site: restore the remote SSH copy and say eighteen agents (FRE-997)

The FRE-323 correction took the remote story off the site against claims the
copy never made: hosts do come from ~/.ssh/config and Tailscale
(RemoteHostDiscovery), the one-time ssh-copy-id is a prerequisite the row
hands the user as a command (RemoteHostStatus.fixCommand), the per-host
credential is minted and copied over (RemoteMirror), and a remote host
mirrors this Mac's integrations (RemoteMirrorReconcile). The removals also
dropped the agent count instead of correcting it: the page said thirteen,
AgentSpec.all holds eighteen.

- Revert c1c498e: the Remote collage tile and its mock, the "Any SSH box, one
  click away" breakdown with its RemoteHostDemo, and the "One-click SSH setup"
  chip are back.
- Revert c718370: /agents says remote sessions report into the same grid.
- The approvals bullet no longer claims "every hooked agent"; it names the
  three agents that cannot mirror. Muse, Cline and Amp are .unsupported for
  remote in AgentSpec.remote, so Cline and Amp rows now disclose it too.
- Count is 18 on the landing bullet, the marquee chip and all of /agents
  (title, description, ogTitle, H1 paragraph).
- The five missing rows are on /agents: Kimi, GitHub Copilot CLI, Crush,
  Cursor and Amp, events and gating taken from hook/setup.go,
  hook/normalize.go, hook/normalize_hosts.go, Sources/NookCore/Agents/
  HookConfigInstaller.swift and plugins/amp/index.ts. All five are Observe:
  kimi/copilot PreToolUse+PermissionRequest fire before the host's own check
  (awaitPolicyTable has no entry; kimi's PermissionRequest is
  notification-only), Crush documents one event, a silent Cursor permission
  hook blocks the action, Amp's plugin API has no permission-wait event.
- agents.test.ts asserts equality with the 18-name registry again, and the
  count; remote-claims.test.ts keeps only the two guards worth keeping (no
  universal remote claim, no stale thirteen).
- positioning.md: the held remote row becomes a publishable row with its
  backing, the count row becomes publishable at 18, and
  marketing/drafts/remote-ssh/ is deleted.

bun test src/routes/nook: 17 pass, 0 fail. Against d44133f with these two
test files the same suites give 10 fail (7 pass), so the guards prove the fix.
bun run build: ✔ build done (router client, SSR, server-fns, vercel preset).
bun test src/routes: 124 pass / 20 fail / 2 errors; the same 20 fail and 2
errors on d44133f, so they are pre-existing environment failures.
This commit is contained in:
2026-11-03 10:32:51 +00:00
committed by Paperclip Agent
parent dd368d21e7
commit a336a6c690
9 changed files with 407 additions and 257 deletions

View File

@@ -1,79 +0,0 @@
# Remote SSH copy — HELD, do not publish
**Status:** removed from the `freno-dev` source on 2026-10-29 in the FRE-323
correction, and **not yet off the live site** — the deploy is blocked on a write
credential to `mikefreno/freno-dev` (card `82d1e1b7`). `nook.freno.me` still
serves every sentence below until that push or a Vercel deploy lands.
**Owner:** CMO. **Verified by:** CTO, on the FRE-320/FRE-205 work.
**Restore only when:** FRE-320/FRE-205 ship a genuinely one-click install, the CTO
verifies that flow, and a recording shows a remote agent joining the island.
Until then this file is the only home for these sentences.
## What was removed
### 1. Landing collage tile
Source: `src/components/nook/FeatureCollage.tsx` (removed 2026-10-29).
```
kicker: Remote
title: Agents on other machines
body: Run agents on Linux boxes and SSH servers — one click installs the
nook-hook, and their sessions join the same island.
```
The mock attached to it showed two session rows whose agent chips named
`build-box` and `gpu-rig`.
### 2. Landing feature breakdown section
Source: `src/components/nook/FeatureBreakdowns.tsx` (removed 2026-10-29).
```
kicker: Remote
title: Any SSH box, one click away
body: Pick a host from your ssh config or your tailnet and click once — the
nook-hook installs itself and its agents appear beside your local ones,
indistinguishable.
bullets:
- One click: connect, push the hook, configure agents, check it can reach this Mac
- Hosts mirror this Mac's installed integrations automatically
- Remote sessions are ordinary rows; the agent chip names the machine
```
The section's demo animated a `gpu-rig` host moving from "Not set up" through
`connecting` → `pushing the hook binary` → `configuring agents` → `checking the
host can reach this Mac` → `Live`, then showed a remote session row.
### 3. Approvals bullet
Source: `src/components/nook/FeatureBreakdowns.tsx` (removed 2026-10-29).
```
- Works across every hooked agent, local or remote
```
### 4. Feature chip
Source: `src/components/nook/IslandExtras.tsx` (removed 2026-10-29).
```
One-click SSH setup
```
## What replaced it
Nothing. The Remote tile and section were removed rather than replaced; the
existing Approvals cell already carries the verified local claim:
> Approve an agent's tool call from your Mac's notch, and the agent carries on.
## Restore checklist
1. FRE-320/FRE-205 have shipped the one-click install and removed the
`~/.ssh/config` / `ssh-copy-id` friction described in FRE-320.
2. The CTO has verified the shipping flow and the evidence is on FRE-320.
3. A recording exists showing a remote agent joining the island.
4. CMO restores the copy above, then owns the launch plan for it — with an
owner and date per item — before anything goes back on the site.

View File

@@ -1,30 +0,0 @@
# Why the remote claim is parked
The site was selling a setup path a buyer does not get.
FRE-320 measured today's actual path (2026-10-29): the one-click flow is
app-UI-only, needs a hand-edited `~/.ssh/config` for any host not already in ssh
config or on the tailnet, needs a one-time `ssh-copy-id` because the app runs ssh
with `BatchMode=yes`, and has no manual fallback for minting the per-host
credential. FRE-315 and FRE-322 §3 correction 4 marked the remote claim
unverified and demo-gated. The CTO named it the largest launch risk because it
was already in front of buyers.
So the `freno-dev` source now says only what the product can back today: local
agents, the card, and the notch. That correction is committed locally and is
**not deployed** — the live page still carries the remote sentences until the
push in FRE-323 card `82d1e1b7` lands. The remote story is not deleted — it is
parked here with the FRE-320/FRE-205 work so it can return the day the one-click
install ships and is recorded.
## What has to be true before it returns
| Requirement | Owner | Date |
|---|---|---|
| One-click install ships without hand-edited `~/.ssh/config` or `ssh-copy-id` | FRE-320/FRE-205 engineering | When FRE-320/FRE-205 ships |
| CTO verifies the shipping flow and records the evidence on FRE-320 | CTO | Same day, before any copy moves |
| A recording shows a remote agent joining the island | Sponsor/CMO | Before restore |
| Restore copy and rebuild the launch plan with an owner + date per item | CMO | Day the three rows above are true |
Nothing in this folder is publishable. `marketing/approved/` remains the only
place a human publishes from.