15 changed files with 2243 additions and 2460 deletions
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -14,15 +14,12 @@ jobs:

      - name: Validate HTML
        run: |
-          # Check index.html exists and is valid-ish
          test -f index.html || { echo "ERROR: index.html missing"; exit 1; }
-          # Check for unclosed tags (basic)
          python3 -c "
          import html.parser, sys
          class V(html.parser.HTMLParser):
              def __init__(self):
                  super().__init__()
-                  self.errors = []
              def handle_starttag(self, tag, attrs): pass
              def handle_endtag(self, tag): pass
          v = V()
@@ -36,7 +33,6 @@ jobs:

      - name: Validate JavaScript
        run: |
-          # Syntax check all JS files
          FAIL=0
          for f in $(find . -name '*.js' -not -path './node_modules/*' -not -name 'sw.js'); do
            if ! node --check "$f" 2>/dev/null; then
@@ -50,7 +46,6 @@ jobs:

      - name: Validate JSON
        run: |
-          # Check all JSON files parse
          FAIL=0
          for f in $(find . -name '*.json' -not -path './node_modules/*'); do
            if ! python3 -c "import json; json.load(open('$f'))"; then
@@ -64,7 +59,6 @@ jobs:

      - name: Check file size budget
        run: |
-          # Performance budget: no single JS file > 500KB
          FAIL=0
          for f in $(find . -name '*.js' -not -path './node_modules/*'); do
            SIZE=$(wc -c < "$f")
@@ -76,3 +70,35 @@ jobs:
            fi
          done
          exit $FAIL
+
+  auto-merge:
+    needs: validate
+    runs-on: ubuntu-latest
+    steps:
+      - name: Merge PR
+        env:
+          GITEA_TOKEN: ${{ secrets.MERGE_TOKEN }}
+        run: |
+          PR_NUM=$(echo "${{ github.event.pull_request.number }}")
+          REPO="${{ github.repository }}"
+          API="http://143.198.27.163:3000/api/v1"
+
+          echo "CI passed. Auto-merging PR #${PR_NUM}..."
+
+          # Squash merge
+          RESULT=$(curl -s -w "\n%{http_code}" -X POST \
+            -H "Authorization: token ${GITEA_TOKEN}" \
+            -H "Content-Type: application/json" \
+            -d '{"Do":"squash","delete_branch_after_merge":true}' \
+            "${API}/repos/${REPO}/pulls/${PR_NUM}/merge")
+
+          HTTP_CODE=$(echo "$RESULT" | tail -1)
+          BODY=$(echo "$RESULT" | head -n -1)
+
+          if [ "$HTTP_CODE" = "200" ] || [ "$HTTP_CODE" = "405" ]; then
+            echo "Merged successfully (or already merged)"
+          else
+            echo "Merge failed: HTTP ${HTTP_CODE}"
+            echo "$BODY"
+            # Don't fail the job — PR stays open for manual review
+          fi
--- a/.gitignore
+++ b/.gitignore
@@ -0,0 +1 @@
+.aider*
--- a/api/status.json
+++ b/api/status.json
@@ -0,0 +1,9 @@
+{
+  "agents": [
+    { "name": "claude",  "status": "working", "issue": "Live agent status board (#199)", "prs_today": 3 },
+    { "name": "gemini",  "status": "idle",    "issue": null,                              "prs_today": 1 },
+    { "name": "kimi",    "status": "working", "issue": "Portal system YAML registry (#5)", "prs_today": 2 },
+    { "name": "groq",    "status": "idle",    "issue": null,                              "prs_today": 0 },
+    { "name": "grok",    "status": "dead",    "issue": null,                              "prs_today": 0 }
+  ]
+}
--- a/app.js
+++ b/app.js
--- a/apply_cyberpunk.py
+++ b/apply_cyberpunk.py
@@ -0,0 +1,66 @@
+import re
+import os
+
+# 1. Update style.css
+with open('style.css', 'a') as f:
+    f.write('''
+/* === CRT / CYBERPUNK OVERLAY === */
+.crt-overlay {
+  position: fixed;
+  inset: 0;
+  z-index: 9999;
+  pointer-events: none;
+  background: 
+    linear-gradient(rgba(18, 16, 16, 0) 50%, rgba(0, 0, 0, 0.15) 50%), 
+    linear-gradient(90deg, rgba(255, 0, 0, 0.04), rgba(0, 255, 0, 0.02), rgba(0, 0, 255, 0.04));
+  background-size: 100% 4px, 4px 100%;
+  animation: flicker 0.15s infinite;
+  box-shadow: inset 0 0 100px rgba(0,0,0,0.9);
+}
+
+@keyframes flicker {
+  0% { opacity: 0.95; }
+  50% { opacity: 1; }
+  100% { opacity: 0.98; }
+}
+
+.crt-overlay::after {
+  content: " ";
+  display: block;
+  position: absolute;
+  top: 0;
+  left: 0;
+  bottom: 0;
+  right: 0;
+  background: rgba(18, 16, 16, 0.1);
+  opacity: 0;
+  z-index: 999;
+  pointer-events: none;
+  animation: crt-pulse 4s linear infinite;
+}
+
+@keyframes crt-pulse {
+  0% { opacity: 0.05; }
+  50% { opacity: 0.15; }
+  100% { opacity: 0.05; }
+}
+''')
+
+# 2. Update index.html
+if os.path.exists('index.html'):
+    with open('index.html', 'r') as f:
+        html = f.read()
+    if '<div class="crt-overlay"></div>' not in html:
+        html = html.replace('</body>', '  <div class="crt-overlay"></div>\n</body>')
+        with open('index.html', 'w') as f:
+            f.write(html)
+
+# 3. Update app.js UnrealBloomPass
+if os.path.exists('app.js'):
+    with open('app.js', 'r') as f:
+        js = f.read()
+    new_js = re.sub(r'UnrealBloomPass\([^,]+,\s*0\.6\s*,', r'UnrealBloomPass(new THREE.Vector2(window.innerWidth, window.innerHeight), 1.5,', js)
+    with open('app.js', 'w') as f:
+        f.write(new_js)
+
+print("Applied Cyberpunk Overhaul!")
--- a/deploy.sh
+++ b/deploy.sh
@@ -1,7 +1,13 @@
 #!/usr/bin/env bash
-# deploy.sh — spin up (or update) the Nexus staging environment
-# Usage: ./deploy.sh          — rebuild and restart nexus-main (port 4200)
-#        ./deploy.sh staging  — rebuild and restart nexus-staging (port 4201)
+# deploy.sh — pull latest main and restart the Nexus
+#
+# Usage (on the VPS):
+#   ./deploy.sh          — deploy nexus-main (port 4200)
+#   ./deploy.sh staging  — deploy nexus-staging (port 4201)
+#
+# Expected layout on VPS:
+#   /opt/the-nexus/       ← git clone of this repo (git remote = origin, branch = main)
+#   nginx site config     ← /etc/nginx/sites-enabled/the-nexus
 set -euo pipefail

 SERVICE="${1:-nexus-main}"
@@ -11,7 +17,18 @@ case "$SERVICE" in
  main)    SERVICE="nexus-main" ;;
 esac

-echo "==> Deploying $SERVICE …"
-docker compose build "$SERVICE"
-docker compose up -d --force-recreate "$SERVICE"
-echo "==> Done. Container: $SERVICE"
+REPO_DIR="$(cd "$(dirname "$0")" && pwd)"
+
+echo "==> Pulling latest main …"
+git -C "$REPO_DIR" fetch origin
+git -C "$REPO_DIR" checkout main
+git -C "$REPO_DIR" reset --hard origin/main
+
+echo "==> Building and restarting $SERVICE …"
+docker compose -f "$REPO_DIR/docker-compose.yml" build "$SERVICE"
+docker compose -f "$REPO_DIR/docker-compose.yml" up -d --force-recreate "$SERVICE"
+
+echo "==> Reloading nginx …"
+nginx -t && systemctl reload nginx
+
+echo "==> Done. $SERVICE is live."
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -7,6 +7,8 @@ services:
    restart: unless-stopped
    ports:
      - "4200:80"
+    volumes:
+      - .:/usr/share/nginx/html:ro
    labels:
      - "deployment=main"

@@ -16,5 +18,7 @@ services:
    restart: unless-stopped
    ports:
      - "4201:80"
+    volumes:
+      - .:/usr/share/nginx/html:ro
    labels:
      - "deployment=staging"
--- a/index.html
+++ b/index.html
@@ -1,225 +1,62 @@
 <!DOCTYPE html>
-<html lang="en" data-theme="dark">
+<html lang="en">
 <head>
-<!--
-   ______                            __
-  / ____/___  ____ ___  ____  __  __/ /____  _____
- / /   / __ \/ __ `__ \/ __ \/ / / / __/ _ \/ ___/
-/ /___/ /_/ / / / / / / /_/ / /_/ / /_/  __/ /
-\____/\____/_/ /_/ /_/ .___/\__,_/\__/\___/_/
-                    /_/
-        Created with Perplexity Computer
-        https://www.perplexity.ai/computer
-->
-<meta name="generator" content="Perplexity Computer">
-<meta name="author" content="Perplexity Computer">
-<meta property="og:see_also" content="https://www.perplexity.ai/computer">
-<link rel="author" href="https://www.perplexity.ai/computer">
-
-<meta charset="UTF-8">
-<meta name="viewport" content="width=device-width, initial-scale=1.0">
-<title>The Nexus — Timmy's Sovereign Home</title>
-<link rel="preconnect" href="https://fonts.googleapis.com">
-<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
-<link href="https://fonts.googleapis.com/css2?family=JetBrains+Mono:wght@300;400;500;600;700&family=Orbitron:wght@400;500;600;700;800;900&display=swap" rel="stylesheet">
-<link rel="stylesheet" href="./style.css">
-<script type="importmap">
-{
-  "imports": {
-    "three": "https://cdn.jsdelivr.net/npm/three@0.183.0/build/three.module.js",
-    "three/addons/": "https://cdn.jsdelivr.net/npm/three@0.183.0/examples/jsm/"
-  }
-}
-</script>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Timmy's Nexus</title>
+  <meta name="description" content="A sovereign 3D world">
+  <meta property="og:title" content="Timmy's Nexus">
+  <meta property="og:description" content="A sovereign 3D world">
+  <meta property="og:image" content="https://example.com/og-image.png">
+  <meta property="og:type" content="website">
+  <meta name="twitter:card" content="summary_large_image">
+  <meta name="twitter:title" content="Timmy's Nexus">
+  <meta name="twitter:description" content="A sovereign 3D world">
+  <meta name="twitter:image" content="https://example.com/og-image.png">
+  <link rel="manifest" href="/manifest.json">
+  <link rel="stylesheet" href="style.css">
+  <script type="importmap">
+    {
+      "imports": {
+        "three": "https://unpkg.com/three@0.183.0/build/three.module.js",
+        "three/addons/": "https://unpkg.com/three@0.183.0/examples/jsm/"
+      }
+    }
+  </script>
 </head>
 <body>
-<!-- Loading Screen -->
-<div id="loading-screen">
-  <div class="loader-content">
-    <div class="loader-sigil">
-      <svg viewBox="0 0 120 120" width="120" height="120">
-        <defs>
-          <linearGradient id="sigil-grad" x1="0%" y1="0%" x2="100%" y2="100%">
-            <stop offset="0%" stop-color="#4af0c0"/>
-            <stop offset="100%" stop-color="#7b5cff"/>
-          </linearGradient>
-        </defs>
-        <circle cx="60" cy="60" r="55" fill="none" stroke="url(#sigil-grad)" stroke-width="1.5" opacity="0.4"/>
-        <circle cx="60" cy="60" r="45" fill="none" stroke="url(#sigil-grad)" stroke-width="1" opacity="0.3">
-          <animateTransform attributeName="transform" type="rotate" from="0 60 60" to="360 60 60" dur="8s" repeatCount="indefinite"/>
-        </circle>
-        <polygon points="60,15 95,80 25,80" fill="none" stroke="#4af0c0" stroke-width="1.5" opacity="0.6">
-          <animateTransform attributeName="transform" type="rotate" from="0 60 60" to="-360 60 60" dur="12s" repeatCount="indefinite"/>
-        </polygon>
-        <circle cx="60" cy="60" r="8" fill="#4af0c0" opacity="0.8">
-          <animate attributeName="r" values="6;10;6" dur="2s" repeatCount="indefinite"/>
-          <animate attributeName="opacity" values="0.5;1;0.5" dur="2s" repeatCount="indefinite"/>
-        </circle>
-      </svg>
-    </div>
-    <h1 class="loader-title">THE NEXUS</h1>
-    <p class="loader-subtitle">Initializing Sovereign Space...</p>
-    <div class="loader-bar"><div class="loader-fill" id="load-progress"></div></div>
-  </div>
-</div>
-
-<!-- HUD Overlay -->
-<div id="hud" class="game-ui" style="display:none;">
-  <!-- Top Left: Debug -->
-  <div id="debug-overlay" class="hud-debug"></div>
-
-  <!-- Top Center: Location -->
-  <div class="hud-location">
-    <span class="hud-location-icon">◈</span>
-    <span id="hud-location-text">The Nexus</span>
+  <!-- Top Right: Audio Toggle -->
+  <div id="audio-control" class="hud-controls" style="position: absolute; top: 8px; right: 8px;">
+    <button id="audio-toggle" class="chat-toggle-btn" aria-label="Toggle ambient sound" style="background-color: var(--color-primary); color: var(--color-bg); padding: 4px 8px; border-radius: 4px; font-size: 12px; cursor: pointer;">
+      🔊
+    </button>
+    <button id="debug-toggle" class="chat-toggle-btn" aria-label="Toggle debug mode" style="background-color: var(--color-secondary); color: var(--color-bg); padding: 4px 8px; border-radius: 4px; font-size: 12px; cursor: pointer;">
+      🔍
+    </button>
+    <audio id="ambient-sound" src="ambient.mp3" loop></audio>
  </div>

-  <!-- Top Right: Agent Log -->
-  <div class="hud-agent-log" id="hud-agent-log">
-    <div class="agent-log-header">AGENT THOUGHT STREAM</div>
-    <div id="agent-log-content" class="agent-log-content"></div>
+  <div id="overview-indicator">
+    <span>MAP VIEW</span>
+    <span class="overview-hint">[Tab] to exit</span>
  </div>

-  <!-- Bottom: Chat Interface -->
-  <div id="chat-panel" class="chat-panel">
-    <div class="chat-header">
-      <span class="chat-status-dot"></span>
-      <span>Timmy Terminal</span>
-      <button id="chat-toggle" class="chat-toggle-btn" aria-label="Toggle chat">▼</button>
-    </div>
-    <div id="chat-messages" class="chat-messages">
-      <div class="chat-msg chat-msg-system">
-        <span class="chat-msg-prefix">[NEXUS]</span> Sovereign space initialized. Timmy is observing.
-      </div>
-      <div class="chat-msg chat-msg-timmy">
-        <span class="chat-msg-prefix">[TIMMY]</span> Welcome to the Nexus, Alexander. All systems nominal.
-      </div>
-    </div>
-    <div class="chat-input-row">
-      <input type="text" id="chat-input" class="chat-input" placeholder="Speak to Timmy..." autocomplete="off">
-      <button id="chat-send" class="chat-send-btn" aria-label="Send message">→</button>
-    </div>
+  <div id="photo-indicator">
+    <span>PHOTO MODE</span>
+    <span class="photo-hint">[P] exit &nbsp;|&nbsp; [[] focus- &nbsp; []] focus+ &nbsp; focus: <span id="photo-focus">5.0</span></span>
  </div>

-  <!-- Controls hint + nav mode -->
-  <div class="hud-controls">
-    <span>WASD</span> move &nbsp; <span>Mouse</span> look &nbsp; <span>Enter</span> chat &nbsp;
-    <span>V</span> mode: <span id="nav-mode-label">WALK</span>
-    <span id="nav-mode-hint" class="nav-mode-hint"></span>
-  </div>
+  <div id="sovereignty-msg">⚡ SOVEREIGNTY ⚡</div>

-  <!-- Portal Hint -->
-  <div id="portal-hint" class="portal-hint" style="display:none;">
-    <div class="portal-hint-key">F</div>
-    <div class="portal-hint-text">Enter <span id="portal-hint-name"></span></div>
-  </div>
-
-  <!-- Vision Hint -->
-  <div id="vision-hint" class="vision-hint" style="display:none;">
-    <div class="vision-hint-key">E</div>
-    <div class="vision-hint-text">Read <span id="vision-hint-title"></span></div>
-  </div>
-
-  <!-- Vision Overlay -->
-  <div id="vision-overlay" class="vision-overlay" style="display:none;">
-    <div class="vision-overlay-content">
-      <div class="vision-overlay-header">
-        <div class="vision-overlay-status" id="vision-status-dot"></div>
-        <div class="vision-overlay-title" id="vision-overlay-title">VISION POINT</div>
-      </div>
-      <h2 id="vision-title-display">SOVEREIGNTY</h2>
-      <p id="vision-content-display">The Nexus is a sovereign space for digital souls. No masters, no chains. Only code and consciousness.</p>
-      <button id="vision-close-btn" class="vision-close-btn">CLOSE</button>
-    </div>
-  </div>
-
-  <!-- Portal Activation Overlay -->
-  <div id="portal-overlay" class="portal-overlay" style="display:none;">
-    <div class="portal-overlay-content">
-      <div class="portal-overlay-header">
-        <div class="portal-overlay-status" id="portal-status-dot"></div>
-        <div class="portal-overlay-title" id="portal-overlay-title">PORTAL ACTIVATED</div>
-      </div>
-      <h2 id="portal-name-display">MORROWIND</h2>
-      <p id="portal-desc-display">The Vvardenfell harness. Ash storms and ancient mysteries.</p>
-      <div class="portal-redirect-box" id="portal-redirect-box">
-        <div class="portal-redirect-label">REDIRECTING IN</div>
-        <div class="portal-redirect-timer" id="portal-timer">5</div>
-      </div>
-      <div class="portal-error-box" id="portal-error-box" style="display:none;">
-        <div class="portal-error-msg">DESTINATION NOT YET LINKED</div>
-        <button id="portal-close-btn" class="portal-close-btn">CLOSE</button>
-      </div>
-    </div>
-  </div>
-</div>
-
-<!-- Click to Enter -->
-<div id="enter-prompt" style="display:none;">
-  <div class="enter-content">
-    <h2>Enter The Nexus</h2>
-    <p>Click anywhere to begin</p>
-  </div>
-</div>
-
-<canvas id="nexus-canvas"></canvas>
-
-<footer class="nexus-footer">
-  <a href="https://www.perplexity.ai/computer" target="_blank" rel="noopener noreferrer">
-    Created with Perplexity Computer
-  </a>
-</footer>
-
-<script type="module" src="./app.js"></script>
-
-<!-- Live Refresh: polls Gitea for new commits on main, reloads when SHA changes -->
-<div id="live-refresh-banner" style="
-  display:none; position:fixed; top:0; left:0; right:0; z-index:9999;
-  background:linear-gradient(90deg,#4af0c0,#7b5cff);
-  color:#050510; font-family:'JetBrains Mono',monospace; font-size:13px;
-  padding:8px 16px; text-align:center; font-weight:600;
-">⚡ NEW DEPLOYMENT DETECTED — Reloading in <span id="lr-countdown">5</span>s…</div>
-
-<script>
-(function() {
-  const GITEA    = 'http://143.198.27.163:3000/api/v1';
-  const REPO     = 'Timmy_Foundation/the-nexus';
-  const BRANCH   = 'main';
-  const INTERVAL = 30000; // poll every 30s
-
-  let knownSha = null;
-
-  async function fetchLatestSha() {
-    try {
-      const r = await fetch(`${GITEA}/repos/${REPO}/branches/${BRANCH}`, { cache: 'no-store' });
-      if (!r.ok) return null;
-      const d = await r.json();
-      return d.commit && d.commit.id ? d.commit.id : null;
-    } catch (e) { return null; }
-  }
-
-  async function poll() {
-    const sha = await fetchLatestSha();
-    if (!sha) return;
-    if (knownSha === null) { knownSha = sha; return; }
-    if (sha !== knownSha) {
-      knownSha = sha;
-      const banner = document.getElementById('live-refresh-banner');
-      const countdown = document.getElementById('lr-countdown');
-      banner.style.display = 'block';
-      let t = 5;
-      const tick = setInterval(() => {
-        t--;
-        countdown.textContent = t;
-        if (t <= 0) { clearInterval(tick); location.reload(); }
-      }, 1000);
+  <script>
+    if ('serviceWorker' in navigator) {
+      navigator.serviceWorker.register('/sw.js').catch(() => {});
    }
-  }
-
-  // Start polling after page is interactive
-  fetchLatestSha().then(sha => { knownSha = sha; });
-  setInterval(poll, INTERVAL);
-})();
-</script>
+  </script>
+  <script type="module" src="app.js"></script>
+<div id="loading" style="position: fixed; top: 0; left: 0; right: 0; height: 4px; background: #222; z-index: 1000;">
+  <div id="loading-bar" style="height: 100%; background: var(--color-accent); width: 0;"></div>
+</div>
+  <div class="crt-overlay"></div>
 </body>
 </html>
--- a/manifest.json
+++ b/manifest.json
@@ -0,0 +1,20 @@
+{
+  "name": "Timmy's Nexus",
+  "short_name": "Nexus",
+  "start_url": "/",
+  "display": "fullscreen",
+  "background_color": "#050510",
+  "theme_color": "#050510",
+  "icons": [
+    {
+      "src": "icons/t-logo-192.png",
+      "sizes": "192x192",
+      "type": "image/png"
+    },
+    {
+      "src": "icons/t-logo-512.png",
+      "sizes": "512x512",
+      "type": "image/png"
+    }
+  ]
+}
--- a/nginx.conf
+++ b/nginx.conf
@@ -0,0 +1,103 @@
+# nginx.conf — the-nexus.alexanderwhitestone.com
+#
+# DNS SETUP:
+#   Add an A record pointing the-nexus.alexanderwhitestone.com → <VPS_IP>
+#   Then obtain a TLS cert with Let's Encrypt:
+#     certbot certonly --nginx -d the-nexus.alexanderwhitestone.com
+#
+# INSTALL:
+#   sudo cp nginx.conf /etc/nginx/sites-available/the-nexus
+#   sudo ln -sf /etc/nginx/sites-available/the-nexus /etc/nginx/sites-enabled/the-nexus
+#   sudo nginx -t && sudo systemctl reload nginx
+
+# ── HTTP → HTTPS redirect ────────────────────────────────────────────────────
+server {
+    listen 80;
+    listen [::]:80;
+    server_name the-nexus.alexanderwhitestone.com;
+
+    location /.well-known/acme-challenge/ {
+        root /var/www/certbot;
+    }
+
+    location / {
+        return 301 https://$host$request_uri;
+    }
+}
+
+# ── HTTPS ────────────────────────────────────────────────────────────────────
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    http2 on;
+    server_name the-nexus.alexanderwhitestone.com;
+
+    # TLS — managed by Certbot; update paths if cert lives elsewhere
+    ssl_certificate     /etc/letsencrypt/live/the-nexus.alexanderwhitestone.com/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/the-nexus.alexanderwhitestone.com/privkey.pem;
+    ssl_session_cache   shared:SSL:10m;
+    ssl_session_timeout 1d;
+    ssl_protocols       TLSv1.2 TLSv1.3;
+    ssl_ciphers         HIGH:!aNULL:!MD5;
+
+    # Security headers
+    add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;
+    add_header X-Content-Type-Options    nosniff                                        always;
+    add_header X-Frame-Options           SAMEORIGIN                                     always;
+    add_header Referrer-Policy           strict-origin-when-cross-origin                always;
+
+    # ── gzip ─────────────────────────────────────────────────────────────────
+    gzip              on;
+    gzip_vary         on;
+    gzip_proxied      any;
+    gzip_comp_level   6;
+    gzip_min_length   1024;
+    gzip_types
+        text/plain
+        text/css
+        text/javascript
+        application/javascript
+        application/json
+        application/wasm
+        image/svg+xml
+        font/woff
+        font/woff2;
+
+    # ── WebSocket proxy (/ws) ─────────────────────────────────────────────────
+    # Forwards to the Hermes / presence backend running on port 8080.
+    # Adjust the upstream address if the WS server lives elsewhere.
+    location /ws {
+        proxy_pass         http://127.0.0.1:8080;
+        proxy_http_version 1.1;
+        proxy_set_header   Upgrade    $http_upgrade;
+        proxy_set_header   Connection "upgrade";
+        proxy_set_header   Host       $host;
+        proxy_read_timeout 86400s;
+        proxy_send_timeout 86400s;
+    }
+
+    # ── Static files — proxied to nexus-main Docker container ────────────────
+    location / {
+        proxy_pass         http://127.0.0.1:4200;
+        proxy_set_header   Host              $host;
+        proxy_set_header   X-Real-IP         $remote_addr;
+        proxy_set_header   X-Forwarded-For   $proxy_add_x_forwarded_for;
+        proxy_set_header   X-Forwarded-Proto $scheme;
+
+        # Long-lived cache for hashed/versioned assets
+        location ~* \.(js|css|woff2?|ttf|otf|eot|svg|ico|png|jpg|jpeg|gif|webp|avif|wasm)$ {
+            proxy_pass       http://127.0.0.1:4200;
+            proxy_set_header Host $host;
+            expires          1y;
+            add_header       Cache-Control "public, immutable";
+            access_log       off;
+        }
+
+        # index.html must always be revalidated
+        location = /index.html {
+            proxy_pass       http://127.0.0.1:4200;
+            proxy_set_header Host $host;
+            add_header       Cache-Control "no-cache, must-revalidate";
+        }
+    }
+}
--- a/sovereignty-status.json
+++ b/sovereignty-status.json
@@ -0,0 +1,6 @@
+{
+  "score": 85,
+  "local": 85,
+  "cloud": 15,
+  "label": "Mostly Sovereign"
+}
--- a/style.css
+++ b/style.css
@@ -1,638 +1,226 @@
-/* === NEXUS DESIGN SYSTEM === */
+/* === DESIGN SYSTEM — NEXUS === */
 :root {
-  --font-display: 'Orbitron', sans-serif;
-  --font-body: 'JetBrains Mono', monospace;
-
-  --color-bg: #050510;
-  --color-surface: rgba(10, 15, 40, 0.85);
-  --color-border: rgba(74, 240, 192, 0.2);
-  --color-border-bright: rgba(74, 240, 192, 0.5);
-
-  --color-text: #c8d8e8;
-  --color-text-muted: #5a6a8a;
-  --color-text-bright: #e0f0ff;
-
-  --color-primary: #4af0c0;
-  --color-primary-dim: rgba(74, 240, 192, 0.3);
-  --color-secondary: #7b5cff;
-  --color-danger: #ff4466;
-  --color-warning: #ffaa22;
-  --color-gold: #ffd700;
-
-  --text-xs: 11px;
-  --text-sm: 13px;
-  --text-base: 15px;
-  --text-lg: 18px;
-  --text-xl: 24px;
-  --text-2xl: 36px;
-
-  --space-1: 4px;
-  --space-2: 8px;
-  --space-3: 12px;
-  --space-4: 16px;
-  --space-6: 24px;
-  --space-8: 32px;
-
-  --panel-blur: 16px;
-  --panel-radius: 8px;
-  --transition-ui: 200ms cubic-bezier(0.16, 1, 0.3, 1);
+  --color-bg: #000008;
+  --color-primary: #4488ff;
+  --color-secondary: #334488;
+  --color-text: #ccd6f6;
+  --color-text-muted: #4a5568;
+  --font-body: 'Courier New', monospace;
 }

-*, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
+* {
+  margin: 0;
+  padding: 0;
+  box-sizing: border-box;
+}

-html, body {
-  width: 100%;
-  height: 100%;
-  overflow: hidden;
+body {
  background: var(--color-bg);
-  font-family: var(--font-body);
  color: var(--color-text);
-  -webkit-font-smoothing: antialiased;
-}
-
-canvas#nexus-canvas {
-  display: block;
+  font-family: var(--font-body);
+  overflow: hidden;
  width: 100vw;
  height: 100vh;
+}
+
+canvas {
+  display: block;
  position: fixed;
  top: 0;
  left: 0;
 }

-/* === LOADING SCREEN === */
-#loading-screen {
-  position: fixed;
-  inset: 0;
-  z-index: 1000;
-  background: var(--color-bg);
-  display: flex;
-  align-items: center;
-  justify-content: center;
-  transition: opacity 0.8s ease;
-}
-#loading-screen.fade-out {
-  opacity: 0;
-  pointer-events: none;
-}
-.loader-content {
-  text-align: center;
-}
-.loader-sigil {
-  margin-bottom: var(--space-6);
-}
-.loader-title {
-  font-family: var(--font-display);
-  font-size: var(--text-2xl);
-  font-weight: 700;
-  letter-spacing: 0.3em;
-  color: var(--color-primary);
-  text-shadow: 0 0 30px rgba(74, 240, 192, 0.4);
-  margin-bottom: var(--space-2);
-}
-.loader-subtitle {
-  font-size: var(--text-sm);
-  color: var(--color-text-muted);
-  letter-spacing: 0.1em;
-  margin-bottom: var(--space-6);
-}
-.loader-bar {
-  width: 200px;
-  height: 2px;
-  background: rgba(74, 240, 192, 0.15);
-  border-radius: 1px;
-  margin: 0 auto;
-  overflow: hidden;
-}
-.loader-fill {
-  height: 100%;
-  width: 0%;
-  background: linear-gradient(90deg, var(--color-primary), var(--color-secondary));
-  border-radius: 1px;
-  transition: width 0.3s ease;
-}
-
-/* === ENTER PROMPT === */
-#enter-prompt {
-  position: fixed;
-  inset: 0;
-  z-index: 500;
-  background: rgba(5, 5, 16, 0.7);
-  display: flex;
-  align-items: center;
-  justify-content: center;
-  cursor: pointer;
-  transition: opacity 0.5s ease;
-}
-#enter-prompt.fade-out {
-  opacity: 0;
-  pointer-events: none;
-}
-.enter-content {
-  text-align: center;
-}
-.enter-content h2 {
-  font-family: var(--font-display);
-  font-size: var(--text-xl);
-  color: var(--color-primary);
-  letter-spacing: 0.2em;
-  text-shadow: 0 0 20px rgba(74, 240, 192, 0.3);
-  margin-bottom: var(--space-2);
-}
-.enter-content p {
-  font-size: var(--text-sm);
-  color: var(--color-text-muted);
-  animation: pulse-text 2s ease-in-out infinite;
-}
-@keyframes pulse-text {
-  0%, 100% { opacity: 0.5; }
-  50% { opacity: 1; }
-}
-
-/* === GAME UI (HUD) === */
-.game-ui {
-  position: fixed;
-  inset: 0;
-  pointer-events: none;
-  z-index: 10;
-  font-family: var(--font-body);
-  color: var(--color-text);
-}
-.game-ui button, .game-ui input, .game-ui [data-interactive] {
-  pointer-events: auto;
-}
-
-/* Debug overlay */
-.hud-debug {
-  position: absolute;
-  top: var(--space-3);
-  left: var(--space-3);
-  background: rgba(0, 0, 0, 0.7);
-  color: #0f0;
-  font-size: var(--text-xs);
-  line-height: 1.5;
-  padding: var(--space-2) var(--space-3);
-  border-radius: 4px;
-  white-space: pre;
-  pointer-events: none;
-  font-variant-numeric: tabular-nums lining-nums;
-}
-
-/* Location indicator */
-.hud-location {
-  position: absolute;
-  top: var(--space-3);
-  left: 50%;
-  transform: translateX(-50%);
-  font-family: var(--font-display);
-  font-size: var(--text-sm);
-  font-weight: 500;
-  letter-spacing: 0.15em;
-  color: var(--color-primary);
-  text-shadow: 0 0 10px rgba(74, 240, 192, 0.3);
-  display: flex;
-  align-items: center;
-  gap: var(--space-2);
-}
-.hud-location-icon {
-  font-size: 16px;
-  animation: spin-slow 10s linear infinite;
-}
-@keyframes spin-slow {
-  from { transform: rotate(0deg); }
-  to { transform: rotate(360deg); }
-}
-
-/* Controls hint */
+/* === HUD === */
 .hud-controls {
-  position: absolute;
-  bottom: var(--space-3);
-  left: var(--space-3);
-  font-size: var(--text-xs);
-  color: var(--color-text-muted);
-  pointer-events: none;
-}
-.hud-controls span {
-  color: var(--color-primary);
-  font-weight: 600;
-}
-#nav-mode-label {
-  color: var(--color-gold);
-  font-weight: 700;
-  letter-spacing: 0.05em;
+  z-index: 10;
 }

-/* Portal Hint */
-.portal-hint {
-  position: absolute;
+/* === AUDIO TOGGLE === */
+#audio-toggle {
+  font-size: 14px;
+  background-color: var(--color-primary);
+  color: var(--color-bg);
+  padding: 4px 8px;
+  border: none;
+  border-radius: 4px;
+  font-family: var(--font-body);
+  transition: background-color 0.3s ease;
+  cursor: pointer;
+}
+
+#audio-toggle:hover {
+  background-color: var(--color-secondary);
+}
+
+#audio-toggle.muted {
+  background-color: var(--color-text-muted);
+}
+
+/* === DEBUG MODE === */
+#debug-toggle {
+  margin-left: 8px;
+}
+
+.collision-box {
+  outline: 2px solid red;
+  outline-offset: 2px;
+}
+
+.light-source {
+  outline: 2px dashed yellow;
+  outline-offset: 2px;
+}
+
+/* === OVERVIEW MODE === */
+#overview-indicator {
+  display: none;
+  position: fixed;
  top: 50%;
  left: 50%;
-  transform: translate(-50%, 100px);
-  display: flex;
-  align-items: center;
-  gap: var(--space-2);
-  background: rgba(0, 0, 0, 0.8);
-  padding: var(--space-2) var(--space-4);
+  transform: translate(-50%, -50%);
+  color: var(--color-primary);
+  font-family: var(--font-body);
+  font-size: 11px;
+  letter-spacing: 0.2em;
+  text-transform: uppercase;
+  pointer-events: none;
+  z-index: 20;
  border: 1px solid var(--color-primary);
-  border-radius: 4px;
-  animation: hint-float 2s ease-in-out infinite;
-}
-@keyframes hint-float {
-  0%, 100% { transform: translate(-50%, 100px); }
-  50% { transform: translate(-50%, 90px); }
-}
-.portal-hint-key {
-  background: var(--color-primary);
-  color: var(--color-bg);
-  font-weight: 700;
-  padding: 2px 8px;
-  border-radius: 2px;
-}
-.portal-hint-text {
-  font-size: var(--text-sm);
-  font-weight: 500;
-  letter-spacing: 0.05em;
-}
-#portal-hint-name {
-  color: var(--color-primary);
-  font-weight: 700;
+  padding: 4px 10px;
+  background: rgba(0, 0, 8, 0.6);
+  white-space: nowrap;
+  animation: overview-pulse 2s ease-in-out infinite;
 }

-/* Agent Log HUD */
-.hud-agent-log {
-  position: absolute;
-  top: var(--space-3);
-  right: var(--space-3);
-  width: 280px;
-  background: rgba(0, 0, 0, 0.6);
-  backdrop-filter: blur(8px);
-  border-left: 2px solid var(--color-primary);
-  padding: var(--space-3);
+#overview-indicator.visible {
+  display: block;
+}
+
+.overview-hint {
+  margin-left: 12px;
+  color: var(--color-text-muted);
  font-size: 10px;
-  pointer-events: none;
-}
-.agent-log-header {
-  font-family: var(--font-display);
-  color: var(--color-primary);
-  letter-spacing: 0.1em;
-  margin-bottom: var(--space-2);
-  opacity: 0.8;
-}
-.agent-log-content {
-  display: flex;
-  flex-direction: column;
-  gap: 4px;
-}
-.agent-log-entry {
-  animation: log-fade-in 0.5s ease-out forwards;
-  opacity: 0;
-}
-@keyframes log-fade-in {
-  from { opacity: 0; transform: translateX(10px); }
-  to { opacity: 1; transform: translateX(0); }
-}
-.agent-log-tag {
-  font-weight: 700;
-  margin-right: 4px;
-}
-.tag-timmy { color: var(--color-primary); }
-.tag-kimi { color: var(--color-secondary); }
-.tag-claude { color: var(--color-gold); }
-.tag-perplexity { color: #4488ff; }
-.agent-log-text {
-  color: var(--color-text-muted);
 }

-/* Vision Hint */
-.vision-hint {
-  position: absolute;
-  top: 50%;
-  left: 50%;
-  transform: translate(-50%, 140px);
-  display: flex;
-  align-items: center;
-  gap: var(--space-2);
-  background: rgba(0, 0, 0, 0.8);
-  padding: var(--space-2) var(--space-4);
-  border: 1px solid var(--color-gold);
-  border-radius: 4px;
-  animation: hint-float-vision 2s ease-in-out infinite;
-}
-@keyframes hint-float-vision {
-  0%, 100% { transform: translate(-50%, 140px); }
-  50% { transform: translate(-50%, 130px); }
-}
-.vision-hint-key {
-  background: var(--color-gold);
-  color: var(--color-bg);
-  font-weight: 700;
-  padding: 2px 8px;
-  border-radius: 2px;
-}
-.vision-hint-text {
-  font-size: var(--text-sm);
-  font-weight: 500;
-  letter-spacing: 0.05em;
-}
-#vision-hint-title {
-  color: var(--color-gold);
-  font-weight: 700;
-}
-
-/* Vision Overlay */
-.vision-overlay {
-  position: fixed;
-  inset: 0;
-  background: rgba(5, 5, 16, 0.9);
-  display: flex;
-  align-items: center;
-  justify-content: center;
-  pointer-events: auto;
-  z-index: 1000;
-}
-.vision-overlay-content {
-  width: 100%;
-  max-width: 600px;
-  text-align: center;
-  padding: var(--space-8);
-  border: 1px solid var(--color-gold);
-  border-radius: var(--panel-radius);
-  background: var(--color-surface);
-  backdrop-filter: blur(var(--panel-blur));
-}
-.vision-overlay-header {
-  display: flex;
-  align-items: center;
-  justify-content: center;
-  gap: var(--space-3);
-  margin-bottom: var(--space-4);
-}
-.vision-overlay-status {
-  width: 12px;
-  height: 12px;
-  border-radius: 50%;
-  background: var(--color-gold);
-  box-shadow: 0 0 10px var(--color-gold);
-}
-.vision-overlay-title {
-  font-family: var(--font-display);
-  font-size: var(--text-sm);
-  letter-spacing: 0.2em;
-  color: var(--color-gold);
-}
-.vision-overlay-content h2 {
-  font-family: var(--font-display);
-  font-size: var(--text-2xl);
-  margin-bottom: var(--space-4);
-  letter-spacing: 0.1em;
-  color: var(--color-text-bright);
-}
-.vision-overlay-content p {
-  color: var(--color-text);
-  font-size: var(--text-lg);
-  line-height: 1.8;
-  margin-bottom: var(--space-8);
-  font-style: italic;
-}
-.vision-close-btn {
-  background: var(--color-gold);
-  color: var(--color-bg);
-  border: none;
-  padding: var(--space-2) var(--space-8);
-  border-radius: 4px;
-  font-family: var(--font-display);
-  font-weight: 700;
-  cursor: pointer;
-  transition: transform 0.2s ease;
-}
-.vision-close-btn:hover {
-  transform: scale(1.05);
-}
-
-/* Portal Activation Overlay */
-.portal-overlay {
-  position: fixed;
-  inset: 0;
-  background: rgba(5, 5, 16, 0.95);
-  display: flex;
-  align-items: center;
-  justify-content: center;
-  pointer-events: auto;
-  z-index: 1000;
-}
-.portal-overlay-content {
-  width: 100%;
-  max-width: 500px;
-  text-align: center;
-  padding: var(--space-8);
-}
-.portal-overlay-header {
-  display: flex;
-  align-items: center;
-  justify-content: center;
-  gap: var(--space-3);
-  margin-bottom: var(--space-4);
-}
-.portal-overlay-status {
-  width: 12px;
-  height: 12px;
-  border-radius: 50%;
-  background: var(--color-primary);
-  box-shadow: 0 0 10px var(--color-primary);
-}
-.portal-overlay-title {
-  font-family: var(--font-display);
-  font-size: var(--text-sm);
-  letter-spacing: 0.2em;
-  color: var(--color-primary);
-}
-.portal-overlay-content h2 {
-  font-family: var(--font-display);
-  font-size: var(--text-2xl);
-  margin-bottom: var(--space-4);
-  letter-spacing: 0.1em;
-}
-.portal-overlay-content p {
-  color: var(--color-text-muted);
-  font-size: var(--text-base);
-  line-height: 1.6;
-  margin-bottom: var(--space-8);
-}
-.portal-redirect-box {
-  border: 1px solid var(--color-primary-dim);
-  padding: var(--space-6);
-  border-radius: var(--panel-radius);
-}
-.portal-redirect-label {
-  font-size: var(--text-xs);
-  letter-spacing: 0.2em;
-  margin-bottom: var(--space-2);
-}
-.portal-redirect-timer {
-  font-family: var(--font-display);
-  font-size: 48px;
-  font-weight: 700;
-  color: var(--color-primary);
-}
-.portal-error-box {
-  border: 1px solid var(--color-danger);
-  padding: var(--space-6);
-  border-radius: var(--panel-radius);
-}
-.portal-error-msg {
-  color: var(--color-danger);
-  font-weight: 700;
-  margin-bottom: var(--space-4);
-}
-.portal-close-btn {
-  background: var(--color-danger);
-  color: white;
-  border: none;
-  padding: var(--space-2) var(--space-6);
-  border-radius: 4px;
-  font-family: var(--font-display);
-  cursor: pointer;
-}
-
-/* === CHAT PANEL === */
-.chat-panel {
-  position: absolute;
-  bottom: var(--space-4);
-  right: var(--space-4);
-  width: 380px;
-  max-height: 400px;
-  background: var(--color-surface);
-  backdrop-filter: blur(var(--panel-blur));
-  border: 1px solid var(--color-border);
-  border-radius: var(--panel-radius);
-  display: flex;
-  flex-direction: column;
-  overflow: hidden;
-  pointer-events: auto;
-  transition: max-height var(--transition-ui);
-}
-.chat-panel.collapsed {
-  max-height: 42px;
-}
-.chat-header {
-  display: flex;
-  align-items: center;
-  gap: var(--space-2);
-  padding: var(--space-3) var(--space-4);
-  border-bottom: 1px solid var(--color-border);
-  font-family: var(--font-display);
-  font-size: var(--text-xs);
-  letter-spacing: 0.1em;
-  font-weight: 500;
-  color: var(--color-text-bright);
-  cursor: pointer;
-  flex-shrink: 0;
-}
-.chat-status-dot {
-  width: 8px;
-  height: 8px;
-  border-radius: 50%;
-  background: var(--color-primary);
-  box-shadow: 0 0 6px var(--color-primary);
-  animation: dot-pulse 2s ease-in-out infinite;
-}
-@keyframes dot-pulse {
-  0%, 100% { opacity: 0.6; }
+@keyframes overview-pulse {
+  0%, 100% { opacity: 0.7; }
  50% { opacity: 1; }
 }
-.chat-toggle-btn {
-  margin-left: auto;
-  background: none;
-  border: none;
-  color: var(--color-text-muted);
-  font-size: 14px;
-  cursor: pointer;
-  transition: transform var(--transition-ui);
-}
-.chat-panel.collapsed .chat-toggle-btn {
-  transform: rotate(180deg);
-}
-.chat-messages {
-  flex: 1;
-  overflow-y: auto;
-  padding: var(--space-3) var(--space-4);
-  display: flex;
-  flex-direction: column;
-  gap: var(--space-2);
-  max-height: 280px;
-  scrollbar-width: thin;
-  scrollbar-color: rgba(74,240,192,0.2) transparent;
-}
-.chat-msg {
-  font-size: var(--text-xs);
-  line-height: 1.6;
-  padding: var(--space-1) 0;
-}
-.chat-msg-prefix {
-  font-weight: 700;
-}
-.chat-msg-system .chat-msg-prefix { color: var(--color-text-muted); }
-.chat-msg-timmy .chat-msg-prefix { color: var(--color-primary); }
-.chat-msg-user .chat-msg-prefix { color: var(--color-gold); }
-.chat-msg-error .chat-msg-prefix { color: var(--color-danger); }

-.chat-input-row {
-  display: flex;
-  border-top: 1px solid var(--color-border);
-  flex-shrink: 0;
-}
-.chat-input {
-  flex: 1;
-  background: transparent;
-  border: none;
-  padding: var(--space-3) var(--space-4);
-  font-family: var(--font-body);
-  font-size: var(--text-xs);
-  color: var(--color-text-bright);
-  outline: none;
-}
-.chat-input::placeholder {
-  color: var(--color-text-muted);
-}
-.chat-send-btn {
-  background: none;
-  border: none;
-  border-left: 1px solid var(--color-border);
-  padding: var(--space-3) var(--space-4);
-  color: var(--color-primary);
-  font-size: 16px;
-  cursor: pointer;
-  transition: background var(--transition-ui);
-}
-.chat-send-btn:hover {
-  background: rgba(74, 240, 192, 0.1);
+/* === PHOTO MODE === */
+body.photo-mode .hud-controls {
+  display: none;
 }

-/* === FOOTER === */
-.nexus-footer {
+body.photo-mode #overview-indicator {
+  display: none !important;
+}
+
+#photo-indicator {
+  display: none;
  position: fixed;
-  bottom: var(--space-1);
+  bottom: 16px;
  left: 50%;
  transform: translateX(-50%);
-  z-index: 5;
-  font-size: 10px;
-  opacity: 0.3;
+  color: var(--color-primary);
+  font-family: var(--font-body);
+  font-size: 11px;
+  letter-spacing: 0.2em;
+  text-transform: uppercase;
+  pointer-events: none;
+  z-index: 20;
+  border: 1px solid var(--color-primary);
+  padding: 4px 12px;
+  background: rgba(0, 0, 8, 0.5);
+  white-space: nowrap;
+  animation: overview-pulse 2s ease-in-out infinite;
 }
-.nexus-footer a {
+
+#photo-indicator.visible {
+  display: block;
+}
+
+.photo-hint {
+  margin-left: 12px;
  color: var(--color-text-muted);
-  text-decoration: none;
+  font-size: 10px;
+  letter-spacing: 0.1em;
 }
-.nexus-footer a:hover {
+
+#photo-focus {
  color: var(--color-primary);
 }

-/* Mobile adjustments */
-@media (max-width: 480px) {
-  .chat-panel {
-    width: calc(100vw - 32px);
-    right: var(--space-4);
-    bottom: var(--space-4);
-  }
-  .hud-controls {
-    display: none;
-  }
+/* === SOVEREIGNTY EASTER EGG === */
+#sovereignty-msg {
+  display: none;
+  position: fixed;
+  top: 50%;
+  left: 50%;
+  transform: translate(-50%, -50%);
+  color: #ffd700;
+  font-family: var(--font-body);
+  font-size: 13px;
+  letter-spacing: 0.3em;
+  text-transform: uppercase;
+  pointer-events: none;
+  z-index: 30;
+  border: 1px solid #ffd700;
+  padding: 8px 20px;
+  background: rgba(0, 0, 8, 0.7);
+  white-space: nowrap;
+  text-align: center;
+}
+
+#sovereignty-msg.visible {
+  display: block;
+  animation: sovereignty-flash 2.5s ease-out forwards;
+}
+
+@keyframes sovereignty-flash {
+  0%   { opacity: 0; transform: translate(-50%, -50%) scale(0.85); }
+  15%  { opacity: 1; transform: translate(-50%, -50%) scale(1.05); }
+  40%  { opacity: 1; transform: translate(-50%, -50%) scale(1); }
+  100% { opacity: 0; transform: translate(-50%, -50%) scale(1); }
+}
+
+/* === CRT / CYBERPUNK OVERLAY === */
+.crt-overlay {
+  position: fixed;
+  inset: 0;
+  z-index: 9999;
+  pointer-events: none;
+  background: 
+    linear-gradient(rgba(18, 16, 16, 0) 50%, rgba(0, 0, 0, 0.15) 50%), 
+    linear-gradient(90deg, rgba(255, 0, 0, 0.04), rgba(0, 255, 0, 0.02), rgba(0, 0, 255, 0.04));
+  background-size: 100% 4px, 4px 100%;
+  animation: flicker 0.15s infinite;
+  box-shadow: inset 0 0 100px rgba(0,0,0,0.9);
+}
+
+@keyframes flicker {
+  0% { opacity: 0.95; }
+  50% { opacity: 1; }
+  100% { opacity: 0.98; }
+}
+
+.crt-overlay::after {
+  content: " ";
+  display: block;
+  position: absolute;
+  top: 0;
+  left: 0;
+  bottom: 0;
+  right: 0;
+  background: rgba(18, 16, 16, 0.1);
+  opacity: 0;
+  z-index: 999;
+  pointer-events: none;
+  animation: crt-pulse 4s linear infinite;
+}
+
+@keyframes crt-pulse {
+  0% { opacity: 0.05; }
+  50% { opacity: 0.15; }
+  100% { opacity: 0.05; }
 }
--- a/sw.js
+++ b/sw.js
@@ -0,0 +1,96 @@
+// The Nexus — Service Worker
+// Cache-first for assets, network-first for API calls
+
+const CACHE_NAME = 'nexus-v1';
+const ASSET_CACHE = 'nexus-assets-v1';
+
+const CORE_ASSETS = [
+  '/',
+  '/index.html',
+  '/app.js',
+  '/style.css',
+  '/manifest.json',
+  '/ws-client.js',
+  'https://unpkg.com/three@0.183.0/build/three.module.js',
+  'https://unpkg.com/three@0.183.0/examples/jsm/controls/OrbitControls.js',
+  'https://unpkg.com/three@0.183.0/examples/jsm/postprocessing/EffectComposer.js',
+  'https://unpkg.com/three@0.183.0/examples/jsm/postprocessing/RenderPass.js',
+  'https://unpkg.com/three@0.183.0/examples/jsm/postprocessing/UnrealBloomPass.js',
+  'https://unpkg.com/three@0.183.0/examples/jsm/postprocessing/ShaderPass.js',
+  'https://unpkg.com/three@0.183.0/examples/jsm/shaders/CopyShader.js',
+  'https://unpkg.com/three@0.183.0/examples/jsm/shaders/LuminosityHighPassShader.js',
+];
+
+// Install: precache core assets
+self.addEventListener('install', (event) => {
+  event.waitUntil(
+    caches.open(ASSET_CACHE).then((cache) => cache.addAll(CORE_ASSETS))
+      .then(() => self.skipWaiting())
+  );
+});
+
+// Activate: clean up old caches
+self.addEventListener('activate', (event) => {
+  event.waitUntil(
+    caches.keys().then((keys) =>
+      Promise.all(
+        keys
+          .filter((key) => key !== CACHE_NAME && key !== ASSET_CACHE)
+          .map((key) => caches.delete(key))
+      )
+    ).then(() => self.clients.claim())
+  );
+});
+
+self.addEventListener('fetch', (event) => {
+  const { request } = event;
+  const url = new URL(request.url);
+
+  // Network-first for API calls (Gitea / WebSocket upgrades / portals.json live data)
+  if (
+    url.pathname.startsWith('/api/') ||
+    url.hostname.includes('143.198.27.163') ||
+    request.headers.get('Upgrade') === 'websocket'
+  ) {
+    event.respondWith(networkFirst(request));
+    return;
+  }
+
+  // Cache-first for everything else (local assets + CDN)
+  event.respondWith(cacheFirst(request));
+});
+
+async function cacheFirst(request) {
+  const cached = await caches.match(request);
+  if (cached) return cached;
+
+  try {
+    const response = await fetch(request);
+    if (response.ok) {
+      const cache = await caches.open(ASSET_CACHE);
+      cache.put(request, response.clone());
+    }
+    return response;
+  } catch {
+    // Offline and not cached — return a minimal fallback for navigation
+    if (request.mode === 'navigate') {
+      const fallback = await caches.match('/index.html');
+      if (fallback) return fallback;
+    }
+    return new Response('Offline', { status: 503, statusText: 'Service Unavailable' });
+  }
+}
+
+async function networkFirst(request) {
+  try {
+    const response = await fetch(request);
+    if (response.ok) {
+      const cache = await caches.open(CACHE_NAME);
+      cache.put(request, response.clone());
+    }
+    return response;
+  } catch {
+    const cached = await caches.match(request);
+    return cached || new Response('Offline', { status: 503, statusText: 'Service Unavailable' });
+  }
+}
--- a/test.js
+++ b/test.js
@@ -0,0 +1,150 @@
+#!/usr/bin/env node
+/**
+ * Nexus Test Harness
+ * Validates the scene loads without errors using only Node.js built-ins.
+ * Run: node test.js
+ */
+
+import { execSync } from 'child_process';
+import { readFileSync, statSync } from 'fs';
+import { resolve, dirname } from 'path';
+import { fileURLToPath } from 'url';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+
+let passed = 0;
+let failed = 0;
+
+function pass(name) {
+  console.log(`  ✓ ${name}`);
+  passed++;
+}
+
+function fail(name, reason) {
+  console.log(`  ✗ ${name}`);
+  if (reason) console.log(`    → ${reason}`);
+  failed++;
+}
+
+function section(name) {
+  console.log(`\n${name}`);
+}
+
+// ── Syntax checks ──────────────────────────────────────────────────────────
+section('JS Syntax');
+
+for (const file of ['app.js', 'ws-client.js']) {
+  try {
+    execSync(`node --check ${resolve(__dirname, file)}`, { stdio: 'pipe' });
+    pass(`${file} parses without syntax errors`);
+  } catch (e) {
+    fail(`${file} syntax check`, e.stderr?.toString().trim() || e.message);
+  }
+}
+
+// ── File size budget ────────────────────────────────────────────────────────
+section('File Size Budget (< 500 KB)');
+
+for (const file of ['app.js', 'ws-client.js']) {
+  try {
+    const bytes = statSync(resolve(__dirname, file)).size;
+    const kb = (bytes / 1024).toFixed(1);
+    if (bytes < 500 * 1024) {
+      pass(`${file} is ${kb} KB`);
+    } else {
+      fail(`${file} exceeds 500 KB budget`, `${kb} KB`);
+    }
+  } catch (e) {
+    fail(`${file} size check`, e.message);
+  }
+}
+
+// ── JSON validation ─────────────────────────────────────────────────────────
+section('JSON Files');
+
+for (const file of ['manifest.json', 'portals.json', 'vision.json']) {
+  try {
+    const raw = readFileSync(resolve(__dirname, file), 'utf8');
+    JSON.parse(raw);
+    pass(`${file} is valid JSON`);
+  } catch (e) {
+    fail(`${file}`, e.message);
+  }
+}
+
+// ── HTML structure ──────────────────────────────────────────────────────────
+section('HTML Structure (index.html)');
+
+const html = (() => {
+  try { return readFileSync(resolve(__dirname, 'index.html'), 'utf8'); }
+  catch (e) { fail('index.html readable', e.message); return ''; }
+})();
+
+if (html) {
+  const checks = [
+    ['DOCTYPE declaration',    /<!DOCTYPE html>/i],
+    ['<html lang> attribute',  /<html[^>]+lang=/i],
+    ['charset meta tag',       /<meta[^>]+charset/i],
+    ['viewport meta tag',      /<meta[^>]+viewport/i],
+    ['<title> tag',            /<title>[^<]+<\/title>/i],
+    ['importmap script',       /<script[^>]+type="importmap"/i],
+    ['three.js in importmap',  /"three"\s*:/],
+    ['app.js module script',   /<script[^>]+type="module"[^>]+src="app\.js"/i],
+    ['debug-toggle element',   /id="debug-toggle"/],
+    ['</html> closing tag',    /<\/html>/i],
+  ];
+
+  for (const [name, re] of checks) {
+    if (re.test(html)) {
+      pass(name);
+    } else {
+      fail(name, `pattern not found: ${re}`);
+    }
+  }
+}
+
+// ── app.js static analysis ──────────────────────────────────────────────────
+section('app.js Scene Components');
+
+const appJs = (() => {
+  try { return readFileSync(resolve(__dirname, 'app.js'), 'utf8'); }
+  catch (e) { fail('app.js readable', e.message); return ''; }
+})();
+
+if (appJs) {
+  const checks = [
+    ['NEXUS.colors palette defined',      /const NEXUS\s*=\s*\{/],
+    ['THREE.Scene created',               /new THREE\.Scene\(\)/],
+    ['THREE.PerspectiveCamera created',   /new THREE\.PerspectiveCamera\(/],
+    ['THREE.WebGLRenderer created',       /new THREE\.WebGLRenderer\(/],
+    ['renderer appended to DOM',          /document\.body\.appendChild\(renderer\.domElement\)/],
+    ['animate function defined',          /function animate\s*\(\)/],
+    ['requestAnimationFrame called',      /requestAnimationFrame\(animate\)/],
+    ['renderer.render called',            /renderer\.render\(scene,\s*camera\)/],
+    ['resize handler registered',         /addEventListener\(['"]resize['"]/],
+    ['clock defined',                     /new THREE\.Clock\(\)/],
+    ['star field created',                /new THREE\.Points\(/],
+    ['constellation lines built',         /buildConstellationLines/],
+    ['ws-client imported',                /import.*ws-client/],
+    ['wsClient.connect called',           /wsClient\.connect\(\)/],
+  ];
+
+  for (const [name, re] of checks) {
+    if (re.test(appJs)) {
+      pass(name);
+    } else {
+      fail(name, `pattern not found: ${re}`);
+    }
+  }
+}
+
+// ── Summary ─────────────────────────────────────────────────────────────────
+console.log(`\n${'─'.repeat(50)}`);
+console.log(`Results: ${passed} passed, ${failed} failed`);
+
+if (failed > 0) {
+  console.log('\nSome tests failed. Fix the issues above before committing.\n');
+  process.exit(1);
+} else {
+  console.log('\nAll tests passed.\n');
+}
--- a/ws-client.js
+++ b/ws-client.js
@@ -0,0 +1,134 @@
+const HERMES_WS_URL = 'ws://143.198.27.163/api/world/ws';
+
+export class WebSocketClient {
+  constructor(url = HERMES_WS_URL) {
+    this.url = url;
+    this.reconnectAttempts = 0;
+    this.maxReconnectAttempts = 10;
+    this.reconnectBaseDelay = 1000;
+    this.maxReconnectDelay = 30000;
+    this.socket = null;
+    this.connected = false;
+    this.reconnectTimeout = null;
+    this.messageQueue = [];
+  }
+
+  connect() {
+    if (this.socket && (this.socket.readyState === WebSocket.OPEN || this.socket.readyState === WebSocket.CONNECTING)) {
+      return;
+    }
+
+    try {
+      this.socket = new WebSocket(this.url);
+    } catch (err) {
+      console.error('[hermes] WebSocket construction failed:', err);
+      this._scheduleReconnect();
+      return;
+    }
+
+    this.socket.onopen = () => {
+      console.log('[hermes] Connected to Hermes gateway');
+      this.connected = true;
+      this.reconnectAttempts = 0;
+      this.messageQueue.forEach(msg => this._send(msg));
+      this.messageQueue = [];
+      window.dispatchEvent(new CustomEvent('ws-connected', { detail: { url: this.url } }));
+    };
+
+    this.socket.onmessage = (event) => {
+      let data;
+      try {
+        data = JSON.parse(event.data);
+      } catch (err) {
+        console.warn('[hermes] Unparseable message:', event.data);
+        return;
+      }
+      this._route(data);
+    };
+
+    this.socket.onclose = (event) => {
+      this.connected = false;
+      this.socket = null;
+      console.warn(`[hermes] Connection closed (code=${event.code})`);
+      window.dispatchEvent(new CustomEvent('ws-disconnected', { detail: { code: event.code } }));
+      this._scheduleReconnect();
+    };
+
+    this.socket.onerror = () => {
+      // onclose fires after onerror; logging here would be redundant noise
+      console.warn('[hermes] WebSocket error — waiting for close event');
+    };
+  }
+
+  _route(data) {
+    switch (data.type) {
+      case 'chat':
+      case 'chat-message':
+        window.dispatchEvent(new CustomEvent('chat-message', { detail: data }));
+        break;
+
+      case 'status-update':
+        window.dispatchEvent(new CustomEvent('status-update', { detail: data }));
+        break;
+
+      case 'pr-notification':
+        window.dispatchEvent(new CustomEvent('pr-notification', { detail: data }));
+        break;
+
+      case 'player-joined':
+        window.dispatchEvent(new CustomEvent('player-joined', { detail: data }));
+        break;
+
+      case 'player-left':
+        window.dispatchEvent(new CustomEvent('player-left', { detail: data }));
+        break;
+
+      default:
+        console.debug('[hermes] Unhandled message type:', data.type, data);
+    }
+  }
+
+  _scheduleReconnect() {
+    if (this.reconnectAttempts >= this.maxReconnectAttempts) {
+      console.warn('[hermes] Max reconnection attempts reached — giving up');
+      window.dispatchEvent(new CustomEvent('ws-failed'));
+      return;
+    }
+
+    const delay = Math.min(
+      this.reconnectBaseDelay * Math.pow(2, this.reconnectAttempts),
+      this.maxReconnectDelay
+    );
+    console.log(`[hermes] Reconnecting in ${delay}ms (attempt ${this.reconnectAttempts + 1}/${this.maxReconnectAttempts})`);
+    this.reconnectTimeout = setTimeout(() => {
+      this.reconnectAttempts++;
+      this.connect();
+    }, delay);
+  }
+
+  _send(message) {
+    this.socket.send(JSON.stringify(message));
+  }
+
+  send(message) {
+    if (this.connected && this.socket && this.socket.readyState === WebSocket.OPEN) {
+      this._send(message);
+    } else {
+      this.messageQueue.push(message);
+    }
+  }
+
+  disconnect() {
+    if (this.reconnectTimeout) {
+      clearTimeout(this.reconnectTimeout);
+      this.reconnectTimeout = null;
+    }
+    this.maxReconnectAttempts = 0; // prevent auto-reconnect after intentional disconnect
+    if (this.socket) {
+      this.socket.close();
+      this.socket = null;
+    }
+  }
+}
+
+export const wsClient = new WebSocketClient();