release: v0.4.0 — read_page, auto-detect dario, personas, audit replay

[askalf]

Summary

Bundles four feature PRs landed since v0.3.0. All additive — v0.3.0 users see no behavior change without opting into the new flags or letting the new tool surface.

Functional (already merged, surfaced as v0.4.0)

• chore(deps): bump @anthropic-ai/sdk from 0.91.0 to 0.91.1 in the non-major group #25 — `@anthropic-ai/sdk` dependency bump (Dependabot, no behavior change).
• feat(routing): auto-detect dario at startup, drop the manual env-var dance #26 — Auto-detect dario at startup. Probes `localhost:3456/health` if `ANTHROPIC_BASE_URL` isn't pre-set; routes through dario for OAuth subscription billing when it responds. Operator override wins via pre-set env var or `--no-dario` flag.
• feat(personas): named system-prompt overrides for hands run #27 — Personas: `--persona ` / `--system-prompt ` flags. Bundled set: minimal / thorough / concise / security-aware. User overrides at `~/.hands/personas/.md`. Safe per dario#172 — billing classifier doesn't fingerprint system prompt content.
• feat(audit): hands audit list/show/replay #28 — `hands audit list/show/replay`. Inspect and re-execute audit-log entries. Default replay is dry-run; `--execute` fires after prompt-confirmation for state-changing actions.
• feat(tools): read_page — fetch URLs without a browser #29 — `read_page` tool. Custom tool alongside computer/bash/text_editor. Fetches URL → cleans HTML → returns to agent directly. The "browser without a browser" thesis: 2-turn agent runs replace 6-8 turn screenshot+OCR loops at 5-10× lower cost.

Test count

49 → 92.

Empirically verified

• All four feature PRs rebased onto each other cleanly (one cli.ts + run.ts conflict resolved during integration; no semantic regression).
• read_page tool live-tested end-to-end through dario for OAuth subscription billing (3 prompts: Wikipedia article summarize, Anthropic docs query, claude.ai SPA-shell honesty test). All routed `five_hour`.
• Full suite passing locally on the rebased branches.

Test plan

• `npm install --package-lock-only` — clean, 0 vulns.
• `npm run build` — clean.
• `npm test` — 92/92 pass.
• `node dist/cli.js --version` → `0.4.0`.
• Required CI checks (`actionlint`, `analyze`, `build (20)`, `build (22)`) on this PR.
• On merge: `auto-release.yml` fires → tag `v0.4.0` → `npm publish --access public --provenance`.
• Post-publish smoke within ~10 min: `npm install -g @askalf/hands@0.4.0` → `hands --version` → `hands doctor` clean → `hands run --dry-run "echo test"` end-to-end.