tandem-editor 0.14.1 → 0.14.2

package/CHANGELOG.md

@@ -7,6 +7,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.14.2] - 2026-06-14
+
+### Changed
+
+- **Motion — hover-reveal float reads as the extended rail and slides both ways (Phase 4 / #798, scenes A8·A12 follow-up)** — polish on the v0.14.1 hover-reveal floating mode. (1) **Reads as the same rail, not a square overlay** — the floated panel now carries the extended rail's **rounded inner corner** and paints its own opaque `--tandem-surface-muted` surface (without it the 14px collapsed shell shows through as a minimized-rail strip and the editor shows behind the rest); the edge-collapse grab handle is hidden while floating (its accent bar otherwise reads as a stray sliver, and "collapse" is the wrong verb — the zone PINS); and pinning **snaps** the shell to the floated width for one frame (a transient `pin-snap` transition-suppressor cleared on the next rAF) so the panel stays put instead of flashing away and replaying the 14→full open from collapsed. (2) **Drop shadow no longer clipped at the editor edge** — the directional side shadow is cast by a dedicated empty `.rail-float-shadow` layer painted behind the panel rather than as a `box-shadow` on the panel itself, so the panel's own `overflow: hidden` (needed to clip content to the rounded corner) can't slice the shadow on the rounded side. And **both pinned rails now carry an at-rest `z-index: 1`** so the editor column — a later DOM sibling whose opaque background would otherwise occlude the rail's outset shadow, cutting it off dead at the panel's inside edge — paints below it; the left rail had been missing this (the right rail always had it), so only the left rail's pinned shadow was being clipped. (3) **Slides in and out** — the float-in is retimed to a `360ms` rigid-body `translateX` slide that reads as the minimized sliver sliding open (the leading edge and its drop shadow travel together; `translateX` never clips the shadow), and on hide the panel now **slides back into the edge** instead of vanishing: a `float-closing` retreat phase keeps it mounted for a `300ms` reverse slide (the slide-out keyframe's `forwards` fill holds it tucked away until a matched timer drops the flag and `display:none` returns), and re-hovering mid-retreat cancels the retreat and snaps straight back to floating. Pinned rails don't retreat; reduced motion (the in-app `reduceMotion` setting OR the OS `prefers-reduced-motion` query — the retreat path checks the OS query in JS too, so it drops straight to the sliver instead of lingering for the closing timer) disables both slides. `.svelte`-only (`src/client/App.svelte`): no `src/server/` changes, no annotation-model change, every rail testid (`rail-float-left`/`rail-float-right`, `left-outline-rail`, `peek-strip-*`, `panel-edge-collapse-*`, `*-resize-handle`) preserved. Diff reviewed by `svelte-migration-reviewer` (CLEAR — the new `maybeHideFloat` idempotency guard prevents a double-schedule; timer cleanup is symmetric).
+
+### Fixed
+
+- **Cowork enable no longer promises a UAC prompt that never appears, or scares users about an "unprotected" port (interim honesty fixes; full transport redesign pending an empirical matrix + ADR-045).** Enabling Cowork on Windows added a Windows Firewall rule via a plain `netsh` spawn that **never** triggers UAC elevation (elevation only happens via `ShellExecuteEx`+`runas`), so a non-elevated Tandem always failed and mislabeled the failure as "UAC declined." The fail-closed deny-rule it then tried to write needed the *same* elevation and always failed too, producing a false "Port 3479 may be unprotected — add a deny rule manually" scare (the server binds `127.0.0.1`, so the port was never network-exposed). Detected workspaces were also shown as **"Failed"** even when no write was ever attempted (the flow aborts before any plugin write). This interim fix: drops the false "Windows will prompt for admin permission to modify firewall rules" copy from the Settings toggle, the onboarding step, and the integration wizard; removes the unwritable deny-rule attempt and its alarming error; rewrites the admin-declined hint to honestly explain that firewall changes need administrator rights Tandem doesn't have (and that documents stay local); reports never-attempted workspaces as a neutral **"Not configured"** (new `notConfigured` status, info-colored) instead of "Failed"; and corrects the "Token provisioned" mislabel (it only ever reflected the enabled flag). The underlying transport (whether Cowork can reach Tandem at all, and whether the firewall/per-workspace machinery is even needed) is being settled by a test matrix; see the cowork-detection plan / forthcoming ADR-045. No `netsh`/elevation behavior beyond the deny-rule removal changed.
+
 ## [0.14.1] - 2026-06-11
 
 ### Added

package/LICENSE

@@ -6,10 +6,13 @@ Parameters
 Licensor:             Bryan Kolb
 Licensed Work:        Tandem (tandem-editor npm package).
                       The Licensed Work is (c) 2026 Bryan Kolb.
-Additional Use Grant: Personal use and individual self-hosting are permitted;
-                      commercial hosting or resale of the Licensed Work is not.
+Additional Use Grant: Personal use and individual self-hosting are permitted
+                      solely for evaluation purposes for up to 30 days; continued
+                      or production use requires a paid license from the Licensor.
+                      Commercial hosting or resale of the Licensed Work is not permitted.
 Change Date:          The earlier of 2029-06-10 or two years after the public
-                      general availability release of Tandem v1.0.
+                      general availability release of this specific version of the
+                      Licensed Work.
 Change License:       MIT License
 
 Notice