* — unstyled, mouse-only, clipping against the sidebar.
+  There is now a real portalled Tooltip primitive, and adopting it fixed a live
+  accessibility defect: `aria-describedby` sat on a wrapper rather than the
+  focusable child, so nothing was ever announced. A **disabled** trigger emits no
+  pointer events, so its tooltip could never open — precisely the tooltip that
+  matters, since it explains why the control is disabled.
+- **The header earns its height.** It held one toggle floating at the right edge
+  with nothing anchoring the left, because the sidebar toggle only rendered while
+  the sidebar was collapsed.
+- **Display size** — Default / Large / Extra large, scaling type *and* spacing as
+  a multiplier rather than a second table of literals, because density and scale
+  have identical CSS specificity and two literal tables would let file order
+  decide what "Compact + Large" means. Rail width and strip height are pinned so
+  the traffic-light clearance cannot regress.
+- **Pane resizing** that survives a real drag: widths are a desired/effective
+  pair, so a wide sidebar narrows on a small window and springs back. It also
+  turned out the resize handle was eating 4px of the macOS window drag strip.
+- **Saved projects and a native folder picker**, and the MCP section is mounted.
+
+### Autonomy
+
+- **A bounded run window** — until paused, at a wall-clock time, or after N
+  iterations. The window is an absolute instant, never a countdown, so a host
+  suspended at 01:00 and opened at 09:00 finds its 07:00 window expired.
+- **The post-merge halt.** The pre-merge gate was already strict; *nothing re-ran
+  the suite after a merge*, so a regression merged at 01:00 compounded all night.
+  A dirty working tree halts too, as **unprovable** rather than *regressed* — a
+  run that measured uncommitted edits has proven nothing. Ignored files are not
+  dirt, or it would halt every night.
+
+### Corrections
+
+- A test guard was red, and a red guard protects nothing. The Anthropic shim is a
+  request normaliser, not a transport — its one `/chat/completions` is in a doc
+  comment recording a measurement.
+- `VerseApp.test.tsx` had been passing by luck of file ordering; the first test to
+  mount the shell paid ChatSection's cold transform cost inside its own 1000ms
+  assertion window.
+
+## [3.6.0] — 2026-09-23 UTC — Open any project, from a real picker
+
+Verse could already drive any folder on the machine — the API accepted an
+unenrolled path and both Grok and local seats ran in it. What it could not do was
+let you *choose* one. The only way in was typing an absolute path into a text
+box, and a folder you typed vanished from the list until a chat existed on it.
+This release is the door.
+
+### Any folder, from a native chooser
+
+- **A real macOS directory picker.** "Choose folder…" opens `NSOpenPanel`
+  through the Tauri dialog plugin. Detection is a call-time feature probe of the
+  injected shell global, not a build flag, because the same bundle is served
+  inside the desktop app and as a plain web UI — in a browser the button is
+  absent and the absolute-path input remains, which is never removed.
+- **Saved projects the console can actually create.** `createVerseWorkspace`,
+  `updateVerseWorkspace`, `deleteVerseWorkspace`, `setVerseRootPriority` and
+  `setVerseFocusSection` all existed with **zero callers**, so
+  `~/.ashlr/verse/workspaces.json` could only be written by hand. There is now a
+  Projects section in the sidebar: save, rename, add and remove folders, reorder
+  (the first folder is the primary — its directory is the chat's working
+  directory), and forget behind a two-step confirm that states existing chats
+  are untouched.
+- **Interactive and autonomous stay separate registries.** Saving a folder to
+  work in never enrols it for unattended work. A saved project can be *offered*
+  to the autonomous lane, but only by ticking that box.
+- **The Grok caveat travels with a saved project.** Grok takes no extra roots,
+  so a multi-root project picked with a Grok seat now says its extra folders are
+  unreachable. That case previously had no warning at all.
+
+### The MCP section exists again
+
+`McpSection.tsx` was complete — query layer, tested contract, complete server
+side — and unreachable: absent from `VERSE_SECTIONS`, no `'mcp'` member on
+`VerseSectionId`, and outside the glob that mounts sections. It is now ⌘6.
+⌘1–⌘5 keep their meanings.
+
+It also discloses a footgun nothing named before: Codex and Grok inherit MCP
+from their native profile config, so a turn on an unenrolled folder can reach an
+`ashlr__*` write tool and be refused by the enrollment gate — the turn fails on
+policy, not on the model. Claude and local seats are unaffected, because the
+adapter passes an empty `--mcp-config` under `--strict-mcp-config`.
+
+### One capability was widened, deliberately
+
+`dialog:allow-open` is granted to the remote Verse origin in
+`capabilities/verse-remote.json`, whose note said not to widen the list. It is
+the narrowest dialog permission: it shows a chooser the user must confirm and
+returns a path, reads no file contents, and no `fs:*` permission is granted
+anywhere in the app. `allow-save`, `allow-message`, `allow-ask` and
+`allow-confirm` stay ungranted so page code cannot forge a native prompt.
+
+It had to go in that file rather than `main.json`: the Verse window loads a
+remote origin, and a Tauri 2 capability without a `remote` block never reaches
+one — the grant would have looked correct in review and failed silently at
+runtime.
+
+### Verified in the built app, not only in tests
+
+The picker was driven end to end in a real build: the button renders inside the
+shell, `NSOpenPanel` opens, the chosen path lands in the field, "Start chat"
+enables, "Save as a project" persists and appears in the sidebar, and forget
+removes it. Separately, `POST /api/verse/workspaces` was confirmed against a
+live server to create a record on disk and list it back.
+
+## [3.5.1] — 2026-09-23 UTC — The dependency backlog, landed rather than deferred
+
+Four dependency PRs had been sitting open. None was a version bump; each needed
+real work, and that is why they had not landed.
+
+- **`marked` 17 → 18, and the audit policy digest moves with it.** marked 17
+  read the two tildes in a line like ``~24 bits of `Math.random` …
+  `~/.ashlr/swarms/<id>.json` `` as GFM strikethrough, which swallowed the
+  backticks between them and left `<id>` exposed as an inline HTML token. The
+  external-skill audit's raw-HTML gate then fired and the whole document lost
+  section credit. One file in 120 of this repository's own docs flips, and it is
+  a false positive being corrected — a code span outranks an emphasis run that
+  would cross it. The parser is part of the signed policy, so the digest moves
+  with it, and a test now pins the code-span behaviour directly rather than
+  leaving it implied by a version string.
+- **Four dev dependencies upgraded, three held with reasons.** `vite` 6 → 8,
+  `@types/node` 22 → 26, `@vitejs/plugin-react` 4 → 6,
+  `@testing-library/jest-dom` 6 → 7. TypeScript 7 is blocked upstream —
+  `typescript-eslint` peers on `>=4.8.4 <6.1.0`, so npm cannot resolve the tree
+  at all. ESLint 10 adds 173 errors from three newly-recommended rules, and
+  jsdom 30 changes accessible role/name computation. Each hold is recorded in
+  `dependabot.yml` with the condition that lifts it, so the group stops
+  regenerating weekly in a state that cannot install or cannot pass.
+- **Raycast: `@raycast/api` 2, and the flat-config migration it requires.**
+  `@raycast/eslint-config` 2.x exports a flat config array; passing that through
+  the existing `FlatCompat` wrapper throws *Converting circular structure to
+  JSON*. `ray build` compiles all seven entry points again.
+
+### Reasoning effort, settled on multi-step work
+
+`config.ts` had asked for this battery explicitly: the earlier numbers came from
+single tool calls, which say nothing about multi-step debugging. 5 agentic tasks
+× 3 efforts × 3 trials, plus a long-horizon arm:
+
+| arm | pass | mean decode | total wall |
+|---|---|---|---|
+| xhigh (ships today) | 15/15 | 1582 | 4208s |
+| **medium** | 15/15 | **766 — 2.07× fewer** | **2545s** |
+| low | 15/15 | 1061 — 1.49× fewer | 2657s |
+
+The ladder is not monotonic: `medium` beats `low` on decode *and* wall-clock, on
+5 of 6 tasks, because `low` under-thinks per turn and pays it back in extra
+tool-calling round trips. The shipped default does not move — every arm went
+15/15, so quality is *bounded*, not measured, and a sub-20-point regression
+would have been invisible. Operators wanting the 2× set
+`models.llamaServer.agentDefaults.reasoningEffort` to `"medium"`.
+
+### Repository
+
+62 open pull requests → 0.
+
 ## [3.5.0] — 2026-09-22 UTC — Ashlr Verse: the operator console, and a local model that keeps working
 
 Verse becomes the surface you drive the fleet from, and the local lane becomes

package/README.md

@@ -7,6 +7,9 @@
 **[verse.ashlr.ai](https://verse.ashlr.ai)** — Ashlr Verse, the operator console: every account you own
 behind one surface, plus a local model that keeps working after the quota runs out.
 
+
+![Ashlr Verse — the operator console: an expandable section rail, a project sidebar, and every connected account with its live usage windows](docs/images/verse-console.png)
+
 [![npm](https://img.shields.io/npm/v/@ashlr/hub.svg?logo=npm&label=%40ashlr%2Fhub&color=cb3837)](https://www.npmjs.com/package/@ashlr/hub)
 [![npm downloads](https://img.shields.io/npm/dm/@ashlr/hub.svg?color=cb3837)](https://www.npmjs.com/package/@ashlr/hub)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](./LICENSE)

package/dist/build-identity.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
-  "packageVersion": "3.5.0",
-  "revision": "fa1d62f5c6f35c1ee087cb04a7db5de099fb1111",
+  "packageVersion": "3.7.0",
+  "revision": "5f128f3a22e379862642a9f8837673baafd95a53",
   "dirty": false,
   "provenance": "git"
 }

package/dist/cli/activation.d.ts

@@ -0,0 +1,41 @@
+/**
+ * `ashlr activation` — operator authority for the autonomous fleet (M470).
+ *
+ * The daemon, goal/simple conductors, and resident-service install are all
+ * held shut by hard-coded denials until an operator EXPLICITLY grants
+ * authority here. Doing nothing keeps today's exact behavior: everything
+ * denied. This command group is how an operator opts in, on their own
+ * terms, with a real signed/expiring/revocable authorization trail.
+ *
+ * Subcommands:
+ *   activation init [--label <text>] [--force] [--yes] [--json]
+ *       Generate an Ed25519 keypair on this machine (private key never
+ *       leaves it) and register the public half as a trust root. Grants
+ *       NOTHING by itself — run `activation grant` next.
+ *   activation status [--json]
+ *       Trust roots, pending one-shot permit, standing grants, and what is
+ *       currently authorized, right now, and why.
+ *   activation grant <scope...> [--ttl <duration>] [--yes] [--json]
+ *       Mint a scoped, signed, expiring authorization. `once`/`resident`
+ *       mint a single-use permit for `ashlr daemon start`, good for a fixed
+ *       2-minute window; any of `residentStanding`/`conductor`/`automerge`/
+ *       `repair`/`deploy`/`install`/`proposalOnly` mint a standing grant
+ *       checked on every use until it expires (30d cap) or is revoked.
+ *       `residentStanding` is what lets a resident daemon started by
+ *       launchd/systemd/Task Scheduler after a reboot authorize itself with
+ *       no operator present — grant it once, ahead of time, alongside
+ *       whichever of `automerge`/`repair`/`deploy` the resident loop should
+ *       also carry for its whole run.
+ *   activation revoke --root <keyId> | --grant <grantId> [--yes] [--json]
+ *       Immediately invalidate a trust root or a standing grant.
+ *
+ * Every subcommand supports --help. Mutating subcommands (init/grant/revoke)
+ * refuse to run unattended in a non-TTY session without --yes — the same
+ * confirm-gate convention as `ashlr inbox approve`.
+ */
+/**
+ * `ashlr activation [init|status|grant|revoke] [flags]`
+ *
+ * Returns a process exit code (0 = success, non-zero = error/usage).
+ */
+export declare function cmdActivation(args: string[]): Promise<number>;