feat(launcher-standard): reference impls for soft-attach + gui-dialog-chain

[hyperpolymath]

Summary

The a2ml declared [soft-attach] and [error-visibility] contracts
but provided no reference implementations. Every downstream launcher
had to re-implement the "if-installed-then-invoke" pattern and the
GUI dialog ladder — guaranteed drift, and a common reason downstream
launchers either skip these features (silent failures stay silent) or
implement them inconsistently.

This adds two sourceable bash helpers in launcher/, mirroring the
contract semantics from the a2ml, plus prose with graceful-degradation
usage patterns.

launcher/gui-error.sh

hp_gui_error "title" "message":

Condition	Behaviour
Always	Write [title] message to stderr
stderr is TTY or NO_GUI_ERROR=1	stderr only, return 0
no \$DISPLAY and no \$WAYLAND_DISPLAY	return 1 (cannot show GUI)
Else	Try kdialog → zenity → notify-send → xmessage; first success wins

Mirrors [error-visibility].gui-dialog-chain exactly. Verified
locally: NO_GUI_ERROR=1 ./launcher/gui-error.sh "T" "M" → stderr
"[T] M", exit 0.

launcher/soft-attach.sh

Three primitives mirroring the three shapes in [soft-attach].tools:

```bash
hp_soft_attach_present "command" # 0 if on PATH
hp_soft_attach_run "command line" # run if first token present, silent no-op + 0 if missing
hp_soft_attach_event "tool" "event-name" [args] # tool emit event-name args if present, silent no-op if missing
```

All non-fatal — missing tools never break the launcher (per the
§soft-attach spec: "called if present, silently skipped if absent").
CLI mode for ad-hoc use:

```
./soft-attach.sh run "hypatia diagnose --app foo"
./soft-attach.sh event feedback-o-tron launcher:start_failed
./soft-attach.sh present hypatia
```

a2ml contract additions

[error-visibility]:

• reference-impl = "launcher/gui-error.sh" (pointer)
• suppress-env-var = "NO_GUI_ERROR" (formalises the override name)

[soft-attach]:

• reference-impl = "launcher/soft-attach.sh" (pointer)
• Each tools entry now carries explicit style
  ("event" | "command") and trigger (e.g. "on-start-failed") so
  launchers know WHEN to invoke each tool, not just HOW.
  Previously only feedback-o-tron had an explicit failure trigger.

Prose additions (launcher-standard.adoc)

• §Error Handling: rewritten with hp_gui_error integration, graceful
  degradation pattern, and a NOTE on stderr-always behaviour
• §Soft-Attach (new subsection): documents the three primitives, the
  graceful-degradation source pattern, and an example on_start_failed
  hook wiring all three default tools

Test plan

• a2ml parses (python tomllib); new fields round-trip cleanly
• Both helpers pass bash -n
• hp_gui_error writes stderr + respects NO_GUI_ERROR
• hp_soft_attach_present returns 0/1 correctly
• hp_soft_attach_run runs installed, silently skips missing
• hp_soft_attach_event silently skips missing tool
• Manual dialog test (deferred — requires KDE/GNOME desktop;
  logic matches well-documented invocation conventions per each
  dialog's man page)
• Lock-step gate (ci: add launcher-standard prose↔a2ml lock-step gate #172) goes green on first push (both files in diff)

Coordination

Independent of #170, #171, #172, #173, #175, #176, #177 — no file
overlap. Builds on the resolution ladder shipped in #171
(hp_resolve_desktop_tools is referenced in the prose examples) so
the new helpers are findable wherever .desktop-tools/ resolves.
Both work standalone or via the ladder.

🤖 Generated with Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 118 issues detected

Severity	Count
🔴 Critical	64
🟠 High	43
🟡 Medium	11

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Action hyperpolymath/standards/.github/workflows/deno-ci-reusable.yml@main needs attention",
    "type": "unpinned_action",
    "file": "deno-ci-reusable.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Action hyperpolymath/standards/.github/workflows/governance-reusable.yml@main needs attention",
    "type": "unpinned_action",
    "file": "governance-reusable.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Action hyperpolymath/standards/.github/workflows/governance-reusable.yml@main needs attention",
    "type": "unpinned_action",
    "file": "governance.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Python file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/standards/standards/a2ml-templates/state-scm-to-v2.py",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  },
  {
    "reason": "TypeScript file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/standards/standards/a2ml/bindings/deno/mod.ts",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  },
  {
    "reason": "TypeScript file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/standards/standards/lol/test/vitest.config.ts",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  },
  {
    "reason": "TypeScript file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/standards/standards/k9-svc/bindings/deno/mod.ts",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  },
  {
    "reason": "Agda postulate assumes without proof -- potential soundness hole (4 occurrences, CWE-704)",
    "type": "agda_postulate",
    "file": "/home/runner/work/standards/standards/lol/proofs/theories/information_theory.agda",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "critical"
  },
  {
    "reason": "believe_me undermines formal verification (1 occurrences, CWE-704)",
    "type": "believe_me",
    "file": "/home/runner/work/standards/standards/lol/src/abi/Locale.idr",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "critical"
  },
  {
    "reason": "Wildcard CORS -- restrict to specific origins or use env var (1 occurrences, CWE-942)",
    "type": "js_wildcard_cors",
    "file": "/home/runner/work/standards/standards/consent-aware-http/examples/reference-implementations/deno/aibdp_middleware.js",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "high"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence