@bitefoundry/retrieviewer 0.0.15 → 0.0.16

package/ASSET-PROVENANCE.md

@@ -102,6 +102,19 @@ records the exact36 source-key indices and `pixelBlending:false`. No new generat
 or photographic input, asset family or attribution is added. Existing CC BY-SA4.0
 terms and all non-watch pixels remain unchanged. See WATCH-REDRAW.md for the A/B.
 
+Local attention-paw candidate2026-10-24 appends six built-in imagegen whole-body
+keys to the existing comfort archive. Inputs were the existing licensed seated
+puppy and a generated paw study; no new photographs were introduced. All45 old
+comfort frames remain exact. ATTENTION-PAW.md records the source-sheet hash,
+prompt specification, registration and byte costs. Existing attribution and
+CC BY-SA4.0 terms apply; source sheets are excluded from npm.
+
+Local standing-wall candidate2026-10-24 appends nine generated whole-body keys,
+referenced only from the existing canonical puppy. All51 accepted comfort frames
+remain exact. Source hash, prompt specification, common-scale registration and
+costs are in ATTENTION-WALL.md. No new photo/video inputs or raw npm sheets;
+existing attribution and CC BY-SA4.0 terms continue to apply.
+
 Copyrightability of AI-generated expression, the precise derivative-work analysis,
 and worldwide name clearance are not conclusively determined here. Existing
 domestic trademark research records possible similar marks; owning an npm scope

package/ATTENTION-PAW.md

@@ -0,0 +1,53 @@
+# Attention paw gesture
+
+The notification sequence now approaches the user when necessary, sits facing
+them, makes two gentle air scrapes with the viewer-left forepaw, lowers it, and
+looks toward the pending item. This is one 1.88-second episode per accepted
+notice. It does not add autonomous reminders or change which events qualify.
+
+The viewer-right forepaw remains planted. Six whole-body grayscale keys share
+one uniform scale and are translated to that support point. There are no
+independently warped heads, legs, or body parts. The original seated frame is
+reused exactly at both ends. Resolution, ball, treat, and tug interrupt through
+an authored lowering path of at most 0.3 seconds from the last displayed key.
+
+## Art and provenance
+
+Generated with the built-in imagegen tool, using the existing canonical seated
+puppy and an earlier generated paw study as references. No new photographs were
+used. Existing art attribution and CC BY-SA 4.0 terms continue to apply; see
+ASSET-PROVENANCE.md and ASSETS-LICENSE.md.
+
+Final source: `dist/attention-paw-v2/source.png`.
+SHA-256: `0c3b01952378cd7c0fd941f53e1c43ca5de73c63b3875e58d035b009508d693a`.
+
+Prompt specification: a wide 3-by-2 sheet of six square, black-background cells;
+the same fluffy golden-retriever puppy, face, bandana, seated proportions and
+complete tail in every cell; one forepaw gently lifts, bends, reaches forward,
+scrapes down through the air, retracts, and lowers; the opposite forepaw stays
+planted; consistent fixed camera, floor, body scale, monochrome tonal fur and
+clean empty margins. Earlier alternating-paw and tail-clipped studies were
+rejected and are not runtime assets.
+
+`tools/prepare-attention-art.mjs` and its Python companion extract and register
+the six keys offline. They append to the existing comfort archive and verify
+all 45 previous frames byte-for-byte. The source sheet and QA files are excluded
+from the npm package. No generation service is used at runtime.
+
+## Cost and verification
+
+The compressed archive grows by 55,386 bytes (about 54 KiB). Node's compressed
+pixel storage grows by 63,912 bytes (about 62 KiB), compared with the same codec
+over the preserved 45-frame baseline. Selectively retaining the new keys in the
+portable store costs about 137 KiB; this is different from the net archive
+repacking delta. These are pixel-storage measurements, not total process RSS.
+
+The sampler borrows the existing RGBA scratch and two-frame reconstruction
+cache. No new runtime dependency, asset family, timer, or permanent decoded
+animation cache is added. Dedicated tests check exact old pixels, planted root,
+neutral bookends, bounded recovery, direct interactions and the public renderer.
+
+The owner accepted this motion on2026-10-24 for release0.0.16, alongside the
+standing wall variant. Windows npm-shim support is a separate compatibility fix
+in that release. Completed-work alerts remain unsupported. The local preview
+uses simulated pending items. Live companion restart remains user-controlled.

package/ATTENTION-WALL.md

@@ -0,0 +1,58 @@
+# Standing wall scrabble
+
+An additional attention variant: shift weight to the hindquarters, rise onto two
+hind feet, brace both front paws against an implicit front glass plane, scrabble
+quickly, then lower and sit. The complete authored episode lasts 2.2 seconds.
+The glass is a visual metaphor, not detected window geometry or a new collision
+system. No actual desktop content, wall or screen is inspected.
+
+The gentle seated paw cue is preserved. Accepted notices alternate paw/wall
+without consuming autonomy or fetch randomness. Hosts can request a fixed cue:
+
+```js
+pet.notify({kind:'input', gesture:'wall'}); // 'auto' (default), 'paw', 'wall'
+```
+
+Repeated or rejected notices do not start another episode. If wall art is absent,
+automatic mode keeps the prior behavior; an explicit wall request returns false.
+Resolution, ball, treat and tug lower from the exact displayed key via an authored
+path of at most 0.4 seconds. There is no mid-gesture teleport to a sitting frame.
+
+## Art source
+
+Built-in imagegen, canonical existing licensed seated puppy as the sole image
+reference. No new photographs or video frames were used. The artwork retains
+the existing attribution and CC BY-SA 4.0 lineage. Raw sheets are excluded from
+npm. Source: `dist/attention-wall-v1/source.png`, SHA-256:
+`ea1a8f2f4d3f4b897bec95bcd06b8a4d6cd81d083713b67857efac469707e4af`.
+
+Prompt specification: the exact reference puppy, muzzle/ears/bandana/fur and age;
+one 3-by-3 sheet of complete whole-body keys on black, a fixed front/slight
+three-quarter camera, same world scale and floor in every cell, no drawn wall,
+props or labels. Keys: seated weight shift, half-rise, upright braced on two rear
+soles with both forepaws high, alternating forepaw scrapes with coupled shoulder
+weight transfer, both paws high, knees bending/lowering, and low seated recovery.
+Preserve chest/skull volume, full tail and toes; standing must be naturally taller
+than sitting rather than resized into the seated bounding box.
+
+Actual sheet: 1254 by 1254, split into nine 418-square cells. Offline preparation
+uses one common scale (0.7572463768115942), whole-frame translation to the measured
+lower paw-pair proxy, and no anatomical compositing or nonlinear warp. Proxy
+registration is not animal motion capture. The exact old neutral is reused at
+both ends. Existing 51 comfort frames, including the gentle paw cue, stay exact.
+
+## Resource cost and checks
+
+Nine extra keys extend the same comfort archive from 51 to 60 frames. Compressed
+download increases 104,865 bytes (102.4 KiB); Node compressed pixel storage grows
+117,578 bytes (114.8 KiB) with the same codec/baseline. These are payload figures,
+not total RSS. No new RGBA scratch, timer, asset family, process or dependency.
+
+Tests cover old pixel hashes, shared neutral, malformed recovery metadata,
+unchanged world/projection, sole-proxy registration, every recovery phase,
+variant choice and resolution/direct-play priority. Real public Braille frames
+and the Aside preview were inspected. Raster audit has no structural errors;
+its center-shift warnings describe the deliberate rise/lower and stance transfer
+and require visual review rather than a looser threshold. The owner visually
+accepted this motion and authorized release0.0.16 on2026-10-24. The user's running
+companion is not automatically replaced by publication.

package/ATTENTION.md

@@ -42,6 +42,10 @@ Only the fixed read-only command `stackbite agent seats --output json`, at most
 once every five seconds after the previous read finishes. StackBite revalidates
 the inherited caller Seat/generation. The source requires a live Room binding;
 launching from an unrelated terminal is refused rather than guessing credentials.
+
+On Windows, a native executable or npm PowerShell launcher is resolved on PATH.
+The launcher uses literal `-File` argv with closed stdin, without a shell command
+string or execution-policy change. Unix retains the direct command.
 No raw database, credential file, terminal transcript, screenshot, microphone,
 clipboard, provider hook or browser session is read by Retrieviewer.
 
@@ -58,9 +62,16 @@ a remote server does not automatically give a local Windows pet remote access.
 
 ## Behavior and limits
 
+Attention now has two authored gestures: a seated gentle paw and a standing
+two-hind-foot glass scrabble. Automatic cues alternate; hosts can pass
+`gesture:'paw'` or `gesture:'wall'` to `pet.notify`. See [wall motion](ATTENTION-WALL.md)
+for support, recovery and measured costs. The preview's wall button forces that
+variant using simulated input; it does not request a real approval.
+
 - A new exact Room/Seat/generation/turn/request cues one connected attention episode:
   brake/recover and face the user, approach using the existing world path if more
-  than 0.8 m from the near check-in point, then sit and look left. Near pets stay
+  than 0.8 m from the near check-in point, then sit, gently paw the air twice,
+  lower the paw and look left. See [paw motion and cost](ATTENTION-PAW.md). Near pets stay
   in place. Resolution during approach brakes the obsolete journey naturally.
   Left means the sidebar direction, not a detected button coordinate.
 - The rule cue is accepted before optional inference starts. LLM latency, failure

package/README.ko.md

@@ -108,6 +108,10 @@ npm uninstall -g @bitefoundry/retrieviewer
 
 ## StackBite 알림
 
+0.0.16은 앞발로 살살 부르기와 두 발로 서서 벽 박박 긁기를 번갈아 보여줘요.
+홈페이지에서도 두 동작을 눌러볼 수 있어요. Windows의 npm 설치형 StackBite도
+감시할 수 있게 했어요. 작업 완료 체크표시는 아직 알림 대상이 아니에요.
+
 0.0.14부터 [승인·입력 대기 알림](ATTENTION.md)을 선택해서 켤 수 있어요.
 0.0.15는 LLM을 기다리지 않고 알리고, Windows에 Seat 이름과 대기 종류를 표시해요.
 강아지도 기존 그림으로 가까이 와서 알림 방향을 봐요. 이름은 외부로 보내지 않아요.

package/README.md

@@ -141,6 +141,11 @@ Version 0.0.15 alerts without waiting for the model, shows the Seat name and
 pending kind locally on Windows, and lets the puppy approach before looking
 toward the sidebar. It reuses existing artwork; names never enter model input.
 
+Version 0.0.16 adds two approved attention gestures: a gentle seated paw and a
+standing two-paw glass scrabble. They alternate for new alerts; both are playable
+in the website demo. Windows watching also supports npm's PowerShell launcher.
+Completed-work checkmarks are not alert events yet.
+
 After updating, run inside a live StackBite Seat on the display computer:
 
 ```sh

package/RELEASING.md

@@ -1,4 +1,21 @@
-# Retrieviewer 0.0.15 release process
+# Retrieviewer 0.0.16 release process
+
+Current target: `@bitefoundry/retrieviewer@0.0.16`, public `latest`.
+On2026-10-24 the owner accepted the gentle-paw and standing-wall gestures and
+explicitly authorized merging, GitHub push, npm publication and website updates.
+Both cues preserve the accepted puppy; automatic notifications alternate them.
+Explicit host gesture selection and bilingual website demo buttons are included.
+The same comfort archive gains15 keys; all45 pre-gesture keys remain exact.
+Windows read-only watching resolves native executables or npm PowerShell shims
+with literal argv and closed stdin. No shell string or execution-policy change.
+
+Build/install one fresh exact tarball, run full tests and owned Windows checks,
+push and wait for Windows/Linux CI, publish the same artifact, verify registry
+integrity and a fresh consumer, and verify matching deployed Pages runtime bytes.
+No StackBite patch, completed-work alerts, screen capture, saved API key, live-pet
+restart or additional platform certification is part of this release.
+
+## Previous 0.0.15 scope (historical)
 
 Current target: `@bitefoundry/retrieviewer@0.0.15`, public `latest`.
 On 2026-10-24 the owner authorized npm publication of the reviewed rule-first

package/integrations/stackbite/attention.mjs

@@ -2,10 +2,26 @@
 // Uses StackBite's own binding validation; never reads its credential files.
 import {execFile} from 'node:child_process';
 import {promisify} from 'node:util';
+import {stat} from 'node:fs/promises';
+import {join,delimiter} from 'node:path';
 import {validateAttentionSnapshot} from '../../retrieviewer-attention.mjs';
-const execute=promisify(execFile);
+const run=promisify(execFile);
+const execute=(command,args,options)=>{const pending=run(command,args,options);pending.child?.stdin?.end();return pending;};
 const identifier=value=>typeof value==='string'&&/^[a-zA-Z0-9_.:-]{1,128}$/.test(value);
 
+// Match npm's Windows PowerShell launcher without shell strings or execution-
+// policy changes. Like the installer probe, close stdin so npm sees no pipeline.
+export async function resolveStackBiteCommand({env=process.env,platform=process.platform}={}){
+ if(platform==='win32')for(const directory of (env.PATH??env.Path??'').split(delimiter).filter(Boolean)){
+  for(const extension of ['.exe','.ps1']){
+   const path=join(directory,'stackbite'+extension);
+   if(!(await stat(path).catch(()=>null))?.isFile())continue;
+   return extension==='.exe'?{command:path,prefix:[]}:{command:'powershell.exe',prefix:['-NoProfile','-NonInteractive','-File',path]};
+  }
+ }
+ return {command:'stackbite',prefix:[]};
+}
+
 export function stackBiteBinding(env=process.env){
  if(!identifier(env.STACKBITE_ROOM_ID)||!identifier(env.STACKBITE_SEAT_KEY)||!identifier(env.STACKBITE_SESSION_GENERATION)||!env.STACKBITE_STATE_DIR||!env.STACKBITE_ROOM_BRIDGE_URL)throw Error('Start desktop --watch stackbite inside a live StackBite Seat. No Room binding was found.');
  return {roomId:env.STACKBITE_ROOM_ID};
@@ -33,14 +49,15 @@ export function projectStackBiteSeats(value,{roomId}={}){
  }
  return validateAttentionSnapshot({source:'stackbite',scope:roomId,items});
 }
-export function createStackBiteSource({env=process.env,exec=execute}={}){
+export function createStackBiteSource({env=process.env,exec=execute,resolveCommand=()=>resolveStackBiteCommand({env})}={}){
  const binding=stackBiteBinding(env);
  const childEnv={...env};delete childEnv.OPENROUTER_API_KEY;
  return {
   async readSnapshot({signal}={}){
    // Fixed argv, no shell, no input/click/report/approval command. The CLI checks
    // that the inherited caller Seat/generation is still live on every read.
-   const {stdout}=await exec('stackbite',['agent','seats','--output','json'],{env:childEnv,signal,encoding:'utf8',windowsHide:true,timeout:4000,maxBuffer:262144});
+   const {command,prefix}=await resolveCommand();
+   const {stdout}=await exec(command,[...prefix,'agent','seats','--output','json'],{env:childEnv,signal,encoding:'utf8',windowsHide:true,timeout:4000,maxBuffer:262144});
    return projectStackBiteSeats(JSON.parse(stdout),binding);
   },
  };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bitefoundry/retrieviewer",
-  "version": "0.0.15",
+  "version": "0.0.16",
   "description": "A fluffy Braille desktop pet for Windows and Linux X11, with experimental macOS support and an embeddable TUI engine.",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://bitefoundry.github.io/retrieviewer/",
@@ -90,6 +90,8 @@
     "integrations/openrouter/brain.d.mts",
     "BRAIN.md",
     "ATTENTION.md",
+    "ATTENTION-PAW.md",
+    "ATTENTION-WALL.md",
     "integrations/linux-overlay/overlay.py",
     "integrations/linux-overlay/README.md",
     "integrations/macos-overlay/overlay.jxa",

package/puppy-comfort-sprites.mjs

@@ -6,7 +6,8 @@ export function comfortMotionKey(progress,motion){
  while(key<motion.times.length-1&&age>=motion.times[key+1])key++;
  return key;
 }
-export function comfortMotion(pose,info){return pose?.clip==='scramble'?info.scramble:pose?.clip==='pickup'?info.pickups?.[pose.view]:pose?.clip==='carry-trot'?info.carryTrot:pose?.clip==='carry-settle'?info.carryTrot?.settle:null;}
+export function comfortMotion(pose,info){const attention=pose?.clip==='attention-paw'?info.attentionPaw:pose?.clip==='attention-wall'?info.attentionWall:null;return attention?(pose.release?attention.releases?.[pose.release.from]:attention):pose?.clip==='scramble'?info.scramble:pose?.clip==='pickup'?info.pickups?.[pose.view]:pose?.clip==='carry-trot'?info.carryTrot:pose?.clip==='carry-settle'?info.carryTrot?.settle:null;}
+export const comfortProgress=pose=>pose.release?.progress??pose.progress;
 function validateMotion(motion,count){
  if(!motion||!Array.isArray(motion.frames)||!Array.isArray(motion.times)||motion.frames.length<2||motion.frames.length>32||motion.frames.length!==motion.times.length||motion.times[0]!==0||!Number.isFinite(motion.duration)||motion.duration<=0||motion.duration>3||(motion.cyclic?motion.times.at(-1)>=motion.duration:motion.times.at(-1)!==motion.duration)||motion.frames.some(i=>!Number.isInteger(i)||i<0||i>=count)||motion.times.some((t,i)=>!Number.isFinite(t)||(i&&t<=motion.times[i-1])))throw Error('Invalid fetch motion metadata');
  if(!Array.isArray(motion.floorOffsets)||motion.floorOffsets.length!==motion.frames.length||motion.floorOffsets.some(v=>!Number.isFinite(v)||Math.abs(v)>64))throw Error('Invalid fetch floor metadata');
@@ -33,16 +34,21 @@ export function createComfortSpriteSampler(bytes,info,output){
  }
  if(info.version>=4){validateMotion(info.scramble,info.frames);for(const view of ['rear','front'])validateMotion(info.pickups?.[view],info.frames);}
  if(info.version>=6){validateMotion(info.carryTrot,info.frames);validateMotion(info.carryTrot?.settle,info.frames);if(info.carryTrot.cyclic!==true||!info.carryTrot.mouth||!info.carryTrot.settle.mouth||!Array.isArray(info.carryTrot.feet)||info.carryTrot.feet.length!==info.carryTrot.frames.length||info.carryTrot.feet.some(list=>!Array.isArray(list)||list.some(f=>typeof f.id!=='string'||typeof f.stance!=='boolean'||![f.x,f.y].every(v=>Number.isFinite(v)&&v>=0&&v<320))))throw Error('Invalid carry metadata');}
+ for(const [motion,maxKeys,maxRecovery] of [[info.attentionPaw,8,.3],[info.attentionWall,12,.4]])if(motion){
+  validateMotion(motion,info.frames);
+  if(motion.frames[0]!==0||motion.frames.at(-1)!==0||!motion.releases||Object.keys(motion.releases).length>maxKeys)throw Error('Invalid attention endpoint');
+  for(const frame of new Set(motion.frames)){const exit=motion.releases[frame];validateMotion(exit,info.frames);if(exit.frames[0]!==frame||exit.frames.at(-1)!==0||exit.duration>maxRecovery)throw Error('Invalid attention recovery');}
+ }
  if(output!==undefined&&(!(output instanceof Uint8ClampedArray)||output.length!==320*320*4))throw Error('Invalid comfort output');
  const frames=grayFrameReader(bytes,320,320,info.frames);let rgba=output??null;
  if(rgba)for(let i=3;i<rgba.length;i+=4)rgba[i]=255;
  return pose=>{
-  if(!['tug','sleep','scramble','pickup','carry-trot','carry-settle'].includes(pose?.clip))throw Error('Invalid comfort clip');
+  if(!['tug','sleep','scramble','pickup','carry-trot','carry-settle','attention-paw','attention-wall'].includes(pose?.clip))throw Error('Invalid comfort clip');
   if(!rgba){rgba=new Uint8ClampedArray(320*320*4);for(let i=3;i<rgba.length;i+=4)rgba[i]=255;}
   let index;
-  if(['scramble','pickup','carry-trot','carry-settle'].includes(pose.clip)){
+  if(['scramble','pickup','carry-trot','carry-settle','attention-paw','attention-wall'].includes(pose.clip)){
    const motion=comfortMotion(pose,info);if(!motion)throw Error('Invalid scramble/pickup pose');
-   index=motion.frames[comfortMotionKey(pose.progress,motion)];
+   index=motion.frames[comfortMotionKey(comfortProgress(pose),motion)];
   }else index=pose.clip==='sleep'?info.sleep?.[pose.variant]:comfortFrameIndex(pose.progress,info);
   if(!Number.isInteger(index))throw Error('Invalid sleep variant');
   const frame=frames.getFrame(index),base=pose.base,blend=pose.blend??1;