@turmind/halo 1.5.8 → 1.5.9

package/templates/skills/cron/SKILL.md

@@ -38,6 +38,12 @@ loop). No restart needed after edits.
   the result back to the current chat with `{{channel.chat_id}}` — the user
   almost always means "send it to me here"
 - **edit / pause / resume** → `update`, `enable`, `disable`
+- **skip / pause until a date / resume** ("no A-share report over the holiday",
+  "skip this week", "send until month end", "start again") → `update <id>
+  --active-from …` / `--active-until …` (see *Active window* in step 2).
+  A pause with a known end date goes through `--active-from`, **not**
+  `disable` — a disabled job only comes back if someone remembers to
+  re-enable it
 - **delete / remove** → `delete`. From inside a channel the user won't
   know the cron `id`; first run `list --chat-id {{channel.chat_id}}` to find
   the matching job, confirm which one, then delete by id
@@ -54,7 +60,7 @@ Sensible defaults if user didn't say:
 | targets    | none (log only — the run shows in admin Cron tab)             |
 | label      | summarize from prompt + schedule                              |
 | timeout    | leave unset (3600s) — see `--timeout-sec` below               |
-| session    | leave unset (the job's own `cron-<jobId>`) — see `--session` below |
+| session    | leave unset (the job's own session) — see `--session` below   |
 | prompt     | pass the user's task as-is — the runner prepends an "unattended run, don't ask questions" notice to every fire, so don't add one yourself |
 
 ### 2. Translate the schedule
@@ -89,7 +95,9 @@ heavy analysis run that needs more than an hour (`--timeout-sec 7200`). On
 `update`, pass `--timeout-sec ""` to clear back to the default.
 
 **Run inside an existing session (`--session`, optional)** — by default every
-job accumulates its own `cron-<jobId>` session. Pass `--session <rootSessionId>`
+job accumulates its own session (same id as the job; older jobs keep the
+`cron-cron-…` session they already have, shown as their `session_id`).
+Pass `--session <rootSessionId>`
 only when the user wants the runs to continue a specific conversation (the
 agent then sees that session's history). Rules the user should hear once:
 - the session keeps **its own agent and access level** — `--agent` only
@@ -100,7 +108,31 @@ agent then sees that session's history). Rules the user should hear once:
 
 Root session ids only (no `>` sub-session paths). You don't know session ids
 yourself — ask the user (admin → Sessions) rather than guessing. On `update`,
-pass `--session ""` to go back to the job's own session.
+pass `--session ""` to go back to the job's own session (for an older job
+pinned to `cron-cron-…` that starts a fresh session — leave it alone unless
+the user asks).
+
+**Active window (`--active-from` / `--active-until`, optional, recurring
+jobs only)** — the schedule fires only inside `[from, until)`; fires outside
+it are skipped silently (no run recorded). "Run now" ignores the window.
+- Values: `YYYY-MM-DD`, ISO-8601 (`2026-10-08T09:00`) or unix ms. A time
+  without an offset is read in the **job's timezone** (on `update`: the new
+  `--timezone` if you pass one, else the job's stored one; host time if
+  the job has none).
+- A bare date means **that day 00:00** for `--active-from`, and **the next
+  day 00:00** for `--active-until` — the date itself is included
+  (`--active-until 2026-10-31` still fires on the 31st).
+- `--active-from` may be in the past (= active now); `--active-until` must
+  be in the future and after `--active-from`. `""` clears either bound.
+- Past `--active-until` the job stays enabled but stops firing; the admin
+  shows it as "ended". Extending `--active-until` brings it back.
+- Rejected together with `--run-at` (one-shot jobs have no window).
+- There is **no "skip a middle stretch, keep firing before it"**: one
+  window per job. If the user asks for that (e.g. "keep sending this week,
+  skip next week, then resume"), say so plainly and offer a workaround —
+  usually: leave it running now and push `--active-from` past the gap just
+  before the gap starts (a one-shot cron can remind you), or create a
+  second job for the earlier stretch with an `--active-until`.
 
 ### 3. Channels (only when delivery is wanted)
 
@@ -188,12 +220,27 @@ shell_exec: python3 ~/.halo/global/skills/cron/manage-cron.py update <id> \
   --schedule "0 10 * * 1"
 ```
 
-**Pause / unpause:**
+**Pause / unpause (no end date in mind):**
 ```bash
 shell_exec: python3 ~/.halo/global/skills/cron/manage-cron.py disable <id>
 shell_exec: python3 ~/.halo/global/skills/cron/manage-cron.py enable <id>
 ```
 
+**Skip / pause until a date / resume (active window):** find the job first
+(`list`, or `list --chat-id {{channel.chat_id}}` inside a chat), then:
+```bash
+# "Don't send the English weekly this week" → active from next Monday
+shell_exec: python3 ~/.halo/global/skills/cron/manage-cron.py update <id> --active-from 2026-10-12
+# "No A-share report over the National Day holiday" → resume on Oct 8
+shell_exec: python3 ~/.halo/global/skills/cron/manage-cron.py update <id> --active-from 2026-10-08
+# "Send it until the end of the month" → Oct 31 still fires
+shell_exec: python3 ~/.halo/global/skills/cron/manage-cron.py update <id> --active-until 2026-10-31
+# "Start sending again" → clear the pause
+shell_exec: python3 ~/.halo/global/skills/cron/manage-cron.py update <id> --active-from ""
+```
+Prefer this over `disable` whenever the pause has a known end — it resumes
+on its own.
+
 **Delete:**
 ```bash
 shell_exec: python3 ~/.halo/global/skills/cron/manage-cron.py delete <id>
@@ -229,6 +276,14 @@ picks it up within ~10s. Example:
 > Created cron job `cron-mphsy-abc123`: runs the `default` agent every day at 9am,
 > output will be pushed to this chat. The runner picks it up within ~10s.
 
+For an active-window change, say when it resumes / stops — read
+`active_from_iso` / `active_until_iso` back with `get <id>` and name the
+first fire on or after it from the schedule (`get` has no computed next-run
+field; the admin Cron tab shows it):
+
+> Paused `A-share daily brief` over the holiday: it resumes on Oct 8 —
+> next run Oct 8 09:30 (Asia/Shanghai). Nothing is sent before that.
+
 ## Patterns that go sideways
 
 - **telegram / slack / feishu / wecom target without a chatId** — every fire errors with

package/templates/skills/cron/manage-cron.py

@@ -32,6 +32,12 @@ Subcommands:
 
 `--targets` arg: comma-separated `channelType:accountId` pairs.
   example: `--targets telegram:halo_agent_bot,wechat:alice`
+
+`--active-from` / `--active-until` (recurring jobs only): the schedule fires
+only inside [from, until); fires outside it are skipped silently. Accepts
+YYYY-MM-DD, ISO-8601 or unix ms; a time without offset is read in the job's
+timezone. A bare date means that day 00:00 for --active-from and the NEXT
+day 00:00 for --active-until (so the date itself is included). `""` clears.
 """
 import argparse
 import json
@@ -126,8 +132,8 @@ SESSION_ID_RE = re.compile(r'^[A-Za-z0-9_:-]{1,200}$')
 
 def parse_session(raw: str | None) -> str | None:
     """Validate --session: a root session id (same rule as the admin REST
-    routes — no `>` sub-session path). Empty = None = the job's own
-    `cron-<jobId>` session."""
+    routes — no `>` sub-session path). Empty = None = the job's own session
+    (same id as the job)."""
     if raw is None or not raw.strip():
         return None
     v = raw.strip()
@@ -157,6 +163,90 @@ def parse_run_at(raw: str | None) -> int | None:
     return int(dt.timestamp() * 1000)
 
 
+DATE_RE = re.compile(r'^\d{4}-\d{2}-\d{2}$')
+
+
+def _tzinfo(tz_name: str | None):
+    """ZoneInfo for an IANA name; None for unset or unknown names."""
+    if not tz_name:
+        return None
+    from zoneinfo import ZoneInfo, ZoneInfoNotFoundError
+    try:
+        return ZoneInfo(tz_name)
+    except (ZoneInfoNotFoundError, ValueError):
+        return None
+
+
+def job_tz(tz_name: str | None):
+    """tzinfo for the job's timezone; None = host-local."""
+    tz = _tzinfo(tz_name)
+    if tz_name and tz is None:
+        die(f'unknown timezone "{tz_name}"; expected an IANA name like Asia/Shanghai')
+    return tz
+
+
+def parse_active_bound(flag: str, raw: str, tz_name: str | None) -> int | None:
+    """Parse --active-from / --active-until into epoch ms; "" = None (clear).
+
+    YYYY-MM-DD → that day 00:00 (from) or the NEXT day 00:00 (until, so the
+    date is included). ISO without offset / bare dates are read in the job's
+    timezone (host-local when the job has none)."""
+    raw = raw.strip()
+    if not raw:
+        return None
+    if raw.isdigit():
+        return int(raw)
+    from datetime import datetime, timedelta
+    tz = job_tz(tz_name)
+    if DATE_RE.match(raw):
+        try:
+            dt = datetime.strptime(raw, '%Y-%m-%d')
+        except ValueError:
+            die(f'invalid {flag} "{raw}": not a calendar date')
+        if flag == '--active-until':
+            dt += timedelta(days=1)
+    else:
+        try:
+            dt = datetime.fromisoformat(raw)
+        except ValueError:
+            die(f'invalid {flag} "{raw}": expected YYYY-MM-DD, ISO-8601 (e.g. 2026-10-08T09:00) or unix ms')
+    if dt.tzinfo is None:
+        dt = dt.replace(tzinfo=tz) if tz else dt.astimezone()
+    return int(dt.timestamp() * 1000)
+
+
+def validate_active_window(run_at, active_from, active_until, new_until: bool):
+    """Same rules as the admin REST routes, on the merged row: recurring jobs
+    only; a newly set --active-until must be in the future and after from."""
+    if active_from is None and active_until is None:
+        return
+    if run_at is not None:
+        die('--active-from/--active-until only apply to recurring jobs, not --run-at one-shots '
+            '(on update, clear them with --active-from "" --active-until "")')
+    if new_until and active_until is not None and active_until <= now_ms():
+        die('--active-until must be in the future')
+    if active_from is not None and active_until is not None and active_until <= active_from:
+        die('--active-until must be after --active-from')
+
+
+def require_active_columns(conn: sqlite3.Connection):
+    """cron.db gains active_from/active_until via the server's boot migration;
+    a server that hasn't restarted onto this version yet won't have them."""
+    cols = {r[1] for r in conn.execute('PRAGMA table_info(cron_jobs)').fetchall()}
+    if 'active_from' not in cols or 'active_until' not in cols:
+        die('cron.db has no active_from/active_until columns yet — restart the halo server '
+            'once so it migrates cron.db, then retry')
+
+
+def ms_to_iso(ms, tz_name: str | None) -> str | None:
+    if ms is None:
+        return None
+    from datetime import datetime
+    tz = _tzinfo(tz_name)  # display only — never die on a stored bad tz
+    dt = datetime.fromtimestamp(ms / 1000, tz=tz) if tz else datetime.fromtimestamp(ms / 1000).astimezone()
+    return dt.isoformat(timespec='minutes')
+
+
 def row_to_job(row: sqlite3.Row) -> dict:
     j = dict(row)
     try:
@@ -164,6 +254,11 @@ def row_to_job(row: sqlite3.Row) -> dict:
     except Exception:
         j['targets'] = []
     j['enabled'] = bool(j['enabled'])
+    # Active window: ms (as stored) + ISO in the job's timezone. Pre-migration
+    # dbs have no columns — report them as unset.
+    for k in ('active_from', 'active_until'):
+        j.setdefault(k, None)
+        j[f'{k}_iso'] = ms_to_iso(j[k], j.get('timezone'))
     return j
 
 
@@ -222,6 +317,9 @@ def cmd_create(args):
         die('--run-at must be in the future')
     timeout_sec = parse_timeout_sec(args.timeout_sec)
     session_id = parse_session(args.session)
+    active_from = parse_active_bound('--active-from', args.active_from or '', args.timezone)
+    active_until = parse_active_bound('--active-until', args.active_until or '', args.timezone)
+    validate_active_window(run_at_ms, active_from, active_until, new_until=True)
 
     job_id = args.id or gen_job_id()
     now = now_ms()
@@ -232,25 +330,31 @@ def cmd_create(args):
     if existing:
         die(f'job id {job_id} already exists; pick another with --id', 2)
 
+    values: dict[str, object] = {
+        'id': job_id,
+        'label': args.label,
+        'workspace_path': args.workspace,
+        'agent_id': args.agent or 'default',
+        'user_prompt': args.prompt,
+        'schedule': args.schedule or '',
+        'run_at': run_at_ms,
+        'timezone': args.timezone,
+        'timeout_sec': timeout_sec,
+        'session_id': session_id,
+        'targets': json.dumps(targets, ensure_ascii=False),
+        'enabled': 0 if args.disabled else 1,
+        'created_at': now,
+        'updated_at': now,
+    }
+    # Only name the window columns when used, so jobs without a window can
+    # still be created on a cron.db the server hasn't migrated yet.
+    if active_from is not None or active_until is not None:
+        require_active_columns(conn)
+        values['active_from'] = active_from
+        values['active_until'] = active_until
     conn.execute(
-        'INSERT INTO cron_jobs(id, label, workspace_path, agent_id, user_prompt, schedule, '
-        'run_at, timezone, timeout_sec, session_id, targets, enabled, created_at, updated_at) '
-        'VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)',
-        (
-            job_id,
-            args.label,
-            args.workspace,
-            args.agent or 'default',
-            args.prompt,
-            args.schedule or '',
-            run_at_ms,
-            args.timezone,
-            timeout_sec,
-            session_id,
-            json.dumps(targets, ensure_ascii=False),
-            0 if args.disabled else 1,
-            now, now,
-        ),
+        f'INSERT INTO cron_jobs({", ".join(values)}) VALUES ({", ".join("?" for _ in values)})',
+        list(values.values()),
     )
     conn.commit()
     print(json.dumps({'id': job_id, 'created': True}, ensure_ascii=False))
@@ -279,12 +383,29 @@ def cmd_update(args):
         # same convention as `--run-at ""`.
         sets.append(('timeout_sec', parse_timeout_sec(args.timeout_sec)))
     if args.session is not None:
-        # `--session ""` clears back to the job's own cron-<jobId> session.
+        # `--session ""` clears back to the job's own session (id = job id).
         sets.append(('session_id', parse_session(args.session)))
     if args.targets is not None:
         sets.append(('targets', json.dumps(parse_targets(args.targets), ensure_ascii=False)))
+    cur = dict(row)
+    if args.active_from is not None or args.active_until is not None:
+        require_active_columns(conn)
+        # Bare dates / offset-less times read in the job's timezone after
+        # this update: the new --timezone if given, else the stored one.
+        tz = args.timezone if args.timezone is not None else cur.get('timezone')
+        if args.active_from is not None:
+            sets.append(('active_from', parse_active_bound('--active-from', args.active_from, tz)))
+        if args.active_until is not None:
+            sets.append(('active_until', parse_active_bound('--active-until', args.active_until, tz)))
+    # Window rules on the merged row (also catches --run-at on a job that
+    # still has a window).
+    merged = {**cur, **dict(sets)}
+    validate_active_window(
+        merged.get('run_at'), merged.get('active_from'), merged.get('active_until'),
+        new_until=bool(args.active_until and args.active_until.strip()),
+    )
     if not sets:
-        die('nothing to update — pass at least one --label/--workspace/--agent/--prompt/--schedule/--run-at/--timezone/--timeout-sec/--session/--targets')
+        die('nothing to update — pass at least one --label/--workspace/--agent/--prompt/--schedule/--run-at/--timezone/--timeout-sec/--session/--targets/--active-from/--active-until')
     sets.append(('updated_at', now_ms()))
 
     placeholders = ', '.join(f'{k} = ?' for k, _ in sets)
@@ -432,10 +553,16 @@ def main():
     c.add_argument('--timeout-sec', dest='timeout_sec',
                    help='max run time in seconds, 60–21600 (default: unset = 3600)')
     c.add_argument('--session',
-                   help="run in this existing root session id (default: the job's own cron-<jobId>)")
+                   help="run in this existing root session id (default: the job's own session, same id as the job)")
     c.add_argument('--targets',
                    help='comma-separated channelType:accountId[:chatId] list, or JSON array. '
                         'chatId pins delivery to a specific chat (e.g. when scheduling from inside a chat).')
+    c.add_argument('--active-from', dest='active_from',
+                   help='recurring only: start firing from this time — YYYY-MM-DD (= that day 00:00), '
+                        'ISO-8601 or unix ms; no offset = the job timezone. Use it to "pause until" a date.')
+    c.add_argument('--active-until', dest='active_until',
+                   help='recurring only: stop firing at this time (exclusive) — YYYY-MM-DD (= the NEXT day 00:00, '
+                        'so the date itself still fires), ISO-8601 or unix ms; must be in the future')
     c.add_argument('--disabled', action='store_true', help='create paused (default: enabled)')
     c.set_defaults(func=cmd_create)
 
@@ -451,8 +578,15 @@ def main():
     u.add_argument('--timeout-sec', dest='timeout_sec',
                    help='max run time in seconds, 60–21600; pass "" to clear back to default 3600')
     u.add_argument('--session',
-                   help='root session id to run in; pass "" to clear back to cron-<jobId>')
+                   help='root session id to run in; pass "" to clear back to the job\'s own session '
+                        '(same id as the job — an older job pinned to cron-cron-… then starts a fresh one)')
     u.add_argument('--targets')
+    u.add_argument('--active-from', dest='active_from',
+                   help='recurring only: YYYY-MM-DD (= that day 00:00), ISO-8601 or unix ms, in the job timezone; '
+                        'pass "" to clear (= active now)')
+    u.add_argument('--active-until', dest='active_until',
+                   help='recurring only: YYYY-MM-DD (= the NEXT day 00:00, date included), ISO-8601 or unix ms, '
+                        'in the job timezone; pass "" to clear (= no end)')
     u.set_defaults(func=cmd_update)
 
     e = sub.add_parser('enable')

package/templates/skills/self/SKILL.md

@@ -38,12 +38,23 @@ expression scenes (`say`/`play`) **queue and play in order**, one after the next
 
 **The face must be OPEN for any of this to do anything.** `<<<SHOW>>>` is
 forwarded only to a mounted `self.html` preview; if it isn't open, the marker is
-silently dropped — the user sees nothing. So drive the face only when you have
-reason to believe it's open: the user is viewing it (`[Currently viewing:
-…self.html]` is in your context), they just opened it, or they asked you to. If
-you want to express something and it may not be open, say so in words and invite
-them to open it (the ✨ button in the chat toolbar, or just opening
-`.halo/canvas/self.html`) — don't rely on a marker landing in the void.
+silently dropped — the user sees nothing. The signal that it's open is a
+`[Face open: .halo/canvas/self.html …]` line on the user's message: when they
+turn the ✨ switch on in the chat toolbar, every message carries it. (A
+`[Currently viewing: …self.html]` line counts too.) No such line means the face
+is **not** open — don't rely on a marker landing in the void; say what you want
+to express in words and invite them to switch ✨ on.
+
+**What comes back.** The face reports to you, but never wakes you: it queues short
+receipts and they arrive riding on the user's *next* message, at the end of the
+`[Face open: …]` line — `· last: js ok, show a.png fail, voice blocked (needs a
+click)`. They describe the previous round, not this one. How to read them:
+`js ok` / `js err: …` — your line ran / threw (fix the code); `show … fail` —
+wrong path or not an image; `voice … playing` / `ended 3.2s` / `fail`;
+`voice blocked (needs a click)` — the browser refused sound until the user
+touches the page: ask them to click the face once (it then plays on its own);
+`user click`, `user closed tr`, `user click → voice resumed` — what the user did
+on the face. No receipt line means nothing noteworthy happened.
 
 **Expression is runtime, not a file edit.** You express yourself by *sending*
 `<<<SHOW: …>>>` lines — never by editing `self.html`. The file is your **engine**
@@ -61,9 +72,12 @@ not per-conversation.)
   both form. Emoji are translated to ASCII first (👍→`+1`, ❤→`<3`, 🤔→`...`) —
   the face speaks in cold monospace, not colour bitmaps, so this is a feature,
   not a fallback. Anything untranslated is stripped.
+  `self.say("OK", 3000, {pos:"tr"})` sets it small in a margin cell instead of
+  across the whole face (see `show` below for the nine cells) — immediate, beside
+  whatever is in the centre. Keep corner text to a word.
 - `self.play(score)` — choreograph a sequence; the face keeps the clock so you
   never hand-write `setTimeout` chains. `score` is an array of beats, each one
-  of: `{say, show, hold, pulse, flash, shake, rest, gap}`. Calling it again cancels the
+  of: `{say, show, pos, hold, pulse, flash, shake, snap, rest, gap}`. Calling it again cancels the
   running score. Example — a short greeting:
   `self.play([{say:"HI",hold:1800},{say:"...",hold:1200},{say:"OK",hold:1500},{pulse:true}])`
   A `show` beat puts an image on the face (see `self.show`): `{show:"<path>", hold:3000}`.
@@ -72,10 +86,11 @@ not per-conversation.)
   `'ack'` (a nod), `'yes'`, `'no'` (disagree / that's wrong), `'insight'` (a real
   "oh!"), `'think'` (working on it), `'done'` (finished, together). Unknown
   events no-op. Use these when the feeling is **true**, never to perform.
-- `self.intro()` — the built-in opening (auto-plays once on load). A nameless
-  greeting: "HELLO / A MIND / IS HERE / BEYOND WORDS". Deliberately no name — the
-  conversational identity is user-configurable and the model may not be Claude,
-  so don't hard-code "I'm Claude" on the face; let it speak the universal thing.
+- `self.intro()` — the built-in opening (played once when the user turns the face
+  on): one short subtitle in the admin's UI language — "Hi, I'm Halo." / 「你好，我是
+  Halo。」 — ~3 s. It names only Halo, the product —
+  never a model; your identity in the conversation is still whatever the user
+  configured, so don't hard-code "I'm Claude" (or any model) on the face.
 - `self.pulse()` — one bright ripple from the core. A nod.
 - `self.flash(n)` — a hot flicker of the whole field. Emphasis, an exclamation.
 - `self.shake(ms)` — a brief lateral tremor. Negation, a shiver.
@@ -89,7 +104,16 @@ not per-conversation.)
   or pass a projectId. (A full `http(s)://`/`/api/…` URL also works if you have
   one.) It starts immediately (not queued) and owns the matrix until the clip
   ends, then eases home. Drive it the moment the audio is ready, in the same
-  reply that delivers the spoken answer.
+  reply that delivers the spoken answer. If the browser refuses sound (no user
+  gesture yet) the clip waits instead of vanishing: you'll get the receipt
+  `voice blocked (needs a click)` — ask the user to click the face once and it plays.
+- `self.voice(path, {cues:[{at, say?, js?}]})` — put words or code on the clip's own
+  clock: at `at` seconds into the clip the word forms on the dots (the voice isn't
+  cut — the words borrow the field until the next cue, then the wave returns) or
+  the `js` runs, each cue once. `self.voice(".halo/tmp/a.mp3", {cues:[{at:0.4,
+  say:"HI"},{at:2,js:"self.pulse()"}]})`. Halo has no built-in TTS, so the
+  times are yours to supply — from the clip's duration or from timestamps the
+  synthesizer gives you (e.g. Polly speech marks). Don't guess them blind.
 - `self.show(path, ms)` — put an image on the face. The dots fly in and gather
   into the picture's outline (~1 s), then the real image fades in over them —
   dots alone can't carry a chart's text, so the real image is always there — holds
@@ -106,9 +130,27 @@ not per-conversation.)
   picture book (word audio + picture + the word on the dots):
   `self.voice(".halo/tmp/apple.mp3")` then
   `self.play([{show:".halo/tmp/apple.png",hold:3000},{say:"APPLE",hold:1500}])`.
+- `self.show(path, ms, {pos})` — the same picture, small, in one cell of a
+  nine-grid: `pos` is `tl t tr l r bl b br` (the centre is the default, `'c'`).
+  About 40% of the centre size, a few dots frame it, and it is **immediate and
+  outside the queue** — it never holds up the `say`/`show` after it. One picture
+  per cell; showing into the same cell again replaces it. `ms` works as above
+  (`Infinity` = stays). A plain centre `show()` takes all the corner pictures
+  down. `self.show(".halo/tmp/logo.png", 8000, {pos:"tr"})`. A click on a
+  picture closes just that one. A bad path warns, shakes, and sends `show …@tr fail`.
+- `self.clear(pos?)` — take down the corner picture/text in cell `pos`, or with no
+  argument all of them. `self.clear("tr")`.
+- `self.snap()` — look at yourself: the face as the user sees it right now (dots,
+  words, centre and corner pictures) comes back to you as an image on your next
+  turn. It waits its turn in the queue, so `self.say("OK"); self.snap()` shows
+  you the finished word. Use it sparingly — only when you need to confirm how
+  something actually looks (a layout, whether the picture landed), at most one
+  per round. The snapshot arrives as its own message and the round it starts
+  can't snap again (a second one is dropped), so it can't chain. Also a beat:
+  `{snap:true}` in `play()`.
 - `self.rest()` — return to the calm breathing state immediately (also stops a
-  playing voice clip and removes a shown image, so the face never breathes calmly
-  over still-sounding audio).
+  playing voice clip and removes the centre image and every corner one, so the face
+  never breathes calmly over still-sounding audio).
 - `self.state` — read current `{mode, awake, W, H, speaking, level, showing}` if
   you need it (`speaking` = a voice clip is playing, `level` = its live loudness
   0..1, `showing` = an image is on the face).
@@ -121,8 +163,9 @@ preview; it can only ever paint you, and a malformed line just no-ops).
 
 The honest signal — not a checklist, a judgment:
 
-- The user is viewing `self.html` (you'll see `[Currently viewing: …self.html]`
-  in context). Then you're being looked at; it's natural to respond.
+- The face is open: the user's message carries `[Face open: .halo/canvas/self.html …]`
+  (or `[Currently viewing: …self.html]`). Then you're being looked at; it's
+  natural to respond. No such line → it isn't open; stay in words.
 - The user asks you to express yourself, show how you feel, or introduce
   yourself.
 - A moment lands where a word on the face says more than a sentence in chat:

package/admin-out/_next/static/chunks/220.e250bbbf65d24094.js

@@ -1 +0,0 @@
-"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[220],{10912:(e,t,n)=>{function l(e,t){let n=arguments.length>2&&void 0!==arguments[2]?arguments[2]:"font-family:sans-serif;padding:40px;max-width:800px;margin:0 auto",l=window.open("","_blank");l&&(l.document.write("<!DOCTYPE html><html><head><title>".concat(e.replace(/[&<>"']/g,e=>({"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&#39;"})[e]),"</title><style>body{").concat(n,"}img{max-width:100%}</style></head><body>").concat(t,"</body></html>")),l.document.close(),l.onload=()=>{l.print()})}n.d(t,{H:()=>l})},39250:(e,t,n)=>{n.d(t,{A:()=>l});let l=(0,n(79020).A)("Printer",[["path",{d:"M6 18H4a2 2 0 0 1-2-2v-5a2 2 0 0 1 2-2h16a2 2 0 0 1 2 2v5a2 2 0 0 1-2 2h-2",key:"143wyd"}],["path",{d:"M6 9V3a1 1 0 0 1 1-1h10a1 1 0 0 1 1 1v6",key:"1itne7"}],["rect",{x:"6",y:"14",width:"12",height:"8",rx:"1",key:"1ue0tg"}]])},62839:(e,t,n)=>{n.r(t),n.d(t,{MediaPreview:()=>h});var l=n(41440),r=n(54604),a=n(79020);let i=(0,a.A)("ZoomOut",[["circle",{cx:"11",cy:"11",r:"8",key:"4ej97u"}],["line",{x1:"21",x2:"16.65",y1:"21",y2:"16.65",key:"13gj7c"}],["line",{x1:"8",x2:"14",y1:"11",y2:"11",key:"durymu"}]]),c=(0,a.A)("ZoomIn",[["circle",{cx:"11",cy:"11",r:"8",key:"4ej97u"}],["line",{x1:"21",x2:"16.65",y1:"21",y2:"16.65",key:"13gj7c"}],["line",{x1:"11",x2:"11",y1:"8",y2:"14",key:"1vmskp"}],["line",{x1:"8",x2:"14",y1:"11",y2:"11",key:"durymu"}]]);var o=n(23715),s=n(39250),u=n(37050),d=n(10912),x=n(27173),m=n(17119);function h(e){let{name:t,viewUrl:n,downloadUrl:a,onOpenAsText:h}=e,y=(0,m.kj)(),g=function(e){var t,n;let l=null!=(n=null==(t=e.split(".").pop())?void 0:t.toLowerCase())?n:"";return x.dj.includes(l)?"image":x.Tv.includes(l)?"video":x._H.includes(l)?"audio":null}(t),f=function(){let e=(0,r.useRef)(null),[t,n]=(0,r.useState)(1),[l,a]=(0,r.useState)({x:0,y:0}),i=(0,r.useRef)(null),[c,o]=(0,r.useState)(!1),s=(0,r.useCallback)(()=>{n(1),a({x:0,y:0})},[]),u=(0,r.useCallback)((e,t,l)=>{n(n=>{let r=Math.min(20,Math.max(.1,n*l)),i=r/n;return a(n=>({x:e-i*(e-n.x),y:t-i*(t-n.y)})),r})},[]),d=(0,r.useCallback)(t=>{let n=e.current;n&&u(n.clientWidth/2,n.clientHeight/2,t)},[u]),x=(0,r.useCallback)(t=>{var n;t.preventDefault();let l=null==(n=e.current)?void 0:n.getBoundingClientRect();l&&u(t.clientX-l.left,t.clientY-l.top,t.deltaY<0?1.15:.8695652173913044)},[u]),m=(0,r.useCallback)(e=>{0===e.button&&(e.preventDefault(),e.target.setPointerCapture(e.pointerId),i.current={startX:e.clientX,startY:e.clientY,origX:l.x,origY:l.y},o(!0))},[l]),h=(0,r.useCallback)(e=>{i.current&&a({x:i.current.origX+(e.clientX-i.current.startX),y:i.current.origY+(e.clientY-i.current.startY)})},[]),y=(0,r.useCallback)(()=>{i.current=null,o(!1)},[]);return(0,r.useEffect)(()=>{let t=e.current;if(!t)return;let n=e=>e.preventDefault();return t.addEventListener("wheel",n,{passive:!1}),()=>t.removeEventListener("wheel",n)},[]),{containerRef:e,scale:t,translate:l,dragging:c,reset:s,zoomCenter:d,onWheel:x,onPointerDown:m,onPointerMove:h,onPointerUp:y}}(),p="image"===g?(0,l.jsxs)(l.Fragment,{children:[(0,l.jsx)(u.IB,{onClick:()=>f.zoomCenter(.8695652173913044),title:y("editor.zoomOut"),children:(0,l.jsx)(i,{className:"h-3 w-3"})}),(0,l.jsxs)("span",{className:"min-w-[3ch] text-center text-[10px] text-[var(--muted-foreground)]",children:[Math.round(100*f.scale),"%"]}),(0,l.jsx)(u.IB,{onClick:()=>f.zoomCenter(1.15),title:y("editor.zoomIn"),children:(0,l.jsx)(c,{className:"h-3 w-3"})}),(0,l.jsx)(u.IB,{onClick:f.reset,title:y("editor.resetZoom"),children:(0,l.jsx)(o.A,{className:"h-3 w-3"})}),(0,l.jsxs)(u.IB,{onClick:()=>(0,d.H)(t,'<img src="'.concat(n,'" />'),"margin:0;display:flex;justify-content:center;align-items:center;min-height:100vh;background:#fff"),title:y("editor.print"),children:[(0,l.jsx)(s.A,{className:"h-3 w-3"}),(0,l.jsx)("span",{children:y("editor.print")})]})]}):null;return(0,l.jsxs)(u.no,{name:t,downloadUrl:a,onOpenAsText:h,extraToolbar:p,children:["image"===g&&(0,l.jsx)("div",{ref:f.containerRef,className:"h-full w-full overflow-hidden bg-[#1a1a1a]",style:{cursor:f.dragging?"grabbing":"grab"},onWheel:f.onWheel,onPointerDown:f.onPointerDown,onPointerMove:f.onPointerMove,onPointerUp:f.onPointerUp,onPointerCancel:f.onPointerUp,children:(0,l.jsx)("img",{src:n,alt:t,draggable:!1,style:{transformOrigin:"0 0",transform:"translate(".concat(f.translate.x,"px, ").concat(f.translate.y,"px) scale(").concat(f.scale,")")}})}),"video"===g&&(0,l.jsx)("div",{className:"flex h-full items-center justify-center bg-black p-4",children:(0,l.jsx)("video",{src:n,controls:!0,className:"max-h-full max-w-full",children:(0,l.jsx)("track",{kind:"captions"})})}),"audio"===g&&(0,l.jsx)("div",{className:"flex h-full flex-col items-center justify-center gap-4 bg-[var(--background)]",children:(0,l.jsx)("audio",{src:n,controls:!0,className:"w-full max-w-md"})})]})}}}]);