feat(desktop): runtime visibility — enriched Audit narrative, Advanced tab, Mind as a runtime map (v0.7.3) (#94)

Audit — "what actually happened":
- the trail now opens with the run's live narrative from the execution
  session (provider retries, grant requests, rejections, executions, errors,
  timestamps, tools) with the same plain-English hints chat shows, followed
  by the authoritative hash-chained Ledger chain + replay verdict. The hint
  logic is extracted into a shared governanceHint() used by both surfaces.

Advanced tab — the power-user / inspection surface (all real state):
- new ⚙ Advanced tab hosting: the Advanced Mode toggle (moved out of the
  header), the per-chat model override (moved out of the chat rail), a live
  Runtime card (health, mode, ledger backend, runtime URL, app version), a
  Model & routing card (provider, default model, base URL, key-stored,
  live/mock), an Authority card (current grants, active skills, risk gate),
  and the Ledger card (on-disk chain path). No placeholder controls —
  everything reads real runtime/provider/grant state.

Mind — observability over ornament:
- starfield and second cage shell removed; smaller core mark; the data is
  the visual.
- lifecycle lanes replace the helix: one row per step, events flowing left
  to right, so Intent → Proposal → Rejected/Grant → Execution → Commit reads
  as a path at a glance.
- inspector gains "Open in Audit →", jumping to the run's enriched audit
  narrative (cross-surface hook window.thymosOpenAudit).

Release prep: versions bumped to 0.7.3 (workspace + desktop + locks).

Verified: cargo build + full workspace tests green, JS syntax-checked, every
referenced element id resolves. Not verified here: the Tauri webview render
(ships in the v0.7.3 build for hands-on use).

Co-authored-by: grysz <117801274+grysz@users.noreply.github.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

Author: 3 people

thymos/Cargo.lock

@@ -16,7 +16,7 @@ members = [
 ]
 
 [workspace.package]
-version = "0.7.2"
+version = "0.7.3"
 edition = "2021"
 license = "Apache-2.0"
 rust-version = "1.80"

thymos/Cargo.toml

@@ -1,6 +1,6 @@
 {
   "name": "thymos-desktop",
-  "version": "0.7.2",
+  "version": "0.7.3",
   "private": true,
   "description": "OpenThymos Desktop — governed-cognition runtime, install once.",
   "scripts": {

thymos/clients/desktop/package-lock.json

@@ -5,7 +5,7 @@
 
 [package]
 name = "thymos-desktop"
-version = "0.7.2"
+version = "0.7.3"
 edition = "2021"
 license = "Apache-2.0"
 description = "OpenThymos Desktop — a governed-cognition client that supervises a local runtime."

thymos/clients/desktop/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "OpenThymos",
-  "version": "0.7.2",
+  "version": "0.7.3",
   "identifier": "com.openthymos.desktop",
   "build": {
     "frontendDist": "../src"

thymos/clients/desktop/src-tauri/Cargo.lock

@@ -27,9 +27,6 @@
         <span id="ledger" class="pill">ledger: —</span>
       </div>
       <div class="controls">
-        <label class="adv-toggle" title="Show developer internals — raw ledger data, schemas, writs/commits. Off by default.">
-          <input type="checkbox" id="advToggle" /> Advanced
-        </label>
         <button id="startBtn">Start runtime</button>
         <button id="stopBtn" class="ghost">Stop</button>
       </div>
@@ -44,6 +41,7 @@
       <button class="tab" data-tab="tools">▣ Tools</button>
       <button class="tab" data-tab="audit">≡ Audit</button>
       <button class="tab adv-only" data-tab="backups">↧ Backups</button>
+      <button class="tab" data-tab="advanced">⚙ Advanced</button>
     </nav>
 
     <main>
@@ -57,9 +55,8 @@
             <!-- Authority is configured ONCE here and saved to this model, not
                  chosen per message. -->
             <div class="chat-defaults">
-              <!-- Per-chat model override (advanced) + active skill chips — both
-                   appear only when in use, keeping the rail clean. -->
-              <input id="chatModel" class="adv-only" list="modelList" autocomplete="off" placeholder="model override (blank = default)" />
+              <!-- Active skill chips — appear only when in use, keeping the
+                   rail clean. The per-chat model override lives in Advanced. -->
               <div id="skillChips" class="skill-chips" title="Active skills — combine any; they only narrow authority."></div>
               <div class="grants" id="grants" title="What this chat is allowed to do — the writ scope. The runtime rejects anything not granted. No selection = everything granted.">
                 <span class="grant-label">grant</span>
@@ -399,6 +396,59 @@ <h3>Create / tune a skill</h3>
           </p>
         </div>
       </section>
+
+      <!-- ADVANCED: the runtime inspection + power-user surface. Everything
+           here reads real state — no placeholder controls. -->
+      <section class="panel" id="tab-advanced">
+        <div class="panel-head"><h2>Advanced — runtime inspection</h2>
+          <button type="button" class="ghost" id="refreshAdvanced">Refresh</button></div>
+        <p class="tab-intro">
+          The deeper controls and live truth of the runtime under this app.
+          Normal chat never needs this tab; it's here when you want to see —
+          or steer — exactly what the runtime is doing.
+        </p>
+
+        <div class="adv-grid">
+          <div class="card">
+            <h3>Runtime</h3>
+            <div id="advRuntime" class="state-card"></div>
+            <label class="adv-toggle" title="Reveal developer internals across the app — raw ledger data, schemas, the Backups tab.">
+              <input type="checkbox" id="advToggle" /> Advanced Mode (show internals everywhere)
+            </label>
+          </div>
+
+          <div class="card">
+            <h3>Model &amp; routing</h3>
+            <div id="advProvider" class="state-card"></div>
+            <label class="adv-label" for="chatModel">Per-chat model override</label>
+            <input id="chatModel" list="modelList" autocomplete="off" placeholder="model override (blank = provider default)" />
+            <p class="note">Applies to new chat messages. Provider, key, and base URL are managed in the <b>Providers</b> tab.</p>
+          </div>
+
+          <div class="card">
+            <h3>Authority</h3>
+            <div id="advAuthority" class="state-card"></div>
+            <p class="note">
+              Grants are the writ scope for new chats (left rail chips). Tools at
+              <b>high</b> risk (e.g. <code>shell</code>) always pause for your
+              approval — tune with <code>THYMOS_APPROVE_RISK</code>.
+            </p>
+          </div>
+
+          <div class="card">
+            <h3>Ledger &amp; debug</h3>
+            <div class="ledger-path-row">
+              <span class="dim">ledger file</span>
+              <code id="advLedgerPath" class="path">—</code>
+            </div>
+            <p class="note">
+              The single hash-chained file holding every governed action.
+              Inspect any run in <b>Audit</b> (now with the full narrative:
+              retries, rejections, grants, errors); verify with replay.
+            </p>
+          </div>
+        </div>
+      </section>
     </main>
 
     <script src="main.js"></script>