Release Aiden Agent 0.40.0

[sambitcreate]

Release 0.40.0

Assembles the reviewed feature branches on top of current main (which already includes #107/#108 and the models.dev catalog refresh).

Included merges

• Replace xterm.js with Ghostty libghostty-vt in the workspace terminal #81 — Replace xterm.js with Ghostty libghostty-vt workspace terminal
• Simplify setup journeys with guided phone pairing and bot creation #96 — Guided phone pairing and two-step bot creation
• Fix Settings switch geometry and stabilize Model Pad chrome #101 — Fix Settings switch geometry and Model Pad chrome
• Fix custom provider icons in the model picker and Model Pad #102 — Fix custom provider icons in the model picker and Model Pad
• Keep new agent chats as drafts until the first message is sent #103 — Keep new agent chats as drafts until first send
• Add desktop peer connection foundation #104 — Add desktop peer connection foundation
• fix: scheduled-task provider resolution, journalless Pi rollout generation, remote 4xx evidence #105 — Fix scheduled provider resolution and Pi rollout evidence
• Make composer access and thinking menus opaque #106 — Make composer access/thinking menus opaque

Conflict resolution

• Kept every feature's test registration in package.json; removed the xterm dependencies that Ghostty replaces and retained test:ghostty-terminal plus asset verification in build/pretest/pretest:coverage.
• Retained desktop host labels (Mac/Linux/iPad/iPhone) over stale phone-only copy.
• Combined scheduled provider/model fields with the approved Access and notifications section.
• Plans inventory and papercut log reconciled additively.

Validation

• npm ci, type-check, lint, diagnostics, branding, model catalog, full npm test, native Foundation Models, npm run build, deterministic Electron E2E, and production-profile diagnostics all pass locally.
• The two chat-message-queue sidebar-title E2E cases only fail on hosts where Apple Foundation Models report ready (local Apple Intelligence machine); they pass in CI-like conditions with the helper unavailable, matching hosted runner behavior.
• release:check-consumers aligned.

[pullfrog]

Important

This release introduces one user-visible regression in the new Ghostty terminal: the canvas backing store is sized from the host's padding box while the canvas lays out in the content box, so the bitmap is browser-downscaled and pointer hit-testing (selection, links, mouse reporting, IME) is offset. Details inline. The release assembly, conflict resolutions, peer client, and empty-chat migration all traced clean.

Reviewed changes — the full 0.40.0 release-integration diff (186 files, 48 commits) against main at cac54b3b, including every merge-conflict resolution and the highest-risk subsystems.

• Release assembly — eight reviewed feature branches (#81, #96, #101–#106) merged onto current main, version bumped to 0.40.0, and the package.json, Pi session store, and settings-editor conflicts resolved additively (both sides' test registrations and fields survive).
• Ghostty terminal — replaces xterm.js with libghostty-vt (WASM runtime/renderer/surface, key codes, link handling), adds the CSP wasm-unsafe-eval allowance and Vite wasm asset handling, and drops the xterm dependencies.
• Desktop peer connections — outbound peer-* client with pinned-SPKI transport, sealed pairing envelope, closed operation table, OpenAPI-validated responses, and an encrypted host store, plus remote:peers* IPC and mac/linux device types.
• Draft agent chats — renderer draft records, a single chats:createWithFirstMessage commit with a first-message receipt and turn-admission retention, and a one-time legacy empty-chat migration.
• Scheduled provider resolution / Pi rollout — App default provider/model selection for scheduled tasks, journalless generation for rollout-ineligible chats, and query-free routePath remote diagnostics.
• Guided phone setup — acknowledged one-action setupPairing with rollback, reworked Remote Access settings, and paired iOS/Android copy.
• UI fixes — Settings switch geometry, custom provider artwork persistence, opaque composer menus, and Model Pad chrome.

ℹ️ Ghostty pointer interactions have no automated coverage

The terminal's new E2E spec asserts only against the sr-only accessible log, and surface.test.ts covers two pure helpers, so pointer geometry (selection, link hover/activation, mouse reporting, IME placement) is untested. The canvas-sizing issue above would not be caught by CI; a small fit() assertion or a pointer-selection Playwright case would pin the contract.

Technical details

# Ghostty pointer interactions lack automated coverage

## Affected sites
- `renderer/lib/ghostty-terminal/surface.test.ts:5-15` — covers only `isTerminalHostReservedShortcut` and `isTerminalLinkActivatable`.
- `tests/e2e/terminal.spec.ts:24-54` — asserts `.ghostty-screen` visibility, focus, and the `role="log"` output; no pointer or selection path.
- `renderer/lib/ghostty-terminal/surface.ts:870-907` — the `fit()` sizing contract a unit assertion could pin.

## Required outcome
- A test that fails when the drawn cell geometry and the pointer→cell mapping diverge, for example `canvas.width === canvas.clientWidth * dpr` after `fit()`, or a Playwright drag that selects a known cell.

  ^{｜ Fix all ➔ ｜ Fix 👍s ➔ ｜ View workflow run ｜ Using DeepSeek Flash ｜ 𝕏}

[pullfrog]

✅ No new issues found.

Reviewed changes — the incremental delta since the prior pullfrog review (5c5b3e25 → dc9c81bc): the Ghostty terminal geometry fix that resolves the previous review's inline finding.

• Canvas-based geometry — fit() and the initial grid in create() now derive the backing store and grid from canvas.clientWidth/clientHeight instead of the host's p-2 padding box, so the bitmap maps 1:1 onto the canvas CSS box and cellAt/linkAt/sendMouse share the drawing coordinate space.
• IME anchoring — the hidden composition textarea now offsets by canvas.offsetLeft/offsetTop so the candidate window lands on the cursor under the corrected geometry.
• Regression test — renderer/components/terminal-drawer.test.tsx pins canvas-based sizing and canvas-origin IME anchoring, and fails against the old mount-based patterns; npm run test:ghostty-terminal passes 15/15.

  ^{｜ View workflow run ｜ Using DeepSeek Flash ｜ 𝕏}