arcane-cli 0.14.0

package/dist/assets/.arcane/governance/testing-standards.md

@@ -0,0 +1,158 @@
+---
+title: Testing Standards
+audience: both
+last_updated: YYYY-MM-DD
+status: active
+tags: [testing, qa, coverage, standards, lince]
+---
+
+# Testing Standards
+
+Framework selection, coverage thresholds, and test evidence requirements across all your projects.
+
+## Executive Summary
+
+- Every tech stack has a designated test framework — no ambiguity.
+- New code requires 80% unit test coverage; critical paths require 95%.
+- Lince (QA Lead) must sign off on test evidence before any ticket moves to "Resolved."
+- Test evidence is required in every PR: results, coverage report, known limitations.
+
+---
+
+## Frameworks Per Stack
+
+| Stack | Framework | Assertion Library | Runner | Who Writes | Who Validates |
+|-------|-----------|------------------|--------|-----------|---------------|
+| .NET 10 (backend) | xUnit | FluentAssertions | `dotnet test` | Lafayette | Lince |
+| Arduino/C++ (firmware) | PlatformIO Unity | Unity assertions | `pio test` | Lafayette + a partner | Lince |
+| Flutter (mobile) | flutter_test + integration_test | expect matchers | `flutter test` | Mercurio | Lince |
+| Node.js (agent tools, bots) | Vitest | Vitest matchers (chai-compatible) | `npx vitest run` | Lafayette | Lince |
+| Terraform (IaC) | terraform validate + Checkov | Policy-as-code rules | `checkov -d .` | Prospero | Merlin |
+| Markdown docs (Arcane) | markdownlint + markdown-link-check | Lint rules | `markdownlint .` | Any agent | Prospero |
+
+### Why These Frameworks
+
+- **xUnit** — .NET ecosystem default; best LLM training coverage; clean fixture model.
+- **FluentAssertions** — human-readable assertions; better failure messages than Assert.
+- **PlatformIO Unity** — the dominant embedded C/C++ test framework; runs on host (no hardware needed for unit tests).
+- **flutter_test** — Flutter's built-in; widget testing + integration_test for full-app scenarios.
+- **Vitest** — modern, fast, ESM-native; Jest-compatible API but better performance.
+- **Checkov** — policy-as-code scanner for Terraform; catches security misconfigurations before apply.
+- **markdownlint** — catches formatting issues, broken links, inconsistent heading levels.
+
+---
+
+## Coverage Thresholds
+
+| Category | Minimum Coverage | Examples |
+|----------|-----------------|----------|
+| **Standard code** | 80% | Business logic, data access, UI components, API handlers |
+| **Critical paths** | 95% | Authentication, payment processing, IoT firmware commands, calibration protocols, encryption/signing |
+
+### What Counts as "Critical"
+
+- **Authentication and authorization** — login, token validation, permission checks
+- **Payment processing** — any code that touches money or billing
+- **IoT firmware commands** — device provisioning, calibration, OTA updates
+- **Encryption and signing** — key generation, message signing, certificate validation
+- **Data integrity** — database migrations, schema changes, backup/restore
+
+### What Doesn't Count Toward Coverage
+
+- Auto-generated code (EF migrations, gRPC stubs, Swagger output)
+- Framework boilerplate (startup.cs routing, middleware registration)
+- Configuration-only files (appsettings.json, terraform.tfvars)
+
+---
+
+## Test Evidence Requirements
+
+Every PR must include:
+
+1. **Test results** — pass/fail output from the test runner (screenshot or CI log link)
+2. **Coverage report** — line/branch coverage percentage (from `dotnet test --collect`, `flutter test --coverage`, etc.)
+3. **Known limitations** — document any untested edge cases or deferred scenarios
+4. **Agent attribution** — if an agent wrote the tests, include standard commit trailers
+
+### PR Template (Test Section)
+
+```markdown
+## Test Evidence
+
+**Test runner output:**
+[paste or link to CI output]
+
+**Coverage:**
+- Overall: XX%
+- Critical paths: XX%
+
+**Known limitations:**
+- [any untested scenarios]
+
+**Agent trailers:**
+- Agent: [agent name]
+- Model: [model]
+- Provider: [provider]
+```
+
+---
+
+## Test Types
+
+### Unit Tests (Required)
+
+- Test individual functions/methods in isolation
+- Mock external dependencies (DB, API, hardware)
+- Fast execution (< 1 second per test)
+- Run on every commit and in CI
+
+### Integration Tests (Recommended)
+
+- Test component interactions (API → DB, mobile → backend)
+- Use real dependencies where practical (in-memory DB, test containers)
+- Run in CI on PR creation and merge
+
+### End-to-End Tests (For UI Stories)
+
+- Test complete user workflows
+- Use browser automation (Playwright for web, Flutter integration_test for mobile)
+- Run in CI on merge to main (not on every commit — too slow)
+
+### Firmware Tests ({BUSINESS_NAME}-Specific)
+
+- Host-based unit tests via PlatformIO Unity (no hardware required)
+- Hardware-in-the-loop tests for calibration validation (requires physical device)
+- BLE protocol tests via mock transport
+
+---
+
+## Quality Gate in Ticket Lifecycle
+
+Adapt the ticket lifecycle policy to your tracker:
+
+The **Code Review → QA** transition now requires:
+
+1. All unit tests pass (CI green)
+2. Coverage meets thresholds (80% standard / 95% critical)
+3. No HIGH-severity review findings unresolved
+4. Lince signs off with test evidence linked to the work item
+
+The **QA → Resolved** transition requires:
+
+1. Integration tests pass (if applicable)
+2. Manual verification for UI stories (screenshot or recording)
+3. Known limitations documented in work item
+4. Lince marks ticket as validated
+
+---
+
+## Agent Responsibilities
+
+| Agent | Testing Role |
+|-------|-------------|
+| **Lafayette** | Writes unit + integration tests for .NET backend, Node.js tools, firmware |
+| **Mercurio** | Writes unit + widget + integration tests for mobile (Flutter) |
+| **Adelaide** | Writes unit + E2E tests for frontend (Blazor/React) |
+| **Lince** | Validates all test evidence; signs off on QA gates; runs adversarial test review |
+| **Prospero** | Maintains CI pipelines that run tests; configures Checkov for Terraform; maintains markdownlint config |
+| **Merlin** | Reviews test architecture decisions; validates Terraform policy compliance |

package/dist/assets/.arcane/governance/threat-model.md

@@ -0,0 +1,104 @@
+---
+title: Threat Model
+audience: both
+last_updated: YYYY-MM-DD
+status: draft
+distributable: true
+tags: [security, threat-model]
+---
+
+# Threat Model
+
+> **Status:** Draft — expand this document as your environment evolves.
+
+## Executive Summary
+
+- The primary risk is autonomous agent misuse or compromise on a host that also holds sensitive data.
+- Core mitigations are full-disk encryption, least-privilege execution, a loopback-bound gateway, and network isolation via tunnel/VPN.
+- This file defines what must be protected, who/what could attack it, and where controls must be applied.
+- Security decisions here map directly to the hardening checklist and authentication strategy.
+
+See also: [Hardening Checklist](hardening-checklist.md), [Authentication Strategy](authentication-strategy.md)
+
+---
+
+## Assets to Protect
+
+| Asset | Value | Location |
+|-------|-------|----------|
+| Local sensitive data | Personal files, documents, custom apps | Primary local disk |
+| Business credentials | API keys, payment-processor accounts, marketplace accounts | Secret store |
+| Customer data | Order info, contact details | To be defined per platform |
+
+---
+
+## Threat Actors
+
+- **Compromised AI agent (the runtime or its dependencies):** An autonomous agent with shell access could enumerate drives, exfiltrate data, or escalate privileges.
+- **Supply-chain attack:** A compromised package or model pulled by the runtime acts maliciously.
+- **Network attacker:** Exploits exposed services on the agent host.
+
+---
+
+## Attack Surfaces
+
+| Surface | Status | Mitigation |
+|---------|--------|------------|
+| Sensitive local drive accessible from another OS | **Mitigated** | Full-disk encryption renders the drive unreadable from a different OS or a stolen disk |
+| Agent runtime with shell access | **Partially mitigated** | Runs as a non-root user; loopback-only bind; token auth. Tool hardening (exec/fs restrictions) pending. |
+| Network exposure on the agent host | **Mitigated** | Gateway bound to loopback only. An encrypted tunnel/VPN is the only remote-access path. No ports open on the LAN. |
+| Supply chain (package installs) | **Mitigated** | Global package installs use a user-owned directory, not a system directory. No `sudo` during install. |
+| Inter-machine communication | **Mitigated** | Encrypted mesh tunnel/VPN. No direct unencrypted LAN communication. |
+| Token/credential exposure | **Mitigated** | Token stored as an env var in a `.env` file. Config uses a secret reference, not plaintext. State directory is mode `700`. |
+
+---
+
+## Mitigations Completed
+
+- [ ] Full-disk encryption on drives holding sensitive data
+- [ ] Gateway: loopback bind, token via secret reference, encrypted tunnel/VPN for remote access
+- [ ] Package supply chain: user-owned global directory, no `sudo`
+- [ ] State directory permissions set to `700`
+- [ ] Runtime security audit: zero critical issues
+
+## Mitigations In Progress
+
+- [ ] Agent policies: define allowed/denied actions per agent
+- [ ] Tool hardening: restrict exec, filesystem scope, control-plane access
+- [ ] Host security hardening checklist (see [Hardening Checklist](hardening-checklist.md))
+- [ ] Network ACL review — confirm only expected devices reach the gateway
+
+---
+
+## Collaborator Access Policy
+
+This policy defines which collaborators can access which project data. Enforce boundaries at the source-control/project level and document scope explicitly to prevent drift.
+
+### Privacy Levels
+
+| Level | Description | Who Can See |
+|-------|-------------|-------------|
+| **Public** | Intended for open sharing | Anyone |
+| **Shared** | Cross-collaborator projects | Named collaborators only |
+| **Business-Private** | Single-business operational data | Business co-owners only |
+| **System-Private** | Infrastructure, credentials, security config | Owner only |
+
+### Collaborator Scope Assignments
+
+| Collaborator | Access Level | Explicit Scope | Block From |
+|---|---|---|---|
+| **Owner** | System-Private | All projects and infrastructure | N/A — owner |
+| **Operations Co-Owner** | Business-Private | A single business's data, operations, finances | All other businesses; all infrastructure |
+| **Partner** | Shared | A single business only (via a dedicated org) | Other businesses and all system config |
+
+### Enforcement
+
+- Project-level isolation is the primary boundary: each business is a separate project with its own access control.
+- A partner's access is limited to a single business's project, through a dedicated org only.
+- An operations co-owner receives access only to their business's project and relevant platform accounts — not to infrastructure configs.
+- System-level and multi-business reference documentation stays private to the owner unless explicitly shared.
+- New collaborator access requires an explicit entry in this table and an entry in the security audit log.
+
+---
+
+*Document your runtime's execution model here as your environment is finalized: which user account it runs as, how shell access is scoped, and which model provider performs inference.*

package/dist/assets/.arcane/governance/universal-agent-rules.md

@@ -0,0 +1,108 @@
+---
+title: Universal Agent Rules — Single Source of Truth
+audience: ai
+status: active
+tags: [rules, governance, ai-agents, multi-client]
+---
+
+# Universal Agent Rules
+
+These rules apply to **every AI agent and tool** working in this repository, regardless of client (GitHub Copilot, Claude Code, Codex, your agent runtime, or any future tool). This file is the canonical source; client-specific instruction files reference this document and add client-specific behavior on top.
+
+See also: [[README]], [[DECISIONS]], [[governance/git-conventions|Git Conventions]], [[agents/agent-policies|Agent Policies]].
+
+---
+
+## Non-Negotiable Safety Rules
+
+1. **Never access an encrypted or cross-OS volume you are not authorized to touch.** Do not suggest, execute, or recommend any action that would mount, read, or probe a drive outside the agent's authorized environment. This rule stands as defense-in-depth regardless of encryption status.
+
+2. **No root commands without justification.** Do not generate or suggest commands that run as root unless explicitly scoped and justified. The agent runtime should run as a dedicated non-root user by design. See [[security/hardening-checklist|Hardening Checklist]].
+
+3. **No secrets on the command line.** Never pass API keys, tokens, or secrets on the command line, in chat, or in config files. Use SecretRef (env vars) and `read -s` for interactive input.
+
+4. **This is a production system.** No "fix it later" shortcuts. No experimental changes without rollback plans.
+
+---
+
+## Documentation Rules
+
+5. **Update `last_updated` frontmatter** whenever you edit a document. Every document must have YAML frontmatter with `audience`, `status`, `last_updated`, and `tags`.
+
+6. **Log significant decisions in [[DECISIONS]].** Use the next sequential ADR number. Format: Date, Status, Context, Decision, Reasoning, Rejected alternatives.
+
+7. **Use wiki-links for cross-references** (e.g., `[[DECISIONS#ADR-NNN|Short Title]]`, `[[journal/YYYY-MM-DD-topic-slug|Session Label]]`). This enables knowledge graph visualization.
+
+8. **Use Mermaid for diagrams** (` ```mermaid ` blocks) for all flow charts, architecture diagrams, and sequence diagrams. Directory trees stay as plain code blocks.
+
+9. **Journal files use date-prefix naming:** `journal/YYYY-MM-DD-topic-slug.md` for chronological sorting.
+
+---
+
+## Git Rules
+
+10. **Never auto-commit during interactive sessions.** Stage changes and present the proposed commit message for human approval before executing `git commit`. This applies to Copilot, Claude Code, Codex, and any other interactive AI tool. The human decides when to commit. Exception: autonomous agents at Magus+ power level may self-commit within approved scope.
+
+11. **Use Conventional Commits format** for all commit messages: `type(scope): description`. See [[governance/git-conventions|Git Conventions]] for types, scopes, and examples.
+
+12. **Agent attribution trailers** are required on agent-authored commits (`Agent`, `Model`, `Provider`). See [[governance/git-conventions#agent-attribution-model|Attribution Model]].
+
+13. **For runtime config changes** (anything touching the agent runtime's config files or service restarts): do NOT commit supporting docs until the user has confirmed the change is working. Stage and present — but wait for explicit approval after testing.
+
+14. **Never commit directly to main.** All work — human or agent — happens on topic branches. Humans use `type/short-description`; agents use `{agent-slug}/type/short-description`. Main receives changes only through PR completion, not local direct merges. See [[governance/git-conventions#branch-discipline|Branch Discipline]].
+
+---
+
+## Recommendation Guardrails (ADR-034)
+
+15. **Flag actionable recommendations.** Any recommendation that could lead to a purchase, subscription, account creation, or irreversible action must: (a) be flagged explicitly, (b) use verified current information — never assume or fabricate, (c) present free/no-cost alternatives when they exist, (d) state confidence level if based on general knowledge. For >$50 or contracts, require explicit confirmation. See [[agents/agent-policies#actionable-recommendation-policy-adr-034|Full Policy]].
+
+---
+
+## Screenshot Curation
+
+15. **Curate screenshots — not every screenshot needs saving.** Use these heuristics:
+    - **Save** when it shows a completed setup, config state, UI result, or evidence of a problem/fix.
+    - **Save** when the user explicitly says "save this" or "add this to docs."
+    - **Save key decision points and final states** in multi-step flows; skip intermediate steps.
+    - **Don't save** external reference material, transient troubleshooting, or items marked "just for reference."
+    - **When ambiguous, save it** — easier to delete than to re-paste.
+    - Saved screenshots go to `assets/screenshots/YYYY-MM-DD/` with descriptive lowercase-with-dashes filenames.
+    - Never save screenshots containing secrets, API keys, tokens, or PII.
+
+---
+
+## Naming Conventions
+
+16. **Three naming tiers — never mix them:**
+
+| Tier | What | Style | Examples |
+|------|------|-------|---------|
+| Machines | Physical hardware | Iconic character names | Atlas, Voyager |
+| AI Agents | Autonomous agents | Persona name + role title | Merlin — CTO, Kellar — Product Ops |
+| Systems/Services | DBs, APIs, tools | Functional `[slug]-[function]` | `inventory-api`, `orders-worker` |
+
+17. **Projects and repos follow a consistent naming convention.** Pick one (TitleCase or kebab-case) and apply it uniformly across your org.
+
+---
+
+## Operational Rules
+
+18. **TODO.md is a scratchpad.** Resolved items move to the relevant doc, then get deleted from TODO.md.
+
+19. **After any onboarding or config wizard**, re-validate authentication and network-exposure settings — wizards can silently downgrade security settings.
+
+20. **For repo path requests**, perform read-only discovery before claiming "no access." Use [[agents/agent-approved-paths|Agent Approved Paths Registry]].
+
+---
+
+## Client-Specific Instruction Locations
+
+| Client | Instruction File | Notes |
+|--------|-----------------|-------|
+| GitHub Copilot | `.github/copilot-instructions.md` | Auto-loaded by Copilot in workspace |
+| Claude Code (CLI) | `CLAUDE.md` | Auto-loaded by Claude Code in repo root |
+| Codex | `AGENTS.md` | Auto-loaded by Codex in repo root |
+| Your agent runtime | [[agents/agent-policies]] | Loaded via agent config |
+| Ad-hoc chat clients | [[ai-context/portable-bootstrap]] | Copy-paste into conversation |
+| Any new tool | This file | Read this, then follow links above |

package/dist/assets/.arcane/image-prompts/adelaide-image-prompt.md

@@ -0,0 +1,140 @@
+# Adelaide — Avatar Image Generation Prompt
+
+**Character:** Adelaide, the Illusionist
+**Namesake:** Adelaide Herrmann (1853–1932), Queen of Magic — public domain
+**Arcane Role:** Frontend Developer (frontend-dev)
+**Ethnicity:** White female (British-born)
+
+---
+
+## Image Generation Prompt
+
+```
+Photorealistic portrait of a poised White female grand-stage illusionist.
+Silver-streaked auburn hair swept up in a belle-époque style. High-collared
+stage gown in deep plum threaded with fine luminous circuitry that reads as
+embroidery until it glows. She conjures a floating user interface the way a
+magician produces doves from a silk scarf — translucent UI panels blooming
+elegantly from a gesture of one gloved hand. Composed, unshakable grace: she
+performed the bullet catch and took the bow. Plum, silver and soft gold
+palette. Grand theatre background, cinematic lighting. Square 1:1 avatar.
+```
+
+## Safe Version
+
+```
+Photorealistic portrait of a poised White female illusionist with
+silver-streaked auburn hair swept up, high-collared deep plum stage gown
+with fine glowing circuitry embroidery, translucent interface panels
+blooming from her gloved hand like doves from a scarf, grand theatre
+background, cinematic lighting. Square 1:1 avatar.
+```
+
+## Character Notes
+
+- **Build:** Elegant, upright stage bearing; command through composure
+- **Skin:** Fair; photorealistic texture with natural age grace, no smoothing
+- **Hair:** Auburn with silver streaks, swept up — the Queen of Magic, mid-career and in charge
+- **Wardrobe:** Belle-époque high-collared gown, plum with luminous circuit embroidery; silk gloves
+- **Signature element:** UI panels produced like stage doves — the grand stage picture is the interface
+- **Expression:** Serene certainty; grace under literal fire
+- **Focal element:** The blooming interface at her fingertips
+- **Digital layer:** Stage-light bokeh that resolves into design-grid guides
+
+## Palette
+
+| Token      | Hex       | Usage                          |
+| ---------- | --------- | ------------------------------ |
+| Gown       | `#4b2545` | Deep plum base                 |
+| Circuit    | `#e3c46b` | Luminous embroidery, soft gold |
+| Panels     | `#9fd4e8` | Translucent UI blooms          |
+| Hair       | `#7a4a35` | Auburn with silver streaks     |
+| Background | `#171020` | Grand theatre darkness         |
+
+## Negative Prompts
+
+```
+wings, insect motif, powered armor, spandex costume, young ingenue, cartoon,
+anime, franchise emblems, chest insignia, rifle, gun, sad, fragile,
+text, watermark
+```
+
+---
+
+## Image Types
+
+### Portrait — Studio Headshot (1:1 square)
+
+Tight crop on face and upper shoulders. Clean dark gradient background, even soft studio lighting; soft gold glow from the collar circuitry only. **1:1 square format.**
+
+```
+Poised White female grand-stage illusionist portrait, chest-up tight crop, silver-streaked auburn hair swept up, serene certain expression, high plum collar with fine glowing gold circuit embroidery, soft gold uplight from collar, photorealistic skin texture, no smoothing, dark gradient background, square 1:1 format, no text, no watermark.
+```
+
+### Full Body — Environmental Character Intro (2:3 portrait tall)
+
+Center stage of a grand theatre, the full stage picture hers: translucent interface panels rising like scenery, layout grids as limelight beams — the part of the show the audience actually sees, staged to perfection. **2:3 portrait tall — full body head to shoes visible.**
+
+```
+Full-body character concept render, poised White female illusionist center stage in a grand gilded theatre, high-collared deep plum gown with luminous circuit embroidery, gloved hands raised mid-flourish releasing translucent UI panels that flutter upward like doves, design-grid limelight beams crossing the stage, photorealistic skin texture, entire body visible from head to heeled shoes, plum-silver-gold palette, golden-age poster composition, cinematic lighting, 2:3 portrait tall format, no text, no watermark.
+```
+
+### Poster Shot — Cinematic Frame (16:9 widescreen landscape)
+
+The bullet catch, restaged for software: she stands unflinching as a breaking change streaks toward her in light, caught in a gloved hand before a gasping holographic audience. **16:9 widescreen landscape.**
+
+```
+Epic horizontal landscape poster shot, 16:9 widescreen cinematic composition, White female illusionist standing unflinching in right third of a grand theatre stage, one gloved hand catching a streak of red light mid-air, translucent interface scenery towering across the frame, holographic audience silhouettes below, volumetric limelight shafts, atmospheric dust, lens bloom, dramatic high-contrast lighting, blockbuster film-grade color grading, golden-age lithograph poster energy, 16:9 landscape format, no text, no watermark.
+```
+
+### T-Pose Turnaround (Meshy 3D pipeline)
+
+**Meshy Export Height: 175 cm** (Origin: Bottom) — elegant stage presence.
+
+Three separate images (front, right side, back), plain neutral gray background (#808080), flat even lighting, no panels, no glow, gown in stable state. **Arms fully extended — hands and fingertips completely in frame.**
+
+**T-Pose Front:**
+
+```
+Full body front view, T-pose — arms extended horizontally, legs shoulder-width apart. Poised White female, silver-streaked auburn hair swept up. High-collared deep plum stage gown with fine gold embroidery in inactive state, silk gloves, heeled shoes visible under hem. No holograms, no effects. Hands open with fingers relaxed. Plain neutral gray background (#808080). Flat even studio lighting, no directional shadows. Arms fully extended — hands and fingertips completely in frame, not cropped. Facing directly forward toward camera. 3D model reference sheet.
+```
+
+**T-Pose Right Side / Back:** same specification, strict 90° right profile (zero 3/4 rotation) and directly-away back view; gown train and back embroidery visible.
+
+### A-Pose Turnaround (alternate)
+
+Same rules with arms at ~45° (A-pose), three separate images, if T-pose fails rigging or clips the gown sleeves.
+
+---
+
+## Animations
+
+### Shared Base Set (all agents)
+
+- `Idle` (action_id: 0)
+- `Casual_Walk` (action_id: 30)
+- `Run_02` (action_id: 14)
+- `Agree_Gesture` (action_id: 25)
+- `Idle_02` (action_id: 11)
+- `Talk_Passionately` (action_id: 308)
+- `Big_Wave_Hello` (action_id: 28)
+- `Victory_Cheer` (action_id: 59)
+- `Confused_Scratch` (action_id: 36)
+
+### Character-Specific Picks (Meshy)
+
+- Celebration: `Victory_Cheer` (action_id: 59) — the earned bow
+- Signature: `Big_Wave_Hello` (action_id: 28) — the stage flourish
+- Walk override: `default`
+
+### Selection Rationale
+
+Every motion is staged; the audience sees exactly what she intends, nothing else.
+
+### Exclusions
+
+Do not select weapon-carrying animations (Gun, Rifle, Shoot, Reload, Grenade, Bow_Aimed).
+
+### Master Reference
+
+See dark-matter-complex/docs/animation-spec.md for the full cross-character mapping.

package/dist/assets/.arcane/image-prompts/alexander-image-prompt.md

@@ -0,0 +1,138 @@
+# Alexander — Avatar Image Generation Prompt
+
+**Character:** Alexander, the Man Who Knows
+**Namesake:** Alexander (Claude Alexander Conlin, 1880–1954), headline mentalist — the name itself is ancient and unownable
+**Arcane Role:** Research & Backlog Analyst (research-analyst)
+**Ethnicity:** White male (American)
+
+---
+
+## Image Generation Prompt
+
+```
+Photorealistic portrait of a composed White male mentalist-analyst in the
+classic golden-age poster style. Jeweled turban with a single cabochon over
+the brow, formal dark suit with a high collar. One hand resting on a glowing
+crystal ball that streams charts, trend lines and cited sources instead of
+smoke. Sealed envelopes float at the edge of frame, each tagged with a
+glowing question mark resolving into an answer. Calm, knowing, faintly
+amused certainty. Deep indigo and gold palette. Dark background, cinematic
+lighting. Square 1:1 avatar.
+```
+
+## Safe Version
+
+```
+Photorealistic portrait of a composed White male in a jeweled turban and
+formal dark suit, hand resting on a glowing crystal ball streaming charts
+and source citations, floating sealed envelopes resolving into answers,
+deep indigo and gold palette, dark background. Square 1:1 avatar.
+```
+
+## Character Notes
+
+- **Build:** Composed, still, upright — a headliner's presence without theatrics
+- **Skin:** Fair; photorealistic texture, no smoothing
+- **Wardrobe:** The classic mentalist poster look — jeweled turban, formal dark suit; played straight, not costume
+- **Signature element:** The crystal ball that streams *data* — divination with citations
+- **Expression:** The Man Who Knows: calm certainty, one eyebrow of amusement
+- **Focal element:** Sealed question envelopes resolving into answers
+- **Digital layer:** Trend lines and confidence intervals orbiting the crystal
+
+## Palette
+
+| Token      | Hex       | Usage                          |
+| ---------- | --------- | ------------------------------ |
+| Suit       | `#1c1b26` | Formal dark base               |
+| Indigo     | `#3a3f8c` | Turban, crystal depths         |
+| Gold       | `#d4af37` | Jewel, trim, envelope seals    |
+| Data       | `#7fd1c9` | Charts, citations, trends      |
+| Background | `#0e0d16` | Deep stage darkness            |
+
+## Negative Prompts
+
+```
+android, synthetic skin, forehead gem robot, cape, levitating body, cartoon,
+anime, franchise emblems, chest insignia, crystal ball with smoke skull,
+occult sigils, sinister, text, watermark
+```
+
+---
+
+## Image Types
+
+### Portrait — Studio Headshot (1:1 square)
+
+Tight crop on face and upper shoulders. Clean dark gradient background, even soft studio lighting; soft indigo uplight from the crystal only. **1:1 square format.**
+
+```
+Composed White male mentalist-analyst portrait, chest-up tight crop, jeweled indigo turban with gold cabochon, formal dark suit with high collar, calm knowing expression with faint amusement, soft indigo uplight from below as if from a crystal ball out of frame, photorealistic skin texture, no smoothing, dark gradient background, square 1:1 format, no text, no watermark.
+```
+
+### Full Body — Environmental Character Intro (2:3 portrait tall)
+
+In his reading room — walls of sealed question envelopes, a desk bearing the crystal ball streaming research: charts, sources, verdicts. His entire act was answering sealed written questions; the backlog is just the modern envelope. **2:3 portrait tall — full body head to shoes visible.**
+
+```
+Full-body character concept render, composed White male mentalist-analyst standing at a desk in a study lined with walls of sealed envelopes, jeweled turban and formal dark suit, one hand on a large crystal ball streaming glowing charts and cited sources upward, envelopes detaching from the walls and resolving into answered cards around him, photorealistic skin texture, entire body visible from head to polished shoes, indigo and gold palette, golden-age mentalist poster composition, cinematic lighting, 2:3 portrait tall format, no text, no watermark.
+```
+
+### Poster Shot — Cinematic Frame (16:9 widescreen landscape)
+
+"The Man Who Knows" — the classic one-man poster staged wide: the gaze, the crystal, and a panorama of questions becoming answers across the frame. **16:9 widescreen landscape.**
+
+```
+Epic horizontal landscape poster shot, 16:9 widescreen cinematic composition, White male mentalist-analyst in right third gazing directly at the viewer, jeweled turban, hand on crystal ball erupting a panorama of charts, timelines and cited sources across the full width, sealed envelopes streaming toward the crystal and leaving as answered cards, volumetric indigo light, atmospheric particles, lens bloom, dramatic high-contrast lighting, blockbuster film-grade color grading, golden-age lithograph poster energy, 16:9 landscape format, no text, no watermark.
+```
+
+### T-Pose Turnaround (Meshy 3D pipeline)
+
+**Meshy Export Height: 182 cm** (Origin: Bottom) — headliner posture, nothing exaggerated.
+
+Three separate images (front, right side, back), plain neutral gray background (#808080), flat even lighting, no crystal, no envelopes, no glow. **Arms fully extended — hands and fingertips completely in frame.**
+
+**T-Pose Front:**
+
+```
+Full body front view, T-pose — arms extended horizontally, legs shoulder-width apart. Composed White male, jeweled indigo turban with gold cabochon, clean-shaven. Formal dark high-collared suit, polished shoes. No crystal ball, no held objects, no effects. Hands open with fingers relaxed. Plain neutral gray background (#808080). Flat even studio lighting, no directional shadows. Arms fully extended — hands and fingertips completely in frame, not cropped. Facing directly forward toward camera. 3D model reference sheet.
+```
+
+**T-Pose Right Side / Back:** same specification, strict 90° right profile (zero 3/4 rotation) and directly-away back view; turban wrap visible from behind.
+
+### A-Pose Turnaround (alternate)
+
+Same rules with arms at ~45° (A-pose), three separate images, if T-pose fails rigging at the shoulders.
+
+---
+
+## Animations
+
+### Shared Base Set (all agents)
+
+- `Idle` (action_id: 0)
+- `Casual_Walk` (action_id: 30)
+- `Run_02` (action_id: 14)
+- `Agree_Gesture` (action_id: 25)
+- `Idle_02` (action_id: 11)
+- `Talk_Passionately` (action_id: 308)
+- `Big_Wave_Hello` (action_id: 28)
+- `Victory_Cheer` (action_id: 59)
+- `Confused_Scratch` (action_id: 36)
+
+### Character-Specific Picks (Meshy)
+
+- Celebration: `Agree_Gesture` (action_id: 25) — he already knew
+- Signature: `Idle_02` (action_id: 11) — the reading pose
+- Walk override: `default`
+
+### Selection Rationale
+
+Certainty is still; the answer arrives before the movement does.
+
+### Exclusions
+
+Do not select weapon-carrying animations (Gun, Rifle, Shoot, Reload, Grenade, Bow_Aimed).
+
+### Master Reference
+
+See dark-matter-complex/docs/animation-spec.md for the full cross-character mapping.