v0.2.12 — Pages take2 English hall GIF

GitHub Pages fixture now uses the same take2 English hall GIF as the README (docs/demo-hall-en-2026-08-31.gif). site/index.html hotlinks the raw 8/31 file. First 20 lines of README copy, four stills, SECURITY stay put.

Tag v0.2.11 stays on 40ccf27 (README take2 GIF).

Has

• Pages hero GIF take2 (62.6s, 960×600, 10fps, 626 frames, silent, 9.5MB)
• English hall GIF take2 on the README first screen
• Restyled Pages fixture: enamel night, Syne, sticky nav, copyable pnpm i && pnpm test && pnpm dev
• Fixture hall: five seats, @pm / @rd chips, Voice edit → Ship it:
• Banner: Interactive preview — no model calls
• GitHub Actions Pages workflow from site/
• Wood hall rail; stacked avatars stay in the ring
• Line-start @handle; first body @handle fallback
• Hermes-shaped Chrome last_used snapshot (never the live profile)
• Host Claude / Cursor / Codex MCP live in chat — no import step
• Local tools: run, read, write, list, skill, spawn, browser, image_gen
• Optional Position sandbox: / GUILD_SANDBOX tool gate (unset = full_access)

Does not have

• A live daemon on Pages
• OS jail / approval around run and write
• Codex app-server harness
• HTTP MCP
• Google Fonts self-host (Pages still loads Syne / IBM Plex from fonts.googleapis.com)
• Re-shot README stills (8/29 stills remain; GIF chrome is newer)
• ≤5MB GIF compress (this cut ships the accepted 9.5MB take)

Security
run and write execute as you unless you set GUILD_SANDBOX or a Position sandbox: line. Default cwd for run is $HOME. Host MCP spawns as you with no import / consent prompt. Browser snapshots Chrome logins by default unless GUILD_BROWSER_REAL_PROFILE=0. Read SECURITY.md before you point this at a machine you care about.

Quick start
pnpm i && pnpm test && pnpm dev