@happyvertical/smrt-svelte 0.55.5 → 0.55.7

package/AGENTS.md

@@ -205,7 +205,22 @@ for a data-surface one — for exactly the component's lifetime.
 
 - **Preload strategies**: `none`, `eager`, `idle` (recommended), `on-visible`
 - **Warm client cache**: module-level Map survives navigation/remounts -- avoids re-downloading WASM/models
-- **Adapters**: STT (browser-speech, whisper-cpp, whisper-wasm), TTS (browser-synthesis), LLM (webllm, transformers-llm)
+- **Adapters**: STT (browser-speech, whisper-cpp, whisper-local = alias whisper-wasm), TTS (browser-synthesis), LLM (webllm, transformers-llm)
+- **On-device speech** (`whisper-local` = alias `whisper-wasm`, and `moonshine`): thin adapters over
+  `@happyvertical/speech/local` (`LocalTranscriber`, or its worker host `serveLocalTranscriber`).
+  Push-to-talk (record on `start()`, transcribe on `stop()`, one final result) plus `transcribePcm()`
+  for smrt-ui's hands-free mode. Default `onnx-community/whisper-tiny.en` q8 (~45 MB, Cache
+  Storage); `model: 'moonshine-tiny'` (~32 MB) / `'moonshine-base'` (~67 MB) or any HF id
+  (`LOCAL_SPEECH_MODELS`); WebGPU else single-thread WASM (no COOP/COEP needed). The package never
+  imports the peers: a host passes `createWorker` (build it from
+  `@happyvertical/smrt-svelte/browser-ai/whisper-worker?worker`, alias `speech-worker`, the one module
+  that imports `@happyvertical/speech/local` and `@huggingface/transformers` statically) plus
+  `loadSpeech: () => import('@happyvertical/speech/local')`, or `loadModule` for the page thread.
+  `createLocalSpeechModel()` (alias `createWhisperLocalModel()`) / `adapter.model` is the consent API
+  (`estimateSize`, `isCached`, `load({ onProgress, signal })` with `downloading` -> `extracting` ->
+  `complete`); share it via `modelHandle`. English-only handling of `language`/`task` lives in the speech
+  package. `probeBrowserSpeech()` -> `works | missing | unreliable` (no network, no mic prompt)
+  decides whether to offer it. Sources set `stopTimeoutMs` so `Dictation` waits for the transcription.
 - Cache API: `getCachedSTT()`, `getCachedTTS()`, `getCachedLLM()`, `getCacheStats()`, `clearAllCaches()`
 - **Inference backends (browser-ai)**: two `@happyvertical/smrt-web/ai` `InferenceBackend`s, both
   `kind: 'local'`, both refusing `tool`/`function` messages, non-string content, `tool_calls` and
@@ -258,4 +273,4 @@ for a data-surface one — for exactly the component's lifetime.
 - `@happyvertical/smrt-ui` (UI runtime: primitives, theme system, i18n client, module registry) is a hard `dependency`. The agent-admin shells that used to type against `@happyvertical/smrt-agents/ui` moved to `@happyvertical/smrt-agents/svelte` (#1589), so `smrt-agents` is no longer a dependency here — this drops smrt-svelte below smrt-agents in the package DAG.
 - `@happyvertical/smrt-languages` is a hard `dependency` (not an optional peer): the Node-only `/i18n/server` subpath imports its resolver. The browser bundle still excludes it — the client `/i18n` layer never imports the languages root, so it tree-shakes out.
 - `@happyvertical/logger` (SDK) is a `dependency` — the console logger used for voice/AI error reporting in the form components. Consume it **only** through `src/internal/logger.ts`, never `createLogger()` at module scope: `createLogger()` reads `HAVE_LOGGER_LEVEL` from `process.env`, so a top-level call throws `ReferenceError: process is not defined` in the browser and kills client-side hydration under `vite dev` (prod builds tree-shake/define it away, so this only bites in dev). The `internal/logger` wrapper constructs the logger lazily and falls back to a bare `ConsoleLogger` when `process.env` is absent, keeping this browser-reachable module (imported by `Provider` + the form primitives) safe.
-- Peer (all optional): `svelte` >=5.18.2, plus the browser-AI engines (`@huggingface/transformers`, `@mlc-ai/web-llm`, `@remotion/whisper-web`, `@xenova/transformers`) and `chrono-node`.
+- Peer (all optional): `svelte` >=5.18.2, plus the browser-AI engines (`@happyvertical/speech`, `@huggingface/transformers`, `@mlc-ai/web-llm`, `@remotion/whisper-web`) and `chrono-node`.

package/README.md

@@ -40,7 +40,7 @@ items that share Board's drag engine. `AppShell` lets users customize their
 shell: pass `layout` and `onlayoutchange` to own persistence (for example in an
 exported app blueprint), or neither to store it in the user's settings. Mount
 `ShellLayoutEditor` (from `/app` or `/workspace`) on a settings page, and call
-`useShellLayout()` to make the same changes from code or an assistant. See
+`useShellLayout()` to make the same changes from code or an assistant. Users can rename sections and individual navigation entries (`items`, `renameItem`), hide section titles, and create or delete their own sections. See
 `agents/workspace.md`; the pure `ShellLayout` model is published without Svelte
 as `@happyvertical/smrt-svelte/workspace/layout`.
 
@@ -50,6 +50,16 @@ as `@happyvertical/smrt-svelte/workspace/layout`.
 </AppShell>
 ```
 
+Opt in to editing the real shell in place with `layoutEditing` on `AppShell`: a
+pencil toggle ("Edit layout", highlighted while editing; press again or Escape to exit) joins the header (as does the app title, a movable
+`item:brand` in `header.start`), and while on, every slot is a
+labelled drop zone, shell items and navigation get grips (drag, or Space and
+arrow keys), section headings get icon overlays and a floating toolbar, and
+hidden regions show as strips. Apps add per-section icon buttons (an Options
+gear, Help) with `sectionActions`; pass `layoutEditing={{ floating: true }}` to pin the
+toggle in the top-right corner instead of the header; `useShellLayout()` exposes `editing` and
+`setEditing`. See `agents/workspace.md`.
+
 ## Installation
 
 ```bash
@@ -288,6 +298,60 @@ bind legacy name-based cleanup to registrations made by that caller, so
 overlapping same-name fields can unmount in either order without retaining a
 detached control.
 
+### Voice typing where the browser cannot (on-device Whisper and Moonshine)
+
+Browsers differ on speech recognition: Chrome and Safari have it, Firefox does
+not, and Brave has the API without a speech service behind it. `probeBrowserSpeech()`
+says which you have (`'works' | 'missing' | 'unreliable'`) without a network
+call or a microphone prompt. For the last two, offer a one-time model download
+and dictate with a speech model running in the browser (WebGPU where available,
+single-thread WASM otherwise; no cross-origin isolation needed). The engine is
+`@happyvertical/speech/local` (an optional peer, `>=0.102.5`, as is
+`@huggingface/transformers`).
+
+| `model` | Size | Notes |
+| --- | --- | --- |
+| `moonshine-tiny` (`onnx-community/moonshine-tiny-ONNX`) | ~32 MB | English, fastest: best for live dictation |
+| `moonshine-base` (`onnx-community/moonshine-base-ONNX`) | ~67 MB | English, more accurate |
+| `whisper-tiny.en` (default) | ~45 MB | English |
+| `whisper-base.en` / `whisper-small.en` | ~85 / ~260 MB | English |
+| any Hugging Face id, e.g. `onnx-community/whisper-base` | varies | multilingual Whisper |
+
+```ts
+import {
+  createLocalSpeechModel,
+  createSttDictationSource,
+  probeBrowserSpeech,
+} from '@happyvertical/smrt-svelte/browser-ai';
+// The worker is the one module that imports the optional peers statically,
+// so only apps that build it bundle them.
+import SpeechWorker from '@happyvertical/smrt-svelte/browser-ai/whisper-worker?worker';
+
+if ((await probeBrowserSpeech()) !== 'works') {
+  const model = createLocalSpeechModel({
+    model: 'moonshine-tiny',
+    createWorker: () => new SpeechWorker(),
+    loadSpeech: () => import('@happyvertical/speech/local'),
+  });
+  model.estimateSize();            // ~32 MB, for the consent text
+  await model.isCached();          // already downloaded on this device?
+  await model.load({ onProgress, signal }); // downloading -> extracting ("Getting ready") -> complete; abort() cancels
+  const dictation = createSttDictationSource({ type: 'moonshine', modelHandle: model });
+}
+```
+
+`createWhisperLocalModel`, `{ type: 'whisper-local' }` and the `whisper-wasm`
+alias keep working. Without `createWorker` the model runs on the page's thread
+and `loadModule: () => import('@huggingface/transformers')` supplies the
+runtime. With a worker, `device` and `dtype` are the worker entry's (`auto`
+and `q8`).
+
+Push-to-talk: the microphone records until stopped, then one final result is
+emitted. For hands-free dictation (each sentence written down when the speaker
+pauses) give smrt-ui's `Dictation` `mode: 'hands-free'` and
+`createHandsFreeCapture`; these adapters' `transcribePcm()` writes down each
+utterance. English-only models (`*.en`, Moonshine) ignore a requested language.
+
 ### Form Components
 
 ```svelte
@@ -496,6 +560,12 @@ keys the shell renders exactly as before.
   focus (unless something inside already has it) and returns it on close;
   Escape or a scrim click closes it, sliding it back out as the scrim fades
   (no motion under `prefers-reduced-motion`). Resizing applies only while docked.
+- **Railless edges**: `rail: false` gives a side edge no rail (no tool buttons, open or closed); closed, it takes
+  no space and renders nothing to see or tab to, and opens from elsewhere (a
+  header dock toggle, `useShellDock()`). Pair it with `presentation: 'overlay'`
+  for a chat that slides over the page. Layout edit mode leaves a railless edge
+  as it is (closed stays closed) and, while editing, shows a small "Open
+  <tool>" tab on the shell's right edge when it has content.
 - **Kept panels**: `keepMounted: true` keeps a collapsed edge's panel content
   (`appPanel`, `tenantPanel`, the focus panel, `systemPanel`) mounted with the
   `hidden` attribute instead of unmounting it, so component state (a chat
@@ -537,7 +607,7 @@ importable, even if it appears in `dist/`.
 | `@happyvertical/smrt-svelte/forms` | Form inputs (TextInput, Select, MoneyInput, DateTimeInput, Toggle, etc.) |
 | `@happyvertical/smrt-svelte/settings` | Server-paged settings search, selection, and list/detail layout (`SettingsCatalog`, `paginateSettingsCatalog`) |
 | `@happyvertical/smrt-svelte/workspace` | AdminShell, ShellState, tenant nav, focus tools, settings, activities, and system/app panels |
-| `@happyvertical/smrt-svelte/app` | `AppShell` (Provider + themes + AdminShell + nav/dock slots, `dockToggles` header buttons), `OwnerSetupForm` (first-run owner setup), `ShellSettingsPage`, `RuntimeDiagnosticsWebMcp` |
+| `@happyvertical/smrt-svelte/app` | `AppShell` (Provider + themes + AdminShell + nav/dock slots, `dockToggles` buttons and host `slots` for the header/footer/sidebar regions), `OwnerSetupForm` (first-run owner setup), `ShellSettingsPage`, `RuntimeDiagnosticsWebMcp` |
 | `@happyvertical/smrt-svelte/app/runtime-diagnostics` | Svelte-free diagnostics WebMCP registration and its tool name/endpoint constants, importable from server routes |
 | `@happyvertical/smrt-svelte/workspace/legacy` | Opt-in ToolsDock compatibility surface for applications migrating to AdminShell |
 | `@happyvertical/smrt-svelte/workspace/server` | Server-side workspace helpers (Node only) |
@@ -671,8 +741,10 @@ updates retain their existing behavior.
 
 Use `shell.setPanelState(edge, 'hidden' | 'collapsed' | 'expanded')` to persist
 runtime panel preferences; app-configured hidden edges remain unavailable.
-AdminShell keeps a discoverable tenant collapse control with supplied navigation
-(`showTenantToggle={false}` opts out), a Menu opener in narrow layouts, and the
+AdminShell's edge toggle buttons and WASD hotkeys are opt-in via `edgeToggles`
+(default `false`: regions lay out inline; pass `true`, or a per-edge map, to
+keep the drop-down behaviour; `showTenantToggle` is a deprecated alias for
+`edgeToggles.left`), a Menu opener in narrow layouts, and the
 system toggle alongside a custom `systemBar` that has a `systemPanel` to open
 (a `systemBar` with no `systemPanel` owns the bottom band and draws no toggle). Closed narrow drawers are inert;
 opening focuses the first control, and closing or Escape restores the opener.
@@ -688,6 +760,13 @@ canonical 48px target; omit density to inherit the theme, or choose
 `"comfortable"`. Account menus in the shell app bar open below the bar so the
 existing footer's default placement stays reachable on narrow screens.
 
+Sections-only navigation: pass `navMode="sections"` to `AppShell` and give
+each `ShellNavGroup` an `icon` and `href`; the sidebar then lists only the
+sections, and the section's page renders its entries with `ShellSectionMenu`
+(`meta`/`actions` snippets for counts and "New ..." links). In layout edit mode
+the menu rows get grip, rename and hide controls, and the sidebar's section
+toolbar gets an icon picker (`useShellLayout().setSectionIcon`).
+
 `TenantNav` accepts optional `groups: ShellNavGroup[]` (`{ heading, items }`)
 next to its existing flat `items`. Each group has a labelled `role="group"` and
 native disclosure summary; keyboard and touch users can collapse it even in the

package/agents/workspace.md

@@ -83,6 +83,140 @@ and touch input across mobile widths and desktop panel-state combinations.
 
 See `src/components/workspace/MIGRATION.md` for the old-to-new concept map.
 
+### Regions and slots
+
+Four regions map to the existing edges (ids and `ShellLayout.panels` keys are
+unchanged): Header (`top`), Left sidebar (`left`), Right sidebar (`right`),
+Footer (`bottom`). Default labels are those names; override via `config`.
+`AdminShell`/`AppShell` take `slots?: Partial<Record<ShellSlot, Snippet>>`
+(`ShellSlot` from `./workspace`): `header.start|center|end`,
+`footer.start|center|end`, `leftSidebar.header|footer`,
+`rightSidebar.header|footer`. Header/footer slots sit in the bar (start after
+the brand/menu opener, end after the account), sidebar header sits above and
+footer below the sidebar's main area. Defaults: brand/title/menu opener/account
+stay where they were (`header.start`/`header.end` areas), `tenantFooter` stays
+the left sidebar footer, `dockToggles` default to `header.end`. There is no
+separate header row.
+
+Fallback when a slot's region is hidden (or a sidebar is collapsed), first
+visible wins (`slotFallbackChain`): header.X -> leftSidebar.header ->
+rightSidebar.header -> footer.X; footer.X -> leftSidebar.footer ->
+rightSidebar.footer -> header.X; leftSidebar.header -> header.start ->
+rightSidebar.header -> footer.start; leftSidebar.footer -> footer.start ->
+header.start -> rightSidebar.footer; rightSidebar.header -> header.end ->
+leftSidebar.header -> footer.end; rightSidebar.footer -> footer.end ->
+header.end -> leftSidebar.footer. The legacy `tenantFooter` prop keeps its own
+`footerInHeader` fallback.
+
+### Edge toggles and hotkeys are opt-in (#3661)
+
+`AdminShell`/`AppShell` `edgeToggles?: boolean | Partial<Record<PanelEdge,
+boolean>>` defaults to `false`: no edge toggle buttons, no hotkey hints, and
+WASD/`?` are inert. Regions are laid out inline: the left sidebar is docked
+open off phones (`ShellState.setInlineEdges`/`isInline`; viewport defaults and
+`overlayMedia` do not apply), and the header/footer are plain bands without a
+drop-down drawer (so `appPanel`/`systemPanel` are not reachable). Visibility
+comes from `ShellLayout.panels.visible` and edit mode. The right edge is the
+dock: dock toggles and focus tools still open it, it just loses its button.
+`hotkeys` (default: follows the toggles) forces shortcuts on (`true`, panels
+behave as drop-downs without buttons) or off. Phones keep the Menu opener and
+the left drawer's close toggle. `showTenantToggle` is a deprecated alias for
+`edgeToggles.left`. Migration: pass `edgeToggles` (true) to keep the previous
+behaviour.
+
+### Moving items between slots
+
+Movable items have stable ids: dock toggles `dock:<tool>`, each host `slots`
+snippet `slot:<slot>`, and host `slotItems` (`AppShell`, `{ id, label, slot,
+render }[]`, exported type `ShellSlotItem`; keep ids stable, they are stored in
+layouts). `AppShell` also supplies the built-in item `item:brand` (the shell
+`logoSrc`/`logoAlt`, title and subtitle, linked to `homeHref` when set, default slot `header.start`, movable, same fallback chain
+when the header is hidden); it sets `AdminShell` `brandInSlot` so the top band
+draws no brand of its own (standalone `AdminShell` still does). The menu
+opener and account content are not items yet (#3656 step 3).
+
+`ShellLayout.placements?: Record<itemId, ShellSlot>` (additive, still version
+1) overrides default slots. Pure helpers in `layout.ts` (also `./workspace/layout`):
+`placeShellItem(layout, id, slot, defaultSlot?)` (passing the default drops a
+no-op override; re-placing puts the item last), `resetShellItemPlacement`,
+`resolveShellPlacements(items, layout)` (default order first, then placement
+order; unknown ids and slots ignored) and `resolveShellVisiblePlacements(items,
+layout, visible)` (placement first, then the hidden-region fallback above).
+`useShellLayout()` adds `placeItem(id, slot)`, `resetItem(id)`, and readers
+`placementItems`, `placements` (per slot) and `isRegionVisible(region)`.
+
+### Editing the layout in place
+
+`AppShell` `layoutEditing?: boolean | { slot?; floating? }` opts in (off: no toggle,
+`setEditing(true)` refused, existing apps unchanged). It adds the built-in item
+`item:layout-edit` (default slot `header.end`, normal hidden-region fallback):
+a pencil `ShellIconButton` named "Edit layout" with `aria-pressed`; the same
+button turns edit mode off (it stays a pencil, highlighted while on). Escape
+also exits when no section toolbar is open (an open toolbar, or a keyboard move,
+consumes Escape first).
+`{ floating: true }` instead renders the same button fixed in the top-right
+corner (round, elevated, safe-area aware, z-index 45): not a slot item, not
+movable, never displaced by hidden regions. The header reserves end padding for
+it, or, when the header is hidden, the right sidebar reserves top padding, or main
+does when no right sidebar is shown
+(`--smrt-shell-floating-reserve-inline|block|main`, set by `AppShell`).
+A polite live region announces the mode. `useShellLayout()` has
+`editable`, `editing` and `setEditing(boolean)` for hosts and assistants.
+
+While `editing`:
+
+- `AdminShell` `layoutEdit` (`ShellLayoutEditSurface`, set by `AppShell`) renders
+  every slot of a visible region as a dashed drop zone (entering edit mode
+  expands a collapsed left/right sidebar so its header/footer zones exist, and
+  leaving restores it; a railless `rail: false` edge is never revealed: it
+  stays as the user left it, and while editing a closed railless right edge
+  with focus/dock tools shows a slim "Open <tool>" indicator tab
+  (`data-edit-indicator`, z 21, no layout shift) that opens it and closes it
+  again on exit) (`data-smrt-edit-zone`)
+  labelled "Header · Left", empty ones included, highlighted
+  (`data-drop-target`) while a drag targets it. Movable items render exactly as
+  on the site (inside an `inert` wrapper) with a grip; the toggle itself is
+  fixed. One headless `createSortable` engine (confined to the shell root,
+  `allowSameContainerReorder: false`) drives pointer, native-drag and keyboard
+  moves (Space, Up/Down across zones in visual order, Enter drops, Escape
+  cancels) with the same announcements as `Sortable`
+  (`sortable/announce.ts`), committing `placeItem(id, slot)`. Items whose region
+  is hidden show in the zone they fall back to.
+- Nothing in the header band renders outside the drop zones except each
+  region's edit control: the brand is an item in `header.start`, and the Menu
+  opener is hidden off phones. Every region, a collapsed sidebar rail included, gets an icon-only eye-off
+  "Hide <region>" button (`ShellLayoutEditSurface.regionControl`, end of the
+  header/footer band, top of a sidebar) that writes
+  `setPanel(edge, { visible: false })`; the strip's "Show" restores it. The
+  last visible region's button is disabled with an explanatory tooltip. Items
+  of a hidden region (the edit toggle included) follow the fallback chain.
+  Hiding the right sidebar (the dock) makes `useShellDock().available` false:
+  dock toggles render unregistered and `open` is refused until it is shown.
+- Hidden, available regions render as thin dashed strips ("Right sidebar ·
+  hidden") with an eye "Show <region>" button (`setPanel(edge, { visible })`).
+- `ShellNavEditor` replaces `TenantNav`: the real rows plus grips on every
+  heading and item (existing reorder/move-across-sections), icon-only
+  `ShellIconButton`s (eye `aria-pressed` = shown in navigation, heading
+  `aria-pressed` = title shown, host actions) on each section and an eye per
+  item, and a "New section" button at the end.
+- Clicking a section heading opens its floating toolbar (rename input focused,
+  title, hide, delete for custom sections with a confirm when non-empty, host
+  actions). With `(hover: hover) and (pointer: fine)` hovering also opens it
+  (closes on leave unless a click pinned it); touch or no hover is click/tap
+  only. One toolbar at a time; Escape closes and returns focus to the heading;
+  a pinned toolbar closes on outside pointer or focus leaving.
+
+Host extension point: `AppShell` `sectionActions?: Snippet<[ShellSectionActionsContext]>`
+(`{ sectionId, label, custom, editing }`) renders icon buttons in both the
+section overlay and its toolbar (e.g. the planner's Options gear and Help);
+use `ShellIconButton` (from `./workspace`) for matching looks. It renders only
+while editing.
+
+`ShellLayoutEditor` no longer has a Placement section (superseded by dragging in
+place); it keeps panels, the navigation sort (icon toggles `aria-pressed` for
+"Show <name> in navigation" / "Show title of <name>"), the preview and Reset.
+The layout helpers and `placeItem`/`resetItem` stay.
+
 ### Activity ticker
 
 `ActivityTicker` accepts app-owned `activities: ReadonlyArray<ShellActivity>` plus
@@ -219,11 +353,75 @@ control panel), wired by `app/AppShell.svelte`.
   `moveItem(id, sectionId, toIndex?)`, `hide(id)`, `show(id)`, `setPanel(edge,
   { visible?, initial? })`, `reset()`, each returning whether anything changed,
   plus readers (`layout`, `sections`, `panels`, `applied`, `customized`,
-  `isHidden`). An assistant calls the same methods the editor does. The
+  `isHidden`; item placement is in "Moving items between slots", edit mode in
+  "Editing the layout in place"). An assistant calls the same methods the editor does. The
   context is separate from `useAdminShell()` because `AppShell`, not
   `AdminShell`, owns the navigation.
+- **Sections belong to the app.** Hosts (and recipes, via the host) suggest
+  sections as `ShellNavGroup`s; the user overrides them in the same additive
+  version-1 layout: `sections[id] = { label?, showTitle? }` (rename; hide the
+  title) and `customSections: { id: 'custom:...', label }[]` (user-created).
+  Custom sections join `sectionOrder`, receive items through `moved`, show in
+  the editor when empty but not in the nav, and get a unique `custom:` id.
+  `showTitle: false` (also settable by a host on `ShellNavGroup.showTitle`)
+  renders the items flat in a `role="group"` named by the heading, no
+  `<details>`/`<summary>`. `applyShellLayout` keeps the section's original id
+  on renamed output groups. Helpers: `renameShellSection`,
+  `setShellSectionTitleVisible`, `createShellSection`, `deleteShellSection`
+  (custom only; items return to their default sections). Old stored layouts
+  need no migration; new host sections and items land in their suggested slot.
+  Controller: `renameSection`, `setSectionTitleVisible`, `createSection(label)`
+  (returns the id), `deleteSection`.
+- **Item labels.** The same layout renames single navigation entries:
+  `items[itemId] = { label? }` (additive; trimmed, blank removed; ids as above,
+  top-level items of `nav` and groups). `resolveShellNavModel` items carry
+  `label` / `defaultLabel`; `applyShellLayout` emits the renamed item with
+  `label` = the user's and `defaultLabel` = the host's (so nav, breadcrumbs and
+  titles that read `nav` follow the rename). Helper `renameShellItem(nav, groups,
+  layout, itemId, label | null)`; controller `renameItem(itemId, label | null)`
+  (null or blank resets). Edit mode: each `ShellNavEditor` row has an icon-only
+  "Rename <label>" button opening an inline field (Enter saves, Escape cancels,
+  blur saves) and, once renamed, "Reset <label> to <original>"; the original shows
+  as the row tooltip. Presets ("cookbooks") ship it in the stored layout.
+- **Sections-only navigation (`navMode: 'sections'`).** `AppShell` (and
+  `TenantNav` / `ShellNavEditor` directly) take `navMode?: 'items' | 'sections'`
+  (default `'items'`, unchanged). In `'sections'` the left sidebar shows one
+  link per section (icon + label), no entries; a collapsed rail (`tenantRail`)
+  shows the icons with tooltips. The link goes to `ShellNavGroup.href`, else
+  `AppShell` `sectionHref(sectionId)` (user-created sections), else the first
+  entry; it is `aria-current="page"` on that page and `"true"` on any of the
+  section's entry pages. `AppShell` also takes `iconComponent` for host icon
+  names. `ShellNavGroup.icon` / `.href` are additive; the user override is
+  `sections[id].icon` (trimmed; blank or the host's icon removes it), helper
+  `setShellSectionIcon(nav, groups, layout, id, icon | null)`, controller
+  `setSectionIcon(id, icon | null)`; `resolveShellNavModel` sections carry
+  `icon` / `defaultIcon` and `applyShellLayout` emits the effective `icon`.
+  Icons are shell icon names (`SHELL_SECTION_ICONS` is the picker set, drawn
+  from Material icons like the rest of `SHELL_ICON_PATHS`; `SHELL_DEFAULT_SECTION_ICON`
+  is `folder`) or host names rendered by `iconComponent` (`ShellSectionIcon`
+  tries the built-in set first). Edit mode in this mode: sections keep grip,
+  rename, hide, delete; the title toggle is replaced by an "Icon of <label>"
+  popover grid ("Use <icon> icon", `aria-pressed` on the current one; Escape
+  closes the grid before the toolbar). Entries are not in the sidebar.
+- **`ShellSectionMenu`** (`sectionId`, `controller?`, `meta(entry)`,
+  `actions(entry)`, `iconComponent`, `aria-label`, `layout`): the section's page body.
+  `layout="cards"` renders an auto-fill grid (min 16rem) of cards: 32px icon in a
+  tinted circle, title, `ShellNavItem.description` (2 lines), then `meta` and
+  `actions` at the bottom; one stretched link, actions stay separate controls;
+  edit mode keeps grip/rename/hide in the grid. Unknown icon names draw the
+  default glyph (dev warning), never the name. `layout.items[id].description` (host/preset-set, not editable in the UI)
+  overrides an item's `description`. Default `list`: A
+  `<ul>` of rows (icon, label link, host `meta`, host `actions`, chevron; the
+  row is one stretched link, actions sit above it) in applied order with
+  renames; hidden entries are omitted. While editing, the same rows become the
+  nav editor's chrome (single-container `Sortable` grip with keyboard moves,
+  inline rename/reset, show/hide toggle) driving `moveItem`/`renameItem`/
+  `hide`/`show`; rows are not links then. `ShellSectionMenuEntry` is the snippet
+  argument (`id, href, label, defaultLabel, icon, hidden, item`).
 - **`ShellLayoutEditor`**: `controller` (default: context), `preview` (default
-  true), `iconComponent`. Mount it on a settings page or in a dock tool.
+  true), `iconComponent`. Each section has an inline name input, icon toggles
+  for visibility and title, and (custom only) a trash button, which confirms
+  when non-empty; a New section button creates one. Mount it on a settings page or in a dock tool.
 
 ### Sortable and the Board engine
 
@@ -255,9 +453,8 @@ lives beside, not inside, `./workspace` so the AdminShell barrel stays free of
   (`{#snippet dock(registry)}`), the instance mounted routes register on
   when `webmcp` UI is on; pass it to `<AssistantDock {registry} />`. `runtimeDiagnostics` (default false) mounts the
   read-only `smrt.runtime.diagnostics.read` WebMCP tool. `dockToggles`
-  (`{ tool, label, icon? }[]`) renders icon buttons at the right of the shell
-  header (the AdminShell `header` row, shown only when the prop is non-empty),
-  each toggling the `ShellDockTool` with that id: `aria-pressed` and
+  (`{ tool, label, icon?, slot? }[]`) renders icon buttons in the shell slot
+  named by `slot` (default `header.end`; see "Regions and slots"), each toggling the `ShellDockTool` with that id: `aria-pressed` and
   `aria-expanded` follow the dock, `aria-controls` is
   `smrt-admin-shell-right-panel`, the label is the tooltip, and `assistant`
   defaults to a chat-bubble icon (`icon: 'chat'`; other text is a glyph). A

package/dist/browser-ai/adapters/stt/dictation-source.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dictation-source.d.ts","sourceRoot":"","sources":["../../../../src/browser-ai/adapters/stt/dictation-source.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE5D,wBAAgB,wBAAwB,CACtC,OAAO,GAAE,aAA0C,GAClD,MAAM,OAAO,CAAC,UAAU,CAAC,CAc3B"}
+{"version":3,"file":"dictation-source.d.ts","sourceRoot":"","sources":["../../../../src/browser-ai/adapters/stt/dictation-source.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE5D,wBAAgB,wBAAwB,CACtC,OAAO,GAAE,aAA0C,GAClD,MAAM,OAAO,CAAC,UAAU,CAAC,CAmB3B"}

package/dist/browser-ai/adapters/stt/dictation-source.js

@@ -7,7 +7,8 @@
  * adapter lazily, once, the first time someone starts dictating: nothing
  * loads and no microphone prompt appears until then. Defaults to the
  * browser's own speech recognition (`browser-speech`), which needs no
- * download; an unsupported browser rejects with
+ * download; an on-device model is never downloaded by dictation (see
+ * `LocalSpeechSTTAdapter.prepare`). An unsupported browser rejects with
  * `CapabilityNotAvailableError`, which `Dictation` reports in plain words.
  *
  * @example
@@ -26,7 +27,12 @@ export function createSttDictationSource(options = { type: 'browser-speech' }) {
     return () => {
         adapter ??= (async () => {
             const created = await getSTT(options);
-            await created.ensureInitialized();
+            // An adapter that needs a download is never loaded here: dictation must
+            // not start one. It checks its own model when started, and the host
+            // loads it explicitly (after asking).
+            if (!created.getCapabilities().requiresDownload) {
+                await created.ensureInitialized();
+            }
             return created;
         })().catch((error) => {
             // Let a later tap try again (for example after a permission change).

package/dist/browser-ai/adapters/stt/factory.d.ts

@@ -20,8 +20,11 @@ import type { GetSTTOptions, STTAdapter } from './types.js';
  * // Whisper.cpp (recommended for accuracy)
  * const stt = await getSTT({ type: 'whisper-cpp', model: 'tiny.en' });
  *
- * // Whisper WASM (transformers.js - has known issues)
- * const stt = await getSTT({ type: 'whisper-wasm', modelSize: 'tiny' });
+ * // Local Whisper (transformers.js; WebGPU or WASM, one-time ~45 MB download)
+ * const stt = await getSTT({ type: 'whisper-local' });
+ *
+ * // Moonshine (fastest for live dictation, one-time ~32 MB download)
+ * const stt = await getSTT({ type: 'moonshine' });
  * ```
  */
 export declare function getSTT(options?: GetSTTOptions): Promise<STTAdapter>;
@@ -45,5 +48,5 @@ export declare function getSTTAuto(options?: Partial<Omit<GetSTTOptions, 'type'>
 /**
  * Check if a specific STT backend is available
  */
-export declare function isSTTAvailable(type: 'browser-speech' | 'whisper-wasm'): boolean;
+export declare function isSTTAvailable(type: 'browser-speech' | 'whisper-wasm' | 'whisper-local' | 'moonshine'): boolean;
 //# sourceMappingURL=factory.d.ts.map

package/dist/browser-ai/adapters/stt/factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../../src/browser-ai/adapters/stt/factory.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH,OAAO,KAAK,EAEV,aAAa,EACb,UAAU,EAGX,MAAM,YAAY,CAAC;AA6BpB;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,MAAM,CAAC,OAAO,GAAE,aAAkB,GAAG,OAAO,CAAC,UAAU,CAAC,CAqB7E;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,UAAU,CAC9B,OAAO,GAAE,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAM,GACjD,OAAO,CAAC,UAAU,CAAC,CAmBrB;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,gBAAgB,GAAG,cAAc,GACtC,OAAO,CAYT"}
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../../src/browser-ai/adapters/stt/factory.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH,OAAO,KAAK,EAEV,aAAa,EAEb,UAAU,EAEX,MAAM,YAAY,CAAC;AAkCpB;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,MAAM,CAAC,OAAO,GAAE,aAAkB,GAAG,OAAO,CAAC,UAAU,CAAC,CAuB7E;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,UAAU,CAC9B,OAAO,GAAE,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAM,GACjD,OAAO,CAAC,UAAU,CAAC,CAmBrB;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,gBAAgB,GAAG,cAAc,GAAG,eAAe,GAAG,WAAW,GACtE,OAAO,CAgBT"}

package/dist/browser-ai/adapters/stt/factory.js

@@ -12,10 +12,13 @@ function isBrowserSpeechOptions(options) {
     return !options.type || options.type === 'browser-speech';
 }
 /**
- * Type guard for Whisper WASM options (transformers.js)
+ * Type guard for on-device speech options (transformers.js): Whisper
+ * (`whisper-wasm` is the older name for `whisper-local`) and Moonshine.
  */
-function isWhisperWasmOptions(options) {
-    return options.type === 'whisper-wasm';
+function isLocalSpeechOptions(options) {
+    return (options.type === 'whisper-local' ||
+        options.type === 'whisper-wasm' ||
+        options.type === 'moonshine');
 }
 /**
  * Type guard for Whisper.cpp options (@remotion/whisper-web)
@@ -39,8 +42,11 @@ function isWhisperCppOptions(options) {
  * // Whisper.cpp (recommended for accuracy)
  * const stt = await getSTT({ type: 'whisper-cpp', model: 'tiny.en' });
  *
- * // Whisper WASM (transformers.js - has known issues)
- * const stt = await getSTT({ type: 'whisper-wasm', modelSize: 'tiny' });
+ * // Local Whisper (transformers.js; WebGPU or WASM, one-time ~45 MB download)
+ * const stt = await getSTT({ type: 'whisper-local' });
+ *
+ * // Moonshine (fastest for live dictation, one-time ~32 MB download)
+ * const stt = await getSTT({ type: 'moonshine' });
  * ```
  */
 export async function getSTT(options = {}) {
@@ -52,14 +58,16 @@ export async function getSTT(options = {}) {
         const { WhisperCppSTTAdapter } = await import('./whisper-cpp.js');
         return new WhisperCppSTTAdapter(options);
     }
-    if (isWhisperWasmOptions(options)) {
-        const { WhisperWasmSTTAdapter } = await import('./whisper-wasm.js');
-        return new WhisperWasmSTTAdapter(options);
+    if (isLocalSpeechOptions(options)) {
+        const { LocalSpeechSTTAdapter } = await import('./local-speech.js');
+        return new LocalSpeechSTTAdapter(options);
     }
     throw new UnsupportedAdapterError(String(options.type), [
         'browser-speech',
         'whisper-cpp',
+        'whisper-local',
         'whisper-wasm',
+        'moonshine',
     ]);
 }
 /**
@@ -103,7 +111,9 @@ export function isSTTAvailable(type) {
     if (type === 'browser-speech') {
         return caps.stt.browserSpeechAPI;
     }
-    if (type === 'whisper-wasm') {
+    if (type === 'whisper-wasm' ||
+        type === 'whisper-local' ||
+        type === 'moonshine') {
         return caps.stt.whisperWasm;
     }
     return false;

package/dist/browser-ai/adapters/stt/index.d.ts

@@ -4,7 +4,9 @@
 export { type BrowserSpeechError, BrowserSpeechSTTAdapter, } from './browser-speech.js';
 export { createSttDictationSource } from './dictation-source.js';
 export * from './factory.js';
+export { LocalSpeechSTTAdapter, WhisperLocalSTTAdapter, WhisperWasmSTTAdapter, } from './local-speech.js';
+export { createLocalSpeechModel, createWhisperLocalModel, isEnglishOnlyLocalSpeechModel, LOCAL_SPEECH_MODELS, type LocalSpeechDevice, type LocalSpeechLoadOptions, LocalSpeechModel, type LocalSpeechModelOptions, type LocalSpeechModelPreset, type LocalSpeechModelState, resolveLocalSpeechModelId, WHISPER_LOCAL_DEFAULT_MODEL, WHISPER_LOCAL_DEFAULT_SIZE_BYTES, type WhisperLocalDevice, type WhisperLocalLoadOptions, WhisperLocalModel, type WhisperLocalModelOptions, type WhisperLocalModelState, } from './local-speech-model.js';
+export { configureTransformersEnv } from './transformers-env.js';
 export * from './types.js';
 export { WhisperCppSTTAdapter } from './whisper-cpp.js';
-export { WhisperWasmSTTAdapter } from './whisper-wasm.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/browser-ai/adapters/stt/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/browser-ai/adapters/stt/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,KAAK,kBAAkB,EACvB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/browser-ai/adapters/stt/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,KAAK,kBAAkB,EACvB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,cAAc,cAAc,CAAC;AAC7B,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,6BAA6B,EAC7B,mBAAmB,EACnB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,gBAAgB,EAChB,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,yBAAyB,EACzB,2BAA2B,EAC3B,gCAAgC,EAChC,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,iBAAiB,EACjB,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,GAC5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/browser-ai/adapters/stt/index.js

@@ -4,6 +4,8 @@
 export { BrowserSpeechSTTAdapter, } from './browser-speech.js';
 export { createSttDictationSource } from './dictation-source.js';
 export * from './factory.js';
+export { LocalSpeechSTTAdapter, WhisperLocalSTTAdapter, WhisperWasmSTTAdapter, } from './local-speech.js';
+export { createLocalSpeechModel, createWhisperLocalModel, isEnglishOnlyLocalSpeechModel, LOCAL_SPEECH_MODELS, LocalSpeechModel, resolveLocalSpeechModelId, WHISPER_LOCAL_DEFAULT_MODEL, WHISPER_LOCAL_DEFAULT_SIZE_BYTES, WhisperLocalModel, } from './local-speech-model.js';
+export { configureTransformersEnv } from './transformers-env.js';
 export * from './types.js';
 export { WhisperCppSTTAdapter } from './whisper-cpp.js';
-export { WhisperWasmSTTAdapter } from './whisper-wasm.js';