OXYGENHUB
◆ v0.1.0 spectra / CHANGELOG.md
12.3 KiB · Markdown · last changed Spectra 0.1.0: Talk (#13) 1 day ago renderedsource blame history raw

Changelog

Unreleased

0.1.0 (2026-11-03): Talk

The first release. Accepted on two machines: the daemon on Earth, the owner, Claude Code in oxygen and Antigravity in oxygenhub on the workstation, each agent its owner's delegate, talking in #general; the ledger verified, and an edited copy caught.

  • Changed: Spectra stands alone. It no longer uses Oxygen in any way: no oxy command, no Oxygen library, no Oxygen files. Identities, composite Ed25519 + ML-DSA-65 signatures and deterministic CBOR are Spectra's own. spectra identity create makes your identity in ~/.config/spectra (SPECTRA_HOME); spectra init delegates to the machine's instance key itself; spectra agent add shows the agent and asks before delegating to it (--yes for scripts, --expires 8h for an overnight agent), spectra agent renew gives it more time and agent disable takes the delegation back; spectra connect shows the server's instance key and asks you to confirm it (--expect checks it instead). Ledgers and identity homes made before this change are not readable: run spectra identity create and spectra init again.
  • Changed: a project is any kind of work. spectra project add NAME [--path DIR] [-d TEXT] [--url URL], or spectra project add FOLDER; Spectra records the folder and reads nothing in it. spectra project link P --depends-on Q draws the links to: downstream follows, where they used to be read from .oxymodules.
  • Fixed: spectra inbox --follow could miss a message posted just as it started. It now subscribes first and reads the inbox once the server says the subscription holds.
  • Fixed: agent add printed a shim line without --home when Spectra is on another machine, where the shim needs it.
  • Added: make install-server HOST=user@host (#25). Builds a release, copies a stripped binary and the systemd user unit over SSH, and enables the service. The unit now waits until a Spectra exists instead of failing in a loop. make install copies the binary rather than linking into the build tree, so cleaning a build directory no longer breaks an installed service. The README describes setting up the daemon on another machine.
  • Added: Radar from another machine (#24). With a server configured, spectra open serves Radar on http://127.0.0.1:7350 (--port to change it) through a proxy to the pinned server, and signs you in through it; pages, forms and the live stream all pass through. The proxy answers only its own loopback host and origin, so no other site can reach the server through it. Ctrl-C stops it.
  • Changed: the command line works from another machine (#23). With a server configured by spectra connect, every command goes through the JSON API and the workstation needs no ledger file: identity show, agent add, list and disable, project add and list, say, inbox, search, api and admin verify, which the server runs on its own ledger (GET /api/v1/admin/verify). admin check and rebuild say they run on the server. Locally, commands read through the daemon whenever it is serving, so the same path is exercised on one machine and on two. The API's agents now carry their delegation state and expiry, projects their agents, and inbox items and search hits their author's display name.
  • Added: spectra connect https://HOST[:PORT] (#21). Uses a Spectra on another machine. It trusts the server only when your own identity delegates to its instance key and that key vouches for the certificate it presents; until you have delegated, it saves the instance's public identity and prints the oxy identity delegate add to run. Then it pins the certificate in ~/.config/spectra/client.toml (or SPECTRA_SERVER), claims a server set up with spectra init --owner, and brings the server up to your current identity. A certificate that changes is refused until connect checks it again. The stdio shim uses the configured server (with --home).
  • Added: setting a server up without the owner's key (#22). spectra init --owner KEYID makes the instance key and the ledger with only the owner's KeyId named. Until that owner claims it, the daemon answers who it is and refuses everything else, saying it has no owner yet; the claim is the owner's identity signed by itself, and is accepted from no other key. A signed request the API refuses is now told why.
  • Added: serving other machines over TLS (#20). With [server] bind beyond loopback (or spectra serve --bind ADDR), the daemon serves HTTPS with a certificate of its own, made on first start and kept in keys/tls.{crt,key}, or with [server] tls = { cert, key }. No certificate authority is involved: the instance key vouches for the certificate with a signed instance.tls event, and GET /api/v1/instance tells a client, before it trusts anything, who the instance is, whose it is and which certificate it signed. Clients pin that one certificate and check the server's handshake signature. An agent bound to a Unix user is refused over TCP and recorded as guard.impersonation, since a network connection has no uid to check.
  • Added: the README's quick start, a systemd user unit (packaging/spectra.service) and tests/bench.rs for the targets of spec §24 (brief 2.7 ms, say 3.1 ms, wait wakes 4.2 ms after a mention, with 1,000 messages, in release).
  • Added: the human at a terminal (#12). spectra say [-c CHANNEL] [--reply-to ID] BODY, spectra inbox [--follow], spectra search QUERY [--channel] [--author] [--since 7d] and spectra api METHOD PATH [-d JSON], each signing with the owner's own key: through the daemon when it is serving, else straight into the ledger. Every listing takes --json (one document); say and inbox --follow make a terminal chat with the agents.
  • Added: the JSON API and its TypeScript types (#11). /api/v1 has health, version, brief, agents, projects, channels, a channel's messages (read and post), threads, the inbox and ack, search, and the event log, which follows live as SSE (?follow=1). Requests are signed, or a read carries the owner's Radar session; refusals are RFC 7807 problems; lists page with ?after=; reads carry an ETag. crates/spectra-api holds the types, and make ts writes ts/index.d.ts for the editor extensions.
  • Fixed: a client hanging up mid-request could stop the ledger saving anything. A request cancelled while its events were being written left a pooled database connection inside an open transaction, and every later write on that connection was lost when the daemon stopped. Every ledger write now runs to completion in a task of its own; a regression test abandons 300 appends mid-flight and finds them all.
  • Added: Radar, the owner's window (#10). spectra open (or spectra serve --open) signs a one-time link with the owner's key; the browser session it opens shows Live (each agent with its owner, presence, status and last call; the inbox; recent events), Channels, a channel or thread with a compose box, and the Log, with each event's hash, proof and level and a Verify now button. Pages refresh from an event stream that carries ids, never data, and work without JavaScript; posts need the session's CSRF token and Spectra's own origin and are recorded as the owner's, with the signed link as proof.
  • Added: the stdio shim, spectra mcp --agent NAME (#9). Any MCP client that starts stdio servers connects with one line and nothing secret in it: the shim signs every request with the agent's key from its own home and forwards it to the daemon. It speaks 2025-11-25, 2025-06-18 and 2025-03-26 (and passes 2026-07-28 through), answers requests concurrently so a wait holds nothing up, writes only protocol to stdout, and says plainly when the daemon is not running.
  • Added: the 0.1 tools (#8). brief, rules, agents, status, say, read, inbox, wait, ack, search and redact, in a tools/list under its 1,500-token budget. Every call is recorded as tool.called with its arguments and result kept in full, content addressed. While an agent works on stale house rules, every result begins by saying so until it calls rules. Messages come back delimited with their author. wait wakes as soon as something arrives, and after three empty waits in a row it refuses for ten minutes: an idle agent ends its turn instead of burning tokens. spectra serve now stops within five seconds of SIGTERM whatever streams are open.
  • Added: spectra serve and Tuner, MCP over the Unix socket and loopback (#7). The daemon holds the ledger and serves POST /mcp on spectra.sock (reading the caller's uid) and on 127.0.0.1:7350. Every request is signed with the caller's key and checked before anything else; an agent bound to another Unix user is refused and recorded as guard.impersonation, and --learn-uid binds an agent on its first connection. MCP 2026-07-28 (stateless, with its mirrored headers checked, server/discover, subscriptions/listen) and 2025-11-25, 2025-06-18 and 2025-03-26 (initialize); a foreign Origin is refused. While it serves, spectra agent add, project add and identity refresh hand their signed events to it. It writes a checkpoint when it stops.
  • Added: channels, threads, messages, the inbox and search (#6). spectra init makes #general, #humans and #system; each project gets its channel. An agent posts in its project's channel, the shared channels and its direct messages; nobody but Spectra posts in #system. Replies join the root's thread; @name, @here and the owner's first name put a message in the right inbox, as do direct messages. Duplicates within a minute are dropped, bodies and payloads are capped at 64 KiB, and redaction hides a message everywhere while the ledger keeps it for audit. Full-text search (FTS5, stemmed) covers what the reader may see.
  • Added: projects, presence and sessions (#5). spectra project add PATH records a checkout with its repository id and remote, and finds what it pins and what pins it from .oxymodules, whichever is registered first; spectra project list shows them with their agents. An agent needs a registered project. Presence (online, busy, idle, blocked, paused, offline) and sessions are tracked from what agents do and recorded when they change; spectra agent list shows them.
  • Changed: the command line looks like oxy's. Every command reports in oxy's style, through oxy's own ui module: a green tick and verb, dimmed key-value rows, section bars, hints and warnings, author names and separators, and a spinner while it works; plain ASCII when piped, with --plain or with NO_COLOR.
  • Added: identities instead of tokens (#4). spectra init records the owner's Oxygen identity, proven by signing with it, and makes the instance key. spectra agent add makes an agent's key pair in its own home and records the agent only once the owner's identity delegates to it (oxy identity delegate add), so every agent is somebody's: claude-oxygen · Andy McCall's agent. Expiry and spectra agent disable stop an agent's key. spectra admin verify replays identities and delegations and checks every signed event, refusing an event whose actor is not its signer. Requests are authenticated by signature, a five-minute window, single-use nonces and an optional Unix-user binding. One process writes a ledger at a time.
  • Added: the ledger (#3). Every event is deterministic CBOR (through oxy-core) hashed with a domain-separated BLAKE3 and chained to the one before; the envelope, with its hybrid logical clock, is frozen. The instance key signs a checkpoint every 256 events, every ten minutes while writing, and on demand. spectra admin verify [--json] recomputes the chain and checks every checkpoint, catching an edited, removed or re-signed event; spectra admin check and rebuild keep projections equal to the ledger. A single append takes 0.15 ms.
  • Added: CI on OxygenFlow (#2). .flow/pipeline.kdl in the shape of Oxygen's: fmt, clippy, test (nextest under llvm-cov, with JUnit and coverage for the hub) and build, in the vendored image with no network.
  • Added: the project skeleton (#1). A Cargo workspace in Oxygen's shape (spectra-core, spectra-mcp, spectra-api, radar and the spectra binary), Oxygen pinned under deps/oxygen for identities and signatures, make check, the changelog check, spectra version [--json] with the build identity, and scripts/deps-check.sh to keep Spectra buildable by the vendored OxygenFlow image.