Nightly 2026-09-03: the desktop control surface

Nightly build of the redesigned desktop control surface. Not a stable
release: this is the new five-stage console fresh off a full day of live
hardening, published for early eyes and brave rigs. v0.8.0 remains the
last stable release.

What is in it

• The five-stage command console. REQUEST, PLAN, REVIEW, CONFIRM,
  SEND replace the tabbed page. Scenes and the live signal path stay on
  screen through every stage; the final SEND TO FM9 exists only inside an
  armed, eight-second confirm gate that Esc or any target change disarms.
• Review as a change table with filters and blast radius, Confirm as
  a facts matrix (target, scope, destination, recovery), Send as an
  observable transmission ending at EARS: PENDING.
• Manual control as an Inspector opened from the signal chain itself.
• WHO PLANS YOUR TONES. AI setup is named cards with plain costs and
  states (READY, NEEDS A KEY with a link, NEEDS SETUP); keys and models
  are stored per service; ChatGPT, Gemini, Grok, DeepSeek, Kimi, local
  models and OpenRouter are one click each; the Local model card finds
  LM Studio or Ollama on its own.
• Verified end to end on real FM9 hardware: writes sent through the armed
  gate, read back verified, and undone from the shelf.

Honest state

1033 tests pass and the workflow has survived one long evening of real
use, which is exactly one evening. Edit-buffer safety, store whitelists
and read-back verification are unchanged underneath. Expect rough edges
in layout and copy; file what you find.