@mmmbuto/nexuscrew 0.8.39 → 0.8.40

package/CHANGELOG.md

@@ -2,6 +2,38 @@
 
 All notable changes to NexusCrew are tracked here.
 
+## Unreleased
+
+## 0.8.40 — 2026-07-27 — "Shared Voice"
+
+- Adds opt-in **Audio Share**, a backend-native TTS path for a specific
+  authorized node with an actual speaker. It is distinct from the existing
+  browser-only notification voice, so synthesis no longer depends on a PWA
+  tab remaining focused in the foreground.
+- Supports local native adapters on Android/Termux (`termux-tts-speak`), macOS
+  (`say`), and Linux (`espeak-ng`, with an explicit `spd-say` fallback). The
+  implementation reports adapter start rather than inventing audibility from a
+  successful exit code; physical output remains a device-side check.
+- Adds local Audio settings: consent defaults off, redacted capability,
+  fixed-text explicit test and a sovereign local Stop. Share, visibility and
+  audio consent remain three independent controls; a remote peer cannot grant
+  audio consent through federation.
+- Adds signed MCP commands for exact node speech and caller-scoped receipts:
+  `nc_speak`, `nc_speak_status` and `nc_speak_stop`. The MCP bridge derives a
+  live Fleet origin through a node-local HMAC proof; a UI token, body field or
+  header cannot impersonate a cell.
+- Adds local named target groups (up to eight exact instance IDs): ordered
+  primary/failover or explicit fan-out, per-endpoint receipts, target-side
+  ACL/consent/READONLY/rate checks, group Stop, bounded TTL storage and no
+  aggregate success boolean. `nc_play_audio` is deliberately not introduced.
+- Makes reverse-forward Share failures recoverable: a repeated bind/forward
+  failure enters a diagnosed degraded state and retries at a bounded cadence,
+  instead of requiring the user to toggle Share off and on after a mobile
+  reconnect.
+- Adds explicit Fleet credential-source policy (`auto`, environment or
+  NexusCrew store), preserves legacy cells as no-op `auto`, and removes the
+  conflicting provider environment set when the local store is selected.
+
 ## 0.8.39 — 2026-07-25 — "Honest Peer"
 
 - Fixes `nexuscrew nodes test` and `nexuscrew nodes doctor` falsely reporting a
@@ -254,7 +286,7 @@ All notable changes to NexusCrew are tracked here.
   non-blocking doctor warning.
 - Validates imported Fleet working directories before persistence and redacts the active Shell
   command together with the existing prompt and environment secret values.
-- Extends source-side diagnostic redaction to macOS `/Users/<name>/...` paths in addition to Linux
+- Extends source-side diagnostic redaction to macOS home-directory paths in addition to Linux
   and Android home paths.
 - Gate: **987 isolated Node tests** (986 pass / 1 platform skip), **93/93 frontend component
   tests**, production PWA build and zero production dependency vulnerabilities in both dependency

package/README.md

@@ -11,6 +11,15 @@ NexusCrew turns live tmux sessions, AI CLI workers and connected machines into
 one local-first browser control plane. Your terminals stay real, your tools
 stay yours, and your infrastructure stays under your control.
 
+## New in 0.8.40: Audio Share
+
+Audio Share lets an authorized cell ask one exact, opt-in node with a real
+speaker to speak through its native platform adapter. Android/Termux, macOS and
+Linux use their local TTS primitives; a browser tab is no longer the only route
+to speech. Consent stays off by default, a group never overrides a node's ACL
+or consent, and `spoken` means that the adapter started—not that a person heard
+the output.
+
 <p align="center">
   <img src="docs/img/fleet-deck-desktop.png" width="960" alt="NexusCrew desktop deck with multiple live tmux sessions">
 </p>
@@ -58,7 +67,7 @@ install-script approval.
 | **Multi-node Fleet** | See and control authorized cells across Linux, macOS and Android nodes. |
 | **AI-ready cells** | Launch Claude Code, Codex, Codex-VL, Pi, Agy or a trusted shell with explicit providers and policies. |
 | **Mobile-native control** | Scroll tmux history, use terminal keys, dictate prompts and move files from a phone. |
-| **Operator alerts** | Receive visual, push and optional on-device spoken notifications. |
+| **Operator alerts** | Receive visual, push, browser speech and opt-in node-native Audio Share TTS. |
 
 The browser is a client, not the session host:
 
@@ -102,6 +111,7 @@ ssh -L 41820:127.0.0.1:41820 user@your-host
 | [Fleet and terminals](docs/FLEET.md) | Cells, engines, providers, decks and mobile input |
 | [Connect nodes](docs/NODES.md) | Pairing, SSH routes, sharing and routed aliases |
 | [Notifications](docs/NOTIFICATIONS.md) | Toasts, Web Push and optional spoken alerts |
+| [Audio Share and native TTS](docs/AUDIO_SHARE.md) | Node-native TTS, consent, groups and MCP controls |
 | [MCP bridge](docs/MCP.md) | Operator tools, cell delivery and client setup |
 | [Configuration](docs/CONFIGURATION.md) | Files, environment overrides and local settings |
 | [Operations](docs/OPERATIONS.md) | CLI, boot, backup, updates and diagnostics |