feat(personal): add Emoji, Agent Office, and offline Diagram Design

.gitleaksignore

@@ -0,0 +1,5 @@
+# Verified SHA-256 provenance hashes for Diagram Design's type-sankey.md,
+# not API keys. Exact historical fingerprints only; no path/rule exclusions.
+# Source and installed-file digests were recomputed and match the pinned files.
+02dca28a820aaa60861183c57e3b7ac1a4e70214:personal/vendor/diagram-design.json:generic-api-key:61
+02dca28a820aaa60861183c57e3b7ac1a4e70214:personal/vendor/diagram-design.json:generic-api-key:152

Makefile

@@ -4,6 +4,7 @@ PY := $(VENV)/bin/python
 PATTERNS ?= .patterns
 LINT_PATHS := scripts/validate-kits.py scripts/run-kit-tests.py scripts/tests claude-code/files claude-code/tests claude-code/scripts/test claude-code/scripts/verify
 LINT_PATHS += codex/files codex/tests codex/scripts antigravity/files antigravity/tests antigravity/scripts scripts/verify-native-cli.py personal/scripts/vendor-pocock-skills
+LINT_PATHS += personal/scripts/vendor-diagram-design personal/scripts/test-diagram-design.py personal/vendor/diagram-design-local/scripts
 GITLEAKS ?= gitleaks
 
 .PHONY: setup check lint test validate security

README.md

@@ -65,7 +65,7 @@ An agent kit is a `hybrid/v1` mixin that:
 | [`antigravity/`](antigravity/) | Agent | Pinned Google agy + private Gemini-to-Chat-Completions bridge | **Experimental** — real ARM64 CLI and isolated Paseo verified against synthetic provider; live gateway and x64 pending |
 | [`opencode-go-provider/`](opencode-go-provider/) | Provider | OpenCode Go (`openai-compatible`) facts and a 19-model neutral catalog | **Preview** — blocked on the acq credential-binding addition |
 | [`pi-coding-agent/`](pi-coding-agent/) | Agent | Pinned pi CLI + `~/.pi/agent/models.json` renderer | **Preview** — live verification pending acq PR 611 |
-| [`personal/`](personal/) | Skill + startup step | The author's personal layer, dropped into `~/.agents/skills`: the `paseo-first-mate` skill and 27 vendored skills by [Matt Pocock](https://github.com/mattpocock/skills) (MIT, pinned commit; his code review is installed as `pocock-code-review`). See [`personal/NOTICE`](personal/NOTICE) for credits. Also installs pinned Paseo plugins at startup (one background command, `github.com` egress; needs the paseo kit) | Offline-verified; plugin installer exercised against a real Paseo 0.12.0 daemon; no live `acq` run |
+| [`personal/`](personal/) | Skill + startup step | The author's personal layer: `paseo-first-mate`, 27 pinned skills by [Matt Pocock](https://github.com/mattpocock/skills), and adapted offline [Diagram Design](personal/README.md#diagram-design). See [`personal/NOTICE`](personal/NOTICE) for credits. Installs six [pinned Paseo plugins](personal/README.md#paseo-plugins), including Emoji and Agent Office (one background command; `github.com` and `registry.npmjs.org` egress; needs the paseo kit; full list requires daemon/client 0.15.2+) | Offline-verified; earlier four-plugin installer live-tested on 0.12.0; Emoji/Agent Office not live-verified; Diagram Design browser export blocked pending provisioned runtime; no live `acq` run |
 
 **Preview status.**
 

personal/AGENTS.md

@@ -3,7 +3,9 @@
 An acq `hybrid/v1` skill kit. Start with [`README.md`](README.md).
 
 - **Do not hand-edit** anything under `files/home/.agents/skills/` except
-  `paseo-first-mate/`. The rest is Matt Pocock's work, copied by
+  `paseo-first-mate/`. Diagram Design is generated by `scripts/vendor-diagram-design`
+  from its pinned source and `vendor/diagram-design-local/` adaptations; edit those
+  inputs, regenerate, and verify `vendor/diagram-design.json`. The other skills are Matt Pocock's work, copied by
   `scripts/vendor-pocock-skills` and checked against `vendor/mattpocock-skills.json`.
   To change it, change the script. Read
   [`docs/vendored-skills.md`](docs/vendored-skills.md) first: it lists every local
@@ -23,6 +25,6 @@ An acq `hybrid/v1` skill kit. Start with [`README.md`](README.md).
 - The kit has one `commands` entry on purpose: a background startup step that runs
   `files/home/paseo-plugins-install.sh` (ADR 0003). Skills are dropped at their final path;
   do not add a step to link or fetch them. It has no `agent:` block, and `caps.network`
-  lists `github.com` only. A new Paseo plugin is one `install_plugin ID git:owner/repo <40-hex>`
+  lists `github.com` and `registry.npmjs.org`. A new Paseo plugin is one `install_plugin ID git:owner/repo <40-hex>`
   (or `npm:pkg <x.y.z>`) line in that script; the script refuses unpinned sources and
   `scripts/verify` section 3d checks it. Read the plugin's source at the pin first.

personal/NOTICE

@@ -56,6 +56,20 @@ files/home/.agents/licenses/ in this directory.
    repository licence. AI-assisted changes are disclosed in the pull request that
    introduces them.
 
+5. Diagram Design
+
+   Adapted from https://github.com/cathrynlavery/diagram-design at commit
+   f2496acbde9f45ccb55c24d4f75210c8a1355df8 (version 2.6.153).
+   Licence: MIT. Copyright (c) 2025 Cathryn Lavery.
+   Notice: files/home/.agents/licenses/diagram-design-LICENSE
+
+   The original design references, templates and Python helpers are selectively
+   copied. System fonts, project-local branding and approval-gated export are
+   local adaptations, maintained in vendor/diagram-design-local/ and recorded in
+   vendor/diagram-design.json. No logo gallery, third-party icons, font binaries,
+   examples, or upstream maintainer tooling is redistributed. Cathryn Lavery did
+   not make or review these adaptations. Local code was written with AI assistance.
+
 To add third-party material to this kit: ship its licence under
 files/home/.agents/licenses/, list it in spec.yaml, add an entry to THIRD_PARTY in
 scripts/vendor-pocock-skills (if it is part of the vendored set) or to this file, and

personal/README.md

@@ -19,9 +19,11 @@ network hosts, `github.com` and `registry.npmjs.org`, for that command.
     assets/first-mate-wait.sh    background wait loop around the detector; one loop per
                                  FIRST_MATE_DIR, owned by the starting agent (flock)
   <27 skills from mattpocock/skills>   vendored at a pinned commit, see below
+  diagram-design/              offline editorial diagram guidance and guarded export
 ~/.agents/licenses/                            MIT notices for the third-party material
   mattpocock-skills-LICENSE                    Matt Pocock (the vendored skills)
   humanlayer-skills-LICENSE                    HumanLayer (show-me, adapted in the pr skill)
+  diagram-design-LICENSE                       Cathryn Lavery (Diagram Design)
 ```
 
 `~/.agents/skills` is the cross-agent skills root that the supported agents scan,
@@ -61,10 +63,18 @@ each new sandbox installs them again.
 
 | Plugin | Source | Pin (sha512s are recorded for reviewers; nothing checks them at install) | Notes |
 | --- | --- | --- | --- |
-| `quote-notes` ("Codex Style Annotations", 0.2.2) by xzthemeofsss | `git:xzthemeofsss/paseo-plugins` | `5ce92527c99a328b28775c7d745f324f2cc84309` | Client plus a one-line settings registration; no server handlers. Needs Paseo 0.11.4 or later. Disable the older `quote` plugin first if you add it. Some labels are in Chinese. |
-| `skills` ("Skills", 0.4.0) by gpambrozio | `npm:@gpambrozio/paseo-skills` | `0.4.0` (sha512 `zMgP2U/vrRsLkKhoQICkN52+YoDy2WkkYymEDmruduKxf4Dq99Ct8Pk3xqJyAzijq2oprMFYLbj/wT6XepBLeA==`) | Lists the skills each agent session can use, renders each `SKILL.md`, and can invoke one. Reads the skill directories under `~/.claude`, `~/.codex` (or `$CODEX_HOME`) and `~/.agents`, and the project-level ones for the agent's working directory; writes nothing; no network or subprocess. Shows this kit's 28 skills in the Paseo UI. Needs Paseo 0.9 or later. |
-| `mermaid` (0.5.0) by dutchakdev | `npm:paseo-plugin-mermaid` | `0.5.0` (sha512 `vNVNE1b0z7HJ1093jT1Cz/f3QYXFKg6yTfdqTHeFqaa9Ks437b0nrmQRdY/tWC9XDdXvgjWCCS1v9CsYYsCOhg==`) | Draws `mermaid` code blocks in chat as diagrams (flowcharts and sequence diagrams itself, other types through Paseo's Markdown on 0.13 or later), and opens `.mmd` files as diagrams. Runs only in the app: no server code, network or subprocess. Needs Paseo 0.11 or later. If you install Better Paseo, turn off its "Plugin markdown for replies" setting. |
-| `beautiful-chat` (0.1.0) by ABorakati | `git:ABorakati/beautiful-chat` | `42b61d8301b5400a67821bbbfcf99fa8b681dc37` | Redraws chat timeline items (tool calls, reasoning, checklists, prompts, errors, replies) as typed, syntax-highlighted cards that follow the Paseo theme, with its own settings page and chat find. The code does not gate on provider, so it applies to every agent; only the OMP-specific parts (job and IRC envelopes) are provider specific. Its manifest runs `npm ci --include=dev` during install, so the daemon needs `npm` on its PATH and `registry.npmjs.org`. Its server spawns `xdg-open` for "reveal path", which does nothing useful in a headless sandbox. **Conflicts with `mermaid` by default, see below.** |
+| [`quote-notes`](https://paseo.sh/plugins/xzthemeofsss/quote-notes) ("Codex Style Annotations", 0.2.2) by xzthemeofsss | `git:xzthemeofsss/paseo-plugins` | `5ce92527c99a328b28775c7d745f324f2cc84309` | Client plus a one-line settings registration; no server handlers. Needs Paseo 0.11.4 or later. Disable the older `quote` plugin first if you add it. Some labels are in Chinese. |
+| [`skills`](https://paseo.sh/plugins/gpambrozio/skills) ("Skills", 0.4.0) by gpambrozio | `npm:@gpambrozio/paseo-skills` | `0.4.0` (sha512 `zMgP2U/vrRsLkKhoQICkN52+YoDy2WkkYymEDmruduKxf4Dq99Ct8Pk3xqJyAzijq2oprMFYLbj/wT6XepBLeA==`) | Lists the skills each agent session can use, renders each `SKILL.md`, and can invoke one. Reads the skill directories under `~/.claude`, `~/.codex` (or `$CODEX_HOME`) and `~/.agents`, and the project-level ones for the agent's working directory; writes nothing; no network or subprocess. Shows this kit's 29 skills in the Paseo UI. Needs Paseo 0.9 or later. |
+| [`mermaid`](https://paseo.sh/plugins/dutchakdev/mermaid) (0.5.0) by dutchakdev | `npm:paseo-plugin-mermaid` | `0.5.0` (sha512 `vNVNE1b0z7HJ1093jT1Cz/f3QYXFKg6yTfdqTHeFqaa9Ks437b0nrmQRdY/tWC9XDdXvgjWCCS1v9CsYYsCOhg==`) | Draws `mermaid` code blocks in chat as diagrams (flowcharts and sequence diagrams itself, other types through Paseo's Markdown on 0.13 or later), and opens `.mmd` files as diagrams. Runs only in the app: no server code, network or subprocess. Needs Paseo 0.11 or later. If you install Better Paseo, turn off its "Plugin markdown for replies" setting. |
+| [`beautiful-chat`](https://paseo.sh/plugins/aborakati/beautiful-chat) (0.1.0) by ABorakati | `git:ABorakati/beautiful-chat` | `42b61d8301b5400a67821bbbfcf99fa8b681dc37` | Redraws chat timeline items (tool calls, reasoning, checklists, prompts, errors, replies) as typed, syntax-highlighted cards that follow the Paseo theme, with its own settings page and chat find. The code does not gate on provider, so it applies to every agent; only the OMP-specific parts (job and IRC envelopes) are provider specific. Its manifest runs `npm ci --include=dev` during install, so the daemon needs `npm` on its PATH and `registry.npmjs.org`. Its server spawns `xdg-open` for "reveal path", which does nothing useful in a headless sandbox. **Conflicts with `mermaid` by default, see below.** |
+| [`emoji`](https://paseo.sh/plugins/yoseptf/emoji) (0.1.0) by YoseptF | `git:YoseptF/paseo-emoji` | `425e37563234d05a3ceaf15040db221625537db9` | Adds Slack-style `:emoji:` autocomplete to the composer using a bundled dictionary. Client-only; no server entry, runtime dependencies, network requests, or build commands. Uses the composer's DOM on desktop/web and intercepts Enter/Tab to accept a suggestion; native mobile is a no-op. Needs Paseo 0.8.0 or later. |
+| [`agent-office`](https://paseo.sh/plugins/gyuha/agent-office) (0.2.0) by gyuha | `git:gyuha/agent-office` | `47b99a0d8a619a97af2443dede661e3b9b45b1bc` | Shows agents as characters in an office. Observes agent/workspace metadata and lifecycle events; keeps state in memory and uses embedded image assets. Does not start agents, approve permissions, write files, spawn commands, or call external services. Desktop/web animation; basic text fallback on mobile. Needs Paseo 0.15.2 or later on both daemon and client. Failed polling can leave stale status; use Paseo's agent state for authoritative decisions. Does not require Agent Team. |
+
+**Compatibility and verification:** the full list now requires Paseo **0.15.2 or
+later** on both daemon and client for Agent Office. This kit does not upgrade
+either runtime. Emoji and Agent Office were source-reviewed at these exact pins;
+their installation and UI have not yet been live-verified. The earlier four-plugin
+installer run on Paseo 0.12.0 does not establish compatibility for these additions.
 
 **Mermaid and Beautiful Chat: switch one setting off, once per browser.** Beautiful Chat's
 **Assistant markdown** setting is on by default and takes assistant replies before Mermaid
@@ -87,6 +97,39 @@ To add or change one, edit the `install_plugin` lines at the bottom of
 `scripts/verify`. The reasoning is in
 [`docs/decisions/0003`](docs/decisions/0003-install-paseo-plugins-at-startup.md).
 
+## Diagram Design
+
+[Diagram Design by Cathryn Lavery](https://github.com/cathrynlavery/diagram-design)
+is selectively vendored at `f2496acbde9f45ccb55c24d4f75210c8a1355df8`
+(2.6.153), under MIT. It generates editorial HTML/SVG diagrams and imports draw.io,
+Mermaid, Excalidraw and PlantUML sources. The local adaptations use system fonts,
+manual project-local brand tokens, and no global profiles or remote onboarding.
+Logos, galleries, example files and font binaries are not shipped.
+
+Animation remains available using the reviewed template controller. The human can
+open the generated HTML manually. SVG export is offline and user-requested through
+`scripts/export_diagram.py`; the upstream transformer is internal, not a sanitizer.
+The guarded Python export workflow targets Linux and Python 3.12 or later;
+Windows/macOS automated export is unsupported. PNG export is **off by default** and requires explicit approval for the specific
+input/output in the current session. Only the complete static animation frame is
+supported, not intermediate-frame or full-page capture.
+
+The PNG guard requires Linux Bubblewrap and a separately provisioned runtime outside
+the project containing `bin/python` (with Playwright) and `chromium/chrome`.
+It mounts only the snapshot/runtime/temporary output plus read-only system runtime
+libraries, isolates network and process namespaces, clears the environment, and
+limits time/output/pixel area. It never installs packages or falls back to an
+unrestricted renderer. Browser export remains **BLOCKED** here: Chromium/Playwright
+are not provisioned, so no successful live PNG capture is claimed. A hard release
+gate additionally refuses browser execution until live capture and aggregate
+resource/isolation tests pass; approval/provisioning alone do not enable it.
+
+Maintainers edit `vendor/diagram-design-local/` and regenerate with
+`python3 personal/scripts/vendor-diagram-design`; do not edit generated skill files.
+`vendor/diagram-design.json` records provenance and hashes. See
+[vendoring details](docs/vendored-skills.md#diagram-design) and
+[decision 0004](docs/decisions/0004-vendor-offline-diagram-design.md).
+
 ## Matt Pocock's skills
 
 These are **[Matt Pocock](https://github.com/mattpocock)'s work**, not mine. Thank you
@@ -145,10 +188,12 @@ number of `code-review` references in any file differs from what it expects.
 - **Dex Horthy, HumanLayer**: the `pr` skill's menu of visuals is adapted from
   HumanLayer's `show-me` skill, as that skill's own `CREDITS.md` says. MIT, Copyright (c)
   2026 HumanLayer.
+- **Cathryn Lavery**: Diagram Design, MIT, Copyright (c) 2025 Cathryn Lavery.
+  The separate lock and local adaptations are described above.
 - **Mine**: `paseo-first-mate` and the scripts in this directory, written with AI
   assistance (OpenCode, claude-sonnet-5.5). MIT, this repository.
 
-Both third-party licences are shipped into the sandbox at `~/.agents/licenses/`, and
+All three third-party licences are shipped into the sandbox at `~/.agents/licenses/`, and
 [`NOTICE`](NOTICE) has the full provenance. [`docs/vendored-skills.md`](docs/vendored-skills.md)
 is for anyone maintaining the copies: the rule against hand-editing, the table of local
 differences, and how to update. [`AGENTS.md`](AGENTS.md) is the short version for agents.