Release v0.19.1

[0.19.1] - 2026-11-04

Mechanical, terminal-native CLI pass: static chrome, no background fills, and a foreground-adaptive dotted mark.

Changed

• Removed the animated banner (assemble/pulse) — the CLI banner is static on every path.
• Replaced the travelling rule marker, shimmer text, and breathing/cycling dots with a static Rule and fixed-color MechanicalSpinner.
• Launcher, sidebar, status bar and restore screen no longer paint background fills; the terminal background shows through.
• HooxMark and the HO/OX wordmark inherit the terminal foreground and use a one-shot dim → normal reveal, so they work in light and dark terminals.
• Launcher uses numbered sections, uppercase labels, hairline rules and static status glyphs.

Packages

Package	Version
@hoox-sh/hoox-cli	0.19.1
@hoox-sh/hoox-tui	0.6.1
@hoox-sh/hoox-shared	1.7.0

Release v0.19.0

[0.19.0] - 2026-11-04

Frameless OpenTUI shell and compact CLI start screen: the official HOOX mark rendered as a braille dot matrix, Grok-style motion, and a tighter left-rail layout.

Added

• Dotted HOOX mark (HooxMark) rasterised from the production SVG into braille cells at xs / sm / md sizes, with an optional colour-wave animation.
• Motion kit (OrbitSpinner, ShimmerText, AnimatedRule, BreatheGlyph) for orbit spinners, shimmering labels, travelling dividers and breathing status dots; all animations freeze under the test renderer.
• Launcher layout: dotted logo rail, top status line, contextual group menu (active group pinned), filterable command content, and a commands/legend footer with the selected command preview.
• Frameless sidebar and status bar in the operations center, with the animated HOOX mark anchoring the left rail.

Changed

• hoox start screen footer grows to 12 rows and adapts down to 40 columns; q quit remains visible on narrow terminals.
• hoox tui shell drops card/border chrome; the restore screen now uses the dotted mark and shimmer text.
• @hoox-sh/hoox-tui bumped to 0.6.0 (new visual surface).

Packages

Package	Version
@hoox-sh/hoox-cli	0.19.0
@hoox-sh/hoox-tui	0.6.0
@hoox-sh/hoox-shared	1.7.0

Release v0.18.0

[0.18.0] - 2026-11-03

CLI deep plumbing for optional satellites and mesh secrets: auto-clone empty worker trees, consistent ensure on deploy/dev/test/repair/update, safer secrets sync/delete/keys generate, and aligned telegram/dashboard mesh maps.

Fixed

• Named and all-worker secrets flows clone empty checkouts (git submodule add -f); --system / repair secrets include workers with empty secrets: [].
• deploy / dev / test / repair / update worker always run loadWorkerOrWire against the workspace wrangler.jsonc.
• secrets delete confirms wrangler with y\n; keys generate prints redacted names only.
• wireCallerBindings materializes wrangler.jsonc from .example instead of mutating tracked examples.
• Mesh maps: telegram TELEGRAM_INTERNAL_KEY_BINDING; Jupiter placeholders skipped on DEX push.

Changed

• .gitignore un-ignores optional satellites workers/pyne-worker and workers/pyne-agent-worker; pyne-agent-worker registered as a submodule.

Packages

Package	Version
@hoox-sh/hoox-cli	0.18.0
@hoox-sh/hoox-tui	0.5.0
@hoox-sh/hoox-shared	1.7.0

Release v0.17.0

[0.17.0] - 2026-11-02

CLI schema upgrade for optional PYNE satellites, plus a visual CLI/TUI pass: compact OpenTUI launcher, grouped help, and the hoox.sh Signal / Volt / Void color packs.

Added

• Worker catalog tiers: core, optional (pyne-worker, pyne-agent-worker), planned (pynets-worker, formerly pine-worker).
• Enable/secrets/clone/deploy/dev/test/repair prompt to seed wrangler.jsonc, clone the submodule, and wire caller bindings (dashboard.PYNE_AGENT_SERVICE). --yes skips the prompt.
• hoox with no args opens a compact OpenTUI start intro (split-footer). Type to filter, Enter runs, q quits. Falls back to Clack when the TUI package is missing. Non-TTY prints grouped help.
• hoox config theme (signal | volt | void). Default Signal (HOOX orange #F38020). Volt is PYNE lime; Void is AXIS indigo. --theme and HOOX_THEME override.
• CLI microfeedback: themed spinner, █░ progress, pulse frames, step glyphs. TUI Settings COLOR selector, pulse/progress chrome, setup-wizard bar.

Changed

• Root hoox --help is a grouped one-line catalog (.summary()), not a dump of nested EXAMPLES/SUBCOMMANDS.
• Shared color table is live (setActiveTheme); TUI Settings no longer coerces everything to dark-only.

Packages

Package	Version
@hoox-sh/hoox-cli	0.17.0
@hoox-sh/hoox-tui	0.5.0
@hoox-sh/hoox-shared	1.7.0

Shared Package Release shared-v1.7.0

[0.17.0] - 2026-11-02

CLI schema upgrade for optional PYNE satellites, plus a visual CLI/TUI pass: compact OpenTUI launcher, grouped help, and the hoox.sh Signal / Volt / Void color packs.

Added

• Worker catalog tiers: core, optional (pyne-worker, pyne-agent-worker), planned (pynets-worker, formerly pine-worker).
• Enable/secrets/clone/deploy/dev/test/repair prompt to seed wrangler.jsonc, clone the submodule, and wire caller bindings (dashboard.PYNE_AGENT_SERVICE). --yes skips the prompt.
• hoox with no args opens a compact OpenTUI start intro (split-footer). Type to filter, Enter runs, q quits. Falls back to Clack when the TUI package is missing. Non-TTY prints grouped help.
• hoox config theme (signal | volt | void). Default Signal (HOOX orange #F38020). Volt is PYNE lime; Void is AXIS indigo. --theme and HOOX_THEME override.
• CLI microfeedback: themed spinner, █░ progress, pulse frames, step glyphs. TUI Settings COLOR selector, pulse/progress chrome, setup-wizard bar.

Changed

• Root hoox --help is a grouped one-line catalog (.summary()), not a dump of nested EXAMPLES/SUBCOMMANDS.
• Shared color table is live (setActiveTheme); TUI Settings no longer coerces everything to dark-only.

Packages

Package	Version
@hoox-sh/hoox-cli	0.17.0
@hoox-sh/hoox-tui	0.5.0
@hoox-sh/hoox-shared	1.7.0

Release v0.16.0

[0.16.0] - 2026-10-25

Minor: package audit of shared, cli, and tui — correctness, fail-closed setup, JSON-safe CLI output, and TUI Settings that actually drive the shell.

Added

• Shared VIEW_IDS tuple is the single source for TUI view identifiers. Session restore, Settings, and the TUI registry consume it.
• Session restore returns fromDisk. A missing file opens Settings defaultView instead of always dashboard.
• CLI createCliSpinner: --json / --quiet never mix clack ANSI with machine stdout. Human non-TTY still prints stop() lines.

Changed

• Wrangler 4.152.0 across the monorepo and worker submodules (workerd 1.20261019.1). Source maps upload on deploy by default from 4.150.0.
• Regenerated worker-configuration.d.ts in every TypeScript isolate (bun run types:workers).
• Dependency refresh: eslint 10.13, prettier 3.9.10, bun-types 1.4.4, Next.js 16.4, @opennextjs/cloudflare 1.20. CI Bun pin is 1.4.3.
• Wizard LLM secrets are OPENAI_API_KEY / ANTHROPIC_API_KEY / GOOGLE_API_KEY. buildConfig enables only selected base workers. Vectorize index is my-rag-index.
• hoox monitor kill-switch reads and writes both trade:kill_switch and global:kill_switch. --json emits { engaged, keys }.
• TUI queue, KV, secrets, dashboard kill-switch, PYNE health, and model health poll on Settings refreshIntervalMs.
• GitHub Releases use the matching CHANGELOG.md section (scripts/changelog-notes.ts). Auto-generated commit lists are off.

Fixed

• Keep @cloudflare/workers-types on 5.20261001.1 (bun-types ExecutionContext clash on newer 5.20261025.1).
• Queue handler: Cloudflare attempts is 1-based; retry index is delivery-1. Successful handlers and DLQ paths ack() so messages are not redelivered. Hook throws are isolated.
• SSE: AbortController cancel, clean EOF reconnects, data: lines with an optional space.
• JSONC parse reports errors; wrangler queues is one object; producer binding is TRADE_QUEUE.
• writeConfigSync rethrows I/O errors. hooxDir() / configPath() honor HOOX_HOME. isInsideDir treats a trailing separator as inside.
• Analytics skip without INTERNAL_KEY_BINDING. Rate-limit checkKey is windowed. Exchange GET sends the query string.
• wrangler rollback [version-id] --name --yes (Wrangler 4.120+). WAF uses Rulesets (http_request_firewall_custom, http_ratelimit) plus security_level.
• ensureD1Database fails closed. Check tables, repair rebuild, init deploy, and hoox tui child exit report failure when the process fails.
• createDevVars writes only matching integration secrets. config env --json redacts secret values. Placeholder detection is one helper.
• secretDelete falls back to --name when the worker wrangler path is missing.
• TUI configKvGet unwraps {key,value}. Kill-switch display uses isTruthyKillSwitchFlag. Worker-settings hard-fails a bad agent:config get. Service Manager ignores ctrl/alt/meta. Settings Check Setup is a prop, not globalThis.

Packages

Package	Version
@hoox-sh/hoox-cli	0.16.0
@hoox-sh/hoox-tui	0.4.0
@hoox-sh/hoox-shared	1.6.0

Release v0.15.0

HOOX v0.15.0 — stdio MCP server for every hoox command

Shared Package Release shared-v1.6.0

[0.16.0] - 2026-10-25

Minor: package audit of shared, cli, and tui — correctness, fail-closed setup, JSON-safe CLI output, and TUI Settings that actually drive the shell.

Added

• Shared VIEW_IDS tuple is the single source for TUI view identifiers. Session restore, Settings, and the TUI registry consume it.
• Session restore returns fromDisk. A missing file opens Settings defaultView instead of always dashboard.
• CLI createCliSpinner: --json / --quiet never mix clack ANSI with machine stdout. Human non-TTY still prints stop() lines.

Changed

• Wrangler 4.152.0 across the monorepo and worker submodules (workerd 1.20261019.1). Source maps upload on deploy by default from 4.150.0.
• Regenerated worker-configuration.d.ts in every TypeScript isolate (bun run types:workers).
• Dependency refresh: eslint 10.13, prettier 3.9.10, bun-types 1.4.4, Next.js 16.4, @opennextjs/cloudflare 1.20. CI Bun pin is 1.4.3.
• Wizard LLM secrets are OPENAI_API_KEY / ANTHROPIC_API_KEY / GOOGLE_API_KEY. buildConfig enables only selected base workers. Vectorize index is my-rag-index.
• hoox monitor kill-switch reads and writes both trade:kill_switch and global:kill_switch. --json emits { engaged, keys }.
• TUI queue, KV, secrets, dashboard kill-switch, PYNE health, and model health poll on Settings refreshIntervalMs.
• GitHub Releases use the matching CHANGELOG.md section (scripts/changelog-notes.ts). Auto-generated commit lists are off.

Fixed

• Keep @cloudflare/workers-types on 5.20261001.1 (bun-types ExecutionContext clash on newer 5.20261025.1).
• Queue handler: Cloudflare attempts is 1-based; retry index is delivery-1. Successful handlers and DLQ paths ack() so messages are not redelivered. Hook throws are isolated.
• SSE: AbortController cancel, clean EOF reconnects, data: lines with an optional space.
• JSONC parse reports errors; wrangler queues is one object; producer binding is TRADE_QUEUE.
• writeConfigSync rethrows I/O errors. hooxDir() / configPath() honor HOOX_HOME. isInsideDir treats a trailing separator as inside.
• Analytics skip without INTERNAL_KEY_BINDING. Rate-limit checkKey is windowed. Exchange GET sends the query string.
• wrangler rollback [version-id] --name --yes (Wrangler 4.120+). WAF uses Rulesets (http_request_firewall_custom, http_ratelimit) plus security_level.
• ensureD1Database fails closed. Check tables, repair rebuild, init deploy, and hoox tui child exit report failure when the process fails.
• createDevVars writes only matching integration secrets. config env --json redacts secret values. Placeholder detection is one helper.
• secretDelete falls back to --name when the worker wrangler path is missing.
• TUI configKvGet unwraps {key,value}. Kill-switch display uses isTruthyKillSwitchFlag. Worker-settings hard-fails a bad agent:config get. Service Manager ignores ctrl/alt/meta. Settings Check Setup is a prop, not globalThis.

Packages

Package	Version
@hoox-sh/hoox-cli	0.16.0
@hoox-sh/hoox-tui	0.4.0
@hoox-sh/hoox-shared	1.6.0

HOOX v0.14.0

Minor: DEX spot execution, opt-in tenant isolation, entitlement scopes

Package	Version
@hoox-sh/hoox-cli	0.14.0
@hoox-sh/hoox-tui	0.3.2
@hoox-sh/hoox-shared	1.5.0

Added

• DEX spot execution (P1) — trade-worker routes DEX spot orders alongside CEX,
  and web3-wallet-worker signs Uniswap V3 (Ethereum/Arbitrum) and Jupiter Swap V2
  (Solana). Keys and mnemonics stay in the Cloudflare® Secrets Store; nothing signing
  related reaches a public route.
• Gateway /wallet proxy — hoox-worker proxies wallet traffic with idempotency
  and an explicit gas policy. Now routed before the gateway catch-all, which had
  been swallowing it.
• CLI auto-provisioning — hoox onboard provisions the DEX mesh key, Solana seed,
  and RPC defaults, and seeds the dashboard settings prefixes, so a fresh install wires
  the wallet isolate without hand-editing config.
• Opt-in tenant isolation — packages/shared exports TenantEnv / TenantScope
  plus payload attribution. When enabled: the gateway forwards tenant context to
  trade-worker and agent-worker, d1-worker isolates rows by tenant_id (schema
  migration included), and agent-worker isolates routine keys. Off by default —
  existing single-tenant installs are unaffected.
• Entitlement scopes — EntitlementScope / EntitledContext types plus
  hasScope() and verifyCacheKey(), including the axis:run scope.
  Types and bearer classification only — no enforcement yet.
• OKF bundle — an Open Knowledge Format cache compiled on every commit, with
  okf:query / okf:context / okf:lint for agent context.

Changed

• Dependency refresh: wrangler 4.145.0 across the mesh, with the trade-worker DEX
  wiring fix that came with it.
• Unit suite green end to end — 5,173 tests, exit 0. CLI provisioner/secrets
  coverage reached 100% lines.
• CI: Codecov uploads split per flag (per-suite lcov files were being overwritten by
  Bun's --coverage-dir default), action → v7, @clack/prompts pinned to 1.3.0, Bun
  pinned to 1.4.0, shared dist built before the workspace typecheck.
• Docs: real badges and stack cross-links, unified stack footer, and corrections to the
  mesh ports, email ingress, and DEX spot guides.
• Regenerated the stale pyne-worker dashboard settings config, which still described
  the old secrets-only surface and omitted cron_enabled.
• CLI audit pass — update plan, worker validation, env quoting, parallel checks.

Fixed

• /wallet routed before the gateway catch-all (P0).
• hoox-worker P0/P1 audit fixes; web3-wallet-worker bumped accordingly.
• Entitlement hook note placement; axis:run scope added.
• README Bun badge and CLI table.

Upgrade notes

• @hoox-sh/hoox-shared moves 1.4.0 → 1.5.0 for the new tenant and
  entitlements exports. The CLI bundles what it needs, but the TUI consumes shared
  directly — bump it if you track the TUI.
• Tenant isolation is opt-in and carries a D1 schema change (tenant_id). Existing
  rows are unaffected until you enable it.
• Risk note: DEX signing is new surface on a mesh that previously held only CEX
  credentials. Review gas policy and idempotency before pointing it at funds, and keep
  agent-worker risk controls enabled.

Full detail: CHANGELOG.md.

@hoox-sh/hoox-shared 1.5.0

Minor: DEX spot execution, opt-in tenant isolation, entitlement scopes

Package	Version
@hoox-sh/hoox-cli	0.14.0
@hoox-sh/hoox-tui	0.3.2
@hoox-sh/hoox-shared	1.5.0

Added

• DEX spot execution (P1) — trade-worker routes DEX spot orders alongside CEX,
  and web3-wallet-worker signs Uniswap V3 (Ethereum/Arbitrum) and Jupiter Swap V2
  (Solana). Keys and mnemonics stay in the Cloudflare® Secrets Store; nothing signing
  related reaches a public route.
• Gateway /wallet proxy — hoox-worker proxies wallet traffic with idempotency
  and an explicit gas policy. Now routed before the gateway catch-all, which had
  been swallowing it.
• CLI auto-provisioning — hoox onboard provisions the DEX mesh key, Solana seed,
  and RPC defaults, and seeds the dashboard settings prefixes, so a fresh install wires
  the wallet isolate without hand-editing config.
• Opt-in tenant isolation — packages/shared exports TenantEnv / TenantScope
  plus payload attribution. When enabled: the gateway forwards tenant context to
  trade-worker and agent-worker, d1-worker isolates rows by tenant_id (schema
  migration included), and agent-worker isolates routine keys. Off by default —
  existing single-tenant installs are unaffected.
• Entitlement scopes — EntitlementScope / EntitledContext types plus
  hasScope() and verifyCacheKey(), including the axis:run scope.
  Types and bearer classification only — no enforcement yet.
• OKF bundle — an Open Knowledge Format cache compiled on every commit, with
  okf:query / okf:context / okf:lint for agent context.

Changed

• Dependency refresh: wrangler 4.145.0 across the mesh, with the trade-worker DEX
  wiring fix that came with it.
• Unit suite green end to end — 5,173 tests, exit 0. CLI provisioner/secrets
  coverage reached 100% lines.
• CI: Codecov uploads split per flag (per-suite lcov files were being overwritten by
  Bun's --coverage-dir default), action → v7, @clack/prompts pinned to 1.3.0, Bun
  pinned to 1.4.0, shared dist built before the workspace typecheck.
• Docs: real badges and stack cross-links, unified stack footer, and corrections to the
  mesh ports, email ingress, and DEX spot guides.
• Regenerated the stale pyne-worker dashboard settings config, which still described
  the old secrets-only surface and omitted cron_enabled.
• CLI audit pass — update plan, worker validation, env quoting, parallel checks.

Fixed

• /wallet routed before the gateway catch-all (P0).
• hoox-worker P0/P1 audit fixes; web3-wallet-worker bumped accordingly.
• Entitlement hook note placement; axis:run scope added.
• README Bun badge and CLI table.

Upgrade notes

• @hoox-sh/hoox-shared moves 1.4.0 → 1.5.0 for the new tenant and
  entitlements exports. The CLI bundles what it needs, but the TUI consumes shared
  directly — bump it if you track the TUI.
• Tenant isolation is opt-in and carries a D1 schema change (tenant_id). Existing
  rows are unaffected until you enable it.
• Risk note: DEX signing is new surface on a mesh that previously held only CEX
  credentials. Review gas policy and idempotency before pointing it at funds, and keep
  agent-worker risk controls enabled.

Full detail: CHANGELOG.md.