site: restore the remote SSH copy — HELD, do not merge (FRE-997, remote half)

DO NOT MERGE OR DEPLOY THIS BRANCH. It is the held half of FRE-997, split out of a336a6c at the Code Review Engineer's changes-requested verdict and the Chief of Staff's 2026-11-03 launch hold (comment 2ccad154), and it is stacked on `freno-dev/FRE-997-count-18` so its own diff stays remote-only. The copy it restores was pulled by FRE-323 (c1c498e, c718370). FRE-997's argument is that those removals were checked against claims the copy never made: hosts come from `~/.ssh/config` and Tailscale (`RemoteHostDiscovery`), the one-time `ssh-copy-id` is a prerequisite the row hands the user as a command (`RemoteHostStatus.fixCommand`), the per-host credential is minted and copied over (`RemoteMirror`), and a remote host mirrors this Mac's integrations (`RemoteMirrorReconcile`). Two things in the old copy were genuinely wrong and are fixed rather than restored: the "every hooked agent" overstatement (Muse, Cline and Amp are `.unsupported` for remote and are named) and the count. It may land only when all of these are recorded on FRE-997: 1. a CTO verdict that the one-click flow was run on the shipping build; 2. footage of a remote agent joining the island; 3. the Chief of Staff revising the FRE-346 §3 launch gate and taking the public-claim call to the sponsor. Until then the live site keeps the FRE-323 state. The restore condition this commit deletes (`marketing/drafts/remote-ssh/copy.md`) is the gate being cited: FRE-205 is todo/unassigned, FRE-320 is a verdict task, and no recording exists. - The Remote collage tile and its mock. - The "Any SSH box, one click away" breakdown with its RemoteHostDemo. - The "One-click SSH setup" chip. - The /agents remote paragraph and the Cline/Amp "this Mac only" rows. - The approvals bullet names the three local-only agents instead of claiming every hooked agent. - remote-claims.test.ts guards the restored copy plus the two overstatements that must not return. - positioning.md moves remote SSH to publishable with its backing. Gate on this branch, this run: `bun test src/routes/nook` 17 pass / 0 fail; `bun run build` succeeds. Green tests do not lift the hold.
2026-11-04 00:30:21 +00:00
parent 25ec84ceb4
commit 6ff31346ff
9 changed files with 288 additions and 209 deletions
--- a/src/routes/nook/agents.test.ts
+++ b/src/routes/nook/agents.test.ts
@@ -25,6 +25,9 @@ const SOURCE = readFileSync(join(import.meta.dir, "agents.tsx"), "utf8");
 /** User-facing copy only: comments are not copy and may name the old wording. */
 const COPY = SOURCE.replace(/\/\*[\s\S]*?\*\//g, "").replace(/^\s*\/\/.*$/gm, "");

+/** JSX wraps prose across lines; match a sentence, not its indentation. */
+const PROSE = COPY.replace(/\s+/g, " ");
+
 /** AgentSpec.all display names, in registry order (18 rows). @ The-Nook f4258034, 2026-10-29 */
 const REGISTRY = [
  "Claude Code",
@@ -67,3 +70,21 @@ describe("Nook /agents roster", () => {
    expect(COPY).not.toContain("all thirteen");
  });
 });
+
+describe("Nook /agents remote coverage", () => {
+  it("says agents can run on remote machines over SSH", () => {
+    expect(PROSE).toContain("remote machines");
+    expect(PROSE).toContain("remote sessions report into the same grid");
+  });
+
+  it("names the three agents that stay on this Mac", () => {
+    expect(PROSE).toContain("Muse, Cline and Amp run on this Mac only");
+  });
+
+  it("discloses the local-only rows where they are listed", () => {
+    const localOnly = [
+      ...SOURCE.matchAll(/This Mac only — remote hosts skip it/g)
+    ];
+    expect(localOnly.length).toBe(3);
+  });
+});
--- a/src/routes/nook/agents.tsx
+++ b/src/routes/nook/agents.tsx
@@ -209,7 +209,8 @@ const AGENTS: AgentEntry[] = [
  },
  {
    name: "Cline",
-    wiring: "One hook file per event in its hooks directory",
+    wiring:
+      "One hook file per event in its hooks directory. This Mac only — remote hosts skip it",
    events: [
      "SessionStart",
      "SessionEnd",
@@ -334,7 +335,8 @@ const AGENTS: AgentEntry[] = [
  },
  {
    name: "Amp",
-    wiring: "In-process extension package",
+    wiring:
+      "In-process extension package. This Mac only — remote hosts skip it",
    events: [
      "SessionStart",
      "SessionEnd",
@@ -387,7 +389,9 @@ export default function NookAgentsPage() {
          Each agent reports its own set of events. "Allow / Deny from a card"
          means the agent hands the decision to The Nook while it waits;
          "Observe" means every event still appears live, but the agent keeps
-          its own prompting.
+          its own prompting. Agents can run on this Mac or on remote machines
+          over SSH — remote sessions report into the same grid. Muse, Cline and
+          Amp run on this Mac only.
        </p>

        <div class="grid gap-4 lg:grid-cols-2">
--- a/src/routes/nook/remote-claims.test.ts
+++ b/src/routes/nook/remote-claims.test.ts
@@ -1,41 +1,27 @@
 /**
- * Regression test for the removed remote / SSH claims and the removed agent
- * count (FRE-323, FRE-359 verdict B).
+ * Guard for the remote / SSH story on the Nook site, and for the two phrasings
+ * that must not come back with it (FRE-323 → FRE-997).
 *
- * FRE-323 took the remote story off the site because it was unverified and
- * demo-gated (FRE-315, FRE-320, FRE-322 §3 correction 4): the "one click
- * installs the nook-hook" flow is app-UI-only, needs a hand-edited
- * `~/.ssh/config` for any host not already in ssh config or on the tailnet,
- * needs a one-time `ssh-copy-id` because the app runs ssh with
- * `BatchMode=yes`, and has no manual fallback for minting the per-host
- * credential. FRE-359 verdict B removed the coverage count for the same
- * reason: the /agents table lists 13 of the registry's 18 rows.
+ * FRE-323 removed the remote copy because it had been checked against claims
+ * the copy never made: the app does list hosts from `~/.ssh/config` and
+ * Tailscale, a one-time `ssh-copy-id` is a normal prerequisite the row explains,
+ * and the per-host credential is minted and copied automatically
+ * (`RemoteHostDiscovery`, `RemoteHostStatus.fixCommand`, `RemoteMirror`). Two
+ * things in the old copy were genuinely wrong, and this file guards those
+ * instead of the copy as a whole:
 *
- * FRE-997 corrects the second half without touching the first. The count was
- * stale, not unverifiable: `AgentSpec.all` holds eighteen, /agents now lists
- * all eighteen and `agents.test.ts` asserts that roster as an equality again.
- * So the two completeness phrasings FRE-359 banned ("every coding agent",
- * "Supported agents") no longer rest on a 13-of-18 gap — the ban existed
- * because the page claimed the set and listed two thirds of it. They are out
- * of `BANNED_COVERAGE` on this branch for that reason alone; the stale counts
- * stay banned, and every FRE-323 remote sentence stays banned, because this
- * branch still carries the FRE-323 site state.
+ *  - "Works across every hooked agent, local or remote" overstated it. Muse,
+ *    Cline and Amp are `.unsupported` for remote in `AgentSpec.remote`, so the
+ *    landing bullet and the /agents paragraph name them.
+ *  - The count said thirteen while `AgentSpec.all` holds eighteen. The fix was
+ *    to say eighteen, not to drop the count.
 *
- * The copy was not thrown away — it is parked in
- * `marketing/drafts/remote-ssh/` with the restore gate, and this test asserts
- * it is still there so nobody deletes the parked story as stale. It goes back
- * on the site only when the one-click install ships and is recorded.
+ * So the removal guards from `d44133f` are gone: a removed sentence is exactly
+ * what this task restores. What stays is the pair of bans, because either one
+ * coming back would repeat the original defect.
 *
 * STATIC SOURCE AUDIT, the same pattern as `agents.test.ts` and
 * `downloads.test.ts` (SolidJS does not render under `bun:test`).
- *
- * Deliberate exceptions, not audited here — both were weighed with the Chief
- * of Staff at the go/no-go and left in place on purpose:
- *  - `src/routes/nook/agents.tsx` Muse row: "This Mac only — remote hosts skip
- *    it" is a limitation disclosure, not a capability claim.
- *  - `src/components/nook/IslandExtras.tsx` "Tailscale hosts" chip: adjacent to
- *    the removed remote story, but tailnet host lookup does exist. Raised on
- *    FRE-323 rather than widened into this correction.
 */
 import { describe, it, expect } from "bun:test";
 import { readFileSync } from "node:fs";
@@ -43,7 +29,7 @@ import { join } from "node:path";

 const ROOT = join(import.meta.dir, "../../..");

-/** Shipped page and component source. Tests and drafts may quote the old copy. */
+/** Shipped page and component source. */
 const AUDITED = [
  "src/routes/nook/index.tsx",
  "src/routes/nook/agents.tsx",
@@ -53,27 +39,15 @@ const AUDITED = [
  "src/components/nook/IslandExtras.tsx"
 ];

-/** Every sentence FRE-323 ordered off the site. */
+/** The overstatements the restored copy must never carry again. */
 const BANNED_REMOTE_CLAIMS = [
-  "Agents on other machines",
-  "one click installs the nook-hook",
-  "Any SSH box",
-  "Works across every hooked agent, local or remote",
-  "Remote sessions are ordinary rows",
-  "One-click SSH setup",
-  "remote machines over SSH",
-  "this Mac or remote machines"
-];
-
-/** FRE-359 verdict B: no stale count, in any form.
- *
- * "every coding agent" and "Supported agents" left this list with FRE-997:
- * the page now lists all eighteen registry rows and `agents.test.ts` asserts
- * that equality, so the completeness claim is backed rather than incomplete. */
-const BANNED_COVERAGE = [
+  // a universal claim: three registry agents cannot mirror over SSH
+  "every hooked agent, local or remote",
+  "Works across every hooked agent",
+  // the stale count this task replaced
+  "13 agents",
  "all thirteen",
-  "thirteen coding agents",
-  "13 agents"
+  "thirteen coding agents"
 ];

 /** User-facing copy only: comments are not copy and may name the old wording. */
@@ -83,9 +57,46 @@ function copyOf(file: string): string {
    .replace(/^\s*\/\/.*$/gm, "");
 }

-describe("remote claims stay off the site (FRE-323)", () => {
+describe("the restored remote copy is on the site (FRE-997)", () => {
+  it("the landing collage sells agents on other machines", () => {
+    const copy = copyOf("src/components/nook/FeatureCollage.tsx");
+    for (const phrase of [
+      "Agents on other machines",
+      "one click installs the nook-hook",
+      "Remote"
+    ]) {
+      expect(copy).toContain(phrase);
+    }
+  });
+
+  it("the landing breakdown keeps the SSH section and its demo", () => {
+    const copy = copyOf("src/components/nook/FeatureBreakdowns.tsx");
+    for (const phrase of [
+      "Any SSH box, one click away",
+      "Pick a host from your ssh config or your tailnet and click once",
+      "Remote sessions are ordinary rows",
+      "RemoteHostDemo"
+    ]) {
+      expect(copy).toContain(phrase);
+    }
+  });
+
+  it("the chip is back", () => {
+    expect(copyOf("src/components/nook/IslandExtras.tsx")).toContain(
+      "One-click SSH setup"
+    );
+  });
+
+  it("/agents says remote sessions report into the same grid", () => {
+    const copy = copyOf("src/routes/nook/agents.tsx");
+    expect(copy).toContain("remote machines");
+    expect(copy).toContain("remote sessions report into the same grid");
+  });
+});
+
+describe("the two original overstatements stay off the site (FRE-323, FRE-359)", () => {
  for (const file of AUDITED) {
-    it(`${file} does not restore a removed remote sentence`, () => {
+    it(`${file} claims no universal remote coverage and no stale count`, () => {
      const copy = copyOf(file);
      for (const phrase of BANNED_REMOTE_CLAIMS) {
        expect(copy.toLowerCase()).not.toContain(phrase.toLowerCase());
@@ -93,34 +104,9 @@ describe("remote claims stay off the site (FRE-323)", () => {
    });
  }

-  it("/agents no longer offers remote sessions", () => {
-    const copy = copyOf("src/routes/nook/agents.tsx");
-    expect(copy).not.toContain("remote sessions report into the same grid");
-    expect(copy).not.toContain("on this Mac or on remote");
-  });
-
-  it("the parked copy still exists, so restoring the story is a revert and not a rewrite", () => {
-    const parked = readFileSync(join(ROOT, "marketing/drafts/remote-ssh/copy.md"), "utf8");
-    for (const phrase of ["Agents on other machines", "Any SSH box, one click away"]) {
-      expect(parked).toContain(phrase);
-    }
-    expect(readFileSync(join(ROOT, "marketing/drafts/remote-ssh/rationale.md"), "utf8")).toContain(
-      "FRE-320"
+  it("the landing names the agents that stay local", () => {
+    expect(copyOf("src/components/nook/FeatureBreakdowns.tsx")).toContain(
+      "Muse, Cline and Amp are this Mac only"
    );
  });
 });
-
-describe("the agent count is corrected, not dropped (FRE-997)", () => {
-  for (const file of AUDITED) {
-    it(`${file} states no stale count`, () => {
-      const copy = copyOf(file);
-      for (const phrase of BANNED_COVERAGE) {
-        expect(copy.toLowerCase()).not.toContain(phrase.toLowerCase());
-      }
-    });
-  }
-
-  it("/agents states the registry's size", () => {
-    expect(copyOf("src/routes/nook/agents.tsx")).toContain("Supported agents");
-  });
-});