Release v1.23.0 — sanitized source snapshot (2026-07-23)

Author: marmutapp

.github/workflows/ghcr-mirror.yml

@@ -0,0 +1,66 @@
+# One-time / on-demand backfill: mirror observer-org container images from the
+# old marmutapp namespace to the new superbasedapp namespace after the GitHub
+# org transfer. The release pipeline (npm-release.yml) already publishes NEW
+# tags to ghcr.io/superbasedapp/observer-org; this workflow copies PRE-TRANSFER
+# tags so `docker pull ghcr.io/superbasedapp/observer-org:<old-tag>` resolves.
+#
+# Manual only (workflow_dispatch). Requires the GHCR_PUSH_TOKEN secret: a
+# classic PAT with read:packages (source, marmutapp) + write:packages
+# (destination, superbasedapp). Uses `crane copy` (registry-to-registry, no
+# local pull). No-ops with a notice when the secret is absent.
+name: GHCR mirror (observer-org backfill)
+
+on:
+  workflow_dispatch:
+    inputs:
+      tags:
+        description: "Comma-separated tags to mirror (e.g. v1.22.0,v1.21.0)"
+        required: true
+        type: string
+
+permissions:
+  contents: read
+  packages: write
+
+jobs:
+  mirror:
+    name: Mirror tags marmutapp -> superbasedapp
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check GHCR_PUSH_TOKEN presence (skip job if unset)
+        id: gate
+        env:
+          GHCR_PW: ${{ secrets.GHCR_PUSH_TOKEN }}
+        run: |
+          if [ -z "${GHCR_PW:-}" ]; then
+            echo "::notice::GHCR_PUSH_TOKEN not set — nothing to mirror (secret setup pending)."
+            echo "present=false" >> "$GITHUB_OUTPUT"
+          else
+            echo "present=true" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Install crane
+        if: steps.gate.outputs.present == 'true'
+        uses: imjasonh/setup-crane@v0.4
+
+      - name: Log in to ghcr.io
+        if: steps.gate.outputs.present == 'true'
+        env:
+          GHCR_PW: ${{ secrets.GHCR_PUSH_TOKEN }}
+        run: echo "$GHCR_PW" | crane auth login ghcr.io -u ${{ github.actor }} --password-stdin
+
+      - name: Copy tags
+        if: steps.gate.outputs.present == 'true'
+        env:
+          TAGS: ${{ inputs.tags }}
+        run: |
+          SRC=ghcr.io/marmutapp/observer-org
+          DST=ghcr.io/superbasedapp/observer-org
+          IFS=',' read -ra LIST <<< "$TAGS"
+          for t in "${LIST[@]}"; do
+            tag="$(echo "$t" | xargs)"   # trim whitespace
+            [ -z "$tag" ] && continue
+            echo "::group::mirror $tag"
+            crane copy "$SRC:$tag" "$DST:$tag"
+            echo "::endgroup::"
+          done

.github/workflows/npm-release.yml

@@ -352,11 +352,19 @@ jobs:
 
   # ----------------------------------------------------------------
   # Docker image (Teams M5). Build the observer-org server image from
-  # Dockerfile.observer-org, push it to ghcr.io under the marmutapp
-  # org using the private repo's GITHUB_TOKEN, then keyless-sign it
-  # with cosign BY DIGEST (immutable reference; signing a mutable tag
-  # is a TOCTOU footgun). The image digest is exposed as a job output
-  # so downstream steps / docs can reference the exact pushed image.
+  # Dockerfile.observer-org, push it to ghcr.io under the superbasedapp
+  # org, then keyless-sign it with cosign BY DIGEST (immutable
+  # reference; signing a mutable tag is a TOCTOU footgun). The image
+  # digest is exposed as a job output so downstream steps / docs can
+  # reference the exact pushed image.
+  #
+  # Auth: the repo's own GITHUB_TOKEN can only publish into THIS
+  # repo's owner namespace (marmutapp), so cross-org publish uses the
+  # GHCR_PUSH_TOKEN secret (a classic PAT with write:packages; GHCR is not
+  # covered by fine-grained PATs), held on the private repo like every
+  # other release secret. Absent secret => the job no-ops gracefully
+  # (VSCE_PAT pattern). One-time backfill of pre-transfer tags is the
+  # manual ghcr-mirror.yml workflow.
   # ----------------------------------------------------------------
   docker_image:
     name: Docker image (observer-org)
@@ -371,34 +379,51 @@ jobs:
     steps:
       - uses: actions/checkout@v5
 
+      - name: Check GHCR_PUSH_TOKEN presence (skip job if unset)
+        id: ghcr_gate
+        env:
+          GHCR_PUSH_TOKEN: ${{ secrets.GHCR_PUSH_TOKEN }}
+        run: |
+          if [ -z "${GHCR_PUSH_TOKEN:-}" ]; then
+            echo "::notice::GHCR_PUSH_TOKEN not set; skipping observer-org image publish (org-transfer secret setup pending)."
+            echo "present=false" >> "$GITHUB_OUTPUT"
+          else
+            echo "present=true" >> "$GITHUB_OUTPUT"
+          fi
+
       - name: Set up Buildx
+        if: steps.ghcr_gate.outputs.present == 'true'
         uses: docker/setup-buildx-action@v3
 
       - name: Log in to ghcr.io
+        if: steps.ghcr_gate.outputs.present == 'true'
         uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
+          password: ${{ secrets.GHCR_PUSH_TOKEN }}
 
       - name: Build and push
+        if: steps.ghcr_gate.outputs.present == 'true'
         id: push
         uses: docker/build-push-action@v6
         with:
           context: .
           file: Dockerfile.observer-org
           push: true
-          tags: ghcr.io/marmutapp/observer-org:${{ github.ref_name }}
+          tags: ghcr.io/superbasedapp/observer-org:${{ github.ref_name }}
 
       - name: Install cosign
+        if: steps.ghcr_gate.outputs.present == 'true'
         uses: sigstore/cosign-installer@v3
 
       - name: Sign image by digest (keyless)
+        if: steps.ghcr_gate.outputs.present == 'true'
         # Keyless OIDC signing — no long-lived keys; the signature is
         # bound to this workflow's identity. Verifiable later with
         # `cosign verify ... --certificate-identity-regexp ...`.
         run: |
-          cosign sign --yes "ghcr.io/marmutapp/observer-org@${{ steps.push.outputs.digest }}"
+          cosign sign --yes "ghcr.io/superbasedapp/observer-org@${{ steps.push.outputs.digest }}"
 
   # ----------------------------------------------------------------
   # Hashes (Teams M5). Compute the base64-encoded sha256sum subject
@@ -1125,10 +1150,19 @@ jobs:
           # Linux + Darwin: tar.gz preserves the executable bit
           # (chmod +x set in the build job rides along). Windows:
           # zip is the conventional Windows artifact format.
+          #
+          # Dual-name compatibility (2026-07-23): ship a `superbased` alias
+          # beside `observer` so direct-download users get both command names
+          # (npm/PyPI installs get both via their bin/scripts maps). A relative
+          # symlink rides inside the tar for POSIX; Windows zip gets a copy
+          # (zip symlink support is unreliable across extractors).
           for target in linux-x64 linux-arm64 darwin-x64 darwin-arm64; do
+            ln -sf observer "artifacts/observer-${target}/superbased"
             tar -czf "release-assets/observer-${VERSION}-${target}.tar.gz" \
               -C "artifacts/observer-${target}" .
           done
+          cp "artifacts/observer-win32-x64/observer.exe" \
+             "artifacts/observer-win32-x64/superbased.exe"
           (cd "artifacts/observer-win32-x64" && \
               zip -r "$GITHUB_WORKSPACE/release-assets/observer-${VERSION}-win32-x64.zip" .)
 
@@ -1224,13 +1258,13 @@ jobs:
             echo "The self-hosted org server ships as a Docker image and as per-platform \`observer-org-${GITHUB_REF_NAME}-*\` archives (attached below)."
             echo ""
             echo '```bash'
-            echo "docker pull ghcr.io/marmutapp/observer-org:${GITHUB_REF_NAME}"
+            echo "docker pull ghcr.io/superbasedapp/observer-org:${GITHUB_REF_NAME}"
             echo '```'
             echo ""
             echo "The image is keyless-signed with cosign. Verify it:"
             echo ""
             echo '```bash'
-            echo "cosign verify ghcr.io/marmutapp/observer-org:${GITHUB_REF_NAME} \\"
+            echo "cosign verify ghcr.io/superbasedapp/observer-org:${GITHUB_REF_NAME} \\"
             echo "  --certificate-identity-regexp 'https://github.com/marmutapp/superbased-observer-private/.*' \\"
             echo "  --certificate-oidc-issuer https://token.actions.githubusercontent.com"
             echo '```'

CHANGELOG.md

@@ -4,6 +4,93 @@ All notable changes to SuperBased Observer are documented here.
 
 ## [Unreleased]
 
+## [1.23.0] — 2026-07-23
+
+### Added
+
+- **`superbased` CLI alias.** The binary now also runs as `superbased`,
+  selected from `argv[0]` — `observer` is unchanged and stays canonical
+  (no deprecation yet). npm and PyPI ship `superbased` alongside `observer`
+  as console entry points, and release tarballs/zips include a `superbased`
+  alias next to the `observer` binary.
+- **First-run guided dashboard tour.** A spotlight-and-coach-mark
+  walkthrough (Overview → Live → Sessions → Cost → Cache → Terminals →
+  Security → Settings → global filter/help) auto-starts once on new
+  installs and is replayable any time from the Help drawer or the command
+  palette.
+- **Per-terminal Files/Git project explorer.** Every dashboard terminal
+  (floating window or grid tile) gets Files/Git panel buttons: a read-only
+  file tree + viewer and a git view (branch, ahead/behind, changes,
+  100-commit history). Panels are floating, draggable, multi-panel windows
+  — one per terminal, open simultaneously — with a right-click context
+  menu to copy the selected path (relative or absolute) and, on a live
+  write-capable terminal, paste it straight into that terminal.
+- **Authenticated remote terminal takeover.** A fully-authorized remote
+  dashboard can now take over control of a terminal from a local/native
+  writer or from another remote seat, completing the native → local →
+  remote handoff. Default-on; see the config change below.
+- **Playwright e2e regression suites** covering the guided tour, terminal
+  key/paste handling, and the new project panels.
+- **VS Code extension lint gate.** `npm run lint` (eslint) is now runnable
+  in the extension's dev workflow; dev-only, not part of the packaged
+  extension.
+- **Pricing: the 2026 model-release wave.** ~35 new cost-engine rows for
+  Claude Mythos 5 (Fable-5-equivalent pricing); the Qwen 3.5 family
+  (plus/flash/omni-plus/omni-flash) plus 3.7-Plus and a 3.8-Max-Preview
+  placeholder row (no published rate yet — anchored to 3.7-Max's exact
+  price pending an official card); GLM-5.2; MiniMax M3; Tencent Hy3;
+  StepFun Step-3.5-Flash; ERNIE 5.1; ByteDance Seed 2.0 (provisional,
+  Volcengine has no official card yet); Meta Muse Spark 1.1; Cohere North
+  Mini Code (genuinely free); Sakana Fugu Ultra; Thinking Machines
+  Inkling; Jamba Mini 2; Gemini Omni Flash; and Sarvam (free). A
+  researched-but-not-priced ledger is kept in code comments for models
+  with no public rate card (Cohere Command A+, the original pre-1.1 Muse
+  Spark, Phi-4-reasoning-vision-15B, Falcon H1R 7B) so they aren't
+  re-researched needlessly.
+- **Website repositioned around the AI-agent control-plane story.**
+  superbased.app now leads with seeing agents' actions and provider-
+  reported token usage across 26 tools, then controlling the supported
+  sessions (dashboard terminals, paired-device session attach/takeover,
+  model routing, egress guardrails); four decorative Canvas animations
+  from the marketing library embed on the homepage
+  (`prefers-reduced-motion`-aware, pause when hidden/offscreen).
+  "Observer Quest" renamed "SuperBased Quest". 12 README + 3 website
+  dashboard screenshots refreshed against the current UI.
+
+### Changed
+
+- **`[remote].allow_terminal_view` now defaults to `true`.** A paired,
+  authenticated remote device can view (read-only) attach/resume terminal
+  output by default; set it to `false` to restore the prior deny-by-default
+  posture.
+- **New `[remote].allow_remote_terminal_takeover`, defaults to `true`.**
+  Pairs with the takeover feature above; set it to `false` to keep refusing
+  a remote takeover of an existing writer.
+- **`[terminal].idle_timeout` now defaults to `"0"`.** Idle embedded
+  terminals are no longer reaped after 30 minutes of no PTY I/O (a quiet
+  agent sitting at its prompt was being killed mid-session); set it back to
+  `"30m"` to restore the old cleanup behavior.
+- **Product renamed "SuperBased Observer" → "SuperBased"** in prose and UI
+  only. Every technical identifier — the `observer` CLI, package names, the
+  `[observer]` config section, `~/.observer`, the `observer.db` filename —
+  is unchanged. VS Code extension display strings (command titles, activity
+  bar, output channel, notifications) were renamed the same way; the
+  Marketplace listing name updates at the next publish.
+
+### Fixed
+
+- `observer run` no longer mangles multi-line commands or shell builtins
+  (`cd`, `export`, …) when wrapping them for hooks, and the wrapped command
+  now skips the daemon's integrity check on that path — about 750× faster
+  to start (measured 0.16s vs. over 120s against a large database).
+- STT/dictation paste into the embedded terminal: xterm.js was silently
+  canceling plain Ctrl+V, so dictation tools' fallback paste landed a stale
+  clipboard instead of the transcription; plain Ctrl+V now reaches the
+  browser's native paste handling.
+- Terminal-dock drag gestures: an interrupted drag (pointer cancel or lost
+  pointer capture) can no longer leave the gesture armed for a later stray
+  pointer move to resume from a stale origin.
+
 ## [1.22.0] — 2026-07-21
 
 ### Added

README.md

@@ -1,4 +1,4 @@
-# SuperBased Observer
+# SuperBased
 
 > The exact tokens your AI provider billed you — cache splits,
 > reasoning tokens, long-context surcharges — reconciled across 26
@@ -47,7 +47,7 @@ can't give you, in order of how much they matter:
    tokens, long-context repricing — the same math your invoice uses,
    not a JSONL-derived estimate. It's accurate enough that it caught
    its **own** bug: a Codex reasoning-token double-billing regression
-   Observer found and back-corrected months of history for
+   SuperBased found and back-corrected months of history for
    (migration 058, shipped v1.18.0) — the kind of self-audit a vendor
    console has no incentive to run against itself.
 2. **Local-first, by construction.** The watcher, proxy, dashboard,
@@ -78,7 +78,7 @@ machine, with an optional team rollup server for org-wide spend.
 **Plane A** is general LLM-app observability — admin-server-first:
 OTLP trace/span capture, evals, and an LLM-as-judge input-admission
 guardrail for an application *you* host, whose end users route
-through Observer. Most solo developers only ever touch Plane B; teams
+through SuperBased. Most solo developers only ever touch Plane B; teams
 add Plane A when they're also running an LLM-powered product. Full
 explainer: [superbased.app/docs/getting-started/two-planes](https://superbased.app/docs/getting-started/two-planes)
 (or [docs/deployment-models.md](docs/deployment-models.md) if you're reading this in the repo).
@@ -509,7 +509,7 @@ while you work.
 
 *General observability — [Plane A](https://superbased.app/docs/getting-started/two-planes). Distinct
 from the coding-agent usage above: this observes an LLM **application**
-you run at the admin level, whose **end-users** route through Observer.*
+you run at the admin level, whose **end-users** route through SuperBased.*
 
 <p align="center">
   <img src="docs/assets/screenshots/13-trajectories.png" alt="Trajectories — OTLP trace and span capture (general-observability plane)" width="900">
@@ -842,7 +842,7 @@ bearers for agents; no prompts, command bodies, full assistant responses, or
 file contents ever leave the machine — even in the opt-in full-content mode,
 only the small set of fields the agent already stores in metadata-only mode
 gets expanded. The server ships as a signed Docker image
-(`ghcr.io/marmutapp/observer-org`) and a Helm chart (`charts/observer-org/`).
+(`ghcr.io/superbasedapp/observer-org`) and a Helm chart (`charts/observer-org/`).
 
 Local-in-5-minutes: `observer-org quickstart` brings up a dev compose stack,
 provisions an admin, mints an enrolment token, and prints a ready-to-share

browser-extension/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "SuperBased Observer — Browser Capture",
-  "version": "1.22.0",
+  "version": "1.23.0",
   "description": "Opt-in, passive observability of your own AI chatbot web usage (ChatGPT, Claude, Perplexity, Gemini, Copilot). Captures per-turn metadata + estimated tokens locally; nothing leaves your machine except to your local observer daemon.",
   "minimum_chrome_version": "111",
   "permissions": [

charts/observer-org/values.yaml

@@ -7,7 +7,7 @@
 replicaCount: 1
 
 image:
-  repository: ghcr.io/marmutapp/observer-org
+  repository: ghcr.io/superbasedapp/observer-org
   pullPolicy: IfNotPresent
   # Defaults to the chart's appVersion when empty. Override per release,
   # e.g. tag: v1.7.0.

cmd/observer/attach_host.go

@@ -1127,6 +1127,15 @@ func (s *attachSession) ReclaimWriter() error {
 	return nil
 }
 
+// ReclaimAvailable satisfies attachsock.ReclaimAvailabler: a real keystroke can
+// reclaim the writer only when a reacquire hook is wired
+// ([terminal.attach].reclaim_on_input on). Lets the server word the takeover
+// notice honestly — offering "press a key to take control back" only when that
+// gesture will actually reclaim.
+func (s *attachSession) ReclaimAvailable() bool {
+	return s.reacquire != nil
+}
+
 // CorrelatedSessions satisfies attachsock.CorrelationSource. It returns the
 // per-run correlation channel (nil when the hub is disabled — the server's
 // relay treats a nil channel as "no correlations", so no frame is ever sent).

cmd/observer/attach_standalone.go

@@ -153,7 +153,13 @@ func buildTerminalStack(cfg config.Config, database *sql.DB, logger *slog.Logger
 		return svc.RunIDForHandle(handle)
 	}, logger)
 
-	opts := termsession.Options{Logger: logger}
+	opts := termsession.Options{
+		Logger: logger,
+		// Startup seed closes the construction-before-controller-wiring window.
+		// wireRemoteExecuteTier replaces this with the live controller reader
+		// before either dashboard listener starts serving.
+		AllowRemoteTakeover: func() bool { return cfg.Remote.AllowRemoteTerminalTakeover },
+	}
 	applyTerminalBounds(&opts, cfg.Terminal, logger)
 	// Remote writer-lease lifetimes (§4.α.2c) come from [remote]; 0 falls back
 	// to the termsession defaults (5m idle / 30m hard cap).