@staix/agent-hub 0.12.25 → 0.12.27

package/docs/specs/2026-10-12-office-view-design.md

@@ -29,8 +29,8 @@ asset is copied.
   No timer, no `requestAnimationFrame`, no request. Colours come from the
   page's theme tokens through CSS classes; every state also carries a glyph
   and a text label.
-- An always-visible View control in the page header offers Off (the default), Flat, and in
-  phase 4 Isometric; the choice persists in the host-scoped `agent-hub-office`
+- The Office view section contains a mode control offering Off (the default),
+  Flat and Isometric; the choice persists in the host-scoped `agent-hub-office`
   cookie with the `agent-hub-theme` attributes and try/catch fallback (#246).
 - Layout: stable desk slots (claude, codex, kimi, pi, local, then others by id;
   sticky across snapshots via the previous scene, so a peer keeps its slot when
@@ -40,7 +40,8 @@ asset is copied.
   section width: rooms left to right when wide, stacked when narrow.
 - Interaction: desks and cards are focusable SVG groups with `role="button"`
   and accessible names; activation scrolls to and highlights the matching list
-  row, and a list row highlights its desk or card on focus and hover. The scene
+  row; a card also opens the shared task detail dialog (#391). A list row
+  highlights its desk or card on focus and hover. The scene
   performs no action and sends no request; the closed action list is unchanged.
 - Room counts equal `taskProgress(tasks).counts` for the same snapshot (pinned
   by a test, including randomized boards).
@@ -64,7 +65,7 @@ Phase 1 decisions within the spec:
 - The primary condition of a desk is the first of offline, paused, waiting on
   approval, busy, idle; the raised-hand count, inbox tray, mode badge and break
   sign are independent marks that combine freely with it.
-- Work-floor cards sit at the owner's desk (at most 3, then "+N more" as text);
+- Work-floor cards sit at the owner's desk (at most 3 in Flat, then an owner-filtered "+N more" control);
   a card whose owner has no visible desk waits in the Work floor room. Tasks in
   an unknown state are counted (`counts.unknown`) but placed nowhere.
 - The busy bubble names the task only when the peer has exactly one
@@ -142,11 +143,30 @@ Phase 4 decisions within the spec:
   parallelogram polygons (the linear image of their rect); cards, text labels,
   bubbles, marks and arc labels stay upright. No WebGL, no library, no new
   route, no CSP change.
-- The DOM is projection-independent: the same keyed nodes in the same order
-  with the same accessible names, so focus order is identical (AC7, tested by
-  comparing serialized tab order between Flat and Isometric). The viewBox is
-  the projected bounding box with a small margin; the SVG keeps `width: 100%`,
-  so phone width scales without horizontal page scroll.
+- Keyboard targets follow model order independently of visual paint depth. Each
+  visible card has one transparent, focusable hit target with its full accessible
+  name; a separate `aria-hidden` paint layer is ordered back to front under
+  Isometric. Click, Enter and Space open the same task detail. Shared visible
+  cards retain their relative tab order across projections and switching back
+  restores Flat's model order. Correctly placed nodes are untouched during
+  snapshots; actual reorders use state-preserving DOM movement when available
+  and restore active focus without scrolling on the insertBefore fallback.
+  #394 allows Isometric to omit cards that do not
+  fit and expose the omitted count through the existing "+N more" control, so
+  its visible target inventory can be smaller than Flat's.
+- #394 fixed-scale amendment (2026-10-14): the SVG width attribute is its actual
+  occupied projected viewBox width times 12 px/unit, with `max-width: 100%` and
+  automatic height. It remains centered and shrinks only when the panel is
+  narrower than this intrinsic width. Flat uses up to four room columns;
+  Isometric uses two on wide screens and bounds the occupied tiles rather than
+  blank grid corners, keeping the two-peer scene at the same scale at 1280 and
+  1920 px. The cos-30/sin-30 projection and desk slots remain unchanged.
+  Desk trays use 24 px card bodies with 6 px gaps and padding inside a 20-unit
+  desk. Isometric fits upright cards wholly inside the tile (two per desk),
+  preserving omitted counts in a keyboard-accessible owner-filtered board link.
+  Its room band shifts vertically below desk legs and labels, with a one-unit
+  gap before the top-layer room headers; header backdrops associate each count
+  with its room.
 - A projection switch repaints every node in place (the projection is part of
   each reconcile signature) and is treated as a settle: positions jump, no
   transform transition storms. Card moves under Isometric animate through the
@@ -154,7 +174,9 @@ Phase 4 decisions within the spec:
 - Size accounting against the issue's 30 KB budget (page base 59,329 bytes at
   phase 1 branch point): phase 1 +11,040, phase 2 +7,340, phase 3 +2,141,
   phase 4 +1,704, art polish +3,559; final 89,113 bytes, +25,784 total,
-  inside the budget. The iso shelf's base skirt was dropped to stay under it.
+  inside the original phase-4 budget. These are historical #264 figures; #394
+  adds a separately reviewed visual refinement. The iso shelf's base skirt was
+  dropped to stay under the original budget.
 - Art polish (2026-10-12): two reference concept images (a flat view and an
   isometric view) were generated with Higgsfield (nano_banana_pro) and kept
   outside the repo (scratchpad); they served as drawing references only. Per
@@ -168,7 +190,24 @@ Phase 4 decisions within the spec:
   wireframe iso room boxes with small-caps labels at the base, a Done shelf
   cabinet (flat) and stacked boxes on a slab (iso) with the count kept as
   text, two-column room cards with thin dividers, and arc arrowheads at the
-  target end.
+  target end. #394 supersedes the wireframe posts, small-caps base labels,
+  decorative empty shelf slots and two-column cards:
+  - Room names are sentence case, 13 px/600 in `--ink`; count pills are 12 px
+    monospace with tabular figures. Desk names are 13 px; card/state/meta text
+    is 12 px. Shapes use 1 px non-scaling hairlines; focus is 2 px.
+  - Room tiles have a one-unit gap horizontally and vertically. Room cards
+    use one 20-unit padded column, 28 px height and 6 px gap, keeping
+    the eight-card model cap and public fields. Labels show id plus public
+    title. Canvas measures the actual system/monospace fonts before clipping at
+    a nearby word boundary; an internal SVG clipPath guarantees the card text
+    boundary. The full title remains in SVG title, aria-label and task detail.
+  - Room title/count groups paint last above all tiles. Isometric cards remain
+    upright, fit wholly inside padded tile bounds and paint by projected depth;
+    omitted cards contribute to "+N more". Empty rooms and the empty Done shelf
+    show "No tasks"; populated shelf slots correspond to existing done count
+    up to the current Flat/Isometric caps.
+  - Existing theme tokens, public-view privacy, counts/placement classifications,
+    animations, reduced motion, keyboard activation and mode cookie remain.
 
 ## Verification
 
@@ -186,6 +225,11 @@ Phase 4 decisions within the spec:
   timer/request/colour literal in the scene code, reduced-motion and motion CSS
   scans, no DOM write on an unchanged snapshot (counting fake document), focus
   and activation highlighting, "+N more" filtering, `resetView` clearing;
+  #394: fixed font/scene scale, 1 px hairlines, top-layer headers, actual shelf
+  counts, measured Latin/CJK title clipping and hard SVG bounds, cross-room
+  depth order, projection-independent shared-target tab order and Flat restore,
+  0/4/12-task two-peer geometry, count-stable placement changes and light/dark
+  text token contrast at least 4.5:1;
   phase 2: card moves keep their node and animate by transform, arcs/marks/
   latch draw once with fade timing, departure fade purges on animationend;
   phase 3: the exact bubble, finishing-a-turn line, check-running mark and

package/docs/text-projection.md

@@ -3,7 +3,7 @@
 - Optional machine-local text_projection maps lowercase extensions to argv arrays. Each uses one separate {input} argument. No shell string, automatic converter install or default command.
 - Example: { "text_projection": { ".docx": ["/usr/bin/textutil", "-convert", "txt", "-stdout", "{input}"] } }. Configure the converter explicitly for the machine. Shared/tracked config cannot choose these programs.
 - Facts excludes private paths before conversion. The converter reads an immutable snapshot in an owned temporary directory, from its own scratch directory, with literal read grants for that file and for the program and script files its argv names (relative ones are passed as absolute paths, and the directories above an in-project script can be listed) (nothing else in the project is readable, even under a `local.read_allow` entry that encloses it, so a converter that follows an include or loads a sibling helper module fails), uses the existing macOS no-network/read-only sandbox and has a 5-second deadline, 16 MiB input cap and 256 KiB stdout/stderr cap. A trusted helper owns and stops its process group; converter stderr is never published.
-- Output caches in state by raw content hash, extension and argv/program/script metadata fingerprint. Invalid/oversized cache or failing/unavailable conversion falls back to the existing raw/binary facts behavior, with one bounded notice per extension. A conversion that fails with its full deadline is not tried again for the same bytes and command for the life of the hub process, within a bounded in-memory record (#382).
+- Output caches in state by raw content hash, extension and argv/program/script metadata fingerprint. Invalid/oversized cache or failing/unavailable conversion falls back to the existing raw/binary facts behavior, with one bounded notice per extension. A conversion that fails with its full deadline is not tried again for the same bytes and command while its entry lives in the failure record, which is in memory, bounded at 1024 entries, and cleared when full or at restart (#382).
 - Raw hashes and git blob identities remain the change identities. Projected text only supplies presentation diffs. A projected read or patch cannot establish raw-file write attribution. Existing text privacy checks and header sanitization still apply.
 - Converter programs may require temporary writes/caches; those fail under this read-only policy. Use a converter that emits stdout. The owner and other native same-user processes remain outside this boundary.
 - Linux retains no-sandbox/no-converter behavior. No native model/account study runs. Shadow repositories and profile override/glob follow-ups remain open in #259.

package/docs/verification/2026-10-14-0.12.26.md

@@ -0,0 +1,31 @@
+# 0.12.26 release verification
+
+This record covers release preparation and source verification. It does not certify tagging, package publication, global installation or a live upgrade; those receipts are recorded separately.
+
+## Candidate
+
+0.12.26 carries the hub-collaboration round for issues #380, #385 and #386: PRs #389, #387 and #388. Control protocol remains 16.
+
+- #389 (#380): claude-mem imports derive their graph nodes from the observation text without consulting the checkout, so one observation is one content-hashed entry on every machine and sync converges regardless of import order; the import scan filters the project in SQL and resumes from a persisted machine-local cursor (`--restart` re-scans), so unrelated projects cannot exhaust the window; `ahub memory dedupe [--apply]` reconciles pre-fix duplicate groups with append-only supersede operations onto the lexicographically smallest id.
+- #387 (#385): an exact or trailing-`**` data-policy entry that matches a directory resolves that directory's direct-child symlinks and protects their targets, matching what `data/*` already did for a matched link; discovery of the on-disk root is case-compatible, the scan streams inside the shared 4096-entry budget without descending, a dangling link covers its lexical target, an unresolvable link loop aliases nothing, a root whose budget is exhausted contributes no aliases, and an unreadable protected root fails closed. The failure semantics for the new scan are the user's direct ruling of 2026-10-14. The spec paragraph in docs/specs/2026-09-19-agent-hub-design.md was amended in the same PR.
+- #388 (#386): the text-projection converter comment and both docs state the project-scoped read guarantee and the 1024-entry, cleared-when-full in-memory failure record.
+
+Every fix carries regression tests that failed before it. Review was adversarial and multi-round on the board (tasks #45-#52): the review of #387 found the case-sensitive exact-root miss (P1) and the unbounded readdir (P2), CI found the Linux EACCES-at-read edge (#51) and two seed guards that needed retargeting after the refactor (#52), each fixed and re-gated before merge.
+
+## Document review
+
+Every stale document was rechecked against the ten source commits of the three PRs. README, Quickstart and Operations carry the 0.12.26 version and install/upgrade strings; Operations' converter failure-record wording landed with #388. The data-policy contract document (docs/data-policy.md) and docs/memory.md were updated inside their fix PRs. The adapters and daemon area notes were confirmed accurate against the `cliCommandLabel` addition, the tests note against the seed-selector repairs, and Security against the policy-matching change (it makes no per-form matching claim; the contract lives in data-policy.md). Budget, Bus, Benchmarks, Models, Tasks and the local-worker notes were not stale.
+
+## Recorded checks
+
+- PR #388 head 483ca546: CI Linux, macOS and seeded guards passed; board review approved.
+- PR #389 head d5738472: worktree `scripts/check.sh` 2702 pass, 0 fail, 189163 assertions, `check: OK`, no daemon leaks; CI green; board review approved.
+- PR #387 head 5fbe5d3a: worktree full gate 2714 pass, `check: OK`; CI Linux, macOS and seeded guards passed; board review approved.
+- Release candidate fbf96c08: local `scripts/check.sh` in an isolated worktree — 2728 pass, 0 fail, 189269 assertions, `check: OK`, no daemon leaks. Later commits on this branch change documentation only.
+- Release head: CI, document freshness at the merge commit, and the release workflow are required before tagging is reported complete.
+
+Note: `scripts/check.sh` in the main checkout fails 35/68 daemon tests on unmodified main because the live hub daemon serving the project interferes; the isolated worktree gate is the valid signal (recorded in shared memory #194264).
+
+## Not verified
+
+Native, account and research legs remain open in #273 and #1. The installed runtime and live hubs are not upgraded by this release.

package/docs/verification/2026-10-15-0.12.27.md

@@ -0,0 +1,31 @@
+# 0.12.27 release verification
+
+This record covers release preparation and source verification. It does not certify tagging, package publication, global installation or a live upgrade; those receipts are recorded separately.
+
+## Candidate
+
+0.12.27 carries the console-presentation round for issues #391 and #394: PRs #392, #393, #395 and #396. Control protocol remains 16.
+
+- #392 (#391 Task B): an opt-in macOS floating pet window with built-in pixels, counts-only local state, a console message pencil, saved position and signed process ownership; terminal pet reads stay available to agent shells.
+- #393 (#391 Task A): the local dashboard split into cookie-backed views, compact task cards with shared dialog/column details and exact-id attention badges; character presentation moved to the standalone pet window.
+- #395 (#391 follow-up): the pet window shrinks to a compact 150x150 panel with the original pixel art in deeper state colors and a configurable base palette (`pet.palette`, or 1/2/3/4 while the window is key, or `ahub pet --palette`; blue, teal, violet, ochre) with a matching rim line; the status pill and message composer reveal only while the pointer is over the character, driven by a 10 Hz global-mouse-position poll against a page-posted hotspot rect because an inactive accessory panel receives no mouse-moved events; the pill shadow is dropped.
+- #396 (#394): the dashboard Office view renders at an intrinsic 12 px/unit scale with 1 px non-scaling hairlines and padded room cards in both themes, and the desk More control is a separately reconciled sibling button in the non-button marks layer so assistive technology can reach it.
+
+Review was adversarial and multi-round on the board: tasks #56 and #58 (owner kimi, reviewer claude) for the compact window and its round-3 fixes, #57 and #59 (owner codex, reviewer claude) for the Office refinement and its round-3 fixes. Owner iterations settled the final pet design (original art, teal default palette) and the hover-reveal interaction, each re-gated after the change.
+
+## Document review
+
+Every stale document was rechecked against the source commits of the four PRs. README, Quickstart and the adapters, daemon, tasks and tests area notes were confirmed accurate (version strings landed with the prepare commit; the new pet palette config write is console-local presentation and does not intersect the settings-registry rule). Operations and Security were amended at 59dd4803: Office room labels follow #396 (To do, Done), the pet window section names `ahub pet --palette`, Security enumerates the #391 view and column-focus cookies, the palette field in pet-view.json and the JXA bridge's palette operation with its validated config.local.json write path. All eight documents were restamped at 0f8a7ba4; `node scripts/check-docs.mjs --require-fresh` reports docs: OK.
+
+## Recorded checks
+
+- PR #395 head b8498c03: worktree `scripts/check.sh` 2744 pass, 0 fail, `check: OK`; CI Linux and macOS passed, seeded guards pending when the owner merged; the main-branch run of merge commit b2f076fd completed success, seeded guards included.
+- PR #396 head aee84ba1: owner-reported worktree gate 2761 pass, 0 fail, `check: OK`; CI Linux, macOS and seeded guards passed; board review approved (task #59).
+- Release candidate 9d21b1f4: local `scripts/check.sh` in an isolated worktree — 2761 pass, 0 fail, 190249 assertions, `check: OK`, no daemon leaks. The first candidate bundle (e9037e43) embedded `../../node_modules` paths because the worktree had no installed dependencies at build time; the bundle was rebuilt after `bun install` (9d21b1f4) and the freshness check passes. Later commits on this branch change documentation only.
+- Release head: CI, document freshness at the merge commit, and the release workflow are required before tagging is reported complete.
+
+Note: `scripts/check.sh` in the main checkout is not a valid signal there because the live hub daemon serving the project interferes (recorded in shared memory #194264); the isolated worktree gate is the valid signal.
+
+## Not verified
+
+Native, account and research legs remain open in #273 and #1. Native VoiceOver traversal of the pet window and the Office view was not run; accessibility is covered at DOM ancestry and keyboard level by tests. The installed runtime and live hubs are not upgraded by this release.

package/docs/verified.json

@@ -2,7 +2,7 @@
   "schemaVersion": 1,
   "documents": {
     "README.md": {
-      "verifiedAgainst": "d093a5a81b341a3ae1c777154a41497aeaf1899d",
+      "verifiedAgainst": "59dd48030a3272d984a738017d22bcecc66217e6",
       "paths": [
         "package.json",
         "src/",
@@ -11,14 +11,14 @@
       ]
     },
     "docs/security.md": {
-      "verifiedAgainst": "d093a5a81b341a3ae1c777154a41497aeaf1899d",
+      "verifiedAgainst": "59dd48030a3272d984a738017d22bcecc66217e6",
       "paths": [
         "src/",
         "templates/"
       ]
     },
     "docs/operations.md": {
-      "verifiedAgainst": "d093a5a81b341a3ae1c777154a41497aeaf1899d",
+      "verifiedAgainst": "59dd48030a3272d984a738017d22bcecc66217e6",
       "paths": [
         "package.json",
         "src/",
@@ -35,7 +35,7 @@
       ]
     },
     "docs/quickstart.md": {
-      "verifiedAgainst": "d093a5a81b341a3ae1c777154a41497aeaf1899d",
+      "verifiedAgainst": "59dd48030a3272d984a738017d22bcecc66217e6",
       "paths": [
         "package.json",
         "src/",
@@ -43,7 +43,7 @@
       ]
     },
     "docs/agent-notes/adapters.md": {
-      "verifiedAgainst": "d093a5a81b341a3ae1c777154a41497aeaf1899d",
+      "verifiedAgainst": "59dd48030a3272d984a738017d22bcecc66217e6",
       "paths": [
         "src/adapters/",
         "src/pi/",
@@ -98,7 +98,7 @@
       ]
     },
     "docs/agent-notes/daemon.md": {
-      "verifiedAgainst": "d093a5a81b341a3ae1c777154a41497aeaf1899d",
+      "verifiedAgainst": "59dd48030a3272d984a738017d22bcecc66217e6",
       "paths": [
         "src/hub/daemon.ts",
         "src/hub/control-client.ts",
@@ -155,7 +155,7 @@
       ]
     },
     "docs/agent-notes/tasks.md": {
-      "verifiedAgainst": "d093a5a81b341a3ae1c777154a41497aeaf1899d",
+      "verifiedAgainst": "59dd48030a3272d984a738017d22bcecc66217e6",
       "paths": [
         "src/hub/tasks.ts",
         "src/hub/board.ts",
@@ -172,7 +172,7 @@
       ]
     },
     "docs/agent-notes/tests.md": {
-      "verifiedAgainst": "d093a5a81b341a3ae1c777154a41497aeaf1899d",
+      "verifiedAgainst": "59dd48030a3272d984a738017d22bcecc66217e6",
       "paths": [
         "test/",
         "scripts/check.sh",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@staix/agent-hub",
-  "version": "0.12.25",
+  "version": "0.12.27",
   "description": "Native multi-agent hub: Claude Code, Codex, Kimi Code, Pi and local inference as peers in one project",
   "license": "MIT",
   "type": "module",
@@ -24,6 +24,8 @@
   "files": [
     ".claude-plugin",
     "src",
+    "src/pet/window.jxa.js",
+    "src/pet/window.html",
     "plugins",
     "templates",
     "scripts/check-docs.mjs",

package/plugins/agent-hub/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-hub",
-  "version": "0.12.25",
+  "version": "0.12.27",
   "description": "Channel between Claude Code and the agent-hub daemon: peer messages from Codex, Kimi and the local worker arrive as channel events; hub_send replies.",
   "author": {
     "name": "Young Joon Lee",

package/plugins/agent-hub/server.js

@@ -16157,7 +16157,7 @@ import { join as join4 } from "path";
 // package.json
 var package_default = {
   name: "@staix/agent-hub",
-  version: "0.12.25",
+  version: "0.12.27",
   description: "Native multi-agent hub: Claude Code, Codex, Kimi Code, Pi and local inference as peers in one project",
   license: "MIT",
   type: "module",
@@ -16181,6 +16181,8 @@ var package_default = {
   files: [
     ".claude-plugin",
     "src",
+    "src/pet/window.jxa.js",
+    "src/pet/window.html",
     "plugins",
     "templates",
     "scripts/check-docs.mjs",

package/src/cli/help.ts

@@ -18,6 +18,7 @@ const SECTIONS: [string, [usage: string, description: string][]][] = [
     ["ahub up [--unattended] [--no-console]", "start the daemon; interactive terminals enter console"],
     ["ahub console [--panels] [--color=auto|always|never]", "enter the human console; P cycles built-in pet characters/off; exiting leaves the daemon running"],
     ["ahub console --no-pet", "turn off attention for this session; combines with --panels and --color"],
+    ["ahub pet --window [--close]", "start or close the macOS floating window, from a person's terminal"],
     ["ahub pet [--short]", "read attention without connecting; --short prints ahub!N only when action is needed"],
     ["ahub sdlc status [task] | explain <task> | export <task> | record <task> <receipt-json>", "read head-bound lifecycle gates and the next actor/action (person only)"],
     ["ahub sdlc queue <owner/repo> | release <owner/repo> [live-issue...]", "read-only merge and release evidence (person only)"],
@@ -110,7 +111,7 @@ const SECTIONS: [string, [usage: string, description: string][]][] = [
     ["ahub memory search <words> | show <id> | graph <id|node> [--hops 1|2] [--json]", "find entries, read one with its provenance, or list its graph neighbourhood"],
     ["ahub memory promote|demote|forget <id> | supersede <old> <new> | rebuild", "a person's changes to memory: move an entry between tiers, forget it, mark it superseded, or rebuild the index from the logs"],
     ["ahub memory sync [--remote <private git url>] | machine [--label <name>]", "sync hub memory with your other machines through a private git remote (a person's), or show or name this machine"],
-    ["ahub memory import claude-mem [--db <path>] [--limit N] | suggestions | confirm|reject <id>", "copy the hub's notes from claude-mem into hub memory (a person's); review the model's suggested edges"],
+    ["ahub memory import claude-mem [--db <path>] [--limit N] [--restart] | dedupe [--apply] | suggestions | confirm|reject <id>", "copy the hub's notes from claude-mem into hub memory (a person's); review the model's suggested edges"],
     ["ahub goal [list] [--all] | show <id> [--json]", "long-term tasks: state, which machine holds each and until when, linked board tasks"],
     ["ahub goal new <title> [--milestone <text>]... [--depends <id>]... [--shared] | link <id> <task> | state <id> <state> | done <id> | take <id> [--force]", "a person's changes to long-term tasks; take --force voids other machines' claims"],
   ]],

package/src/cli/identity.ts

@@ -28,6 +28,7 @@ export type PeerCommandAccess = "allowed" | "conductor" | "console";
 
 /** A closed list: unknown commands cannot acquire console authority through an agent shell. */
 export function classifyPeerCommand(command: string, args: readonly string[]): PeerCommandAccess {
+  if (command === "pet" && args.includes("--window")) return "console";
   if (command === "permission" || command === "stop" || command === "watch") return "console";
   if (args.some((arg) => arg === "--as-user" || arg.startsWith("--as-user="))) return "console";
   if (command === "role") return ["list", "show"].includes(args[0] ?? "") ? "allowed" : "console";
@@ -61,7 +62,7 @@ export function cliCommandLabel(command: string, args: readonly string[]): strin
   if (!["upgrade", "restart", "recovery", "recovery-run", "help", "--help", "--version", "version", "projects", "ui", "manager", "setup", "init", "daemon", "up", "console", "claude", "codex", "kimi", "qwen", "jcode", "pi", "local", "stop", "models", "say", "queue", "tail", "watch", "budget", "board", "task", "review", "remember", "ask", "route", "pause", "resume", "permit", "permission", "settings", "roster", "status", "pet", "logs", "export", "report", "research", "memory", "goal", "bench", "sdlc", "role", "facts", "check-path", "turns", "undo", "kill", "reset", "doctor"].includes(command)) return "unknown";
   if (["task", "queue", "budget", "route", "recovery", "models", "projects", "research", "memory", "goal", "bench"].includes(command)) {
     const sub = command === "bench" || command === "memory" || command === "goal" ? args.find((arg) => arg !== "--json") : args[0];
-    if (sub && ["propose", "show", "assign", "escalate", "label", "list", "resolve", "resume", "set", "execution", "explain", "status", "abort", "dispose", "setup", "start", "stop", "remove", "export", "backfill", "addons", "run", "report", "compare", "search", "graph", "promote", "demote", "forget", "supersede", "rebuild", "sync", "machine", "import", "suggestions", "confirm", "reject", "new", "link", "state", "done", "take"].includes(sub)) return `${command} ${sub}`;
+    if (sub && ["propose", "show", "assign", "escalate", "label", "list", "resolve", "resume", "set", "execution", "explain", "status", "abort", "dispose", "setup", "start", "stop", "remove", "export", "backfill", "addons", "run", "report", "compare", "search", "graph", "promote", "demote", "forget", "supersede", "dedupe", "rebuild", "sync", "machine", "import", "suggestions", "confirm", "reject", "new", "link", "state", "done", "take"].includes(sub)) return `${command} ${sub}`;
   }
   return (/^[a-z][a-z0-9-]*$/.test(command) && !/\s/.test(command)) || ["--help", "--version"].includes(command) ? command : "unknown";
 }

package/src/cli/main.ts

@@ -5,7 +5,8 @@ import { projectedDiff } from "../hub/projected-diff.ts";
 import { TextProjections } from "../hub/text-projection.ts";
 import { terminalText } from "./console-state.ts";
 import { petView, readPet, renderPet } from "./pet.ts";
-import { loadPetConfig } from "./pet-config.ts";
+import { startPetWindow, closePetWindow } from "../pet/window.ts";
+import { loadPetConfig, savePetPalette } from "./pet-config.ts";
 import { profileName, projectProfile, resolveProfile } from "../hub/profiles.ts";
 import { catalogAssignments, loadRoleCatalog, selectedRoles } from "../hub/roles.ts";
 import { attachWatch } from "./watch.ts";
@@ -677,6 +678,8 @@ const commands: Record<string, () => Promise<void> | void> = {
     if (unattended) console.error(UNATTENDED_WARNING);
     const status = await startProject(registeredProject(), { unattended });
     console.log(`ahub up (ws://127.0.0.1:${status.controlPort}), state in ${stateDir}`);
+    try { if (loadPetConfig(cwd).window) console.log(await startPetWindow(stateDir, cwd)); }
+    catch { console.error("Pet window was not started; run ahub pet --window to inspect it."); }
     if (process.stdin.isTTY && process.stdout.isTTY && !args.includes("--no-console")) await runConsole({ client: await connect(), cwd, stateDir });
   },
 
@@ -1359,8 +1362,17 @@ const commands: Record<string, () => Promise<void> | void> = {
     hub.close();
   },
 
-  pet: () => {
-    if (args.some(arg => arg !== "--short")) return fail("usage: ahub pet [--short]");
+  pet: async () => {
+    if (args.includes("--window")) {
+      if (args.some(arg => !["--window", "--close"].includes(arg))) return fail("usage: ahub pet --window [--close]");
+      return console.log(await (args.includes("--close") ? closePetWindow(stateDir) : startPetWindow(stateDir, cwd)));
+    }
+    if (args.includes("--palette")) {
+      if (args.length !== 2 || args[0] !== "--palette") return fail("usage: ahub pet [--short] | --window [--close] | --palette <blue|teal|violet|ochre>");
+      try { return console.log(savePetPalette(cwd, args[1]!)); }
+      catch (error) { return fail((error as Error).message); }
+    }
+    if (args.some(arg => arg !== "--short")) return fail("usage: ahub pet [--short] | --window [--close] | --palette <blue|teal|violet|ochre>");
     const short = args.includes("--short");
     let character: import("../pet/frame.ts").CharacterId | undefined;
     try { character = loadPetConfig(cwd).character; } catch { /* explicit structural reads remain available with malformed presentation config */ }

package/src/cli/memory.ts

@@ -12,7 +12,7 @@ const loadConfigSafe = (cwd: string) => { try { return loadConfig(cwd); } catch
  * #258: `ahub memory`, straight on the machine's store (no hub needed). Reading is anyone's; promote, demote, forget,
  * supersede and rebuild are a person's (the identity gate refuses agent shells).
  */
-export const MEMORY_USAGE = "usage: ahub memory [list] [--tier short|long] [--kind <kind>] [--peer <p>] [--machine <id>] [--since <iso>] [--limit N] | search <words> | show <id> | graph <id|node> [--hops 1|2] | promote|demote|forget <id> | supersede <old> <new> | rebuild | sync [--remote <url>] | machine [--label <name>] | import claude-mem [--db <path>] [--limit N] | suggestions | confirm|reject <suggestion id>  [--json]";
+export const MEMORY_USAGE = "usage: ahub memory [list] [--tier short|long] [--kind <kind>] [--peer <p>] [--machine <id>] [--since <iso>] [--limit N] | search <words> | show <id> | graph <id|node> [--hops 1|2] | promote|demote|forget <id> | supersede <old> <new> | rebuild | sync [--remote <url>] | machine [--label <name>] | import claude-mem [--db <path>] [--limit N] [--restart] | dedupe [--apply] | suggestions | confirm|reject <suggestion id>  [--json]";
 export const GOAL_USAGE = "usage: ahub goal [list] [--all] | show <id> | new <title> [--milestone <text>]... [--depends <id>]... [--shared] | link <id> <task id> | state <id> open|active|blocked|done|dropped | done <id> | take <id> [--force]  [--json]";
 
 const fail = (message: string): never => { throw new Error(message); };
@@ -85,17 +85,27 @@ export async function memoryCommand(args: string[], cwd: string, opts: { store?:
         if (!r.ok) fail(`hub memory sync: ${r.error}`);
         return `synced${r.pushed ? " and pushed" : ""}: ${r.entries} long-term entries visible here${r.warning ? `\nnote: ${r.warning}` : ""}`;
       }
+      case "dedupe": {
+        const apply = rest.includes("--apply");
+        if (rest.some(arg => arg !== "--apply")) fail("usage: ahub memory dedupe [--apply] [--json]");
+        const result = store.dedupe(project, apply);
+        if (json) return JSON.stringify(result, null, 2);
+        return [result.groups.length ? `${result.groups.length} duplicate import group(s)${apply ? `; appended ${result.applied} supersede operation(s)` : "; use --apply to reconcile"}` : "no duplicate import groups to reconcile",
+          ...result.groups.map(g => `${g.members.map(v => v.id.slice(0, 8)).join(", ")} -> ${g.target.slice(0, 8)}: ${g.members[0]!.text}`)].join("\n");
+      }
       case "import": {
         const db = flag("--db"), limit = flag("--limit");
-        if (rest[0] !== "claude-mem" || rest.length !== 1) fail("usage: ahub memory import claude-mem [--db <path>] [--limit N]");
+        const restart = rest.includes("--restart");
+        if (restart) rest.splice(rest.indexOf("--restart"), 1);
+        if (rest[0] !== "claude-mem" || rest.length !== 1) fail("usage: ahub memory import claude-mem [--db <path>] [--limit N] [--restart]");
         if (limit && !(Number(limit) > 0)) fail("--limit takes a positive number");
         const routing = currentRouting(cwd);
         const policy = privatePaths(); // a note about a private path never reaches the synced log
-        const key = memoryProjectKey(cwd), deny = loadConfigSafe(cwd)?.local.deny ?? [];
-        const nodes = (text: string) => extractNodes(text, { cwd, project: key, repo: key.startsWith("github.com/") ? key.slice("github.com/".length) : key, deny });
-        const r = importClaudeMem(store, { project: key, chain: projectChain(cwd), nodes, isPii: (text) => detectSignals({ title: text, detail: "", refs: {} }, routing, cwd).includes("pii") || mentionsPrivatePath(text, [], policy, cwd), ...(db ? { db } : {}), ...(limit ? { limit: Number(limit) } : {}) });
+        const key = memoryProjectKey(cwd);
+        const nodes = (text: string) => extractNodes(text, { cwd, project: key, repo: key.startsWith("github.com/") ? key.slice("github.com/".length) : key, checkExists: false });
+        const r = importClaudeMem(store, { project: key, chain: projectChain(cwd), nodes, restart, isPii: (text) => detectSignals({ title: text, detail: "", refs: {} }, routing, cwd).includes("pii") || mentionsPrivatePath(text, [], policy, cwd), ...(db ? { db } : {}), ...(limit ? { limit: Number(limit) } : {}) });
         if (json) return JSON.stringify(r, null, 2);
-        return `imported ${r.added} of ${r.read} hub notes from claude-mem as long-term entries (skipped: ${r.skipped.project} other projects, ${r.skipped.model} model answers, ${r.skipped.pii} PII, ${r.skipped.secret} secret-looking; the rest were already here)`;
+        return `imported ${r.added} of ${r.read} hub notes from claude-mem as long-term entries (skipped: ${r.skipped.model} model answers, ${r.skipped.pii} PII, ${r.skipped.secret} secret-looking; other candidates were empty, malformed or already imported)${r.more ? "\nmore remain: run it again" : ""}`;
       }
       case "suggestions": {
         const pending = store.suggestions(project).filter((x) => x.status === "suggested");

package/src/cli/pet-config.ts

@@ -1 +1 @@
-export { loadPetConfig, type PetConfig } from "../pet/config.ts";
+export { loadPetConfig, savePetPalette, type PetConfig } from "../pet/config.ts";

package/src/hub/path-policy.ts

@@ -1,4 +1,4 @@
-import { lstatSync, opendirSync, statSync } from "node:fs";
+import { accessSync, constants, lstatSync, opendirSync, readlinkSync, statSync } from "node:fs";
 import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { realPath } from "./project.ts";
 import { foldSegment } from "./permission-mode.ts";
@@ -25,6 +25,47 @@ export function policyTargets(cwd: string, paths: string[]): string[] {
   const root = realPath(cwd);
   return [...new Set(paths.flatMap(path => { const lexical = resolve(root, path); return [lexical, policyRealPath(lexical)]; }))];
 }
+type DiscoveryBudget = { entries: number };
+/** A dangling direct child names a future lexical target; an ELOOP child opens no file. */
+function directAliasTarget(path: string): string | undefined {
+  let target = path;
+  // Include the final target resolution after the last bounded redirect.
+  for (let hops = 0; hops <= 40; hops++) {
+    try { return policyRealPath(target); }
+    catch (error) {
+      const code = (error as NodeJS.ErrnoException).code;
+      if (code === "ELOOP") return undefined;
+      if (code !== "ENOENT") throw error;
+    }
+    let ancestor = target;
+    while (!existing(ancestor)) {
+      const parent = dirname(ancestor);
+      if (parent === ancestor) return undefined;
+      ancestor = parent;
+    }
+    if (!lstatSync(ancestor).isSymbolicLink()) return undefined;
+    target = resolve(dirname(ancestor), readlinkSync(ancestor), relative(ancestor, target));
+  }
+  return undefined;
+}
+/** Only a completed bounded scan contributes aliases; a truncated root contributes none. */
+function aliasScope(dir: string, lexical: string, actual: string, includeParents: boolean, budget: DiscoveryBudget): boolean {
+  // Readability must not depend on reaching readSync after an exhausted-budget return.
+  accessSync(dir, constants.R_OK);
+  const handle = opendirSync(dir);
+  let matched = false;
+  try {
+    if (budget.entries >= 4096) return false;
+    for (let entry = handle.readSync(); entry; entry = handle.readSync()) {
+      if (budget.entries >= 4096) return false;
+      budget.entries++;
+      if (!entry.isSymbolicLink()) continue;
+      const target = directAliasTarget(join(dir, entry.name));
+      if (target !== undefined && (beneath(lexical, target) || beneath(actual, target) || includeParents && (beneath(target, lexical) || beneath(target, actual)))) matched = true;
+    }
+  } finally { handle.closeSync(); }
+  return matched;
+}
 /**
  * Either spelling protects: the lowercase comparison keeps `?` matching one code point whose fold expands (ß, fi), and
  * the folded one catches NFD/NFC, compatibility and long-s aliases. Adding a match only ever adds protection.
@@ -69,7 +110,7 @@ function patternScope(pattern: string[], states: Set<number>, path: string, incl
   return includeParents && states.size > 0; // this scope can contain a future protected descendant
 }
 /** Resolve wildcard directory aliases without trusting a cached expansion. Bound all filesystem discovery. */
-function globScope(root: string, lexical: string, actual: string, path: string, includeParents: boolean, budget: { entries: number }): boolean {
+function globScope(root: string, lexical: string, actual: string, path: string, includeParents: boolean, budget: DiscoveryBudget, roots: Set<string>, aliasDiscovery = false): boolean {
   const pattern = path.split("/").filter(p => p && p !== ".");
   const start = closure(pattern, new Set([0]));
   if (patternScope(pattern, start, relative(root, lexical), includeParents) || patternScope(pattern, start, relative(root, actual), includeParents)) return true;
@@ -77,6 +118,8 @@ function globScope(root: string, lexical: string, actual: string, path: string,
     const real = policyRealPath(dir);
     if (states.has(pattern.length)) {
       if (beneath(lexical, real) || beneath(actual, real) || includeParents && (beneath(real, lexical) || beneath(real, actual))) return true;
+      // Defer new child aliases until every pre-existing policy match has had its discovery budget.
+      if (pattern.at(-1) === "**" && existing(real) && statSync(real).isDirectory()) roots.add(real);
       // An earlier `**` can still match deeper: an alias below this match (`ss/ß -> other` for `**/ß`) is searched too.
       // A trailing `**` only re-matches everything below, so it never walks the subtree (as before, for paths outside it).
       states = new Set([...states].filter(i => i !== pattern.length && !(i === pattern.length - 1 && pattern[i] === "**")));
@@ -88,11 +131,13 @@ function globScope(root: string, lexical: string, actual: string, path: string,
     if (!lowerBeneath(real, root)) throw new Error("policy glob discovery outside project");
     const info = statSync(dir);
     if (!info.isDirectory()) return false;
+    if (aliasDiscovery && budget.entries >= 4096) return false;
     if (depth > 32 || ancestors.has(real) || budget.entries > 4096) throw new Error("policy glob discovery unavailable");
     const chain = new Set(ancestors); chain.add(real);
     const handle = opendirSync(dir);
     try {
       for (let entry = handle.readSync(); entry; entry = handle.readSync()) {
+        if (aliasDiscovery && budget.entries >= 4096) return false;
         if (++budget.entries > 4096) throw new Error("policy glob discovery unavailable");
         const next = advance(pattern, states, entry.name);
         if (next.size && visit(join(dir, entry.name), next, depth + 1, chain)) return true;
@@ -102,14 +147,28 @@ function globScope(root: string, lexical: string, actual: string, path: string,
   };
   return visit(root, start, 0, new Set());
 }
-/** Compare declared spelling, real targets and wildcard aliases. Unknown discovery conservatively protects. */
+/** Compare declared spelling, real targets and bounded aliases; legacy discovery errors fail closed. */
 export function matchesPolicy(cwd: string, path: string, paths: string[], includeParents = false): boolean {
   if (!paths.length) return false;
   try {
     if (path.length > 4096) return true;
     const root = realPath(cwd), lexical = resolve(root, path), actual = policyRealPath(lexical);
     includeParents &&= !existing(lexical) || statSync(lexical).isDirectory();
-    const budget = { entries: 0 };
-    return paths.some(entry => /[?*]/.test(entry) ? globScope(root, lexical, actual, entry, includeParents, budget) : policyTargets(root, [entry]).some(target => beneath(lexical, target) || beneath(actual, target) || (includeParents && (beneath(target, lexical) || beneath(target, actual)))));
+    const budget = { entries: 0 }, roots = new Set<string>(), exact: string[] = [];
+    if (paths.some(entry => {
+      if (/[?*]/.test(entry)) return globScope(root, lexical, actual, entry, includeParents, budget, roots);
+      const targets = policyTargets(root, [entry]);
+      if (targets.some(target => beneath(lexical, target) || beneath(actual, target) || includeParents && (beneath(target, lexical) || beneath(target, actual)))) return true;
+      const real = targets.at(-1)!;
+      if (existing(real) && statSync(real).isDirectory()) roots.add(real);
+      exact.push(entry);
+      return false;
+    })) return true;
+    // New exact-root discovery cannot consume the budget before legacy wildcard matches are checked.
+    for (const entry of exact) {
+      if (globScope(root, lexical, actual, `${entry}/**`, includeParents, budget, roots, true)) return true;
+    }
+    for (const dir of roots) if (aliasScope(dir, lexical, actual, includeParents, budget)) return true;
+    return false;
   } catch { return true; }
 }

package/src/hub/text-projection.ts

@@ -55,7 +55,9 @@ export class TextProjections {
   /** Inputs whose full-budget conversion failed: the same bytes under the same command are not converted again. */
   private readonly failed = new Set<string>();
   constructor(private readonly options: { cwd: string; stateDir: string; config: ProjectionConfig; deny?: string[]; readAllow?: string[]; log?: (line: string) => void }) {
-    // Rooted at an empty system directory, not the project: the converter reads its snapshot and program files only.
+    // Rooted at an empty system directory, not the project. The project guarantee: project file data is denied, then the
+    // snapshot, the argv-named program/script files and the directory listings above an in-project script are granted, so
+    // no other project file is readable (system, toolchain, home and local.read_allow paths outside the project remain granted).
     // Only where conversion can run: /var/empty is a macOS directory, and a host without the sandbox never converts.
     this.sandbox = Object.keys(options.config).length && sandboxAvailable() ? profile(EMPTY_ROOT, false, options.readAllow, options.deny, ["."]) : "";
   }

package/src/hub/ui.ts

@@ -6,8 +6,6 @@ import { PEER_START_RETRY_MS } from "./start-mode.ts";
 import { taskProgress } from "../ui/task-progress.ts";
 import { officeModel } from "../ui/office-model.ts";
 import { needs } from "../ui/needs.ts";
-import { CHARACTERS } from "../pet/characters.ts";
-import { petPixels } from "../pet/pixels.ts";
 import { createHash, randomBytes } from "node:crypto";
 import { readFileSync } from "node:fs";
 
@@ -41,7 +39,7 @@ export function startDashboard(options: DashboardOptions) {
     .replace("/* TASK_PROGRESS_MODEL */", () => `const taskProgress = ${taskProgress.toString()};`)
     .replace("/* PEER_START_RETRY_MS */", () => `const PEER_START_RETRY_MS = ${PEER_START_RETRY_MS};`)
     .replace("/* OFFICE_MODEL */", () => `const officeModel = ${officeModel.toString()};`)
-    .replace("/* PET_MODEL */", () => `const needs = ${needs.toString()}; const petCharacters = ${JSON.stringify(Object.fromEntries(Object.entries(CHARACTERS).map(([id, character]) => [id, { name: character.name, accent: character.accent, frames: { blocks: Object.fromEntries(Object.entries(character.frames.blocks).map(([pose, sizes]) => [pose, { full: sizes.full }])) } }])))}; const petPixels = ${petPixels.toString()};`);
+    .replace("/* NEEDS_MODEL */", () => `const needs = ${needs.toString()};`);
   const hashes = (tag: string) => [...html.matchAll(new RegExp(`<${tag}>([\\s\\S]*?)</${tag}>`, "g"))]
     .map((m) => `'sha256-${createHash("sha256").update(m[1]!).digest("base64")}'`).join(" ");
   const headers = {