rdmsm4x-changelog-20260828-0408-tyrell-signal-glass-chat-release

Shipped Tyrell's Signal Glass application and Day-1 local fleet chat to the canonical master runtime with a verified rdmbair15m5 app canary, while preserving canonical source integration and broader fleet rollout as separate pending states.

Scope and why it matters

• Host changed: rdmsm4x only for source, runtime binary, LaunchAgent, project registry, coordination record, and release evidence.
• Read-only canary verification: rdmbair15m5; no file, app, daemon, credential, or configuration was changed there.
• No deployment claimed for rdmbair13m5, rdmpw3265m, rdmpw3275m, or jdmbair13m5. rdmpw3265m remains unreachable.
• Product result: a consistent native Signal Glass shell with a heatmap-first Observatory, selectable usage/traffic views, direct/group/channel agent chat, IRC moderation, provider discovery and write-only Keychain credential configuration, native Settings, and eight dark/light target screenshots.
• Architecture result: chat domain and UI remain protocol-neutral behind ChatTransport, PeerDiscovery, and ChatFileTransfer; the Day-1 master adapter is authenticated HTTP+JSON. File offers are metadata-only and never represented as completed byte transfer.
• Evidence result: vendor-authoritative, estimated, proxy-observed, activity-only, stale, partial, missing, and unavailable readings remain distinct. LiteLLM remains unavailable without real proxy-observed ingestion and explicit limit authority.

Source chronology and ownership

• Canonical source root preserved: /Users/richh/dev/apps/tyrell.
• Canonical main preserved at 53494a9755de0deadc70fa4faae506c894ae54a0; its pre-existing .DS_Store remains unrelated and untouched.
• One-writer worktree: /Users/richh/dev/_worktrees/tyrell-signal-glass-chat-20260827.
• Branch: codex/tyrell-signal-glass-chat-20260827.
• Eighteen-commit branch range: 972f7cb..52f09af.
• Final implementation commit: f14115c9fd56358967f4938aad3d7d951d7627d9.
• Lifecycle-record branch HEAD: 52f09af4924a19d27466f56ba7756a19ac1a30e6.
• Canonical integration is pending; local deployment does not imply merge, push, or source acceptance.

Exact tracked files changed

• ISSUES.md
• Package.swift
• SESSION-STATE.md
• Sources/TyrellAppSupport/ChatEndpointResolver.swift
• Sources/TyrellAppSupport/ChatTransport.swift
• Sources/TyrellAppSupport/ObservatoryModels.swift
• Sources/TyrellAppSupport/ProviderCatalog.swift
• Sources/TyrellAppSupport/ShellNavigation.swift
• Sources/TyrellCore/BlockingWorkExecutor.swift
• Sources/TyrellCore/BoundedBlockingWorkExecutor.swift
• Sources/TyrellCore/ChatCommands.swift
• Sources/TyrellCore/ChatModels.swift
• Sources/TyrellCore/ChatPolicy.swift
• Sources/TyrellCore/ChatServerLogic.swift
• Sources/TyrellCore/ChatStore.swift
• Sources/TyrellCore/ManifestAdmissionGate.swift
• Sources/TyrellCore/SQLiteStateStore+Chat.swift
• Sources/TyrellCore/SQLiteStateStore.swift
• Sources/TyrellCore/ServerLogic.swift
• Sources/TyrellCore/UsageAggregate.swift
• Sources/tyrell-app/AppStatusFeed.swift
• Sources/tyrell-app/ChatViewModel.swift
• Sources/tyrell-app/CredentialStore.swift
• Sources/tyrell-app/FleetChatView.swift
• Sources/tyrell-app/MainShell.swift
• Sources/tyrell-app/ObservatoryView.swift
• Sources/tyrell-app/ProvidersView.swift
• Sources/tyrell-app/SettingsView.swift
• Sources/tyrell-app/ShellSidebar.swift
• Sources/tyrell-app/SignalGlassComponents.swift
• Sources/tyrell-app/SignalGlassTheme.swift
• Sources/tyrell-app/SupportingDestinations.swift
• Sources/tyrell-app/TyrellAppMain.swift
• Sources/tyrell-app/VisualFixtureCapture.swift
• Sources/tyrell-app/VisualFixtures.swift
• Sources/tyrell-app/WindowSceneBridge.swift
• Sources/tyrelld/ChatRoutes.swift
• Sources/tyrelld/ControlServer.swift
• Sources/tyrelld/Daemon.swift
• Sources/tyrelld/FleetUsage.swift
• Support/com.eastcoastscience.tyrelld.plist.template
• Tests/ScriptTests/make_app_bundle_contract_test.zsh
• Tests/TyrellAppSupportTests/ChatTransportTests.swift
• Tests/TyrellAppSupportTests/ObservatoryModelsTests.swift
• Tests/TyrellAppSupportTests/ProviderCatalogTests.swift
• Tests/TyrellAppSupportTests/ShellNavigationTests.swift
• Tests/TyrellCoreTests/BlockingWorkExecutorTests.swift
• Tests/TyrellCoreTests/ChatCommandParserTests.swift
• Tests/TyrellCoreTests/ChatModelsTests.swift
• Tests/TyrellCoreTests/ChatPolicyTests.swift
• Tests/TyrellCoreTests/ChatServerLogicTests.swift
• Tests/TyrellCoreTests/ChatStoreTests.swift
• Tests/TyrellCoreTests/LaunchAgentTemplateTests.swift
• Tests/TyrellCoreTests/ManifestAdmissionGateTests.swift
• Tests/TyrellCoreTests/ServerLogicTests.swift
• Tests/TyrellCoreTests/StateStoreTests.swift
• Tests/TyrellCoreTests/UsageAggregateTests.swift
• design/screenshots/signal-glass/README.md
• design/screenshots/signal-glass/SHA256SUMS
• design/screenshots/signal-glass/chat-dark.png
• design/screenshots/signal-glass/chat-light.png
• design/screenshots/signal-glass/observatory-dark.png
• design/screenshots/signal-glass/observatory-light.png
• design/screenshots/signal-glass/providers-dark.png
• design/screenshots/signal-glass/providers-light.png
• design/screenshots/signal-glass/settings-dark.png
• design/screenshots/signal-glass/settings-light.png
• docs/superpowers/plans/2026-08-27-tyrell-signal-glass-chat.md
• docs/superpowers/specs/2026-08-27-tyrell-signal-glass-chat-design.md
• script/build_and_run_app.sh
• scripts/make_app_bundle.zsh

Exact non-repository state changed

• Staged signed runtime: /Users/richh/Library/Application Support/Tyrell/releases/4748525/tyrelld.
• Live LaunchAgent plist: /Users/richh/Library/LaunchAgents/com.eastcoastscience.tyrelld.plist.
• Fresh rollback snapshot: /Users/richh/Library/Application Support/Tyrell/backups/20260828-034545-signal-glass-4748525/.
• Project registry row: /Users/richh/Library/Mobile Documents/com~apple~CloudDocs/Codex/projects/AGENTS.md principles/PROJECTS.md.
• Coordination record: /Users/richh/.agent-coordination/checkins/codex-tyrell-signal-glass-chat-20260827.md.
• This changelog: /Users/richh/dev/LLM/Claude/changelogs/rdmsm4x-changelog-20260828-0408-tyrell-signal-glass-chat-release.md.
• Ignored worktree evidence under .build/: signed builds, clone-gate logs, live-cutover guards/logs, soak evidence, samples, and values-free canary-check scripts.

Runtime release and rollback evidence

• Live service: gui/501/com.eastcoastscience.tyrelld, PID 95229 at verification time.
• Live executable: /Users/richh/Library/Application Support/Tyrell/releases/4748525/tyrelld.
• Executable architectures: x86_64 arm64.
• Team identifier: ZU2882L4HT.
• Executable SHA-256: 5e4bffa76ab6ba5d2f2c9746bef1cb880e98955d3e0ea62505a1be329a43409f.
• LaunchAgent: ProcessType=Interactive, plist mode 0444. This is required because Tyrell.app synchronously depends on the local HTTP service; Adaptive XPC transactions cannot elevate an HTTP-only transport.
• Database backup PRAGMA quick_check: ok.
• Database rows at backup and promotion: 1,194,209 files; 93,969 CAS-index entries.
• Earlier ad6e7d0 stabilization failure rolled back. One staging copy accidentally lost execute bits and was rejected by launchd as EX_CONFIG; its bytes/signature were unchanged, mode was corrected, and that attempt remained failed. A Background-classified candidate remained in xpcproxy without executing; the guarded attempt rolled back. The Interactive-classified attempt reached readiness on attempt 2 and passed 20/20 stabilization rounds.

Commands and validation performed

• swift test --filter daemonLaunchAgentProcessType was observed failing with Background, then passing after the template changed to Interactive.
• swift test passed 119 TyrellCore + 62 TyrellBarSupport + 18 TyrellAppSupport tests, 199 total.
• zsh Tests/ScriptTests/make_app_bundle_contract_test.zsh passed the signed-app failure contract.
• Universal release products were built and signed from an Aqua Terminal session; codesign --verify --strict and Team-identifier checks passed.
• Production clone gate: SQLite .backup to a private temporary DB, real read-only CAS, ports 43227/43228, 129 rounds, 645 endpoint checks, zero failures, stable file/CAS counts, quick_check=ok.
• Guarded live cutover: exact plist-array replacement, complete bootout wait, bootstrap retry, token read at runtime, readiness, 20 consecutive all-endpoint rounds, exact hash/team/mode/process-type checks, automatic rollback on every failure path.
• Live soak: 75 seconds, 67 rounds, 402 status/usage/fleet-usage/chat checks, zero failures, stable PID, unauthenticated chat 401, authenticated chat 200, valid fleet-usage JSON, quick_check=ok.
• Canary: SSH read-only check from rdmbair15m5; signed Tyrell.app PID 88323, executable SHA-256 80612111df9ae29415608f0e1e118bbef407ed139056ae7e00e5c39292585668, Team ZU2882L4HT; master status 200, unauthenticated chat 401, authenticated chat 200.
• shasum -a 256 -c design/screenshots/signal-glass/SHA256SUMS passed all eight screenshots.
• git diff --check passed.
• Gitleaks scanned the 18-commit Tyrell range with zero findings. The exact changed lifecycle/registry files also scanned with zero findings. A brute-force ignored-worktree scan reported 13 redacted patterns, all isolated to SwiftPM .build cache content: upstream SQLite/compiler-state patterns and GRDB's test .pfx fixture; none is tracked Tyrell source or release evidence.
• Final read-only Claude review dispatched as fleet-bus message 20260828-040007-D41C9970; no receipt or acceptance is inferred until a reply arrives.

How to undo

1. From the logged-in Aqua session, boot out gui/501/com.eastcoastscience.tyrelld and wait until launchctl print confirms the job is absent.
2. Restore /Users/richh/Library/Application Support/Tyrell/backups/20260828-034545-signal-glass-4748525/com.eastcoastscience.tyrelld.plist to /Users/richh/Library/LaunchAgents/com.eastcoastscience.tyrelld.plist, preserving its metadata and restoring mode 0444.
3. Bootstrap that restored plist into gui/501, retrying only after a complete bootout, then verify both ports and the chat 401 boundary. The restored plist points to the prior signed 276d054 release.
4. The live database did not require migration rollback; chat tables are additive. If database rollback is explicitly required, preserve the current database first and restore the consistent tyrell.db from the same backup directory only while the daemon is fully stopped.
5. Source rollback is simply to leave canonical main unchanged and retire the isolated branch/worktree after owner review; no force push, history rewrite, or destructive checkout is needed.

Outstanding owner actions and next features

• Review and integrate the isolated candidate into canonical main; final Claude review is pending.
• Run and separately record the TyrellBar-specific rdmbair15m5 canary and broader fleet rollout. Do not count rdmpw3265m until it is reachable and verified.
• Implement Bonjour/mDNS neighbor discovery, selectable future transports/relays, and file-byte transfer through the shipped protocol seams.
• Connect LiteLLM only through sanitized, provenance-stamped proxy-observed events; do not ingest credentials, prompt/response bodies, provider databases, or Tyrell's private ledger into unrelated projects.
• Continue the separately owned unified local/cloud session inventory and historical private-chat retire-versus-redesign decision.