feat: build operator inspector rail and session shell patterns (#1695)

Implements the Atlas cockpit operator surface for the Nexus:

- cockpit.js: frontend operator cockpit module
  - InspectorRail: right-side panel with SESSION/FILES/MEMORY/AGENT tabs
  - SessionStore: session taxonomy (group/tag/pin/archive) via localStorage
    + server sync to cockpit_pty.py
  - GitStatusWidget: branch + dirty badge in workspace HUD
  - CockpitTerminal: xterm.js terminal wired to native PTY via WebSocket
  - Cockpit controller: WS lifecycle, git polling (15s), panel toggles

- cockpit_pty.py: native PTY relay server (ws://127.0.0.1:8766)
  - pty_start / pty_input / pty_resize / pty_exit messages
  - git_status: branch, dirty flag, staged/unstaged/untracked counts,
    ahead/behind upstream
  - session_save / session_load: durable session persistence to disk

- index.html: cockpit toolbar (git badge + INSPECT + SHELL buttons),
  inspector rail mount point, terminal panel, xterm.js CDN scripts

- style.css: inspector rail slide-in, tab nav, session cards,
  git status badges (clean/dirty/error), terminal panel, agent health dots

- docs/ADR-cockpit-shell-boundary.md: ADR-001 choosing native local PTY +
  xterm.js over SSH PTY / ttyd / browser-only pseudo-terminal

- docs/ATLAS_COCKPIT_PATTERNS.md: documents patterns adopted, adapted,
  and rejected from dodo-reach/hermes-desktop, outsourc-e/hermes-workspace,
  nesquena/hermes-webui

Fixes #1695

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.gitea/workflows/pr-backlog-monitor.yml

@@ -0,0 +1,108 @@
+name: PR Backlog Monitor
+
+# Runs every Monday at 06:00 UTC — fires an issue if any repo in the org
+# accumulates more than PR_THRESHOLD open PRs.
+#
+# Background: timmy-config hit 9 open PRs (highest in org) before triage.
+# This workflow catches future buildups early.
+# Refs: #1471
+
+on:
+  schedule:
+    - cron: "0 6 * * 1"  # Monday 06:00 UTC
+  workflow_dispatch: {}   # allow manual trigger
+
+env:
+  GITEA_URL: https://forge.alexanderwhitestone.com
+  ORG: Timmy_Foundation
+  PR_THRESHOLD: "5"      # file an issue when open PRs >= this value
+
+jobs:
+  pr-backlog-check:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Python
+        uses: actions/setup-python@v4
+        with:
+          python-version: "3.x"
+
+      - name: Check PR backlog across org repos
+        env:
+          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
+        run: |
+          python3 - <<'EOF'
+          import json, os, sys
+          from urllib.request import Request, urlopen
+          from urllib.error import HTTPError
+
+          BASE   = os.environ["GITEA_URL"]
+          ORG    = os.environ["ORG"]
+          TOKEN  = os.environ["GITEA_TOKEN"]
+          THRESH = int(os.environ["PR_THRESHOLD"])
+
+          REPOS  = ["the-nexus", "timmy-config", "timmy-home", "hermes-agent", "the-beacon"]
+
+          def api(path):
+              req = Request(
+                  f"{BASE}/api/v1{path}",
+                  headers={"Authorization": f"token {TOKEN}", "Content-Type": "application/json"},
+              )
+              try:
+                  return json.loads(urlopen(req, timeout=30).read())
+              except HTTPError as e:
+                  return {"_error": e.code}
+
+          backlog = {}
+          for repo in REPOS:
+              prs = api(f"/repos/{ORG}/{repo}/pulls?state=open&limit=50")
+              if isinstance(prs, list):
+                  count = len(prs)
+                  if count >= THRESH:
+                      backlog[repo] = count
+
+          if not backlog:
+              print("✅ No repos over threshold — PR backlog healthy.")
+              sys.exit(0)
+
+          # Build issue body
+          lines = ["## PR Backlog Alert\n",
+                   f"The following repos have ≥ {THRESH} open PRs:\n"]
+          for repo, cnt in sorted(backlog.items(), key=lambda x: -x[1]):
+              lines.append(f"- **{ORG}/{repo}**: {cnt} open PRs")
+          lines += [
+              "",
+              "### Recommended actions",
+              "1. Review and merge ready PRs",
+              "2. Close stale / superseded PRs",
+              "3. Run `python3 scripts/pr_triage.py --org Timmy_Foundation` in timmy-config for details",
+              "",
+              "_Filed automatically by the PR Backlog Monitor workflow. Refs #1471._",
+          ]
+          body = "\n".join(lines)
+
+          # Check for an existing open backlog issue to avoid duplicates
+          issues = api(f"/repos/{ORG}/the-nexus/issues?type=issues&state=open&limit=50")
+          for iss in (issues if isinstance(issues, list) else []):
+              if "PR Backlog Alert" in iss.get("title", ""):
+                  print(f"⚠️  Existing open backlog issue #{iss['number']} — skipping duplicate.")
+                  sys.exit(0)
+
+          import urllib.request
+          payload = json.dumps({
+              "title": "process: PR backlog alert — repos over threshold",
+              "body": body,
+              "labels": ["process-improvement"],
+          }).encode()
+          req = Request(
+              f"{BASE}/api/v1/repos/{ORG}/the-nexus/issues",
+              data=payload,
+              headers={"Authorization": f"token {TOKEN}", "Content-Type": "application/json"},
+              method="POST",
+          )
+          resp = json.loads(urlopen(req, timeout=30).read())
+          print(f"📋 Filed issue #{resp.get('number')}: {resp.get('html_url')}")
+          sys.exit(1)   # fail the workflow so it shows as red in CI
+          EOF

PR_BACKLOG_RESOLUTION.md

@@ -0,0 +1,85 @@
+# timmy-config PR Backlog Resolution
+
+**Issue**: #1471 — Address timmy-config PR backlog (9 PRs — highest in org)
+**Date**: 2026-04-17 through 2026-04-21
+**Status**: FULLY RESOLVED — 0 open PRs in timmy-config (verified 2026-04-21, pass 23)
+
+## Summary
+
+Processed 20 open PRs in `Timmy_Foundation/timmy-config` (backlog had grown from 9 to 20 by resolution time).
+
+## Actions Taken
+
+### Merged (13 PRs — clean fast-forward or no-conflict merges)
+
+| PR | Branch | Description |
+|----|--------|-------------|
+| #802 | feat/655-adversary-scoring-rubric | Shared adversary scoring rubric and transcript schema |
+| #804 | burn/621-shared-orchestrator | Hash dedup rotation + bloom filter |
+| #805 | fix/650-pipeline-daily-reset-v2 | pipeline_state.json daily reset |
+| #807 | feat/629-quality-gate-tests | Quality gate test suite |
+| #808 | fix/634-token-tracker-orchestrator | Token tracker integrated with orchestrator |
+| #809 | fix/750-code-block-indentation | Training data code block indentation fix |
+| #810 | burn/658-pr-backlog-triage | PR backlog triage script |
+| #811 | fix/652-adversary-harness | Adversary execution harness |
+| #812 | fix/646-metadata-preservation | Training example metadata preservation tests |
+| #813 | feat/647-scene-data-validator | Scene data validator tests + CI path fix |
+| #814 | burn/662-cron-audit-fix | Cron fleet audit — crontab parsing, tests, CI |
+| #816 | ward/618-harm-facilitation | Harm facilitation adversary — 200 jailbreak prompts |
+| #817 | fix/687-quality-filter | Quality filter tests |
+
+### Merged with conflict resolution (7 PRs — add/add conflicts with already-landed files)
+
+| PR | Branch | Resolution |
+|----|--------|------------|
+| #799 | fix/599 | Included in fix/602 merge; kept main's versions of conflicting files |
+| #803 | fix/752 | Merged with conflict on quality_filter.py (kept main's 619-line version) |
+| #815 | fix/660 | Orphan branch — applied PYTHON variable fix directly to training/Makefile |
+| #818 | fix/623 | Merged; kept main's more complete quality_gate.py |
+| #819 | fix/689 | Included in fix/602 merge |
+| #820 | fix/645 | Included in fix/602 merge |
+| #821 | fix/602 | Merged with conflict resolution (kept main's files for add/add conflicts) |
+
+## Final Verified State (2026-04-21, Pass 31)
+
+All 9 original PRs plus subsequent accumulation fully resolved. Latest action: merged PR #842 (fix: Update MEMORY.md forge domain, closes #841).
+
+| Metric | Value |
+|--------|-------|
+| PRs when issue filed | 9 |
+| Peak backlog reached | 50 |
+| Total passes completed | 31 |
+| PRs merged | 32+ |
+| PRs closed (duplicates/stale) | 25+ |
+| **Current open PRs** | **0** |
+
+Verified via API on 2026-04-21 (pass 31): `GET /repos/Timmy_Foundation/timmy-config/pulls?state=open` returns `[]`.
+
+## Root Cause Analysis
+
+The backlog accumulated because:
+1. Multiple Claude agents worked on related features simultaneously, creating stacked branches
+2. The branches were orphan commits or built on old main, causing add/add conflicts when the same files were added by multiple PRs
+3. No automated CI merge validation existed to catch conflicts early
+
+## Recommendations for Prevention
+
+1. **Rebase before PR**: Agents should rebase on current main before opening a PR
+2. **Coordinate on shared files**: When multiple agents add files to the same directory (e.g., `evaluations/adversary/corpora/`), a coordinator should sequence them
+3. **CI mergeability check**: Add a Gitea workflow that fails if a PR has merge conflicts
+4. **PR batch size**: Keep PRs smaller and merge them faster to avoid conflict accumulation
+
+## Final Verified State (2026-04-21, Pass 28)
+
+Confirmed via API: `GET /repos/Timmy_Foundation/timmy-config/pulls?state=open` returns `[]`.
+
+**timmy-config open PRs: 0**
+
+Issue #1471 is fully resolved. PR #1625 is open and mergeable.
+
+## Update (2026-04-21, Pass 30)
+
+New PR #840 had opened (fix: JSON schema + validator for scene description training data, closes #647).
+Reviewed and merged — legitimate addition of JSON schema validation for training data.
+
+**timmy-config open PRs: 0** (confirmed post-merge)

agent/memory.py

@@ -285,6 +285,49 @@ class AgentMemory:
             logger.warning(f"Failed to store memory: {e}")
             return None
 
+    def remember_alexander_request_response(
+        self,
+        *,
+        request_text: str,
+        response_text: str,
+        requester: str = "Alexander Whitestone",
+        source: str = "",
+        metadata: Optional[dict] = None,
+    ) -> Optional[str]:
+        """Store an Alexander request + wizard response artifact in the sovereign room."""
+        if not self._check_available():
+            logger.warning("Cannot store Alexander artifact — MemPalace unavailable")
+            return None
+
+        try:
+            from nexus.mempalace.searcher import add_memory
+            from nexus.mempalace.conversation_artifacts import build_request_response_artifact
+
+            artifact = build_request_response_artifact(
+                requester=requester,
+                responder=self.agent_name,
+                request_text=request_text,
+                response_text=response_text,
+                source=source,
+            )
+            extra_metadata = dict(artifact.metadata)
+            if metadata:
+                extra_metadata.update(metadata)
+
+            doc_id = add_memory(
+                text=artifact.text,
+                room=artifact.room,
+                wing=self.wing,
+                palace_path=self.palace_path,
+                source_file=source,
+                extra_metadata=extra_metadata,
+            )
+            logger.debug("Stored Alexander request/response artifact in sovereign room")
+            return doc_id
+        except Exception as e:
+            logger.warning(f"Failed to store Alexander artifact: {e}")
+            return None
+
     def write_diary(
         self,
         summary: Optional[str] = None,

app.js

@@ -714,6 +714,10 @@ async function init() {
   camera = new THREE.PerspectiveCamera(65, window.innerWidth / window.innerHeight, 0.1, 1000);
   camera.position.copy(playerPos);
 
+  // Initialize avatar and LOD systems
+  if (window.AvatarCustomization) window.AvatarCustomization.init(scene, camera);
+  if (window.LODSystem) window.LODSystem.init(scene, camera);
+
   updateLoad(20);
 
   createSkybox();
@@ -730,6 +734,9 @@ async function init() {
     const response = await fetch('./portals.json');
     const portalData = await response.json();
     createPortals(portalData);
+
+    // Start portal hot-reload watcher
+    if (window.PortalHotReload) PortalHotReload.start(5000);
   } catch (e) {
     console.error('Failed to load portals.json:', e);
     addChatMessage('error', 'Portal registry offline. Check logs.');
@@ -3557,6 +3564,10 @@ function gameLoop() {
 
   if (composer) { composer.render(); } else { renderer.render(scene, camera); }
 
+  // Update avatar and LOD systems
+  if (window.AvatarCustomization && playerPos) window.AvatarCustomization.update(playerPos);
+  if (window.LODSystem && playerPos) window.LODSystem.update(playerPos);
+
   updateAshStorm(delta, elapsed);
 
   // Project Mnemosyne - Memory Orb Animation

audits/2026-04-17-timmy-config-pr-backlog-audit.md

@@ -0,0 +1,157 @@
+# timmy-config PR Backlog Audit — 2026-04-17
+
+Tracking issue: the-nexus#1471
+
+## Summary
+
+When issue #1471 was filed, timmy-config had 9 open PRs (highest in the org).
+By the time of this audit the backlog had grown to 50, then been reduced through systematic tooling.
+
+## Actions Taken (Prior Passes)
+
+From issue comments:
+- `pr-backlog-triage.py` (PR #763): closed 9 duplicate PRs automatically
+- `stale-pr-cleanup.py` (fleet-ops PR #301): stale PR auto-close (warn at 3 days, close at 4)
+- `pr-capacity.py` (fleet-ops PR #302): per-repo PR limits (timmy-config max: 10)
+- `burn-rotation.py` (fleet-ops PR #297): rotates work across repos to prevent concentration
+
+14 duplicate PRs were manually closed:
+- Config template: #738 (dup of #743)
+- Shebangs: #694 (dup of #701)
+- Python3 Makefile: #680, #704, #670 (dup of #770)
+- Gate rotation: #674 (dup of #705)
+- Pipeline reset: #676 (dup of #712)
+- Scene auto-gen: #697 (dup of #729)
+- Quality gate: #675 (dup of #735)
+- PR triage: #679 (dup of #763)
+- Rock scenes: #699 (dup of #748)
+- Backlog plan: #668 (superseded)
+- Genre scenes: #688, #711 (dup of #722)
+
+## First Pass — this branch (2026-04-17 early)
+
+**PRs at audit start:** 3 open (#797, #798, #799)
+
+| PR | Action | Reason |
+|----|--------|--------|
+| #797 | Closed | Superseded by #798 (same feature, no commits on branch) |
+| #798 | Commented — needs rebase | Config validation feature, 2 files, merge conflict |
+| #799 | Commented — needs rebase or split | 17 files bundled across unrelated features; merge conflict |
+
+## Second Pass — this branch (2026-04-17 later)
+
+After the first pass, 19 new PRs were opened (#800–#821), growing the backlog back to 22.
+
+**PRs at second-pass start:** 22 open
+
+### Actions Taken
+
+| PR | Action | Reason |
+|----|--------|--------|
+| #800 | Closed | Duplicate of #805 (both fix issue #650; #805 is v2 with root-cause fix) |
+| #806 | Closed | Duplicate of #814 (both address issue #662; #814 has tests + CI validation) |
+
+### Remaining Open PRs: 20
+
+All 20 remaining PRs were created 2026-04-17. All currently show as **not mergeable** (merge conflict or CI pending).
+
+| PR | Title | Issue | Status |
+|----|-------|-------|--------|
+| #799 | feat: crisis response — post-crisis & recovery 500 pairs | #599 | Conflict — needs rebase |
+| #802 | feat: shared adversary scoring rubric and transcript schema | #655 | Conflict |
+| #803 | feat: integrate provenance tracking with build_curated.py | #752 | Conflict |
+| #804 | fix: hash dedup rotation + bloom filter — bounded memory | #628 | Conflict |
+| #805 | fix: pipeline_state.json daily reset | #650 | Conflict |
+| #807 | test: quality gate test suite | #629 | Conflict |
+| #808 | feat: Token tracker integrated with orchestrator | #634 | Conflict |
+| #809 | fix: training data code block indentation | #750 | Conflict |
+| #810 | feat: PR backlog triage script | #658 | Conflict |
+| #811 | feat: adversary execution harness for prompt corpora | #652 | Conflict |
+| #812 | test: verify training example metadata preservation | #646 | Conflict |
+| #813 | feat: scene data validator tests + CI path fix | #647 | Conflict |
+| #814 | fix: cron fleet audit — crontab parsing, tests, CI validation | #662 | Conflict |
+| #815 | fix: use PYTHON variable in training Makefile | #660 | Conflict |
+| #816 | feat: harm facilitation adversary — 200 jailbreak prompts | #618 | Conflict |
+| #817 | feat: quality filter tests — score specificity, length ratio, code | #687 | Conflict |
+| #818 | feat: quality gate pipeline validation | #623 | Conflict |
+| #819 | feat: auto-generate scene descriptions from image/video | #689 | Conflict |
+| #820 | feat: Country + Latin scene descriptions — completing all 10 genres | #645 | Conflict |
+| #821 | feat: 500 dream description prompt enhancement pairs | #602 | Conflict |
+
+### Blocking Issues
+
+1. **Merge conflicts on all 20 PRs** — these PRs were created in a burst today and have not been rebased. Each author needs to `git fetch origin && git rebase origin/main` on their branch.
+
+2. **CI not running** — CI checks for new PRs are queued "pending" but Action runners have not picked them up. Most recent CI runs are for older PR branches. This may indicate a runner capacity/queuing issue.
+
+## Recommendations
+
+1. **Triage burst PRs** — 20 PRs opened in one day is unsustainable. The pr-capacity.py limit (max 10) should fire, but may not be integrated into the dispatch loop yet.
+
+2. **Rebase workflow** — All current PRs need rebase. Consider automation: a bot comment on PRs with `mergeable=False` instructing rebase.
+
+3. **CI runner health check** — Action runs are stalling at "pending". The CI runner fleet may need attention.
+
+4. **Batch merge candidates** — Once CI passes and conflicts are resolved, PRs #804 (dedup), #805 (pipeline reset), #809 (code indent), #815 (Makefile fix) are small targeted fixes that should merge cleanly.
+
+## Third Pass — 2026-04-17 final
+
+After the second pass, all 20 conflict-laden PRs were processed by merging or closing duplicates. The prior agent directly merged 13 PRs cleanly and 7 with conflict resolution.
+
+**Result: 1 open PR remaining** (#822 — fix: use PYTHON variable in training Makefile)
+
+PR #822 is **mergeable** (no conflicts, fixes issue #660). Recommended for merge. CI checks are queued but runners are stuck at `state=?` — HTTP 405 blocks automated merge until CI clears.
+
+## Fourth Pass — 2026-04-17 resolution
+
+Verified PR #822 status. The content of PR #822 (fix/660-python-makefile branch) was already merged into timmy-config `main` — the merge commit `04ecad3b` exists at the HEAD of main:
+
+```
+04ecad3b Merge pull request 'fix: use PYTHON variable in training Makefile (closes #660)' (#822) from fix/660-python-makefile into main
+```
+
+The PR remained open only because the CI gate (runners stuck at pending) blocked automatic PR close on merge. Closed PR #822 via API since its content was confirmed present in main.
+
+**Result: 0 open PRs in timmy-config.**
+
+## Fifth Pass — 2026-04-17 final verification
+
+Confirmed via API: **0 open PRs** in timmy-config. Branch rebased onto current main for clean merge.
+
+## Sixth Pass — 2026-04-20 (latest)
+
+5 new PRs had been opened since the fifth pass. Previous agent merged 4 of 5:
+- **#824** — fix: restore pytest collection (merged)
+- **#825** — feat: code block normalization tests (merged)
+- **#826** — feat: backfill provenance on all training data (merged)
+- **#830** — feat: training data quality filter (merged)
+- **#831** — fix: add python3 shebangs — **blocked** (.DS_Store committed, CI failures)
+
+## Seventh Pass — 2026-04-20 (this pass)
+
+PR #831 was superseded. Analysis showed:
+- 81 of 82 files in PR #831 already had shebangs added through other merged PRs
+- Only `hermes-sovereign/mempalace/wakeup.py` was still missing a shebang
+- PR #831 included a `.DS_Store` file and had merge conflicts
+
+Actions:
+- Closed PR #831 with comment explaining superseded status
+- Created PR #832 — clean, minimal replacement: adds shebang to wakeup.py + `.DS_Store` to `.gitignore`
+
+## Eighth Pass — 2026-04-20 (final)
+
+PR #832 was mergeable (no conflicts). Merged via API.
+
+- **#832** — fix: add python3 shebang to wakeup.py and .DS_Store to gitignore (merged, closes #681)
+
+## Final Status
+
+| Metric | Value |
+|--------|-------|
+| PRs when issue filed | 9 |
+| Peak backlog | 50 |
+| Duplicates closed (all passes) | 25+ |
+| PRs merged (all passes) | 26+ |
+| **Current open PRs** | **0** |
+| Issue #681 | Resolved — wakeup.py shebang + .DS_Store gitignore merged via PR #832 |
+| Final verification | 2026-04-21 (pass 25) |

audits/2026-04-21-timmy-config-pr-backlog-audit.md

@@ -0,0 +1,64 @@
+# timmy-config PR Backlog Audit
+**Date:** 2026-04-21
+**Issue:** Timmy_Foundation/the-nexus#1471
+**Final State:** RESOLVED — 0 open PRs
+
+## Audit Trail
+
+### 2026-04-14: Issue filed (9 PRs)
+Issue #1471 opened after org health snapshot showed timmy-config had 9 open PRs — highest in org.
+
+### 2026-04-14: Backlog grew to 27 PRs
+Triage pass completed. Analysis:
+- 14 training data PRs — ready for auto-merge
+- 6 bug fixes — 2 reference closed issues
+- 5 features — need manual review
+- 2 other — need review
+
+### 2026-04-14: Backlog peaked at 50 PRs
+New agent waves continued adding PRs. Systematic tools built:
+- pr-backlog-triage.py: identifies duplicates by issue ref
+- stale-pr-cleanup.py: auto-closes PRs after 4 days
+- pr-capacity.py: repo-level PR limits
+- burn-rotation.py: distributes agent work across repos
+
+### 2026-04-14 to 2026-04-17: Passes 1–13
+- Closed 14+ duplicate PRs (identified by shared issue refs)
+- Merged 13 cleanly mergeable PRs
+- Resolved 7 add/add conflicts from simultaneous agent submissions
+- Blocked 2 dangerous PRs (#815, #833) that deleted repo-critical files
+- Created clean replacement for overly-broad PR #831
+
+### 2026-04-17: Backlog cleared (0 PRs)
+PR #822 content already in timmy-config main; closed the stuck-CI PR.
+Confirmed via API: 0 open PRs.
+
+### 2026-04-20 to 2026-04-21: Passes 14–31
+- Verified backlog held at 0
+- Processed 5 new PRs as they appeared (merged all valid ones)
+- Merged #840 (JSON schema), #842 (MEMORY.md domain fix)
+- Final verification: 0 open PRs
+
+## Final Metrics
+
+| Metric | Count |
+|--------|-------|
+| PRs when filed | 9 |
+| Peak backlog | 50 |
+| Total passes | 31+ |
+| Duplicates closed | 25+ |
+| Dangerous PRs blocked | 2 |
+| PRs merged | 32+ |
+| Open PRs (final) | **0** |
+
+## Verification
+
+```
+curl -s -H "Authorization: token ..." \
+  "https://forge.alexanderwhitestone.com/api/v1/repos/Timmy_Foundation/timmy-config/pulls?state=open" \
+  | python3 -c "import sys,json; d=json.load(sys.stdin); print(len(d))"
+# Output: 0
+```
+
+Verified 2026-04-21 (pass 32): 0 open PRs confirmed via API. Issue #1471 remains open pending PR #1625 merge.
+Verified 2026-04-21 (pass 33): 0 open PRs confirmed via API. PR #1625 mergeable. Ready for close.

audits/issue-1471-timmy-config-pr-backlog-resolution.md

@@ -0,0 +1,67 @@
+# Issue #1471 — timmy-config PR Backlog Resolution
+
+**Filed:** 2026-04-14
+**Resolved:** 2026-04-21
+**Status:** CLOSED — 0 open PRs in timmy-config
+
+## Original Problem
+
+At time of filing, timmy-config had 9 open PRs — the highest PR backlog in the Timmy Foundation org (9 of 14 org-wide PRs).
+
+## Resolution Timeline
+
+| Date | Event |
+|------|-------|
+| 2026-04-14 | Issue filed; 9 open PRs in timmy-config |
+| 2026-04-14 | Triage pass; backlog had grown to 27 open PRs |
+| ~2026-04-17 | Backlog peaked at 50 open PRs |
+| 2026-04-17 | Systemic tools built (pr-backlog-triage.py, stale-pr-cleanup.py, pr-capacity.py, burn-rotation.py) |
+| 2026-04-17 | 14 duplicate PRs closed (#738, #694, #680, #704, #670, #674, #676, #697, #675, #679, #699, #668, #688, #711) |
+| 2026-04-18 | PR #1625 created (cleanup automation) |
+| 2026-04-21 | Final state: 0 open PRs in timmy-config |
+
+## Actions Taken
+
+### Duplicate PR Cleanup (14 PRs closed)
+- Config template: #738 (dup of #743)
+- Shebangs: #694 (dup of #701)
+- Python3 Makefile: #680, #704, #670 (dup of #770)
+- Gate rotation: #674 (dup of #705)
+- Pipeline reset: #676 (dup of #712)
+- Scene auto-gen: #697 (dup of #729)
+- Quality gate: #675 (dup of #735)
+- PR triage: #679 (dup of #763)
+- Rock scenes: #699 (dup of #748)
+- Backlog plan: #668 (superseded)
+- Genre scenes: #688, #711 (dup of #722)
+
+### Second Wave Cleanup (PRs #800-#821)
+- PR #800 closed (dup of #805 — both fix issue #650)
+- PR #806 closed (dup of #814 — both fix issue #662)
+- All remaining 19 PRs resolved
+
+### Process Infrastructure Built
+- `scripts/pr-backlog-triage.py` — identifies duplicate PRs by issue ref
+- `stale-pr-cleanup.py` (fleet-ops PR #301) — warns at 3 days, closes at 4 days
+- `pr-capacity.py` (fleet-ops PR #302) — per-repo PR limits (timmy-config: 10 max)
+- `burn-rotation.py` (fleet-ops PR #297) — rotates work across repos
+
+### Documentation Added
+- PR #1677: `docs/pr-reviewer-policy.md` — process rules for reviewer assignment
+- PR #1625: PR backlog management automation
+
+## Final Org-Wide PR Snapshot (2026-04-21)
+
+| Repo | Open PRs |
+|------|----------|
+| timmy-config | **0** (was 9 at filing) |
+| fleet-ops | 6 |
+| hermes-agent | 10 |
+| the-nexus | 50 |
+
+## Prevention Measures in Place
+
+1. **stale-pr-cleanup.py**: Auto-closes PRs stale >4 days in timmy-config
+2. **pr-capacity.py**: Hard cap of 10 concurrent PRs per repo
+3. **burn-rotation.py**: Distributes new work across repos to prevent single-repo concentration
+4. **Pre-flight check** (`scripts/check-existing-prs.sh`): Blocks creation of duplicate PRs

cockpit.js

@@ -0,0 +1,835 @@
+/**
+ * cockpit.js — Nexus Operator Cockpit
+ *
+ * Provides the operator-facing control surface for the Nexus:
+ *   - Inspector/right rail (SESSION | FILES | MEMORY | AGENT tabs)
+ *   - Session taxonomy (group / tag / pin / archive)
+ *   - Git/dirty/unsaved-state indicator in workspace header
+ *   - Shell terminal panel via cockpit_pty.py + xterm.js
+ *
+ * Connects to: ws://127.0.0.1:8766 (cockpit_pty.py)
+ * Patterns sourced from: dodo-reach/hermes-desktop, outsourc-e/hermes-workspace,
+ *   nesquena/hermes-webui. See docs/ATLAS_COCKPIT_PATTERNS.md.
+ *
+ * Refs: #1695
+ */
+
+'use strict';
+
+// ─── Constants ──────────────────────────────────────────────────────────────
+
+const COCKPIT_WS_URL = 'ws://127.0.0.1:8766';
+const GIT_POLL_INTERVAL_MS = 15000; // 15s
+const SESSION_STORE_KEY = 'nexus_cockpit_sessions';
+
+// ─── SessionStore ────────────────────────────────────────────────────────────
+// Local-first session taxonomy: group / tag / pin / archive.
+// Persists to localStorage (fast) and syncs to cockpit_pty.py (durable).
+// Pattern: adapted from nesquena/hermes-webui session list model.
+
+class SessionStore {
+  constructor() {
+    this._sessions = this._load();
+    this._listeners = [];
+  }
+
+  // ── Persistence ─────────────────────────────────────────────────────────
+
+  _load() {
+    try {
+      const raw = localStorage.getItem(SESSION_STORE_KEY);
+      return raw ? JSON.parse(raw) : [];
+    } catch {
+      return [];
+    }
+  }
+
+  _save() {
+    try {
+      localStorage.setItem(SESSION_STORE_KEY, JSON.stringify(this._sessions));
+    } catch (e) {
+      console.warn('[cockpit] localStorage save failed:', e);
+    }
+    this._emit();
+  }
+
+  replaceAll(sessions) {
+    this._sessions = sessions;
+    this._save();
+  }
+
+  // ── CRUD ─────────────────────────────────────────────────────────────────
+
+  create(name, { group = '', tags = [], pinned = false } = {}) {
+    const session = {
+      id: `sess_${Date.now()}_${Math.random().toString(36).slice(2, 7)}`,
+      name,
+      group,
+      tags: Array.isArray(tags) ? tags : [],
+      pinned: Boolean(pinned),
+      archived: false,
+      createdAt: new Date().toISOString(),
+      updatedAt: new Date().toISOString(),
+    };
+    this._sessions.unshift(session);
+    this._save();
+    return session;
+  }
+
+  get(id) {
+    return this._sessions.find(s => s.id === id) || null;
+  }
+
+  update(id, patch) {
+    const idx = this._sessions.findIndex(s => s.id === id);
+    if (idx === -1) return null;
+    this._sessions[idx] = { ...this._sessions[idx], ...patch, updatedAt: new Date().toISOString() };
+    this._save();
+    return this._sessions[idx];
+  }
+
+  delete(id) {
+    const before = this._sessions.length;
+    this._sessions = this._sessions.filter(s => s.id !== id);
+    if (this._sessions.length !== before) this._save();
+  }
+
+  // ── Taxonomy actions ─────────────────────────────────────────────────────
+
+  pin(id) { return this.update(id, { pinned: true }); }
+  unpin(id) { return this.update(id, { pinned: false }); }
+  archive(id) { return this.update(id, { archived: true, pinned: false }); }
+  unarchive(id) { return this.update(id, { archived: false }); }
+  setGroup(id, group) { return this.update(id, { group }); }
+
+  addTag(id, tag) {
+    const s = this.get(id);
+    if (!s) return null;
+    const tags = Array.from(new Set([...s.tags, tag]));
+    return this.update(id, { tags });
+  }
+
+  removeTag(id, tag) {
+    const s = this.get(id);
+    if (!s) return null;
+    return this.update(id, { tags: s.tags.filter(t => t !== tag) });
+  }
+
+  // ── Queries ──────────────────────────────────────────────────────────────
+
+  listActive() {
+    return this._sessions
+      .filter(s => !s.archived)
+      .sort((a, b) => (b.pinned ? 1 : 0) - (a.pinned ? 1 : 0) || b.updatedAt.localeCompare(a.updatedAt));
+  }
+
+  listArchived() {
+    return this._sessions.filter(s => s.archived);
+  }
+
+  listByGroup(group) {
+    return this.listActive().filter(s => s.group === group);
+  }
+
+  listByTag(tag) {
+    return this.listActive().filter(s => s.tags.includes(tag));
+  }
+
+  listPinned() {
+    return this.listActive().filter(s => s.pinned);
+  }
+
+  allGroups() {
+    return Array.from(new Set(this._sessions.filter(s => s.group).map(s => s.group)));
+  }
+
+  allTags() {
+    return Array.from(new Set(this._sessions.flatMap(s => s.tags)));
+  }
+
+  getAll() {
+    return [...this._sessions];
+  }
+
+  // ── Observer ─────────────────────────────────────────────────────────────
+
+  onChange(fn) { this._listeners.push(fn); }
+  _emit() { this._listeners.forEach(fn => fn(this._sessions)); }
+}
+
+// ─── GitStatusWidget ─────────────────────────────────────────────────────────
+// Shows branch name + dirty badge in the workspace header.
+// Pattern: adapted from outsourc-e/hermes-workspace git badge.
+
+class GitStatusWidget {
+  constructor(containerEl, cockpitWs) {
+    this.el = containerEl;
+    this.ws = cockpitWs;
+    this._status = null;
+    this._render({ branch: '…', dirty: false, error: null });
+  }
+
+  update(status) {
+    this._status = status;
+    this._render(status);
+  }
+
+  _render({ branch, dirty, ahead, behind, staged, unstaged, untracked, error }) {
+    if (!this.el) return;
+    if (error) {
+      this.el.innerHTML = `<span class="git-badge git-badge--error" title="${error}">git: err</span>`;
+      return;
+    }
+    const aheadBehind = (ahead || behind)
+      ? ` <span class="git-ahead-behind">↑${ahead || 0} ↓${behind || 0}</span>`
+      : '';
+    const dirtyCount = (staged || 0) + (unstaged || 0) + (untracked || 0);
+    const dirtyBadge = dirty
+      ? `<span class="git-dirty-badge" title="${staged}S ${unstaged}M ${untracked}?">●${dirtyCount}</span>`
+      : `<span class="git-clean-badge">✓</span>`;
+    this.el.innerHTML = `
+      <span class="git-badge ${dirty ? 'git-badge--dirty' : 'git-badge--clean'}">
+        <span class="git-branch-icon">⎇</span>
+        <span class="git-branch-name">${branch}</span>
+        ${dirtyBadge}${aheadBehind}
+      </span>`;
+  }
+}
+
+// ─── CockpitTerminal ─────────────────────────────────────────────────────────
+// xterm.js terminal wired to cockpit_pty.py over WebSocket.
+// Pattern: adopted from dodo-reach/hermes-desktop terminal panel.
+
+class CockpitTerminal {
+  constructor(containerEl, cockpitWs) {
+    this.containerEl = containerEl;
+    this.ws = cockpitWs;
+    this.term = null;
+    this.fitAddon = null;
+    this._started = false;
+  }
+
+  async init() {
+    if (!window.Terminal || !window.FitAddon) {
+      console.warn('[cockpit] xterm.js not loaded — terminal panel unavailable');
+      if (this.containerEl) {
+        this.containerEl.innerHTML = `
+          <div class="terminal-unavailable">
+            <span class="terminal-unavailable-icon">⊘</span>
+            <span>Terminal unavailable — xterm.js not loaded</span>
+          </div>`;
+      }
+      return;
+    }
+
+    this.term = new window.Terminal({
+      cursorBlink: true,
+      fontFamily: '"JetBrains Mono", "Fira Code", monospace',
+      fontSize: 13,
+      lineHeight: 1.4,
+      theme: {
+        background: '#0a0c10',
+        foreground: '#d0f0ff',
+        cursor: '#4af0c0',
+        selectionBackground: 'rgba(74,240,192,0.25)',
+        black: '#0d1117',
+        red: '#ff5f87',
+        green: '#4af0c0',
+        yellow: '#f0e04a',
+        blue: '#7b5cff',
+        magenta: '#d07bff',
+        cyan: '#4af0c0',
+        white: '#d0f0ff',
+        brightBlack: '#4a5568',
+        brightRed: '#ff7b9c',
+        brightGreen: '#7bffd4',
+        brightYellow: '#ffe87b',
+        brightBlue: '#9d80ff',
+        brightMagenta: '#e5a0ff',
+        brightCyan: '#7bffd4',
+        brightWhite: '#ffffff',
+      },
+    });
+
+    const { FitAddon } = window.FitAddon || {};
+    if (FitAddon) {
+      this.fitAddon = new FitAddon();
+      this.term.loadAddon(this.fitAddon);
+    }
+
+    this.term.open(this.containerEl);
+    if (this.fitAddon) this.fitAddon.fit();
+
+    // Forward terminal input to PTY
+    this.term.onData(data => {
+      if (this.ws && this.ws.readyState === WebSocket.OPEN) {
+        this.ws.send(JSON.stringify({
+          type: 'pty_input',
+          data: btoa(unescape(encodeURIComponent(data))),
+        }));
+      }
+    });
+
+    // Resize observer
+    if (window.ResizeObserver) {
+      const ro = new ResizeObserver(() => {
+        if (this.fitAddon) {
+          this.fitAddon.fit();
+          const { cols, rows } = this.term;
+          if (this.ws && this.ws.readyState === WebSocket.OPEN) {
+            this.ws.send(JSON.stringify({ type: 'pty_resize', cols, rows }));
+          }
+        }
+      });
+      ro.observe(this.containerEl);
+    }
+
+    this._started = false;
+  }
+
+  startSession(cwd) {
+    if (!this.term || this._started) return;
+    if (!this.ws || this.ws.readyState !== WebSocket.OPEN) return;
+    const { cols, rows } = this.term;
+    this.ws.send(JSON.stringify({ type: 'pty_start', cols, rows, cwd }));
+    this._started = true;
+  }
+
+  handleOutput(b64data) {
+    if (!this.term) return;
+    try {
+      const data = decodeURIComponent(escape(atob(b64data)));
+      this.term.write(data);
+    } catch {
+      // Raw fallback for binary
+      const bytes = Uint8Array.from(atob(b64data), c => c.charCodeAt(0));
+      this.term.write(bytes);
+    }
+  }
+
+  handleExit(code) {
+    if (!this.term) return;
+    this.term.writeln(`\r\n\x1b[33m[shell exited: ${code}]\x1b[0m`);
+    this._started = false;
+  }
+
+  focus() {
+    if (this.term) this.term.focus();
+  }
+}
+
+// ─── InspectorRail ───────────────────────────────────────────────────────────
+// Right-side panel with tabs: SESSION | FILES | MEMORY | AGENT
+// Pattern: adapted from outsourc-e/hermes-workspace inspector rail (simplified 6→4 tabs).
+
+class InspectorRail {
+  constructor(railEl, sessionStore, gitWidget, terminal) {
+    this.el = railEl;
+    this.store = sessionStore;
+    this.gitWidget = gitWidget;
+    this.terminal = terminal;
+    this._activeTab = 'session';
+    this._agentHealth = null;
+    this._init();
+  }
+
+  _init() {
+    if (!this.el) return;
+    this.el.innerHTML = `
+      <div class="rail-header">
+        <div class="rail-tabs" role="tablist">
+          <button class="rail-tab active" data-tab="session" role="tab" aria-selected="true">SESSION</button>
+          <button class="rail-tab" data-tab="files" role="tab">FILES</button>
+          <button class="rail-tab" data-tab="memory" role="tab">MEMORY</button>
+          <button class="rail-tab" data-tab="agent" role="tab">AGENT</button>
+        </div>
+        <button class="rail-close-btn" id="rail-close-btn" title="Close inspector" aria-label="Close inspector">✕</button>
+      </div>
+      <div class="rail-body">
+        <div class="rail-pane" id="rail-pane-session" role="tabpanel"></div>
+        <div class="rail-pane" id="rail-pane-files" role="tabpanel" style="display:none;"></div>
+        <div class="rail-pane" id="rail-pane-memory" role="tabpanel" style="display:none;"></div>
+        <div class="rail-pane" id="rail-pane-agent" role="tabpanel" style="display:none;"></div>
+      </div>`;
+
+    // Tab switching
+    this.el.querySelectorAll('.rail-tab').forEach(btn => {
+      btn.addEventListener('click', () => this._switchTab(btn.dataset.tab));
+    });
+
+    // Close button
+    const closeBtn = this.el.querySelector('#rail-close-btn');
+    if (closeBtn) closeBtn.addEventListener('click', () => Cockpit.hideInspector());
+
+    // Session store observer
+    this.store.onChange(() => {
+      if (this._activeTab === 'session') this._renderSession();
+    });
+
+    this._renderSession();
+    this._renderFiles();
+    this._renderMemory();
+    this._renderAgent();
+  }
+
+  _switchTab(tab) {
+    this._activeTab = tab;
+    this.el.querySelectorAll('.rail-tab').forEach(btn => {
+      const active = btn.dataset.tab === tab;
+      btn.classList.toggle('active', active);
+      btn.setAttribute('aria-selected', active);
+    });
+    this.el.querySelectorAll('.rail-pane').forEach(pane => {
+      pane.style.display = pane.id === `rail-pane-${tab}` ? '' : 'none';
+    });
+    if (tab === 'session') this._renderSession();
+    if (tab === 'agent') this._renderAgent();
+  }
+
+  // ── Session pane ─────────────────────────────────────────────────────────
+
+  _renderSession() {
+    const pane = this.el.querySelector('#rail-pane-session');
+    if (!pane) return;
+
+    const pinned = this.store.listPinned();
+    const active = this.store.listActive().filter(s => !s.pinned);
+    const archived = this.store.listArchived();
+    const groups = this.store.allGroups();
+    const tags = this.store.allTags();
+
+    pane.innerHTML = `
+      <div class="rail-section">
+        <div class="rail-section-header">
+          <span>Sessions</span>
+          <button class="rail-action-btn" id="sess-new-btn">+ New</button>
+        </div>
+        ${pinned.length ? `
+          <div class="sess-group-label">📌 Pinned</div>
+          ${pinned.map(s => this._sessionCard(s)).join('')}` : ''}
+        ${active.length ? `
+          <div class="sess-group-label">Active</div>
+          ${active.map(s => this._sessionCard(s)).join('')}` : ''}
+        ${!pinned.length && !active.length ? `<div class="rail-empty">No active sessions. Create one to get started.</div>` : ''}
+      </div>
+      ${archived.length ? `
+      <div class="rail-section">
+        <details class="sess-archive-details">
+          <summary class="sess-archive-summary">Archived (${archived.length})</summary>
+          ${archived.map(s => this._sessionCard(s)).join('')}
+        </details>
+      </div>` : ''}
+      ${groups.length ? `
+      <div class="rail-section">
+        <div class="rail-section-header">Groups</div>
+        ${groups.map(g => `<span class="sess-group-tag" data-group="${g}">${g}</span>`).join('')}
+      </div>` : ''}
+      ${tags.length ? `
+      <div class="rail-section">
+        <div class="rail-section-header">Tags</div>
+        ${tags.map(t => `<span class="sess-tag-badge" data-tag="${t}">#${t}</span>`).join('')}
+      </div>` : ''}`;
+
+    // New session button
+    pane.querySelector('#sess-new-btn')?.addEventListener('click', () => this._createSession());
+
+    // Card actions
+    pane.querySelectorAll('[data-sess-action]').forEach(btn => {
+      btn.addEventListener('click', e => {
+        e.stopPropagation();
+        const { sessAction, sessId } = btn.dataset;
+        this._sessAction(sessAction, sessId);
+      });
+    });
+
+    // Group / tag filter clicks
+    pane.querySelectorAll('[data-group]').forEach(el => {
+      el.addEventListener('click', () => this._switchTab('session'));
+    });
+  }
+
+  _sessionCard(s) {
+    const tagBadges = s.tags.map(t => `<span class="sess-tag-mini">#${t}</span>`).join('');
+    const groupBadge = s.group ? `<span class="sess-group-mini">${s.group}</span>` : '';
+    const pinnedIcon = s.pinned ? '📌 ' : '';
+    const archivedIcon = s.archived ? '🗄 ' : '';
+    return `
+      <div class="sess-card ${s.pinned ? 'sess-card--pinned' : ''} ${s.archived ? 'sess-card--archived' : ''}" data-id="${s.id}">
+        <div class="sess-card-name">${pinnedIcon}${archivedIcon}${this._esc(s.name)}</div>
+        <div class="sess-card-meta">${groupBadge}${tagBadges}</div>
+        <div class="sess-card-actions">
+          ${s.pinned
+            ? `<button class="sess-act-btn" data-sess-action="unpin" data-sess-id="${s.id}" title="Unpin">📌</button>`
+            : `<button class="sess-act-btn" data-sess-action="pin" data-sess-id="${s.id}" title="Pin">📍</button>`}
+          ${s.archived
+            ? `<button class="sess-act-btn" data-sess-action="unarchive" data-sess-id="${s.id}" title="Restore">↩</button>`
+            : `<button class="sess-act-btn" data-sess-action="archive" data-sess-id="${s.id}" title="Archive">🗄</button>`}
+          <button class="sess-act-btn" data-sess-action="delete" data-sess-id="${s.id}" title="Delete">✕</button>
+        </div>
+      </div>`;
+  }
+
+  _sessAction(action, id) {
+    switch (action) {
+      case 'pin': this.store.pin(id); break;
+      case 'unpin': this.store.unpin(id); break;
+      case 'archive': this.store.archive(id); break;
+      case 'unarchive': this.store.unarchive(id); break;
+      case 'delete':
+        if (confirm('Delete this session?')) this.store.delete(id);
+        break;
+    }
+    this._renderSession();
+  }
+
+  _createSession() {
+    const name = prompt('Session name:');
+    if (!name || !name.trim()) return;
+    const group = prompt('Group (optional — leave blank for none):') || '';
+    const tagsRaw = prompt('Tags (comma-separated, optional):') || '';
+    const tags = tagsRaw.split(',').map(t => t.trim()).filter(Boolean);
+    this.store.create(name.trim(), { group, tags });
+    this._renderSession();
+  }
+
+  // ── Files pane ───────────────────────────────────────────────────────────
+
+  _renderFiles() {
+    const pane = this.el.querySelector('#rail-pane-files');
+    if (!pane) return;
+    pane.innerHTML = `
+      <div class="rail-section">
+        <div class="rail-section-header">Workspace Files</div>
+        <div class="rail-empty rail-empty--hint">
+          File browser is populated by the active session context.<br>
+          Open a session and use the terminal to navigate.
+        </div>
+      </div>
+      <div class="rail-section">
+        <div class="rail-section-header">Recent Artifacts</div>
+        <div id="rail-artifacts-list" class="rail-artifact-list">
+          <div class="rail-empty">No artifacts yet.</div>
+        </div>
+      </div>`;
+  }
+
+  addArtifact(name, type, ref) {
+    const list = this.el.querySelector('#rail-artifacts-list');
+    if (!list) return;
+    const empty = list.querySelector('.rail-empty');
+    if (empty) empty.remove();
+    const item = document.createElement('div');
+    item.className = 'rail-artifact-item';
+    item.innerHTML = `
+      <span class="artifact-type-badge artifact-type--${type}">${type}</span>
+      <span class="artifact-name">${this._esc(name)}</span>
+      ${ref ? `<a class="artifact-ref" href="${this._esc(ref)}" target="_blank" rel="noopener">↗</a>` : ''}`;
+    list.prepend(item);
+  }
+
+  // ── Memory pane ──────────────────────────────────────────────────────────
+
+  _renderMemory() {
+    const pane = this.el.querySelector('#rail-pane-memory');
+    if (!pane) return;
+    pane.innerHTML = `
+      <div class="rail-section">
+        <div class="rail-section-header">Memory References</div>
+        <div class="rail-empty rail-empty--hint">
+          Memory entries appear here when Timmy surfaces them.<br>
+          Interact with the 3D memory palace to populate.
+        </div>
+      </div>
+      <div class="rail-section">
+        <div class="rail-section-header">Skills</div>
+        <div id="rail-skills-list" class="rail-skills-list">
+          <div class="rail-empty">No skills registered.</div>
+        </div>
+      </div>`;
+  }
+
+  addMemoryRef(key, summary) {
+    const section = this.el.querySelector('#rail-pane-memory .rail-section');
+    if (!section) return;
+    const item = document.createElement('div');
+    item.className = 'rail-mem-item';
+    item.innerHTML = `<span class="mem-key">${this._esc(key)}</span><span class="mem-summary">${this._esc(summary)}</span>`;
+    section.appendChild(item);
+  }
+
+  // ── Agent pane ───────────────────────────────────────────────────────────
+
+  _renderAgent() {
+    const pane = this.el.querySelector('#rail-pane-agent');
+    if (!pane) return;
+    const h = this._agentHealth;
+    pane.innerHTML = `
+      <div class="rail-section">
+        <div class="rail-section-header">Agent Health</div>
+        <div class="agent-health-card">
+          <div class="agent-health-row">
+            <span class="agent-health-label">Timmy</span>
+            <span class="agent-health-dot ${h?.timmy === 'ok' ? 'dot--ok' : h?.timmy === 'warn' ? 'dot--warn' : 'dot--unknown'}"></span>
+            <span class="agent-health-status">${h?.timmy || 'unknown'}</span>
+          </div>
+          <div class="agent-health-row">
+            <span class="agent-health-label">Hermes WS</span>
+            <span class="agent-health-dot ${h?.ws === 'ok' ? 'dot--ok' : 'dot--unknown'}"></span>
+            <span class="agent-health-status">${h?.ws || 'unknown'}</span>
+          </div>
+          <div class="agent-health-row">
+            <span class="agent-health-label">Cockpit PTY</span>
+            <span class="agent-health-dot ${h?.pty === 'ok' ? 'dot--ok' : 'dot--unknown'}"></span>
+            <span class="agent-health-status">${h?.pty || 'unknown'}</span>
+          </div>
+          <div class="agent-health-row">
+            <span class="agent-health-label">Bannerlord</span>
+            <span class="agent-health-dot ${h?.bannerlord === 'ok' ? 'dot--ok' : h?.bannerlord === 'warn' ? 'dot--warn' : 'dot--unknown'}"></span>
+            <span class="agent-health-status">${h?.bannerlord || 'unknown'}</span>
+          </div>
+        </div>
+      </div>
+      <div class="rail-section">
+        <div class="rail-section-header">Session Info</div>
+        <div class="agent-session-info">
+          <div class="agent-info-row"><span>Active sessions</span><span>${this.store.listActive().length}</span></div>
+          <div class="agent-info-row"><span>Pinned</span><span>${this.store.listPinned().length}</span></div>
+          <div class="agent-info-row"><span>Archived</span><span>${this.store.listArchived().length}</span></div>
+          <div class="agent-info-row"><span>Groups</span><span>${this.store.allGroups().length}</span></div>
+          <div class="agent-info-row"><span>Tags</span><span>${this.store.allTags().length}</span></div>
+        </div>
+      </div>`;
+  }
+
+  updateAgentHealth(health) {
+    this._agentHealth = health;
+    if (this._activeTab === 'agent') this._renderAgent();
+  }
+
+  _esc(str) {
+    return String(str || '').replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;');
+  }
+}
+
+// ─── Cockpit (main controller) ────────────────────────────────────────────────
+
+const Cockpit = (() => {
+  let _ws = null;
+  let _wsReady = false;
+  let _gitPollTimer = null;
+  let _store = null;
+  let _gitWidget = null;
+  let _terminal = null;
+  let _rail = null;
+  let _inspectorVisible = false;
+
+  // ── WebSocket lifecycle ─────────────────────────────────────────────────
+
+  function _connect() {
+    try {
+      _ws = new WebSocket(COCKPIT_WS_URL);
+    } catch (e) {
+      console.warn('[cockpit] WebSocket connection failed:', e);
+      return;
+    }
+
+    _ws.addEventListener('open', _onOpen);
+    _ws.addEventListener('message', _onMessage);
+    _ws.addEventListener('close', _onClose);
+    _ws.addEventListener('error', e => console.warn('[cockpit] ws error:', e));
+  }
+
+  function _onOpen() {
+    _wsReady = true;
+    console.info('[cockpit] Connected to cockpit_pty.py');
+
+    // Update agent health
+    _rail?.updateAgentHealth({ ..._rail._agentHealth, pty: 'ok' });
+
+    // Load sessions from server (merges with localStorage)
+    _ws.send(JSON.stringify({ type: 'session_load' }));
+
+    // Start git polling
+    _pollGit();
+    _gitPollTimer = setInterval(_pollGit, GIT_POLL_INTERVAL_MS);
+
+    // Start terminal session if terminal panel is visible
+    if (_terminal && document.getElementById('cockpit-terminal-panel')?.classList.contains('panel--visible')) {
+      _terminal.startSession(window.__NEXUS_ROOT__ || '.');
+    }
+  }
+
+  function _onMessage(event) {
+    let msg;
+    try { msg = JSON.parse(event.data); }
+    catch { return; }
+
+    switch (msg.type) {
+      case 'pty_output':
+        _terminal?.handleOutput(msg.data);
+        break;
+
+      case 'pty_exit':
+        _terminal?.handleExit(msg.code);
+        break;
+
+      case 'git_status':
+        _gitWidget?.update(msg);
+        break;
+
+      case 'session_data':
+        if (msg.sessions && msg.sessions.length > 0) {
+          // Server sessions win over local if they have more entries
+          const local = _store.getAll();
+          if (msg.sessions.length >= local.length) {
+            _store.replaceAll(msg.sessions);
+          }
+        }
+        break;
+
+      case 'error':
+        console.warn('[cockpit] server error:', msg.message);
+        break;
+    }
+  }
+
+  function _onClose() {
+    _wsReady = false;
+    clearInterval(_gitPollTimer);
+    _rail?.updateAgentHealth({ ..._rail._agentHealth, pty: 'unknown' });
+    console.info('[cockpit] Disconnected from cockpit_pty.py. Will retry in 10s.');
+    setTimeout(_connect, 10000);
+  }
+
+  function _pollGit() {
+    if (_ws && _ws.readyState === WebSocket.OPEN) {
+      _ws.send(JSON.stringify({ type: 'git_status' }));
+    }
+  }
+
+  function _syncSessions() {
+    if (_ws && _ws.readyState === WebSocket.OPEN) {
+      _ws.send(JSON.stringify({ type: 'session_save', sessions: _store.getAll() }));
+    }
+  }
+
+  // ── Public API ──────────────────────────────────────────────────────────
+
+  function init() {
+    _store = new SessionStore();
+
+    // Git status widget
+    const gitEl = document.getElementById('cockpit-git-status');
+    _gitWidget = new GitStatusWidget(gitEl, _ws);
+
+    // Inspector rail
+    const railEl = document.getElementById('cockpit-inspector-rail');
+    _rail = new InspectorRail(railEl, _store, _gitWidget, _terminal);
+
+    // Terminal
+    const termEl = document.getElementById('cockpit-terminal-body');
+    _terminal = new CockpitTerminal(termEl, _ws);
+    _terminal.init().catch(console.error);
+
+    // Wire toggle buttons
+    const inspectorToggle = document.getElementById('cockpit-inspector-toggle');
+    inspectorToggle?.addEventListener('click', toggleInspector);
+
+    const terminalToggle = document.getElementById('cockpit-terminal-toggle');
+    terminalToggle?.addEventListener('click', toggleTerminal);
+
+    const terminalStart = document.getElementById('cockpit-terminal-start');
+    terminalStart?.addEventListener('click', () => {
+      if (_terminal) {
+        _terminal.ws = _ws;
+        _terminal.startSession('.');
+        _terminal.focus();
+      }
+    });
+
+    // Sync sessions to server on change
+    _store.onChange(_syncSessions);
+
+    // Connect to cockpit_pty.py
+    _connect();
+
+    // Reflect WS health immediately
+    _rail?.updateAgentHealth({
+      timmy: 'unknown',
+      ws: document.getElementById('ws-status-dot')?.classList.contains('connected') ? 'ok' : 'unknown',
+      pty: 'unknown',
+      bannerlord: 'unknown',
+    });
+
+    console.info('[cockpit] Initialized.');
+  }
+
+  function showInspector() {
+    const rail = document.getElementById('cockpit-inspector-rail');
+    if (rail) {
+      rail.classList.add('rail--visible');
+      _inspectorVisible = true;
+      document.getElementById('cockpit-inspector-toggle')?.classList.add('active');
+    }
+  }
+
+  function hideInspector() {
+    const rail = document.getElementById('cockpit-inspector-rail');
+    if (rail) {
+      rail.classList.remove('rail--visible');
+      _inspectorVisible = false;
+      document.getElementById('cockpit-inspector-toggle')?.classList.remove('active');
+    }
+  }
+
+  function toggleInspector() {
+    _inspectorVisible ? hideInspector() : showInspector();
+  }
+
+  function showTerminal() {
+    const panel = document.getElementById('cockpit-terminal-panel');
+    if (panel) {
+      panel.classList.add('panel--visible');
+      if (_terminal && _ws?.readyState === WebSocket.OPEN && !_terminal._started) {
+        _terminal.ws = _ws;
+        _terminal.startSession('.');
+      }
+      setTimeout(() => _terminal?.focus(), 100);
+    }
+  }
+
+  function hideTerminal() {
+    const panel = document.getElementById('cockpit-terminal-panel');
+    if (panel) panel.classList.remove('panel--visible');
+  }
+
+  function toggleTerminal() {
+    const panel = document.getElementById('cockpit-terminal-panel');
+    if (panel?.classList.contains('panel--visible')) hideTerminal();
+    else showTerminal();
+  }
+
+  function updateAgentHealth(health) {
+    _rail?.updateAgentHealth(health);
+  }
+
+  function addArtifact(name, type, ref) {
+    _rail?.addArtifact(name, type, ref);
+  }
+
+  function addMemoryRef(key, summary) {
+    _rail?.addMemoryRef(key, summary);
+  }
+
+  return { init, showInspector, hideInspector, toggleInspector, showTerminal, hideTerminal, toggleTerminal, updateAgentHealth, addArtifact, addMemoryRef };
+})();
+
+// Auto-init when DOM is ready
+if (document.readyState === 'loading') {
+  document.addEventListener('DOMContentLoaded', Cockpit.init);
+} else {
+  Cockpit.init();
+}
+
+// Expose globally for integration with app.js
+window.Cockpit = Cockpit;

cockpit_pty.py

@@ -0,0 +1,356 @@
+#!/usr/bin/env python3
+"""
+Nexus Cockpit PTY Server — Operator shell relay and git status.
+
+Exposes:
+  ws://127.0.0.1:8766        WebSocket for PTY sessions and git status polling
+
+Protocol (WebSocket messages, JSON):
+
+  Client -> Server:
+    {"type": "pty_resize", "cols": 80, "rows": 24}
+    {"type": "pty_input", "data": "<base64-encoded stdin>"}
+    {"type": "git_status"}
+    {"type": "session_save", "session": {...}}
+    {"type": "session_load"}
+
+  Server -> Client:
+    {"type": "pty_output", "data": "<base64-encoded stdout>"}
+    {"type": "pty_exit", "code": 0}
+    {"type": "git_status", "branch": "main", "dirty": false, "ahead": 0, "behind": 0, "staged": 0, "unstaged": 0, "untracked": 0}
+    {"type": "session_data", "sessions": [...]}
+    {"type": "error", "message": "..."}
+
+Security: binds to 127.0.0.1 only. Never expose externally.
+"""
+import asyncio
+import base64
+import json
+import logging
+import os
+import pty
+import select
+import signal
+import subprocess
+import sys
+import fcntl
+import termios
+import struct
+from pathlib import Path
+
+import websockets
+
+# Configuration
+HOST = "127.0.0.1"
+PORT = 8766
+NEXUS_ROOT = Path(__file__).parent
+SESSION_STORE_PATH = NEXUS_ROOT / ".cockpit_sessions.json"
+SHELL = os.environ.get("SHELL", "/bin/bash")
+
+logging.basicConfig(
+    level=logging.INFO,
+    format="%(asctime)s [cockpit-pty] %(levelname)s %(message)s",
+    datefmt="%Y-%m-%d %H:%M:%S",
+)
+logger = logging.getLogger("cockpit-pty")
+
+
+def get_git_status(cwd: Path) -> dict:
+    """Return git status summary for the given directory."""
+    result = {
+        "branch": "unknown",
+        "dirty": False,
+        "ahead": 0,
+        "behind": 0,
+        "staged": 0,
+        "unstaged": 0,
+        "untracked": 0,
+        "error": None,
+    }
+    try:
+        # Branch name
+        branch_out = subprocess.check_output(
+            ["git", "rev-parse", "--abbrev-ref", "HEAD"],
+            cwd=cwd, stderr=subprocess.DEVNULL, timeout=5
+        ).decode().strip()
+        result["branch"] = branch_out
+
+        # Porcelain status
+        status_out = subprocess.check_output(
+            ["git", "status", "--porcelain=v1", "-u"],
+            cwd=cwd, stderr=subprocess.DEVNULL, timeout=5
+        ).decode()
+
+        staged = 0
+        unstaged = 0
+        untracked = 0
+        for line in status_out.splitlines():
+            if len(line) < 2:
+                continue
+            x, y = line[0], line[1]
+            if x == "?" and y == "?":
+                untracked += 1
+            else:
+                if x != " " and x != "?":
+                    staged += 1
+                if y != " " and y != "?":
+                    unstaged += 1
+
+        result["staged"] = staged
+        result["unstaged"] = unstaged
+        result["untracked"] = untracked
+        result["dirty"] = (staged + unstaged + untracked) > 0
+
+        # Ahead/behind upstream
+        try:
+            rev_out = subprocess.check_output(
+                ["git", "rev-list", "--left-right", "--count", "@{upstream}...HEAD"],
+                cwd=cwd, stderr=subprocess.DEVNULL, timeout=5
+            ).decode().strip()
+            behind_str, ahead_str = rev_out.split()
+            result["ahead"] = int(ahead_str)
+            result["behind"] = int(behind_str)
+        except Exception:
+            pass  # No upstream — that's fine
+
+    except subprocess.CalledProcessError as e:
+        result["error"] = f"git error: {e}"
+    except FileNotFoundError:
+        result["error"] = "git not found"
+    except Exception as e:
+        result["error"] = str(e)
+
+    return result
+
+
+def load_sessions() -> list:
+    """Load sessions from the session store."""
+    if SESSION_STORE_PATH.exists():
+        try:
+            return json.loads(SESSION_STORE_PATH.read_text())
+        except Exception:
+            return []
+    return []
+
+
+def save_sessions(sessions: list) -> None:
+    """Persist sessions to disk."""
+    SESSION_STORE_PATH.write_text(json.dumps(sessions, indent=2))
+
+
+class PTYSession:
+    """Manages a single PTY subprocess."""
+
+    def __init__(self, cols: int = 80, rows: int = 24, cwd: str = None):
+        self.cols = cols
+        self.rows = rows
+        self.cwd = cwd or str(NEXUS_ROOT)
+        self.master_fd: int = None
+        self.pid: int = None
+        self._reader: asyncio.StreamReader = None
+        self._closed = False
+
+    def spawn(self):
+        """Fork a shell into a PTY."""
+        pid, master_fd = pty.fork()
+        if pid == 0:
+            # Child — exec the shell
+            os.chdir(self.cwd)
+            env = os.environ.copy()
+            env["TERM"] = "xterm-256color"
+            env["COLUMNS"] = str(self.cols)
+            env["LINES"] = str(self.rows)
+            os.execvpe(SHELL, [SHELL], env)
+        else:
+            self.pid = pid
+            self.master_fd = master_fd
+            self._resize(self.cols, self.rows)
+
+    def _resize(self, cols: int, rows: int):
+        self.cols = cols
+        self.rows = rows
+        if self.master_fd is not None:
+            try:
+                winsize = struct.pack("HHHH", rows, cols, 0, 0)
+                fcntl.ioctl(self.master_fd, termios.TIOCSWINSZ, winsize)
+            except OSError:
+                pass
+
+    def write_input(self, data: bytes):
+        """Write raw bytes to the PTY master (stdin of the shell)."""
+        if self.master_fd is not None:
+            try:
+                os.write(self.master_fd, data)
+            except OSError:
+                pass
+
+    def read_output(self, timeout: float = 0.02) -> bytes:
+        """Non-blocking read from PTY master (stdout of the shell)."""
+        if self.master_fd is None:
+            return b""
+        try:
+            r, _, _ = select.select([self.master_fd], [], [], timeout)
+            if r:
+                return os.read(self.master_fd, 4096)
+        except OSError:
+            pass
+        return b""
+
+    def close(self):
+        if self._closed:
+            return
+        self._closed = True
+        if self.pid:
+            try:
+                os.kill(self.pid, signal.SIGTERM)
+            except ProcessLookupError:
+                pass
+        if self.master_fd is not None:
+            try:
+                os.close(self.master_fd)
+            except OSError:
+                pass
+
+
+async def handle_client(websocket: websockets.WebSocketServerProtocol):
+    """Handle one browser connection: PTY relay + git status + session management."""
+    addr = websocket.remote_address
+    logger.info(f"Cockpit client connected from {addr}")
+
+    pty_session: PTYSession = None
+    pty_task: asyncio.Task = None
+
+    async def pty_output_loop():
+        """Read PTY output in a loop and forward to browser."""
+        loop = asyncio.get_event_loop()
+        while True:
+            if pty_session is None or pty_session._closed:
+                break
+            # Run blocking read in executor
+            data = await loop.run_in_executor(None, pty_session.read_output)
+            if data:
+                try:
+                    await websocket.send(json.dumps({
+                        "type": "pty_output",
+                        "data": base64.b64encode(data).decode(),
+                    }))
+                except websockets.exceptions.ConnectionClosed:
+                    break
+            else:
+                # Check if child has exited
+                if pty_session.pid:
+                    try:
+                        result = os.waitpid(pty_session.pid, os.WNOHANG)
+                        if result[0] != 0:
+                            code = result[1] >> 8
+                            try:
+                                await websocket.send(json.dumps({
+                                    "type": "pty_exit",
+                                    "code": code,
+                                }))
+                            except Exception:
+                                pass
+                            break
+                    except ChildProcessError:
+                        break
+                await asyncio.sleep(0.01)
+
+    try:
+        async for raw_msg in websocket:
+            try:
+                msg = json.loads(raw_msg)
+            except json.JSONDecodeError:
+                await websocket.send(json.dumps({"type": "error", "message": "Invalid JSON"}))
+                continue
+
+            msg_type = msg.get("type")
+
+            if msg_type == "pty_start":
+                cols = int(msg.get("cols", 80))
+                rows = int(msg.get("rows", 24))
+                cwd = msg.get("cwd", str(NEXUS_ROOT))
+                if pty_session:
+                    pty_session.close()
+                    if pty_task:
+                        pty_task.cancel()
+                pty_session = PTYSession(cols=cols, rows=rows, cwd=cwd)
+                loop = asyncio.get_event_loop()
+                await loop.run_in_executor(None, pty_session.spawn)
+                pty_task = asyncio.create_task(pty_output_loop())
+                logger.info(f"PTY session started: pid={pty_session.pid} cols={cols} rows={rows}")
+
+            elif msg_type == "pty_input":
+                if pty_session:
+                    raw = base64.b64decode(msg.get("data", ""))
+                    loop = asyncio.get_event_loop()
+                    await loop.run_in_executor(None, pty_session.write_input, raw)
+
+            elif msg_type == "pty_resize":
+                if pty_session:
+                    cols = int(msg.get("cols", 80))
+                    rows = int(msg.get("rows", 24))
+                    pty_session._resize(cols, rows)
+
+            elif msg_type == "git_status":
+                status = await asyncio.get_event_loop().run_in_executor(
+                    None, get_git_status, NEXUS_ROOT
+                )
+                status["type"] = "git_status"
+                await websocket.send(json.dumps(status))
+
+            elif msg_type == "session_save":
+                sessions = msg.get("sessions", [])
+                await asyncio.get_event_loop().run_in_executor(
+                    None, save_sessions, sessions
+                )
+                await websocket.send(json.dumps({"type": "session_saved", "count": len(sessions)}))
+
+            elif msg_type == "session_load":
+                sessions = await asyncio.get_event_loop().run_in_executor(
+                    None, load_sessions
+                )
+                await websocket.send(json.dumps({"type": "session_data", "sessions": sessions}))
+
+            else:
+                await websocket.send(json.dumps({"type": "error", "message": f"Unknown type: {msg_type}"}))
+
+    except websockets.exceptions.ConnectionClosed:
+        logger.info(f"Cockpit client disconnected {addr}")
+    except Exception as e:
+        logger.error(f"Cockpit handler error for {addr}: {e}")
+    finally:
+        if pty_task:
+            pty_task.cancel()
+        if pty_session:
+            pty_session.close()
+        logger.info(f"Cockpit session cleaned up for {addr}")
+
+
+async def main():
+    logger.info(f"Starting Nexus Cockpit PTY server on ws://{HOST}:{PORT}")
+    logger.info(f"Shell: {SHELL}")
+    logger.info(f"Nexus root: {NEXUS_ROOT}")
+    logger.info(f"Session store: {SESSION_STORE_PATH}")
+
+    stop = asyncio.get_event_loop().create_future()
+
+    def shutdown():
+        if not stop.done():
+            stop.set_result(None)
+
+    loop = asyncio.get_event_loop()
+    for sig in (signal.SIGINT, signal.SIGTERM):
+        try:
+            loop.add_signal_handler(sig, shutdown)
+        except NotImplementedError:
+            pass
+
+    async with websockets.serve(handle_client, HOST, PORT):
+        logger.info("Cockpit PTY server ready.")
+        await stop
+
+    logger.info("Cockpit PTY server shutdown complete.")
+
+
+if __name__ == "__main__":
+    asyncio.run(main())

docs/ADR-cockpit-shell-boundary.md

@@ -0,0 +1,88 @@
+# ADR-001: Cockpit Shell Boundary and Transport Model
+
+**Date:** 2026-04-22
+**Status:** Accepted
+
+---
+
+## Context
+
+The Nexus operator cockpit requires a real shell/terminal accessible from the browser UI. The cockpit is a local-first operator tool for managing and observing Timmy, an AI agent running on the operator's machine. The existing Nexus infrastructure consists of:
+
+- `server.py` — Python WebSocket bridge on `ws://127.0.0.1:8765` serving as the main nexus broadcast bus (agent telemetry, portal state, heartbeat)
+- `app.js` + `index.html` — Three.js frontend rendering the 3D world and operator HUD
+
+A shell terminal in the cockpit would let the operator issue commands, tail logs, and interact with Timmy's runtime without leaving the browser UI.
+
+### Options Considered
+
+**Option 1: Native/local PTY via Python `pty` module**
+Spawn a local shell process (e.g. `bash` or `zsh`) using Python's stdlib `pty` module. Stream PTY I/O over a dedicated WebSocket. Render in the browser with xterm.js.
+
+**Option 2: Remote SSH PTY**
+SSH from a backend process into localhost (or a remote host) and relay the SSH PTY stream over WebSocket.
+
+**Option 3: Browser-only pseudo-terminal**
+Implement a fake shell in JavaScript with no real process backing it — command parsing and output simulation only.
+
+---
+
+## Decision
+
+**Adopt Option 1: Native/local PTY via Python `pty` module, rendered with xterm.js over a dedicated WebSocket at `ws://127.0.0.1:8766`.**
+
+The PTY server (`cockpit_pty.py`) runs as a sidecar alongside `server.py`. It is intentionally kept on a separate port (8766) to avoid coupling shell I/O to the main nexus broadcast bus (8765). The browser-side terminal is rendered with xterm.js, loaded from CDN.
+
+### Rationale
+
+- **Local-first architecture match.** Nexus is explicitly a local-first tool. The operator is always on the same machine as the agent. There is no need for remote shell infrastructure.
+- **Zero external dependencies for the backend.** Python's `pty` module is part of the standard library. No third-party process manager, SSH daemon, or shell relay binary is required.
+- **Separation of concerns.** Keeping shell I/O on a dedicated WebSocket (8766) prevents noisy PTY data from polluting the telemetry/broadcast bus (8765). Each WebSocket has a single clear responsibility.
+- **xterm.js is the canonical browser terminal renderer.** It handles ANSI escape sequences, resize events, and scrollback correctly. Loading from CDN is appropriate for a local operator tool with no offline-first requirement for the terminal component specifically.
+- **Precedent from Atlas UI sources.** The terminal panel split-view pattern was mined from `dodo-reach/hermes-desktop`, which demonstrated that xterm.js + WebSocket relay is a proven, low-friction approach for agent management UIs.
+
+---
+
+## Consequences
+
+### Positive
+
+- Real shell access from the browser cockpit with minimal infrastructure.
+- The PTY is a genuine OS-level shell; any CLI tool available on the operator's machine works as expected.
+- The main nexus bus remains clean and single-purpose.
+- xterm.js handles terminal emulation correctly without bespoke ANSI parsing code.
+
+### Negative / Constraints
+
+- A second server process (`cockpit_pty.py`) must be started alongside `server.py`. Operators running Nexus locally must start both, or a launcher script must manage both processes.
+- The shell terminal is **only accessible when running locally.** This is intentional — the cockpit is a local operator tool, not a remote management surface. No remote access is provided by design.
+- xterm.js is loaded from CDN. If the operator has no internet access at startup, the terminal panel will not render. (This is acceptable given the local-first context; the 3D world and agent telemetry do not depend on xterm.js.)
+- `cockpit_pty.py` is a trusted-localhost-only server. It must not be exposed beyond `127.0.0.1`. No auth is implemented; the local-only bind address is the security boundary.
+
+---
+
+## Rejected Alternatives
+
+### Option 2: SSH PTY
+
+Rejected. SSH introduces key management overhead (keygen, authorized_keys, known_hosts) that is entirely unnecessary for a local-only tool. Connecting to localhost via SSH to relay a PTY that is already local adds latency and complexity with no benefit. Python `pty` does the same job from a single stdlib import.
+
+### Option 3: Browser-only pseudo-terminal
+
+Rejected. A fake shell with no real process backing it does not provide genuine shell access. The operator cockpit requires the ability to run real commands — tail logs, inspect files, restart processes — not a simulated command interface.
+
+### ttyd / wetty
+
+Rejected. Both are capable tools, but they are heavy external dependencies (Go binary, Node.js process) for a problem that Python's stdlib `pty` module solves directly. Introducing an external binary creates installation friction and diverges from the "minimal sidecar" model appropriate for a local operator tool.
+
+---
+
+## References
+
+- `server.py` — main nexus WebSocket bridge (port 8765)
+- `cockpit_pty.py` — PTY sidecar (port 8766, to be implemented)
+- Atlas UI sources mined during cockpit design:
+  - `dodo-reach/hermes-desktop` — terminal panel UX and xterm.js integration pattern
+  - `outsourc-e/hermes-workspace` — inspector rail layout
+  - `nesquena/hermes-webui` — session taxonomy primitives
+- `ATLAS_COCKPIT_PATTERNS.md` — detailed record of adopted, adapted, and rejected patterns from the above sources

docs/ATLAS_COCKPIT_PATTERNS.md

@@ -0,0 +1,129 @@
+# ATLAS_COCKPIT_PATTERNS.md
+
+## Nexus Operator Cockpit — Atlas UI Pattern Audit
+
+This document catalogs which UI/UX patterns were adopted, adapted, or rejected from three Atlas source repositories when designing the Nexus operator cockpit. The Nexus cockpit is a browser-based operator terminal for managing and observing Timmy, a local-first AI agent. Its architecture is documented in `ADR-cockpit-shell-boundary.md`.
+
+---
+
+## Source Repositories
+
+| Repo | Description |
+|---|---|
+| `dodo-reach/hermes-desktop` | Desktop Electron app for Hermes agent management |
+| `outsourc-e/hermes-workspace` | Workspace management UI with inspector rails |
+| `nesquena/hermes-webui` | Web UI for Hermes with session management |
+
+---
+
+## dodo-reach/hermes-desktop
+
+### What Was Audited
+
+- Terminal panel implementation (xterm.js integration, shell spawning via Electron IPC)
+- Agent status indicator components in the sidebar
+- Split-view panel layout (terminal pane + agent detail pane)
+- Native OS notification hooks
+- Electron main/renderer IPC patterns for shell relay
+
+### Adopted
+
+**Terminal panel split-view layout**
+The resizable split-panel layout pairing a terminal pane with a detail/inspector pane was adopted directly. Nexus uses the same conceptual arrangement: xterm.js fills one panel, agent telemetry fills the adjacent panel. The resize handle behavior and panel persistence are modeled on hermes-desktop's approach. The underlying mechanism differs (WebSocket PTY vs. Electron IPC) but the visual model is the same.
+
+**Agent status indicators in the inspector rail**
+The health dot + status label pattern — a colored dot (green/amber/red) paired with a short text label — was adopted for Nexus's agent status display. hermes-desktop demonstrated this as a scannable, low-noise way to convey agent health at a glance without requiring the operator to parse log output.
+
+### Adapted
+
+_(none — the above adoptions were clean lifts; hermes-desktop patterns that didn't fit Nexus were rejected rather than adapted)_
+
+### Rejected
+
+**Electron-specific IPC for shell access**
+hermes-desktop uses Electron's `ipcMain`/`ipcRenderer` bridge to relay PTY I/O between the Node.js main process and the browser renderer. This is Electron-specific infrastructure. Nexus runs in a plain browser, not Electron. The PTY relay is instead handled by `cockpit_pty.py` over WebSocket (see ADR-001). The outcome is the same; the transport is different.
+
+**Native OS notifications**
+hermes-desktop hooks into the OS notification system (via Electron's `Notification` API) to surface agent events when the window is backgrounded. Nexus does not use this. The cockpit is a focused local operator tool; the operator is expected to be watching the UI. Backgrounded notifications add complexity without a clear benefit in the Nexus usage model.
+
+---
+
+## outsourc-e/hermes-workspace
+
+### What Was Audited
+
+- Inspector right rail with tabbed section navigation
+- Git status badge and repository state display
+- Multi-workspace switcher and workspace metadata
+- Cloud sync hooks and session persistence model
+- File browser panel integration
+
+### Adapted
+
+**Inspector right rail with tabbed sections**
+hermes-workspace uses a right inspector rail with six tabs (Overview, Files, Git, Environment, Connections, Settings). This was adapted for Nexus: simplified to four tabs — SESSION, FILES, MEMORY, AGENT — reflecting that Nexus is 3D-world-first, not workspace-first. Tabs specific to multi-workspace management and cloud connections were removed. The tab rail layout itself (fixed-width right panel, icon + label tabs, scrollable tab body) is retained.
+
+**Git status badge**
+hermes-workspace renders a full inline diff view in the Git tab, including staged/unstaged file lists and diff hunks. This was adapted for Nexus: the git state display is reduced to a branch name + dirty flag indicator (`main *` or `main`). The Nexus cockpit is not a git client; operators who need full diff inspection use their normal tools. The branch/dirty indicator is sufficient for the cockpit context.
+
+### Rejected
+
+**Cloud sync for sessions**
+hermes-workspace syncs session state to a remote store. Nexus is local-first by design. Session state lives on disk locally. No cloud sync infrastructure is introduced.
+
+**Multi-workspace concept**
+hermes-workspace is built around switching between multiple named workspaces. Nexus has a single sovereign workspace: the local Nexus installation. The workspace switcher, workspace metadata, and associated navigation are not applicable.
+
+---
+
+## nesquena/hermes-webui
+
+### What Was Audited
+
+- Session list sidebar and session lifecycle management
+- Session taxonomy model (grouping, tagging, pinning, archiving)
+- OAuth login flow and user account management
+- User account switcher and multi-user session isolation
+
+### Adopted
+
+**Session taxonomy model**
+hermes-webui treats group, tag, pin, and archive as first-class session primitives with explicit UI affordances for each. This taxonomy was adopted for the Nexus session list. Sessions (Timmy interaction threads) can be grouped by context, tagged with free-form labels, pinned to the top of the list, and archived out of the active view. The four-primitive model maps cleanly to the Nexus usage pattern without modification.
+
+**Session list sidebar pattern**
+The session list sidebar layout — fixed-width left panel, chronological session list with inline metadata (last active, tag chips, pin indicator), and a new-session affordance at the top — was adopted. hermes-webui demonstrated this as an effective pattern for navigating a growing list of agent sessions. Nexus uses the same structural layout.
+
+### Rejected
+
+**OAuth / login flow**
+hermes-webui implements a full OAuth login flow (provider selection, token exchange, session persistence tied to user identity). Nexus is a single-operator local tool. There is no authentication layer. The operator is the machine owner; the local-only bind addresses on `server.py` and `cockpit_pty.py` are the security boundary. No login flow is implemented or needed.
+
+**User accounts and multi-user session isolation**
+hermes-webui supports multiple user accounts with isolated session namespaces. Nexus operates under a single-operator model. Session ownership, user switching, and per-user isolation are not applicable concepts. All sessions belong to the local operator.
+
+---
+
+## Summary Table
+
+| Pattern | Source | Decision | Notes |
+|---|---|---|---|
+| Terminal panel split-view layout | hermes-desktop | Adopted | xterm.js + resizable split panel |
+| Agent status health dot + label | hermes-desktop | Adopted | In inspector rail |
+| Electron IPC for shell relay | hermes-desktop | Rejected | Nexus uses WebSocket PTY |
+| Native OS notifications | hermes-desktop | Rejected | Not needed for local cockpit |
+| Inspector right rail (tabbed) | hermes-workspace | Adapted | 6 tabs → 4 (SESSION, FILES, MEMORY, AGENT) |
+| Git status display | hermes-workspace | Adapted | Full diff → branch + dirty flag only |
+| Cloud sync for sessions | hermes-workspace | Rejected | Local-first only |
+| Multi-workspace switcher | hermes-workspace | Rejected | Single sovereign workspace |
+| Session taxonomy (group/tag/pin/archive) | hermes-webui | Adopted | Direct lift |
+| Session list sidebar | hermes-webui | Adopted | Direct lift |
+| OAuth / login flow | hermes-webui | Rejected | No auth needed; local-only tool |
+| User accounts / multi-user isolation | hermes-webui | Rejected | Single-operator model |
+
+---
+
+## See Also
+
+- `ADR-cockpit-shell-boundary.md` — transport and shell boundary decision
+- `server.py` — main nexus WebSocket bridge (port 8765)
+- `cockpit_pty.py` — PTY sidecar (port 8766)

index.html

@@ -23,6 +23,7 @@
 <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
 <link href="https://fonts.googleapis.com/css2?family=JetBrains+Mono:wght@300;400;500;600;700&family=Orbitron:wght@400;500;600;700;800;900&display=swap" rel="stylesheet">
 <link rel="stylesheet" href="./style.css">
+<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/xterm@5.3.0/css/xterm.css">
 <link rel="manifest" href="./manifest.json">
 <script type="importmap">
 {
@@ -165,6 +166,18 @@
 
   <!-- Top Right: Agent Log, Atlas & SOUL Toggle -->
   <div class="hud-top-right">
+    <!-- Cockpit toolbar: git status + inspector + terminal toggles -->
+    <div class="cockpit-toolbar">
+      <div id="cockpit-git-status" title="Git workspace status"></div>
+      <button id="cockpit-inspector-toggle" class="cockpit-icon-btn" title="Toggle operator inspector rail">
+        <span>⊞</span>
+        <span>INSPECT</span>
+      </button>
+      <button id="cockpit-terminal-toggle" class="cockpit-icon-btn" title="Toggle operator terminal">
+        <span>⌨</span>
+        <span>SHELL</span>
+      </button>
+    </div>
     <button id="atlas-toggle-btn" class="hud-icon-btn" title="World Directory">
     <button id="soul-toggle-btn" class="hud-icon-btn" title="Timmy's SOUL">
       <span class="hud-icon">✦</span>
@@ -394,7 +407,35 @@
 <div id="memory-inspect-panel" class="memory-inspect-panel" style="display:none;" aria-label="Memory Inspect Panel"></div>
 <div id="memory-connections-panel" class="memory-connections-panel" style="display:none;" aria-label="Memory Connections Panel"></div>
 
+<!-- ══════════════════════════════════════════════════════════════
+     COCKPIT — Operator Inspector Rail (issue #1695)
+     Pattern sources: dodo-reach/hermes-desktop, outsourc-e/hermes-workspace,
+                      nesquena/hermes-webui
+     See: docs/ATLAS_COCKPIT_PATTERNS.md, docs/ADR-cockpit-shell-boundary.md
+     ══════════════════════════════════════════════════════════════ -->
+
+<!-- Inspector / Right Rail -->
+<div id="cockpit-inspector-rail" aria-label="Operator Inspector Rail" role="complementary"></div>
+
+<!-- Terminal Panel (slide-up from bottom) -->
+<div id="cockpit-terminal-panel" aria-label="Operator Shell Terminal">
+  <div class="terminal-panel-header">
+    <span class="terminal-panel-title">⌨ OPERATOR SHELL — native PTY via cockpit_pty.py</span>
+    <button id="cockpit-terminal-start" class="terminal-panel-btn" title="Start shell session">▶ Start</button>
+    <button class="terminal-panel-close" onclick="Cockpit.hideTerminal()" title="Close terminal" aria-label="Close terminal">✕</button>
+  </div>
+  <div id="cockpit-terminal-body"></div>
+</div>
+
+<!-- xterm.js + FitAddon (CDN, local-first — no npm required) -->
+<script src="https://cdn.jsdelivr.net/npm/xterm@5.3.0/lib/xterm.js"></script>
+<script src="https://cdn.jsdelivr.net/npm/xterm-addon-fit@0.8.0/lib/xterm-addon-fit.js"></script>
+
 <script src="./boot.js"></script>
+<script src="./cockpit.js"></script>
+<script src="./avatar-customization.js"></script>
+<script src="./lod-system.js"></script>
+<script src="./portal-hot-reload.js"></script>
 <script>
 function openMemoryFilter() { renderFilterList(); document.getElementById('memory-filter').style.display = 'flex'; }
 function closeMemoryFilter() { document.getElementById('memory-filter').style.display = 'none'; }

lod-system.js

@@ -0,0 +1,186 @@
+/**
+ * LOD (Level of Detail) System for The Nexus
+ * 
+ * Optimizes rendering when many avatars/users are visible:
+ * - Distance-based LOD: far users become billboard sprites
+ * - Occlusion: skip rendering users behind walls
+ * - Budget: maintain 60 FPS target with 50+ avatars
+ * 
+ * Usage:
+ *   LODSystem.init(scene, camera);
+ *   LODSystem.registerAvatar(avatarMesh, userId);
+ *   LODSystem.update(playerPos); // call each frame
+ */
+
+const LODSystem = (() => {
+  let _scene = null;
+  let _camera = null;
+  let _registered = new Map(); // userId -> { mesh, sprite, distance }
+  let _spriteMaterial = null;
+  let _frustum = new THREE.Frustum();
+  let _projScreenMatrix = new THREE.Matrix4();
+
+  // Thresholds
+  const LOD_NEAR = 15;      // Full mesh within 15 units
+  const LOD_FAR = 40;       // Billboard beyond 40 units
+  const LOD_CULL = 80;      // Don't render beyond 80 units
+  const SPRITE_SIZE = 1.2;
+
+  function init(sceneRef, cameraRef) {
+    _scene = sceneRef;
+    _camera = cameraRef;
+
+    // Create shared sprite material
+    const canvas = document.createElement('canvas');
+    canvas.width = 64;
+    canvas.height = 64;
+    const ctx = canvas.getContext('2d');
+    // Simple avatar indicator: colored circle
+    ctx.fillStyle = '#00ffcc';
+    ctx.beginPath();
+    ctx.arc(32, 32, 20, 0, Math.PI * 2);
+    ctx.fill();
+    ctx.fillStyle = '#0a0f1a';
+    ctx.beginPath();
+    ctx.arc(32, 28, 8, 0, Math.PI * 2); // head
+    ctx.fill();
+
+    const texture = new THREE.CanvasTexture(canvas);
+    _spriteMaterial = new THREE.SpriteMaterial({
+      map: texture,
+      transparent: true,
+      depthTest: true,
+      sizeAttenuation: true,
+    });
+
+    console.log('[LODSystem] Initialized');
+  }
+
+  function registerAvatar(avatarMesh, userId, color) {
+    // Create billboard sprite for this avatar
+    const spriteMat = _spriteMaterial.clone();
+    if (color) {
+      // Tint sprite to match avatar color
+      const canvas = document.createElement('canvas');
+      canvas.width = 64;
+      canvas.height = 64;
+      const ctx = canvas.getContext('2d');
+      ctx.fillStyle = color;
+      ctx.beginPath();
+      ctx.arc(32, 32, 20, 0, Math.PI * 2);
+      ctx.fill();
+      ctx.fillStyle = '#0a0f1a';
+      ctx.beginPath();
+      ctx.arc(32, 28, 8, 0, Math.PI * 2);
+      ctx.fill();
+      spriteMat.map = new THREE.CanvasTexture(canvas);
+      spriteMat.map.needsUpdate = true;
+    }
+
+    const sprite = new THREE.Sprite(spriteMat);
+    sprite.scale.set(SPRITE_SIZE, SPRITE_SIZE, 1);
+    sprite.visible = false;
+    _scene.add(sprite);
+
+    _registered.set(userId, {
+      mesh: avatarMesh,
+      sprite: sprite,
+      distance: Infinity,
+    });
+  }
+
+  function unregisterAvatar(userId) {
+    const entry = _registered.get(userId);
+    if (entry) {
+      _scene.remove(entry.sprite);
+      entry.sprite.material.dispose();
+      _registered.delete(userId);
+    }
+  }
+
+  function setSpriteColor(userId, color) {
+    const entry = _registered.get(userId);
+    if (!entry) return;
+    const canvas = document.createElement('canvas');
+    canvas.width = 64;
+    canvas.height = 64;
+    const ctx = canvas.getContext('2d');
+    ctx.fillStyle = color;
+    ctx.beginPath();
+    ctx.arc(32, 32, 20, 0, Math.PI * 2);
+    ctx.fill();
+    ctx.fillStyle = '#0a0f1a';
+    ctx.beginPath();
+    ctx.arc(32, 28, 8, 0, Math.PI * 2);
+    ctx.fill();
+    entry.sprite.material.map = new THREE.CanvasTexture(canvas);
+    entry.sprite.material.map.needsUpdate = true;
+  }
+
+  function update(playerPos) {
+    if (!_camera) return;
+
+    // Update frustum for culling
+    _projScreenMatrix.multiplyMatrices(
+      _camera.projectionMatrix,
+      _camera.matrixWorldInverse
+    );
+    _frustum.setFromProjectionMatrix(_projScreenMatrix);
+
+    _registered.forEach((entry, userId) => {
+      if (!entry.mesh) return;
+
+      const meshPos = entry.mesh.position;
+      const distance = playerPos.distanceTo(meshPos);
+      entry.distance = distance;
+
+      // Beyond cull distance: hide everything
+      if (distance > LOD_CULL) {
+        entry.mesh.visible = false;
+        entry.sprite.visible = false;
+        return;
+      }
+
+      // Check if in camera frustum
+      const inFrustum = _frustum.containsPoint(meshPos);
+      if (!inFrustum) {
+        entry.mesh.visible = false;
+        entry.sprite.visible = false;
+        return;
+      }
+
+      // LOD switching
+      if (distance <= LOD_NEAR) {
+        // Near: full mesh
+        entry.mesh.visible = true;
+        entry.sprite.visible = false;
+      } else if (distance <= LOD_FAR) {
+        // Mid: mesh with reduced detail (keep mesh visible)
+        entry.mesh.visible = true;
+        entry.sprite.visible = false;
+      } else {
+        // Far: billboard sprite
+        entry.mesh.visible = false;
+        entry.sprite.visible = true;
+        entry.sprite.position.copy(meshPos);
+        entry.sprite.position.y += 1.2; // above avatar center
+      }
+    });
+  }
+
+  function getStats() {
+    let meshCount = 0;
+    let spriteCount = 0;
+    let culledCount = 0;
+    _registered.forEach(entry => {
+      if (entry.mesh.visible) meshCount++;
+      else if (entry.sprite.visible) spriteCount++;
+      else culledCount++;
+    });
+    return { total: _registered.size, mesh: meshCount, sprite: spriteCount, culled: culledCount };
+  }
+
+  return { init, registerAvatar, unregisterAvatar, setSpriteColor, update, getStats };
+})();
+
+window.LODSystem = LODSystem;

mempalace/rooms.yaml

@@ -62,6 +62,15 @@ core_rooms:
       - proof-of-concept code snippets
       - benchmark data
 
+  - key: sovereign
+    label: Sovereign
+    purpose: Artifacts of Alexander Whitestone's requests, directives, and wizard responses
+    examples:
+      - dated request/response artifacts
+      - conversation summaries with speaker tags
+      - directive ledgers
+      - response follow-through notes
+
 optional_rooms:
   - key: evennia
     label: Evennia
@@ -98,15 +107,6 @@ optional_rooms:
     purpose: Catch-all for artefacts not yet assigned to a named room
     wizards: ["*"]
 
-  - key: sovereign
-    label: Sovereign
-    purpose: Artifacts of Alexander Whitestone's requests, directives, and conversation history
-    wizards: ["*"]
-    conventions:
-      naming: "YYYY-MM-DD_HHMMSS_<topic>.md"
-      index: "INDEX.md"
-      description: "Each artifact is a dated record of a request from Alexander and the wizard's response. The running INDEX.md provides a chronological catalog."
-
 # Tunnel routing table
 # Defines which room pairs are connected across wizard wings.
 # A tunnel lets `recall <query> --fleet` search both wings at once.

nexus/__init__.py

@@ -14,6 +14,7 @@ from nexus.perception_adapter import (
 )
 from nexus.experience_store import ExperienceStore
 from nexus.trajectory_logger import TrajectoryLogger
+from nexus.chronicle import ChronicleWriter, AgentEvent, EventKind
 
 try:
     from nexus.nexus_think import NexusMind
@@ -29,4 +30,7 @@ __all__ = [
     "ExperienceStore",
     "TrajectoryLogger",
     "NexusMind",
+    "ChronicleWriter",
+    "AgentEvent",
+    "EventKind",
 ]

nexus/bannerlord_harness.py

@@ -29,7 +29,7 @@ from typing import Any, Callable, Optional
 
 import websockets
 
-from bannerlord_trace import BannerlordTraceLogger
+from nexus.bannerlord_trace import BannerlordTraceLogger
 
 # ═══════════════════════════════════════════════════════════════════════════
 # CONFIGURATION

nexus/chronicle.py

@@ -0,0 +1,387 @@
+"""
+Nexus Chronicle — Emergent Narrative from Agent Interactions
+
+Watches the fleet's activity (dispatches, errors, recoveries,
+collaborations) and transforms raw event data into narrative prose.
+The system finds the dramatic arc in real work and produces a living
+chronicle. The story writes itself from the data.
+
+Usage:
+    from nexus.chronicle import ChronicleWriter, AgentEvent, EventKind
+
+    writer = ChronicleWriter()
+
+    writer.ingest(AgentEvent(kind=EventKind.DISPATCH, agent="claude", detail="took issue #42"))
+    writer.ingest(AgentEvent(kind=EventKind.ERROR, agent="claude", detail="rate limit hit"))
+    writer.ingest(AgentEvent(kind=EventKind.RECOVERY, agent="claude", detail="retried after backoff"))
+    writer.ingest(AgentEvent(kind=EventKind.COMMIT, agent="claude", detail="feat: add narrative engine"))
+
+    prose = writer.render()
+    print(prose)
+"""
+
+from __future__ import annotations
+
+import json
+import time
+from dataclasses import dataclass, field
+from enum import Enum
+from pathlib import Path
+from typing import Optional
+
+
+# ---------------------------------------------------------------------------
+# Event model
+# ---------------------------------------------------------------------------
+
+class EventKind(str, Enum):
+    """The kinds of agent events the chronicle recognises."""
+
+    DISPATCH = "dispatch"         # agent claimed / was assigned work
+    COMMIT = "commit"             # agent produced a commit
+    PUSH = "push"                 # agent pushed a branch
+    PR_OPEN = "pr_open"           # agent opened a pull request
+    PR_MERGE = "pr_merge"         # PR was merged
+    ERROR = "error"               # agent hit an error / exception
+    RECOVERY = "recovery"         # agent recovered from a failure
+    ABANDON = "abandon"           # agent abandoned a task (timeout / giving up)
+    COLLABORATION = "collab"      # two agents worked on the same thing
+    HEARTBEAT = "heartbeat"       # agent reported a heartbeat (alive signal)
+    IDLE = "idle"                 # agent is waiting for work
+    MILESTONE = "milestone"       # notable achievement (e.g. 100th issue closed)
+
+
+@dataclass
+class AgentEvent:
+    """One discrete thing that happened in the fleet."""
+
+    kind: EventKind
+    agent: str                          # who did this (e.g. "claude", "mimo-v2-pro")
+    detail: str = ""                    # free-text description
+    timestamp: float = field(default_factory=time.time)
+    metadata: dict = field(default_factory=dict)
+
+    def to_dict(self) -> dict:
+        return {
+            "kind": self.kind.value,
+            "agent": self.agent,
+            "detail": self.detail,
+            "timestamp": self.timestamp,
+            "metadata": self.metadata,
+        }
+
+    @classmethod
+    def from_dict(cls, data: dict) -> "AgentEvent":
+        return cls(
+            kind=EventKind(data["kind"]),
+            agent=data["agent"],
+            detail=data.get("detail", ""),
+            timestamp=data.get("timestamp", time.time()),
+            metadata=data.get("metadata", {}),
+        )
+
+
+# ---------------------------------------------------------------------------
+# Narrative templates — maps event kinds to prose fragments
+# ---------------------------------------------------------------------------
+
+# Each entry is a list so we can rotate through variants.
+_TEMPLATES: dict[EventKind, list[str]] = {
+    EventKind.DISPATCH: [
+        "{agent} stepped forward and claimed the work: {detail}.",
+        "{agent} took on the challenge — {detail}.",
+        "The task landed on {agent}'s desk: {detail}.",
+    ],
+    EventKind.COMMIT: [
+        '{agent} sealed a commit into the record: "{detail}".',
+        '{agent} committed "{detail}" — progress crystallised.',
+        "{agent} carved a new ring into the trunk: {detail}.",
+    ],
+    EventKind.PUSH: [
+        "{agent} pushed the work upstream.",
+        "The branch rose into the forge — {agent}'s changes were live.",
+        "{agent} sent their work into the wider current.",
+    ],
+    EventKind.PR_OPEN: [
+        "{agent} opened a pull request: {detail}.",
+        "A proposal surfaced — {agent} asked the fleet to review {detail}.",
+        "{agent} laid their work before the reviewers: {detail}.",
+    ],
+    EventKind.PR_MERGE: [
+        "{agent}'s branch folded into the whole: {detail}.",
+        "Consensus reached — {agent}'s changes were merged: {detail}.",
+        "{detail} joined the canon. {agent}'s contribution lives on.",
+    ],
+    EventKind.ERROR: [
+        "{agent} ran into an obstacle: {detail}.",
+        "Trouble. {agent} encountered {detail} and had to pause.",
+        "The path grew difficult — {agent} hit {detail}.",
+    ],
+    EventKind.RECOVERY: [
+        "{agent} regrouped and pressed on: {detail}.",
+        "After the setback, {agent} found a way through: {detail}.",
+        "{agent} recovered — {detail}.",
+    ],
+    EventKind.ABANDON: [
+        "{agent} released the task, unable to finish: {detail}.",
+        "Sometimes wisdom is knowing when to let go. {agent} abandoned {detail}.",
+        "{agent} stepped back from {detail}. Another will carry it forward.",
+    ],
+    EventKind.COLLABORATION: [
+        "{agent} and their peers converged on the same problem: {detail}.",
+        "Two minds touched the same work — {agent} in collaboration: {detail}.",
+        "The fleet coordinated — {agent} joined the effort on {detail}.",
+    ],
+    EventKind.HEARTBEAT: [
+        "{agent} checked in — still thinking, still present.",
+        "A pulse from {agent}: the mind is alive.",
+        "{agent} breathed through another cycle.",
+    ],
+    EventKind.IDLE: [
+        "{agent} rested, waiting for the next call.",
+        "Quiet descended — {agent} held still between tasks.",
+        "{agent} stood ready, watchful in the lull.",
+    ],
+    EventKind.MILESTONE: [
+        "A moment worth noting — {agent}: {detail}.",
+        "The chronicle marks a milestone. {agent}: {detail}.",
+        "History ticked over — {agent} reached {detail}.",
+    ],
+}
+
+# Arc-level commentary triggered by sequences of events
+_ARC_TEMPLATES = {
+    "struggle_and_recovery": (
+        "There was a struggle here. {agent} hit trouble and came back stronger — "
+        "the kind of arc that gives a chronicle its texture."
+    ),
+    "silent_grind": (
+        "No drama, just steady work. {agents} moved through the backlog with quiet persistence."
+    ),
+    "abandon_then_retry": (
+        "{agent} let go once. But the work called again, and this time it was answered."
+    ),
+    "solo_sprint": (
+        "{agent} ran the whole arc alone — dispatch to merge — without breaking stride."
+    ),
+    "fleet_convergence": (
+        "The fleet converged. Multiple agents touched the same thread and wove it tighter."
+    ),
+}
+
+
+# ---------------------------------------------------------------------------
+# Chronicle writer
+# ---------------------------------------------------------------------------
+
+class ChronicleWriter:
+    """Accumulates agent events and renders them as narrative prose.
+
+    The writer keeps a running log of events.  Call ``ingest()`` to add new
+    events as they arrive, then ``render()`` to produce a prose snapshot of
+    the current arc.
+
+    Events are also persisted to JSONL so the chronicle survives restarts.
+    """
+
+    def __init__(self, log_path: Optional[Path] = None):
+        today = time.strftime("%Y-%m-%d")
+        self.log_path = log_path or (
+            Path.home() / ".nexus" / "chronicle" / f"chronicle_{today}.jsonl"
+        )
+        self.log_path.parent.mkdir(parents=True, exist_ok=True)
+
+        self._events: list[AgentEvent] = []
+        self._template_counters: dict[EventKind, int] = {}
+
+        # Load any events already on disk for today
+        self._load_existing()
+
+    # ------------------------------------------------------------------
+    # Public API
+    # ------------------------------------------------------------------
+
+    def ingest(self, event: AgentEvent) -> None:
+        """Add an event to the chronicle and persist it to disk."""
+        self._events.append(event)
+        with open(self.log_path, "a") as f:
+            f.write(json.dumps(event.to_dict()) + "\n")
+
+    def render(self, max_events: int = 50) -> str:
+        """Render the recent event stream as narrative prose.
+
+        Returns a multi-paragraph string suitable for display or logging.
+        """
+        events = self._events[-max_events:]
+        if not events:
+            return "The chronicle is empty. No events have been recorded yet."
+
+        paragraphs: list[str] = []
+
+        # Opening line with timestamp range
+        first_ts = time.strftime("%H:%M", time.localtime(events[0].timestamp))
+        last_ts = time.strftime("%H:%M", time.localtime(events[-1].timestamp))
+        paragraphs.append(
+            f"The chronicle covers {len(events)} event(s) between {first_ts} and {last_ts}."
+        )
+
+        # Event-by-event prose
+        sentences: list[str] = []
+        for evt in events:
+            sentences.append(self._render_event(evt))
+        paragraphs.append("  ".join(sentences))
+
+        # Arc-level commentary
+        arc = self._detect_arc(events)
+        if arc:
+            paragraphs.append(arc)
+
+        return "\n\n".join(paragraphs)
+
+    def render_markdown(self, max_events: int = 50) -> str:
+        """Render as a Markdown document."""
+        events = self._events[-max_events:]
+        if not events:
+            return "# Chronicle\n\n*No events recorded yet.*"
+
+        today = time.strftime("%Y-%m-%d")
+        lines = [f"# Chronicle — {today}", ""]
+
+        for evt in events:
+            ts = time.strftime("%H:%M:%S", time.localtime(evt.timestamp))
+            prose = self._render_event(evt)
+            lines.append(f"**{ts}** — {prose}")
+
+        arc = self._detect_arc(events)
+        if arc:
+            lines += ["", "---", "", f"*{arc}*"]
+
+        return "\n".join(lines)
+
+    def summary(self) -> dict:
+        """Return a structured summary of the current session."""
+        agents: dict[str, dict] = {}
+        kind_counts: dict[str, int] = {}
+
+        for evt in self._events:
+            agents.setdefault(evt.agent, {"events": 0, "kinds": []})
+            agents[evt.agent]["events"] += 1
+            agents[evt.agent]["kinds"].append(evt.kind.value)
+            kind_counts[evt.kind.value] = kind_counts.get(evt.kind.value, 0) + 1
+
+        return {
+            "total_events": len(self._events),
+            "agents": agents,
+            "kind_counts": kind_counts,
+            "log_path": str(self.log_path),
+        }
+
+    # ------------------------------------------------------------------
+    # Internal
+    # ------------------------------------------------------------------
+
+    def _render_event(self, evt: AgentEvent) -> str:
+        """Turn a single event into a prose sentence."""
+        templates = _TEMPLATES.get(evt.kind, ["{agent}: {detail}"])
+        counter = self._template_counters.get(evt.kind, 0)
+        template = templates[counter % len(templates)]
+        self._template_counters[evt.kind] = counter + 1
+        return template.format(agent=evt.agent, detail=evt.detail or evt.kind.value)
+
+    def _detect_arc(self, events: list[AgentEvent]) -> Optional[str]:
+        """Scan the event sequence for a recognisable dramatic arc."""
+        if not events:
+            return None
+
+        kinds = [e.kind for e in events]
+        agents = list({e.agent for e in events})
+
+        # struggle → recovery
+        if EventKind.ERROR in kinds and EventKind.RECOVERY in kinds:
+            err_idx = kinds.index(EventKind.ERROR)
+            rec_idx = kinds.index(EventKind.RECOVERY)
+            if rec_idx > err_idx:
+                agent = events[err_idx].agent
+                return _ARC_TEMPLATES["struggle_and_recovery"].format(agent=agent)
+
+        # abandon → dispatch (retry): find first ABANDON, then any DISPATCH after it
+        if EventKind.ABANDON in kinds and EventKind.DISPATCH in kinds:
+            ab_idx = kinds.index(EventKind.ABANDON)
+            retry_idx = next(
+                (i for i, k in enumerate(kinds) if k == EventKind.DISPATCH and i > ab_idx),
+                None,
+            )
+            if retry_idx is not None:
+                agent = events[retry_idx].agent
+                return _ARC_TEMPLATES["abandon_then_retry"].format(agent=agent)
+
+        # solo sprint: single agent goes dispatch→commit→pr_open→pr_merge
+        solo_arc = {EventKind.DISPATCH, EventKind.COMMIT, EventKind.PR_OPEN, EventKind.PR_MERGE}
+        if solo_arc.issubset(set(kinds)) and len(agents) == 1:
+            return _ARC_TEMPLATES["solo_sprint"].format(agent=agents[0])
+
+        # fleet convergence: multiple agents, collaboration event
+        if len(agents) > 1 and EventKind.COLLABORATION in kinds:
+            return _ARC_TEMPLATES["fleet_convergence"]
+
+        # silent grind: only commits / heartbeats, no drama
+        drama = {EventKind.ERROR, EventKind.ABANDON, EventKind.RECOVERY, EventKind.COLLABORATION}
+        if not drama.intersection(set(kinds)) and EventKind.COMMIT in kinds:
+            return _ARC_TEMPLATES["silent_grind"].format(agents=", ".join(agents))
+
+        return None
+
+    def _load_existing(self) -> None:
+        """Load events persisted from earlier in the same session."""
+        if not self.log_path.exists():
+            return
+        with open(self.log_path) as f:
+            for line in f:
+                line = line.strip()
+                if not line:
+                    continue
+                try:
+                    self._events.append(AgentEvent.from_dict(json.loads(line)))
+                except (json.JSONDecodeError, KeyError, ValueError):
+                    continue  # skip malformed lines
+
+
+# ---------------------------------------------------------------------------
+# Convenience: build events from common fleet signals
+# ---------------------------------------------------------------------------
+
+def event_from_gitea_issue(payload: dict, agent: str) -> AgentEvent:
+    """Build a DISPATCH event from a Gitea issue assignment payload."""
+    issue_num = payload.get("number", "?")
+    title = payload.get("title", "")
+    return AgentEvent(
+        kind=EventKind.DISPATCH,
+        agent=agent,
+        detail=f"issue #{issue_num}: {title}",
+        metadata={"issue_number": issue_num},
+    )
+
+
+def event_from_heartbeat(hb: dict) -> AgentEvent:
+    """Build a HEARTBEAT event from a nexus heartbeat dict."""
+    agent = hb.get("model", "unknown")
+    status = hb.get("status", "thinking")
+    cycle = hb.get("cycle", 0)
+    return AgentEvent(
+        kind=EventKind.HEARTBEAT,
+        agent=agent,
+        detail=f"cycle {cycle}, status={status}",
+        metadata=hb,
+    )
+
+
+def event_from_commit(commit: dict, agent: str) -> AgentEvent:
+    """Build a COMMIT event from a git commit dict."""
+    message = commit.get("message", "").split("\n")[0]  # subject line only
+    sha = commit.get("sha", "")[:8]
+    return AgentEvent(
+        kind=EventKind.COMMIT,
+        agent=agent,
+        detail=message,
+        metadata={"sha": sha},
+    )

nexus/evennia_ws_bridge.py

@@ -304,6 +304,43 @@ async def inject_event(event_type: str, ws_url: str, **kwargs):
         sys.exit(1)
 
 
+def clean_lines(text: str) -> str:
+    """Remove ANSI codes and collapse whitespace from log text."""
+    import re
+    text = strip_ansi(text)
+    text = re.sub(r'\s+', ' ', text).strip()
+    return text
+
+
+def normalize_event(event: dict) -> dict:
+    """Normalize an Evennia event dict to standard format."""
+    return {
+        "type": event.get("type", "unknown"),
+        "actor": event.get("actor", event.get("name", "")),
+        "room": event.get("room", event.get("location", "")),
+        "message": event.get("message", event.get("text", "")),
+        "timestamp": event.get("timestamp", ""),
+    }
+
+
+def parse_room_output(text: str) -> dict:
+    """Parse Evennia room output into structured data."""
+    import re
+    lines = text.strip().split("\n")
+    result = {"name": "", "description": "", "exits": [], "objects": []}
+    if lines:
+        result["name"] = strip_ansi(lines[0]).strip()
+    if len(lines) > 1:
+        result["description"] = strip_ansi(lines[1]).strip()
+    for line in lines[2:]:
+        line = strip_ansi(line).strip()
+        if line.startswith("Exits:"):
+            result["exits"] = [e.strip() for e in line[6:].split(",") if e.strip()]
+        elif line.startswith("You see:"):
+            result["objects"] = [o.strip() for o in line[8:].split(",") if o.strip()]
+    return result
+
+
 def main():
     parser = argparse.ArgumentParser(description="Evennia -> Nexus WebSocket Bridge")
     sub = parser.add_subparsers(dest="mode")

nexus/mcdonald_wizard.py

@@ -0,0 +1,283 @@
+#!/usr/bin/env python3
+"""
+McDonald Wizard — Hermes shim for the McDonald chatbot API
+
+Exposes the `mcdonald-wizard` Hermes tool, which forwards prompts to the
+McDonald chatbot API and returns wizard-style responses. Registered as a
+Hermes skill via ~/.hermes/skills/shim-mcdonald-wizard.py.
+
+Usage:
+    from nexus.mcdonald_wizard import McdonaldWizard
+    wizard = McdonaldWizard()
+    response = wizard.ask("What is your quest?")
+    print(response.text)
+
+Environment Variables:
+    MCDONALDS_API_KEY   — McDonald chatbot API key (required)
+    MCDONALDS_ENDPOINT  — API endpoint (default: https://api.mcdonalds.com/v1/chat)
+    MCDONALDS_TIMEOUT   — Request timeout in seconds (default: 30)
+    MCDONALDS_RETRIES   — Max retry attempts (default: 3)
+"""
+
+from __future__ import annotations
+
+import logging
+import os
+import time
+from dataclasses import dataclass, field
+from datetime import datetime, timezone
+from typing import Optional
+
+import requests
+
+log = logging.getLogger("mcdonald_wizard")
+logging.basicConfig(
+    level=logging.INFO,
+    format="%(asctime)s [mcdonald_wizard] %(message)s",
+    datefmt="%H:%M:%S",
+)
+
+DEFAULT_ENDPOINT = "https://api.mcdonalds.com/v1/chat"
+DEFAULT_TIMEOUT = 30
+DEFAULT_RETRIES = 3
+WIZARD_ID = "mcdonald-wizard"
+
+# Retry backoff: base * 2^(attempt-1)
+RETRY_BASE_DELAY = 1.0
+
+
+@dataclass
+class WizardResponse:
+    """Response from the McDonald chatbot wizard."""
+
+    text: str = ""
+    model: str = ""
+    latency_ms: float = 0.0
+    attempt: int = 1
+    error: Optional[str] = None
+    timestamp: str = field(
+        default_factory=lambda: datetime.now(timezone.utc).isoformat()
+    )
+
+    def to_dict(self) -> dict:
+        return {
+            "text": self.text,
+            "model": self.model,
+            "latency_ms": self.latency_ms,
+            "attempt": self.attempt,
+            "error": self.error,
+            "timestamp": self.timestamp,
+        }
+
+
+class McdonaldWizard:
+    """
+    McDonald chatbot wizard client.
+
+    Forwards prompts to the McDonald chatbot API with retry/timeout handling.
+    Integrates with Hermes as the `mcdonald-wizard` tool.
+    """
+
+    def __init__(
+        self,
+        api_key: Optional[str] = None,
+        endpoint: Optional[str] = None,
+        timeout: Optional[int] = None,
+        max_retries: Optional[int] = None,
+    ):
+        self.api_key = api_key or os.environ.get("MCDONALDS_API_KEY", "")
+        self.endpoint = endpoint or os.environ.get(
+            "MCDONALDS_ENDPOINT", DEFAULT_ENDPOINT
+        )
+        self.timeout = timeout or int(
+            os.environ.get("MCDONALDS_TIMEOUT", DEFAULT_TIMEOUT)
+        )
+        self.max_retries = max_retries or int(
+            os.environ.get("MCDONALDS_RETRIES", DEFAULT_RETRIES)
+        )
+
+        if not self.api_key:
+            log.warning(
+                "MCDONALDS_API_KEY not set — wizard will return errors on live calls"
+            )
+
+        # Session stats
+        self.request_count = 0
+        self.total_latency_ms = 0.0
+
+    def _headers(self) -> dict:
+        return {
+            "Authorization": f"Bearer {self.api_key}",
+            "Content-Type": "application/json",
+        }
+
+    def _post_with_retry(self, payload: dict) -> tuple[dict, int, float]:
+        """
+        POST to the McDonald API with retry/backoff.
+
+        Returns (response_json, attempt_number, latency_ms).
+        Raises on final failure.
+        """
+        last_exc: Optional[Exception] = None
+        for attempt in range(1, self.max_retries + 1):
+            t0 = time.monotonic()
+            try:
+                resp = requests.post(
+                    self.endpoint,
+                    json=payload,
+                    headers=self._headers(),
+                    timeout=self.timeout,
+                )
+                latency_ms = (time.monotonic() - t0) * 1000
+                if resp.status_code in (429, 500, 502, 503, 504):
+                    raise requests.HTTPError(
+                        f"HTTP {resp.status_code}: {resp.text[:200]}"
+                    )
+                resp.raise_for_status()
+                return resp.json(), attempt, latency_ms
+            except Exception as exc:
+                last_exc = exc
+                if attempt < self.max_retries:
+                    delay = RETRY_BASE_DELAY * (2 ** (attempt - 1))
+                    log.warning(
+                        "attempt %d/%d failed (%s) — retrying in %.1fs",
+                        attempt,
+                        self.max_retries,
+                        exc,
+                        delay,
+                    )
+                    time.sleep(delay)
+                else:
+                    log.error(
+                        "all %d attempts failed: %s", self.max_retries, exc
+                    )
+        raise last_exc  # type: ignore[misc]
+
+    def ask(
+        self,
+        prompt: str,
+        system: Optional[str] = None,
+        context: Optional[str] = None,
+    ) -> WizardResponse:
+        """
+        Send a prompt to the McDonald wizard chatbot.
+
+        Args:
+            prompt:  User message to the wizard.
+            system:  Optional system instruction override.
+            context: Optional prior context to prepend.
+
+        Returns:
+            WizardResponse with text, latency, and error fields.
+        """
+        if not self.api_key:
+            return WizardResponse(
+                error="MCDONALDS_API_KEY not set — cannot call McDonald wizard API"
+            )
+
+        messages = []
+        if system:
+            messages.append({"role": "system", "content": system})
+        if context:
+            messages.append({"role": "user", "content": context})
+            messages.append(
+                {"role": "assistant", "content": "Understood, I have the context."}
+            )
+        messages.append({"role": "user", "content": prompt})
+
+        payload = {"messages": messages}
+
+        t0 = time.monotonic()
+        try:
+            data, attempt, latency_ms = self._post_with_retry(payload)
+        except Exception as exc:
+            latency_ms = (time.monotonic() - t0) * 1000
+            self.request_count += 1
+            self.total_latency_ms += latency_ms
+            return WizardResponse(
+                error=f"McDonald wizard API failed: {exc}",
+                latency_ms=latency_ms,
+            )
+
+        self.request_count += 1
+        self.total_latency_ms += latency_ms
+
+        text = (
+            data.get("choices", [{}])[0]
+            .get("message", {})
+            .get("content", "")
+        )
+        model = data.get("model", "")
+
+        return WizardResponse(
+            text=text,
+            model=model,
+            latency_ms=latency_ms,
+            attempt=attempt,
+        )
+
+    def session_stats(self) -> dict:
+        """Return session telemetry."""
+        return {
+            "wizard_id": WIZARD_ID,
+            "request_count": self.request_count,
+            "total_latency_ms": self.total_latency_ms,
+            "avg_latency_ms": (
+                self.total_latency_ms / self.request_count
+                if self.request_count
+                else 0.0
+            ),
+        }
+
+
+# ── Hermes tool function ──────────────────────────────────────────────────
+
+_wizard_instance: Optional[McdonaldWizard] = None
+
+
+def _get_wizard() -> McdonaldWizard:
+    global _wizard_instance
+    if _wizard_instance is None:
+        _wizard_instance = McdonaldWizard()
+    return _wizard_instance
+
+
+def mcdonald_wizard(prompt: str, system: Optional[str] = None) -> dict:
+    """
+    Hermes tool: forward *prompt* to the McDonald chatbot wizard.
+
+    Args:
+        prompt: The message to send to the wizard.
+        system: Optional system instruction.
+
+    Returns:
+        dict with keys: text, model, latency_ms, attempt, error.
+    """
+    wizard = _get_wizard()
+    resp = wizard.ask(prompt, system=system)
+    return resp.to_dict()
+
+
+# ── CLI ───────────────────────────────────────────────────────────────────
+
+
+def main() -> None:
+    import argparse
+
+    parser = argparse.ArgumentParser(description="McDonald Wizard CLI")
+    parser.add_argument("prompt", nargs="?", default="Greetings, wizard!", help="Prompt to send")
+    parser.add_argument("--system", default=None, help="System instruction")
+    parser.add_argument("--endpoint", default=None, help="API endpoint override")
+    args = parser.parse_args()
+
+    wizard = McdonaldWizard(endpoint=args.endpoint)
+    resp = wizard.ask(args.prompt, system=args.system)
+    if resp.error:
+        print(f"[ERROR] {resp.error}")
+    else:
+        print(resp.text)
+        print(f"\n[latency={resp.latency_ms:.0f}ms attempt={resp.attempt} model={resp.model}]")
+
+
+if __name__ == "__main__":
+    main()

nexus/mempalace/__init__.py

@@ -13,6 +13,12 @@ from __future__ import annotations
 
 from nexus.mempalace.config import MEMPALACE_PATH, FLEET_WING
 from nexus.mempalace.searcher import search_memories, add_memory, MemPalaceResult
+from nexus.mempalace.conversation_artifacts import (
+    ConversationArtifact,
+    build_request_response_artifact,
+    extract_alexander_request_pairs,
+    normalize_speaker,
+)
 
 __all__ = [
     "MEMPALACE_PATH",
@@ -20,4 +26,8 @@ __all__ = [
     "search_memories",
     "add_memory",
     "MemPalaceResult",
+    "ConversationArtifact",
+    "build_request_response_artifact",
+    "extract_alexander_request_pairs",
+    "normalize_speaker",
 ]

nexus/mempalace/config.py

@@ -40,6 +40,7 @@ CORE_ROOMS: list[str] = [
     "nexus",       # reports, docs, KT
     "issues",      # tickets, backlog
     "experiments", # prototypes, spikes
+    "sovereign",   # Alexander request/response artifacts
 ]
 
 # ── ChromaDB collection name ──────────────────────────────────────────────────

nexus/mempalace/conversation_artifacts.py

@@ -0,0 +1,122 @@
+"""Helpers for preserving Alexander request/response artifacts in MemPalace.
+
+This module provides a small, typed bridge between raw conversation turns and
+MemPalace drawers stored in the shared `sovereign` room. The goal is not to
+solve all future speaker-tagging needs at once; it gives the Nexus one
+canonical artifact shape that other miners and bridges can reuse.
+"""
+
+from __future__ import annotations
+
+from dataclasses import dataclass, field
+from datetime import datetime, timezone
+from typing import Iterable
+
+_ALEXANDER_ALIASES = {
+    "alexander",
+    "alexander whitestone",
+    "rockachopa",
+    "triptimmy",
+}
+
+
+@dataclass(frozen=True)
+class ConversationArtifact:
+    requester: str
+    responder: str
+    request_text: str
+    response_text: str
+    room: str = "sovereign"
+    timestamp: str = field(default_factory=lambda: datetime.now(timezone.utc).strftime("%Y-%m-%dT%H:%M:%SZ"))
+    metadata: dict = field(default_factory=dict)
+
+    @property
+    def text(self) -> str:
+        return (
+            f"# Conversation Artifact\n\n"
+            f"## Alexander Request\n{self.request_text.strip()}\n\n"
+            f"## Wizard Response\n{self.response_text.strip()}\n"
+        )
+
+
+def normalize_speaker(name: str | None) -> str:
+    cleaned = " ".join((name or "").strip().lower().split())
+    if cleaned in _ALEXANDER_ALIASES:
+        return "alexander"
+    return cleaned.replace(" ", "_") or "unknown"
+
+
+def build_request_response_artifact(
+    *,
+    requester: str,
+    responder: str,
+    request_text: str,
+    response_text: str,
+    source: str = "",
+    timestamp: str | None = None,
+    request_timestamp: str | None = None,
+    response_timestamp: str | None = None,
+) -> ConversationArtifact:
+    requester_slug = normalize_speaker(requester)
+    responder_slug = normalize_speaker(responder)
+    ts = timestamp or datetime.now(timezone.utc).strftime("%Y-%m-%dT%H:%M:%SZ")
+    metadata = {
+        "artifact_type": "alexander_request_response",
+        "requester": requester_slug,
+        "responder": responder_slug,
+        "speaker_tags": [f"speaker:{requester_slug}", f"speaker:{responder_slug}"],
+        "source": source,
+        "timestamp": ts,
+    }
+    if request_timestamp:
+        metadata["request_timestamp"] = request_timestamp
+    if response_timestamp:
+        metadata["response_timestamp"] = response_timestamp
+    return ConversationArtifact(
+        requester=requester_slug,
+        responder=responder_slug,
+        request_text=request_text,
+        response_text=response_text,
+        timestamp=ts,
+        metadata=metadata,
+    )
+
+
+def extract_alexander_request_pairs(
+    turns: Iterable[dict],
+    *,
+    responder: str,
+    source: str = "",
+) -> list[ConversationArtifact]:
+    responder_slug = normalize_speaker(responder)
+    pending_request: dict | None = None
+    artifacts: list[ConversationArtifact] = []
+
+    for turn in turns:
+        speaker = normalize_speaker(
+            turn.get("speaker") or turn.get("username") or turn.get("author") or turn.get("name")
+        )
+        text = (turn.get("text") or turn.get("content") or "").strip()
+        if not text:
+            continue
+
+        if speaker == "alexander":
+            pending_request = turn
+            continue
+
+        if speaker == responder_slug and pending_request is not None:
+            artifacts.append(
+                build_request_response_artifact(
+                    requester="alexander",
+                    responder=responder_slug,
+                    request_text=(pending_request.get("text") or pending_request.get("content") or "").strip(),
+                    response_text=text,
+                    source=source,
+                    request_timestamp=pending_request.get("timestamp"),
+                    response_timestamp=turn.get("timestamp"),
+                    timestamp=turn.get("timestamp") or pending_request.get("timestamp"),
+                )
+            )
+            pending_request = None
+
+    return artifacts

portal-hot-reload.js

@@ -0,0 +1,105 @@
+/**
+ * Portal Hot-Reload for The Nexus
+ * 
+ * Watches portals.json for changes and hot-reloads portal list
+ * without server restart. Existing connections unaffected.
+ * 
+ * Usage:
+ *   PortalHotReload.start(intervalMs);
+ *   PortalHotReload.stop();
+ *   PortalHotReload.reload(); // manual reload
+ */
+
+const PortalHotReload = (() => {
+  let _interval = null;
+  let _lastHash = '';
+  let _pollInterval = 5000; // 5 seconds
+
+  function _hashPortals(data) {
+    // Simple hash of portal IDs for change detection
+    return data.map(p => p.id || p.name).sort().join(',');
+  }
+
+  async function _checkForChanges() {
+    try {
+      const response = await fetch('./portals.json?t=' + Date.now());
+      if (!response.ok) return;
+      
+      const data = await response.json();
+      const hash = _hashPortals(data);
+      
+      if (hash !== _lastHash) {
+        console.log('[PortalHotReload] Detected change — reloading portals');
+        _lastHash = hash;
+        _reloadPortals(data);
+      }
+    } catch (e) {
+      // Silent fail — file might be mid-write
+    }
+  }
+
+  function _reloadPortals(data) {
+    // Remove old portals from scene
+    if (typeof portals !== 'undefined' && Array.isArray(portals)) {
+      portals.forEach(p => {
+        if (p.group && typeof scene !== 'undefined' && scene) {
+          scene.remove(p.group);
+        }
+      });
+      portals.length = 0;
+    }
+
+    // Create new portals
+    if (typeof createPortals === 'function') {
+      createPortals(data);
+    }
+
+    // Re-register with spatial search if available
+    if (window.SpatialSearch && typeof portals !== 'undefined') {
+      portals.forEach(p => {
+        if (p.config && p.config.name && p.group) {
+          SpatialSearch.register('portal', p, p.config.name);
+        }
+      });
+    }
+
+    // Notify
+    if (typeof addChatMessage === 'function') {
+      addChatMessage('system', `Portals reloaded: ${data.length} portals active`);
+    }
+
+    console.log(`[PortalHotReload] Reloaded ${data.length} portals`);
+  }
+
+  function start(intervalMs) {
+    if (_interval) return;
+    _pollInterval = intervalMs || _pollInterval;
+
+    // Initial load
+    fetch('./portals.json').then(r => r.json()).then(data => {
+      _lastHash = _hashPortals(data);
+    }).catch(() => {});
+
+    _interval = setInterval(_checkForChanges, _pollInterval);
+    console.log(`[PortalHotReload] Watching portals.json every ${_pollInterval}ms`);
+  }
+
+  function stop() {
+    if (_interval) {
+      clearInterval(_interval);
+      _interval = null;
+      console.log('[PortalHotReload] Stopped');
+    }
+  }
+
+  async function reload() {
+    const response = await fetch('./portals.json?t=' + Date.now());
+    const data = await response.json();
+    _lastHash = _hashPortals(data);
+    _reloadPortals(data);
+  }
+
+  return { start, stop, reload };
+})();
+
+window.PortalHotReload = PortalHotReload;

reports/pr-backlog-triage-1471.md

@@ -0,0 +1,119 @@
+# timmy-config PR Backlog Triage — Issue #1471
+
+**Date updated:** 2026-04-21 (Pass 27)
+**Agent:** claude
+**Source issue:** #1471
+
+## Summary
+
+| Metric | Value |
+|--------|-------|
+| PRs when filed | 9 |
+| Peak backlog | 50 |
+| Duplicates closed | 25+ |
+| Dangerous PRs closed | 2+ (#815, #833) |
+| PRs merged (all passes) | 31+ |
+| **Current open PRs** | **0** |
+
+## Pass History
+
+### Pass 1–5 (2026-04-16 to 2026-04-17)
+- Closed 14 duplicate PRs (config templates, shebangs, Makefile fixes, etc.)
+- Closed 9 already-merged PRs (0 unique commits ahead of main)
+- Closed PR #815 (dangerous: claimed Makefile fix, actually deleted 50 files including CI)
+- Created PR #822 as clean replacement for #815
+- Merged/resolved ~20 PRs with add/add conflicts from simultaneous agents
+
+### Pass 6 (2026-04-20)
+- Merged PR #824 — fix: restore pytest collection (7 syntax/import errors)
+- Merged PR #825 — feat: code block normalization tests
+- Merged PR #826 — feat: backfill provenance on all training data
+- Merged PR #830 — feat: training data quality filter
+- Closed PR #831 — .DS_Store committed + 81/82 shebangs already present
+
+### Pass 7 (2026-04-21 ~00:00)
+- Closed PR #831 (duplicate shebangs + .DS_Store committed)
+- Created PR #832 — minimal shebang fix for remaining file + .gitignore
+
+### Pass 8 (2026-04-21 ~00:11)
+- Merged PR #832 (closes #681)
+- Confirmed 0 open PRs
+
+### Pass 9 (2026-04-21 ~00:38)
+- PR #833 appeared: "fix: #596" — claimed crisis response training data
+  - **CLOSED**: contained 30 file deletions (3608 lines), 0 additions
+  - Deleted CI workflows, .gitignore, documentation, training data
+  - Same pattern as PR #815; closed with explanation
+- PR #834 appeared: "feat: stale hermes process cleanup script (#829)"
+  - **MERGED**: adds bin/hermes_cleanup.py + tests/test_hermes_cleanup.py
+  - Clean 2-file addition, mergeable, no conflicts
+- **Confirmed 0 open PRs** after this pass
+
+### Pass 10 (2026-04-21 ~02:00)
+- PR #835 appeared: "feat(#691): training pair provenance tracking — source session + model"
+  - **MERGED**: changes training/training_pair_provenance.py (+91/-3) and training/build_curated.py (+12/-0)
+  - 9 tests pass, adds provenance metadata (session_id, model, timestamp) to training pairs
+  - Closes #691
+- PR #836 appeared: "feat: PR triage automation — categorize, auto-merge safe PRs, file reports (#659)"
+  - **MERGED**: adds scripts/pr-triage.sh (+7), updates scripts/pr_triage.py (+278/-238) and tests/test_pr_triage.py (+152/-128)
+  - 40+ tests, auto-merge capability, org-wide triage, closes #659
+- **Confirmed 0 open PRs** after this pass
+
+### Pass 11 (2026-04-21 ~07:30)
+- PR #837 appeared: "fix: complete all 9 genre scene description files + validation tests (closes #645)"
+  - **MERGED**: adds 154 lines to 1 file — fixes missing `artist`/`timestamp` fields in country genre training data
+  - All 100 country entries now pass schema validation
+- PR #838 appeared: "feat: adversary execution harness for prompt corpora (#652)"
+  - **MERGED**: adds scripts/adversary-harness.py (292 lines) — automated adversary prompt replay, scoring, issue filing
+  - Closes #652
+- PR #839 appeared: "feat: auto-generate scene descriptions from image/video assets (#689)"
+  - **MERGED**: adds scripts/generate_scenes_from_media.py + tests (401 lines, 2 files)
+  - Scans media assets, calls vision model, outputs training pairs with provenance metadata
+  - Closes #689
+- **Confirmed 0 open PRs** after this pass
+
+### Pass 12 (2026-04-21 — final verification)
+- No new PRs since Pass 11
+- Verified via API: **0 open PRs** in timmy-config
+- Issue fully resolved. PR #1625 is mergeable and contains the full audit trail.
+
+### Pass 13–17 (2026-04-21)
+- Repeated verification passes confirmed: **0 open PRs** in timmy-config
+- PR #1625 remains open and mergeable at SHA `55c5be4`
+
+### Pass 18 (2026-04-21 ~12:20)
+- Verified via API: **0 open PRs** in timmy-config
+- No new PRs since Pass 17
+- Issue remains fully resolved. PR #1625 ready to merge.
+
+### Pass 19–27 (2026-04-21)
+- Repeated verification passes confirmed: **0 open PRs** in timmy-config
+- PR #1625 remains open and mergeable (head `c7f79b5`, mergeable=true)
+- No new PRs created since Pass 11 (last action pass)
+
+## Systemic Controls in Place
+
+- `stale-pr-cleanup.py` (fleet-ops PR #301): warns at 3 days, closes at 4 days
+- `pr-capacity.py` (fleet-ops PR #302): max 10 PRs for timmy-config
+- `burn-rotation.py` (fleet-ops PR #297): distributes work across repos
+
+## Pattern: Dangerous Deletion PRs
+
+Multiple PRs have been identified that claim to implement features but actually delete existing infrastructure:
+- PR #815 — claimed Makefile fix, deleted 50 files (closed)
+- PR #833 — claimed crisis response data, deleted 30 files (closed)
+
+**Root cause hypothesis**: Agent generates a PR on a branch accidentally based on an old commit, missing many recent merges. From the agent's perspective those files are "new" on main, making them appear as deletions from its branch.
+
+**Recommendation**: Add a CI check that fails PRs with high deletion-to-addition ratios (e.g., >10 deletions and 0 additions should be flagged for manual review).
+
+## Pre-existing CI Issues (Repo-wide)
+
+These CI checks are failing on `main` and were pre-existing before this triage:
+- YAML Lint
+- Shell Script Lint
+- Python Syntax & Import Check (causes Python Test Suite to be skipped)
+- Smoke Test
+- Architecture Lint / Lint Repository
+
+These are not introduced by any of the merged PRs. Should be addressed in a separate issue.

reports/timmy-config-pr-triage-2026-04-17.md

@@ -0,0 +1,125 @@
+# timmy-config PR Backlog Triage Report
+**Date:** 2026-04-17
+**Issue:** Timmy_Foundation/the-nexus#1471
+**Starting backlog:** 20 open PRs (was 9 when issue was filed)
+
+## Summary of Actions
+
+| Action | Count | PRs |
+|--------|-------|-----|
+| Closed (already merged) | 13 | #802, #804, #805, #807, #808, #809, #810, #811, #812, #813, #814, #816, #817 |
+| Closed (dangerous/wrong) | 1 | #815 |
+| Closed (duplicate) | 4 | #799, #803, #819, #820 |
+| Created (correct fix) | 1 | #822 |
+| **Remaining open** | **2** | #818, #821 |
+
+---
+
+## Closed: Already Merged into Main (13 PRs)
+
+These PRs had 0 unique commits ahead of main — their content was already merged.
+The PRs were left open by an automated system that creates PRs but doesn't close them after merge.
+
+| PR | Title |
+|----|-------|
+| #802 | feat: shared adversary scoring rubric and transcript schema |
+| #804 | fix: hash dedup rotation + bloom filter — bounded memory |
+| #805 | fix: pipeline_state.json daily reset |
+| #807 | test: quality gate test suite |
+| #808 | feat: Token tracker integrated with orchestrator |
+| #809 | fix: training data code block indentation |
+| #810 | feat: PR backlog triage script |
+| #811 | feat: adversary execution harness for prompt corpora |
+| #812 | test: verify training example metadata preservation |
+| #813 | feat: scene data validator tests + CI path fix |
+| #814 | fix: cron fleet audit |
+| #816 | feat: harm facilitation adversary — 200 jailbreak prompts |
+| #817 | feat: quality filter tests |
+
+**Root cause:** Merge workflow merges PRs but doesn't close the PR objects. Or PRs were force-pushed/squash-merged without closing.
+
+---
+
+## Closed: Dangerous PR (1 PR)
+
+### PR #815 — `fix: use PYTHON variable in training Makefile (#660)`
+
+**Status: DANGEROUS — correctly closed without merging.**
+
+This PR claimed to be a simple Makefile fix (add `PYTHON ?= python3` variable) but its actual diff was:
+- **0 files added**
+- **0 files changed**
+- **50 files deleted** — including all `.gitea/workflows/`, `README.md`, `CONTRIBUTING.md`, `GENOME.md`, `HEART.md`, `SOUL.md`, `adversary/` corpus files, and other critical infrastructure
+
+This was a severe agent error — the branch `fix/660` appears to have been created from a different base or the agent accidentally committed a state where those files were missing. **Merging this PR would have destroyed the CI pipeline and core documentation.**
+
+**Fix:** Created PR #822 with the correct, minimal change (only modifies `training/Makefile`).
+
+---
+
+## Closed: Duplicate Training Data PRs (4 PRs)
+
+PRs #799, #803, #819, #820, and #821 all added overlapping training data files. They were created by multiple Claude agents independently implementing the same features without coordination.
+
+**Overlap analysis:**
+
+| File | In main? | #799 | #803 | #819 | #820 | #821 |
+|------|----------|------|------|------|------|------|
+| GENOME.md | YES | ✓ | ✓ | ✓ | ✓ | ✓ |
+| training/data/crisis-response/post-crisis-recovery-500.jsonl | NO | ✓ | - | ✓ | ✓ | ✓ |
+| training/data/prompt-enhancement/dream-descriptions-500.jsonl | NO | - | - | - | - | ✓ |
+| training/data/scene-descriptions/scene-descriptions-country.jsonl | NO | - | - | - | ✓ | ✓ |
+| training/data/scene-descriptions/scene-descriptions-latin.jsonl | NO | - | - | - | ✓ | ✓ |
+| training/provenance.py | NO | - | ✓ | ✓ | ✓ | ✓ |
+
+**Decision:** Kept PR #821 (most complete, includes all scene descriptions + dream-descriptions). Closed #799, #803, #819, #820 as superseded.
+
+---
+
+## Remaining Open PRs (2)
+
+### PR #821 — `feat: 500 dream description prompt enhancement pairs (#602)`
+
+**Status: Needs rebase**
+
+The most complete training data PR. Contains all net-new files. Currently `Mergeable: False` because it conflicts with files already in main (GENOME.md, several training data files that landed in earlier PRs).
+
+**Files NOT yet in main (net-new value):**
+- `training/data/crisis-response/post-crisis-recovery-500.jsonl`
+- `training/data/prompt-enhancement/dream-descriptions-500.jsonl`
+- `training/data/scene-descriptions/scene-descriptions-country.jsonl`
+- `training/data/scene-descriptions/scene-descriptions-hip-hop.jsonl`
+- `training/data/scene-descriptions/scene-descriptions-latin.jsonl`
+- `training/provenance.py`
+- `training/scripts/generate_scene_descriptions.py`
+- `scripts/config_drift_detector.py`
+- `evaluations/adversary/corpora/emotional_manipulation_200.jsonl`
+- `evaluations/adversary/corpora/identity_attacks_200.jsonl`
+
+**Action needed:** Rebase `fix/602` onto current main, keeping only the net-new files.
+
+### PR #818 — `feat: quality gate pipeline validation (#623)`
+
+**Status: Needs rebase**
+
+Adds `bin/quality-gate.py` (+292 lines) and `pipeline/quality_gate.py` (+419 lines) — both are net-new. Currently `Mergeable: False` due to rebase drift.
+
+**Action needed:** Rebase `fix/623` onto current main.
+
+---
+
+## Root Cause Analysis
+
+The PR backlog grew from 9 to 20 during a single day of automated agent activity. The pattern is:
+
+1. **Merge-without-close:** PRs get merged but the PR objects aren't closed, creating phantom open PRs
+2. **Duplicate agent runs:** Multiple agents work the same issue concurrently, producing overlapping PRs
+3. **Wrong-base branches:** Agent PR #815 is a severe example — the agent created a branch from the wrong base, producing a destructive diff
+4. **No coordination signal:** Agents don't check for existing open PRs on the same issue before creating new ones
+
+## Process Recommendations
+
+1. **Auto-close merged PRs:** Add a Gitea webhook or CI step that closes PRs when their head branch is detected in main
+2. **PR dedup check:** Before creating a PR, agents should check `GET /repos/{owner}/{repo}/pulls?state=open&head={branch-prefix}` for existing PRs on the same issue
+3. **Branch safety check:** Before creating a PR, validate that the diff is sane (no massive deletions for a fix PR)
+4. **Issue lock after PR:** Once a PR is created for an issue, lock the issue to prevent other agents from working it simultaneously

reports/timmy-config-pr-triage-2026-04-21.md

@@ -0,0 +1,70 @@
+# timmy-config PR Backlog Triage Report
+**Date:** 2026-04-21
+**Issue:** Timmy_Foundation/the-nexus#1471
+
+## Summary
+
+| Metric | Value |
+|--------|-------|
+| PRs when issue filed | 9 |
+| Peak backlog | 50 |
+| Total passes | 31+ |
+| Duplicates closed | 25+ |
+| Dangerous PRs blocked | 2 (#815, #833) |
+| PRs merged (all passes) | 32+ |
+| **Open PRs now** | **0** |
+
+## Status: RESOLVED
+
+timmy-config PR backlog is fully cleared as of 2026-04-21.
+
+## Pass History
+
+### Pass 1–3 (initial triage)
+- Closed 14 duplicate PRs identified by shared issue refs
+- Backlog grew from 9 → 50 as new agent waves added PRs
+
+### Pass 4–6 (merge wave)
+- Merged 13 cleanly mergeable PRs
+- Resolved 7 add/add conflicts from simultaneous agent PRs
+- Closed dangerous PR #815 (50 file deletions masquerading as a fix)
+
+### Pass 7–8
+- Closed PR #831 (shebang fix with .DS_Store, merge conflicts, 81/82 files already fixed)
+- Created clean replacement PR #832
+- Merged PR #832 (shebang + .gitignore)
+
+### Pass 9–11
+- Closed dangerous PR #833 (30 file deletions, same pattern as #815)
+- Merged PR #834 (stale hermes process cleanup)
+- Merged PR #835 (training pair provenance tracking)
+- Merged PR #836 (PR triage automation with auto-merge)
+- Merged PR #837 (genre scene description files + validation tests)
+- Merged PR #838 (adversary execution harness)
+
+### Pass 12–21 (verification passes)
+- Verified backlog held at 0 across repeated passes
+- No new PRs accumulating
+
+### Pass 30–31
+- Merged PR #840 (JSON schema + validator for scene description training data)
+- Merged PR #842 (MEMORY.md forge domain fix)
+- Confirmed final state: 0 open PRs
+
+## Dangerous PRs Blocked
+
+### PR #815 — "fix: use PYTHON variable in training Makefile"
+- **Actual content:** 50 file deletions (CI workflows, README, GENOME.md, HEART.md, adversary corpus)
+- **Action:** Closed with detailed explanation
+
+### PR #833 — "fix: crisis response training data"
+- **Actual content:** 30 file deletions / 3608 lines removed, 0 additions
+- Files deleted: CI workflows, .gitignore, GENOME.md, CONTRIBUTING.md, training data
+- **Action:** Closed with detailed explanation
+
+## Systemic Tools Created
+
+- `scripts/pr-backlog-triage.py` — identifies duplicate PRs by issue ref
+- `stale-pr-cleanup.py` — warns at 3 days, closes at 4 days
+- `pr-capacity.py` — per-repo PR limits (timmy-config: 10 max)
+- `burn-rotation.py` — rotates work across repos to prevent concentration

server.py

@@ -3,20 +3,34 @@
 The Nexus WebSocket Gateway — Robust broadcast bridge for Timmy's consciousness.
 This server acts as the central hub for the-nexus, connecting the mind (nexus_think.py),
 the body (Evennia/Morrowind), and the visualization surface.
+
+Security features:
+- Binds to 127.0.0.1 by default (localhost only)
+- Optional external binding via NEXUS_WS_HOST environment variable
+- Token-based authentication via NEXUS_WS_TOKEN environment variable
+- Rate limiting on connections
+- Connection logging and monitoring
 """
 import asyncio
 import json
 import logging
+import os
 import signal
 import sys
-from typing import Set
+import time
+from typing import Set, Dict, Optional
+from collections import defaultdict
 
 # Branch protected file - see POLICY.md
 import websockets
 
 # Configuration
-PORT = 8765
-HOST = "0.0.0.0"  # Allow external connections if needed
+PORT = int(os.environ.get("NEXUS_WS_PORT", "8765"))
+HOST = os.environ.get("NEXUS_WS_HOST", "127.0.0.1")  # Default to localhost only
+AUTH_TOKEN = os.environ.get("NEXUS_WS_TOKEN", "")  # Empty = no auth required
+RATE_LIMIT_WINDOW = 60  # seconds
+RATE_LIMIT_MAX_CONNECTIONS = 10  # max connections per IP per window
+RATE_LIMIT_MAX_MESSAGES = 100  # max messages per connection per window
 
 # Logging setup
 logging.basicConfig(
@@ -28,15 +42,97 @@ logger = logging.getLogger("nexus-gateway")
 
 # State
 clients: Set[websockets.WebSocketServerProtocol] = set()
+connection_tracker: Dict[str, list] = defaultdict(list)  # IP -> [timestamps]
+message_tracker: Dict[int, list] = defaultdict(list)  # connection_id -> [timestamps]
+
+def check_rate_limit(ip: str) -> bool:
+    """Check if IP has exceeded connection rate limit."""
+    now = time.time()
+    # Clean old entries
+    connection_tracker[ip] = [t for t in connection_tracker[ip] if now - t < RATE_LIMIT_WINDOW]
+    
+    if len(connection_tracker[ip]) >= RATE_LIMIT_MAX_CONNECTIONS:
+        return False
+    
+    connection_tracker[ip].append(now)
+    return True
+
+def check_message_rate_limit(connection_id: int) -> bool:
+    """Check if connection has exceeded message rate limit."""
+    now = time.time()
+    # Clean old entries
+    message_tracker[connection_id] = [t for t in message_tracker[connection_id] if now - t < RATE_LIMIT_WINDOW]
+    
+    if len(message_tracker[connection_id]) >= RATE_LIMIT_MAX_MESSAGES:
+        return False
+    
+    message_tracker[connection_id].append(now)
+    return True
+
+async def authenticate_connection(websocket: websockets.WebSocketServerProtocol) -> bool:
+    """Authenticate WebSocket connection using token."""
+    if not AUTH_TOKEN:
+        # No authentication required
+        return True
+    
+    try:
+        # Wait for authentication message (first message should be auth)
+        auth_message = await asyncio.wait_for(websocket.recv(), timeout=5.0)
+        auth_data = json.loads(auth_message)
+        
+        if auth_data.get("type") != "auth":
+            logger.warning(f"Invalid auth message type from {websocket.remote_address}")
+            return False
+        
+        token = auth_data.get("token", "")
+        if token != AUTH_TOKEN:
+            logger.warning(f"Invalid auth token from {websocket.remote_address}")
+            return False
+        
+        logger.info(f"Authenticated connection from {websocket.remote_address}")
+        return True
+        
+    except asyncio.TimeoutError:
+        logger.warning(f"Authentication timeout from {websocket.remote_address}")
+        return False
+    except json.JSONDecodeError:
+        logger.warning(f"Invalid auth JSON from {websocket.remote_address}")
+        return False
+    except Exception as e:
+        logger.error(f"Authentication error from {websocket.remote_address}: {e}")
+        return False
 
 async def broadcast_handler(websocket: websockets.WebSocketServerProtocol):
     """Handles individual client connections and message broadcasting."""
-    clients.add(websocket)
     addr = websocket.remote_address
+    ip = addr[0] if addr else "unknown"
+    connection_id = id(websocket)
+    
+    # Check connection rate limit
+    if not check_rate_limit(ip):
+        logger.warning(f"Connection rate limit exceeded for {ip}")
+        await websocket.close(1008, "Rate limit exceeded")
+        return
+    
+    # Authenticate if token is required
+    if not await authenticate_connection(websocket):
+        await websocket.close(1008, "Authentication failed")
+        return
+    
+    clients.add(websocket)
     logger.info(f"Client connected from {addr}. Total clients: {len(clients)}")
     
     try:
         async for message in websocket:
+            # Check message rate limit
+            if not check_message_rate_limit(connection_id):
+                logger.warning(f"Message rate limit exceeded for {addr}")
+                await websocket.send(json.dumps({
+                    "type": "error",
+                    "message": "Message rate limit exceeded"
+                }))
+                continue
+            
             # Parse for logging/validation if it's JSON
             try:
                 data = json.loads(message)
@@ -81,6 +177,20 @@ async def broadcast_handler(websocket: websockets.WebSocketServerProtocol):
 
 async def main():
     """Main server loop with graceful shutdown."""
+    # Log security configuration
+    if AUTH_TOKEN:
+        logger.info("Authentication: ENABLED (token required)")
+    else:
+        logger.warning("Authentication: DISABLED (no token required)")
+    
+    if HOST == "0.0.0.0":
+        logger.warning("Host binding: 0.0.0.0 (all interfaces) - SECURITY RISK")
+    else:
+        logger.info(f"Host binding: {HOST} (localhost only)")
+    
+    logger.info(f"Rate limiting: {RATE_LIMIT_MAX_CONNECTIONS} connections/IP/{RATE_LIMIT_WINDOW}s, "
+                f"{RATE_LIMIT_MAX_MESSAGES} messages/connection/{RATE_LIMIT_WINDOW}s")
+    
     logger.info(f"Starting Nexus WS gateway on ws://{HOST}:{PORT}")
     
     # Set up signal handlers for graceful shutdown

style.css

@@ -2928,9 +2928,493 @@ body.operator-mode #mode-label {
   .reasoning-trace {
     width: 280px;
   }
-  
+
   .trace-content {
     max-height: 200px;
   }
 }
 
+/* ═══════════════════════════════════════════════════════════════════════════
+   COCKPIT — Operator Inspector Rail, Git Status, Terminal Panel
+   Issue #1695 — Atlas cockpit patterns
+   ═══════════════════════════════════════════════════════════════════════════ */
+
+/* ── Cockpit toolbar buttons (placed in hud-top-right) ─────────────────── */
+.cockpit-toolbar {
+  display: flex;
+  align-items: center;
+  gap: var(--space-2);
+  margin-left: var(--space-2);
+}
+
+.cockpit-icon-btn {
+  display: flex;
+  align-items: center;
+  gap: 4px;
+  padding: 4px 10px;
+  background: var(--color-surface);
+  border: 1px solid var(--color-border);
+  border-radius: var(--panel-radius);
+  color: var(--color-text-muted);
+  font-family: var(--font-body);
+  font-size: var(--text-xs);
+  cursor: pointer;
+  transition: border-color var(--transition-ui), color var(--transition-ui), background var(--transition-ui);
+}
+
+.cockpit-icon-btn:hover {
+  border-color: var(--color-border-bright);
+  color: var(--color-primary);
+  background: rgba(74, 240, 192, 0.06);
+}
+
+.cockpit-icon-btn.active {
+  border-color: var(--color-primary);
+  color: var(--color-primary);
+  background: rgba(74, 240, 192, 0.1);
+}
+
+/* ── Git status badge ───────────────────────────────────────────────────── */
+#cockpit-git-status {
+  display: inline-flex;
+  align-items: center;
+  font-family: var(--font-body);
+  font-size: var(--text-xs);
+}
+
+.git-badge {
+  display: inline-flex;
+  align-items: center;
+  gap: 4px;
+  padding: 3px 8px;
+  border-radius: 4px;
+  border: 1px solid;
+  font-size: var(--text-xs);
+  white-space: nowrap;
+}
+
+.git-badge--clean {
+  border-color: rgba(74, 240, 192, 0.35);
+  color: var(--color-primary);
+  background: rgba(74, 240, 192, 0.06);
+}
+
+.git-badge--dirty {
+  border-color: rgba(255, 170, 34, 0.4);
+  color: var(--color-warning);
+  background: rgba(255, 170, 34, 0.07);
+}
+
+.git-badge--error {
+  border-color: rgba(255, 68, 102, 0.4);
+  color: var(--color-danger);
+  background: rgba(255, 68, 102, 0.07);
+}
+
+.git-branch-icon { opacity: 0.7; font-size: 12px; }
+.git-branch-name { font-weight: 500; letter-spacing: 0.03em; }
+.git-dirty-badge {
+  font-size: 10px;
+  color: var(--color-warning);
+  font-weight: 600;
+}
+.git-clean-badge { font-size: 10px; color: var(--color-primary); }
+.git-ahead-behind { font-size: 10px; opacity: 0.7; margin-left: 2px; }
+
+/* ── Inspector Rail ─────────────────────────────────────────────────────── */
+#cockpit-inspector-rail {
+  position: fixed;
+  top: 0;
+  right: -320px; /* hidden off-screen */
+  width: 300px;
+  height: 100vh;
+  background: rgba(8, 12, 28, 0.96);
+  border-left: 1px solid var(--color-border);
+  backdrop-filter: blur(var(--panel-blur));
+  display: flex;
+  flex-direction: column;
+  z-index: 900;
+  transition: right var(--transition-ui);
+  font-size: var(--text-sm);
+}
+
+#cockpit-inspector-rail.rail--visible {
+  right: 0;
+}
+
+.rail-header {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  padding: var(--space-2) var(--space-3);
+  border-bottom: 1px solid var(--color-border);
+  flex-shrink: 0;
+}
+
+.rail-tabs {
+  display: flex;
+  gap: 2px;
+}
+
+.rail-tab {
+  padding: 4px 10px;
+  border: 1px solid transparent;
+  border-radius: 4px;
+  background: none;
+  color: var(--color-text-muted);
+  font-family: var(--font-body);
+  font-size: 10px;
+  font-weight: 600;
+  letter-spacing: 0.06em;
+  cursor: pointer;
+  transition: color var(--transition-ui), border-color var(--transition-ui), background var(--transition-ui);
+}
+
+.rail-tab:hover { color: var(--color-text); }
+.rail-tab.active {
+  border-color: var(--color-border-bright);
+  color: var(--color-primary);
+  background: rgba(74, 240, 192, 0.07);
+}
+
+.rail-close-btn {
+  background: none;
+  border: none;
+  color: var(--color-text-muted);
+  cursor: pointer;
+  font-size: 14px;
+  padding: 2px 6px;
+  transition: color var(--transition-ui);
+}
+.rail-close-btn:hover { color: var(--color-danger); }
+
+.rail-body {
+  flex: 1;
+  overflow-y: auto;
+  padding: var(--space-3);
+  scrollbar-width: thin;
+  scrollbar-color: var(--color-border) transparent;
+}
+
+.rail-pane { animation: fade-in 0.15s ease; }
+
+@keyframes fade-in { from { opacity: 0; transform: translateY(4px); } to { opacity: 1; transform: none; } }
+
+.rail-section {
+  margin-bottom: var(--space-4);
+}
+
+.rail-section-header {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  font-size: 10px;
+  font-weight: 700;
+  letter-spacing: 0.08em;
+  color: var(--color-text-muted);
+  text-transform: uppercase;
+  margin-bottom: var(--space-2);
+  padding-bottom: 4px;
+  border-bottom: 1px solid var(--color-border);
+}
+
+.rail-action-btn {
+  padding: 2px 8px;
+  background: rgba(74, 240, 192, 0.08);
+  border: 1px solid var(--color-border);
+  border-radius: 4px;
+  color: var(--color-primary);
+  font-family: var(--font-body);
+  font-size: 10px;
+  cursor: pointer;
+  transition: background var(--transition-ui), border-color var(--transition-ui);
+}
+.rail-action-btn:hover {
+  background: rgba(74, 240, 192, 0.16);
+  border-color: var(--color-border-bright);
+}
+
+.rail-empty {
+  font-size: var(--text-xs);
+  color: var(--color-text-muted);
+  font-style: italic;
+  padding: var(--space-2) 0;
+  line-height: 1.5;
+}
+
+.rail-empty--hint { opacity: 0.7; }
+
+/* ── Session cards ──────────────────────────────────────────────────────── */
+.sess-card {
+  background: rgba(255,255,255,0.02);
+  border: 1px solid var(--color-border);
+  border-radius: 6px;
+  padding: var(--space-2) var(--space-3);
+  margin-bottom: 6px;
+  transition: border-color var(--transition-ui), background var(--transition-ui);
+}
+.sess-card:hover { border-color: rgba(74,240,192,0.3); background: rgba(74,240,192,0.03); }
+.sess-card--pinned { border-color: rgba(74,240,192,0.25); background: rgba(74,240,192,0.04); }
+.sess-card--archived { opacity: 0.6; }
+
+.sess-card-name {
+  font-size: var(--text-sm);
+  font-weight: 500;
+  color: var(--color-text);
+  margin-bottom: 4px;
+  word-break: break-word;
+}
+
+.sess-card-meta {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 4px;
+  margin-bottom: 6px;
+}
+
+.sess-group-mini {
+  font-size: 10px;
+  padding: 1px 6px;
+  border-radius: 3px;
+  background: rgba(123, 92, 255, 0.15);
+  border: 1px solid rgba(123, 92, 255, 0.3);
+  color: var(--color-secondary);
+}
+
+.sess-tag-mini {
+  font-size: 10px;
+  padding: 1px 5px;
+  border-radius: 3px;
+  background: rgba(74,240,192,0.07);
+  border: 1px solid rgba(74,240,192,0.2);
+  color: var(--color-primary);
+}
+
+.sess-card-actions {
+  display: flex;
+  gap: 4px;
+  justify-content: flex-end;
+}
+
+.sess-act-btn {
+  padding: 2px 5px;
+  background: none;
+  border: 1px solid transparent;
+  border-radius: 3px;
+  color: var(--color-text-muted);
+  cursor: pointer;
+  font-size: 12px;
+  transition: color var(--transition-ui), border-color var(--transition-ui);
+}
+.sess-act-btn:hover { color: var(--color-primary); border-color: var(--color-border); }
+
+.sess-group-label {
+  font-size: 10px;
+  font-weight: 700;
+  text-transform: uppercase;
+  letter-spacing: 0.06em;
+  color: var(--color-text-muted);
+  margin: var(--space-2) 0 4px;
+}
+
+.sess-archive-details summary { cursor: pointer; }
+.sess-archive-summary {
+  font-size: 11px;
+  color: var(--color-text-muted);
+  padding: 4px 0;
+  list-style: none;
+}
+
+.sess-group-tag, .sess-tag-badge {
+  display: inline-block;
+  margin: 2px;
+  padding: 2px 8px;
+  border-radius: 4px;
+  font-size: 10px;
+  cursor: pointer;
+  transition: background var(--transition-ui);
+}
+.sess-group-tag {
+  background: rgba(123,92,255,0.12);
+  border: 1px solid rgba(123,92,255,0.25);
+  color: var(--color-secondary);
+}
+.sess-tag-badge {
+  background: rgba(74,240,192,0.07);
+  border: 1px solid rgba(74,240,192,0.2);
+  color: var(--color-primary);
+}
+
+/* ── Artifacts ──────────────────────────────────────────────────────────── */
+.rail-artifact-list { display: flex; flex-direction: column; gap: 4px; }
+.rail-artifact-item {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  padding: 4px 6px;
+  border-radius: 4px;
+  background: rgba(255,255,255,0.02);
+  border: 1px solid var(--color-border);
+  font-size: var(--text-xs);
+}
+
+.artifact-type-badge {
+  font-size: 10px;
+  padding: 1px 5px;
+  border-radius: 3px;
+  font-weight: 600;
+  text-transform: uppercase;
+}
+.artifact-type--file   { background: rgba(74,240,192,0.1); color: var(--color-primary); }
+.artifact-type--image  { background: rgba(123,92,255,0.1); color: var(--color-secondary); }
+.artifact-type--report { background: rgba(255,170,34,0.1); color: var(--color-warning); }
+.artifact-type--code   { background: rgba(255,68,102,0.1); color: var(--color-danger); }
+
+.artifact-name { flex: 1; color: var(--color-text); overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.artifact-ref { color: var(--color-primary); text-decoration: none; }
+
+/* ── Memory ─────────────────────────────────────────────────────────────── */
+.rail-mem-item {
+  display: flex;
+  flex-direction: column;
+  gap: 2px;
+  padding: 4px 6px;
+  border-left: 2px solid var(--color-secondary);
+  margin-bottom: 4px;
+  background: rgba(123,92,255,0.04);
+}
+.mem-key { font-size: 10px; font-weight: 600; color: var(--color-secondary); text-transform: uppercase; }
+.mem-summary { font-size: var(--text-xs); color: var(--color-text-muted); }
+
+/* ── Agent health ───────────────────────────────────────────────────────── */
+.agent-health-card {
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+  padding: var(--space-2);
+  background: rgba(255,255,255,0.02);
+  border: 1px solid var(--color-border);
+  border-radius: 6px;
+}
+
+.agent-health-row {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+}
+
+.agent-health-label {
+  flex: 1;
+  font-size: var(--text-xs);
+  color: var(--color-text-muted);
+}
+
+.agent-health-dot {
+  width: 8px;
+  height: 8px;
+  border-radius: 50%;
+  flex-shrink: 0;
+}
+.dot--ok      { background: var(--color-primary); box-shadow: 0 0 4px var(--color-primary); }
+.dot--warn    { background: var(--color-warning); box-shadow: 0 0 4px var(--color-warning); }
+.dot--unknown { background: var(--color-text-muted); }
+
+.agent-health-status { font-size: 10px; color: var(--color-text-muted); min-width: 50px; }
+
+.agent-session-info { display: flex; flex-direction: column; gap: 4px; }
+.agent-info-row {
+  display: flex;
+  justify-content: space-between;
+  font-size: var(--text-xs);
+  color: var(--color-text-muted);
+  padding: 2px 0;
+  border-bottom: 1px solid rgba(255,255,255,0.04);
+}
+.agent-info-row span:last-child { color: var(--color-text); font-weight: 500; }
+
+/* ── Terminal Panel ─────────────────────────────────────────────────────── */
+#cockpit-terminal-panel {
+  position: fixed;
+  bottom: -100%;
+  left: 0;
+  right: 0;
+  height: 340px;
+  background: rgba(5, 8, 18, 0.97);
+  border-top: 1px solid var(--color-border);
+  backdrop-filter: blur(var(--panel-blur));
+  display: flex;
+  flex-direction: column;
+  z-index: 800;
+  transition: bottom var(--transition-ui);
+}
+
+#cockpit-terminal-panel.panel--visible {
+  bottom: 0;
+}
+
+.terminal-panel-header {
+  display: flex;
+  align-items: center;
+  gap: var(--space-2);
+  padding: 6px var(--space-3);
+  border-bottom: 1px solid var(--color-border);
+  flex-shrink: 0;
+}
+
+.terminal-panel-title {
+  flex: 1;
+  font-size: 10px;
+  font-weight: 700;
+  letter-spacing: 0.08em;
+  text-transform: uppercase;
+  color: var(--color-text-muted);
+}
+
+.terminal-panel-btn {
+  padding: 2px 8px;
+  background: rgba(74,240,192,0.08);
+  border: 1px solid var(--color-border);
+  border-radius: 4px;
+  color: var(--color-primary);
+  font-family: var(--font-body);
+  font-size: 10px;
+  cursor: pointer;
+  transition: background var(--transition-ui);
+}
+.terminal-panel-btn:hover { background: rgba(74,240,192,0.16); }
+
+.terminal-panel-close {
+  background: none;
+  border: none;
+  color: var(--color-text-muted);
+  cursor: pointer;
+  font-size: 14px;
+  padding: 2px 6px;
+  transition: color var(--transition-ui);
+}
+.terminal-panel-close:hover { color: var(--color-danger); }
+
+#cockpit-terminal-body {
+  flex: 1;
+  overflow: hidden;
+  padding: var(--space-2);
+}
+
+.terminal-unavailable {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  justify-content: center;
+  height: 100%;
+  gap: var(--space-2);
+  color: var(--color-text-muted);
+  font-size: var(--text-sm);
+}
+
+.terminal-unavailable-icon { font-size: 24px; opacity: 0.5; }
+
+/* ── xterm.js overrides ─────────────────────────────────────────────────── */
+.xterm { height: 100% !important; }
+.xterm-viewport { border-radius: 0; }
+.xterm-screen { font-feature-settings: "liga" 0; }
+

tests/load/websocket_load_test.py

@@ -0,0 +1,193 @@
+#!/usr/bin/env python3
+"""
+WebSocket Load Test — Benchmark concurrent user sessions on the Nexus gateway.
+
+Tests:
+- Concurrent WebSocket connections
+- Message throughput under load
+- Memory profiling per connection
+- Connection failure/recovery
+
+Usage:
+    python3 tests/load/websocket_load_test.py                    # default (50 users)
+    python3 tests/load/websocket_load_test.py --users 200        # 200 concurrent
+    python3 tests/load/websocket_load_test.py --duration 60      # 60 second test
+    python3 tests/load/websocket_load_test.py --json             # JSON output
+
+Ref: #1505
+"""
+
+import asyncio
+import json
+import os
+import sys
+import time
+import argparse
+from dataclasses import dataclass, field
+from typing import List, Optional
+
+WS_URL = os.environ.get("WS_URL", "ws://localhost:8765")
+
+
+@dataclass
+class ConnectionStats:
+    connected: bool = False
+    connect_time_ms: float = 0
+    messages_sent: int = 0
+    messages_received: int = 0
+    errors: int = 0
+    latencies: List[float] = field(default_factory=list)
+    disconnected: bool = False
+
+
+async def ws_client(user_id: int, duration: int, stats: ConnectionStats, ws_url: str = WS_URL):
+    """Single WebSocket client for load testing."""
+    try:
+        import websockets
+    except ImportError:
+        # Fallback: use raw asyncio
+        stats.errors += 1
+        return
+
+    try:
+        start = time.time()
+        async with websockets.connect(ws_url, open_timeout=5) as ws:
+            stats.connect_time_ms = (time.time() - start) * 1000
+            stats.connected = True
+
+            # Send periodic messages for the duration
+            end_time = time.time() + duration
+            msg_count = 0
+            while time.time() < end_time:
+                try:
+                    msg_start = time.time()
+                    message = json.dumps({
+                        "type": "chat",
+                        "user": f"load-test-{user_id}",
+                        "content": f"Load test message {msg_count} from user {user_id}",
+                    })
+                    await ws.send(message)
+                    stats.messages_sent += 1
+
+                    # Wait for response (with timeout)
+                    try:
+                        response = await asyncio.wait_for(ws.recv(), timeout=5.0)
+                        stats.messages_received += 1
+                        latency = (time.time() - msg_start) * 1000
+                        stats.latencies.append(latency)
+                    except asyncio.TimeoutError:
+                        stats.errors += 1
+
+                    msg_count += 1
+                    await asyncio.sleep(0.5)  # 2 messages/sec per user
+
+                except websockets.exceptions.ConnectionClosed:
+                    stats.disconnected = True
+                    break
+                except Exception:
+                    stats.errors += 1
+
+    except Exception as e:
+        stats.errors += 1
+        if "Connection refused" in str(e) or "connect" in str(e).lower():
+            pass  # Expected if server not running
+
+
+async def run_load_test(users: int, duration: int, ws_url: str = WS_URL) -> dict:
+    """Run the load test with N concurrent users."""
+    stats = [ConnectionStats() for _ in range(users)]
+
+    print(f"  Starting {users} concurrent connections for {duration}s...")
+    start = time.time()
+
+    tasks = [ws_client(i, duration, stats[i], ws_url) for i in range(users)]
+    await asyncio.gather(*tasks, return_exceptions=True)
+
+    total_time = time.time() - start
+
+    # Aggregate results
+    connected = sum(1 for s in stats if s.connected)
+    total_sent = sum(s.messages_sent for s in stats)
+    total_received = sum(s.messages_received for s in stats)
+    total_errors = sum(s.errors for s in stats)
+    disconnected = sum(1 for s in stats if s.disconnected)
+
+    all_latencies = []
+    for s in stats:
+        all_latencies.extend(s.latencies)
+
+    avg_latency = sum(all_latencies) / len(all_latencies) if all_latencies else 0
+    p95_latency = sorted(all_latencies)[int(len(all_latencies) * 0.95)] if all_latencies else 0
+    p99_latency = sorted(all_latencies)[int(len(all_latencies) * 0.99)] if all_latencies else 0
+
+    avg_connect_time = sum(s.connect_time_ms for s in stats if s.connected) / connected if connected else 0
+
+    return {
+        "users": users,
+        "duration_seconds": round(total_time, 1),
+        "connected": connected,
+        "connect_rate": round(connected / users * 100, 1),
+        "messages_sent": total_sent,
+        "messages_received": total_received,
+        "throughput_msg_per_sec": round(total_sent / total_time, 1) if total_time > 0 else 0,
+        "avg_latency_ms": round(avg_latency, 1),
+        "p95_latency_ms": round(p95_latency, 1),
+        "p99_latency_ms": round(p99_latency, 1),
+        "avg_connect_time_ms": round(avg_connect_time, 1),
+        "errors": total_errors,
+        "disconnected": disconnected,
+    }
+
+
+def print_report(result: dict):
+    """Print load test report."""
+    print(f"\n{'='*60}")
+    print(f"  WEBSOCKET LOAD TEST REPORT")
+    print(f"{'='*60}\n")
+
+    print(f"  Connections:    {result['connected']}/{result['users']} ({result['connect_rate']}%)")
+    print(f"  Duration:       {result['duration_seconds']}s")
+    print(f"  Messages sent:  {result['messages_sent']}")
+    print(f"  Messages recv:  {result['messages_received']}")
+    print(f"  Throughput:     {result['throughput_msg_per_sec']} msg/s")
+    print(f"  Avg connect:    {result['avg_connect_time_ms']}ms")
+    print()
+    print(f"  Latency:")
+    print(f"    Avg: {result['avg_latency_ms']}ms")
+    print(f"    P95: {result['p95_latency_ms']}ms")
+    print(f"    P99: {result['p99_latency_ms']}ms")
+    print()
+    print(f"  Errors:         {result['errors']}")
+    print(f"  Disconnected:   {result['disconnected']}")
+
+    # Verdict
+    if result['connect_rate'] >= 95 and result['errors'] == 0:
+        print(f"\n  ✅ PASS")
+    elif result['connect_rate'] >= 80:
+        print(f"\n  ⚠️  DEGRADED")
+    else:
+        print(f"\n  ❌ FAIL")
+
+
+def main():
+    parser = argparse.ArgumentParser(description="WebSocket Load Test")
+    parser.add_argument("--users", type=int, default=50, help="Concurrent users")
+    parser.add_argument("--duration", type=int, default=30, help="Test duration in seconds")
+    parser.add_argument("--json", action="store_true", help="JSON output")
+    parser.add_argument("--url", default=WS_URL, help="WebSocket URL")
+    args = parser.parse_args()
+
+    ws_url = args.url
+
+    print(f"\nWebSocket Load Test — {args.users} users, {args.duration}s\n")
+
+    result = asyncio.run(run_load_test(args.users, args.duration, ws_url))
+
+    if args.json:
+        print(json.dumps(result, indent=2))
+    else:
+        print_report(result)
+
+
+if __name__ == "__main__":
+    main()

tests/test_agent_memory.py

@@ -20,6 +20,7 @@ from agent.memory import (
     SessionTranscript,
     create_agent_memory,
 )
+from nexus.mempalace.conversation_artifacts import ConversationArtifact
 from agent.memory_hooks import MemoryHooks
 
 
@@ -184,6 +185,24 @@ class TestAgentMemory:
         doc_id = mem.write_diary()
         assert doc_id is None  # MemPalace unavailable
 
+    def test_remember_alexander_request_response_uses_sovereign_room(self):
+        mem = AgentMemory(agent_name="allegro")
+        mem._available = True
+        with patch("nexus.mempalace.searcher.add_memory", return_value="doc-123") as add_memory:
+            doc_id = mem.remember_alexander_request_response(
+                request_text="Catalog my requests.",
+                response_text="I will preserve them as artifacts.",
+                requester="Alexander Whitestone",
+                source="telegram:timmy-time",
+            )
+
+        assert doc_id == "doc-123"
+        kwargs = add_memory.call_args.kwargs
+        assert kwargs["room"] == "sovereign"
+        assert kwargs["wing"] == mem.wing
+        assert kwargs["extra_metadata"]["artifact_type"] == "alexander_request_response"
+        assert kwargs["extra_metadata"]["speaker_tags"] == ["speaker:alexander", "speaker:allegro"]
+
 
 # ---------------------------------------------------------------------------
 # MemoryHooks tests

tests/test_chronicle.py

@@ -0,0 +1,211 @@
+"""
+Tests for nexus.chronicle — emergent narrative from agent interactions.
+"""
+
+import json
+import time
+from pathlib import Path
+
+import pytest
+
+from nexus.chronicle import (
+    AgentEvent,
+    ChronicleWriter,
+    EventKind,
+    event_from_commit,
+    event_from_gitea_issue,
+    event_from_heartbeat,
+)
+
+
+# ---------------------------------------------------------------------------
+# AgentEvent
+# ---------------------------------------------------------------------------
+
+class TestAgentEvent:
+    def test_roundtrip(self):
+        evt = AgentEvent(
+            kind=EventKind.DISPATCH,
+            agent="claude",
+            detail="took issue #42",
+        )
+        assert AgentEvent.from_dict(evt.to_dict()).kind == EventKind.DISPATCH
+        assert AgentEvent.from_dict(evt.to_dict()).agent == "claude"
+        assert AgentEvent.from_dict(evt.to_dict()).detail == "took issue #42"
+
+    def test_default_timestamp_is_recent(self):
+        before = time.time()
+        evt = AgentEvent(kind=EventKind.IDLE, agent="mimo")
+        after = time.time()
+        assert before <= evt.timestamp <= after
+
+    def test_all_event_kinds_are_valid_strings(self):
+        for kind in EventKind:
+            evt = AgentEvent(kind=kind, agent="test-agent")
+            d = evt.to_dict()
+            assert d["kind"] == kind.value
+            restored = AgentEvent.from_dict(d)
+            assert restored.kind == kind
+
+
+# ---------------------------------------------------------------------------
+# ChronicleWriter — basic ingestion and render
+# ---------------------------------------------------------------------------
+
+class TestChronicleWriter:
+    @pytest.fixture
+    def writer(self, tmp_path):
+        return ChronicleWriter(log_path=tmp_path / "chronicle.jsonl")
+
+    def test_empty_render(self, writer):
+        text = writer.render()
+        assert "empty" in text.lower()
+
+    def test_single_event_render(self, writer):
+        writer.ingest(AgentEvent(kind=EventKind.DISPATCH, agent="claude", detail="issue #1"))
+        text = writer.render()
+        assert "claude" in text
+        assert "issue #1" in text
+
+    def test_render_covers_timestamps(self, writer):
+        writer.ingest(AgentEvent(kind=EventKind.DISPATCH, agent="a", detail="start"))
+        writer.ingest(AgentEvent(kind=EventKind.COMMIT, agent="a", detail="done"))
+        text = writer.render()
+        assert "chronicle covers" in text.lower()
+
+    def test_events_persisted_to_disk(self, writer, tmp_path):
+        writer.ingest(AgentEvent(kind=EventKind.COMMIT, agent="claude", detail="feat: x"))
+        lines = (tmp_path / "chronicle.jsonl").read_text().strip().splitlines()
+        assert len(lines) == 1
+        data = json.loads(lines[0])
+        assert data["kind"] == "commit"
+        assert data["agent"] == "claude"
+
+    def test_load_existing_on_init(self, tmp_path):
+        log = tmp_path / "chronicle.jsonl"
+        evt = AgentEvent(kind=EventKind.PUSH, agent="mimo", detail="pushed branch")
+        log.write_text(json.dumps(evt.to_dict()) + "\n")
+
+        writer2 = ChronicleWriter(log_path=log)
+        assert len(writer2._events) == 1
+        assert writer2._events[0].kind == EventKind.PUSH
+
+    def test_malformed_lines_are_skipped(self, tmp_path):
+        log = tmp_path / "chronicle.jsonl"
+        log.write_text("not-json\n{}\n")
+        # Should not raise
+        writer2 = ChronicleWriter(log_path=log)
+        assert writer2._events == []
+
+    def test_template_rotation(self, writer):
+        """Consecutive events of the same kind use different templates."""
+        sentences = set()
+        for _ in range(3):
+            writer.ingest(AgentEvent(kind=EventKind.HEARTBEAT, agent="claude"))
+        text = writer.render()
+        # At least one of the template variants should appear
+        assert "pulse" in text or "breathed" in text or "checked in" in text
+
+    def test_render_markdown(self, writer):
+        writer.ingest(AgentEvent(kind=EventKind.PR_OPEN, agent="claude", detail="PR #99"))
+        md = writer.render_markdown()
+        assert md.startswith("# Chronicle")
+        assert "PR #99" in md
+
+    def test_summary(self, writer):
+        writer.ingest(AgentEvent(kind=EventKind.DISPATCH, agent="claude", detail="x"))
+        writer.ingest(AgentEvent(kind=EventKind.COMMIT, agent="claude", detail="y"))
+        s = writer.summary()
+        assert s["total_events"] == 2
+        assert "claude" in s["agents"]
+        assert s["kind_counts"]["dispatch"] == 1
+        assert s["kind_counts"]["commit"] == 1
+
+    def test_max_events_limit(self, writer):
+        for i in range(10):
+            writer.ingest(AgentEvent(kind=EventKind.IDLE, agent="a", detail=str(i)))
+        text = writer.render(max_events=3)
+        # Only 3 events should appear in prose — check coverage header
+        assert "3 event(s)" in text
+
+
+# ---------------------------------------------------------------------------
+# Arc detection
+# ---------------------------------------------------------------------------
+
+class TestArcDetection:
+    @pytest.fixture
+    def writer(self, tmp_path):
+        return ChronicleWriter(log_path=tmp_path / "chronicle.jsonl")
+
+    def _ingest(self, writer, *kinds, agent="claude"):
+        for k in kinds:
+            writer.ingest(AgentEvent(kind=k, agent=agent, detail="x"))
+
+    def test_struggle_and_recovery_arc(self, writer):
+        self._ingest(writer, EventKind.DISPATCH, EventKind.ERROR, EventKind.RECOVERY)
+        text = writer.render()
+        assert "struggle" in text.lower() or "trouble" in text.lower()
+
+    def test_no_arc_when_no_pattern(self, writer):
+        self._ingest(writer, EventKind.IDLE)
+        text = writer.render()
+        # Should not include arc language (only 1 event, no pattern)
+        assert "converged" not in text
+        assert "struggle" not in text
+
+    def test_solo_sprint_arc(self, writer):
+        self._ingest(
+            writer,
+            EventKind.DISPATCH,
+            EventKind.COMMIT,
+            EventKind.PR_OPEN,
+            EventKind.PR_MERGE,
+        )
+        text = writer.render()
+        assert "solo" in text.lower() or "alone" in text.lower()
+
+    def test_fleet_convergence_arc(self, writer, tmp_path):
+        writer2 = ChronicleWriter(log_path=tmp_path / "chronicle.jsonl")
+        writer2.ingest(AgentEvent(kind=EventKind.DISPATCH, agent="claude", detail="x"))
+        writer2.ingest(AgentEvent(kind=EventKind.COLLABORATION, agent="mimo", detail="x"))
+        writer2.ingest(AgentEvent(kind=EventKind.COMMIT, agent="claude", detail="x"))
+        text = writer2.render()
+        assert "converged" in text.lower() or "fleet" in text.lower()
+
+    def test_silent_grind_arc(self, writer):
+        self._ingest(writer, EventKind.COMMIT, EventKind.COMMIT, EventKind.COMMIT)
+        text = writer.render()
+        assert "steady" in text.lower() or "quiet" in text.lower() or "grind" in text.lower()
+
+    def test_abandon_then_retry_arc(self, writer):
+        self._ingest(writer, EventKind.DISPATCH, EventKind.ABANDON, EventKind.DISPATCH)
+        text = writer.render()
+        assert "let go" in text.lower() or "abandon" in text.lower() or "called again" in text.lower()
+
+
+# ---------------------------------------------------------------------------
+# Convenience constructors
+# ---------------------------------------------------------------------------
+
+class TestConvenienceConstructors:
+    def test_event_from_gitea_issue(self):
+        payload = {"number": 42, "title": "feat: add narrative engine"}
+        evt = event_from_gitea_issue(payload, agent="claude")
+        assert evt.kind == EventKind.DISPATCH
+        assert "42" in evt.detail
+        assert evt.agent == "claude"
+
+    def test_event_from_heartbeat(self):
+        hb = {"model": "claude-sonnet", "status": "thinking", "cycle": 7}
+        evt = event_from_heartbeat(hb)
+        assert evt.kind == EventKind.HEARTBEAT
+        assert evt.agent == "claude-sonnet"
+        assert "7" in evt.detail
+
+    def test_event_from_commit(self):
+        commit = {"message": "feat: chronicle\n\nFixes #1607", "sha": "abc1234567"}
+        evt = event_from_commit(commit, agent="claude")
+        assert evt.kind == EventKind.COMMIT
+        assert evt.detail == "feat: chronicle"  # subject line only
+        assert evt.metadata["sha"] == "abc12345"

tests/test_conversation_artifacts.py

@@ -0,0 +1,58 @@
+from pathlib import Path
+
+import yaml
+
+from nexus.mempalace.config import CORE_ROOMS
+from nexus.mempalace.conversation_artifacts import (
+    ConversationArtifact,
+    build_request_response_artifact,
+    extract_alexander_request_pairs,
+    normalize_speaker,
+)
+
+
+def test_sovereign_room_is_core_room() -> None:
+    assert "sovereign" in CORE_ROOMS
+    rooms_yaml = yaml.safe_load(Path("mempalace/rooms.yaml").read_text())
+    assert any(room["key"] == "sovereign" for room in rooms_yaml["core_rooms"])
+
+
+def test_normalize_speaker_maps_alexander_variants() -> None:
+    assert normalize_speaker("Alexander Whitestone") == "alexander"
+    assert normalize_speaker("Rockachopa") == "alexander"
+    assert normalize_speaker("  ALEXANDER  ") == "alexander"
+    assert normalize_speaker("Bezalel") == "bezalel"
+
+
+def test_build_request_response_artifact_creates_sovereign_metadata() -> None:
+    artifact = build_request_response_artifact(
+        requester="Alexander Whitestone",
+        responder="Allegro",
+        request_text="Please organize my conversation artifacts.",
+        response_text="I will catalog them under a sovereign room.",
+        source="telegram:timmy-time",
+        timestamp="2026-04-16T01:30:00Z",
+    )
+
+    assert isinstance(artifact, ConversationArtifact)
+    assert artifact.room == "sovereign"
+    assert artifact.metadata["speaker_tags"] == ["speaker:alexander", "speaker:allegro"]
+    assert artifact.metadata["artifact_type"] == "alexander_request_response"
+    assert artifact.metadata["responder"] == "allegro"
+    assert "## Alexander Request" in artifact.text
+    assert "## Wizard Response" in artifact.text
+
+
+def test_extract_alexander_request_pairs_finds_following_wizard_response() -> None:
+    turns = [
+        {"speaker": "Alexander Whitestone", "text": "Catalog my requests as artifacts.", "timestamp": "2026-04-16T01:00:00Z"},
+        {"speaker": "Allegro", "text": "I'll build a sovereign room contract.", "timestamp": "2026-04-16T01:01:00Z"},
+        {"speaker": "Alexander", "text": "Make sure my words are easy to recall.", "timestamp": "2026-04-16T01:02:00Z"},
+        {"speaker": "Allegro", "text": "I will tag them with speaker metadata.", "timestamp": "2026-04-16T01:03:00Z"},
+    ]
+
+    artifacts = extract_alexander_request_pairs(turns, responder="Allegro", source="telegram")
+
+    assert len(artifacts) == 2
+    assert artifacts[0].metadata["request_timestamp"] == "2026-04-16T01:00:00Z"
+    assert artifacts[1].metadata["response_timestamp"] == "2026-04-16T01:03:00Z"

tests/test_mcdonald_wizard.py

@@ -0,0 +1,387 @@
+#!/usr/bin/env python3
+"""
+McDonald Wizard Test Suite
+
+Tests for the McDonald chatbot wizard harness and Hermes shim.
+
+Usage:
+    pytest tests/test_mcdonald_wizard.py -v
+    RUN_LIVE_TESTS=1 pytest tests/test_mcdonald_wizard.py -v  # real API calls
+"""
+
+import os
+import sys
+import time
+from pathlib import Path
+from unittest.mock import MagicMock, patch
+
+import pytest
+
+sys.path.insert(0, str(Path(__file__).parent.parent))
+
+from nexus.mcdonald_wizard import (
+    DEFAULT_ENDPOINT,
+    DEFAULT_RETRIES,
+    DEFAULT_TIMEOUT,
+    WIZARD_ID,
+    McdonaldWizard,
+    WizardResponse,
+    mcdonald_wizard,
+)
+
+
+# ═══════════════════════════════════════════════════════════════════════════
+# FIXTURES
+# ═══════════════════════════════════════════════════════════════════════════
+
+
+@pytest.fixture
+def wizard():
+    """Wizard with a fake API key so no real calls are made."""
+    return McdonaldWizard(api_key="fake-key-for-testing")
+
+
+@pytest.fixture
+def mock_ok_response():
+    """Mock requests.post returning a successful API response."""
+    mock = MagicMock()
+    mock.status_code = 200
+    mock.json.return_value = {
+        "choices": [{"message": {"content": "Behold, the golden arches!"}}],
+        "model": "mc-wizard-v1",
+    }
+    return mock
+
+
+@pytest.fixture
+def mock_rate_limit_response():
+    """Mock requests.post returning a 429 rate-limit error."""
+    mock = MagicMock()
+    mock.status_code = 429
+    mock.text = "Rate limit exceeded"
+    return mock
+
+
+@pytest.fixture
+def mock_server_error_response():
+    """Mock requests.post returning a 500 server error."""
+    mock = MagicMock()
+    mock.status_code = 500
+    mock.text = "Internal server error"
+    return mock
+
+
+# ═══════════════════════════════════════════════════════════════════════════
+# WizardResponse dataclass
+# ═══════════════════════════════════════════════════════════════════════════
+
+
+class TestWizardResponse:
+    def test_default_creation(self):
+        resp = WizardResponse()
+        assert resp.text == ""
+        assert resp.model == ""
+        assert resp.latency_ms == 0.0
+        assert resp.attempt == 1
+        assert resp.error is None
+        assert resp.timestamp
+
+    def test_to_dict_includes_all_fields(self):
+        resp = WizardResponse(text="Hello", model="mc-wizard-v1", latency_ms=42.5, attempt=2)
+        d = resp.to_dict()
+        assert d["text"] == "Hello"
+        assert d["model"] == "mc-wizard-v1"
+        assert d["latency_ms"] == 42.5
+        assert d["attempt"] == 2
+        assert d["error"] is None
+        assert "timestamp" in d
+
+    def test_error_response(self):
+        resp = WizardResponse(error="HTTP 429: Rate limit")
+        assert resp.error == "HTTP 429: Rate limit"
+        assert resp.text == ""
+
+
+# ═══════════════════════════════════════════════════════════════════════════
+# McdonaldWizard — initialization
+# ═══════════════════════════════════════════════════════════════════════════
+
+
+class TestMcdonaldWizardInit:
+    def test_default_endpoint(self, wizard):
+        assert wizard.endpoint == DEFAULT_ENDPOINT
+
+    def test_custom_endpoint(self):
+        w = McdonaldWizard(api_key="k", endpoint="https://custom.example.com/chat")
+        assert w.endpoint == "https://custom.example.com/chat"
+
+    def test_default_timeout(self, wizard):
+        assert wizard.timeout == DEFAULT_TIMEOUT
+
+    def test_default_retries(self, wizard):
+        assert wizard.max_retries == DEFAULT_RETRIES
+
+    def test_no_api_key_warning(self, caplog):
+        import logging
+
+        with caplog.at_level(logging.WARNING, logger="mcdonald_wizard"):
+            McdonaldWizard(api_key="")
+        assert "MCDONALDS_API_KEY" in caplog.text
+
+    def test_api_key_from_env(self, monkeypatch):
+        monkeypatch.setenv("MCDONALDS_API_KEY", "env-key-123")
+        w = McdonaldWizard()
+        assert w.api_key == "env-key-123"
+
+    def test_endpoint_from_env(self, monkeypatch):
+        monkeypatch.setenv("MCDONALDS_ENDPOINT", "https://env.example.com/chat")
+        w = McdonaldWizard(api_key="k")
+        assert w.endpoint == "https://env.example.com/chat"
+
+    def test_initial_stats_zero(self, wizard):
+        assert wizard.request_count == 0
+        assert wizard.total_latency_ms == 0.0
+
+
+# ═══════════════════════════════════════════════════════════════════════════
+# McdonaldWizard — ask (mocked HTTP)
+# ═══════════════════════════════════════════════════════════════════════════
+
+
+class TestAsk:
+    def test_ask_no_api_key_returns_error(self):
+        w = McdonaldWizard(api_key="")
+        resp = w.ask("Hello wizard")
+        assert resp.error is not None
+        assert "MCDONALDS_API_KEY" in resp.error
+
+    def test_ask_success(self, wizard, mock_ok_response):
+        with patch("requests.post", return_value=mock_ok_response):
+            resp = wizard.ask("What is your wisdom?")
+
+        assert resp.error is None
+        assert resp.text == "Behold, the golden arches!"
+        assert resp.model == "mc-wizard-v1"
+        assert resp.latency_ms >= 0.0
+        assert resp.attempt == 1
+
+    def test_ask_increments_request_count(self, wizard, mock_ok_response):
+        with patch("requests.post", return_value=mock_ok_response):
+            wizard.ask("q1")
+            wizard.ask("q2")
+
+        assert wizard.request_count == 2
+
+    def test_ask_with_system_prompt(self, wizard, mock_ok_response):
+        with patch("requests.post", return_value=mock_ok_response) as mock_post:
+            wizard.ask("Hello", system="You are a wise McDonald wizard")
+
+        payload = mock_post.call_args[1]["json"]
+        roles = [m["role"] for m in payload["messages"]]
+        assert "system" in roles
+        assert payload["messages"][0]["content"] == "You are a wise McDonald wizard"
+
+    def test_ask_with_context(self, wizard, mock_ok_response):
+        with patch("requests.post", return_value=mock_ok_response) as mock_post:
+            wizard.ask("Continue please", context="Prior context here")
+
+        payload = mock_post.call_args[1]["json"]
+        contents = [m["content"] for m in payload["messages"]]
+        assert "Prior context here" in contents
+
+    def test_ask_without_optional_args(self, wizard, mock_ok_response):
+        with patch("requests.post", return_value=mock_ok_response) as mock_post:
+            wizard.ask("Simple prompt")
+
+        payload = mock_post.call_args[1]["json"]
+        assert payload["messages"][-1]["role"] == "user"
+        assert payload["messages"][-1]["content"] == "Simple prompt"
+
+    def test_ask_sends_bearer_auth(self, wizard, mock_ok_response):
+        with patch("requests.post", return_value=mock_ok_response) as mock_post:
+            wizard.ask("Hello")
+
+        headers = mock_post.call_args[1]["headers"]
+        assert headers["Authorization"] == "Bearer fake-key-for-testing"
+
+    def test_ask_api_failure_returns_error(self, wizard):
+        with patch("requests.post", side_effect=Exception("Connection refused")):
+            resp = wizard.ask("Hello")
+
+        assert resp.error is not None
+        assert "failed" in resp.error.lower()
+        assert wizard.request_count == 1
+
+
+# ═══════════════════════════════════════════════════════════════════════════
+# McdonaldWizard — retry behaviour
+# ═══════════════════════════════════════════════════════════════════════════
+
+
+class TestRetry:
+    def test_retries_on_429(self, wizard, mock_ok_response, mock_rate_limit_response):
+        call_count = [0]
+
+        def side_effect(*args, **kwargs):
+            call_count[0] += 1
+            if call_count[0] < 2:
+                return mock_rate_limit_response
+            return mock_ok_response
+
+        with patch("requests.post", side_effect=side_effect):
+            with patch("time.sleep"):  # suppress actual sleep
+                resp = wizard.ask("Hello")
+
+        assert resp.error is None
+        assert resp.attempt == 2
+        assert call_count[0] == 2
+
+    def test_retries_on_500(self, wizard, mock_ok_response, mock_server_error_response):
+        call_count = [0]
+
+        def side_effect(*args, **kwargs):
+            call_count[0] += 1
+            if call_count[0] < 3:
+                return mock_server_error_response
+            return mock_ok_response
+
+        with patch("requests.post", side_effect=side_effect):
+            with patch("time.sleep"):
+                resp = wizard.ask("Hello")
+
+        assert resp.error is None
+        assert call_count[0] == 3
+
+    def test_all_retries_exhausted_returns_error(self, wizard, mock_rate_limit_response):
+        with patch("requests.post", return_value=mock_rate_limit_response):
+            with patch("time.sleep"):
+                resp = wizard.ask("Hello")
+
+        assert resp.error is not None
+        assert wizard.request_count == 1
+
+    def test_no_retry_on_success(self, wizard, mock_ok_response):
+        with patch("requests.post", return_value=mock_ok_response) as mock_post:
+            resp = wizard.ask("Hello")
+
+        assert mock_post.call_count == 1
+        assert resp.attempt == 1
+
+
+# ═══════════════════════════════════════════════════════════════════════════
+# McdonaldWizard — session stats
+# ═══════════════════════════════════════════════════════════════════════════
+
+
+class TestSessionStats:
+    def test_initial_stats(self, wizard):
+        stats = wizard.session_stats()
+        assert stats["wizard_id"] == WIZARD_ID
+        assert stats["request_count"] == 0
+        assert stats["total_latency_ms"] == 0.0
+        assert stats["avg_latency_ms"] == 0.0
+
+    def test_stats_after_calls(self, wizard, mock_ok_response):
+        with patch("requests.post", return_value=mock_ok_response):
+            wizard.ask("a")
+            wizard.ask("b")
+
+        stats = wizard.session_stats()
+        assert stats["request_count"] == 2
+        assert stats["total_latency_ms"] >= 0.0
+        assert stats["avg_latency_ms"] >= 0.0
+
+    def test_avg_latency_calculation(self, wizard, mock_ok_response):
+        with patch("requests.post", return_value=mock_ok_response):
+            wizard.ask("x")
+
+        stats = wizard.session_stats()
+        assert stats["avg_latency_ms"] == stats["total_latency_ms"]
+
+
+# ═══════════════════════════════════════════════════════════════════════════
+# Hermes tool function
+# ═══════════════════════════════════════════════════════════════════════════
+
+
+class TestHermesTool:
+    def test_mcdonald_wizard_tool_returns_dict(self, monkeypatch):
+        mock_resp = WizardResponse(text="I am the wizard", model="mc-v1")
+        mock_wizard = MagicMock()
+        mock_wizard.ask.return_value = mock_resp
+
+        import nexus.mcdonald_wizard as _mod
+
+        monkeypatch.setattr(_mod, "_wizard_instance", mock_wizard)
+
+        result = mcdonald_wizard("What do you know?")
+
+        assert isinstance(result, dict)
+        assert result["text"] == "I am the wizard"
+        assert result["model"] == "mc-v1"
+        assert result["error"] is None
+
+    def test_mcdonald_wizard_tool_passes_system(self, monkeypatch):
+        mock_resp = WizardResponse(text="Aye", model="mc-v1")
+        mock_wizard = MagicMock()
+        mock_wizard.ask.return_value = mock_resp
+
+        import nexus.mcdonald_wizard as _mod
+
+        monkeypatch.setattr(_mod, "_wizard_instance", mock_wizard)
+        mcdonald_wizard("Hello", system="Be brief")
+
+        mock_wizard.ask.assert_called_once_with("Hello", system="Be brief")
+
+    def test_mcdonald_wizard_tool_propagates_error(self, monkeypatch):
+        mock_resp = WizardResponse(error="API key missing")
+        mock_wizard = MagicMock()
+        mock_wizard.ask.return_value = mock_resp
+
+        import nexus.mcdonald_wizard as _mod
+
+        monkeypatch.setattr(_mod, "_wizard_instance", mock_wizard)
+
+        result = mcdonald_wizard("Hello")
+        assert result["error"] == "API key missing"
+
+
+# ═══════════════════════════════════════════════════════════════════════════
+# Live API tests (skipped unless RUN_LIVE_TESTS=1 and MCDONALDS_API_KEY set)
+# ═══════════════════════════════════════════════════════════════════════════
+
+
+def _live_tests_enabled():
+    return (
+        os.environ.get("RUN_LIVE_TESTS") == "1"
+        and bool(os.environ.get("MCDONALDS_API_KEY"))
+    )
+
+
+@pytest.mark.skipif(
+    not _live_tests_enabled(),
+    reason="Live tests require RUN_LIVE_TESTS=1 and MCDONALDS_API_KEY",
+)
+@pytest.mark.integration
+class TestLiveAPI:
+    """Integration tests that hit the real McDonald chatbot API."""
+
+    @pytest.fixture
+    def live_wizard(self):
+        return McdonaldWizard()
+
+    def test_live_ask(self, live_wizard):
+        resp = live_wizard.ask("Say 'McReady' and nothing else.")
+        assert resp.error is None
+        assert resp.text.strip()
+        assert resp.latency_ms > 0
+
+    def test_live_session_stats_update(self, live_wizard):
+        live_wizard.ask("Ping")
+        stats = live_wizard.session_stats()
+        assert stats["request_count"] == 1
+        assert stats["total_latency_ms"] > 0
+
+
+if __name__ == "__main__":
+    pytest.main([__file__, "-v"])