Integrate approved file cards, handoff, usage history, mascots and macOS fixes

.gitattributes

@@ -2,3 +2,8 @@
 # scripts/build-native-helpers.mjs generates (LF). Checked out with LF everywhere, a Windows checkout
 # (core.autocrlf=true) matches and a helper built there embeds the same bytes as one built on macOS or Linux.
 native/canvastty-helper/catalog.json text eol=lf
+
+# Unified diffs require space-prefixed blank context lines, including at EOF.
+# Preserve the patch bytes across Windows checkouts without treating that
+# required patch syntax as trailing whitespace in application code.
+patches/*.patch text eol=lf whitespace=-blank-at-eol,-blank-at-eof

.github/workflows/ci.yml

@@ -14,6 +14,25 @@ env:
   CANVASTTY_REQUIRE_NATIVE_HELPERS: "1"
 
 jobs:
+  mascot-pipeline:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macos-latest]
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 10
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v7
+      - name: Install mascot pipeline dependencies in a virtual environment
+        run: |
+          python3 -m venv .mascot-venv
+          .mascot-venv/bin/python -m pip install -r assets/mascot-pipeline/requirements.txt
+      - name: Verify mascot intake, build, review, and delivery contracts
+        run: .mascot-venv/bin/python -B assets/mascot-pipeline/tests/smoke_pipeline.py
+      - name: Verify placement against bundled accepted artwork
+        run: .mascot-venv/bin/python -B assets/mascot-pipeline/tests/placement_regression.py
+
   verify:
     runs-on: ubuntu-latest
     steps:
@@ -49,6 +68,17 @@ jobs:
         run: npm run typecheck
       - name: Build production bundles
         run: npm run build
+      - name: Build Linux installers and verify bundled mascot resources
+        run: |
+          npm run package:linux
+          test -f release/linux-unpacked/resources/mascot-pipeline/SKILL.md
+          test -f release/linux-unpacked/resources/mascot-pipeline/scripts/prepare_input.py
+          test -f release/linux-unpacked/resources/mascot-pipeline/templates/plugin/player.js
+      - name: Install AppImage runtime dependency
+        run: sudo apt-get update && sudo apt-get install --no-install-recommends -y libfuse2t64
+      - name: Smoke-test packaged Linux AppImage
+        timeout-minutes: 2
+        run: xvfb-run -a npm run smoke:appimage
       - name: Verify hidden terminal rendering and state restoration
         timeout-minutes: 2
         run: xvfb-run -a npm run smoke:terminal-hidden
@@ -116,6 +146,13 @@ jobs:
         env:
           SPARKLE_PUBLIC_ED_KEY: ${{ vars.SPARKLE_PUBLIC_ED_KEY || 'iojj3XQJ8ZX9UtstPLpdcspnCb8dlBIb83SIAbQPb1w=' }}
         run: npm run package:mac
+      - name: Verify bundled macOS mascot resources
+        run: |
+          app="$(find release -type d -name 'CanvasTTY.app' -print -quit)"
+          test -n "$app"
+          test -f "$app/Contents/Resources/mascot-pipeline/SKILL.md"
+          test -f "$app/Contents/Resources/mascot-pipeline/scripts/prepare_input.py"
+          test -f "$app/Contents/Resources/mascot-pipeline/templates/plugin/player.js"
       - name: Smoke-test packaged macOS CLI resolution
         run: npm run smoke:cli-resolution:mac
       - name: Verify hidden terminal rendering and state restoration on macOS

.github/workflows/pty-resources.yml

@@ -0,0 +1,106 @@
+name: macOS PTY resources
+
+on:
+  push:
+    paths:
+      - ".github/workflows/pty-resources.yml"
+      - "patches/**"
+      - "package.json"
+      - "package-lock.json"
+      - "electron-builder.yml"
+      - "scripts/smoke-pty-resources.mjs"
+      - "scripts/audit-pty-test-bundle.mjs"
+      - "scripts/fixtures/public-speech-source-path-hashes.json"
+      - "tests/node-pty*"
+  pull_request:
+    paths:
+      - ".github/workflows/pty-resources.yml"
+      - "patches/**"
+      - "package.json"
+      - "package-lock.json"
+      - "electron-builder.yml"
+      - "scripts/smoke-pty-resources.mjs"
+      - "scripts/audit-pty-test-bundle.mjs"
+      - "scripts/fixtures/public-speech-source-path-hashes.json"
+      - "tests/node-pty*"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  native-and-packaged:
+    runs-on: macos-latest
+    timeout-minutes: 45
+    env:
+      CANVASTTY_REQUIRE_NATIVE_HELPERS: "1"
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v7
+      - name: Set up Node.js
+        uses: actions/setup-node@v7
+        with:
+          node-version: 22
+          cache: npm
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version-file: native/canvastty-helper/go.mod
+          cache: false
+      - name: Install locked dependencies without applying the patch yet
+        run: npm ci --ignore-scripts
+      - name: Build the unpatched control for Electron from source
+        run: |
+          npx --no-install install-electron
+          npx --no-install electron-rebuild -f -w node-pty --build-from-source
+      - name: Reproduce the original leak and stop at the first growth
+        run: node scripts/smoke-pty-resources.mjs --cycles 3 --expect-leak --report .pty-results/unpatched.json
+      - name: Apply the tracked patch and rebuild for Electron
+        run: npm run postinstall
+      - name: Check cleanup under injected native failures
+        run: node --test tests/node-pty-patch.test.mjs tests/node-pty-bundle-audit.test.mjs
+      - name: Verify 400 cycles in one persistent Electron parent
+        run: node scripts/smoke-pty-resources.mjs --cycles 400 --report .pty-results/source.json
+      - name: Verify every combination of closed standard descriptors
+        run: |
+          for mask in 1 2 3 4 5 6 7; do
+            node scripts/smoke-pty-resources.mjs --cycles 8 --stdio-mask "$mask" --report ".pty-results/source-stdio-$mask.json"
+          done
+      - name: Build a separate macOS application without publishing it
+        env:
+          # Hosted read-only PR runner; mac.identity is explicitly ad-hoc ("-").
+          # No signing certificate/keychain secrets are provided to this job.
+          CSC_FOR_PULL_REQUEST: "true"
+          SPARKLE_PUBLIC_ED_KEY: "iojj3XQJ8ZX9UtstPLpdcspnCb8dlBIb83SIAbQPb1w="
+        run: npm run package:mac
+      - name: Audit the separate test bundle
+        run: node scripts/audit-pty-test-bundle.mjs release/mac-arm64/CanvasTTY.app
+      - name: Verify the new bundle signature
+        run: codesign --verify --deep --strict release/mac-arm64/CanvasTTY.app
+      - name: Verify 400 cycles using the packaged native addon
+        run: node scripts/smoke-pty-resources.mjs --app release/mac-arm64/CanvasTTY.app --cycles 400 --report .pty-results/packaged.json
+      - name: Verify closed standard descriptors in the packaged addon
+        run: |
+          for mask in 1 2 3 4 5 6 7; do
+            node scripts/smoke-pty-resources.mjs --app release/mac-arm64/CanvasTTY.app --cycles 8 --stdio-mask "$mask" --report ".pty-results/packaged-stdio-$mask.json"
+          done
+      - name: Retain synthetic test evidence even on failure
+        if: always()
+        uses: actions/upload-artifact@v7
+        with:
+          name: macos-pty-resources
+          if-no-files-found: warn
+          retention-days: 14
+          include-hidden-files: true
+          path: |
+            .pty-results/*.json
+      - name: Retain the separate build only after all safety and runtime gates
+        if: success()
+        uses: actions/upload-artifact@v7
+        with:
+          name: macos-pty-test-build
+          if-no-files-found: error
+          retention-days: 14
+          path: |
+            release/*.zip
+            release/*.dmg

.gitignore

@@ -26,7 +26,11 @@ yarn-debug.log*
 yarn-error.log*
 .cache/
 .electron/
+__pycache__/
+*.pyc
+/.mascot-venv/
 settings.json
+.pty-results/
 
 # Local agent and planning context — never publish
 .agents/

CHANGELOG.md

@@ -2,6 +2,11 @@
 
 [English](CHANGELOG.md) · [Русский](CHANGELOG.ru.md) · [简体中文](CHANGELOG.zh-CN.md)
 
+## Unreleased
+
+- Added a rich file viewer to the **Files** card: Markdown files (`.md`, `.markdown`, `.mdown`, `.mkd`) render as formatted GitHub-Flavored Markdown with headings, lists, task lists, tables, blockquotes, horizontal rules, inline code, and fenced code blocks with syntax highlighting, recognized code files are syntax-highlighted by the language detected from their extension while unknown languages stay plain monospaced text, all rendered content is sanitized so raw HTML, scripts, event-handler attributes, and dangerous link schemes never render, `http(s)` links open in the app's built-in browser with other schemes inert, only embedded `data:` images show while remote or relative sources fall back to alt text or a placeholder without a network request, and text and code files above the rich-rendering size threshold fall back to plain text with a notice.
+- Added a read-only **Files** canvas card and reader: open it from the empty-canvas context menu or the `Cmd/Ctrl+K` palette, root it at a live terminal session working directory or a folder picked in a native dialog, browse a directory tree that loads on demand, and read text/code as selectable monospace (bounded at 2 MB with a truncation marker and total size) or supported images (bounded at 25 MB) with explicit binary, unsupported, and too-large states. Quick open searches file names inside the active root, each card's root, bounds, open file, and expanded folders persist and restore with an unavailable state when the root is gone, and a new main-process `FileAccessService` enforces `realpath` containment so every listing, read, and search uses relative paths strictly inside registered roots with no write, rename, or delete capability.
+
 ## 1.7.1
 
 - Added built-in stable-release updates with explicit download and installation, active-session shutdown confirmation, and signed Sparkle updates on macOS. Install this first updater-enabled release manually; later compatible releases can be installed from the app.