@bitefoundry/retrieviewer 0.0.14 → 0.0.16

package/ASSET-PROVENANCE.md

@@ -102,6 +102,19 @@ records the exact36 source-key indices and `pixelBlending:false`. No new generat
 or photographic input, asset family or attribution is added. Existing CC BY-SA4.0
 terms and all non-watch pixels remain unchanged. See WATCH-REDRAW.md for the A/B.
 
+Local attention-paw candidate2026-10-24 appends six built-in imagegen whole-body
+keys to the existing comfort archive. Inputs were the existing licensed seated
+puppy and a generated paw study; no new photographs were introduced. All45 old
+comfort frames remain exact. ATTENTION-PAW.md records the source-sheet hash,
+prompt specification, registration and byte costs. Existing attribution and
+CC BY-SA4.0 terms apply; source sheets are excluded from npm.
+
+Local standing-wall candidate2026-10-24 appends nine generated whole-body keys,
+referenced only from the existing canonical puppy. All51 accepted comfort frames
+remain exact. Source hash, prompt specification, common-scale registration and
+costs are in ATTENTION-WALL.md. No new photo/video inputs or raw npm sheets;
+existing attribution and CC BY-SA4.0 terms continue to apply.
+
 Copyrightability of AI-generated expression, the precise derivative-work analysis,
 and worldwide name clearance are not conclusively determined here. Existing
 domestic trademark research records possible similar marks; owning an npm scope

package/ATTENTION-PAW.md

@@ -0,0 +1,53 @@
+# Attention paw gesture
+
+The notification sequence now approaches the user when necessary, sits facing
+them, makes two gentle air scrapes with the viewer-left forepaw, lowers it, and
+looks toward the pending item. This is one 1.88-second episode per accepted
+notice. It does not add autonomous reminders or change which events qualify.
+
+The viewer-right forepaw remains planted. Six whole-body grayscale keys share
+one uniform scale and are translated to that support point. There are no
+independently warped heads, legs, or body parts. The original seated frame is
+reused exactly at both ends. Resolution, ball, treat, and tug interrupt through
+an authored lowering path of at most 0.3 seconds from the last displayed key.
+
+## Art and provenance
+
+Generated with the built-in imagegen tool, using the existing canonical seated
+puppy and an earlier generated paw study as references. No new photographs were
+used. Existing art attribution and CC BY-SA 4.0 terms continue to apply; see
+ASSET-PROVENANCE.md and ASSETS-LICENSE.md.
+
+Final source: `dist/attention-paw-v2/source.png`.
+SHA-256: `0c3b01952378cd7c0fd941f53e1c43ca5de73c63b3875e58d035b009508d693a`.
+
+Prompt specification: a wide 3-by-2 sheet of six square, black-background cells;
+the same fluffy golden-retriever puppy, face, bandana, seated proportions and
+complete tail in every cell; one forepaw gently lifts, bends, reaches forward,
+scrapes down through the air, retracts, and lowers; the opposite forepaw stays
+planted; consistent fixed camera, floor, body scale, monochrome tonal fur and
+clean empty margins. Earlier alternating-paw and tail-clipped studies were
+rejected and are not runtime assets.
+
+`tools/prepare-attention-art.mjs` and its Python companion extract and register
+the six keys offline. They append to the existing comfort archive and verify
+all 45 previous frames byte-for-byte. The source sheet and QA files are excluded
+from the npm package. No generation service is used at runtime.
+
+## Cost and verification
+
+The compressed archive grows by 55,386 bytes (about 54 KiB). Node's compressed
+pixel storage grows by 63,912 bytes (about 62 KiB), compared with the same codec
+over the preserved 45-frame baseline. Selectively retaining the new keys in the
+portable store costs about 137 KiB; this is different from the net archive
+repacking delta. These are pixel-storage measurements, not total process RSS.
+
+The sampler borrows the existing RGBA scratch and two-frame reconstruction
+cache. No new runtime dependency, asset family, timer, or permanent decoded
+animation cache is added. Dedicated tests check exact old pixels, planted root,
+neutral bookends, bounded recovery, direct interactions and the public renderer.
+
+The owner accepted this motion on2026-10-24 for release0.0.16, alongside the
+standing wall variant. Windows npm-shim support is a separate compatibility fix
+in that release. Completed-work alerts remain unsupported. The local preview
+uses simulated pending items. Live companion restart remains user-controlled.

package/ATTENTION-WALL.md

@@ -0,0 +1,58 @@
+# Standing wall scrabble
+
+An additional attention variant: shift weight to the hindquarters, rise onto two
+hind feet, brace both front paws against an implicit front glass plane, scrabble
+quickly, then lower and sit. The complete authored episode lasts 2.2 seconds.
+The glass is a visual metaphor, not detected window geometry or a new collision
+system. No actual desktop content, wall or screen is inspected.
+
+The gentle seated paw cue is preserved. Accepted notices alternate paw/wall
+without consuming autonomy or fetch randomness. Hosts can request a fixed cue:
+
+```js
+pet.notify({kind:'input', gesture:'wall'}); // 'auto' (default), 'paw', 'wall'
+```
+
+Repeated or rejected notices do not start another episode. If wall art is absent,
+automatic mode keeps the prior behavior; an explicit wall request returns false.
+Resolution, ball, treat and tug lower from the exact displayed key via an authored
+path of at most 0.4 seconds. There is no mid-gesture teleport to a sitting frame.
+
+## Art source
+
+Built-in imagegen, canonical existing licensed seated puppy as the sole image
+reference. No new photographs or video frames were used. The artwork retains
+the existing attribution and CC BY-SA 4.0 lineage. Raw sheets are excluded from
+npm. Source: `dist/attention-wall-v1/source.png`, SHA-256:
+`ea1a8f2f4d3f4b897bec95bcd06b8a4d6cd81d083713b67857efac469707e4af`.
+
+Prompt specification: the exact reference puppy, muzzle/ears/bandana/fur and age;
+one 3-by-3 sheet of complete whole-body keys on black, a fixed front/slight
+three-quarter camera, same world scale and floor in every cell, no drawn wall,
+props or labels. Keys: seated weight shift, half-rise, upright braced on two rear
+soles with both forepaws high, alternating forepaw scrapes with coupled shoulder
+weight transfer, both paws high, knees bending/lowering, and low seated recovery.
+Preserve chest/skull volume, full tail and toes; standing must be naturally taller
+than sitting rather than resized into the seated bounding box.
+
+Actual sheet: 1254 by 1254, split into nine 418-square cells. Offline preparation
+uses one common scale (0.7572463768115942), whole-frame translation to the measured
+lower paw-pair proxy, and no anatomical compositing or nonlinear warp. Proxy
+registration is not animal motion capture. The exact old neutral is reused at
+both ends. Existing 51 comfort frames, including the gentle paw cue, stay exact.
+
+## Resource cost and checks
+
+Nine extra keys extend the same comfort archive from 51 to 60 frames. Compressed
+download increases 104,865 bytes (102.4 KiB); Node compressed pixel storage grows
+117,578 bytes (114.8 KiB) with the same codec/baseline. These are payload figures,
+not total RSS. No new RGBA scratch, timer, asset family, process or dependency.
+
+Tests cover old pixel hashes, shared neutral, malformed recovery metadata,
+unchanged world/projection, sole-proxy registration, every recovery phase,
+variant choice and resolution/direct-play priority. Real public Braille frames
+and the Aside preview were inspected. Raster audit has no structural errors;
+its center-shift warnings describe the deliberate rise/lower and stance transfer
+and require visual review rather than a looser threshold. The owner visually
+accepted this motion and authorized release0.0.16 on2026-10-24. The user's running
+companion is not automatically replaced by publication.

package/ATTENTION.md

@@ -42,6 +42,10 @@ Only the fixed read-only command `stackbite agent seats --output json`, at most
 once every five seconds after the previous read finishes. StackBite revalidates
 the inherited caller Seat/generation. The source requires a live Room binding;
 launching from an unrelated terminal is refused rather than guessing credentials.
+
+On Windows, a native executable or npm PowerShell launcher is resolved on PATH.
+The launcher uses literal `-File` argv with closed stdin, without a shell command
+string or execution-policy change. Unix retains the direct command.
 No raw database, credential file, terminal transcript, screenshot, microphone,
 clipboard, provider hook or browser session is read by Retrieviewer.
 
@@ -58,8 +62,21 @@ a remote server does not automatically give a local Windows pet remote access.
 
 ## Behavior and limits
 
-- A new exact Room/Seat/generation/turn/request cues one connected sit-and-look-left.
+Attention now has two authored gestures: a seated gentle paw and a standing
+two-hind-foot glass scrabble. Automatic cues alternate; hosts can pass
+`gesture:'paw'` or `gesture:'wall'` to `pet.notify`. See [wall motion](ATTENTION-WALL.md)
+for support, recovery and measured costs. The preview's wall button forces that
+variant using simulated input; it does not request a real approval.
+
+- A new exact Room/Seat/generation/turn/request cues one connected attention episode:
+  brake/recover and face the user, approach using the existing world path if more
+  than 0.8 m from the near check-in point, then sit, gently paw the air twice,
+  lower the paw and look left. See [paw motion and cost](ATTENTION-PAW.md). Near pets stay
+  in place. Resolution during approach brakes the obsolete journey naturally.
   Left means the sidebar direction, not a detected button coordinate.
+- The rule cue is accepted before optional inference starts. LLM latency, failure
+  or disagreement never delays, repeats or retracts a confirmed pending alert.
+  This does not remove the existing five-second source polling interval.
 - Explicit ball/treat/tug interactions win. A rejected cue retries only while
   its source fact is fresh. Distinct cues are at least 20 seconds apart.
 - Resolved/disconnected/stale facts clear the cue. Source errors are unavailable,
@@ -76,11 +93,35 @@ These are separate short runs, not a steady-state/peak comparison or a guarantee
 of 1 MiB overhead. Native-helper and transient StackBite CLI memory are additional.
 No new image payload, model or runtime package dependency was added.
 
-Windows additionally displays a small count/offline label in the existing control
-bar. Non-Windows helpers do not yet display that label; their live StackBite
+Windows displays the pending Seat's bounded `role_title` and approval/input kind
+in the existing control bar, with ellipsis and a full-text hover tooltip. The
+local `watch.target` and `attentionLabel` diagnostics expose that same target.
+Names are at most 64 UTF-16 code units, control/directional characters are removed,
+and no task text is retained. Labels never enter model input or saved settings.
+Renaming/replacing a target refreshes the label even if the count is unchanged;
+renaming alone is not a new alert. Missing names use the Seat ID as a fallback.
+Non-Windows helpers do not yet display that label; their live StackBite
 integration remains unverified. Capture/overlay support is a separate platform
 question. No new Wayland or AlmaLinux compatibility claim is made here.
 
+Version 0.0.15 includes these rule-first/target/approach improvements after the
+0.0.14 baseline. A simulated frozen
+LLM and a time-skipped distant notification are available in the local preview.
+They never write StackBite state or make model requests. Real provider events
+still depend on StackBite publishing trustworthy `needs_input` metadata.
+
+Working-copy verification on 2026-10-24: focused tests cover immediate delivery
+with hung/disagreeing advice, local-only bounded labels, same-count renaming,
+late-result cancellation, far-to-near motion, and resolution during approach.
+An owned Windows worker/native-helper run displayed and renamed the actual label,
+cleared it to `Watching`, preserved direct ball priority and exited both children.
+The fixture run used about 112 MiB Node RSS (no LLM), excluding the helper/CLI.
+Matched short watch-off native startup probes of published 0.0.14 and the working
+copy both rounded to 106 MiB Node RSS. These are not steady-state or peak-memory
+guarantees. All nine packaged art archives are byte-identical; no dependency,
+additional resident process or observer timer was added. Labels are bounded
+metadata, not a promise of literally zero additional bytes or allocations.
+
 ## Reuse decision
 
 The first source already exists in StackBite, so a fixed-argv adapter is smaller

package/BRAIN.md

@@ -55,17 +55,21 @@ truncated output, tool calls and responses over 32 KiB. No returned text is run,
 typed, used as a coordinate, or displayed as a factual summary.
 
 This first connection is **advisory on known pending-input facts**, not screen
-understanding. A confirmed approval/question cannot be suppressed by an LLM:
-`notify` follows the model; `ignore` is overridden by the rule; uncertain/errors
-fall back. Diagnostics distinguish `model_notify`, `rule_override`, and
-`rule_fallback`. With only kind/count facts, the model adds little semantic value;
+understanding. Since 0.0.15, a confirmed approval/question is
+delivered by the rule first; optional model work starts only after the pet accepts
+the cue. It cannot delay, suppress, repeat or retract the cue. Diagnostics show
+`rule_first` while advice is pending, then `model_notify` for agreement,
+`rule_override` for disagreement, or `rule_fallback` for uncertain/errors.
+The 0.0.14 baseline waited for advice. With only kind/count facts, the model adds little semantic value;
 this slice establishes a bounded backend before optional richer perception.
 
-Each exact pending item is judged once while fresh. Resolution, generation
+Each accepted exact pending item is judged once while fresh; rejected cues during
+direct play do not spend requests. Seat display names stay local. Resolution, generation
 replacement, stale source, pause, hide and shutdown cancel its request; late
 answers cannot resurrect a notice. Direct ball/treat/tug still wins. Animation
-ticks never await HTTP. Network timeout is 3 seconds; a host-tick guard falls back
-within 3.5 seconds of active time even if a custom judge hangs. `brain-check`
+ticks never await HTTP. Network timeout is 3 seconds; a host-tick guard discards
+hung advice within 3.5 seconds of active time, without delaying the already-issued
+rule alert. `brain-check`
 allows 8 seconds for diagnosis, not for normal pet reactions.
 
 ## Resource and request limits
@@ -109,7 +113,13 @@ pending event, and worker/painter both exited. Node RSS was about 128 MiB in tha
 short run, excluding helper/CLI memory. This is not an incremental or steady-state
 RAM measurement. Existing live companion state was not changed.
 
-All 217 applicable tests passed (two macOS-only checks skipped), including mocked
+For the 0.0.14 baseline, all 217 applicable tests passed (two macOS-only checks skipped), including mocked
 JSON validation, price ceilings, timeout, cache, budget, cancellation and stale
 results. The earlier free Gemma attempt returned 429 and never produced a verified
 live decision; it is no longer the selected backend. Privacy restrictions remain.
+
+The 0.0.15 rule-first candidate passed 223 applicable tests (two macOS-only checks
+skipped), fresh installed-consumer checks and an owned Windows fixture run with
+actual native target-label renaming/clearing. Hung/disagreeing advice is tested
+with mock judges: those tests do not make paid requests. The model request body
+and privacy/price restrictions are unchanged.

package/README.ko.md

@@ -108,7 +108,13 @@ npm uninstall -g @bitefoundry/retrieviewer
 
 ## StackBite 알림
 
+0.0.16은 앞발로 살살 부르기와 두 발로 서서 벽 박박 긁기를 번갈아 보여줘요.
+홈페이지에서도 두 동작을 눌러볼 수 있어요. Windows의 npm 설치형 StackBite도
+감시할 수 있게 했어요. 작업 완료 체크표시는 아직 알림 대상이 아니에요.
+
 0.0.14부터 [승인·입력 대기 알림](ATTENTION.md)을 선택해서 켤 수 있어요.
+0.0.15는 LLM을 기다리지 않고 알리고, Windows에 Seat 이름과 대기 종류를 표시해요.
+강아지도 기존 그림으로 가까이 와서 알림 방향을 봐요. 이름은 외부로 보내지 않아요.
 화면 캡처나 자동 승인 없이 현재 Room의 메타데이터만 읽어요.
 업데이트 후, 화면이 보이는 PC의 실행 중인 StackBite Seat에서 실행하세요.
 

package/README.md

@@ -137,6 +137,15 @@ It is opt-in and does not capture screens or operate other apps.
 An [optional paid DeepSeek/OpenRouter backend](./BRAIN.md) can judge anonymous event metadata;
 offline rules remain the default and preserve confirmed pending alerts.
 
+Version 0.0.15 alerts without waiting for the model, shows the Seat name and
+pending kind locally on Windows, and lets the puppy approach before looking
+toward the sidebar. It reuses existing artwork; names never enter model input.
+
+Version 0.0.16 adds two approved attention gestures: a gentle seated paw and a
+standing two-paw glass scrabble. They alternate for new alerts; both are playable
+in the website demo. Windows watching also supports npm's PowerShell launcher.
+Completed-work checkmarks are not alert events yet.
+
 After updating, run inside a live StackBite Seat on the display computer:
 
 ```sh

package/RELEASING.md

@@ -1,4 +1,39 @@
-# Retrieviewer 0.0.14 release process
+# Retrieviewer 0.0.16 release process
+
+Current target: `@bitefoundry/retrieviewer@0.0.16`, public `latest`.
+On2026-10-24 the owner accepted the gentle-paw and standing-wall gestures and
+explicitly authorized merging, GitHub push, npm publication and website updates.
+Both cues preserve the accepted puppy; automatic notifications alternate them.
+Explicit host gesture selection and bilingual website demo buttons are included.
+The same comfort archive gains15 keys; all45 pre-gesture keys remain exact.
+Windows read-only watching resolves native executables or npm PowerShell shims
+with literal argv and closed stdin. No shell string or execution-policy change.
+
+Build/install one fresh exact tarball, run full tests and owned Windows checks,
+push and wait for Windows/Linux CI, publish the same artifact, verify registry
+integrity and a fresh consumer, and verify matching deployed Pages runtime bytes.
+No StackBite patch, completed-work alerts, screen capture, saved API key, live-pet
+restart or additional platform certification is part of this release.
+
+## Previous 0.0.15 scope (historical)
+
+Current target: `@bitefoundry/retrieviewer@0.0.15`, public `latest`.
+On 2026-10-24 the owner authorized npm publication of the reviewed rule-first
+attention update. The optional model now runs after a confirmed rule cue is
+accepted; no model response can delay, retract or repeat that cue. Windows
+displays a bounded local Seat name and approval/input kind with a hover tooltip.
+The pet reuses existing front contact, travel and whole-body look material;
+resolved approaches brake naturally and direct play keeps priority.
+
+Keep all nine art archives, runtime dependencies, provider/privacy restrictions,
+price ceilings and request bounds unchanged. Build/install a fresh exact tarball,
+compare every shipped byte, run the full suite and owned native checks, then
+publish that same artifact. Verify registry integrity and a fresh public-registry
+consumer. No StackBite changes, real approval actions, screen capture, host patch,
+live pet restart or website deployment are authorized by this release request.
+macOS/Linux live notification behavior remains unverified.
+
+## Previous 0.0.14 scope (historical)
 
 Current target: `@bitefoundry/retrieviewer@0.0.14`, public `latest`.
 On 2026-10-24 the owner authorized npm publication of the metadata-only StackBite

package/integrations/stackbite/attention.mjs

@@ -2,10 +2,26 @@
 // Uses StackBite's own binding validation; never reads its credential files.
 import {execFile} from 'node:child_process';
 import {promisify} from 'node:util';
+import {stat} from 'node:fs/promises';
+import {join,delimiter} from 'node:path';
 import {validateAttentionSnapshot} from '../../retrieviewer-attention.mjs';
-const execute=promisify(execFile);
+const run=promisify(execFile);
+const execute=(command,args,options)=>{const pending=run(command,args,options);pending.child?.stdin?.end();return pending;};
 const identifier=value=>typeof value==='string'&&/^[a-zA-Z0-9_.:-]{1,128}$/.test(value);
 
+// Match npm's Windows PowerShell launcher without shell strings or execution-
+// policy changes. Like the installer probe, close stdin so npm sees no pipeline.
+export async function resolveStackBiteCommand({env=process.env,platform=process.platform}={}){
+ if(platform==='win32')for(const directory of (env.PATH??env.Path??'').split(delimiter).filter(Boolean)){
+  for(const extension of ['.exe','.ps1']){
+   const path=join(directory,'stackbite'+extension);
+   if(!(await stat(path).catch(()=>null))?.isFile())continue;
+   return extension==='.exe'?{command:path,prefix:[]}:{command:'powershell.exe',prefix:['-NoProfile','-NonInteractive','-File',path]};
+  }
+ }
+ return {command:'stackbite',prefix:[]};
+}
+
 export function stackBiteBinding(env=process.env){
  if(!identifier(env.STACKBITE_ROOM_ID)||!identifier(env.STACKBITE_SEAT_KEY)||!identifier(env.STACKBITE_SESSION_GENERATION)||!env.STACKBITE_STATE_DIR||!env.STACKBITE_ROOM_BRIDGE_URL)throw Error('Start desktop --watch stackbite inside a live StackBite Seat. No Room binding was found.');
  return {roomId:env.STACKBITE_ROOM_ID};
@@ -24,23 +40,24 @@ export function projectStackBiteSeats(value,{roomId}={}){
    const turnId=Number.isSafeInteger(status.turn_id)&&status.turn_id>0?status.turn_id:null;
    const requestId=identifier(status.input_request_id)?status.input_request_id:undefined;
    if(turnId===null&&requestId===undefined)continue;
-   items.push({id:seat.seat_key,generation:seat.generation,turnId,...requestId===undefined?{}:{requestId},kind:status.input_kind==='approval'?'approval':'input'});
+   items.push({id:seat.seat_key,generation:seat.generation,turnId,...requestId===undefined?{}:{requestId},kind:status.input_kind==='approval'?'approval':'input',label:seat.role_title});
   }else{
    // Older explicit lifecycle facts are accepted only with an exact turn.
    if(!['awaiting_user','blocked'].includes(seat.lifecycle_state)||!Number.isSafeInteger(seat.turn_id)||seat.turn_id<1)continue;
-   items.push({id:seat.seat_key,generation:seat.generation,turnId:seat.turn_id,kind:seat.provider_permission_pending===true||seat.input_kind==='approval'?'approval':'input'});
+   items.push({id:seat.seat_key,generation:seat.generation,turnId:seat.turn_id,kind:seat.provider_permission_pending===true||seat.input_kind==='approval'?'approval':'input',label:seat.role_title});
   }
  }
  return validateAttentionSnapshot({source:'stackbite',scope:roomId,items});
 }
-export function createStackBiteSource({env=process.env,exec=execute}={}){
+export function createStackBiteSource({env=process.env,exec=execute,resolveCommand=()=>resolveStackBiteCommand({env})}={}){
  const binding=stackBiteBinding(env);
  const childEnv={...env};delete childEnv.OPENROUTER_API_KEY;
  return {
   async readSnapshot({signal}={}){
    // Fixed argv, no shell, no input/click/report/approval command. The CLI checks
    // that the inherited caller Seat/generation is still live on every read.
-   const {stdout}=await exec('stackbite',['agent','seats','--output','json'],{env:childEnv,signal,encoding:'utf8',windowsHide:true,timeout:4000,maxBuffer:262144});
+   const {command,prefix}=await resolveCommand();
+   const {stdout}=await exec(command,[...prefix,'agent','seats','--output','json'],{env:childEnv,signal,encoding:'utf8',windowsHide:true,timeout:4000,maxBuffer:262144});
    return projectStackBiteSeats(JSON.parse(stdout),binding);
   },
  };

package/integrations/windows-overlay/Overlay.cs

@@ -110,12 +110,12 @@ sealed class Companion : ApplicationContext {
     readonly JavaScriptSerializer json=new JavaScriptSerializer();readonly object inputLock=new object();
     readonly Queue<Dictionary<string,object>> messages=new Queue<Dictionary<string,object>>();
     TargetItem target;Form pickerWindow;QuietWindow testTarget;readonly bool testMode;Rectangle canvas;int revision=0,cell=8;bool visible=false,paused=false,loaded=false,quitting=false,picking=false,announced=false;
-    Label status=new Label();Mutex mutex;string attentionText=null;
+    Label status=new Label();readonly ToolTip attentionTip=new ToolTip();Mutex mutex;string attentionText=null;
     internal Companion(Mutex single,bool diagnostic){
         mutex=single;testMode=diagnostic;bar.Text="Retrieviewer controls";bar.Size=new Size(538,40);bar.BackColor=Color.FromArgb(28,30,34);bar.ForeColor=Color.White;
         bar.Font=new Font("Segoe UI",9);bar.Controls.Add(MakeButton("Ball",8,()=>Interact("ball")));bar.Controls.Add(MakeButton("Treat",76,()=>Interact("treat")));
         bar.Controls.Add(MakeButton("Tug",144,()=>Interact("tug")));bar.Controls.Add(MakeButton("Window",212,ChooseTarget));bar.Controls.Add(MakeButton("Pause",280,TogglePause));bar.Controls.Add(MakeButton("Quit",348,Quit));
-        status.AutoSize=false;status.Location=new Point(422,12);status.Size=new Size(112,22);status.Text="Loading...";bar.Controls.Add(status);
+        status.AutoSize=false;status.AutoEllipsis=true;status.UseMnemonic=false;status.Location=new Point(422,12);status.Size=new Size(112,22);status.Text="Loading...";bar.Controls.Add(status);
         ContextMenuStrip menu=new ContextMenuStrip();menu.Items.Add("Choose window",null,(s,e)=>ChooseTarget());menu.Items.Add("Hide / resume",null,(s,e)=>TogglePause());menu.Items.Add("Quit",null,(s,e)=>Quit());
         tray.Icon=SystemIcons.Application;tray.Text="Retrieviewer · Choose window";tray.ContextMenuStrip=menu;tray.Visible=true;tray.DoubleClick+=(s,e)=>ChooseTarget();
         // Handles are created on the UI thread before the reader can signal EOF.
@@ -154,8 +154,8 @@ sealed class Companion : ApplicationContext {
                 if(type=="interaction"){status.Text=attentionText??(Program.Bool(m,"accepted")?"Ready!":"Please wait");continue;}
                 if(type=="attention"){
                     int count=Program.Int(m,"count");string state=Program.Str(m,"state");
-                    if(count<0||count>32)throw new Exception("Invalid attention count");
-                    attentionText=state=="connected"?(count>0?count+" need input":"Watching"):state=="paused"?"Watch paused":state=="connecting"?"Connecting...":"Watch offline";status.Text=attentionText;
+                    attentionText=Program.AttentionText(state,count,m.ContainsKey("label")?Program.Str(m,"label"):"",m.ContainsKey("kind")?Program.Str(m,"kind"):"");status.Text=attentionText;attentionTip.SetToolTip(status,attentionText);
+                    Program.Emit(new {type="attention-label",text=attentionText});
                     continue;
                 }
                 if(type=="error"){status.Text="Engine error";Quit();return;}
@@ -216,7 +216,7 @@ sealed class Companion : ApplicationContext {
         }
     }
     void Quit(){if(quitting)return;quitting=true;clock.Stop();if(pickerWindow!=null)pickerWindow.Close();pet.Close();bar.Close();tray.Visible=false;tray.Dispose();Program.Emit(new {type="quit"});ExitThread();}
-    protected override void Dispose(bool disposing){if(disposing){clock.Dispose();pet.Dispose();bar.Dispose();tray.Dispose();if(testTarget!=null)testTarget.Dispose();if(mutex!=null){mutex.ReleaseMutex();mutex.Dispose();mutex=null;}}base.Dispose(disposing);}
+    protected override void Dispose(bool disposing){if(disposing){clock.Dispose();attentionTip.Dispose();pet.Dispose();bar.Dispose();tray.Dispose();if(testTarget!=null)testTarget.Dispose();if(mutex!=null){mutex.ReleaseMutex();mutex.Dispose();mutex=null;}}base.Dispose(disposing);}
 }
 
 static class Program {
@@ -226,6 +226,17 @@ static class Program {
     internal static int Int(Dictionary<string,object> m,string key){return Convert.ToInt32(m[key]);}
     internal static string Str(Dictionary<string,object> m,string key){return Convert.ToString(m[key]);}
     internal static bool Bool(Dictionary<string,object> m,string key){return Convert.ToBoolean(m[key]);}
+    internal static string AttentionText(string state,int count,string label,string kind){
+        if(count<0||count>32||label.Length>64)throw new Exception("Invalid attention metadata");
+        foreach(char c in label)if(char.IsControl(c)||(c>=0x200b&&c<=0x200f)||(c>=0x202a&&c<=0x202e)||(c>=0x2060&&c<=0x206f))throw new Exception("Invalid attention label");
+        if(state=="connected"){
+            if(count==0)return "Watching";
+            if(label.Length==0)return count+" need input";
+            if(kind!="approval"&&kind!="input")throw new Exception("Invalid attention kind");
+            return label+" - "+(kind=="approval"?"Approval pending":"Input pending")+(count>1?" (+"+(count-1)+")":"");
+        }
+        return state=="paused"?"Watch paused":state=="connecting"?"Connecting...":"Watch offline";
+    }
     [STAThread] static int Main(string[] args){
         try{
             // GUI-subsystem processes have redirected handles but no console code
@@ -269,8 +280,9 @@ static class Program {
             Native.ShowWindow(target.Handle,4);Application.DoEvents();bool restored=!Native.IsIconic(target.Handle);
             bool focus=Native.GetForegroundWindow()==foreground;
             bool gridBounds=GridCell(3840,2160)==8&&GridCell(7680,4320)==12&&GridCell(32000,18000)==0&&GridCell(int.MaxValue,int.MaxValue)==0&&GridCell(0,0)==0;
-            bool passed=clickThrough&&noActivate&&layered&&follows&&minimized&&hidden&&restored&&focus&&pet.PaintedDots>0&&gridBounds;
-            Emit(new {type="self-test",passed=passed,gridBounds=gridBounds,clickThroughStyle=clickThrough,noActivateStyle=noActivate,layered=layered,followGeometry=follows,expectedX=expectedX,expectedY=expectedY,actualX=actual.Left,actualY=actual.Top,minimize=minimized,hide=hidden,restore=restored,foregroundPreserved=focus,dots=pet.PaintedDots,proof=proof});return passed?0:1;
+            bool labels=AttentionText("connected",2,"Worker & Review","approval")=="Worker & Review - Approval pending (+1)"&&AttentionText("connected",0,"","")=="Watching";
+            bool passed=clickThrough&&noActivate&&layered&&follows&&minimized&&hidden&&restored&&focus&&pet.PaintedDots>0&&gridBounds&&labels;
+            Emit(new {type="self-test",passed=passed,attentionLabels=labels,gridBounds=gridBounds,clickThroughStyle=clickThrough,noActivateStyle=noActivate,layered=layered,followGeometry=follows,expectedX=expectedX,expectedY=expectedY,actualX=actual.Left,actualY=actual.Top,minimize=minimized,hide=hidden,restore=restored,foregroundPreserved=focus,dots=pet.PaintedDots,proof=proof});return passed?0:1;
         }
     }
 }

package/integrations/windows-overlay/worker.mjs

@@ -10,7 +10,7 @@ import {controlAddress,parseHelperSpec} from '../desktop/platform.mjs';
 
 let helper,pump,timer,server,session,paths,owned=false,stopping=false,frames=0,paintedFrames=0,visible=false,selected=false,pickerVisible=false,pendingViewport=null,lastInteraction=null;
 let nativeError=null,ready=false,detached=false;
-let attention=null,brain=null;
+let attention=null,brain=null,attentionLabel=null;
 const returnStyle=process.env.RETRIEVIEWER_RETURN_STYLE??'auto';
 const watchSource=process.env.RETRIEVIEWER_WATCH??'off';
 const brainSource=process.env.RETRIEVIEWER_BRAIN??'off';
@@ -44,7 +44,7 @@ try{
    body+=bytes.toString('utf8');if(body.length>2048)return socket.destroy();if(!body.includes('\n'))return;
    let command;try{command=JSON.parse(body.split('\n')[0]);}catch{return socket.destroy();}
    if(command.token!==session.token||!['status','stop'].includes(command.command))return socket.destroy();
-   socket.end(JSON.stringify(command.command==='stop'?{stopped:true}:{running:true,reachable:true,selected,visible,pickerVisible,frames,paintedFrames,lastInteraction,returnStyle,watch:{source:watchSource,...attention?.status??{state:'off',pendingCount:0}},brain:brain?.status??{provider:'off',state:'off'},pid:process.pid,painterPid:helper?.pid,rssBytes:process.memoryUsage().rss})+'\n');
+   socket.end(JSON.stringify(command.command==='stop'?{stopped:true}:{running:true,reachable:true,selected,visible,pickerVisible,frames,paintedFrames,lastInteraction,returnStyle,attentionLabel,watch:{source:watchSource,...attention?.status??{state:'off',pendingCount:0}},brain:brain?.status??{provider:'off',state:'off'},pid:process.pid,painterPid:helper?.pid,rssBytes:process.memoryUsage().rss})+'\n');
    if(command.command==='stop')stop();
   });
  });
@@ -66,6 +66,7 @@ try{
    else if(m.type==='picker')pickerVisible=m.visible===true;
    else if(m.type==='viewport'){pendingViewport=m;visible=m.visible;selected=m.selected===true;pump?.viewport(m);}
    else if(m.type==='ack'){frames++;if(m.painted)paintedFrames++;pump?.ack();}
+   else if(m.type==='attention-label'){if(typeof m.text!=='string'||m.text.length>160)throw Error('Invalid attention label');attentionLabel=m.text;}
    else if(m.type==='pause')pump?.pause(m.paused);
    else if(m.type==='interact'){const accepted=pump?.interact(m.kind)??false;lastInteraction={kind:m.kind,accepted};write({type:'interaction',kind:m.kind,accepted});}
    else if(m.type==='quit')stop();
@@ -83,7 +84,7 @@ try{
    attention=createAttentionMonitor({readSnapshot:source.readSnapshot,...brain?{judgeNotice:input=>brain.decide(input)}:{},onNotice:notice=>pump.notify(notice),onClear:()=>pump.clearNotice(),onChange:status=>{
     // Older POSIX helpers deliberately reject unknown message types. They can
     // run the visual cue, but only the Windows bar implements this status label.
-    if(spec.mode==='windows-overlay')write({type:'attention',state:status.state,count:status.pendingCount});
+    if(spec.mode==='windows-overlay')write({type:'attention',state:status.state,count:status.pendingCount,label:status.target?.label??'',kind:status.target?.kind??''});
    }});
   }
   write({type:'loaded',ink:process.env.RETRIEVIEWER_INK??'cream'});timer=setInterval(()=>{try{attention?.tick({active:!pump.hidden});pump.tick();}catch(error){write({type:'error',message:error.message});stop();}},1000/spec.fps);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bitefoundry/retrieviewer",
-  "version": "0.0.14",
+  "version": "0.0.16",
   "description": "A fluffy Braille desktop pet for Windows and Linux X11, with experimental macOS support and an embeddable TUI engine.",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://bitefoundry.github.io/retrieviewer/",
@@ -90,6 +90,8 @@
     "integrations/openrouter/brain.d.mts",
     "BRAIN.md",
     "ATTENTION.md",
+    "ATTENTION-PAW.md",
+    "ATTENTION-WALL.md",
     "integrations/linux-overlay/overlay.py",
     "integrations/linux-overlay/README.md",
     "integrations/macos-overlay/overlay.jxa",

package/puppy-comfort-sprites.mjs

@@ -6,7 +6,8 @@ export function comfortMotionKey(progress,motion){
  while(key<motion.times.length-1&&age>=motion.times[key+1])key++;
  return key;
 }
-export function comfortMotion(pose,info){return pose?.clip==='scramble'?info.scramble:pose?.clip==='pickup'?info.pickups?.[pose.view]:pose?.clip==='carry-trot'?info.carryTrot:pose?.clip==='carry-settle'?info.carryTrot?.settle:null;}
+export function comfortMotion(pose,info){const attention=pose?.clip==='attention-paw'?info.attentionPaw:pose?.clip==='attention-wall'?info.attentionWall:null;return attention?(pose.release?attention.releases?.[pose.release.from]:attention):pose?.clip==='scramble'?info.scramble:pose?.clip==='pickup'?info.pickups?.[pose.view]:pose?.clip==='carry-trot'?info.carryTrot:pose?.clip==='carry-settle'?info.carryTrot?.settle:null;}
+export const comfortProgress=pose=>pose.release?.progress??pose.progress;
 function validateMotion(motion,count){
  if(!motion||!Array.isArray(motion.frames)||!Array.isArray(motion.times)||motion.frames.length<2||motion.frames.length>32||motion.frames.length!==motion.times.length||motion.times[0]!==0||!Number.isFinite(motion.duration)||motion.duration<=0||motion.duration>3||(motion.cyclic?motion.times.at(-1)>=motion.duration:motion.times.at(-1)!==motion.duration)||motion.frames.some(i=>!Number.isInteger(i)||i<0||i>=count)||motion.times.some((t,i)=>!Number.isFinite(t)||(i&&t<=motion.times[i-1])))throw Error('Invalid fetch motion metadata');
  if(!Array.isArray(motion.floorOffsets)||motion.floorOffsets.length!==motion.frames.length||motion.floorOffsets.some(v=>!Number.isFinite(v)||Math.abs(v)>64))throw Error('Invalid fetch floor metadata');
@@ -33,16 +34,21 @@ export function createComfortSpriteSampler(bytes,info,output){
  }
  if(info.version>=4){validateMotion(info.scramble,info.frames);for(const view of ['rear','front'])validateMotion(info.pickups?.[view],info.frames);}
  if(info.version>=6){validateMotion(info.carryTrot,info.frames);validateMotion(info.carryTrot?.settle,info.frames);if(info.carryTrot.cyclic!==true||!info.carryTrot.mouth||!info.carryTrot.settle.mouth||!Array.isArray(info.carryTrot.feet)||info.carryTrot.feet.length!==info.carryTrot.frames.length||info.carryTrot.feet.some(list=>!Array.isArray(list)||list.some(f=>typeof f.id!=='string'||typeof f.stance!=='boolean'||![f.x,f.y].every(v=>Number.isFinite(v)&&v>=0&&v<320))))throw Error('Invalid carry metadata');}
+ for(const [motion,maxKeys,maxRecovery] of [[info.attentionPaw,8,.3],[info.attentionWall,12,.4]])if(motion){
+  validateMotion(motion,info.frames);
+  if(motion.frames[0]!==0||motion.frames.at(-1)!==0||!motion.releases||Object.keys(motion.releases).length>maxKeys)throw Error('Invalid attention endpoint');
+  for(const frame of new Set(motion.frames)){const exit=motion.releases[frame];validateMotion(exit,info.frames);if(exit.frames[0]!==frame||exit.frames.at(-1)!==0||exit.duration>maxRecovery)throw Error('Invalid attention recovery');}
+ }
  if(output!==undefined&&(!(output instanceof Uint8ClampedArray)||output.length!==320*320*4))throw Error('Invalid comfort output');
  const frames=grayFrameReader(bytes,320,320,info.frames);let rgba=output??null;
  if(rgba)for(let i=3;i<rgba.length;i+=4)rgba[i]=255;
  return pose=>{
-  if(!['tug','sleep','scramble','pickup','carry-trot','carry-settle'].includes(pose?.clip))throw Error('Invalid comfort clip');
+  if(!['tug','sleep','scramble','pickup','carry-trot','carry-settle','attention-paw','attention-wall'].includes(pose?.clip))throw Error('Invalid comfort clip');
   if(!rgba){rgba=new Uint8ClampedArray(320*320*4);for(let i=3;i<rgba.length;i+=4)rgba[i]=255;}
   let index;
-  if(['scramble','pickup','carry-trot','carry-settle'].includes(pose.clip)){
+  if(['scramble','pickup','carry-trot','carry-settle','attention-paw','attention-wall'].includes(pose.clip)){
    const motion=comfortMotion(pose,info);if(!motion)throw Error('Invalid scramble/pickup pose');
-   index=motion.frames[comfortMotionKey(pose.progress,motion)];
+   index=motion.frames[comfortMotionKey(comfortProgress(pose),motion)];
   }else index=pose.clip==='sleep'?info.sleep?.[pose.variant]:comfortFrameIndex(pose.progress,info);
   if(!Number.isInteger(index))throw Error('Invalid sleep variant');
   const frame=frames.getFrame(index),base=pose.base,blend=pose.blend??1;