simjecture 0.5.4rc2__tar.gz → 0.6.0__tar.gz

{simjecture-0.5.4rc2 → simjecture-0.6.0}/.github/workflows/ci.yml

@@ -50,7 +50,7 @@ jobs:
       - name: Install uv
         run: python -m pip install uv
       - name: Install locked environment
-        run: uv sync --frozen --extra tui --extra dsh --extra workspace --group browser
+        run: uv sync --frozen --extra tui --extra dsh --extra workspace --extra public --group browser
       - name: Install browser test runtime
         run: uv run playwright install --with-deps chromium
       - uses: actions/setup-node@v4

{simjecture-0.5.4rc2 → simjecture-0.6.0}/.github/workflows/release.yml

@@ -40,7 +40,7 @@ jobs:
             --ro-bind /lib64 /lib64 \
             /usr/bin/true
       - name: Install locked test environment
-        run: uv sync --frozen --extra tui --extra dsh --extra workspace --group browser
+        run: uv sync --frozen --extra tui --extra dsh --extra workspace --extra public --group browser
       - name: Install browser test runtime
         run: uv run playwright install --with-deps chromium
       - uses: actions/setup-node@v4

{simjecture-0.5.4rc2 → simjecture-0.6.0}/CHANGELOG.md

@@ -2,6 +2,52 @@
 
 This project follows semantic versioning. Dates use ISO 8601.
 
+## 0.6.0 — 2026-10-06
+
+- Add optional `simjecture serve` for a hosted workspace with durable admission,
+  visitor quotas, a shared queue, GitHub OAuth and verified owner allowances.
+  Provider settings remain operator-owned; OAuth client credentials stay in RAM.
+- Use the same workspace in local and hosted deployments: a permanent dark rail,
+  bottom experiment-monitor and account buttons, account/workspace popup, compact
+  chat input that grows with the draft, and model settings in a popover. Move
+  workspace details into a dialog and remove the composer permission footer.
+- Let signed-in visitors upload scientific inputs and retain their projects.
+  Allow visitors to delete their own conversations and associated scientific
+  content. Stop active writers before erasure; resume pending cleanup after a
+  service restart and preserve minimal usage counters.
+  Remove guest conversations, files and artifacts after the last tab leaves;
+  protect other open tabs, refreshes and sign-in transitions with expiring leases.
+  Hosted artifact links download by default; safe image previews remain available.
+- Add an opt-in, fail-closed Linux executor using dedicated job UIDs, Landlock,
+  seccomp and resource limits on hosts without namespaces. General Python,
+  installed solvers, custom inputs and private FLASH builds can run through the
+  existing evidence service. A private Unix HTTP socket separates the gateway
+  from scientific jobs; this profile does not provide a network namespace.
+- Preserve command/source/runtime provenance and per-request inference usage.
+  Freeze the queued study brief and honor its shorter execution cutoff. Record
+  failed commands and permit fresh retries without treating them as valid evidence.
+- Separate simulations from analysis, plotting, compilation and inspection by
+  an explicit execution category. Producing files no longer makes a command a
+  simulation. Show each hosted command's own retained outputs. Research tools
+  offer agent-guided custom studies alongside clearly labelled starter presets.
+- Replace abstract home suggestions with double-pendulum integration, FLASH
+  magnetic-island coalescence, and an autonomous pendulum-period hypothesis study.
+  Introduce Interactive and Autonomous research below them instead of a setup
+  checklist. Remove the redundant Python introduction from Research tools.
+- Show the official benchmark leaderboard, filters, cost/time charts and result
+  downloads in hosted workspaces. Model testing and result import remain disabled.
+- Present Conversation, Study and Evidence & review as peer navigation tabs
+  with an active view, instead of a breadcrumb hierarchy.
+- Expose operator-verified WarpX photon features and add radiation guidance for
+  emission, absorption, energy accounting and material/table limits. Hosted
+  collision qualification does not imply a commissioned aluminium Z-pinch model.
+- Make the inspector tabs reachable at narrow widths. Expose native outputs to
+  follow-up project analysis, suppress binary console dumps from model context,
+  and read executor console output through its original descriptors. Diagnose
+  FLASH snapshots by their recorded times and application-specific filenames.
+- Include the preceding release candidates' director/recovery and simulation
+  provenance fixes. See the release acceptance record for validation and limits.
+
 ## 0.5.4rc2 (preview) — 2026-10-04
 
 - Separate interactive simulation outputs from copied project inputs in the GUI.

{simjecture-0.5.4rc2 → simjecture-0.6.0}/CITATION.cff

@@ -2,8 +2,8 @@ cff-version: 1.2.0
 message: "If you use this software, please cite the exact software version and Git commit."
 title: "Simjecture"
 type: software
-version: 0.5.4rc2
-date-released: 2026-10-04
+version: 0.6.0
+date-released: 2026-10-06
 abstract: >-
   An evidence-governed runtime for autonomous computational experimentation and
   falsification over hypothesis trees.

{simjecture-0.5.4rc2 → simjecture-0.6.0}/CONTRIBUTING.md

@@ -49,6 +49,10 @@ additional dependencies only when they are needed for your contribution.
   `uv sync --frozen --group browser`, install Chromium with
   `uv run playwright install chromium`, and run the affected browser tests.
   Add `--extra workspace` to the sync command when testing workspace features
+- **Hosted service:** add `--extra public` and run `tests/test_public*.py`.
+  General executor qualification additionally requires a dedicated Linux host,
+  reserved job accounts, Landlock and libseccomp; the operator examples under
+  `scripts/setup_public_*` must be adapted to that host
 - **DSH integration:** use `uv sync --frozen --extra dsh` and the Node version
   pinned in [CI](.github/workflows/ci.yml), then run `npm ci --prefix integrations/dsh`
   and `SIMJECTURE_MCP_EXECUTABLE="$PWD/.venv/bin/simjecture-mcp" npm test --prefix integrations/dsh`.

{simjecture-0.5.4rc2 → simjecture-0.6.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: simjecture
-Version: 0.5.4rc2
+Version: 0.6.0
 Summary: Evidence-governed autonomous experimentation and falsification for computational science
 Project-URL: Homepage, https://github.com/tomzhu0225/simjecture
 Project-URL: Documentation, https://github.com/tomzhu0225/simjecture/tree/main/docs
@@ -33,6 +33,12 @@ Provides-Extra: flash-demo
 Requires-Dist: h5py<4,>=3.10; extra == 'flash-demo'
 Provides-Extra: process
 Requires-Dist: psutil<8,>=6; extra == 'process'
+Provides-Extra: public
+Requires-Dist: fastapi<1,>=0.115; extra == 'public'
+Requires-Dist: h5py<4,>=3.10; extra == 'public'
+Requires-Dist: psutil<8,>=6; extra == 'public'
+Requires-Dist: smolagents[openai]<2,>=1.24; extra == 'public'
+Requires-Dist: uvicorn<1,>=0.30; extra == 'public'
 Provides-Extra: tui
 Requires-Dist: textual<9,>=2.0; extra == 'tui'
 Provides-Extra: workspace
@@ -45,7 +51,7 @@ Description-Content-Type: text/markdown
 
 [![DOI](https://zenodo.org/badge/DOI/10.5281/zenodo.21945748.svg)](https://doi.org/10.5281/zenodo.21945748)
 
-[Quickstart](#install-and-open-the-workspace) · [Documentation](docs/index.md) ·
+[Try online](https://simjecture.com) · [Quickstart](#install-and-open-the-workspace) · [Documentation](docs/index.md) ·
 [Recorded demo](docs/demos/gray-scott.md) · [Contributing](CONTRIBUTING.md) ·
 [Releases](https://github.com/tomzhu0225/simjecture/releases)
 
@@ -68,10 +74,11 @@ scope; see [scientific limitations](docs/research/limitations.md).
 
 ## Install and open the workspace
 
-On Linux or inside WSL, install **Simjecture 0.5.3**:
+Try the hosted workspace at **[simjecture.com](https://simjecture.com)**, or install
+**Simjecture 0.6.0** on Linux or inside WSL:
 
 ```bash
-curl -fsSL https://github.com/tomzhu0225/simjecture/releases/download/v0.5.3/install.sh | bash
+curl -fsSL https://github.com/tomzhu0225/simjecture/releases/download/v0.6.0/install.sh | bash
 ```
 
 The installer verifies the release bundle's checksum, sets up uv, Python 3.12 and
@@ -79,17 +86,18 @@ workspace dependencies, then starts the local GUI. Git and a CLI agent are not
 required. For Python-package installation, SSH forwarding or source setup, see
 [installation options](docs/getting-started/installation.md).
 
-To try the **0.5.4rc2 preview**, including research recovery and clearer simulation files:
+The local and hosted versions share a compact, expanding chat input, a persistent
+navigation rail and an account/workspace menu. Agent, model and effort settings
+live in the composer's model menu. The hosted service supplies inference and
+scientific tools and the official benchmark leaderboard; signed-in visitors can
+add files and retain their work. Guest
+conversations and artifacts are temporary and are removed after their last tab
+leaves, with a short grace period for refreshing or signing in.
 
-```bash
-curl -fsSL https://github.com/tomzhu0225/simjecture/releases/download/v0.5.4rc2/install.sh | bash
-```
-
-The preview includes a default-on research director, live simulation timing,
-recovery from derived-context errors, and separate run outputs, copied inputs and
-shared project files. See its
-[checks and known limits](docs/testing/0.5.4rc2-acceptance.md). Stable 0.5.3 remains
-available above; application versions share the existing research files.
+To operate your own hosted service, see [server mode](docs/how-to/public-trials.md).
+It has a durable queue, separate visitor allowances, GitHub sign-in and an optional
+confined executor for general Python, solver inputs and application builds. It does
+not expose the trusted local operator backend to visitors.
 
 1. In **Connections**, add a compatible API endpoint and key, or select an installed,
    authenticated CLI in the message composer
@@ -126,7 +134,7 @@ Minimal mode is the default: the agent chooses its research strategy while the
 host manages evidence, review and deadlines. Structured and frontier modes are
 also available. See [research modes and evidence](docs/how-to/research-service.md)
 and [architecture](docs/concepts/architecture.md).
-In **0.5.4rc2**, new minimal studies also use a [research director](docs/how-to/minimal-oversight.md#research-director-stop-and-replan)
+New minimal studies also use a [research director](docs/how-to/minimal-oversight.md#research-director-stop-and-replan)
 to check feasibility during long jobs, stop named experiments and request recorded
 replans. Its launch switch and decisions are visible in the workspace; scientific
 claim acceptance remains independent.
@@ -154,15 +162,13 @@ host; neither provides an OS security boundary. Read
   [evaluation status](docs/research/status.md),
   [research and release archive](docs/archive/index.md)
 
-**0.5.3** brings SSH experiment workers, the measured coding-agent leaderboard,
-ledger and recovery repairs, and shared conversation/study/evidence navigation.
-The **0.5.4rc2 preview** adds execution strategy control, recovery from derived
-context/report errors, receipt-backed progress and clearer simulation file categories.
-A resumed Al campaign reached its wall deadline without a recorded supervisor
-error; its reconnection attribution remains unresolved. These changes do not
-establish a scientific result or lower model cost.
+**0.6.0** adds the hosted service and shared chat/account layout, building on the
+SSH experiment workers, measured agent leaderboard, research director, recovery
+repairs and simulation file categories from the preceding releases. Hosted science
+uses the existing evidence service and independent review; an interactive plot or
+successful solver readiness check does not establish an accepted scientific claim.
 Release changes live in [CHANGELOG.md](CHANGELOG.md); checks and limits are in the
-[0.5.3 acceptance record](docs/testing/0.5.3-acceptance.md) and
+[0.6.0 acceptance record](docs/testing/0.6.0-acceptance.md) and
 [archive](docs/archive/index.md). The
 [documentation index](docs/index.md) covers the full guide set.
 

{simjecture-0.5.4rc2 → simjecture-0.6.0}/README.md

@@ -2,7 +2,7 @@
 
 [![DOI](https://zenodo.org/badge/DOI/10.5281/zenodo.21945748.svg)](https://doi.org/10.5281/zenodo.21945748)
 
-[Quickstart](#install-and-open-the-workspace) · [Documentation](docs/index.md) ·
+[Try online](https://simjecture.com) · [Quickstart](#install-and-open-the-workspace) · [Documentation](docs/index.md) ·
 [Recorded demo](docs/demos/gray-scott.md) · [Contributing](CONTRIBUTING.md) ·
 [Releases](https://github.com/tomzhu0225/simjecture/releases)
 
@@ -25,10 +25,11 @@ scope; see [scientific limitations](docs/research/limitations.md).
 
 ## Install and open the workspace
 
-On Linux or inside WSL, install **Simjecture 0.5.3**:
+Try the hosted workspace at **[simjecture.com](https://simjecture.com)**, or install
+**Simjecture 0.6.0** on Linux or inside WSL:
 
 ```bash
-curl -fsSL https://github.com/tomzhu0225/simjecture/releases/download/v0.5.3/install.sh | bash
+curl -fsSL https://github.com/tomzhu0225/simjecture/releases/download/v0.6.0/install.sh | bash
 ```
 
 The installer verifies the release bundle's checksum, sets up uv, Python 3.12 and
@@ -36,17 +37,18 @@ workspace dependencies, then starts the local GUI. Git and a CLI agent are not
 required. For Python-package installation, SSH forwarding or source setup, see
 [installation options](docs/getting-started/installation.md).
 
-To try the **0.5.4rc2 preview**, including research recovery and clearer simulation files:
+The local and hosted versions share a compact, expanding chat input, a persistent
+navigation rail and an account/workspace menu. Agent, model and effort settings
+live in the composer's model menu. The hosted service supplies inference and
+scientific tools and the official benchmark leaderboard; signed-in visitors can
+add files and retain their work. Guest
+conversations and artifacts are temporary and are removed after their last tab
+leaves, with a short grace period for refreshing or signing in.
 
-```bash
-curl -fsSL https://github.com/tomzhu0225/simjecture/releases/download/v0.5.4rc2/install.sh | bash
-```
-
-The preview includes a default-on research director, live simulation timing,
-recovery from derived-context errors, and separate run outputs, copied inputs and
-shared project files. See its
-[checks and known limits](docs/testing/0.5.4rc2-acceptance.md). Stable 0.5.3 remains
-available above; application versions share the existing research files.
+To operate your own hosted service, see [server mode](docs/how-to/public-trials.md).
+It has a durable queue, separate visitor allowances, GitHub sign-in and an optional
+confined executor for general Python, solver inputs and application builds. It does
+not expose the trusted local operator backend to visitors.
 
 1. In **Connections**, add a compatible API endpoint and key, or select an installed,
    authenticated CLI in the message composer
@@ -83,7 +85,7 @@ Minimal mode is the default: the agent chooses its research strategy while the
 host manages evidence, review and deadlines. Structured and frontier modes are
 also available. See [research modes and evidence](docs/how-to/research-service.md)
 and [architecture](docs/concepts/architecture.md).
-In **0.5.4rc2**, new minimal studies also use a [research director](docs/how-to/minimal-oversight.md#research-director-stop-and-replan)
+New minimal studies also use a [research director](docs/how-to/minimal-oversight.md#research-director-stop-and-replan)
 to check feasibility during long jobs, stop named experiments and request recorded
 replans. Its launch switch and decisions are visible in the workspace; scientific
 claim acceptance remains independent.
@@ -111,15 +113,13 @@ host; neither provides an OS security boundary. Read
   [evaluation status](docs/research/status.md),
   [research and release archive](docs/archive/index.md)
 
-**0.5.3** brings SSH experiment workers, the measured coding-agent leaderboard,
-ledger and recovery repairs, and shared conversation/study/evidence navigation.
-The **0.5.4rc2 preview** adds execution strategy control, recovery from derived
-context/report errors, receipt-backed progress and clearer simulation file categories.
-A resumed Al campaign reached its wall deadline without a recorded supervisor
-error; its reconnection attribution remains unresolved. These changes do not
-establish a scientific result or lower model cost.
+**0.6.0** adds the hosted service and shared chat/account layout, building on the
+SSH experiment workers, measured agent leaderboard, research director, recovery
+repairs and simulation file categories from the preceding releases. Hosted science
+uses the existing evidence service and independent review; an interactive plot or
+successful solver readiness check does not establish an accepted scientific claim.
 Release changes live in [CHANGELOG.md](CHANGELOG.md); checks and limits are in the
-[0.5.3 acceptance record](docs/testing/0.5.3-acceptance.md) and
+[0.6.0 acceptance record](docs/testing/0.6.0-acceptance.md) and
 [archive](docs/archive/index.md). The
 [documentation index](docs/index.md) covers the full guide set.
 

{simjecture-0.5.4rc2 → simjecture-0.6.0}/SECURITY.md

@@ -39,9 +39,34 @@ certification for hostile code.
 
 ## Local web boundary
 
-The web interface is a loopback-only operator tool, not a hosted or multi-user
+The `simjecture web` interface is a loopback-only operator tool, not a hosted or multi-user
 service. Do not expose it through a public port or reverse proxy. Use SSH port
 forwarding for remote access. Mutating requests require the per-process browser
 control token, and agent-authored artifacts are delivered under a restrictive
 content-security policy. Use `simjecture web --read-only` when reviewing a record;
 review record contents for private data before sharing them.
+
+## Optional hosted service
+
+`simjecture serve` is a separate, quota-controlled tenant service introduced in
+0.6.0. It shares presentation assets with the operator workspace, not its API or
+control token. Projects, uploads, jobs and verified artifact downloads check
+visitor/account ownership. Model and installation settings remain operator-owned.
+GitHub identity is verified server-side; owner privileges require an explicitly
+configured immutable account ID. OAuth client credentials remain in RAM and must
+be provisioned again after a restart.
+
+General code execution is opt-in and requires a separately commissioned Linux
+broker and a private Unix HTTP gateway. The broker drops to a reserved job UID and
+enforces Landlock, seccomp and resource limits before executing code. It fails
+closed, kills all processes using that UID before collecting files, rejects
+symbolic/hard links and reads console output through its original descriptors.
+Never expose the gateway's trusted client-address path over a localhost TCP port
+that scientific jobs can access.
+
+This namespace-independent profile is not a network namespace, a hardware GPU
+partition or an external security certification. Protect other network services
+on the dedicated host. Keep application/configuration code operator-owned, and
+exclude credentials and unrelated personal data from allowed scientific source
+roots. See [server deployment](docs/how-to/public-trials.md) for configuration,
+guest cleanup, identity, budgets and qualification requirements.

{simjecture-0.5.4rc2 → simjecture-0.6.0}/docs/conf.py

@@ -3,7 +3,7 @@ from __future__ import annotations
 project = "Simjecture"
 author = "Bowen Zhu"
 copyright = "2026, Bowen Zhu and contributors"
-release = "0.5.4rc2"
+release = "0.6.0"
 
 extensions = [
     "myst_parser",

{simjecture-0.5.4rc2 → simjecture-0.6.0}/docs/getting-started/installation.md

@@ -5,13 +5,13 @@
 On Linux or inside an existing WSL distribution:
 
 ```bash
-curl -fsSL https://github.com/tomzhu0225/simjecture/releases/download/v0.5.3/install.sh | bash
+curl -fsSL https://github.com/tomzhu0225/simjecture/releases/download/v0.6.0/install.sh | bash
 ```
 
-This command selects stable **0.5.3**, including SSH experiment workers and shared
-conversation/study/evidence navigation. Existing projects, provider settings,
+This command selects stable **0.6.0**, including the compact chat/account layout,
+SSH experiment workers and shared conversation/study/evidence navigation. Existing projects, provider settings,
 runtimes and older program versions are preserved. See
-[release scope and checks](../testing/0.5.3-acceptance.md) and
+[release scope and checks](../testing/0.6.0-acceptance.md) and
 [SSH worker setup](../how-to/ssh-workers.md).
 
 No Git, Python environment or CLI agent setup is required in advance. The bootstrap
@@ -35,7 +35,7 @@ remove older versions or research outputs.
 To install without starting, or choose a different web port:
 
 ```bash
-curl -fsSL https://github.com/tomzhu0225/simjecture/releases/download/v0.5.3/install.sh | bash -s -- --no-start
+curl -fsSL https://github.com/tomzhu0225/simjecture/releases/download/v0.6.0/install.sh | bash -s -- --no-start
 ~/simjecture/start-workspace --port 8765
 ```
 

{simjecture-0.5.4rc2 → simjecture-0.6.0}/docs/getting-started/web-interface.md

@@ -10,6 +10,18 @@ The owning conversation is resolved from recorded study ownership, not a browser
 return URL. Standalone CLI studies show **Standalone study**, without inventing a
 conversation. Read-only sessions keep navigation while disabling mutations.
 
+The permanent dark rail has an experiment-monitor button above its bottom account
+button. Open the account menu for theme, workspace details and the GitHub link;
+local workspaces also offer Connections there. The chat input stays compact when
+empty, expands with the draft and offers a larger editor for long messages. Its
+model menu contains the local agent, model and effort choices. Narrow inspector
+tabs have overflow arrows and accept horizontal scrolling or the mouse wheel.
+
+The [hosted service](../how-to/public-trials.md) uses the same layout with
+operator-managed compute and models. Signed-in visitors can upload files and keep
+their work. Guest work is temporary. Clicking a hosted artifact downloads it;
+plots can still be previewed inside the conversation.
+
 The local web interface is the primary human-facing view of a Simjecture
 campaign. It makes the scientific structure visible without replacing the
 durable record. New native studies default to minimal; mode, backend and model
@@ -174,6 +186,10 @@ or DSH. Only the explicit legacy DSH route needs the
 
 ## Local security boundary
 
+For the separate development public trial gateway, see
+[public trials](../how-to/public-trials.md). Its controlled tools and visitor
+sessions do not change the operator workspace's boundary described below.
+
 The local web interface is intentionally an operator tool rather than a hosted service:
 
 - the server refuses non-loopback bind addresses;